Application.Bundler.Somoto.I_9c129a294d

by malwarelabrobot on May 1st, 2015 in Malware Descriptions.

Application.Bundler.Somoto.I (AdAware), Trojan.NSIS.StartPage.FD, Trojan.Win32.Swrort.3.FD, SearchProtectToolbar_pcap.YR, mzpefinder_pcap_file.YR, SearchProtectToolbar.YR (Lavasoft MAS)
Behaviour: Trojan

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: 9c129a294d7cc0fe9ed53d890dbde85f
SHA1: 074fbdc01d90a0ad59a705029c7317b446efd6ea
SHA256: ae41b4e5f1133a30b8d23ed4e8586dbc5e8312ebe50ae1fa653057a4206088f6
SSDeep: 3072:S22ihA0m3BJf0v rGO2G0y49i0jb5lwVb9Qt8Cu2ToCSoEu4rP:NA0m3T0v3OqyOPGb9QLu2UTL
Size: 166480 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2010-12-17 11:14:12
Analyzed on: Windows7Ada SP1 64-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Application creates the following process(es):

GoogleUpdate.exe:2664
GoogleUpdate.exe:1664
GoogleUpdate.exe:2556
vlc-2.0.6-win32.exe:1052
smt_istartsurf.exe:3464
ProtectWindowsManager.exe:3260
ProtectWindowsManager.exe:3220
gentray.exe:3508
gentray.exe:3700
gentray.exe:1664
gentray.exe:3896
fac9668a-7d04-4c07-a2a7-1c8ad5184195-4.exe:3984
ProtectService.exe:4084
ProtectService.exe:3792
framework_setup.gen:3764
wpm_v20.0.0.2227.exe:3196
appshat.exe:2824
biclient.exe:2144
firsttime_setup.exe:2072
ChromeSync.exe:3444
QQBrowser.exe:2268
QQBrowser.exe:3576
powershell.exe:3120
powershell.exe:3240
powershell.exe:3300
setup.exe:2120
HPNotify.exe:3924
genieo_setup.gen:3972
XTab_Setup2253.exe:3332
genieo_setup.exe:3460
42.0.2311.135_chrome_installer.exe:2644
appshat_generic.exe:3540
webplayer_installer.exe:3920
vlc-cache-gen.exe:4024
%original file name%.exe:2132
vlc.exe:2020
InstallGenieo.exe:3140
InstallGenieo.exe:2744
cscript.exe:3720
Hiyvyhwdps.exe:3784
D411.tmp:2636
trayapp_setup.gen:3804
genupdater.exe:2268

The Application injects its code into the following process(es):

WebPlayer.exe:3980
javaw.exe:556

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process GoogleUpdate.exe:2556 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\Google\Update\Install\{EAB7BD43-95BB-40FB-87B3-376482E87EF2}\42.0.2311.135_chrome_installer.exe (336195 bytes)
%Program Files% (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\42.0.2311.135\42.0.2311.135_chrome_installer.exe (317324 bytes)

The process vlc-2.0.6-win32.exe:1052 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll (13368 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_arrays.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.log (333852 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_02.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\fmc.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo (12088 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\hotkeys.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white.png (70 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn671D.tmp\LangDLL.dll (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_inhibit.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\common.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\view.html (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\speaker-32.png (942 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_pool.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll (38495 bytes)
%Program Files% (x86)\VideoLAN\VLC\AUTHORS.txt (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\mpora.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_events.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list_player.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\01_googleimage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll (62035 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_fifo.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\play_pause.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\httprequests.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\vlc.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo (28288 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll (8560 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\minus.png (109 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\loop.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_main.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_threads.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\vlc.mo (30968 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Back-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll (25112 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube.luac (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_services_discovery.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll (51840 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo (461 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_streams.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_10.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.dll.a (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metacafe.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll (22552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_07.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\main (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_discoverer.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\reset.png (134 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_probe.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll (32784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xml.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll (12088 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\telnet.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker_mute.png (328 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\freebox.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mouse.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_common.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\play.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_opengl.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\functions.js (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\france2.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_browse.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\empty.png (120 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_demux.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_structures.h (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\03_lastfm.luac (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery.jstree.js (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\luac.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\VideoLAN Website.url (50 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll (16944 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo (33263 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.dll.a (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\README.txt (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete.png (124 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\googlevideo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_display.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Folder-48.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\volume.png (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn671D.tmp\UAC.dll (1917 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc16x16.png (606 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_down.png (108 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\cue.luac (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\plus.png (114 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_gcrypt.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\joox.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll (40228 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libopus_plugin.dll (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gu\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es_out.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_04.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx670C.tmp (2194421 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input_item.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\create_stream.html (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_01.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll (364982 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Video-48.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_osd.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist_small.png (84 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\input (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\batch_window.html (857 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_media_library.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\help.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\vlm.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\error_window.html (482 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_100_eeeeee_1x100.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_08.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\main.css (3 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_version.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_spu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\test.html (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_xml.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe.manifest (825 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_messages.h (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn671D.tmp\InstallOptions.dll (804 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\ui.js (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo (702 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_subpicture.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png (197 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\icecast.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll (262251 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_plugin.h (16 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\style.css (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo (15536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_about.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_05.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo (19152 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uz\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll (42762 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll (37025 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\custom.lua (487 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\libvlc.pc (283 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.exe (3686 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm_export.html (296 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_avcodec.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_library.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mr\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fs.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo (17848 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slow.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\fetcher\tvrage.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png (126 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_md5.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll (13584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_charset.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\zapiks.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_strings.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_url.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\index.html (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sql.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\dkjson.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config_cat.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_video_splitter.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pluzz.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_objects.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_left.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_atomic.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll (3312 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll (30968 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\dailymotion.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_fdf5ce_1x400.png (115 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo (8560 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\deprecated.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll (66168 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metachannels.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\host.luac (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.catalog (167 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\footer (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\jamendo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\mobile.css (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_text_style.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\appletrailers.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_tls.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\prev.png (104 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\refresh.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xlib.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_meta.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo (484 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_variables.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\browse (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_equalizer.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\vlc-plugin.pc (816 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_intf.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc-48.png (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\buttons.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\unselected.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\cli.luac (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.dtd (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\favicon.ico (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_window.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll (6360 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dumpmeta.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_bits.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\THANKS.txt (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_00.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_playlist.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker.png (174 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_rand.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\controlers.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\offset_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Other-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\sout (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist.png (85 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\katsomo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\an\LC_MESSAGES\vlc.mo (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\README.TXT (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\sandbox.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\jamendo.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\eject.png (93 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\README.txt (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\NEWS.txt (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\play_pause.png (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_06.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_events.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll (17848 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\common.js (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\soundcloud.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ia\LC_MESSAGES\vlc.mo (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc-cache-gen.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.lib (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll (39329 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_right.png (91 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\stop.png (80 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\winamp2.xml (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dummy.luac (819 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_mixer.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\break.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\vlm (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\simplexml.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn671D.tmp\modern-wizard.bmp (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_configuration.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_dialog.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sout.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-1.5.1.min.js (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_03.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\reader\filename.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-ui-1.8.13.custom.min.js (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\extreme.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_up.png (112 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm.xml (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_modules.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_httpd.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ff\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pinkbike.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png (201 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlccore.dll (70870 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_view.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll (35784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fourcc.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sout.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\repeat.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sort.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\canalplus.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block_helper.h (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlc.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\.hosts (122 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png (103 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\info.png (142 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default.cfg (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo (21216 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_codec.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ja\LC_MESSAGES\vlc.mo (23296 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn671D.tmp\ioSpecial.ini (11095 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_image.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_http.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\default.vlt (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\koreus.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.lib (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_stream.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_art_finder.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll (26688 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_network.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mtime.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white_cross_small.png (96 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll (34365 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete_small.png (94 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_cpu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_keys.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\playlist (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\my\LC_MESSAGES\vlc.mo (444 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\lelombrik.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\Documentation.url (55 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll (34186 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo (6584 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn671D.tmp (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\browse_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSans.ttf (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\next.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_09.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc.h (15 bytes)
C:\Users\Public\Desktop\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\http.luac (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_epg.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\fullscreen.png (121 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png (95 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ckb\LC_MESSAGES\vlc.mo (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kmr\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll (13584 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gl\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\snapshot.png (206 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_acl.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_access.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\COPYING.txt (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll (15536 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sd.png (116 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_point.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\New_Skins.url (64 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\pause.png (82 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\vimeo.luac (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_player.h (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\.hosts (289 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_filter.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\shuffle.png (110 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\metachannels.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Audio-48.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_bar.png (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube_homepage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll (2392 bytes)

The process smt_istartsurf.exe:3464 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\ClearnC.exe (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\quick_searchff#5.4.10.xpi (6360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\XTab_Setup2253.exe (76078 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\eg2.zip (305928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\conf (79 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\bg.png (5064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\sweetsearch!1.0.0.1031.xpi (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\Thumbs.db (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\RegWrite.exe (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\474.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\QQBrowser.exe (5199 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\Thumbs.db (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\QQBrowserFrame.dll (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\uninstallDlg2.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\ChromeSync.exe (10136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\eg1.zip (186027 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\474.db (304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\scrollbar.bmp (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\code6.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\DataBase (26688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\wpm_v20.0.0.2227.exe (12024 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\UninstallManager.exe (60186 bytes)

The process ProtectWindowsManager.exe:3260 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\up[1].htm (1 bytes)
C:\ProgramData\WindowsMangerProtect\update\conf (1 bytes)

The process gentray.exe:3508 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\log\gentray.log (7724 bytes)

The process gentray.exe:3896 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\log\gentray.log (14640 bytes)

The process fac9668a-7d04-4c07-a2a7-1c8ad5184195-4.exe:3984 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\abaa9e80090330646ca55139049431e9.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\339.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\221.js (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\234.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\212855753a72be76bb1350697c3ed213.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\7671332eccfbb5bf221173b55961680e.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\255.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon24.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\dea5e6ba6d2bff78491f80fc17fea175.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\2355cb94f4d53404670751195ab93ea0.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\e76bc60993b44ceec47fb8d2073839c3.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\82ae351b0adb35f5f44324b6c052397a.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\1a51013bcda038651cc78694a96c0210.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\7ba4c7d2c04982a03d48b02f19d9324f.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\27266349bbace404a108db18330919e3.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\532c1f8715567163fea2ed1ddd4d4f86.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\skin.css (909 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\0ae79d90e9ae675c9a992ac5b7b5b1ba.js (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\281.js (461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\extension.js (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\660ac6c05dcbaf573904832d41abee78.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\193.js (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\1fbf7ba05ce811d4718546ebfa0201e5.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\f4eab40e017dd4d149822305be22495e.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\6fe09b92a48c3ffb8e69d688a25752f9.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\0ec5d715ce79bb02168b70564be85089.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome.manifest (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\379.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\345.js (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\77b1fe89c3d9c1aa1014f87e943581e0.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\be4bc865c931cb575a6bb7d33ad13707.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\1114e625a96f6eccb05324a1b247b6a4.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\f789ca0a7472132d15ab54c79ce373fe.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\168737e09e476224e775af7cd11ea98b.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\94a506c6aeaf56f0e5aca8a0bb67fbc3.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\390.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\1362dd7e14e4664551036109448e0ecd.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\aa3140783c50b24af4528077049cbeec.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\4e1225a8a0f1d64eb42d56e2de4324a0.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins.json (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\defaults\preferences\prefs.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\49fca5829ce8f711d5c9acb0e78f9d7e.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\6db05ba405991b49cf2e333ae22653c5.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7b20323ff2f80f95e96e6ab0a2b57d23.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\b1d93195684664a25e9a313ac5c6be63.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\69a6d57ce809d73fabecbd52752aa67d.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\50e683a86bf7ff61f11559ab6efbedd1.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\7e161230f862c8cf85addcf95a70d50e.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\7060ed13a913dcaa111828253a824206.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\5188a332e3d067421484aaefd7aeba58.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\252.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\385.js (805 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\73ea98ffb7f76f458adec97f2c9261e1.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\f2f2fbc1df1860ddc50aa6950acf6397.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\891343c7b9cccbb5757526a1326a8d4f.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\background.js (640 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\767d7496d8d27e0fbd3d5109b3ac1381.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon128.png (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\dfdc444c6bc554b4dd215ee4ea61dc49.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon48.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\180723a8fd869936a149440b0af75201.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9afbe23cba2858994cb2cd505628c866.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)

The process framework_setup.gen:3764 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\targetDefaultPortals.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_tmp_template.txt (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\gad_categories.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\xstream-1.3.1.jar (15168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_datetime.stop (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx87A6.tmp (300445 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\debugInfoCollector.l4j.ini (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops2_stemmed.stop (416 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\Info_1_7.plist (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\de_top_1000_draft.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\da_topwords.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\tr_stops_stemmed.stop (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\servlet-api-2.5.jar (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops_stemmed.stop (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\heb_white_list.txt (8560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\smtp.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\genieo_console.l4j.ini (118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_common500cleaned.stop (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\x64\NativeUtils.dll (21216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-core-1.0.1.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\da_stops_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\sac.jar (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_MergedStemmedEnglish.stop (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\NativeUtils.dll (16424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\en_topwords.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\jetty-webapp-7.3.0.v20110203.jar (32128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac_installing.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\rome-1.0.jar (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\it_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\framework_uninstall.exe (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\es_top_1000_draft.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\nl_topwords.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_numbers.stop (54 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\xpp3_min-1.1.4c.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\sqlite-jdbc-3.7.2-windows.jar (20624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\it_top_1000_draft.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\no_stops_stemmed1.stop (559 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\no_stops_stemmed_more.stop (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\de_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\engine_tray_icon_dev.png (632 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ro_morestops.stop (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx87A7.tmp\NSISdl.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\ini4j-0.5.1.jar (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\de_merged_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\modules-0.3.2.jar (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\dd-plist.jar (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\en_nationalities.txt (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\bannedList.dat (388 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\commons-codec-1.6.jar (8560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_outb.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_mapping_outb.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-runtime-1.0.1.jar (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\slf4j-api-1.6.0.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\Info.plist (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_misc.stop (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\cssparser-0.9.5.jar (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac_disabled.png (421 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_anabel.stop (319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_date_time.stop (499 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\defaultPortals.xml (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\log4j-1.2.15.jar (13368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\commons-logging-1.1.1.jar (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\ro_topwords.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\defaultFeeds.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\genieoLogo24.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\readme.txt (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\httpcore-4.2.jar (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\slf4j-log4j12-1.6.0.jar (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\es_merged_stemmed.stop (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\es_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_numbers_and_currencies.stop (78 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\hu_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\log4j_release_mac.properties (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\restfb-1.6.12.jar (10136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ru_stops_stemmed2.stop (892 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\httpmime-4.2.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops_stemmed_new.stop (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\sitelang.txt (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac_new_items.png (343 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-collectionschema-1.0.1.jar (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\product_domains.txt (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ru_merged_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\log4j_release.properties (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\tr_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\it_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\fr_lang.properties (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\it_merged_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\hu_stops_stemmed.stop (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_ToBeAddedToStop.stop (117 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\pt_stops_stemmed_v0.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\engine.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\engine.jar (65930 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\zombie_icon.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fr_merged_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_ob_withadult.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\log4j_dev.properties (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\sv_topwords.txt (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_date_time.stop (342 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\de_merged_stemmed2.stop (347 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fr_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_tmp_template_all.txt (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\fr_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\apache-mime4j-0.6.jar (12088 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\pt_stops_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\fi_topwords.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\JGoogleAnalyticsTracker-1.2.1-SNAPSHOT.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\lucene-snowball-3.0.0.jar (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\isgenieoalive.dat (2475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\gad_categories_multilingual.txt (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac.png (333 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\en_top_1000_draft.txt (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\signpost-core-1.2.1.1.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\jdom.jar (5520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\explicit_content.dat (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\engine_tray_icon.png (723 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\en_lang.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\no_stops_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\debugInfoCollector.exe (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\pt_stops_more.stop (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\explicitList.dat (491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\pt_topwords.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\ru_lang.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\sv_stops_stemmed.stop (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\default.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\de_topwords.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\bannedListByURL.dat (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_25nouns_wiki.stop (169 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops_stemmed3.stop (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fr_stops_stemmed2.stop (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\origin\ru_lang.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\genieutils.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\preset_feeds.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\cluto_wrapper.properties (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\json.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\httpclient-4.2.jar (14184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\no_topwords.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_mapping.txt (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fi_stops_stemmed.stop (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\amazon_ad_api.jar (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_morestops.stop (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-api-1.0.1.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_general.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\fr_top_1000_draft.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\de_top_100_draft.txt (582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ro_stops_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_explicit.stop (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_ob.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\jericho-html-3.1.jar (6360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_articlebase.txt (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\genieo.l4j.ini (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\it_stops_stemmed2.stop (473 bytes)

The process wpm_v20.0.0.2227.exe:3196 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (2444 bytes)

The process appshat.exe:2824 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx2A6A.tmp\dkhbofocf.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx2A6A.tmp\mhuec.dll (2136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx2A6A.tmp\lwfjntrs.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx2A6A.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx2A6A.tmp\Tgytgvbizx.tmp (425229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx2A6A.tmp\Hiyvyhwdps.exe (3345313 bytes)

The process biclient.exe:2144 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.4 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\eula[1].htm (1061 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.2 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.3 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.0 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.1 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.6 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.7 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\3dcb990301cdcc4caf3f2b66db05a4ce[1].htm (36085 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.5 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.1 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.0 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.3 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.2 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.5 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.4 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.7 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.6 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.1 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe (70607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe (49444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula-swiftrecord[1].htm (4339 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.7 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.6 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.5 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.4 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.3 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.2 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.1 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.0 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\tokyoLightGrayStripesBG[1].jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe (1549197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\tokyo_default_logo[1].png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.2 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.3 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.0 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe (21724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.6 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.7 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.4 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.5 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\D411.tmp (33816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\eula-istartsurf[1].htm (1053 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\tokyo_sprite_full[1].png (2808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula[1].htm (1056 bytes)

The process firsttime_setup.exe:2072 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nss7B57.tmp (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\firsttime_uninstall.exe (1568 bytes)

The process QQBrowser.exe:2268 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\ClearnC.exe (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\RegWrite.exe (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\XTab_Setup2253.exe (148 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\ChromeSync.exe (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\wpm_v20.0.0.2227.exe (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\WebDataJs (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\474.db (288 bytes)

The process QQBrowser.exe:3576 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\include\tools\misc.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\default_logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\properties.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\fr-CA\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\last_tab.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\fr-LU\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\en-US\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\misc.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\it\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\defaults\preferences\fvd.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\aes.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\icon.png (628 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\simple.css (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\quick_start.xul (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\pl\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\js.js (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\tr\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\loading.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\pack\xagainit.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\474.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\include\tools\popup_image_helper.js (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\fr-BE\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\lib\jquery.autocomplete.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\remoterequest.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\scrollbar.bmp (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\googlelogo.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\settings.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\QQBrowserFrame.dll (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\zh-TW\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code6.jpg (5 bytes)
C:\Users\Public\Desktop\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\module\search.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\quick_start.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\pt-BR\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\style.css (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\vi\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\google_trends.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\module\mostgrid.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\newtab.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\pack\ga.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\uninstallDlg2.xml (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\ru\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\module\hotSearch.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\en\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\logo.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\fr-CH\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\include\tools\about_blank_hook.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\ru-MO\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\es-419\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\defaults\preferences\preferences.js (379 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\it-CH\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\install.rdf (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\zh-CN\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\index.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\module\stat.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\fr\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\E37B.tmp (110 bytes)
C:\Users\Public\Desktop\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\E38B.tmp (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\include\speed_dial.js (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe (14022 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\Thumbs.db (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\addonmanager.js (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\lib\doT.min.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\restoreprefs.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\include\tools\urlrequestor.js (1 bytes)
%Program Files% (x86)\Mozilla Firefox\browser\searchplugins\istartsurf.xml (553 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\pack\common.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\Thumbs.db (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\lib\jquery-2.1.0.min.js (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\es\locale.properties (2 bytes)

The process powershell.exe:3120 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\A1AMT6LUKKAW8B4U89CZ.temp (196 bytes)

The process powershell.exe:3240 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6HC75G7UNN7HPLQ650JD.temp (196 bytes)

The process powershell.exe:3300 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RS55VZGMHIV98ZMF37YV.temp (196 bytes)

The process setup.exe:2120 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\lv.pak (604 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\libegl.dll (161 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ja.pak (720 bytes)
%Program Files% (x86)\Google\Chrome\Application\42.0.2311.135\Installer\chrmstp.exe (22090 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\chrome_elf.dll (268 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\pt-PT.pak (594 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ca.pak (603 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\th.pak (1208 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\fi.pak (564 bytes)
%Program Files% (x86)\Google\Chrome\Application\35.0.1916.114\default_apps (4 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\fr.pak (637 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\it.pak (587 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\hi.pak (1232 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\chrome.exe (1627 bytes)
%Program Files% (x86)\Google\Chrome\Application\35.0.1916.114 (8 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\zh-CN.pak (488 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\bn.pak (1267 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\xinput1_3.dll (162 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\default_apps\search.crx (54 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\42.0.2311.135.manifest (228 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\default_apps\youtube.crx (47 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\VisualElements\logo.png (7 bytes)
%Program Files% (x86)\Google\Chrome\Application\42.0.2311.135\Installer\setup.exe (22090 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\default_apps\drive.crx (53 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\pt-BR.pak (579 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ml.pak (1570 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\pl.pak (595 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\es-419.pak (602 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\vi.pak (685 bytes)
%Program Files% (x86)\Google\Chrome\Application\35.0.1916.114\Locales (8 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\nl.pak (579 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\da.pak (545 bytes)
%Program Files% (x86)\Google\Chrome\Application\chrome.exe (17554 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\secondarytile.png (641 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\cs.pak (602 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\bg.pak (995 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\nb.pak (545 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\es.pak (612 bytes)
%Program Files% (x86)\Google\Chrome\Temp (4 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\metro_driver.dll (955 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\natives_blob.bin (825 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\am.pak (826 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\nacl64.exe (51 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\id.pak (539 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\chrome.dll (27081 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\delegate_execute.exe (1405 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\te.pak (1339 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\default_apps\external_extensions.json (5 bytes)
C:\Windows\Temp\chrome_installer.log (129 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\PepperFlash\pepflashplayer.dll (63 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\tr.pak (596 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\et.pak (529 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ru.pak (930 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\wow_helper.exe (146 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\VisualElements\splash-620x300.png (22 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\hr.pak (561 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\sw.pak (505 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Extensions\external_extensions.json (103 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\snapshot_blob.bin (1397 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin (4 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\icudtl.dat (59 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\fil.pak (611 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\libexif.dll (621 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\uk.pak (932 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\sv.pak (553 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ar.pak (799 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\lt.pak (594 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\he.pak (692 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\d3dcompiler_47.dll (52 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\nacl_irt_x86_32.nexe (51 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\chrome.7z (259253 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\resources.pak (65 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\gu.pak (1193 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ko.pak (610 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\zh-TW.pak (489 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\chrome_200_percent.pak (50 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\libglesv2.dll (50 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\default_apps\docs.crx (12 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\default_apps\gmail.crx (48 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ro.pak (611 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ms.pak (456 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\kn.pak (1372 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ta.pak (1432 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\sr.pak (907 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\en-US.pak (498 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\PepperFlash\manifest.json (6 bytes)
C:\Users\Public\Desktop\Google Chrome.lnk (6 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\hu.pak (635 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk (6 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\sk.pak (621 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\chrome_child.dll (41165 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\el.pak (1086 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\VisualElementsManifest.xml (403 bytes)
%Program Files% (x86)\Google\Chrome\Application\35.0.1916.114\VisualElements (4 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\fa.pak (857 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\sl.pak (554 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\mr.pak (1211 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\VisualElements\smalllogo.png (21 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\chrome_100_percent.pak (50 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\chrome_watcher.dll (692 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\nacl_irt_x86_64.nexe (52 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\de.pak (522 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\ffmpegsumo.dll (50 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\widevinecdmadapter.dll (381 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\en-GB.pak (498 bytes)

The process HPNotify.exe:3924 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\conf (1480 bytes)

The process genieo_setup.gen:3972 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\cmd_close.gif (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\js\partnerConfig.js (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\2_collecting.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\1_downloading.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\js\partnerConfig.js (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\icon-16-disabled.png (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-enable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002_old\text (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\collapse.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\genuninstallui.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\genuninstallui.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\tray_awaitingMessage.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\conf\partner.properties (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\firefox-bar-24.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\install_icon.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\complete.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\notification_rgn_image.bmp (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\prep_env_err.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\GenericApp.icns (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\icon-16-enabled.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo_old\img\tray (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\prep_env.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi6AF4.tmp\KillProcDLL.dll (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\desktop.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\css\partner.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\tray_normal.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-disabled_18px.png (914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\cmd_close.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\genieo-16icon-browser-disabled.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\2_collecting.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\redHome.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\icon-16-disabled.png (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\en_text.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002_old (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\bin\license.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\network_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\hide_notfication_seperator.png (281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\expand.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\css\partner.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\uac_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002_old\img\tray (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\firefox-bar-16.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-enabled_18px.png (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-disabled_18px.png (914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\3_mapping.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\favicon.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-enable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\GenericApp.icns (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\install_icon.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\favicon.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\complete.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\conf\partnerBannedList.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\conf\partnerBannedList.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002_old\img (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\genieo-16icon-browser-disabled.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\error.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\off.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\conf\partner.properties (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\tray_normal.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\fr_text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_rgn_image.bmp (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\firefox-bar-16.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\css\notify_partner.css (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sethpButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\prep_env.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\uac_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\ru_complete.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\error.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\prep_env_err.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\text.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\ru_text.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\1_downloading.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\network_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\en_text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\desktop.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo_old\text (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\fr_complete.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\icon-16-enabled.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\partner_uninstall.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-disable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi6AF4.tmp\fct.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-disable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\firefox-bar-24.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\hide_notification.png (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-4.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-4.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\3_mapping.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\4_creating.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\4_creating.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi6AF3.tmp (25714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\footer_right_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\genieo-16icon-browser.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-enabled_18px.png (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\noItems.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\tray_awaitingMessage.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\off.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo_old\img (24 bytes)

The process XTab_Setup2253.exe:3332 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\XTab\web\img\loading.gif (5 bytes)
%Program Files% (x86)\XTab\skin\btn.png (2 bytes)
%Program Files% (x86)\XTab\install.data (68 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-CN\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\en-US\messages.json (3 bytes)
%Program Files% (x86)\XTab\HPNotify.exe (18514 bytes)
%Program Files% (x86)\XTab\conf (1626 bytes)
%Program Files% (x86)\XTab\ffsearch_toolbar!1.0.0.1031.xpi (15 bytes)
%Program Files% (x86)\XTab\BrowerWatchFF.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\es-419\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\indexIE8.html (1794 bytes)
%Program Files% (x86)\XTab\web\js\library.js (4216 bytes)
%Program Files% (x86)\XTab\web\_locales\pt\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\ver.txt (47 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-BE\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\input_bk.png (2 bytes)
%Program Files% (x86)\XTab\web\_locales\pl\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\it-IT\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\conf_back.png (1623 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CA\messages.json (3 bytes)
%Program Files% (x86)\XTab\uninstall.exe (1343 bytes)
%Program Files% (x86)\XTab\skin\btn_apply.png (6 bytes)
%Program Files% (x86)\XTab\skin\conf.xml (8 bytes)
%Program Files% (x86)\XTab\CmdShell.exe (29 bytes)
%Program Files% (x86)\XTab\web\indexIE.html (1 bytes)
%Program Files% (x86)\XTab\web\_locales\ru-MO\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\js\xagainit-ie8.js (4 bytes)
%Program Files% (x86)\XTab\skin\about_bk.png (1436 bytes)
%Program Files% (x86)\XTab\web\_locales\es-ES\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\main.xml (4 bytes)
%Program Files% (x86)\XTab\web\img\icon48.png (3 bytes)
%Program Files% (x86)\XTab\BrowserAction.dll (33992 bytes)
%Program Files% (x86)\XTab\skin\radio_2.png (3 bytes)
%Program Files% (x86)\XTab\msvcr110.dll (21280 bytes)
%Program Files% (x86)\XTab\searchProvider.xml (8 bytes)
%Program Files% (x86)\XTab\web\_locales\it-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\ProtectService.exe (5310 bytes)
%Program Files% (x86)\XTab\web\js\js.js (18 bytes)
%Program Files% (x86)\XTab\skin\logo.png (5 bytes)
%Program Files% (x86)\XTab\web\js\xagainit2.0.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn1FD0.tmp\System.dll (23 bytes)
%Program Files% (x86)\XTab\web\main.css (19 bytes)
%Program Files% (x86)\XTab\web\_locales\vi-VI\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\_locales\ru\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\close.png (3 bytes)
%Program Files% (x86)\XTab\web\data.html (20 bytes)
%Program Files% (x86)\XTab\web\img\logo32.ico (4 bytes)
%Program Files% (x86)\XTab\web\img\icon128.png (9 bytes)
%Program Files% (x86)\XTab\web\js\jquery.autocomplete.js (12 bytes)
%Program Files% (x86)\XTab\skin\about.png (4 bytes)
%Program Files% (x86)\XTab\BrowerWatchCH.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-FR\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\img\icon16.png (628 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\settings.png (5 bytes)
%Program Files% (x86)\XTab\web\js\jquery-1.11.0.min.js (4726 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-LU\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\js\ga.js (1568 bytes)
%Program Files% (x86)\XTab\web\js\common.js (2 bytes)
%Program Files% (x86)\XTab\web\_locales\tr-TR\messages.json (4 bytes)
%Program Files% (x86)\XTab\SupTab.dll (15928 bytes)
%Program Files% (x86)\XTab\IeWatchDog.dll (20 bytes)
%Program Files% (x86)\XTab\web\_locales\pt-BR\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\img\google_trends.png (7 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-TW\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\rigth_arrow.png (2 bytes)
%Program Files% (x86)\XTab\msvcp110.dll (16990 bytes)
%Program Files% (x86)\XTab\skin\radio_1.png (3 bytes)

The process genieo_setup.exe:3460 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\cmd_close.gif (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\js\partnerConfig.js (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\2_collecting.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\1_downloading.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\js\partnerConfig.js (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\icon-16-disabled.png (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-enable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\collapse.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\genuninstallui.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\genuninstallui.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\tray_awaitingMessage.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\conf\partner.properties (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\firefox-bar-24.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\install_icon.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\complete.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\notification_rgn_image.bmp (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx5DE9.tmp\fct.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\prep_env_err.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\GenericApp.icns (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\icon-16-enabled.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi5DD9.tmp (25714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\prep_env.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx5DE9.tmp\KillProcDLL.dll (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\desktop.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\css\partner.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\tray_normal.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-disabled_18px.png (914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\cmd_close.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\genieo-16icon-browser-disabled.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\2_collecting.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\redHome.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\icon-16-disabled.png (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\en_text.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\bin\license.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\network_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\hide_notfication_seperator.png (281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\expand.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\css\partner.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\uac_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\firefox-bar-16.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-enabled_18px.png (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-disabled_18px.png (914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\3_mapping.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\favicon.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-enable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\GenericApp.icns (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\install_icon.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\favicon.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\complete.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\conf\partnerBannedList.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\conf\partnerBannedList.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\off.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\genieo-16icon-browser-disabled.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\error.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\conf\partner.properties (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\tray_normal.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\fr_text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_rgn_image.bmp (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\firefox-bar-16.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\css\notify_partner.css (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sethpButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\prep_env.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\uac_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\ru_complete.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\error.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\prep_env_err.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\text.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\ru_text.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\1_downloading.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\network_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\en_text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\desktop.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\fr_complete.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\icon-16-enabled.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\partner_uninstall.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-disable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-disable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\firefox-bar-24.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\hide_notification.png (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-4.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-4.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\3_mapping.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\4_creating.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\4_creating.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\footer_right_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\genieo-16icon-browser.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-enabled_18px.png (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\noItems.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\tray_awaitingMessage.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\off.ico (1 bytes)

The process WebPlayer.exe:3980 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\07fce0a4ff78cc7e6376e227f046ce06[1].png (36564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\analytics[1].js (16603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\e54e8c720dffffa619c3b0eacec9381a[1].png (3997 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\da84c206c2019448521379d2ff837774[1].png (4648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\a6ae526a0a22dcfc743a66d44a3e09e3[1].png (26599 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\f3ad8b396434c21b4c214fd667ee391d[1].png (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\58d196b3e886a838d021adc8c8848f1e[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\4.0stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\6ef6fd5410a7fb481fe6841cb381c046[1].jpg (3636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\ace33f0a1eddf74bbe8d1bfac70deded[1].png (11710 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\13ca8e322e15bc394d66a37bec12e3b4[1].png (32044 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\d586df222f5069b6c396373d67d0163b[1].png (27112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\23428f8768d928d2bd45dd3b0c4d0057[1].png (21633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TRHROW2D.txt (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\589b1e936e1f038dc45bd8ffff59b359[1].png (17095 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\4f263f4be4c4396c9078d1874c05b928[1].png (5584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\bbbde9554589bda63791709a6785e0a3[1].png (10360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\product[1].css (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\a64a4b5c68c364d30083fbd0b0363585[1].png (25578 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\3d8bbea6bcae57d705c676f7050a7d51[1].png (4648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\1759703220576e41cab39feb18a11b14[1].png (10433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\00c73f6d4e4eb25289dddb86e2d1e319[1].jpg (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\ddb3b88cf98eb0220c9e6c252e376749[1].png (14780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\logo[1].jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\jquery.smooth-scroll.min[1].js (194 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\b85261679e262228a562f693b3e6ef6f[1].png (27160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\5.0stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\btn_bg[1].jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\logo_illust[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\3YEwT2a1878zysq92S8_9w[1].eot (1831 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\f4e4b853ddab3b763f0af17d513631bd[1].png (24529 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\5b8f93845e4dd380fec57bc644ec49d1[1].jpg (4288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\bg_main[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\home[1].htm (2889 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\style[1].css (181 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\7c9d412c730603d1d82b98a548a71bac[1].png (8048 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\5dbc29649669598ff43174b9ee730008[1].png (3038 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\36d7cd00f07003a67021237993257d08[1].png (8840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\jquery-ui.min[1].js (128104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\e94782c9200f8de809a50327879df1cc[1].png (19280 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\7e5817bad781bbc2d2e43b350ccb53db[1].png (8446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\cc3148e57a2928cd1ada1bbea553c3c2[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\52d5414e7372639389ab7e9e4d479aee[1].png (22809 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\442a5f30204dd385d17de5848683274f[1].png (14528 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\567f43cb72fe3ac6419369953394cadd[1].png (42928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\3.5stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\scripts[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\WDU5E4B4.txt (224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\7d4f668f3d1818d01b6b9684b669d0db[1].png (6236 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\ac5196fbf245580eee113296dff14d0b[1].png (9775 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\f1ed3cd0cae7a3524376e6f9369c7ab8[1].png (6859 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\lightbox[1].css (426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\59982d8527c0da41e35817e8fc15c0fc[1].png (5424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\close[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\83a4cee7a59522b93ed0ae1fa73ce8f3[1].png (2888 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\0692c2494a7331a77c05954f79c5480a[1].png (8120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\css[1].css (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\jquery.min[1].js (54015 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\loading[1].gif (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\b147a5a09b49b133d347bd975a4c5616[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\config[1].json (778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\3.0stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\1f8ffa22b53dfc2f6b7f1850bb6b73e8[1].png (15005 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\6a12dc1a298e870b610a58a56ba0f5ec[1].jpg (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\4.5stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\lightbox[1].js (5015 bytes)

The process 42.0.2311.135_chrome_installer.exe:2644 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Windows\Temp\CR_E4970.tmp\CHROME.PACKED.7Z (45884 bytes)
C:\Windows\Temp\CR_E4970.tmp\SETUP.EX_ (348 bytes)
C:\Windows\Temp\CR_E4970.tmp\setup.exe (18111 bytes)

The process appshat_generic.exe:3540 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc2250.tmp\webplayer_installer.exe (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\AppsHat Mobile Apps\Uninstall.exe (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc2250.tmp\appshat.exe (858946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc2250.tmp\inetc.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\setup[1].exe (805038 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc2250.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc224F.tmp (10027 bytes)

The process webplayer_installer.exe:3920 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\storage.js (979 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\WebPlayer.exe (7533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\web_player\initialize.js (67 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\common.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\initialize.js (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\main.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\main.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\Uninstall.exe (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\jsonstorage.js (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\config.xml (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\json.js (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\shortcut.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\web_player\web_player.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\installer.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\xhr.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\tray.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\stub.html (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\event_listener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn5522.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\utils.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\io.js (751 bytes)

The process vlc-cache-gen.exe:4024 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.4024 (135036 bytes)

The process %original file name%.exe:2132 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe (8413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsmC9F3.tmp (5854 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\config.ini (92 bytes)

The process vlc.exe:2020 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlc-qt-interface.ini (25 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.2020 (45012 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlcrc.2020 (11109 bytes)

The process InstallGenieo.exe:3140 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\MozillaHistoryView\readme.txt (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JDOM_FAQ.htm (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Jericho HTML Parser.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx6191.tmp\fct.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx6191.tmp\KillProcDLL.dll (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JDIC_Plus_index.html (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JavaMail_SMTP.txt (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JettyNOTICE.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe (18964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JavaMail API Reference Implementation Ã¢â‚¬â€ Project Kenai.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\reallysimplehistory - Project Hosting on Google Code.htm (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\License - jQuery JavaScript Library.htm (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\uninstall\Elevate.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\iehv\iehv.chm (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\IeSearchProvider.exe (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\OpenSorcePackagesInUse.txt (295 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\conf\conf.ini (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Launch4j - Cross-platform Java executable wrapper.htm (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\iehv\readme.txt (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\oauth-signpost - Project Hosting on Google Code.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\license.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\conf\conf.ini (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi6181.tmp (32607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\uninstall\updater_uninstall.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\IE HistoryView Freeware Internet Explorer History Viewer.htm (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Apache log4j 1.2 - Project License.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\MozilaHistoryViewbrowsers.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\prepenv_setup.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\conf\updater_manifest.xml (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\MozillaHistoryView\MozillaHistoryView.chm (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\SQLite Copyright.htm (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Licenses.htm (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\firsttime_setup.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe (10430 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\LicenseAgreement.txt (784 bytes)

The process InstallGenieo.exe:2744 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\genieo_temp\InstallGenieo.exe (18368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nss5C91.tmp (33533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\genieo_temp\genieo_setup.exe (16903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nss5C92.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe (1552 bytes)

The process cscript.exe:3720 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\scripts\default_config.json (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\64x64[1].ico (6495 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\shortcut.ico (6242 bytes)
C:\Users\"%CurrentUserName%"\Desktop\AppsHat.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\main.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\scripts\config.xml (819 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\Uninstall.exe (65 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\Uninstall.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\16x16[1].ico (1150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[1].json (778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\AppsHat.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\tray.ico (1 bytes)

The process Hiyvyhwdps.exe:3784 makes changes in the file system.
The Application creates and/or writes to the following file(s):

%Program Files% (x86)\App Lid\utils.exe (61818 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\156272 (4097 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\xgyszng.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd2CFA.tmp (685288 bytes)
C:\Windows\Tasks\fac9668a-7d04-4c07-a2a7-1c8ad5184195-5_user.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\System.dll (808 bytes)
%Program Files% (x86)\App Lid\fac9668a-7d04-4c07-a2a7-1c8ad5184195-5.exe (7433 bytes)
%Program Files% (x86)\App Lid\Uninstall.exe (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\mxexzbq.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\dkhbofocf.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\lwfjntrs.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\tvahk.dll (8 bytes)
C:\Windows\Tasks\fac9668a-7d04-4c07-a2a7-1c8ad5184195-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\vmgvmcqqh.dll (14 bytes)
%Program Files% (x86)\App Lid\fac9668a-7d04-4c07-a2a7-1c8ad5184195-4.exe (8706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\gtexax.dll (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\fac9668a-7d04-4c07-a2a7-1c8ad5184195-4.dll (42762 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\420474 (91304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\fkhxrm.dll (29131 bytes)
%Program Files% (x86)\App Lid\fac9668a-7d04-4c07-a2a7-1c8ad5184195.xpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\ipgeoapi_com[1].json (40 bytes)

The process D411.tmp:2636 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\inetc.dll (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\IpConfig.dll (4254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\nsJSON.dll (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\lm (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\mj (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\NSISEncrypt.dll (3350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\WmiInspector.dll (3137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\tlg (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\UserInfo.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp (4 bytes)

The process trayapp_setup.gen:3804 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\x_white.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack4.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\miniview.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_ui.js (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\buttonBg.png (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_bird.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_data.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack1sm.png (769 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\GenieoPartnerWindow.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame1sm.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieo_logo2.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\red.gif (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\js\main.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\splash_bg.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cluster_default1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\tpl\settings.tpl (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\button.png (342 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\notification.html (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\warming_up.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\opera_extension.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\notification_controls.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_8.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\Preferences.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extOpera1.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\big_image_frame.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frameSm.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_8sm.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_fr.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tryAgainButton.png (710 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\fr.css (211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\miniview.html (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\page_arrows_blue.png (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_inner_ru.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\heart.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\ServerConnector.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cmd_close_red.gif (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieoRss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\notification.html (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\buttonSp.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\partner_item_bg.gif (879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\default_image.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\.project (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\set_full_view_btn.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\previewPublish.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\birthday.css (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariWin1.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\button.png (342 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\title.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\prototype.jsonp.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\okCancelButton.png (734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\ad_no_image.png (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cluster_default.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\notification_popup_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\bummer.png (750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFirefoxMac3.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\hotItemIcon.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\happy.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_6.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\social_icons.png (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\redSqSm.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extChromeMac1.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitterButton.png (955 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\h_bg.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_ru.properties (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\attention.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\settings.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\favorite_site_mask.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\aggregation.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\x.gif (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\all-genieo-sp-pack.js (15168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\share_btn.png (625 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\big_quote.gif (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\message_note.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\DataProcessor.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-overcast.png (975 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFirefoxMac1.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\page_arrows.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\ohBg.gif (879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\layer.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\prog_bar_prog.gif (166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\upper_border.gif (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-clear-night.png (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\follow_facebook_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\splash_video_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_ru.json (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\round_corners_5px.png (182 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sendFeedbackButton.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_4.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\prog_bar_prog.gif (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie8.css (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\item_bg.png (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\picFrames.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_application.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\template1.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\slideshow.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\constants.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\share_btn.png (553 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\pagelet.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\browser_not_supported.html (125 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\smallGrey.gif (803 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\covers.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack2.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\footer_bg.png (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\older_items_arrow.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sidebar_text_ad_bg.png (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\arrow_down.gif (68 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFinishButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\analytics.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\itemsRotate.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template1_.jpg (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\rssButton.png (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template3sm.jpg (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\hp_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\grad.png (171 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\template2.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\google_search_btn.png (166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sad.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\login_facebook_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\jquery.min.js (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\bug.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\json.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack3sm.png (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_next2.gif (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\logDbgLoadPhase.js (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\social_connector.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-few-clouds-night.png (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tw.gif (241 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\bg.jpg (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\x.gif (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\set_to_miniview.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\grey.gif (817 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\js\utils.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\message_heart.png (765 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_3.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\fbButton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\share_popup_arrow.png (219 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\personalization_meter_bg.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\utils.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template1.jpg (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\Activators.js (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\noitems.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\followbutton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\logo_icon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\orig\field_fr.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\icons\thumb_up.png (697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\splash.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\default_image.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\js\classes.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\signUpButton.png (863 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_main.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\birthday_not_connected_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\warning.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nss847B.tmp (82165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\pagging_arrows.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\icons\bug.png (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\LocationManager.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification_ui.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\birthday_cake.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\small_arrow_down.png (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\share_unfollow.png (849 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariMac.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer_bg.gif (834 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\settings\buttonSp.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\topic_x.png (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie7.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\facebook_twitter.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\welcome_home.gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\dialogWarning.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\core.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\google_search_input_logo.png (903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\follow_twitter_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\message_note.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weatherimg.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_ru.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\trayapp_uninstall.exe (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ru.css (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\ok.png (769 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\x_small.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\css\main.css (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-severe-alert.png (977 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\birthday.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\rss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template2.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\white.gif (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\social_baloon_tip.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\shadowv.png (939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extNextButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-snow.png (998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\class.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\syncOnButton.png (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\body_bg.png (323 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\box_controls.png (814 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_en.json (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\UIState.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\redirect_handler.html (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\counter_bg.png (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\previewShareDisabled.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\js\collage.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\counter_bg.png (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack5.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\big_video_frame.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame3.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\redSq.png (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_white.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-storm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\css\partner.css (930 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_10.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\splash_video.jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\css\notify.css (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\hotItemIcon.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\ajax-loader.gif (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\default.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\orig\field_ru.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieo_logo_small.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_gray_transparent.png (198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\facebook_icon.png (432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\blockTopic.png (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\rss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\shekerKolshehu.gif (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\shadowh.png (944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\share_unfollow_old.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-showers-scattered.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\reportBugButton.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\button-enable.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\css\main.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\medium_image_frame.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_icon12px.png (543 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\ad_no_image.gif (594 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\googleimg.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\background.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\settings\settings_ui.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_yellow.png (206 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\headlines_frame.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_auth_start.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extChromeMac2.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack3.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\x.gif (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\message_tip.png (154 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-showers.png (959 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_9.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\signUpButton2.png (704 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\js\main.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\noPicture.png (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\double_border.png (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_en.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\general.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_btn.png (309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\css\aggregation_page.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\anabel_analytics.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\miniview_ui.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\birthday_no_birthdays_bg.png (883 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tryItNow.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\all-genieo-sp-list.txt (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_v.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification-nodebug.js (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cakes.png (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\jquery.cookie.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\magazine_ribon.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\test_items.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\hp_guard.html (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_word.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_inner.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\.classpath (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\startpage.css (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame2.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFirefoxMac2.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\tpl\startpage.tpl (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\parent_proxy.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\js\utils.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\ticker.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\fail.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariMacEnableExts.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sethpButton2.png (997 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\aggregation_page.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\fbButton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\popup_bg.png (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\facebook_icon12px.png (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\settings\anabel_settings.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\box_collapse.png (154 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\blank.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_fr.properties (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\userpic_overlay.png (190 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\topicBg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_fr.json (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tmpl3rightButton.png (711 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\facebookShareIcon.png (311 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\btn.png (750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\cmd_close.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\photos.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\const.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\pnf.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\iPhoneOk.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\goRssButton.png (790 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\older_items_btn.png (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\settings\followbutton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\topicDefault.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_icon.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\normalLevel.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\hide_notification.png (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\template3.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\prowered_by_google.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_7.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\DebugUtils.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\close.png (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\prog_bar.gif (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\disconnectTwitterBtn.png (690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\jquery-genieo-postmessage.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\popup_bg_white.png (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\previewShare.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_bird2.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariWin2.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\you_tube.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_yellow_down.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack5sm.png (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\footer_right_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\redHome.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\reopen_btn.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\activity-indicator.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\waitingTr.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\defaultCover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\rss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\layers.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\share_btn.png (553 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\medium_video_frame.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\hover_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\personalizationMeter.css (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\fb_icon_big.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sethpButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\follow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_ui_pages.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\iphone.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\set_as_homepage_bg.png (993 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\fb.gif (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\default_favicon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tutorial.png (5520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\strip.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\waiting.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_2.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\settings.css (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\actions.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\menu_bg.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\translator.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\red_arror_down.png (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack4sm.png (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\warning.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\videobutton.png (862 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_white.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\feedbackButton.png (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\noItems.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\x_white.gif (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_inner_fr.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tmpl3leftButton.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\redarr.png (484 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer_sep.gif (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\forPictures.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\layers.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification-debug.js (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame2sm.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\wt.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\arrow_down_disable.gif (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\open_splash.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\poweredByGenieo.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sendFeedbackButton2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\shortcut.png (381 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-clear.png (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\item_controls_bg.png (167 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\connect_with_facebook.png (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\js\classes.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\easer.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_prev2.gif (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\social_box.png (253 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\notification_controls.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\tpl\main.tpl (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\underconstructions.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_10sm.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\loader.gif (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\redArrow.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\sad.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\play_icon.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\noPicture_.png (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\play_big.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tools.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\trash.png (515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieo_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\template_factory.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_v.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\icons\thumb_down.png (703 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\miniview.css (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\mobile.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\Renderers.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\defaultPicture.png (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template2sm.png (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\bigHotItemIcon.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template1sm.jpg (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template3.jpg (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\coverShadow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\bigHotItemIcon.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\prog_bar.gif (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twit_pic.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_gray.png (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\pink.gif (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\topicDefault.gif (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\birthday.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer_left.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\tpl\main.tpl (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\prototype.postmessage.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack2sm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-few-clouds.png (763 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_white_down.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\lowLevel.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\settings\okCancelButton.png (734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\dot_clear.gif (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\genieo_is_installed.js (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\bday_image.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie9.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\.settings\org.eclipse.core.resources.prefs (124 bytes)

The process genupdater.exe:2268 makes changes in the file system.
The Application creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\framework_setup.gen (1027548 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\upgrade\updater_manifest.xml (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\genieo_setup.gen (62942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\conf\updater_manifest.xml (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\trayapp_setup.gen (201198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\upgrade\partner_manifest.xml (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\log\Updater.log (11205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\upgrade\manifest.xml (644 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\conf\partner_manifest.xml (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\firsttime_setup.exe (49 bytes)

Registry activity

The process GoogleUpdate.exe:2664 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"IsMSIHelperRegistered" = "1"
"LastStartedAU" = "1430378520"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"uid"
"old-uid"

The process GoogleUpdate.exe:1664 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Google\Update\proxy]
"source" = "IEWPAD"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"uid"
"old-uid"

The process GoogleUpdate.exe:2556 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"ActivePingDayStartSec" = "1430377200"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\CurrentState]
"DownloadProgressPercent" = "0"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}]
"DayOfLastRollCall" = "3041"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"LastCheckSuccess" = "1430378532"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\CurrentState]
"StateValue" = "16"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}]
"RollCallDayStartSec" = "1430377200"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\CurrentState]
"StateValue" = "13"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"LastCheckSuccess" = "1430378575"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"RollCallDayStartSec" = "1430377200"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastChecked" = "1430378532"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"pv" = "35.0.1916.153"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\CurrentState]
"InstallTimeRemainingMs" = "4294967295"
"InstallProgressPercent" = "4294967295"

[HKCU\Software\Google\Update\proxy]
"source" = "IEWPAD"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}]
"pv" = "35.0.1916.153"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\CurrentState]
"DownloadTimeRemainingMs" = "4294967295"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%SystemRoot%\system32]
"p2pcollab.dll,-8042" = "Peer to Peer Trust"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"DayOfLastActivity" = "3041"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"LastInstallerResult" = "0"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"RollCallDayStartSec" = "1430377200"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"UpdateTime" = "1430378575"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastInstallerResult" = "0"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%SystemRoot%\system32]
"dnsapi.dll,-103" = "Domain Name System (DNS) Server Trust"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\CurrentState]
"InstallTimeRemainingMs" = "4294967295"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\CurrentState]
"InstallProgressPercent" = "4294967295"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"pv" = "1.3.26.9"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"RollCallDayStartSec" = "1430377200"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"DayOfLastRollCall" = "3041"
"ActivePingDayStartSec" = "1430377200"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"LastInstallerError" = "2"

[HKCU\Software\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}]
"dr" = "0"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"LastCheckSuccess" = "1430378532"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}\CurrentState]
"StateValue" = "17"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastInstallerError" = "2"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"UpdateAvailableCount" = "1"
"DayOfLastActivity" = "3041"
"DayOfLastRollCall" = "3041"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\CurrentState]
"StateValue" = "3"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"DayOfLastRollCall" = "3041"

[HKCU\Software\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"dr" = "0"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"pv" = "35.0.1916.153"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\CurrentState]
"StateValue" = "7"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"UpdateAvailableSince" = "Type: REG_QWORD, Length: 8"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\CurrentState]
[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}\CurrentState]
[HKCU\Software\Classes\Local Settings\MuiCache\2C]
[HKCU\Software\Classes\Local Settings\MuiCache\2C\52C64B7E]
[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\CurrentState]
[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\CurrentState]

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"UpdateAvailableSince"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"LastInstallerSuccessLaunchCmdLine"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastInstallerSuccessLaunchCmdLine"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"LastInstallerExtraCode1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"UpdateAvailableCount"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastInstallerExtraCode1"
"LastInstallerResult"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"UpdateAvailableSince"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"old-uid"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"InstallerError"
"LastInstallerResult"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"uid"
"LastInstallerResultUIString"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"iid"
"LastInstallerResultUIString"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"dr"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"LastInstallerError"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"UpdateAvailableCount"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"UpdateAvailableSince"

[HKLM\SOFTWARE\Wow6432Node\Google\Update]
"LastInstallerError"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"UpdateAvailableCount"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}]
"tttoken"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"dr"
"tttoken"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"tttoken"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"InstallerResult"

The process vlc-2.0.6-win32.exe:1052 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\VLC.m2ts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aiff\shell]
"(Default)" = "Open"

[HKCR\VLC.ifo\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.dv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\shell]
"(Default)" = "Open"

[HKCR\VLC.adts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.wmv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.voc]
"(Default)" = "VLC media file (.voc)"

[HKCR\VLC.m3u8\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.tta\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.caf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.adt\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mts\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpv2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xm\shell]
"(Default)" = "Open"

[HKCR\VLC.avi\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ac3\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.spx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder\shell]
"(Default)" = "Open"

[HKCR\VLC.qcp]
"(Default)" = "VLC media file (.qcp)"

[HKCR\VLC.cue\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vob\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mov" = "VLC.mov"

[HKCR\VLC.vlc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cue\shell]
"(Default)" = "Open"

[HKCR\VLC.drc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ifo\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gpp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.amr]
"(Default)" = "VLC.amr"

[HKCR\VLC.wma\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".PLS" = ""

[HKCR\VLC.ogv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.asx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".APE" = ""

[HKCR\VLC.mpe\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.xspf\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".a52" = "VLC.a52"

[HKCR\VLC.qcp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.adt\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.snd\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".CDA" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rec" = "VLC.rec"

[HKCR\.sdp]
"(Default)" = "VLC.sdp"

[HKCR\VLC.s3m\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2t\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.b4s\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64]
"(Default)" = "VLC media file (.w64)"

[HKCR\VLC.adts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2v\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mxf" = ""

[HKCR\VLC.qcp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe"

[HKCR\VLC.divx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe]
"FriendlyAppName" = "VLC media player"

[HKCR\VLC.mpc\shell]
"(Default)" = "Open"

[HKCR\.qcp]
"(Default)" = "VLC.qcp"

[HKCR\VLC.nsv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.adts\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".qcp" = ""

[HKCR\VLC.nsv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rmi\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.ogg]
"(Default)" = "VLC.ogg"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"Action" = "Play DVD movie"

[HKCR\VLC.avi\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mxf\shell]
"(Default)" = "Open"

[HKCR\VLC.xspf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.avi\shell]
"(Default)" = "Open"

[HKCR\VLC.mid\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"URLInfoAbout" = "http://www.videolan.org/"

[HKCR\VLC.ts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp3\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m3u8\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mxf]
"(Default)" = "VLC.mxf"

[HKCR\VLC.ogm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m1v" = ""

[HKCR\VLC.snd\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.au\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.caf]
"(Default)" = "VLC media file (.caf)"

[HKCR\VLC.wma\shell\Open]
"(Default)" = "Play"

[HKCR\.mp3]
"(Default)" = "VLC.mp3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.mp2v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.it\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.VCDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.wav\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.flac\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m4p\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.VCDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file vcd:///%1"

[HKCR\VLC.m3u8\shell]
"(Default)" = "Open"

[HKCR\VLC.rmi]
"(Default)" = "VLC media file (.rmi)"

[HKCR\VLC.aif\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".bin" = "VLC.bin"

[HKCR\VLC.oga\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.m2v]
"(Default)" = "VLC.m2v"

[HKCR\VLC.mlp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.dts]
"(Default)" = "VLC.dts"

[HKCR\.wma]
"(Default)" = "VLC.wma"

[HKCR\VLC.xspf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.flac]
"(Default)" = "VLC.flac"

[HKCR\VLC.mpe\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.mpeg2]
"(Default)" = "VLC.mpeg2"

[HKCR\VLC.m3u\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aac\shell\Open]
"(Default)" = "Play"

[HKCR\.ts]
"(Default)" = "VLC.ts"

[HKCR\VLC.flv\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".FLAC" = ""
".AC3" = ""

[HKCR\VLC.tts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.w64\shell]
"(Default)" = "Open"

[HKCR\Directory\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.wv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mkv" = ""

[HKCR\VLC.cda\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mtv]
"(Default)" = "VLC.mtv"

[HKCR\VLC.mtv\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".AAC" = "VLC.aac"

[HKCR\VLC.vob\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mka" = ""

[HKCR\VLC.mlp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m3u8\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2v\shell]
"(Default)" = "Open"

[HKCR\VLC.bin\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aifc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.nsv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.CDAudio]
"(Default)" = "VLC CD Audio"

[HKCR\VLC.ifo\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4a\shell]
"(Default)" = "Open"

[HKCR\VLC.m4p]
"(Default)" = "VLC media file (.m4p)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MOD" = "VLC.mod"

[HKCR\Applications\vlc.exe\SupportedTypes]
".tod" = ""

[HKCR\VLC.mp2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.au]
"(Default)" = "VLC media file (.au)"

[HKCR\VLC.rmi\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.snd]
"(Default)" = "VLC media file (.snd)"

[HKCR\VLC.xspf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.asf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mtv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.flv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.SVCDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aob\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3g2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.a52\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aac]
"(Default)" = "VLC.aac"

[HKCR\VLC.w64\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.rmvb]
"(Default)" = "VLC.rmvb"

[HKCR\VLC.wav\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".TTA" = "VLC.tta"

[HKCR\VLC.rmvb\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.ogm]
"(Default)" = "VLC.ogm"

[HKCR\VLC.mpeg4\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.divx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".tts" = "VLC.tts"

[HKCR\.rm]
"(Default)" = "VLC.rm"

[HKCR\.ram]
"(Default)" = "VLC.ram"

[HKCR\VLC.dts]
"(Default)" = "VLC media file (.dts)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rm" = "VLC.rm"

[HKCR\VLC.m4a\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.vlc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mid\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpeg4\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ape\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.adt\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.bin\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"Action" = "Play audio CD"

[HKCR\VLC.snd\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".wma" = ""

[HKCR\VLC.aif\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3gp]
"(Default)" = "VLC.3gp"

[HKCR\VLC.vob\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.ac3]
"(Default)" = "VLC.ac3"

[HKCR\Directory\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M4A" = "VLC.m4a"

[HKCR\VLC.vob\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpeg1\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aifc" = ""
".aiff" = ""

[HKCR\VLC.dv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m4p" = "VLC.m4p"

[HKCR\VLC.m4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ts" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m4v" = "VLC.m4v"

[HKCR\VLC.mpv2\shell]
"(Default)" = "Open"

[HKCR\VLC.voc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".dts" = "VLC.dts"

[HKCR\VLC.tts]
"(Default)" = "VLC media file (.tts)"

[HKCR\VLC.avi\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ac3\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ram\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m3u\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpv2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.wv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.cda]
"(Default)" = "VLC.cda"

[HKCR\VLC.pls\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".FLAC" = "VLC.flac"

[HKCR\VLC.caf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.gxf]
"(Default)" = "VLC media file (.gxf)"

[HKCR\VLC.m2ts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.webm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3ga\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.VCDMovie]
"(Default)" = "VLC VCD Movie"

[HKCR\VLC.tod\shell\Open]
"(Default)" = "Play"

[HKCR\.m2t]
"(Default)" = "VLC.m2t"

[HKCR\VLC.ogg\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2t\shell]
"(Default)" = "Open"

[HKCR\VLC.3ga\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.vro\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.vlc]
"(Default)" = "VLC media file (.vlc)"

[HKCR\VLC.webm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.sdp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.DVDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file dvd:///%1"

[HKCR\VLC.mpg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.cue\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mov\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.3ga]
"(Default)" = "VLC.3ga"

[HKCR\.wav]
"(Default)" = "VLC.wav"

[HKCR\VLC.mpeg4\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.divx]
"(Default)" = "VLC.divx"

[HKCR\VLC.oga\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.vqf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.gxf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.aac\shell]
"(Default)" = "Open"

[HKCR\VLC.ape\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MID" = "VLC.mid"

[HKCR\VLC.a52\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.s3m]
"(Default)" = "VLC media file (.s3m)"

[HKCR\VLC.flac\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mp4v]
"(Default)" = "VLC.mp4v"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".oma" = "VLC.oma"

[HKCR\VLC.tts\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayDVDMovieOnArrival]
"VLCPlayDVDMovieOnArrival" = ""

[HKCR\VLC.ogg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.voc]
"(Default)" = "VLC.voc"

[HKCR\VLC.mpa\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.oma\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3gp2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.mp2]
"(Default)" = "VLC.mp2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"InvokeProgID" = "VLC.OPENFolder"
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.SVCDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aob]
"(Default)" = "VLC.aob"

[HKCR\VLC.f4v\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".avi" = ""

[HKCR\VLC.oma\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.3gp2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m4p\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.m2ts]
"(Default)" = "VLC.m2ts"

[HKCR\VLC.tts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.flv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ram\shell]
"(Default)" = "Open"

[HKCR\VLC.3g2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aifc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.nsv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.drc]
"(Default)" = "VLC.drc"

[HKCR\VLC.3g2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.669\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oga\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.tod]
"(Default)" = "VLC media file (.tod)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mts" = ""
".mtv" = ""

[HKCR\VLC.au\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wv\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.b4s\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".au" = "VLC.au"

[HKCR\VLC.f4v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mka\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aac\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.adt\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.caf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aif]
"(Default)" = "VLC media file (.aif)"

[HKCR\VLC.opus\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".gxf" = ""

[HKCR\VLC.voc\shell]
"(Default)" = "Open"

[HKCR\VLC.m4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.DVDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.mpv2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.mkv]
"(Default)" = "VLC.mkv"

[HKCR\VLC.mlp\shell]
"(Default)" = "Open"

[HKCR\VLC.wv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayMusicFilesOnArrival]
"VLCPlayMusicFilesOnArrival" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".SPX" = ""

[HKCR\VLC.vqf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.drc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.qcp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.669\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.xa\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.amv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.f4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aif\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.asf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogm\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.b4s\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.nuv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.f4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.sdp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpg]
"(Default)" = "VLC media file (.mpg)"

[HKCR\VLC.mpeg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mid\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m4p\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.gxf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayVersion" = "2.0.6"

[HKCR\.aiff]
"(Default)" = "VLC.aiff"

[HKCR\VLC.3gp\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell]
"(Default)" = "Open"

[HKCR\VLC.ogv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.flac\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MID" = ""

[HKCR\VLC.rmvb\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.amv]
"(Default)" = "VLC.amv"

[HKCR\VLC.mp1\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe"

[HKCR\VLC.oma\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".AAC" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m2ts" = "VLC.m2ts"

[HKCR\VLC.qcp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".AC3" = "VLC.ac3"

[HKCR\VLC.a52\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".669" = ""

[HKCR\VLC.vqf]
"(Default)" = "VLC media file (.vqf)"

[HKCR\VLC.nsv\shell]
"(Default)" = "Open"

[HKCR\VLC.b4s\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rec\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".caf" = "VLC.caf"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ogm" = ""
".OGA" = ""

[HKCR\VLC.au\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".OGG" = ""

[HKCR\VLC.aiff]
"(Default)" = "VLC media file (.aiff)"

[HKCR\VLC.asf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp2v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.asf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ogv" = ""

[HKCR\VLC.ogg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.tts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.xspf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.w64\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCU\Software\Classes\.webm]
"(Default)" = "VLC.webm"

[HKCR\Applications\vlc.exe\SupportedTypes]
".dv" = ""

[HKCR\VLC.f4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.669]
"(Default)" = "VLC.669"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"InvokeProgID" = "VLC.OPENFolder"

[HKCR\VLC.rm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.avi\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".RMI" = ""

[HKCR\VLC.xm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.opus]
"(Default)" = "VLC media file (.opus)"

[HKCR\VLC.f4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.dv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vob]
"(Default)" = "VLC media file (.vob)"

[HKCR\VLC.vro\shell\Open]
"(Default)" = "Play"

[HKCR\AudioCD\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.cue\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mov\shell]
"(Default)" = "Open"

[HKCR\.mov]
"(Default)" = "VLC.mov"

[HKCR\VLC.amr\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rm" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".w64" = "VLC.w64"
".WAV" = "VLC.wav"

[HKCR\VLC.aac]
"(Default)" = "VLC media file (.aac)"

[HKCR\VLC.vro\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.dts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpa\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.a52\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.SVCDMovie]
"(Default)" = "VLC SVCD Movie"

[HKCR\VLC.it\shell]
"(Default)" = "Open"

[HKCR\VLC.CDAudio\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell]
"(Default)" = "Open"

[HKCR\VLC.ac3]
"(Default)" = "VLC media file (.ac3)"

[HKCR\Directory\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.asx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.cda\shell]
"(Default)" = "Open"

[HKCR\VLC.mp4v\shell]
"(Default)" = "Open"

[HKCR\VLC.ts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpv2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gpp]
"(Default)" = "VLC media file (.3gpp)"

[HKCR\VLC.asf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vqf\shell]
"(Default)" = "Open"

[HKCR\VLC.mkv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"Action" = "Play SVCD movie"

[HKCR\VLC.au\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Path" = "%Program Files% (x86)\VideoLAN\VLC\npvlc.dll"

[HKCR\VLC.drc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".voc" = ""
".vob" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".flv" = "VLC.flv"

[HKCR\VLC.voc\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"InstallDir" = "%Program Files% (x86)\VideoLAN\VLC"

[HKCR\VLC.m1v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"InvokeProgID" = "VLC.OPENFolder"

[HKCR\VLC.mkv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpv2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.rmvb\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.adt]
"(Default)" = "VLC media file (.adt)"

[HKCR\.mpv2]
"(Default)" = "VLC.mpv2"

[HKCR\VLC.mka]
"(Default)" = "VLC media file (.mka)"

[HKCR\VLC.m1v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.asf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.SVCDMovie\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file vcd:///%1"

[HKCR\VLC.VCDMovie\shell]
"(Default)" = "Open"

[HKCR\VLC.dts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg]
"(Default)" = "VLC media file (.mpeg)"

[HKCR\VLC.amr\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xa\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.asf\shell]
"(Default)" = "Open"

[HKCR\VLC.sdp\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mxf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.m4p]
"(Default)" = "VLC.m4p"

[HKCR\VLC.ogm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.CDAudio\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file cdda:///%1"

[HKCR\VLC.ram\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mkv" = "VLC.mkv"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp4v" = ""

[HKCR\VLC.pls\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mka" = "VLC.mka"

[HKCR\VLC.m4p\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.nuv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mov\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".OPUS" = ""

[HKCR\VLC.spx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.wma\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpa]
"(Default)" = "VLC media file (.mpa)"

[HKCR\VLC.669\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.wmv]
"(Default)" = "VLC.wmv"

[HKCR\VLC.DVDMovie]
"(Default)" = "VLC DVD Movie"

[HKCR\VLC.ifo\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.m3u8]
"(Default)" = "VLC.m3u8"

[HKCR\VLC.adts\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".flv" = ""

[HKCR\VLC.adt\shell]
"(Default)" = "Open"

[HKCR\.adt]
"(Default)" = "VLC.adt"

[HKCR\VLC.3ga\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ogv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vqf" = "VLC.vqf"

[HKCR\VLC.mts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.s3m\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpa\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.webm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oma\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m3u\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mka\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.xspf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.f4v]
"(Default)" = "VLC media file (.f4v)"

[HKCR\VLC.m3u8\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".b4s" = "VLC.b4s"

[HKCR\VLC.aif\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.drc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aob\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gp]
"(Default)" = "VLC media file (.3gp)"

[HKCR\VLC.mpeg4\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".nsv" = "VLC.nsv"

[HKCR\.rmi]
"(Default)" = "VLC.rmi"

[HKCR\VLC.tta\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.amv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.aif]
"(Default)" = "VLC.aif"

[HKCR\VLC.m2ts\shell]
"(Default)" = "Open"

[HKCR\.oga]
"(Default)" = "VLC.oga"

[HKCR\VLC.mp1\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m1v" = "VLC.m1v"

[HKCR\VLC.gxf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cda\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".b4s" = ""

[HKCR\VLC.adt\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.adt\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"ShowIconsCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /ShowIcons /S"

[HKCR\VLC.ifo\shell]
"(Default)" = "Open"

[HKCR\VLC.ogm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mkv]
"(Default)" = "VLC media file (.mkv)"

[HKCR\VLC.m2t\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".nsv" = ""

[HKCR\VLC.oma\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mid]
"(Default)" = "VLC media file (.mid)"

[HKCR\VLC.vqf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.flac\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayVideoFilesOnArrival]
"VLCPlayVideoFilesOnArrival" = ""

[HKCR\VLC.it\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ac3\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.rec\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".snd" = "VLC.snd"

[HKCR\VLC.adts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3gp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.wav\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mkv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ape\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.3ga\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.caf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aac\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m2v]
"(Default)" = "VLC media file (.m2v)"

[HKCR\VLC.cda\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ram\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.gxf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".asf" = "VLC.asf"
".asx" = "VLC.asx"

[HKCR\VLC.aifc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mid\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ac3\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.s3m\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.bin\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"InvokeVerb" = "Open"
"Action" = "Play audio files"

[HKCR\VLC.3gp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp1\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.flv]
"(Default)" = "VLC.flv"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"HideIconsCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /HideIcons /S"

[HKCR\Applications\vlc.exe\SupportedTypes]
".caf" = ""

[HKCR\VLC.ram]
"(Default)" = "VLC media file (.ram)"

[HKCR\VLC.mts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mxf" = "VLC.mxf"

[HKCR\VLC.wv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.spx\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.asx]
"(Default)" = "VLC media file (.asx)"

[HKCR\VLC.mp2v]
"(Default)" = "VLC media file (.mp2v)"

[HKCR\VLC.mtv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mod\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mov\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aiff\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpv2" = "VLC.mpv2"

[HKCR\VLC.aifc]
"(Default)" = "VLC media file (.aifc)"

[HKCR\VLC.avi\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.tts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2t\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\DVD\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file dvd:///%1"

[HKCR\VLC.divx\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vro" = "VLC.vro"

[HKCR\VLC.m2ts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.xa\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gpp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3gp2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xm]
"(Default)" = "VLC media file (.xm)"

[HKCR\VLC.nuv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mod\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aifc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m4a\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.dv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".dv" = "VLC.dv"

[HKCR\VLC.mpa\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpeg2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m1v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.spx\shell]
"(Default)" = "Open"

[HKCR\VLC.a52\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.drc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.tod\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.3gp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.3gp2]
"(Default)" = "VLC.3gp2"

[HKCR\VLC.bin\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ac3\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amr\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vob" = "VLC.vob"

[HKCR\VLC.au\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rmvb\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.tta\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.oma\shell]
"(Default)" = "Open"

[HKCR\VLC.snd\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.mpeg1]
"(Default)" = "VLC.mpeg1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.asf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpeg1\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv]
"(Default)" = "VLC media file (.amv)"

[HKCR\VLC.mp4\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vqf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mpg]
"(Default)" = "VLC.mpg"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gp2" = "VLC.3gp2"

[HKCR\VLC.mlp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.flac\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ogv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Product" = "VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayDVDAudioOnArrival]
"VLCPlayDVDAudioOnArrival" = ""

[HKCR\VLC.drc]
"(Default)" = "VLC media file (.drc)"

[HKCR\VLC.wmv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.b4s]
"(Default)" = "VLC media file (.b4s)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".wmv" = "VLC.wmv"

[HKCR\VLC.wv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpv2]
"(Default)" = "VLC media file (.mpv2)"

[HKCR\VLC.m4v\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".adt" = ""

[HKCR\.rec]
"(Default)" = "VLC.rec"

[HKCR\.mid]
"(Default)" = "VLC.mid"

[HKCR\VLC.mp2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.vqf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mpc]
"(Default)" = "VLC.mpc"

[HKCR\VLC.rmvb\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2ts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m4a\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.wma\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xa\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mod\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u8\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.gxf\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.oga\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".adt" = "VLC.adt"

[HKCR\VLC.vlc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1\shell]
"(Default)" = "Open"

[HKCR\VLC.xm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ram\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.spx]
"(Default)" = "VLC media file (.spx)"

[HKCR\VLC.tta\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aiff\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aac\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u]
"(Default)" = "VLC media file (.m3u)"

[HKCR\VLC.wav\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mkv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".webm" = ""

[HKCR\VLC.opus\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ogx" = ""
".au" = ""

[HKCR\VLC.drc\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nsv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mxf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.aifc]
"(Default)" = "VLC.aifc"

[HKCR\Applications\vlc.exe\SupportedTypes]
".drc" = ""

[HKCR\VLC.rmi\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.avi]
"(Default)" = "VLC media file (.avi)"

[HKCR\VLC.s3m\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.cue]
"(Default)" = "VLC.cue"

[HKCR\.ogv]
"(Default)" = "VLC.ogv"

[HKCR\VLC.mp4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.it\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Directory\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.tod\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m3u8]
"(Default)" = "VLC media file (.m3u8)"

[HKCR\VLC.it\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.asf]
"(Default)" = "VLC.asf"

[HKCR\VLC.voc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.bin\shell]
"(Default)" = "Open"

[HKCR\VLC.ogm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ac3\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xspf]
"(Default)" = "VLC media file (.xspf)"

[HKCR\VLC.m4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".OGA" = "VLC.oga"
".OGG" = "VLC.ogg"

[HKCR\.ifo]
"(Default)" = "VLC.ifo"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ogm" = "VLC.ogm"

[HKCR\VLC.adts\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.sdp\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ogx" = "VLC.ogx"

[HKCR\VLC.caf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xa\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".WV" = "VLC.wv"

[HKCR\VLC.ts\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\RegisteredApplications]
"vlc" = "Software\Clients\Media\VLC\Capabilities"

[HKCR\VLC.669\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpg" = ""
".mpe" = ""
".MPC" = ""
".mpa" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".tod" = "VLC.tod"

[HKCR\VLC.mod\shell]
"(Default)" = "Open"

[HKCR\VLC.wmv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\shell\Open]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.adt\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.au\shell]
"(Default)" = "Open"

[HKCR\VLC.mpg\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP3" = ""

[HKLM\SOFTWARE\Clients\Media\VLC]
"(Default)" = "VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP1" = ""

[HKCR\VLC.rmi\shell]
"(Default)" = "Open"

[HKCR\VLC.ac3\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.f4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.s3m\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4v]
"(Default)" = "VLC media file (.m4v)"

[HKCR\VLC.vlc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.xm]
"(Default)" = "VLC.xm"

[HKCR\VLC.mod\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aifc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M3U" = "VLC.m3u"

[HKCR\VLC.caf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.sdp]
"(Default)" = "VLC media file (.sdp)"

[HKCR\VLC.qcp\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".snd" = ""
".f4v" = ""

[HKCR\VLC.3g2]
"(Default)" = "VLC media file (.3g2)"

[HKCR\VLC.divx\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.b4s\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.au]
"(Default)" = "VLC.au"

[HKCR\VLC.mod\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg1\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vob]
"(Default)" = "VLC.vob"

[HKCR\VLC.mpa\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mod]
"(Default)" = "VLC media file (.mod)"

[HKCR\VLC.rmi\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell]
"(Default)" = "Open"

[HKCR\.mpeg]
"(Default)" = "VLC.mpeg"

[HKCR\VLC.mpeg1\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2ts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3g2\shell]
"(Default)" = "Open"

[HKCR\VLC.tta\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vob\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vro" = ""

[HKCR\.pls]
"(Default)" = "VLC.pls"

[HKCR\VLC.divx]
"(Default)" = "VLC media file (.divx)"

[HKCR\VLC.drc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vro\shell]
"(Default)" = "Open"

[HKCR\VLC.vqf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vlc" = ""

[HKCR\VLC.avi\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.xa]
"(Default)" = "VLC media file (.xa)"

[HKCR\VLC.xspf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.divx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aif\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.opus\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.bin\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u8\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.cda\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp2v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.asf]
"(Default)" = "VLC media file (.asf)"

[HKCR\VLC.m2t]
"(Default)" = "VLC media file (.m2t)"

[HKCR\VLC.m4p\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mtv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.vqf\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".SPX" = "VLC.spx"

[HKCR\VLC.m4v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m2ts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.pls\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"Publisher" = "VideoLAN"

[HKCR\Applications\vlc.exe\SupportedTypes]
".XSPF" = ""

[HKCR\VLC.rmvb\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.aiff\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mtv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.nsv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg1\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mp2v]
"(Default)" = "VLC.mp2v"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"InvokeProgID" = "VLC.DVDMovie"

[HKCR\.wv]
"(Default)" = "VLC.wv"

[HKCR\VLC.mp4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aif" = "VLC.aif"

[HKCR\VLC.aob\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp4\shell]
"(Default)" = "Open"

[HKCR\VLC.webm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.asx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wmv\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".vlc" = "VLC.vlc"

[HKCR\VLC.3gp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mlp]
"(Default)" = "VLC media file (.mlp)"

[HKCR\VLC.adts]
"(Default)" = "VLC media file (.adts)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".wma" = "VLC.wma"

[HKCR\VLC.rmvb\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gpp" = "VLC.3gpp"
".ts" = "VLC.ts"

[HKCR\VLC.rec\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".adts" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ifo" = "VLC.ifo"

[HKCR\VLC.cue]
"(Default)" = "VLC media file (.cue)"

[HKCR\VLC.webm\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayVideoCDMovieOnArrival]
"VLCPlayVCDMovieOnArrival" = ""

[HKCR\VLC.mid\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".dts" = ""

[HKCR\VLC.vob\shell]
"(Default)" = "Open"

[HKCR\.m1v]
"(Default)" = "VLC.m1v"

[HKCR\VLC.dv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".669" = "VLC.669"
".divx" = "VLC.divx"

[HKCR\VLC.wv]
"(Default)" = "VLC media file (.wv)"

[HKCR\VLC.ts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.qcp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.ogg\shell]
"(Default)" = "Open"

[HKCR\VLC.ape\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.s3m]
"(Default)" = "VLC.s3m"

[HKCR\.it]
"(Default)" = "VLC.it"

[HKCR\VLC.mid\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m3u8\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".m2v" = "VLC.m2v"
".m2t" = "VLC.m2t"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"Version" = "2.0.6"

[HKCR\VLC.ogv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mov\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.cda\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mka\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.snd\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.m4v]
"(Default)" = "VLC.m4v"

[HKCR\VLC.w64\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aob]
"(Default)" = "VLC media file (.aob)"

[HKCR\VLC.snd\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpe\shell]
"(Default)" = "Open"

[HKCR\VLC.wav\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xm\shell\Open]
"(Default)" = "Play"

[HKCR\.tts]
"(Default)" = "VLC.tts"

[HKCR\VLC.mpeg1]
"(Default)" = "VLC media file (.mpeg1)"

[HKCR\VLC.mov]
"(Default)" = "VLC media file (.mov)"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"Action" = "Play audio DVD"

[HKCR\VLC.vro\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.sdp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aiff\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpeg" = "VLC.mpeg"

[HKCR\.xspf]
"(Default)" = "VLC.xspf"

[HKCR\VLC.opus\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.b4s\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M3U8" = ""

[HKCR\VLC.m2t\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".qcp" = "VLC.qcp"

[HKCR\VLC.mp4v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpeg2\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDAudioOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.tts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp4\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.669]
"(Default)" = "VLC media file (.669)"

[HKCR\VLC.bin]
"(Default)" = "VLC media file (.bin)"

[HKCR\VLC.flv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp4\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.aob\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.mts]
"(Default)" = "VLC.mts"

[HKCR\VLC.adts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".gxf" = "VLC.gxf"

[HKCR\VLC.vro]
"(Default)" = "VLC media file (.vro)"

[HKCR\VLC.aifc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amr\shell]
"(Default)" = "Open"

[HKCR\.asx]
"(Default)" = "VLC.asx"

[HKCR\.b4s]
"(Default)" = "VLC.b4s"

[HKCR\VLC.mpeg4\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogx\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".vqf" = ""

[HKCR\VLC.w64\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3ga]
"(Default)" = "VLC media file (.3ga)"

[HKCR\VLC.mpg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xa\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.669\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.au\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m2v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.caf\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.nuv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amr\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ac3\shell]
"(Default)" = "Open"

[HKCR\VLC.CDAudio\shell]
"(Default)" = "Open"

[HKCR\VLC.wma\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ape\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ogx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.divx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".XSPF" = "VLC.xspf"

[HKCR\VLC.ape]
"(Default)" = "VLC media file (.ape)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".RMI" = "VLC.rmi"

[HKCR\VLC.a52]
"(Default)" = "VLC media file (.a52)"

[HKCR\VLC.vqf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2v\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".CDA" = "VLC.cda"

[HKCR\VLC.dv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.flac\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rm\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg4\shell]
"(Default)" = "Open"

[HKCR\VLC.3gpp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ape\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpeg1\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.tod\shell]
"(Default)" = "Open"

[HKCR\VLC.wav\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.amr\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3gp" = "VLC.3gp"

[HKCR\VLC.mp2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3ga" = "VLC.3ga"

[HKCR\Applications\vlc.exe\SupportedTypes]
".tts" = ""

[HKCR\VLC.669\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.amv\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".adts" = "VLC.adts"

[HKCR\VLC.oga\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.spx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.it\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".TTA" = ""

[HKCR\VLC.mpg\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gpp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.bin\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mka\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".3g2" = "VLC.3g2"

[HKCR\VLC.3gp\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m4p\shell]
"(Default)" = "Open"

[HKCR\VLC.3ga\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.it\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.cda\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.spx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m4a\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg4]
"(Default)" = "VLC media file (.mpeg4)"

[HKCR\VLC.mpeg1\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.amr\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.cue\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aifc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ogx\shell\Open]
"(Default)" = "Play"

[HKCR\.adts]
"(Default)" = "VLC.adts"

[HKCR\VLC.mxf\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xa\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.gxf\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.aob\shell]
"(Default)" = "Open"

[HKCR\VLC.mxf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gp2" = ""

[HKCR\VLC.rec\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.dts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2ts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpa\shell]
"(Default)" = "Open"

[HKCR\VLC.mts\shell]
"(Default)" = "Open"

[HKCR\.bin]
"(Default)" = "VLC.bin"

[HKCR\VLC.m2v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.tts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp3\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.bin\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.rm\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gpp" = ""

[HKCR\VLC.amv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aac\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3gp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.dts\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mpa\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oma\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vob\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vlc\shell]
"(Default)" = "Open"

[HKCR\VLC.s3m\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.spx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ape\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpv2" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities]
"ApplicationName" = "VLC media player"

[HKCR\VLC.nuv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.opus\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp2v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mtv" = "VLC.mtv"

[HKCR\Applications\vlc.exe\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aif" = ""

[HKCR\VLC.669\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mod\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ts]
"(Default)" = "VLC media file (.ts)"

[HKCR\VLC.amr]
"(Default)" = "VLC media file (.amr)"

[HKCR\VLC.aiff\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp3\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mp2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".CUE" = "VLC.cue"

[HKCR\VLC.m1v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.tod]
"(Default)" = "VLC.tod"

[HKCR\VLC.3g2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpe\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.xm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"ReinstallCommand" = "%Program Files% (x86)\VideoLAN\VLC\spad-setup.exe /Reinstall /S"

[HKCR\Applications\vlc.exe\SupportedTypes]
".divx" = ""
".w64" = ""
".oma" = ""

[HKCR\VLC.mid\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.mpa]
"(Default)" = "VLC.mpa"

[HKCR\VLC.wv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.f4v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.qcp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogm\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.s3m\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.flac\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.a52\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rec\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rec\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayMusicFilesOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp4\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flac\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.ogm\shell]
"(Default)" = "Open"

[HKCR\VLC.pls\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.669\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.3gp2\shell]
"(Default)" = "Open"

[HKCR\VLC.aiff\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.m2ts]
"(Default)" = "VLC media file (.m2ts)"

[HKCR\VLC.mts]
"(Default)" = "VLC media file (.mts)"

[HKCR\VLC.amr\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rmvb]
"(Default)" = "VLC media file (.rmvb)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".wmv" = ""

[HKCR\VLC.rec\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rec" = ""

[HKCR\VLC.voc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp1]
"(Default)" = "VLC media file (.mp1)"

[HKCR\.w64]
"(Default)" = "VLC.w64"

[HKCR\.mlp]
"(Default)" = "VLC.mlp"

[HKCR\VLC.wmv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.wma]
"(Default)" = "VLC media file (.wma)"

[HKCR\Applications\vlc.exe]
"(Default)" = ""

[HKCR\VLC.dts\shell]
"(Default)" = "Open"

[HKCR\VLC.m4a]
"(Default)" = "VLC media file (.m4a)"

[HKCR\VLC.3gp2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.spx\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogg\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.drc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vro\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.rm\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\.nuv]
"(Default)" = "VLC.nuv"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".drc" = "VLC.drc"

[HKCR\VLC.OPENFolder\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ram\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.vro\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m4a\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.rm\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg2]
"(Default)" = "VLC media file (.mpeg2)"

[HKCR\VLC.rec]
"(Default)" = "VLC media file (.rec)"

[HKCR\VLC.qcp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ogv]
"(Default)" = "VLC media file (.ogv)"

[HKCR\VLC.mtv\shell]
"(Default)" = "Open"

[HKCR\VLC.mp3\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aif\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.cda\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.it\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".avi" = "VLC.avi"

[HKCR\VLC.asx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mod\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".f4v" = "VLC.f4v"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M4A" = ""

[HKCR\VLC.m2ts\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlaySuperVideoCDMovieOnArrival]
"VLCPlaySVCDMovieOnArrival" = ""

[HKCR\VLC.wav\shell]
"(Default)" = "Open"

[HKCR\VLC.669\shell]
"(Default)" = "Open"

[HKCR\.mod]
"(Default)" = "VLC.mod"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m4p" = ""

[HKCR\VLC.nsv]
"(Default)" = "VLC media file (.nsv)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m4v" = ""

[HKCR\VLC.sdp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.spx]
"(Default)" = "VLC.spx"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".APE" = "VLC.ape"

[HKCR\VLC.3gp2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"Action" = "Play VCD movie"

[HKCR\VLC.ogv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.vro\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m3u\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc]
"(Default)" = "VLC media file (.mpc)"

[HKCR\VLC.ram\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mxf\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3ga\shell]
"(Default)" = "Open"

[HKCR\VLC.mtv]
"(Default)" = "VLC media file (.mtv)"

[HKCR\VLC.wma\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aob\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m1v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mlp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3g2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.amv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".voc" = "VLC.voc"
".ogv" = "VLC.ogv"

[HKCR\.m4a]
"(Default)" = "VLC.m4a"

[HKCR\VLC.mov\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.vlc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wmv]
"(Default)" = "VLC media file (.wmv)"

[HKCR\VLC.bin\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpv2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nuv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m4v\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.rm\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.rmi\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m4a\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.vro\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.vlc]
"(Default)" = "VLC.vlc"

[HKCR\VLC.b4s\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mka\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.tod\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp2v" = "VLC.mp2v"

[HKCR\VLC.m4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.asx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.flv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.3ga\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".ram" = "VLC.ram"

[HKCR\VLC.3gp2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.adts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.oga\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp4\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".webm" = "VLC.webm"

[HKCR\VLC.flv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.dv]
"(Default)" = "VLC.dv"

[HKCU\Software\Classes\.webm]
"VLC.backup" = "FirefoxHTML"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aifc" = "VLC.aifc"
".aiff" = "VLC.aiff"

[HKCR\VLC.aac\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".IT" = "VLC.it"

[HKCR\VLC.asx\shell]
"(Default)" = "Open"

[HKCR\VLC.opus\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.aac\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.webm\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.mpe]
"(Default)" = "VLC.mpe"

[HKCR\VLC.avi\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vqf]
"(Default)" = "VLC.vqf"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m2ts" = ""

[HKCR\VLC.oma\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.xm\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.m1v]
"(Default)" = "VLC media file (.m1v)"

[HKCR\VLC.mid\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2]
"(Default)" = "VLC media file (.mp2)"

[HKCR\VLC.ts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp3\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rmi\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls]
"(Default)" = "VLC media file (.pls)"

[HKCR\VLC.mtv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.it]
"(Default)" = "VLC media file (.it)"

[HKCR\VLC.asf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m1v\shell]
"(Default)" = "Open"

[HKCR\VLC.cue\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"DefaultIcon" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mxf]
"(Default)" = "VLC media file (.mxf)"

[HKCR\VLC.vob\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.m2t\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".sdp" = ""

[HKCR\VLC.webm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.tta\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".S3M" = "VLC.s3m"

[HKCR\VLC.mpe\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.tod\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.xm\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".bin" = ""

[HKCR\VLC.mpe\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.tod\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.amv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Version" = "2.0.6"

[HKCR\VLC.snd\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.nuv]
"(Default)" = "VLC media file (.nuv)"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"Action" = "Play video files"

[HKCR\VLC.ogx]
"(Default)" = "VLC media file (.ogx)"

[HKCR\Applications\vlc.exe\SupportedTypes]
".rmvb" = ""

[HKCR\VLC.mp3\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp1\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp4" = ""

[HKCR\VLC.rec\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".aob" = ""

[HKCR\VLC.drc\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cue\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.cue\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.rm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo]
"(Default)" = "VLC media file (.ifo)"

[HKCR\VLC.ogv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.f4v\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3g2]
"(Default)" = "VLC.3g2"

[HKCR\VLC.wav]
"(Default)" = "VLC media file (.wav)"

[HKCR\VLC.ts\shell]
"(Default)" = "Open"

[HKCR\VLC.flv\shell]
"(Default)" = "Open"

[HKCR\.mpeg4]
"(Default)" = "VLC.mpeg4"

[HKCR\.opus]
"(Default)" = "VLC.opus"

[HKCR\VLC.amv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MP2" = ""

[HKCR\VLC.mp4v\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"InstallLocation" = "%Program Files% (x86)\VideoLAN\VLC"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".PLS" = "VLC.pls"

[HKCR\Applications\vlc.exe\SupportedTypes]
".MOD" = ""

[HKCR\VLC.opus\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.ape]
"(Default)" = "VLC.ape"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mov" = ""

[HKCR\VLC.tta]
"(Default)" = "VLC media file (.tta)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".amv" = "VLC.amv"
".amr" = "VLC.amr"

[HKCR\VLC.tts\shell]
"(Default)" = "Open"

[HKCR\VLC.aif\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".XM" = "VLC.xm"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3g2" = ""

[HKCR\.oma]
"(Default)" = "VLC.oma"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".xa" = "VLC.xa"

[HKCR\VLC.gxf\shell]
"(Default)" = "Open"

[HKCR\VLC.gxf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayCDAudioOnArrival]
"InvokeProgID" = "VLC.CDAudio"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".rmvb" = "VLC.rmvb"

[HKCR\VLC.adt\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dts\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".nuv" = ""

[HKCR\VLC.a52\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg\shell]
"(Default)" = "Open"

[HKCR\VLC.tod\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.divx\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.flac\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.m2t\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\.vro]
"(Default)" = "VLC.vro"

[HKCR\VLC.mpeg\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".XM" = ""
".xa" = ""

[HKCR\VLC.m4p\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\VideoLAN\VLC]
"Language" = "1033"

[HKCR\.avi]
"(Default)" = "VLC.avi"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities]
"ApplicationDescription" = "VLC - The video swiss knife"

[HKCR\VLC.mp4v]
"(Default)" = "VLC media file (.mp4v)"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"VersionMajor" = "2"

[HKCR\.nsv]
"(Default)" = "VLC.nsv"

[HKCR\VLC.mts\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.flac]
"(Default)" = "VLC media file (.flac)"

[HKCR\VLC.mka\shell]
"(Default)" = "Open"

[HKCR\VLC.oga\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.xspf\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vlc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.xa]
"(Default)" = "VLC.xa"

[HKCR\VLC.rmi\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.gxf\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpeg4" = "VLC.mpeg4"
".mpeg2" = "VLC.mpeg2"
".mpeg1" = "VLC.mpeg1"

[HKCR\VLC.a52\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\.snd]
"(Default)" = "VLC.snd"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.mp4v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rmi\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpc\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mp1\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.tta]
"(Default)" = "VLC.tta"

[HKCR\VLC.vlc\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.asx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m2v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.w64\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mp3\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.3gp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.pls\shell]
"(Default)" = "Open"

[HKCR\VLC.3ga\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.sdp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.wma\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description" = "VLC Multimedia Plugin"

[HKCR\VLC.mpeg4\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.avi\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.ifo\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.nsv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.flv]
"(Default)" = "VLC media file (.flv)"

[HKCR\VLC.ac3\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp1\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp2v\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mpeg2\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mp2\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.s3m\shell]
"(Default)" = "Open"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.aifc\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.amr\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.opus\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.b4s\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"vendor" = "VideoLAN"

[HKCR\VLC.mid\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"DisplayName" = "VLC media player 2.0.6"

[HKCR\VLC.mp4]
"(Default)" = "VLC media file (.mp4)"

[HKCR\VLC.dts\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.aif\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".m2t" = ""
".m2v" = ""

[HKCR\VLC.wma\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.pls\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.aob\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpe\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.dv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.tod\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oga]
"(Default)" = "VLC media file (.oga)"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mts" = "VLC.mts"

[HKCR\VLC.dv]
"(Default)" = "VLC media file (.dv)"

[HKCR\VLC.mpa\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpv2\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.3gp2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\AudioCD\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file cdda:///%1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayCDAudioOnArrival]
"VLCPlayCDAudioOnArrival" = ""

[HKCR\VLC.cue\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpe\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mlp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.3gpp\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mp1\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.amv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.divx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"VersionMinor" = "0"

[HKCR\VLC.wmv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.oga\shell]
"(Default)" = "Open"

[HKCR\VLC.mpeg1\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.rmvb\shell]
"(Default)" = "Open"

[HKCR\.mp4]
"(Default)" = "VLC.mp4"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mp2v" = ""

[HKCR\VLC.webm]
"(Default)" = "VLC media file (.webm)"

[HKCR\.ogx]
"(Default)" = "VLC.ogx"

[HKCR\VLC.au\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m2v\shell]
"(Default)" = "Open"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpeg1" = ""
".IT" = ""
".mpeg2" = ""
".mpeg4" = ""

[HKCR\VLC.wav\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".OPUS" = "VLC.opus"

[HKCR\VLC.mtv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mkv\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.wv\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.wmv\shell]
"(Default)" = "Open"

[HKCR\VLC.w64\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.voc\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mlp" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVCDMovieOnArrival]
"InvokeProgID" = "VLC.VCDMovie"

[HKCR\VLC.m4p\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ape\shell]
"(Default)" = "Open"

[HKCR\VLC.it\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3g2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.3gpp\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.spx\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.3gpp\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m3u\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".a52" = ""

[HKLM\SOFTWARE\Clients\Media\VLC\InstallInfo]
"IconsVisible" = "1"

[HKCR\VLC.3gp2]
"(Default)" = "VLC media file (.3gp2)"

[HKCR\VLC.ogg]
"(Default)" = "VLC media file (.ogg)"

[HKCR\VLC.m2t\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpeg\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.oga\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.au\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.w64\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.opus\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".WV" = ""

[HKCR\.gxf]
"(Default)" = "VLC.gxf"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".nuv" = "VLC.nuv"

[HKCR\VLC.mp2v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mlp\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\.mka]
"(Default)" = "VLC.mka"

[HKCR\VLC.aob\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mov\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".M3U" = ""

[HKCR\VLC.mp4v\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.mkv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpe\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ifo" = ""

[HKCR\VLC.mxf\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.ogm]
"(Default)" = "VLC media file (.ogm)"

[HKCR\VLC.m4p\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m4a\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.tts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\.3gpp]
"(Default)" = "VLC.3gpp"

[HKCR\VLC.cda]
"(Default)" = "VLC media file (.cda)"

[HKCR\VLC.mkv\shell\Open]
"MultiSelectModel" = "Player"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mpe" = "VLC.mpe"
".mpg" = "VLC.mpg"
".mpa" = "VLC.mpa"
".MPC" = "VLC.mpc"
".sdp" = "VLC.sdp"

[HKCR\VLC.m2t\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.wmv\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mka\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpc\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp4" = "VLC.mp4"

[HKCR\VLC.aif\shell\Open]
"(Default)" = "Play"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".MP1" = "VLC.mp1"
".MP3" = "VLC.mp3"
".MP2" = "VLC.mp2"

[HKCR\VLC.mpeg1\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m1v\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mp2\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mka\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".S3M" = ""

[HKCR\VLC.b4s\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.flv\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.adts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.dv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.pls\shell\Open]
"(Default)" = "Play"

[HKCR\.f4v]
"(Default)" = "VLC.f4v"

[HKCR\VLC.ifo\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ogx\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.mpeg4\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpeg4\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".asx" = ""
".asf" = ""

[HKCR\VLC.mp4\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.nsv\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.m3u8\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\.a52]
"(Default)" = "VLC.a52"

[HKCR\VLC.ts\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.aob\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.OPENFolder]
"(Default)" = "VLC Play content"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".aob" = "VLC.aob"

[HKCR\VLC.mpeg2\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mpa\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.ogg\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mlp" = "VLC.mlp"

[HKCR\VLC.rmvb\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".amr" = ""
".amv" = ""

[HKCR\VLC.aifc\shell]
"(Default)" = "Open"

[HKCR\VLC.wmv\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\VLC.OPENFolder\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayVideoFilesOnArrival]
"Provider" = "VideoLAN VLC media player"

[HKCR\Applications\vlc.exe\SupportedTypes]
".CUE" = ""

[HKCR\VLC.wma\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".WAV" = ""

[HKCR\VLC.xa\shell]
"(Default)" = "Open"

[HKCR\VLC.mpc\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.caf\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.mp4\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3ga" = ""

[HKCR\DVD\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.m2v\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\Applications\vlc.exe\SupportedTypes]
".3gp" = ""

[HKCR\VLC.xm\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.webm\shell]
"(Default)" = "Open"

[HKCR\VLC.DVDMovie\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
"UninstallString" = "%Program Files% (x86)\VideoLAN\VLC\uninstall.exe"

[HKCR\VLC.mpeg2\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mpc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpeg2\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.m4v\shell]
"(Default)" = "Open"

[HKCR\VLC.caf\shell\Open]
"(Default)" = "Play"

[HKCR\Applications\vlc.exe\SupportedTypes]
".ram" = ""

[HKCR\VLC.snd\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\.mp1]
"(Default)" = "VLC.mp1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".M3U8" = "VLC.m3u8"

[HKCR\VLC.m4a\shell\Open]
"(Default)" = "Play"

[HKCR\VLC.ogv\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.mpg\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.mp4\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.ifo\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlayDVDMovieOnArrival]
"InvokeVerb" = "Open"

[HKCR\VLC.nuv\shell\Open]
"(Default)" = "Play"

[HKCR\.m3u]
"(Default)" = "VLC.m3u"

[HKCR\VLC.mp3]
"(Default)" = "VLC media file (.mp3)"

[HKCR\VLC.vlc\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mov\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.ape\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\VLCPlaySVCDMovieOnArrival]
"InvokeProgID" = "VLC.SVCDMovie"

[HKCR\.pls]
"VLC.backup" = "PerlScriptFile"

[HKCR\VLC.mov\shell\AddToPlaylistVLC]
"(Default)" = "Add to VLC media player's Playlist"

[HKCR\VLC.mpe]
"(Default)" = "VLC media file (.mpe)"

[HKCR\VLC.divx\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.mka\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rm]
"(Default)" = "VLC media file (.rm)"

[HKCR\VLC.snd\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.rec\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\VLC.s3m\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKLM\SOFTWARE\Clients\Media\VLC\Capabilities\FileAssociations]
".mp4v" = "VLC.mp4v"

[HKCR\.caf]
"(Default)" = "VLC.caf"

[HKCR\VLC.a52\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.cda\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.oma\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.xspf\DefaultIcon]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe,0"

[HKCR\VLC.mpv2\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.nuv\shell]
"(Default)" = "Open"

[HKCR\VLC.wav\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.aac\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.nuv\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.xa\shell\Open\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file %1"

[HKCR\VLC.vob\shell\Open]
"MultiSelectModel" = "Player"

[HKCR\VLC.oma]
"(Default)" = "VLC media file (.oma)"

[HKCR\VLC.dts\shell\PlayWithVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue %1"

[HKCR\Applications\vlc.exe\SupportedTypes]
".mpeg" = ""

[HKCR\VLC.mod\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.qcp\shell\PlayWithVLC]
"(Default)" = "Play with VLC media player"

[HKCR\VLC.dts\shell\AddToPlaylistVLC\command]
"(Default)" = "%Program Files% (x86)\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue %1"

[HKCR\VLC.m3u\shell]
"(Default)" = "Open"

The process smt_istartsurf.exe:3464 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "08 35 1A 7D 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "0F 58 80 7F 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 45 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.25.11, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\474.json,"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process ProtectWindowsManager.exe:3260 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 05 00 00 00 09 00 00 00 00 00 00 00"
"DefaultConnectionSettings" = "46 00 00 00 04 00 00 00 09 00 00 00 00 00 00 00"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "37 84 5F AC 16 83 D0 01"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "37 84 5F AC 16 83 D0 01"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

The process ProtectWindowsManager.exe:3220 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\services\eventlog\Application\WindowsMangerProtect]
"EventMessageFile" = "C:\ProgramData\WindowsMangerPro"
"TypesSupported" = "7"

The process gentray.exe:3508 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "21 A8 13 94 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "B6 92 F5 96 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4E 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process gentray.exe:3700 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "F3 C6 0A 99 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "12 E2 2B 9B 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4F 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process gentray.exe:1664 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "12 E2 2B 9B 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "87 8C 26 B9 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 50 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process fac9668a-7d04-4c07-a2a7-1c8ad5184195-4.exe:3984 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKLM\SOFTWARE\Wow6432Node\App Lid\kOh3UM0sElMiqev3yfmeSQG kIDfQMrDtUUKdBeZQFYRDn 4vqALxCRhdjVUQuH02yH41TJV1E8pqvbhPOggZ5Ln6qV98SgznqY9yJY5JtWQyQOBj2KP1Oo6KStyL37EiRvGTGPJMEDJGk0 f2wuncrPpvLrepeO3UC8nxb/hJI=]
"EjBZWTgzCSYnv0us2GklJd9kak/HonX7GcA9biIxImj2lk6xB/XpnoQzpEobQ4Di8Cm5mO7lN2MCHfl3qtk13f Lwvu9/2Bbl/41z66wiep4fCgs4UOAaD1Gu1t4uL/m lEmLwy3igXug1J0xltFV0VByOF7d2Q6l5XweQi9vIs=" = "1"

[HKLM\SOFTWARE\Wow6432Node\App Lid\BdC8v2inq6DW0g 17Itij/Ao6qs7VY2UO/GLLUG vwECX0QzvPokNprJa 54LBUUswWEm5FuqOnu5tFjnTqkaee0MtijumFPn5RIL3h694Qb26mrJ47q4ZppeNcqx5gSlSy5rqRSjxMv SwJaW0v4syWcWjxlduFPAWXIrOGxo8=]
"Ep6RiGazZALFlmrTnWf1Z5S23oPOb5Bdil0Tu6jOzEGh4I/ pY/mBVxLTMDLxoAWZLmghf/uhnKXU2ew/DoyBxlJZSV EJNyM3nX5DIcxGhQnPmv0Vh3JNSqHfUZQcT8ztyH69YC/0L5MiY400AtutKJLFyGrRrRZ1aJs0z5o7M=" = "1"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The process ProtectService.exe:4084 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4A 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\IHProtect]
"ptid" = "smt"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
"AutoDetect"

The process ProtectService.exe:3792 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 04 00 00 00 09 00 00 00 00 00 00 00"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"
"AutoConfigURL"
"ProxyServer"

The process framework_setup.gen:3764 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Genieo\Components\Framework\Personalization Framework]
"Path" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine"

[HKCU\Software\Genieo\Components\Framework\Personalization Framework\Components]
"Main" = "1"

The Application deletes the following value(s) in system registry:
The Application disables automatic startup of the application by deleting the following autorun value:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GenieoPlatform"

The process wpm_v20.0.0.2227.exe:3196 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\supWindowsMangerProtect]
"ptid" = "smt"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process biclient.exe:2144 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "25 CC 85 1E BF 72 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1337851866"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "96 CC D9 58 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 43 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "biclient.exe"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"vlcplayerpnua" = ""

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process firsttime_setup.exe:2072 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\genieo]
"NoModify" = "1"
"URLInfoAbout" = "http://www.genieo.com/contact-us/"
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe"
"EstimatedSize" = "28672"
"NoRepair" = "1"
"HelpLink" = "http://www.genieo.com/faq"
"Publisher" = "Genieo Innovation Ltd."
"DisplayVersion" = "1.0.400"

[HKCU\Software\Genieo\Components\FirstTime]
"UninstallURL" = "http://www.genieo.com/uninstall"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\genieo]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe"
"DisplayName" = "Genieo"

The process ChromeSync.exe:3444 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Control Panel\Desktop]
"ForegroundLockTimeout" = "0"

The process QQBrowser.exe:2268 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Application deletes the following value(s) in system registry:

The process QQBrowser.exe:3576 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Mozilla\Extends]
"AppID" = "[email protected]"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Search Page" = "http://www.istartsurf.com/web/?type=ds&ts=1430378586&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://www.istartsurf.com/web/?type=ds&ts=1430378586&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"Publisher" = "istartsurf"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Default_Search_URL" = "http://www.istartsurf.com/web/?type=ds&ts=1430378586&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command]
"(Default)" = "%Program Files% (x86)\Mozilla Firefox\firefox.exe http://www.istartsurf.com/?type=sc&ts=1430378586&from=smt&uid=535559167_198339_B48A115F"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"DisplayName" = "istartsurf"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://www.istartsurf.com/web/?type=ds&ts=1430378586&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\istartsurfSoftware\istartsurfhp]
"oem" = "smt"
"Time" = "Type: REG_QWORD, Length: 8"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Start Page" = "http://www.istartsurf.com/?type=hp&ts=1430378586&from=smt&uid=535559167_198339_B48A115F"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Search_URL" = "http://www.istartsurf.com/web/?type=ds&ts=1430378586&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
"Default_Page_URL" = "http://www.istartsurf.com/?type=hp&ts=1430378586&from=smt&uid=535559167_198339_B48A115F"

[HKLM\SOFTWARE\Clients\StartMenuInternet\VMWAREHOSTOPEN.EXE\shell\open\command]
"(Default)" = "%Program Files%\VMware\VMware Tools\VMwareHostOpen.exe http://www.istartsurf.com/?type=sc&ts=1430378586&from=smt&uid=535559167_198339_B48A115F"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command]
"(Default)" = "%Program Files% (x86)\Google\Chrome\Application\chrome.exe http://www.istartsurf.com/?type=sc&ts=1430378586&from=smt&uid=535559167_198339_B48A115F"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@""%windir%\System32]
"ie4uinit.exe"",-732" = "Finds and displays information and Web sites on the Internet."

[HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command]
"(Default)" = "%Program Files%\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1430378586&from=smt&uid=535559167_198339_B48A115F"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@""%windir%\System32]
"ie4uinit.exe"",-738" = "Start Internet Explorer without ActiveX controls or browser extensions."

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShow" = "1"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.istartsurf.com/?type=hp&ts=1430378586&from=smt&uid=535559167_198339_B48A115F"
"Search Page" = "http://www.istartsurf.com/web/?type=ds&ts=1430378586&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL" = "http://www.istartsurf.com/?type=hp&ts=1430378586&from=smt&uid=535559167_198339_B48A115F"

[HKCU\Software\Mozilla\Extends]
"UID" = "535559167_198339_B48A115F"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://www.istartsurf.com/web/?type=ds&ts=1430378586&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"
"DisplayName" = "istartsurf"

[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page" = "http://www.istartsurf.com/?type=hp&ts=1430378586&from=smt&uid=535559167_198339_B48A115F"

[HKCU\Software\Mozilla\Extends]
"ptid" = "smt"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL" = "http://www.istartsurf.com/?type=hp&ts=1430378586&from=smt&uid=535559167_198339_B48A115F"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@""%systemroot%\system32\windowspowershell\v1.0]
"powershell.exe"",-111" = "Performs object-based (command-line) functions"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"DisplayName" = "istartsurf uninstall"

[HKLM\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions]
"[email protected]" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe -ptid=smt"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"DisplayName" = "istartsurf"

The process powershell.exe:3120 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32]
"SNTSearch.dll,-505" = "Sticky Notes"
"msinfo32.exe,-100" = "System Information"
"sud.dll,-1" = "Default Programs"
"SyncCenter.dll,-3000" = "Sync Center"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0]
"powershell.exe,-102" = "Windows PowerShell ISE (x86)"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32]
"SoundRecorder.exe,-100" = "Sound Recorder"
"comres.dll,-3410" = "Component Services"
"MdSched.exe,-4001" = "Windows Memory Diagnostic"
"miguiresource.dll,-201" = "Task Scheduler"
"wdc.dll,-10030" = "Resource Monitor"
"WindowsAnytimeUpgradeUI.exe,-1" = "Windows Anytime Upgrade"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"TipTsf.dll,-80" = "Tablet PC Input Panel"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32]
"OobeFldr.dll,-33056" = "Getting Started"
"mstsc.exe,-4000" = "Remote Desktop Connection"
"sdcpl.dll,-101" = "Backup and Restore"
"pmcsnap.dll,-700" = "Print Management"
"AuthFWGP.dll,-20" = "Windows Firewall with Advanced Security"
"filemgmt.dll,-2204" = "Services"
"mycomput.dll,-300" = "Computer Management"
"rstrui.exe,-100" = "System Restore"
"dfrgui.exe,-103" = "Disk Defragmenter"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"mip.exe,-291" = "Math Input Panel"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32]
"odbcint.dll,-1310" = "Data Sources (ODBC)"
"gameux.dll,-10082" = "Games Explorer"
"AccessibilityCpl.dll,-10" = "Ease of Access Center"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%Program Files%\Windows Journal]
"Journal.exe,-3074" = "Windows Journal"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32]
"wsecedit.dll,-718" = "Local Security Policy"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0]
"powershell.exe,-101" = "Windows PowerShell ISE"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32\migwiz]
"wet.dll,-588" = "Windows Easy Transfer"
"wet.dll,-591" = "Windows Easy Transfer Reports"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32]
"SnippingTool.exe,-15051" = "Snipping Tool"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32]
"wdc.dll,-10021" = "Performance Monitor"
"recdisc.exe,-2000" = "Create a System Repair Disc"
"ie4uinit.exe,-731" = "Internet Explorer"
"ie4uinit.exe,-737" = "Internet Explorer (No Add-ons)"
"mblctr.exe,-1008" = "Windows Mobility Center"
"msra.exe,-100" = "Windows Remote Assistance"
"NetProjW.dll,-501" = "Connect to a Network Projector"
"wucltux.dll,-1" = "Windows Update"
"FXSRESM.dll,-114" = "Windows Fax and Scan"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32\Speech\SpeechUX]
"sapi.cpl,-5555" = "Windows Speech Recognition"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32]
"msconfig.exe,-126" = "System Configuration"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"ShapeCollector.exe,-298" = "Personalize Handwriting Recognition"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%Program Files%\Windows Sidebar]
"sidebar.exe,-1005" = "Desktop Gadget Gallery"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@C:\Windows\system32]
"displayswitch.exe,-320" = "Connect to a Projector"
"iscsicpl.dll,-5001" = "iSCSI Initiator"
"miguiresource.dll,-101" = "Event Viewer"
"XpsRchVw.exe,-102" = "XPS Viewer"

The process powershell.exe:3240 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

The process powershell.exe:3300 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

The process setup.exe:2120 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"ap" = "-stage:preconditions-multi-chrome-full"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome]
"VersionMajor" = "2311"
"DisplayVersion" = "42.0.2311.135"
"NoModify" = "1"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"UninstallArguments" = " --uninstall --multi-install --system-level"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}]
"Name" = "Google Chrome binaries"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"UninstallString" = "%Program Files% (x86)\Google\Chrome\Application\42.0.2311.135\Installer\setup.exe"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients\{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}]
"Name" = "Google Chrome App Launcher"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"InstallerExtraCode1" = "1"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"UninstallString" = "%Program Files% (x86)\Google\Chrome\Application\42.0.2311.135\Installer\setup.exe"
"InstallerResult" = "0"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"ap" = "-stage:creating_visual_manifest-multi-chrome-full"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome]
"DisplayName" = "Google Chrome"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"UninstallArguments" = " --uninstall --multi-install --chrome --system-level"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}]
"pv" = "42.0.2311.135"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"InstallerExtraCode1" = "17"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome]
"UninstallString" = "%Program Files% (x86)\Google\Chrome\Application\42.0.2311.135\Installer\setup.exe --uninstall --multi-install --chrome --system-level"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"InstallerError" = "2"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"Version" = "24,0,0,0"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"InstallerError" = "2"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome]
"Version" = "42.0.2311.135"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"pv" = "42.0.2311.135"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"ap" = "-multi-chrome-full"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "%Program Files% (x86)\Google\Chrome\Application\42.0.2311.135\Installer\chrmstp.exe --configure-user-settings --verbose-logging --system-level --multi-install --chrome"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome]
"InstallLocation" = "%Program Files% (x86)\Google\Chrome\Application"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"Localized Name" = "Google Chrome"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients\{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}]
"pv" = "42.0.2311.135"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"Name" = "Google Chrome"

[HKCR\Wow6432Node\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\LocalServer32]
"(Default)" = "%Program Files% (x86)\Google\Chrome\Application\42.0.2311.135\delegate_execute.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome]
"VersionMinor" = "135"
"NoRepair" = "1"

[HKCR\Wow6432Node\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\LocalServer32]
"ServerExecutable" = "%Program Files% (x86)\Google\Chrome\Application\42.0.2311.135\delegate_execute.exe"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome]
"DisplayIcon" = "%Program Files% (x86)\Google\Chrome\Application\chrome.exe,0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"(Default)" = "Google Chrome"

[HKCR\Wow6432Node\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}]
"(Default)" = "CommandExecuteImpl Class"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade]
"CommandLine" = "%Program Files% (x86)\Google\Chrome\Application\42.0.2311.135\Installer\setup.exe --on-os-upgrade --multi-install --chrome --system-level --verbose-logging"
"AutoRunOnOSUpgrade" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome]
"Publisher" = "Google Inc."

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"IsInstalled" = "1"

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"InstallerResult" = "0"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}\Commands\quick-enable-application-host]
[HKCR\Wow6432Node\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\LocalServer32]
[HKCR\Wow6432Node\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}]
[HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}\Commands\query-eula-acceptance]
[HKCR\Wow6432Node\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\Programmable]
[HKLM\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\install-extension]

The Application deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"InstallerExtraCode1"

The process genieo_setup.gen:3972 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Genieo]
"supported_langs" = ";en;"

[HKCU\Software\Genieo\Components\Partner]
"default_partner_version" = "1.0.400"
"active_partner" = "gim394750002"
"default_partner" = "genieo"
"install_monetizer_url" = ""

[HKCU\Software\Genieo]
"client_localization" = "en"

The process XTab_Setup2253.exe:3332 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\XTab"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ext\CLSID]
"{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}" = "1"

[HKLM\SOFTWARE\Wow6432Node\supTab]
"ptid" = "smt"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"TopResultURL" = "http://www.bing.com/search?q={searchTerms}&src=IE-TopResult&FORM=IETR02"
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 47 00 00 00 09 00 00 00 00 00 00 00"

[HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}\1.0]
"(Default)" = "SupTabLib"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconURL" = "http://www.bing.com/favicon.ico"

[HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}\1.0\0\win32]
"(Default)" = "%Program Files% (x86)\XTab\SupTab.dll"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
"(Default)" = "IETabPage Class"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\TypeLib]
"(Default)" = "{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\InprocServer32]
"(Default)" = "%Program Files% (x86)\XTab\SupTab.dll"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}]
"(Default)" = "IIETabPage"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved]
"{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}" = ""

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"Version" = "1.0"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\Version]
"(Default)" = "1.0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico"
"DisplayName" = "Bing"

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"(Default)" = "{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"FaviconURL" = "http://www.google.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = "{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}"

[HKLM\SOFTWARE\Wow6432Node\SupDp]
"dir" = "%Program Files% (x86)\XTab"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"FaviconURL" = "http://do-search.com//favicon.ico"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"(Default)" = "{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}"

[HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShow" = "0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"URL" = "http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}"

[HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}]
"(Default)" = "IIETabPage"

[HKCR\Wow6432Node\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}\TypeLib]
"Version" = "1.0"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"TopResultURL" = "http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
"TopResultURL" = "http://www.istartsurf.com/web/?type=ds&ts=1430378586&from=smt&uid=535559167_198339_B48A115F&q={searchTerms}"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\PROTECTEDMODESECURITY]
"CheckedValue" = "PMIL"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"FaviconURLFallback" = "http://www.bing.com/favicon.ico"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"DisplayName" = "Google"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}]
"DisplayName" = "e"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\PROTECTEDMODESECURITY]
"DefaultValue" = "PMIL"

[HKCR\Wow6432Node\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}]
"FaviconPath" = "C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{E733165D-CBCF-4FDA-883E-ADEF965B476C}.ico"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
"AutoDetect"

The process genieo_setup.exe:3460 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Genieo]
"supported_langs" = ";en;"

[HKCU\Software\Genieo\Components\Partner]
"default_partner_version" = "1.0.400"
"active_partner" = "gim394750002"
"default_partner" = "genieo"
"install_monetizer_url" = ""
"installed_partner" = "gim394750002"

[HKCU\Software\Genieo]
"client_localization" = "en"

The process WebPlayer.exe:3980 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1351234145"

[HKCU\Software\WebPlayer\AppsHat]
"start-on-windows" = "true"
"Config" = "{""group-name"":""AppsHat""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionTime" = "21 A8 13 94 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "38 0A 5F 8D 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\WebPlayer\AppsHat]
"last_config_request" = "Thu Apr 30 10:23:36 UTC 0300 2015"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "WebPlayer.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4C 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\WebPlayer\AppsHat]
"Version" = "2.13"
"first_run_complete" = "true"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"AppsHat" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process 42.0.2311.135_chrome_installer.exe:2644 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}]
"ap" = "-multi-chrome-full"

The process appshat_generic.exe:3540 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionTime" = "68 79 BE 8B 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "0F 58 80 7F 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"NoRepair" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\AppsHat Mobile Apps\Uninstall.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"NoModify" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 48 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"DisplayName" = "AppsHat Mobile Apps"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"Publisher" = "Somoto Ltd."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"DisplayVersion" = "1.0.0.0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps]
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\Uninstall.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat]

The Application deletes the following value(s) in system registry:

The process %original file name%.exe:2132 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Program Files% (x86)\Google\Update\1.3.25.11, , \??\C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe,"

The process InstallGenieo.exe:3140 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Genieo\Components\Updater\Genieo]
"Path" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"trayapp_dl" = "60"

"ieplugins_inst" = "10"

[HKCU\Software\Genieo]
"DataDir" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"framework_dl" = "300"
"jre_dl_and_install" = "600"
"framework_inst" = "1500"

[HKCU\Software\Genieo]
"set_homepage" = "0"

[HKCU\Software\Genieo\Components\Updater\Genieo]
"PrepEnv" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\prepenv_setup.exe"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"firefox_ext_inst" = "10"
"trayapp_inst" = "10"

[HKCU\Software\Genieo\Components\Updater\Genieo]
"firstTime" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\firsttime_setup.exe"

[HKCU\Software\Genieo]
"set_searchProvider" = "0"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"firefox_ext_dl" = "60"

[HKCU\Software\Genieo]
"InstallDir" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application"

[HKCU\Software\Genieo\Components\Updater\Genieo]
"Log" = "1"

[HKCU\Software\Genieo\Components\Updater\Genieo\Components]
"Main" = "1"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"ieplugins_dl" = "60"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GenieoUpdaterService" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe -wait 5"

"GenieoSystemTray" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe"

The process InstallGenieo.exe:2744 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Genieo]
"updater_status" = "/status?day=0&partner=gim394750002"

[HKCU\Software\Genieo\Components\Updater\Genieo\Components]
"LastUpdateTime" = "2015 04 30 10 23"

[HKCU\Software\Genieo\Components\Partner]
"Main" = "1"

[HKCU\Software\Genieo]
"DisableUI" = "43"

The process cscript.exe:3720 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "38 0A 5F 8D 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat]
"DisplayVersion" = "2.13"
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\tray.ico"

"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\uninstall.exe _?=C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat"
"NoModify" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat]
"DisplayName" = "AppsHat"
"NoRepair" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4B 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\WebPlayer]
"AppsHat" = "1"

To automatically run itself each time Windows is booted, the Application adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"AppsHat" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process Hiyvyhwdps.exe:3784 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\AppDataLow\Software\Crossrider]
"Bic" = "d5d8d8a61601751d467a5854a16ce35aIE"

[HKLM\SOFTWARE\Wow6432Node\Tempo]
"(Default)" = "tempo"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Wow6432Node\App Lid\Installer]
"BundledFirefox" = "1"

[HKCU\Software\InstalledBrowserExtensions\25286\Status]
"Installed" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionTime" = "38 0A 5F 8D 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"Publisher" = "Lid"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Verifier" = "e9d6e2e9e6a34b6d6a4be51af1aeacc2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"DisplayName" = "App Lid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "68 79 BE 8B 16 83 D0 01"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"UninstallString" = "%Program Files% (x86)\App Lid\Uninstall.exe /fcp=1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"CrPublisherId" = "25286"

[HKCU\Software\AppDataLow\Software\Crossrider]
"Verifier" = "e9d6e2e9e6a34b6d6a4be51af1aeacc2"

[HKCU\Software\InstalledBrowserExtensions\25286]
"65743" = "App Lid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\25286]
"65743" = "App Lid"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"DisplayVersion" = "1.36.01.22"

[HKLM\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]
"Bic" = "d5d8d8a61601751d467a5854a16ce35aIE"

[HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\25286\Status]
"Installed" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 49 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"CrAppId" = "65743"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]
"DisplayIcon" = "%Program Files% (x86)\App Lid\utils.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\InstalledBrowserExtensions\Lid]
"65743" = "App Lid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\InstalledBrowserExtensions\25286]
"65743" = "App Lid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\InstalledBrowserExtensions\25286\Status]
"Installed" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following registry key(s):

[HKLM\SOFTWARE\Wow6432Node\Tempo]

The Application deletes the following value(s) in system registry:

The process D411.tmp:2636 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "96 CC D9 58 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"
"WpadDecisionTime" = "08 35 1A 7D 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 44 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

The process trayapp_setup.gen:3804 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Genieo\Components\TrayApp\Personalization Tray Application\Components]
"Main" = "1"

[HKCU\Software\Genieo\Components\TrayApp\Personalization Tray Application]
"Path" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application"

The process genupdater.exe:2268 makes changes in the system registry.
The Application creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionTime" = "CE 09 9A 95 16 83 D0 01"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"

[HKCU\Software\Genieo\Components\Updater\Genieo]
"PrepEnv" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"gim394750002_inst" = "0"

[HKCU\Software\Genieo\Components\FirstTime]
"UninstallURL" = "http://www.genieo.com/uninstall"

[HKCU\Software\Genieo]
"InstalledVersionUpdater" = "16741"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "38 0A 5F 8D 16 83 D0 01"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"framework_dl" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""

[HKCU\Software\Genieo\Components\Framework\Personalization Framework\Components]
"Upgrading" = "1430378618"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecision" = "0"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"trayapp_dl" = "0"
"jre_dl_and_install" = "0"

[HKCU\Software\Genieo]
"InstalledVersionPartner" = "16741"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"trayapp_inst" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 4D 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"

[HKCU\Software\Genieo]
"UID" = "{17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadNetworkName" = "Network 4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"

[HKCU\Software\Genieo\Components\Updater\Genieo\ComponentsInstallTime]
"gim394750002_dl" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDecisionReason" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Application deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{AAB62F56-1F12-4B3C-A0EE-A1324874AB51}]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
"AutoDetect"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

Dropped PE files

MD5	File path
0a5e7d84f087ed065338f2b2d2526f15	c:\Program Files (x86)\App Lid\Uninstall.exe
5c1ee942419108b24097c800cccc5fcd	c:\Program Files (x86)\App Lid\fac9668a-7d04-4c07-a2a7-1c8ad5184195-4.exe
82db3ad0dfa56e4a0cff6d2fd1f72212	c:\Program Files (x86)\App Lid\fac9668a-7d04-4c07-a2a7-1c8ad5184195-5.exe
5c41588d27056b076122a4978285c19f	c:\Program Files (x86)\App Lid\utils.exe
e49f2fb0d9f02031b404b787eb716115	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\Installer\chrmstp.exe
e49f2fb0d9f02031b404b787eb716115	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\Installer\setup.exe
e208d26a00595997f1dd378e88a38fd4	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\PepperFlash\pepflashplayer.dll
1a723da82ed26889181bd06afc4194b0	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\chrome.dll
a67946d8e726a9a5435fd79eda5fe6cb	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\chrome_child.dll
74eef8f51efd57e72a4d08c28ca2ed76	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\chrome_elf.dll
0e313b5e621db0c5caf4f2abfea6a5fe	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\chrome_watcher.dll
c5b362bce86bb0ad3149c4540201331d	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\d3dcompiler_47.dll
3e90522c28991bf839e0c0a34c7a2d2e	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\delegate_execute.exe
7533fe5e6bcab8a2dff1e933cd650cfc	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\ffmpegsumo.dll
4c76235c1d82d114ca32a44bb85dc9c7	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libegl.dll
aa0f48a75fb075263cd202b96607079b	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libexif.dll
71c4f46c76abcd76f81a88346b012242	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libglesv2.dll
7daf0589ba5687c39a6c25ae63a05aa2	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\metro_driver.dll
f3593e58ce3de3f19d662bd28864463e	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\nacl64.exe
5e9df70a66ac3ddcb1927d8f32088c42	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\widevinecdmadapter.dll
77f595dee5ffacea72b135b1fce1312e	c:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\xinput1_3.dll
b4605d865bf030cd5cefcc3266a06c7f	c:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\42.0.2311.135\42.0.2311.135_chrome_installer.exe
b4605d865bf030cd5cefcc3266a06c7f	c:\Program Files (x86)\Google\Update\Install\{EAB7BD43-95BB-40FB-87B3-376482E87EF2}\42.0.2311.135_chrome_installer.exe
3abf5ec47b637b90789a94a17352a949	c:\Program Files (x86)\VideoLAN\VLC\axvlc.dll
0f554e6bf5c08b6535222ab648c65349	c:\Program Files (x86)\VideoLAN\VLC\libvlc.dll
726802c9d8d046c9e5481bcdf280baa1	c:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll
ecd2a181ccfd1dd27596570eba28f3ea	c:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
e40ddd8e88819fe1466d20eafabae0a9	c:\Program Files (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll
12f64d6dfa12e78714c10fd5fdc2c946	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll
3ed326eff30364cb5e075067163fc477	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll
85a7abc04963f5cd3a42fefd77c39c2d	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll
c2ebcc3bd69b982add11515eeffb4283	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll
9899225b8d7c40dbbc4a6d50698dac1e	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll
4c8e07951ea061ab1dde80bf4c73b818	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll
222bcca24d0799026301e80d5e56459f	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll
e0f2db90c1ed60478afa730e82f41fa1	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll
c063ab724862299844f8e7ad9094c4dd	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll
bb37437728dddd1614c28a81638a8b0f	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll
ac4e693e194017ee532372999d46c8b3	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll
b92d9d983ea78a6cbdbf36a12dab85f1	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll
ca657ababf4374adbcf5d38d85571ebd	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll
c6bc7f80c34d7623a87256af3a1eac94	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll
32948eb413e64fee10c8f90dc39b9b74	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll
46843a059ef5a25c12bfb6425696d7f1	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll
b01238a58973343c26a36b70141331e2	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll
0eb99aad935f84ffda8c7d603f39d1a3	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll
5c7c32d00b09db4e5d14d2198ac73f2c	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll
12d407a1af61ca25e6dacbafdd729b50	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll
bb874ef4d6c95fbc6217be4bbb048d8d	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll
8be5ba615ad1bede8f9afba4014204f2	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll
95f5e5b0387c10f6e5ac3869cb0838ae	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll
dc40634022d5c31417861f14ba6750a7	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll
81d80d2d5e14d2679d24b7ec35d40023	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll
b028582739f1317d7cca621cb2f791da	c:\Program Files (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll
f51d3597e49b0ab5130b5650dca3ae96	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll
fadc073f6ae1027fe75ab98bba826799	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll
dd817948c0e74325c4b6232c4bed19f4	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll
acef059dd95f4b8369f42d47363db0a4	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll
06606eb71d160df0c5d3f6b088725f7c	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll
4431b5b1328bca81e0a32132616dd189	c:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll
2822fdf2ab8aed9c0d167b91352a0940	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll
a38a2420aa56e1bd97bdab8d8dd20af2	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll
c184568eeab39ae51146749bfdad48cf	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll
f31fb0762dd569cf6e2b838cedec25bc	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll
e87bce43cf88dde6f45f37e6f7fc02b3	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll
19436f74ae1f137712e4716c65a277b7	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll
575033afd6b4fdaaa71ff92031a2690b	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll
fc6d119bc49033a967c8d4fc3f1036cb	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll
0d2ec52e7ad46d7d88d617b261c1d698	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll
e60f8420b69202a86c92d815d9832c43	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll
4b0a64fb410abb913e72f8d72a59040a	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll
9aec2920c554bc72f9cb8ab186c2e166	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll
809a9cb6160be83fc221b88fc6638a68	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll
f047027faeb1c69b7b020f433b8c9341	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll
6faf63cc508452fbc2fdc0be0c5466c5	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll
8f2bb3dfddb78c8b06e3a1b56a1d9008	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll
f6678a2d7731b8aea1c8113e0c48619d	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll
b9dec1af7b14c43996b45ec86fe25bbc	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll
6a3172ac1802b1ecb489a6d3b3ba75a2	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll
e4f3591191fbf372d95638c53d57873f	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
dcfd75537efc0981eae45d807326864a	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll
5af8298ec120b7ca641f2d2924f27253	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll
4266453c58a0fb9c3661725a03b840ad	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
11ae8ffccbdbfd5671fd36426283f7cb	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll
fb61ccd934bfa205b980b4002f3b88c9	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll
74b7dc12234df6e60dfdaaead0af43af	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll
58fa20a9f9ce7608e8dc6ba0cdaf4861	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll
7e2e6f0fd1c2f5706ea734e4c308c752	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll
f58ce925192b3796a072e89e4ece87fa	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll
dfa3a50866c4904e75b0486232564e56	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll
5bc98018b22f15e8b48bd161b20da0f6	c:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll
f82cf24dbe60a7eaf5bbcc0baae1b527	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll
6bbaec676b4aba6f9aef396ab25fbf33	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll
a76d818e0351bc9d22f9bcb7d37beb63	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll
b9cb7beeb9efffd292fa6fd68714e908	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll
b625e45887ff48f05e10fb33584499e8	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll
408451a58a82f4516ff8e8c118f9e1e1	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll
c943a4031d998269c63a976536ffbad1	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll
04bd6c7474733c0c8a8b86490ebbfac0	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll
0e1dec3fce05a087d371642c70c8977c	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll
ff60599296b3825443a97edf6f1c8a0b	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll
3a5162931f28ee5b3e6fc9ac2448cd40	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll
20f2e5cf01e7d12bb1ee269dc60caaca	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll
acc14c7e12f7549868e8ecc3da4834bd	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll
95d29d19d34109d5a75aa6459c908086	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll
450c399ac8ca22c7638b3c2ce36c8794	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll
716666f68fdfafe7571c1ec412409171	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll
a86145400c18a3632deacfec82a5e8ee	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll
dfef8151c4f5bca028396fbe32b6fd17	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll
a49a1829f9da8eac0be5f36588431c94	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll
38ddf38adf6259bddfe3908e1e637dc4	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll
f31e9c3af683a11855f4c0de2e11ef87	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll
58414022d9d82064a49ec54f147f674f	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll
845a48974f61268163cfb214e2a71692	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libopus_plugin.dll
1d7b0cadf485d1f400a99ab394f8dc3f	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll
c9229bb7994bddc3fbc2b1aae0f333ed	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll
07477b93b605b56f5f068caa32a034a8	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll
8c9eaf03f62ab069d285e013c79418cb	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll
e3e1d00a049b4869a6c600e71babe83e	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll
ba8703adf415b7570a3248f95c0d25a0	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll
be4959bada98a3626c5295c2ecea7935	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll
cab1094aa0f4ea9f541b048b75ac95a0	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll
f1312655e43c7d55d31bd70c57666b5c	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll
11edafa2f2f956a59a0dd82c7eb0fad2	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll
c40a03af6af2bacd1b9b606f51d4c760	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll
9c0cb4d47ae9586241d612d8bf6dd73f	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll
e80f345f74c775712dde4bc011a249da	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll
e9a51d2552fdd0de9eb64f97049f06cc	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll
2bd4b0d062cc7642caa805ffdbc0b471	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll
b69acd4b7b7c0a170d889a0985ccaf6b	c:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll
386359d11b01890aea728d4673fedc72	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll
d64a3b466875c2a60c5f157ffec365c1	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll
ceb3c148b75c47809cd6eb5eb07f7b35	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll
efd527e713dd00bbe0f60cabf83fec15	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll
c809f65a9663dd59d62aa2a1955c9c86	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll
7489313d5d4346a2c3979dbdf70c1cd7	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll
ed4875e83439b7ec27224fd4456bb7e3	c:\Program Files (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll
b81f7e3c8dd982ff1449531508e92edc	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll
4e0b50dfc05fb76ef5f92210b8362869	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll
b69bd38debe131f861be0dc868077604	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll
0ae7ae710bfe5afed41b2360e876390a	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll
f8c8c1f19b2565a165239d5f2720fb5b	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll
480b8e30c45c5b0465ec552f1939afe8	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll
4457329c29b3ec90bda84f9794711dcf	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll
9cd8d79385397f16c0544090ee7d8e68	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll
349cf2f1ce3f3dcccabdc23d968f5abe	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll
ffd52969d9c1d0b338470b78bff181d3	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll
5d5df9a38019ef78fbc63504657be9e8	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll
e4721a7a657b1eb6fc28f30f5709455b	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll
724f637edf928035fe8c05938afb747a	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll
5cc3c7a921552696b39ec10c7d073866	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll
7aa7407e0fd5d8c131c08b5f0d7b27c0	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll
de564d297ee8e09d061d71bf413d4c75	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll
d31e5fca83c39f9f861ea70566554e99	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll
3dbd63c11a590c6253d7e7876f3fabc7	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll
abe526f9f0935af5f1eea0e68e7fe1a8	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll
227ab015547847a88737ba4de93d2286	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll
00eb7e59ba3dae163b8584d3cdb25d94	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll
af1bb91bf299855549a47b9718d0d70a	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll
1df4da3ba61fa6df844fa3909474e1ac	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll
de83c5f7a616617cf9b7eb0178edc563	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll
c90e2c320ea6e06fb2de3911d0a0f071	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll
3777a0247acb2ddb435397372a3956c5	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll
2ce172b335086b286020c9c5530768b4	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll
66330c0e2de95428c2d55b22215fd9a0	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll
094f9cf78cb6e15de6227c24785455d2	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll
ef0ecf325705202bf9f4c64d48b222b1	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll
872897302161542b2c24fc529aa0c53f	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll
c0af2a85f876d68857ccb5ef21faedab	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll
aa986c228d6c5a9b1ca65d22f458e474	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll
bb1a86abd651205047f505aaafee66f7	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll
fd1374356384c55a09d44071203e7df0	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll
0925186ca68729f61a257472c06783e4	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll
3414e98e6bd21d558c539fa7134fdd79	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll
41eac0923779b21f1405cdf2c9327114	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll
071b1037d91fbfbc100c01d58d06a893	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll
f2f7aeeb53256e83fa9f51a02dec0e73	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll
6ee2fb11b8b987bfdcf0bd15c20bf3ed	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll
9f23f67f5ae262d9c49b87a65f16c4fc	c:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll
5d69c90358e6f9fbb9177d7b798c046b	c:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll
eb59e03a069169a886aee4d34ef82d42	c:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll
82016af1bc00ec9750ab49b5dbf86837	c:\Program Files (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll
bc0b409fa7a5b325f8f9a219c106937f	c:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll
d7c0d5c2263401c48eccb862de6e08b7	c:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll
d350a2bb309ab241d543b88e15728227	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll
06eac59dfacc3500e513e0fe0d304606	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll
6df621c7e746754cacfde34da0c1a66f	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll
bdf27c708c090cd4c07af63a3d119b81	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll
cd68a2cd74744753924436552eea98e1	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll
3dc7bac08e72f0009d7c2090a30060c5	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll
6a29aef98284f6af02d1893a8fb2879a	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll
359d045157da855d013f5183b8cf58d4	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll
51fa413af324828194858c46f43eb051	c:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll
94551eb8694342808d515bb4d9140da1	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll
93720faa686b5d4b204e15435661cf59	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll
77eacac0fc43f5375c79a257492d8a1b	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll
cdde78842462774ddcd28300e5a037f7	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll
2dbe920116808b35e2ad6576d1eed8bc	c:\Program Files (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll
0f0ba534f92a815713e48bed55536d9c	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll
9dd393bee084913798863ef301158861	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll
752676414b015549a14fd61929716dec	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll
351cd9a59cc22f9ab5d01d1469fa208b	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll
af608d39eae170c8078c21b9fc4bb4e5	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll
da84edbae0eb71a23e94ede920ac5ac9	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll
40604414e220e16b53a9866ff762ea8b	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll
ddd8e190a9fbc36459a9950d1c34685f	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll
02fed9fcd80dc9be1bd91fc63c305d28	c:\Program Files (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll
479fae8686cd403e90c4cfc133789790	c:\Program Files (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll
28111f86ad2d46a7541ff0814d945744	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll
de032172c69063bcbb4e0a5fc145aabb	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll
374cf54a43380c422a3e402b094df869	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll
3dd8b88653d0621051c1ff1c6826cc89	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll
82b0b460c2f48b0b81cff3b38585ba20	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll
9bb7362b39c60b3ad00ca6c4a5f75c14	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll
e490d1ca94691933c9f74622c8d02199	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll
53a06960ca36df60fbc4f57f51561fd6	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll
38d65194182aa9407ab1bd861c766929	c:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll
f8407aebe366692883b679b80947b739	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll
e2a19b80f41310e43bcf82c387b1a044	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll
64d9312dac19c6e9477988b9775039e0	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll
291a3853617aab3c8980743e0fa426c5	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll
af86f60f7d1f7fb4a8777db7e25599dc	c:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll
b175f49d7f7d2747fd38f2a6c3ded306	c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll
4da9b7a8cba850510f0a46cc6e927d67	c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll
887831201b18d55a924465b460c9f295	c:\Program Files (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll
5f4624070236ba9592733ce11734a03e	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll
4ca50eb512e8934f0ea309c319c0c784	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll
6a807a932876b25f570693ebdcf63988	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll
29c73e2d6bdeb3e65864c5c042616468	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll
b0dc529c3ade8e0c65305c680dc88400	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll
12e0dbd3a329e8678f59b0df61aed1ac	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll
811931793247b3d270cc2254e6d845c4	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll
30ac4c7b1bc6fa587e63020b7e649750	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll
ba421bc967684e3f799741316a6e069c	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll
dcd2302ced5f161eff6160a03b75d838	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll
8f9717ada6289105ecfb6ddf2d179ae2	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll
33c18337df131170c31014bb39942356	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll
939505f6ac754ccd97b905288c8451ab	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll
f4dd48ded318464dfed8f70008e483cb	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll
1721f1108150353a25f66606998e092b	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll
44cfa30e03f06054032c71a2aa04db9d	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll
32566ef2e7c1aa7835be921c4c9a85f0	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll
17681086ded95525f5c6db5916c622f2	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll
832dcbd49d613b1c5cfa978c017b344f	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll
083d46869b6f6956c15716b28646fcb2	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll
513877c3d8066f4a5de724fcafdb742d	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll
6f29b9abd5effa2e349f0cd71f7a8511	c:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll
83c004602478f400fac82aa0722acd27	c:\Program Files (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll
fb62796a54465e236c6874aaa97e3ead	c:\Program Files (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll
4791dbeb30ffb0c806560878bce78f26	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll
1697731978f4f7e938610547f068b1c9	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll
e5abe60fb1bfc2f104dd95767c12133d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll
932e87bc271b1e5181d5f3de78fcad9b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll
b388a6b7ca1d0a9db0f56535119b55f8	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll
e1b96095bee7d984c7de2ddd494f2c90	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll
06871d54e025dba9e3ab455e5fb82237	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll
13413933f66bef0df5aa3158ef7941ed	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll
e3ae578239efa1c6b6e5b1fa2358b44d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll
154fb82b49c7288ded56efc623a8fb1b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll
756c5058ea86d802a3a924bc5f5e3d4b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll
778b40b05a55ac109a36bb0723f0ba95	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll
3f9c51a1383e283ae92ce253f9524b5b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll
d51c90e2a96a95429a29277a0a3e6624	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll
f084dfb0a64364ed5dd6f7df20173a5c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll
4c655025f9dd1571d5f117d81794e023	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll
88e37a5436b10037fb9ea08d76864fb1	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll
9c507f9a8caa9745932d9eb2d090ee67	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll
7153beaa6ff2acdcf82f0721c23e2a52	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll
0e4922093051d970cf72e378c867e782	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll
014839ea00c6393deffeff4db2b3e0c6	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll
c2ea58c10c70c45cc5689a89eaf35d2d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll
9c16e6143ed7079604d18d760271da8c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll
7da3dd79606835d255cfd9b5f95d037c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll
d76a274932b3becd0860857f9f346665	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll
60677f0809f2087a52e2b1ca2dd35d6e	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll
8f955bd6f7adc86b361349a91a6b0902	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll
c3c770a9c3f88754dd6c09f7d4cd9e4a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll
b6e64a313de78984c68859e4ad9fe03c	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll
3c78d6261b79eb33bcd8ca7c65094f86	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll
453882251004db0f4b609c1b9929703a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll
879facf25dc1294f75e76c30c36bf6ee	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll
df2e165e5f3d401433b6b32aef9b427a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll
5ecc90d0891b4e75da06ec438cd27c4a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll
ce54b8214a72bdd79094fa73755e677e	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll
9ce99dcd34173ad6fd910eb7853a2d00	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll
37114f13ab07cd0d6d4e76d7dbe7eb32	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll
5bea73757521b5990162dcbf01370da8	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll
5109865497513a755a24a64441a6d0ca	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll
ae063b9180020adfd4e11b858c44d817	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll
f4bab239cb6414eb5311ba6890873ea4	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll
7db15d8ad04e6d4324e66a29f91e392f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll
5d9934fcea679a61a4be5ef63b8b1d9f	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll
29304e769b9e80e5a826d16b88bb8f9b	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll
88febe0bb322add4e9ba1850fe51393a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll
1007782dd1a51c22a2fffe1317b52ad6	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll
18fedab9c5e73007051d2b8858331a6d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll
c212b211e3fdb3c3dc156f5fcc682888	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll
c7441d838e1e927e40649f9a65cbb104	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll
c255ce9864ab2e12973e55d2928d87fa	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll
991373f211a5a7ac84436111e646d2fa	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll
f3e31e1e40a22968a1bc73902c6a44e8	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll
9f3c9a429ccf85561769ce88a5c38d4a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll
27331430b9a29d34d9d9288a777d0f53	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll
bd70f968ec7a79418740dad232ba204d	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll
9408a172de97da6c58601ffe495e9073	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll
e95272542eb2060c6417275f11c6cd12	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll
d2536a915f01ebff77589158a3305251	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll
510cbcd7e55b94324d586d4672d8c893	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll
ea6698eadc6d45240b3f0ccaf57f1df3	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll
dde9635ecc0d7c4658c513dc7c535aad	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll
de8ea1e06885d7fcb5bc00cf857f1826	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll
ec2d9c67fa114e9e7f5a8d262ff80045	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll
6f45b3ea7c097690e2e2b5fd2a2b3924	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll
1ae0479bd0f11068ae2fa828d78720e6	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll
5c0164d30ee8e75c9982ae85291e63fa	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll
9d27b2ad0970dcba34e6b8c9817fd86a	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll
f349ba57aeeda9920e00d958a8d74708	c:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll
95faec6a26cfd13ba16088170e806d9f	c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll
8947b1abfd9547b79c3d5225fb19ff2d	c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll
aa6f648cb295cf9c1259bc019d8c3415	c:\Program Files (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll
cf739fda1e717e776a06da835435eacf	c:\Program Files (x86)\VideoLAN\VLC\uninstall.exe
e7dfe695b930c83ed9aa2f539f36e4a7	c:\Program Files (x86)\VideoLAN\VLC\vlc-cache-gen.exe
34a14f563d94a8b5b45dcdac434a072e	c:\Program Files (x86)\VideoLAN\VLC\vlc.exe
0183c88583bbf1c99d67acce017c9beb	c:\Program Files (x86)\XTab\BrowerWatchCH.dll
fd0b82d24d162e240931cfd5540d3021	c:\Program Files (x86)\XTab\BrowerWatchFF.dll
5785680870eff9ba7b4f58c726552013	c:\Program Files (x86)\XTab\BrowserAction.dll
b124f96efd0010e4f7e262f08519e9e4	c:\Program Files (x86)\XTab\CmdShell.exe
77ccf1c943665ececf9a5ce699560500	c:\Program Files (x86)\XTab\HPNotify.exe
4a345a11cc64ab72cb09ff391611dad0	c:\Program Files (x86)\XTab\IeWatchDog.dll
cc709fa63d5a536a2f8275c0cea39070	c:\Program Files (x86)\XTab\ProtectService.exe
efa257c845943b84922117758c955434	c:\Program Files (x86)\XTab\SupTab.dll
3e29914113ec4b968ba5eb1f6d194a0a	c:\Program Files (x86)\XTab\msvcp110.dll
4ba25d2cbe1587a841dcfb8c8c4a6ea6	c:\Program Files (x86)\XTab\msvcr110.dll
e29708f3781e5790424ca59a0fbb1bd3	c:\Program Files (x86)\XTab\uninstall.exe
8a8f5ebe2fd9c2e6325723209b9cdf32	c:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
8a8f5ebe2fd9c2e6325723209b9cdf32	c:\Users\All Users\WindowsMangerProtect\ProtectWindowsManager.exe
a9f1ecb4159ecaf56bbe555f81374f25	c:\Users\"%CurrentUserName%"\AppData\Local\AppsHat Mobile Apps\Uninstall.exe
0df07a80ff642d82d36c6647d13a45ea	c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\setup[1].exe
59597b3484a28dcde2d9c07fdcedac41	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\D411.tmp
d65611fbc4da8cea4e886076bec82d1e	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe
518879abe3170dabd172dfffcd165598	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe
ac8f7611f353ca9803fad5ff81900678	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe
a5f8399a743ab7f9c88c645c35b1ebb5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx87A7.tmp\NSISdl.dll
5e242fda5059ff7746c404cdd3a15966	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe
33c89fd5d5d19227de0f5cd4a0d73722	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
523df8b80625e3818cba6036efc5b679	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe
41be921214a9653b77b80086b4c5a7a5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\ChromeSync.exe
183ce47148c66717fbcd147a41a0caf6	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\ClearnC.exe
a96619564071df84cc892752df062a6d	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\RegWrite.exe
e7b4b146a101093e11ce45d203dd907b	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\XTab_Setup2253.exe
8a8f5ebe2fd9c2e6325723209b9cdf32	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\wpm_v20.0.0.2227.exe
4f9236be13917b89f7a03dea85f220fa	c:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe
d8ba5f4e6a1594d0e07c886dac0f5f8c	c:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\Uninstall.exe
ac81a34dd4d4b173fb78897fa6fe719f	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\debugInfoCollector.exe
e032af67bae3ef498bc50c9435310641	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\NativeUtils.dll
58aa210b2188876b1beb1bb0e796ac20	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\genieutils.exe
3d7d0dc1234271fd88618c571294ee64	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\x64\NativeUtils.dll
6e92fc22a6541bc4e5a78b37624e23d7	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\bin\license.exe
03bec7106b2e338a2ea305fb670a3efa	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\genuninstallui.exe
03bec7106b2e338a2ea305fb670a3efa	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\genuninstallui.exe
83a2f2256120d07303a589a3a173c080	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe
83a2f2256120d07303a589a3a173c080	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\partner_uninstall.exe
279f9df88a8c988a630547f5c485e7c6	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe
7bfb3be3e7b0aea2b8d3df8fb28e11c7	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\IeSearchProvider.exe
f49080e1e1330bd4c712da5109d19085	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\firsttime_setup.exe
fd1018bc2d2e13587bea7add468e2149	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe
9edafc76bc2e693ba0387ec4f3d81ce3	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\genieo_temp\InstallGenieo.exe
dd7565902d9d990e163cf231782f5c81	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\genieo_temp\genieo_setup.exe
bc0917682cc2d59539b7e6c6ed2da3ca	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\uninstall\Elevate.exe
f37d900bd0494d9dbbc688bb407d7061	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\uninstall\updater_uninstall.exe
dc18fb53cbc6626ad24459faae898aba	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\firsttime_uninstall.exe
634f09783517492c457987eddb48f94a	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\framework_uninstall.exe
4b9161c61c4ce0b3a6e39418df7a50a4	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\trayapp_uninstall.exe
a5abe7fde433ba716f9cdb3b6c2a9c08	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\framework_setup.gen
dd7565902d9d990e163cf231782f5c81	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\genieo_setup.gen
d8dfbd86e6df480587a4b210c5b61184	c:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\trayapp_setup.gen
a5bfd6a87161d5dfa81cb5c2c6d29488	c:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name:
Product Name:
Product Version:
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 2.0.0.0
File Description: Powered by BetterInstaller
Comments:
Language: Language Neutral

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	28860	29184	4.36907	33e8227bf6edbf3997e3d0895494668e
.data	36864	140	512	0.818223	1b0351714f371c0ba066871d4e504b00
.rdata	40960	3196	3584	3.54441	88a268b1fac88e9fad865c68cf3abce2
.bss	45056	110088	0	0	d41d8cd98f00b204e9800998ecf8427e
.idata	155648	4932	5120	3.53424	11c816edc4ef9cc4aa5511f8a707232b
.ndata	163840	36864	1024	0	0f343b0931126a20f133d67c2b018a3b
.rsrc	200704	17800	17920	3.9497	3b952b6cf19449d255a36efe2cd57cc1

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 3673
7f6d030a23f210ff0f767468fe3edd48
2c4763bc78f7eafb65376a7b2e756179
381462a26a3c05eb9f139a9b79e0fe03
d5baefe73b7e8b7477726a667ec81f54
483c5d5b66246b5a4976ad64c3e47476
e0952b912819f49e90dfd4ca6729ede2
6e24b0041379da8b06a4f22ac4d660b4
41e5ae8b69def919dba700217f2943e7
114eb1ede34ad8e19614ea2c27936708
1e85752321decc748975780ffc5f7399
9fe8b39c75f8ed0d56094fe69fbf2c3f
0f8cfe6c36d70739199896a29a9ab59e
9c25ad5c86c1bf46d4564075b019e71c
b9569d981dd7f0516c10295bcb118f65
f3a31b785aef97068400d0987e8505fa
bbef8102d6345f6e5aea4567f3493da7
52900543c17a5e7bf2dfca79aff4ed8e
5423049c0be0b64dd47e76f4552912c0
e994aa2020aa429e7ed46bde26100014
90351671e65f1bb12916d1e9ec86ed49
13df569a80b0b685ba250ad7617fe738
a16c30b5aa236dc78beea2d35406b2b7
b3fa5976434ce1e51a1bd370e2aefd3c
7f9d59c48734f851495f71f0c539537b
22754d84b6a8863fdb8bcc5c56c849cb

URLs

URL	IP
hxxp://installer.betterinstaller.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
hxxp://dreejadsuld8c.cloudfront.net/images/Tokyo/tokyoLightGrayStripesBG.jpg	54.192.202.202
hxxp://dreejadsuld8c.cloudfront.net/images/Tokyo/tokyo_sprite_full.png	54.192.202.202
hxxp://installer.betterinstaller.com/installer/ajax
hxxp://dreejadsuld8c.cloudfront.net/sponsored/istartsurf/eula-istartsurf.html	54.192.202.202
hxxp://dreejadsuld8c.cloudfront.net/affiliates/eula.html	54.192.202.202
hxxp://a1726.d.akamai.net/sd?is=sm
hxxp://d3ffn9rvm681fx.cloudfront.net/affiliates/eula.html
hxxp://d3i779maf1zmkk.cloudfront.net//images/Tokyo/tokyo_default_logo.png	54.230.202.5
hxxp://d3i779maf1zmkk.cloudfront.net/sponsored/swiftrecord/eula-swiftrecord.html	54.230.202.5
hxxp://www.girlliuxiaowei.com/home/smt_istartsurf.exe	208.43.230.100
hxxp://d3zcfo8zs4s5u.cloudfront.net/mirror/nerocrossrider/appshat_generic.exe	54.239.168.201
hxxp://s3-1-w.amazonaws.com/partner/gim394750002/release/live/InstallGenieo.exe
hxxp://download.betterinstaller.com/softwares/5/2/vlc-2.0.6-win32.exe	78.138.97.8
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=swiftrecord&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=1&index_in_screen=1&index_in_session=1&display_height=155&0.33231163602869146
hxxp://redirector.gvt1.com/edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe	216.58.209.174
hxxp://r7.sn-2apm-f5fd.gvt1.com/edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=swiftrecord&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=1&index_in_screen=1&index_in_session=1&0.7530230079541508
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=istartsurf&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=2&index_in_screen=1&index_in_session=2&display_height=50&0.09724644423417455
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=istartsurf&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=2&index_in_screen=1&index_in_session=2&0.3654363112618356
hxxp://installer.betterinstaller.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=appshat_madness&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=3&index_in_screen=1&index_in_session=3&display_height=75&0.15874706407308353
hxxp://installer.betterinstaller.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=4&index_in_screen=1&index_in_session=4&0.41939162852451905
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=swiftrecord&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=1&index_in_screen=1&index_in_session=1&0.8430300459453166
hxxp://theswiftrecord.com/mg?alpha=SRV6Ig8LKEsMPX0pVQgASFEpLw9JU3hTCE0KeGkbSkU7NwptbGdQaE4keyxcEgViAXs9EGciRVJhK3ltWh1AL30xQmZtBBlYQzZrVi9y
hxxp://theswiftrecord.com/fp?alpha=UwpSIG8NAT1tAyNZfQpgUk4BLW9TVkRRLnQLEz8zVB5fIClRe1UkcFFBRiM/Eh9XBBZOeDUnXlIEAXt/SykmVGpOChg7GwJRMDN5dl4pLXAQC1FsMUQSBVRqLWRSYnpWXhM0awNwW18DVE1OOz0JGV90EFJ0PCYwTgwDfm8EHHAtf0BPQX48H1NCNT57GixOfUAWRHZiVV4PTGokdFY3bgRSHjVuFndSRgdYWBwkLlwbRydHQyg+NH8SAWMkJgMBd2gJWV1DZDddChtyY3pJNDIJZQAGM2dIDQddbiViUGBlBBhSOw1fKAYJRhJYOnNoWkIDIFE9MD8rLksLAUZvExp3dBRMCBg8bXZTQjhLJw1VU2tkE1VsQkwMA0FuJWJZEHEmXHxCHgQqPhFsUS9b
hxxp://theswiftrecord.com/ii?alpha=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
hxxp://theswiftrecord.com/if?alpha=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
hxxp://installer.betterinstaller.com/pinger?event_type=install_fail&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=swiftrecord&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=1&index_in_screen=1&index_in_session=1&0.2052016786790497
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action1=xa.geoip&action2=visit&action3=smt.visit.istartsurf&update1=ref,smt&update2=identifier,installer&update3=version,6.6.86.1606&update4=nation,us&update5=language,en
hxxp://dqoup4b5zs0bi.cloudfront.net/infv5/index/3428/bnd	54.239.168.100
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=istartsurf&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=2&index_in_screen=1&index_in_session=2&0.3480514426288644
hxxp://dlrkbt247pbk6.cloudfront.net/3428_3b67a5ef5d450c1556c543c6323981d9/1.pak	54.230.203.38
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.dlzip1.istartsurf.finish,2
hxxp://log.very911.com/install.gif?bundle=istartsurf&ptid=smt&uid=535559167_198339_B48A115F	184.173.191.224
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.hp
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ds
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.regok
hxxp://download.dynect.mozilla.net/?product=firefox-34.0.5-complete&os=win&lang=en-US
hxxp://www.google.com/
hxxp://a1284.g.akamai.net/pub/firefox/releases/34.0.5/update/win32/en-US/firefox-34.0.5.complete.mar
hxxp://www.google.com.ua/?gfe_rd=cr&ei=XdhBVYTwBpGDNITQgNAB	173.194.113.215
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.nt.ff.tab
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.finish
hxxp://d3i779maf1zmkk.cloudfront.net/infv5/index/3428/3rd	54.230.202.5
hxxp://dlrkbt247pbk6.cloudfront.net/3428_92a5d683c188790231b1aa2af09de41e/2.pak	54.230.203.38
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ClearnC
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.wpm
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ient
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.RegWrite
hxxp://xa.xingcloud.com/v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ChromeSync
hxxp://xa.xingcloud.com/v4/sof-installer/MAS_WIN7X64_adm_1FEBFBFF000306C3?action=smt.chromesyn.exist
hxxp://installer.betterinstaller.com/pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=istartsurf&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=2&index_in_screen=1&index_in_session=2&0.7277258088139926
hxxp://installer.betterinstaller.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=appshat_madness&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=3&index_in_screen=1&index_in_session=3&0.9077707321676313
hxxp://cds.c5z6s5a3.hwcdn.net/smt2b/all/hat/row/setup.exe
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=100&n=init_start_funnel_step_name&rnd=1430378605
hxxp://ipgeoapi.com/	184.73.240.6
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=started&app=65743&appver=0&ver=1_36_01_22&version_date=15-04-30&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=C6473A77A4B54754A5C550B36164731API&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_47&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1073750533&asw3=-2147483136&asw4=32768&crtnm=na&mdat=&procstarttime=1430378605&procruntime=2&rnd=1430378607
hxxp://s3-website-us-east-1.amazonaws.com/installer-error.gif?action=sesamy&app=65743&appver=0&ver=1_36_01_22&version_date=15-04-30&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=C6473A77A4B54754A5C550B36164731API&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1073750533&asw3=-2147483136&asw4=32768&crtnm=na&procstarttime=1430378605&procruntime=2&rnd=1430378607
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=3&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000820&country=ua&app=65743&os=7(64bit)&defbro=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430378605&asw=0_1073750533_-2147483136_32768&browser=ff&rnd=1430378605
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=200&n=init_end_funnel_step_name&rnd=1430378608
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=300&n=deploy_start_funnel_step_name&rnd=1430378608
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1430378609
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=500&n=deploy_notification_start_funnel_step_name&rnd=1430378609
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1430378610
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=700&n=deploy_ch_start_funnel_step_name&rnd=1430378610
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=800&n=deploy_nova_start_funnel_step_name&rnd=1430378610
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=900&n=deploy_ff_start_funnel_step_name&rnd=1430378610
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1430378612
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1430378612
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1430378612
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1430378613
hxxp://s3-website-us-east-1.amazonaws.com/utility.gif?report=fdata&f=1&c=000820&i=10000&n=deploy_end_funnel_step_name&rnd=1430378613
hxxp://s3-website-us-east-1.amazonaws.com/installer.gif?action=finished&LFMR=_ffDll_0&app=65743&appver=&ver=1_36_01_22&version_date=15-04-30&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=C6473A77A4B54754A5C550B36164731API&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_47&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1073750533&asw3=-2147483136&asw4=32768&crtnm=na&procstarttime=1430378605&procruntime=9&rnd=1430378614
hxxp://xa.xingcloud.com/v4/sof-ient/535559167_198339_B48A115F?action0=xa.geoip&action2=visit&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,2.8.8.2102&update4=chptid,smt
hxxp://xa.xingcloud.com/v4/sof-ient/535559167_198339_B48A115F?action1=install.smt
hxxp://s3-website-us-east-1.amazonaws.com/apps.gif?action=install&app=65743&appver=&ver=1_36_01_22&version_date=15-04-30&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=C6473A77A4B54754A5C550B36164731API&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1430378605&lifetime=0&silent=1&crtnm=na&procstarttime=1430378605&procruntime=9&rnd=1430378614
hxxp://cds.c5z6s5a3.hwcdn.net/monetization.gif?event=4&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000820&country=ua&app=65743&os=7(64bit)&defbro=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430378605&asw=0_1073750533_-2147483136_32768&browser=ff&rnd=1430378605
hxxp://xa.xingcloud.com/v4/searchprotect/535559167_198339_B48A115F?action0=xa.geoip&action1=visit&action2=install
hxxp://xa.xingcloud.com/v4/searchprotect/535559167_198339_B48A115F?action=visit.heartbeat.smt&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,4.0.1.2253
hxxp://bigspeedpro.com/webplayer/appshat/config.json
hxxp://appshat.com/images/64x64.ico
hxxp://appshat.com/images/16x16.ico
hxxp://appshat.com/home
hxxp://appshat.com/css/main.css
hxxp://appshat.com/css/product.css
hxxp://appshat.com/css/style.css
hxxp://appshat.com/css/lightbox.css
hxxp://appshat.com/js/scripts.js
hxxp://googleapis.l.google.com/ajax/libs/jquery/1.7.2/jquery.min.js
hxxp://googleapis.l.google.com/ajax/libs/jqueryui/1.10.3/jquery-ui.min.js
hxxp://googleadapis.l.google.com/css?family=Abel
hxxp://appshat.com/js/jquery.smooth-scroll.min.js
hxxp://appshat.com/js/lightbox.js
hxxp://appshat.com/images/logo.jpg
hxxp://appshat.com/thumbnails/banner/images/assets/6/e/6ef6fd5410a7fb481fe6841cb381c046.jpg
hxxp://appshat.com/thumbnails/banner/images/assets/5/b/5b8f93845e4dd380fec57bc644ec49d1.jpg
hxxp://appshat.com/thumbnails/banner/images/assets/1/7/1759703220576e41cab39feb18a11b14.png
hxxp://appshat.com/thumbnails/banner/images/assets/1/f/1f8ffa22b53dfc2f6b7f1850bb6b73e8.png
hxxp://ssl.gstatic.com/s/abel/v6/3YEwT2a1878zysq92S8_9w.eot	216.58.209.163
hxxp://clients.l.google.com/analytics.js
hxxp://clients.l.google.com/r/collect?v=1&_v=j35&a=18244230&t=pageview&_s=1&dl=http://www.appshat.com/home&ul=en-us&de=utf-8&dt=Apps Hat&sd=32-bit&sr=1716x901&vp=1018x770&je=0&_u=AEAAAAAAI~&jid=426254402&cid=99994774.1430378617&tid=UA-42656881-1&_r=1&z=140627520
hxxp://appshat.com/images/4.5stars.jpg
hxxp://appshat.com/images/5.0stars.jpg
hxxp://appshat.com/thumbnails/icon/images/assets/f/4/f4e4b853ddab3b763f0af17d513631bd.png
hxxp://appshat.com/thumbnails/icon/images/assets/6/a/6a12dc1a298e870b610a58a56ba0f5ec.jpg
hxxp://appshat.com/images/3.0stars.jpg
hxxp://appshat.com/thumbnails/icon/images/assets/e/5/e54e8c720dffffa619c3b0eacec9381a.png
hxxp://appshat.com/thumbnails/icon/images/assets/8/3/83a4cee7a59522b93ed0ae1fa73ce8f3.png
hxxp://installer.betterinstaller.com/pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=appshat_madness&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=3&index_in_screen=1&index_in_session=3&0.6446431586493143
hxxp://appshat.com/thumbnails/icon/images/assets/2/3/23428f8768d928d2bd45dd3b0c4d0057.png
hxxp://appshat.com/thumbnails/icon/images/assets/f/1/f1ed3cd0cae7a3524376e6f9369c7ab8.png
hxxp://appshat.com/thumbnails/icon/images/assets/b/b/bbbde9554589bda63791709a6785e0a3.png
hxxp://appshat.com/thumbnails/icon/images/assets/0/7/07fce0a4ff78cc7e6376e227f046ce06.png
hxxp://appshat.com/thumbnails/icon/images/assets/5/2/52d5414e7372639389ab7e9e4d479aee.png
hxxp://appshat.com/thumbnails/icon/images/assets/3/d/3d8bbea6bcae57d705c676f7050a7d51.png
hxxp://appshat.com/images/4.0stars.jpg
hxxp://appshat.com/thumbnails/icon/images/assets/d/a/da84c206c2019448521379d2ff837774.png
hxxp://appshat.com/thumbnails/icon/images/assets/5/6/567f43cb72fe3ac6419369953394cadd.png
hxxp://appshat.com/images/logo_illust.jpg
hxxp://appshat.com/images/close.png
hxxp://ghs.l.google.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&data=updater_ping=&revision_core=0&revision_updater=0&revision_partner=0&os_version=Microsoft Windows 7 Professional Service Pack 1 (build 7601), 64-bit&java_version=1.6
hxxp://installer.betterinstaller.com/pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=4&index_in_screen=1&index_in_session=4&0.4295342589493141
hxxp://s3-1-w.amazonaws.com/partner/gim394750002/release/live/partner_manifest.xml
hxxp://s3-1-w.amazonaws.com/partner/gim394750002/release/r16741/genieo_setup.gen
hxxp://s3-1-w.amazonaws.com/core/release/r16741/updater_manifest.xml
hxxp://s3-1-w.amazonaws.com/core/release/r16741/manifest.xml
hxxp://s3-1-w.amazonaws.com/core/release/r16741/trayapp_setup.gen
hxxp://s3-1-w.amazonaws.com/core/release/r16741/framework_setup.gen
hxxp://www.theviilage.com/windowspm/up?ptid=smt&sid=WindowsMangerProtect&ln=en_us&ver=20.0.0.2227&uid=&upv=	50.97.33.37
hxxp://www.google.com.ua/?gfe_rd=cr&ei=y9hBVeuACdfANPvFgPgJ	173.194.113.215
hxxp://ghs.l.google.com/utils/whatsmyip.jsp
hxxp://s3-1-w.amazonaws.com/misc/preset_feeds_override2.json
hxxp://ghs.l.google.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&engine_started=&version_core=ver. 2.7.688, rev. 16741&version_partner=1.0.400&java_version=1.6.0_18&os=Windows 7&os_version=6.1
hxxp://clients.l.google.com/__utm.gif?utmwv=4.7.2&utmn=209626249&utmt=event&utme=5(engine*engine_started)(1)&utmcs=UTF-8&utmje=1&utmhid=1654674914&utmac=UA-27085171-1&utmcc=__utma=999.1088082643.1430378700.1430378700.1430378701.1;+__utmz=999.1430378701000.1.1.utmcsr=(direct)\|utmccn=(direct)%7utmcmd=(none);&gaq=1
hxxp://yandex.ua/yandsearch?rdrnd=739957&text=sdf&lr=147&redircnt=1428581802.1	77.88.21.11
hxxp://yastatic.net/tableau/tableau.html?device=desktop&lang=uk&target=blank&preset=ua&service-id=www
hxxp://yandex.ua/yandsearch	77.88.21.11
hxxp://ya.ru/	213.180.193.3
hxxp://pass.yandex.com/?retpath=http://yandex.ua/yandsearch?text=sdf&lr=147&redircnt=1428581802.1&fretpath=http://yandex.ua/yandsearch?text=sdf&lr=147&redircnt=1428581802.1
hxxp://yandex.ua/yandsearch?rdrnd=50263&lr=147&redircnt=1430378702.1	77.88.21.11
hxxp://pass.yandex.com/?retpath=http://yandex.ua/yandsearch?lr=147&redircnt=1430378702.1&fretpath=http://yandex.ua/yandsearch?lr=147&redircnt=1430378702.1
hxxp://ghs.l.google.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&campaign_from_download=not_found&download_browser=not_found&campaign_extract_error=failed_installPath&download_url=
hxxp://dreejadsuld8c.cloudfront.net/robots.txt	54.192.202.202
hxxp://dreejadsuld8c.cloudfront.net/	54.192.202.202
hxxp://ya.ru/robots.txt	213.180.193.3
hxxp://yastatic.net/robots.txt
hxxp://yastatic.net/
hxxp://ps-xscript.yandex.net/jslibs
hxxp://ps-xscript.yandex.net/jslibs/
hxxp://company.yandex.ru/news/news.rss
hxxp://tech.yandex.ru/jslibs/	87.250.250.218
hxxp://yandex.ua/robots.txt	77.88.21.11
hxxp://d3i779maf1zmkk.cloudfront.net/robots.txt	54.230.202.5
hxxp://d3i779maf1zmkk.cloudfront.net/	54.230.202.5
hxxp://d3ffn9rvm681fx.cloudfront.net/robots.txt
hxxp://d3ffn9rvm681fx.cloudfront.net/
hxxp://installer.betterinstaller.com/robots.txt
hxxp://tools.l.google.com/robots.txt
hxxp://tools.l.google.com/
hxxp://mozorg.dynect.mozilla.net/robots.txt
hxxp://ghs.l.google.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&bootstrap_started=
hxxp://clients.l.google.com/__utm.gif?utmwv=4.7.2&utmn=1992595107&utmt=event&utme=5(engine*bootstrap_started)(1)&utmcs=UTF-8&utmje=1&utmhid=1653241485&utmac=UA-27085171-1&utmcc=__utma=999.292792641.1430378705.1430378705.1430378705.1;+__utmz=999.1430378705617.1.1.utmcsr=(direct)\|utmccn=(direct)%7utmcmd=(none);&gaq=1
hxxp://mozorg.dynect.mozilla.net/
hxxp://company.yandex.ru/robots.txt
hxxp://company.yandex.ru/blog/index.rss
hxxp://newswww.bbc.net.uk/robots.txt
hxxp://ghs.l.google.com/robots.txt
hxxp://company.yandex.ru/company/rss/posts.xml
hxxp://newswww.bbc.net.uk/
hxxp://ghs.l.google.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&history_ie=9
hxxp://ghs.l.google.com/admin/items/get_items_to_promotion?numTimesFetched=0&uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002
hxxp://www.bbc.net.uk/news/
hxxp://www.bbc.net.uk/news
hxxp://ghs.l.google.com/admin/items/get_items_to_promotion
hxxp://company.yandex.ru/company/
hxxp://yastatic.net/morda-logo/i/favicon_islands.ico
hxxp://https.nodejs.spec.yandex.net/
hxxp://ghs.l.google.com/favicon.ico
hxxp://turner.map.fastly.net/robots.txt
hxxp://turner.map.fastly.net/
hxxp://yastatic.net/yandex-tech2-www/_/FA2t0d4VnPfgtJ9YRwNyI8OccPQ.ico
hxxp://a1638.g.akamai.net/news/1.67.0293/img/brand/news.png
hxxp://company.yandex.ru/press_releases/
hxxp://a1638.g.akamai.net/news/1.67.0293/img/correspondents/circles/markmardell.png
hxxp://turner.map.fastly.net/feedback
hxxp://a1638.g.akamai.net/news/1.67.0293/img/correspondents/circles/anthonyzurcher.png
hxxp://www.gtm.nytimes.com/robots.txt
hxxp://www.google.com/images/icons/product/chrome-32.png
hxxp://www.gtm.nytimes.com/services/xml/rss/nyt/GlobalHome.xml
hxxp://yastatic.net/lego/_/pDu9OWAQKB0s2J9IojKpiS_Eho.ico
hxxp://src.g03.yahoodns.net/robots.txt
hxxp://feedlb2.feedsportal.com/services/xml/rss/nyt/InternationalHome.xml
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/robots.txt
hxxp://src.g03.yahoodns.net/rss/mostviewed
hxxp://www.bbc.net.uk/favicon.ico
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/mostviewed
hxxp://www.bbc.net.uk/robots.txt
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/
hxxp://www.bbc.net.uk/news/election-2015-32526461
hxxp://ghs.l.google.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&history_firefox=2
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/cnn_arabic_bw.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/cnn_espanol_bw.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/cnn_mexico_bw.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/cnn_facebook_bw.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/cnn_twitter_bw.png
hxxp://cs163.wpc.taucdn.net/media/img/favicon/favicon-196x196.cb79ae3b6daf.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/cnn_googleplus_bw.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/heroes_bw.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/impact_your_world_bw.png
hxxp://a1726.d.akamai.net/cnn/.e/img/4.0/logos/freedom_project_bw.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150430133656-nepal-earthquake-gorkha-district-large-169.jpg
hxxp://www.gtm.nytimes.com/pages/international/index.html?partner=rss&emc=rss
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150429182329-new-york-protest-for-freddie-0428-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150427155529-floyd-mayweather-bling-sunglasses-smiling-large-169.jpg
hxxp://www.gtm.nytimes.com/?partner=rss&emc=rss
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150429062811-pkg-ripley-japan-comfort-woman-00002207-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/140905070556-sofia-vergara-august-2014-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150429072140-05-sexiest-women-in-the-world-0429-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150129180257-smart-bullet-change-direction-mid-air-orig-nws-00010016-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150429152540-top-barman-alex-kratena-tease-only-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150421150029-nr-freddie-gray-baltimore-officers-named-arrest-video-00014625-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150429003438-vietnam-fall-of-saigon-evacuation-anniversary-orig-mg-00015805-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/141127171824-10-lonely-planet-destinations---mt-shasta-story-top.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150429154754-pkg-paton-walsh-libya-human-smugglers-00005617-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/140818151053-pope-comfort-women---s036314271-story-top.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150429141342-nr-sot-orioles-no-fans-games-baltimore-camden-yards-00000702-large-169.jpg
hxxp://ghs.l.google.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&history_chrome=3
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/141027233053-ny-street-food-7-lumpiashack-story-top.jpg
hxxp://a1638.g.akamai.net/favicon.ico
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150424115939-sony-awards-lifestyle-tease-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150416184201-aman-pope-francis-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150430130536-audi-logo-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150428113734-defining-moments-london-marathon-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150428063123-damon-nepal-village-death-large-169.png
hxxp://a1284.g.akamai.net/robots.txt
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150429053135-nepal-rescue-1-large-169.png
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150428145859-bali-9-vigil---s046870192-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150428182048-tony-abbott---s046818710-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150427112735-pkg-last-man-to-beat-mayweather-todorov-pacquiao-00025615-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/140630100952-slacker-tips-2-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150428171541-hydrogen-pace-car-nascar-00001926-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150416100728-pacquiao-2-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150424094531-mcli-laser-cloud-tease-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150427133507-pkg-man-reunited-with-baby-found-in-dumpster-25-years-ago-00004718-large-169.jpg
hxxp://a1284.g.akamai.net/Movie-News
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150415153047-spc-vital-signs-sleep-disorders-b-00011708-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/120820111022-dollar-bills-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150428175511-barack-obama-april-28-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150429070324-01-nepal-quake-0429-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150428043717-darlington-calbuco-volcano-journey-large-169.png
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/140306150604-russian-owned-hyde-park-story-top.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150115104730-nigerian-military-soldier-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150406142655-dsc-3459-large-169.jpeg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/140208185334-iran-navy-warships-file-story-top.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150416141451-08-worlds-top-ten-islands-0417-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150429150345-indonesia-execution-tombstone-large-169.jpg
hxxp://a1638.g.akamai.net/
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150421162725-quadruple-rainbow-irpt-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150423163714-migrants---s046644079-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/140922054849-isis-militant-flames-of-war-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150415150704-01-isis-documents-0416-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150414130759-beheading-belgium-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150420160008-iran-military-parade-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150414175002-yemen-aid-plane-icrc-red-cross-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150408180918-lok-damon-iraq-isis-yazidi-captives-released-00003419-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150407162433-afghan-rape-gulnaz-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150409105546-pkg-paton-walsh-afghanistan-kabul-waits-00001913-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150408162525-us-soldiers-afghanistan-npw-large-169.jpg
hxxp://ghs.l.google.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&history_opera=0
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150403102941-cambodia-sex-revisit-freedom-project-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150331115950-high-school-students-in-eyeglasses-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150323200604-erin-dnt-elbagir-nigeria-children-for-sale-00032720-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150401182844-isis-driven-from-tikrit---s045690651-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150324165113-china-boy-reflection-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150330212733-sulaiman-and-ali-khalil-split-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150320113558-bihar-parents-exam-cheats-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150320070311-01-eclipse-0320-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150318175135-lemur-fossil-graveyard-madagascar-underwater-cave-diving-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150311142826-38-obl-photos-43-large-169.png
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150310163122-iran-esfahan-blue-tiles-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150302143142-tipping-tip-jar-i-large-169.jpg
hxxp://a1726.d.akamai.net/cnnnext/dam/assets/150306091907-hubble-supernova-explodes-star-nine-billion-years-02-large-169.png
hxxp://a1280.g1.akamai.net/www/img/favicon.svg
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/favicon.ico
hxxp://turner.map.fastly.net/favicon.ie9.ico
hxxp://turner.map.fastly.net/2015/04/30/asia/nepal-earthquake-epicenter-region/index.html
hxxp://src.g03.yahoodns.net/rss/topstories
hxxp://ghs.l.google.com/rss/cnn_world.rss
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/topstories
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/topstories/
hxxp://turner.map.fastly.net/WORLD/index.html?eref=rss_world
hxxp://ghs.l.google.com/rss/cnn_us.rss
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/top/rss;_ylt=AlwdHRvtXpvepkk.PZVQ41o5nYcB
hxxp://turner.map.fastly.net/US/index.html?eref=rss_us
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/top/rss
hxxp://ghs.l.google.com/rss/edition_sport.rss
hxxp://turner.map.fastly.net/SPORT/index.html?eref=rss_sport
hxxp://src.g03.yahoodns.net/rss/business
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/business
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/business/
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/techticker;_ylt=AgNOUJ4WcWe1kmDTnkJPdaVk7ot4
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/techticker
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/blogs/daily-ticker/rss
hxxp://www.cnbc.com/robots.txt	207.223.6.19
hxxp://www.cnbc.com/id/19746125/device/rss/rss.xml	207.223.6.19
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/blogs/daily-ticker/
hxxp://www.cnbc.com/id/19746125	207.223.6.19
hxxp://a1284.g.akamai.net/breakingnews
hxxp://www.cnbc.com/	207.223.6.19
hxxp://www.cnbc.com/id/100746255?region=world	207.223.6.19
hxxp://www.cnbc.com/favicon.ico	207.223.6.19
hxxp://www.google.com.ua/?gfe_rd=cr&ei=5thBVbSuKNfANPvFgPgJ	173.194.113.215
hxxp://www.gtm.nytimes.com/nyt/rss/HomePage
hxxp://src.g03.yahoodns.net/rss/us
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/rss/us
hxxp://feedlb2.feedsportal.com/services/xml/rss/nyt/HomePage.xml
hxxp://fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net/us/
hxxp://www.gtm.nytimes.com/pages/index.html?partner=rss&emc=rss
hxxp://www.gtm.nytimes.com/index.html?partner=rss&emc=rss
hxxp://www.gtm.nytimes.com/
hxxp://www.theviilage.com/searchprotect/up?ptid=smt&sid=IHProtectPlugin&ln=en_us&ver=4.0.1.2253&uid=535559167_198339_B48A115F&dp=0	50.97.33.37
hxxp://a1621.g.akamai.net/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?2505e12c19052e6d
hxxp://a1638.g.akamai.net/pki/crl/products/WinPCA.crl
hxxp://a1638.g.akamai.net/pki/crl/products/MicrosoftTimeStampPCA.crl
hxxp://a1726.d.akamai.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab?85b0f8b965ff9a14
hxxp://a1726.d.akamai.net/msdownload/update/v3/static/trustedr/en/D69B561148F01C77C54578C10926DF5B856976AD.crt?b7542056dbc1fff3
hxxp://crl.globalsign.net/root-r3.crl	108.162.232.200
hxxp://crl.globalsign.net/gscodesignsha2g2/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQpEOCqbmTiQA9OjY//t2aa8NSkuwQUGUq4WuRNMaUU5V7sL6Mc+oCMMmsCEhEhJz1lhSyxS2RYZQVJ48M2bQ==	108.162.232.200
hxxp://crl.globalsign.net/root.crl	108.162.232.200
hxxp://crl.globalsign.net/gscodesigng2/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRruLd2WRFk6cRYGFIqkQ4J8hxDogQUCG7YtpyKv+0+18N0XcyAH6gvUHoCEhEhhrE10BUs2OqNBLZ9KgzPNA==	108.162.232.200
hxxp://a1621.g.akamai.net/pki/crl/products/microsoftrootcert.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEALa8SdwQh28+NjkQGqVhx8=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEGO+CyDUoFQBjrKVo87pCRc=
hxxp://a1638.g.akamai.net/pki/crl/products/MicCodSigPCA_08-31-2010.crl
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEBuYvHdVmNDEAeDWzENJUpo=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U=
hxxp://e8218.ce.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc=
hxxp://www.nytimes.com/index.html?partner=rss&emc=rss	170.149.168.130
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8=	23.43.139.27
hxxp://download.genieo.com/core/release/r16741/trayapp_setup.gen
hxxp://www.appshat.com/thumbnails/icon/images/assets/3/d/3d8bbea6bcae57d705c676f7050a7d51.png
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?85b0f8b965ff9a14	87.245.221.97
hxxp://api.yandex.ru/jslibs/
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc=	23.43.139.27
hxxp://news.yahoo.com/us/
hxxp://yandex.st/lego/_/pDu9OWAQKB0s2J9IojKpiS_Eho.ico
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150430133656-nepal-earthquake-gorkha-district-large-169.jpg	87.245.221.97
hxxp://stats.nodedomax.com/apps.gif?action=install&app=65743&appver=&ver=1_36_01_22&version_date=15-04-30&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=C6473A77A4B54754A5C550B36164731API&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1430378605&lifetime=0&silent=1&crtnm=na&procstarttime=1430378605&procruntime=9&rnd=1430378614	54.231.17.60
hxxp://r7---sn-2apm-f5fd.gvt1.com/edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1	46.28.246.82
hxxp://www.bbc.co.uk/news/
hxxp://static.bbci.co.uk/news/1.67.0293/img/correspondents/circles/markmardell.png	87.245.221.98
hxxp://static01.nyt.com/favicon.ico	87.245.221.98
hxxp://news.yahoo.com/topstories/
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=swiftrecord&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=1&index_in_screen=1&index_in_session=1&0.8430300459453166
hxxp://www.appshat.com/thumbnails/icon/images/assets/2/3/23428f8768d928d2bd45dd3b0c4d0057.png
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150129180257-smart-bullet-change-direction-mid-air-orig-nws-00010016-large-169.jpg	87.245.221.97
hxxp://rss.tvguide.com/robots.txt	87.245.221.112
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150115104730-nigerian-military-soldier-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150428113734-defining-moments-london-marathon-large-169.jpg	87.245.221.97
hxxp://blog.yandex.ru/	87.250.250.85
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150427155529-floyd-mayweather-bling-sunglasses-smiling-large-169.jpg	87.245.221.97
hxxp://analytics.genieo.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&history_chrome=3
hxxp://news.yahoo.com/rss/
hxxp://edition.cnn.com/robots.txt	185.31.17.73
hxxp://download.genieo.com/partner/gim394750002/release/live/InstallGenieo.exe
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1430378613
hxxp://www.mozilla.org/robots.txt
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=500&n=deploy_notification_start_funnel_step_name&rnd=1430378609
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150428182048-tony-abbott---s046818710-large-169.jpg	87.245.221.97
hxxp://www.nytimes.com/	170.149.168.130
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/impact_your_world_bw.png	87.245.221.97
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=900&n=deploy_ff_start_funnel_step_name&rnd=1430378610
hxxp://www.nytimes.com/pages/international/index.html?partner=rss&emc=rss	170.149.168.130
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150306091907-hubble-supernova-explodes-star-nine-billion-years-02-large-169.png	87.245.221.97
hxxp://www.appshat.com/js/scripts.js
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150409105546-pkg-paton-walsh-afghanistan-kabul-waits-00001913-large-169.jpg	87.245.221.97
hxxp://news.yahoo.com/favicon.ico
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150311142826-38-obl-photos-43-large-169.png	87.245.221.97
hxxp://www.appshat.com/thumbnails/icon/images/assets/6/a/6a12dc1a298e870b610a58a56ba0f5ec.jpg
hxxp://sports.yahoo.com/	188.125.93.38
hxxp://feeds.nytimes.com/robots.txt	170.149.168.130
hxxp://www.appshat.com/js/jquery.smooth-scroll.min.js
hxxp://rss.cnn.com/rss/edition_sport.rss
hxxp://rss.news.yahoo.com/rss/topstories	188.125.73.108
hxxp://www.tvguide.com/favicon.ico
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U=	23.43.139.27
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150416141451-08-worlds-top-ten-islands-0417-large-169.jpg	87.245.221.97
hxxp://install-cdn.theswiftrecord.com/sd?is=sm
hxxp://www.appshat.com/thumbnails/icon/images/assets/5/6/567f43cb72fe3ac6419369953394cadd.png
hxxp://promotion.genieo.com/admin/items/get_items_to_promotion?numTimesFetched=0&uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002	74.125.143.121
hxxp://analytics.genieo.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&history_ie=9
hxxp://rss.nytimes.com/services/xml/rss/nyt/InternationalHome.xml	107.21.206.71
hxxp://www.bigspeedpro.com/webplayer/appshat/config.json	78.138.126.82
hxxp://www.appshat.com/images/bg_main.jpg
hxxp://www.appshat.com/thumbnails/icon/images/assets/4/4/442a5f30204dd385d17de5848683274f.png
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1430378612
hxxp://edition.cnn.com/	185.31.17.73
hxxp://news.yahoo.com/business/
hxxp://edition.cnn.com/WORLD/index.html?eref=rss_world	185.31.17.73
hxxp://www.appshat.com/thumbnails/icon/images/assets/e/5/e54e8c720dffffa619c3b0eacec9381a.png
hxxp://www.cnn.com/US/index.html?eref=rss_us	185.31.17.73
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150323200604-erin-dnt-elbagir-nigeria-children-for-sale-00032720-large-169.jpg	87.245.221.97
hxxp://www.appshat.com/images/16x16.ico
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150429072140-05-sexiest-women-in-the-world-0429-large-169.jpg	87.245.221.97
hxxp://sports.yahoo.com/favicon.ico	188.125.93.38
hxxp://yandex.st/yandex-tech2-www/_/FA2t0d4VnPfgtJ9YRwNyI8OccPQ.ico
hxxp://www.appshat.com/thumbnails/icon/images/assets/d/a/da84c206c2019448521379d2ff837774.png
hxxp://www.appshat.com/thumbnails/banner/images/assets/1/7/1759703220576e41cab39feb18a11b14.png
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/140306150604-russian-owned-hyde-park-story-top.jpg	87.245.221.97
hxxp://api.yandex.ru/jslibs
hxxp://www.bbc.co.uk/news
hxxp://rss.cnn.com/rss/cnn_world.rss
hxxp://clients1.google.com/ocsp	216.58.209.206
hxxp://news.yahoo.com/
hxxp://news.yahoo.com/rss/business
hxxp://promotion.genieo.com/admin/items/get_items_to_promotion	74.125.143.121
hxxp://finance.yahoo.com/robots.txt
hxxp://static-5.tvgcdn.net/www/img/favicon.svg
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/141027233053-ny-street-food-7-lumpiashack-story-top.jpg	87.245.221.97
hxxp://edition.cnn.com/SPORT/index.html?eref=rss_sport	185.31.17.73
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150429053135-nepal-rescue-1-large-169.png	87.245.221.97
hxxp://pass.yandex.ua/?retpath=http://yandex.ua/yandsearch?lr=147&redircnt=1430378702.1&fretpath=http://yandex.ua/yandsearch?lr=147&redircnt=1430378702.1
hxxp://news.yahoo.com/rss/mostviewed
hxxp://finance.yahoo.com/rss/blogs/daily-ticker/
hxxp://www.appshat.com/css/style.css
hxxp://dl.newinputinfoservice.com/smt2b/all/hat/row/setup.exe	69.16.175.10
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/140818151053-pope-comfort-women---s036314271-story-top.jpg	87.245.221.97
hxxp://bi.bisrv.com/pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=istartsurf&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=2&index_in_screen=1&index_in_session=2&0.7277258088139926
hxxp://rss.cnn.com/rss/cnn_us.rss
hxxp://www.appshat.com/thumbnails/icon/images/assets/5/2/52d5414e7372639389ab7e9e4d479aee.png
hxxp://www.appshat.com/images/logo.jpg
hxxp://rss.news.yahoo.com/rss/us	188.125.73.108
hxxp://www.bbc.co.uk/robots.txt
hxxp://www.appshat.com/thumbnails/banner/images/assets/6/e/6ef6fd5410a7fb481fe6841cb381c046.jpg
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=swiftrecord&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=1&index_in_screen=1&index_in_session=1&0.7530230079541508
hxxp://logs.nodedomax.com/monetization.gif?event=4&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000820&country=ua&app=65743&os=7(64bit)&defbro=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430378605&asw=0_1073750533_-2147483136_32768&browser=ff&rnd=1430378605	69.16.175.42
hxxp://stats.nodedomax.com/installer.gif?action=finished&LFMR=_ffDll_0&app=65743&appver=&ver=1_36_01_22&version_date=15-04-30&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=C6473A77A4B54754A5C550B36164731API&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_47&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1073750533&asw3=-2147483136&asw4=32768&crtnm=na&procstarttime=1430378605&procruntime=9&rnd=1430378614	54.231.17.60
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/cnn_googleplus_bw.png	87.245.221.97
hxxp://news.yahoo.com/rss/us
hxxp://install.theswiftrecord.com/fp?alpha=UwpSIG8NAT1tAyNZfQpgUk4BLW9TVkRRLnQLEz8zVB5fIClRe1UkcFFBRiM/Eh9XBBZOeDUnXlIEAXt/SykmVGpOChg7GwJRMDN5dl4pLXAQC1FsMUQSBVRqLWRSYnpWXhM0awNwW18DVE1OOz0JGV90EFJ0PCYwTgwDfm8EHHAtf0BPQX48H1NCNT57GixOfUAWRHZiVV4PTGokdFY3bgRSHjVuFndSRgdYWBwkLlwbRydHQyg+NH8SAWMkJgMBd2gJWV1DZDddChtyY3pJNDIJZQAGM2dIDQddbiViUGBlBBhSOw1fKAYJRhJYOnNoWkIDIFE9MD8rLksLAUZvExp3dBRMCBg8bXZTQjhLJw1VU2tkE1VsQkwMA0FuJWJZEHEmXHxCHgQqPhFsUS9b
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150427133507-pkg-man-reunited-with-baby-found-in-dumpster-25-years-ago-00004718-large-169.jpg	87.245.221.97
hxxp://www.appshat.com/home
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150424115939-sony-awards-lifestyle-tease-large-169.jpg	87.245.221.97
hxxp://www.appshat.com/images/64x64.ico
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1430378609
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150302143142-tipping-tip-jar-i-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150310163122-iran-esfahan-blue-tiles-large-169.jpg	87.245.221.97
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=800&n=deploy_nova_start_funnel_step_name&rnd=1430378610
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150429152540-top-barman-alex-kratena-tease-only-large-169.jpg	87.245.221.97
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w=	23.43.139.27
hxxp://tools.google.com/	173.194.116.224
hxxp://stats.nodedomax.com/installer.gif?action=started&app=65743&appver=0&ver=1_36_01_22&version_date=15-04-30&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=C6473A77A4B54754A5C550B36164731API&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_47&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1073750533&asw3=-2147483136&asw4=32768&crtnm=na&mdat=&procstarttime=1430378605&procruntime=2&rnd=1430378607	54.231.17.60
hxxp://finance.yahoo.com/rss/techticker
hxxp://crl.microsoft.com/pki/crl/products/WinPCA.crl	87.245.221.98
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150429003438-vietnam-fall-of-saigon-evacuation-anniversary-orig-mg-00015805-large-169.jpg	87.245.221.97
hxxp://www.appshat.com/js/lightbox.js
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150427112735-pkg-last-man-to-beat-mayweather-todorov-pacquiao-00025615-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150331115950-high-school-students-in-eyeglasses-large-169.jpg	87.245.221.97
hxxp://www.bbc.co.uk/news/election-2015-32526461
hxxp://www.mozilla.org/
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=appshat_madness&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=3&index_in_screen=1&index_in_session=3&0.9077707321676313
hxxp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl	87.245.221.98
hxxp://sports.yahoo.com/top/rss	188.125.93.38
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150428063123-damon-nepal-village-death-large-169.png	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150430130536-audi-logo-large-169.jpg	87.245.221.97
hxxp://news.bbc.co.uk/	212.58.244.58
hxxp://download.cdn.mozilla.net/pub/firefox/releases/34.0.5/update/win32/en-US/firefox-34.0.5.complete.mar
hxxp://analytics.genieo.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&data=updater_ping=&revision_core=0&revision_updater=0&revision_partner=0&os_version=Microsoft Windows 7 Professional Service Pack 1 (build 7601), 64-bit&java_version=1.6
hxxp://www.appshat.com/thumbnails/icon/images/assets/4/f/4f263f4be4c4396c9078d1874c05b928.png
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/140630100952-slacker-tips-2-large-169.jpg	87.245.221.97
hxxp://edition.cnn.com/favicon.ie9.ico	185.31.17.73
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/cnn_espanol_bw.png	87.245.221.97
hxxp://bi.bisrv.com/installer/ajax
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1430378612
hxxp://www.appshat.com/css/product.css
hxxp://yandex.ru/robots.txt	87.250.251.11
hxxp://bi.bisrv.com/pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=appshat_madness&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=3&index_in_screen=1&index_in_session=3&0.6446431586493143
hxxp://www.cnn.com/WORLD/index.html?eref=rss_world	185.31.17.73
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150318175135-lemur-fossil-graveyard-madagascar-underwater-cave-diving-large-169.jpg	87.245.221.97
hxxp://www.appshat.com/thumbnails/banner/images/assets/1/f/1f8ffa22b53dfc2f6b7f1850bb6b73e8.png
hxxp://news.yahoo.com/rss/topstories
hxxp://download.genieo.com/misc/preset_feeds_override2.json
hxxp://edition.cnn.com/US/index.html?eref=rss_us	185.31.17.73
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/140208185334-iran-navy-warships-file-story-top.jpg	87.245.221.97
hxxp://www.appshat.com/thumbnails/icon/images/assets/b/b/bbbde9554589bda63791709a6785e0a3.png
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/140905070556-sofia-vergara-august-2014-large-169.jpg	87.245.221.97
hxxp://www.appshat.com/thumbnails/icon/images/assets/f/1/f1ed3cd0cae7a3524376e6f9369c7ab8.png
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=appshat_madness&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=3&index_in_screen=1&index_in_session=3&display_height=75&0.15874706407308353
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150429182329-new-york-protest-for-freddie-0428-large-169.jpg	87.245.221.97
hxxp://mozorg.cdn.mozilla.net/media/img/favicon/favicon-196x196.cb79ae3b6daf.png
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/120820111022-dollar-bills-large-169.jpg	87.245.221.97
hxxp://sports.yahoo.com/robots.txt	188.125.93.38
hxxp://ajax.googleapis.com/ajax/libs/jqueryui/1.10.3/jquery-ui.min.js	216.58.211.10
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/cnn_mexico_bw.png	87.245.221.97
hxxp://www.appshat.com/thumbnails/icon/images/assets/f/4/f4e4b853ddab3b763f0af17d513631bd.png
hxxp://www.tvguide.com/
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEALa8SdwQh28+NjkQGqVhx8=	23.43.139.27
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/140922054849-isis-militant-flames-of-war-large-169.jpg	87.245.221.97
hxxp://www.appshat.com/thumbnails/icon/images/assets/b/8/b85261679e262228a562f693b3e6ef6f.png
hxxp://www.appshat.com/images/4.0stars.jpg
hxxp://rss.cnn.com/robots.txt
hxxp://rss.nytimes.com/services/xml/rss/nyt/HomePage.xml	107.21.206.71
hxxp://clubs.ya.ru/company/rss/posts.xml	77.88.21.57
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1430378612
hxxp://rss.tvguide.com/Movie-News	87.245.221.112
hxxp://www.google-analytics.com/__utm.gif?utmwv=4.7.2&utmn=1992595107&utmt=event&utme=5(engine*bootstrap_started)(1)&utmcs=UTF-8&utmje=1&utmhid=1653241485&utmac=UA-27085171-1&utmcc=__utma=999.292792641.1430378705.1430378705.1430378705.1;+__utmz=999.1430378705617.1.1.utmcsr=(direct)\|utmccn=(direct)%7utmcmd=(none);&gaq=1
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=200&n=init_end_funnel_step_name&rnd=1430378608
hxxp://static.bbci.co.uk/news/1.67.0293/img/correspondents/circles/anthonyzurcher.png	87.245.221.98
hxxp://finance.yahoo.com/rss/techticker;_ylt=AgNOUJ4WcWe1kmDTnkJPdaVk7ot4
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150408180918-lok-damon-iraq-isis-yazidi-captives-released-00003419-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150423163714-migrants---s046644079-large-169.jpg	87.245.221.97
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1430378610
hxxp://analytics.genieo.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&history_opera=0
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=700&n=deploy_ch_start_funnel_step_name&rnd=1430378610
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/heroes_bw.png	87.245.221.97
hxxp://ocsp2.globalsign.com/gscodesigng2/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRruLd2WRFk6cRYGFIqkQ4J8hxDogQUCG7YtpyKv+0+18N0XcyAH6gvUHoCEhEhhrE10BUs2OqNBLZ9KgzPNA==	108.162.232.200
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150429141342-nr-sot-orioles-no-fans-games-baltimore-camden-yards-00000702-large-169.jpg	87.245.221.97
hxxp://www.nytimes.com/robots.txt	170.149.168.130
hxxp://bi.bisrv.com/pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=4&index_in_screen=1&index_in_session=4&0.4295342589493141
hxxp://news.yahoo.com/robots.txt
hxxp://finance.yahoo.com/blogs/daily-ticker/rss
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150429070324-01-nepal-quake-0429-large-169.jpg	87.245.221.97
hxxp://download.genieo.com/core/release/r16741/framework_setup.gen
hxxp://analytics.genieo.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&bootstrap_started=
hxxp://errors.nodedomax.com/installer-error.gif?action=sesamy&app=65743&appver=0&ver=1_36_01_22&version_date=15-04-30&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=C6473A77A4B54754A5C550B36164731API&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1073750533&asw3=-2147483136&asw4=32768&crtnm=na&procstarttime=1430378605&procruntime=2&rnd=1430378607
hxxp://sports.yahoo.com/top/rss;_ylt=AlwdHRvtXpvepkk.PZVQ41o5nYcB	188.125.93.38
hxxp://www.appshat.com/images/4.5stars.jpg
hxxp://bi.bisrv.com/pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=istartsurf&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=2&index_in_screen=1&index_in_session=2&0.3480514426288644
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150415153047-spc-vital-signs-sleep-disorders-b-00011708-large-169.jpg	87.245.221.97
hxxp://download.genieo.com/partner/gim394750002/release/r16741/genieo_setup.gen
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=4&index_in_screen=1&index_in_session=4&0.41939162852451905
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/141127171824-10-lonely-planet-destinations---mt-shasta-story-top.jpg	87.245.221.97
hxxp://www.appshat.com/images/logo_illust.jpg
hxxp://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js	216.58.211.10
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150401182844-isis-driven-from-tikrit---s045690651-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150320113558-bihar-parents-exam-cheats-large-169.jpg	87.245.221.97
hxxp://logs.nodedomax.com/monetization.gif?event=3&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000820&country=ua&app=65743&os=7(64bit)&defbro=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430378605&asw=0_1073750533_-2147483136_32768&browser=ff&rnd=1430378605	69.16.175.42
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150428175511-barack-obama-april-28-large-169.jpg	87.245.221.97
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=10000&n=deploy_end_funnel_step_name&rnd=1430378613
hxxp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl	87.245.221.98
hxxp://www.appshat.com/thumbnails/icon/images/assets/0/7/07fce0a4ff78cc7e6376e227f046ce06.png
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150414130759-beheading-belgium-large-169.jpg	87.245.221.97
hxxp://promotion.genieo.com/robots.txt	74.125.143.121
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150320070311-01-eclipse-0320-large-169.jpg	87.245.221.97
hxxp://news.bbc.co.uk/robots.txt	212.58.244.58
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=300&n=deploy_start_funnel_step_name&rnd=1430378608
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo=	23.43.139.27
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?2505e12c19052e6d	87.245.221.97
hxxp://bi.bisrv.com/robots.txt
hxxp://errors.nodedomax.com/utility.gif?report=fdata&f=1&c=000820&i=100&n=init_start_funnel_step_name&rnd=1430378605
hxxp://rss.news.yahoo.com/rss/mostviewed	188.125.73.108
hxxp://bi.bisrv.com/pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=istartsurf&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=2&index_in_screen=1&index_in_session=2&0.3654363112618356
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI=	23.43.139.27
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEGO+CyDUoFQBjrKVo87pCRc=	23.43.139.27
hxxp://download.mozilla.org/?product=firefox-34.0.5-complete&os=win&lang=en-US	63.245.215.111
hxxp://www.appshat.com/images/5.0stars.jpg
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/freedom_project_bw.jpg	87.245.221.97
hxxp://install.theswiftrecord.com/if?alpha=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
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/cnn_twitter_bw.png	87.245.221.97
hxxp://pass.yandex.ua/?retpath=http://yandex.ua/yandsearch?text=sdf&lr=147&redircnt=1428581802.1&fretpath=http://yandex.ua/yandsearch?text=sdf&lr=147&redircnt=1428581802.1
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c=	23.43.139.27
hxxp://www.google-analytics.com/r/collect?v=1&_v=j35&a=18244230&t=pageview&_s=1&dl=http://www.appshat.com/home&ul=en-us&de=utf-8&dt=Apps Hat&sd=32-bit&sr=1716x901&vp=1018x770&je=0&_u=AEAAAAAAI~&jid=426254402&cid=99994774.1430378617&tid=UA-42656881-1&_r=1&z=140627520
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/cnn_facebook_bw.png	87.245.221.97
hxxp://www.google-analytics.com/analytics.js
hxxp://rss.news.yahoo.com/robots.txt	188.125.73.108
hxxp://promotion.genieo.com/favicon.ico	74.125.143.121
hxxp://edition.cnn.com/feedback	185.31.17.73
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150330212733-sulaiman-and-ali-khalil-split-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150414175002-yemen-aid-plane-icrc-red-cross-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150420160008-iran-military-parade-large-169.jpg	87.245.221.97
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=istartsurf&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=2&index_in_screen=1&index_in_session=2&display_height=50&0.09724644423417455
hxxp://download.genieo.com/partner/gim394750002/release/live/partner_manifest.xml
hxxp://rss.tvguide.com/breakingnews	87.245.221.112
hxxp://www.appshat.com/images/3.0stars.jpg
hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/D69B561148F01C77C54578C10926DF5B856976AD.crt?b7542056dbc1fff3	87.245.221.97
hxxp://analytics.genieo.com/utils/whatsmyip.jsp
hxxp://ocsp2.globalsign.com/gscodesignsha2g2/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQpEOCqbmTiQA9OjY//t2aa8NSkuwQUGUq4WuRNMaUU5V7sL6Mc+oCMMmsCEhEhJz1lhSyxS2RYZQVJ48M2bQ==	108.162.232.200
hxxp://www.appshat.com/thumbnails/banner/images/assets/5/b/5b8f93845e4dd380fec57bc644ec49d1.jpg
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150407162433-afghan-rape-gulnaz-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150416100728-pacquiao-2-large-169.jpg	87.245.221.97
hxxp://www.appshat.com/thumbnails/icon/images/assets/8/3/83a4cee7a59522b93ed0ae1fa73ce8f3.png
hxxp://analytics.genieo.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&history_firefox=2
hxxp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150429062811-pkg-ripley-japan-comfort-woman-00002207-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150421162725-quadruple-rainbow-irpt-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150324165113-china-boy-reflection-large-169.jpg	87.245.221.97
hxxp://www.google-analytics.com/__utm.gif?utmwv=4.7.2&utmn=209626249&utmt=event&utme=5(engine*engine_started)(1)&utmcs=UTF-8&utmje=1&utmhid=1654674914&utmac=UA-27085171-1&utmcc=__utma=999.1088082643.1430378700.1430378700.1430378701.1;+__utmz=999.1430378701000.1.1.utmcsr=(direct)\|utmccn=(direct)%7utmcmd=(none);&gaq=1
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150415150704-01-isis-documents-0416-large-169.jpg	87.245.221.97
hxxp://www.nytimes.com/pages/index.html?partner=rss&emc=rss	170.149.168.130
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150428145859-bali-9-vigil---s046870192-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150406142655-dsc-3459-large-169.jpeg	87.245.221.97
hxxp://international.nytimes.com/?partner=rss&emc=rss
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150428043717-darlington-calbuco-volcano-journey-large-169.png	87.245.221.97
hxxp://edition.cnn.com/2015/04/30/asia/nepal-earthquake-epicenter-region/index.html	185.31.17.73
hxxp://bi.bisrv.com/pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=swiftrecord&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=1&index_in_screen=1&index_in_session=1&display_height=155&0.33231163602869146
hxxp://clubs.ya.ru/company/	77.88.21.57
hxxp://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl	87.245.221.98
hxxp://i.cdn.turner.com/cnn/.e/img/4.0/logos/cnn_arabic_bw.png	87.245.221.97
hxxp://bi.bisrv.com/pinger?event_type=install_fail&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=swiftrecord&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=1&index_in_screen=1&index_in_session=1&0.2052016786790497
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150408162525-us-soldiers-afghanistan-npw-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150416184201-aman-pope-francis-large-169.jpg	87.245.221.97
hxxp://yandex.ru/yandsearch	87.250.251.11
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150421150029-nr-freddie-gray-baltimore-officers-named-arrest-video-00014625-large-169.jpg	87.245.221.97
hxxp://install.theswiftrecord.com/mg?alpha=SRV6Ig8LKEsMPX0pVQgASFEpLw9JU3hTCE0KeGkbSkU7NwptbGdQaE4keyxcEgViAXs9EGciRVJhK3ltWh1AL30xQmZtBBlYQzZrVi9y
hxxp://www.bbc.co.uk/favicon.ico
hxxp://analytics.genieo.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&campaign_from_download=not_found&download_browser=not_found&campaign_extract_error=failed_installPath&download_url=
hxxp://dqoup4b5zs0bi.cloudfront.net/infv5/index/3428/3rd	54.239.168.100
hxxp://www.nytimes.com/services/xml/rss/nyt/GlobalHome.xml	170.149.168.130
hxxp://download.genieo.com/core/release/r16741/manifest.xml
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150428171541-hydrogen-pace-car-nascar-00001926-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150429154754-pkg-paton-walsh-libya-human-smugglers-00005617-large-169.jpg	87.245.221.97
hxxp://download.genieo.com/core/release/r16741/updater_manifest.xml
hxxp://analytics.genieo.com/track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&engine_started=&version_core=ver. 2.7.688, rev. 16741&version_partner=1.0.400&java_version=1.6.0_18&os=Windows 7&os_version=6.1
hxxp://tools.google.com/robots.txt	173.194.116.224
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEBuYvHdVmNDEAeDWzENJUpo=	23.43.139.27
hxxp://rss.news.yahoo.com/rss/business	188.125.73.108
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150403102941-cambodia-sex-revisit-freedom-project-large-169.jpg	87.245.221.97
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150424094531-mcli-laser-cloud-tease-large-169.jpg	87.245.221.97
hxxp://fonts.googleapis.com/css?family=Abel	74.125.143.95
hxxp://install.theswiftrecord.com/ii?alpha=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
hxxp://www.appshat.com/css/main.css
hxxp://www.appshat.com/css/lightbox.css
hxxp://fonts.gstatic.com/s/abel/v6/3YEwT2a1878zysq92S8_9w.eot	216.58.209.163
hxxp://feeds.nytimes.com/nyt/rss/HomePage	170.149.168.130
hxxp://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4=	23.43.139.27
hxxp://i2.cdn.turner.com/cnnnext/dam/assets/150429150345-indonesia-execution-tombstone-large-169.jpg	87.245.221.97
hxxp://www.appshat.com/images/close.png
hxxp://static.bbci.co.uk/news/1.67.0293/img/brand/news.png	87.245.221.98
www.gstatic.com	216.58.209.195
pass.yandex.ru	213.180.193.51
apis.google.com	216.58.209.174

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

SURICATA UDPv4 invalid checksum
SURICATA IPv4 invalid checksum
ET POLICY Executable served from Amazon S3
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected
ET POLICY User-Agent (NSIS_Inetc (Mozilla)) - Sometimes used by hostile installers
ET MALWARE Win32/Toolbar.CrossRider.A Checkin
ET POLICY Vulnerable Java Version 1.6.x Detected
ET MALWARE Suspicious Mozilla User-Agent - Likely Fake (Mozilla/4.0)
GPL WEB_CLIENT server negative Content-Length attempt

Traffic

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: blog.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://blog.yandex.ru/

HTTP/1.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Thu, 30 Apr
 2015 07:25:08 GMT..Content-Type: text/html..Content-Length: 184..Conn
ection: keep-alive..Location: hXXps://blog.yandex.ru/......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: blog.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://blog.yandex.ru/
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.6.2</center>..</body>..</html>..HTTP/1
.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Thu, 30 Apr 2015 
07:25:08 GMT..Content-Type: text/html..Content-Length: 184..Connection
: keep-alive..Location: hXXps://blog.yandex.ru/..<html>..<hea
d><title>301 Moved Permanently</title></head>..&l
t;body bgcolor="white">..<center><h1>301 Moved Permanen
tly</h1></center>..<hr><center>nginx/1.6.2<
/center>..</body>..</html>....

GET /id/19746125 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Content-Length: 0

Server: aicache6x

Connection: close

Location: hXXp://VVV.cnbc.com

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=swiftrecord&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=1&index_in_screen=1&index_in_session=1&display_height=155&0.33231163602869146 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:22:06 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Thu, 30 Apr 2015 07:22:06 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /softwares/5/2/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=5735754-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache



Y...w...i...-&..%.VU.c........A.........?`...I!xo...l..X..{.5.}GQ....d
..&..1..R.. ..uT..k.}.v...4.c..`.W..S..#..;Xvm5~....:.#..Jc.k.4!......
.g......5n.Y..s~.~.......].d...&....?....Er.......a.B.CP7...S_@a/..HX.
...z....4.k.sM..N(j.!..z?O.....bSJ...2.....i..".F.>)..N.....uG.....
.&..4K..4<,Q....h].b.XU...XoO.4..|"*cH..x..u...Vj/>.]......E)...
kX..../..8c..;...._...pbKRTs..GR...S...$.[gl"U...4m..^S/s.`Bs....7.Z..
../...ROl.p..2.s@[..[?..W.[../6.....-(]..Y........P(.!O..... 3g. .....
....W._..X...V.H..o4..*..p.rc.V..F..n..a..m8j!..A"....T......D......N.
..,:../.)<,WR...8.J#D@lp,....M.3.X`.K. .z..4...eI....PvL=......3$&.
......h........O..W...nB:...}.#J.!.|A.........s..*.H*K.y[v...S........
y..2.......I....v.....z)....4..^..d...m............4...B...... v...\.v
~.4.]......p.vk.<..o.-.:../......8z.:".P.$.o...].].......c|..mO..b.
"vT...nM.:.W..B.c.`!..&.q.....`[email protected];Y....i.../.
".(.w..~.:A\..q.6...q..S..b5..^:.).,x...s. ....C..#0..x..3x.6....sH ..
....2..V;..ait.......^.}...'....R......(m....i..tg.l.....63Ma2Ytvw0e8.
E.vf._.h....D..s...u`..Y...MBT.....v6^S.v)[email protected]..>f....Oz3W
.%....L...,*....f.[D.]..E./\0...$.c.{....S.h....a=._5VQ..-.Ix.8.Lo.l..
B8.3.,#..t.../.F.8.9....R........A.....L.Hg_..|8...-.....B.........yo2
.. I~.~....>...2.j9....(.....Q.n.......y...L.8.TV........{..w....U.
>.....NR.......eo.XW.t}.0)<c...t-9h....aD.....V}..J..V..Q...F...
4.....!..s%'.*...W.*...dyGf.>.]...N..Y....QYbm|.V...|s.....,..K...-
......!}.N.......-..v-....j$B...kO..{q. S...k....]...Q..t.OI......<<< skipped >>>

GET /affiliates/eula.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d3ffn9rvm681fx.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 26 Apr 2015 05:28:34 GMT

Last-Modified: Sun, 26 Oct 2014 17:23:05 GMT

Expires: Sun, 26 Apr 2015 05:38:34 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

X-Cache: RefreshHit from cloudfront

Via: 1.1 462cdb6020d941cbe166e3fece73ca6d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: UPL_dmBtH4bJz2pn2bL8D9UYrCvSD9b4dyhxMSG5fBIrMZXE3hIf9g==
1500.............Zks.F......N.......|.-y."!...P.P.... .)".....1S..{...
.R.g.Jl...}.{...>....F7..ZV.T]NO..Pu....?...Q4R..G.c...VEE..I..Y...
...:..Z........?...n...G......o......w>.o.d..U.../......4..`..?~{T.
.d]..i..;.~......y.Q....7i<,..<.....d...|...l.?..t..F.OeU$.....:
Xl..U;8...Q.~.vGw......E.I.....z.7S....q.I..f.q.DW.....U....|..(.u.1..
.z..3..|....A.....:.............P....X$..*.w..........s.;..]..........
u.?..%f...~....S..b...,..........5.(,Qm...w .NK...Y>......u.......}
n..C......8$....)..R..4IuwS....h...*...f.e.q7...<y...I.....:8...s#Z
/M./...B...s..|}[email protected]..)t..uJ.WR..._.LTvz. yV._.L.tz..6 ......
..e.......6.....#b.j.A..yw.[.p.a...6n.6;(u40..8.....&..DT.....EQ..k..J
D.C....zDq....W...X...f.W..D....I.:............~..........f..a.QZ....&
gt;f%.(..n....z.v.u.mCc..].......u$..S..UK<...."T.......dhR.U7i.3..
.....4.K.....6..-..]......'$Y..9$.....U>Et....y....M..M.2x.....`An|
.^.t'O.. !..m>.:8.KZ.........$C...f..Ll...4.<ZGm.$H{Q...........
z..m................p........|C.......i^.W.}'.>..*.....z .=,..7..L.
WY^..T./..zS&...w....g.x..O.U\$q.S....Y.S%*.7..................W..,^'8
......o..W..Z....Q.U.7bp...l5.E....=P....A.D;45....d.q...Jg....."...&l
t;._&...>(VQ..<......Q..v.....?@,...h...P8..i.<N.......fs5.u.
8...8v..-. .....OG..'O.....3{*1u....P..?TK...!..:...e.......6.N./.....
C...'...V&.].....|.b...\.D..J...Y...n-.j.j...u..G.....B.h.Z......s..dw
...9.\...D....]w.n..r&#...~..q4.St........&..3RC'pO.....p.C.2R..."7..6
x8.'#/..I..S......vd..r......I.9..79..B.4..^}ur....S..s...u2."...~<<< skipped >>>

GET /cnnnext/dam/assets/141027233053-ny-street-food-7-lumpiashack-story-top.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 54726

Cache-Control: max-age=6505

Expires: Thu, 30 Apr 2015 09:13:37 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
........................h...."........................................
..L..........................!.1.AQa."q..2...#B.3R....$Cbr..S...%...&4
(DTcs..................................;.......................!.1.AQ.
"aq..2.......#.3.B.$4..b%CR............?...Z.I.s..S.$.E.V..PJ..M...l./
....c....R.q#?0..|vS.(g..).Mi....^...u]...7.ni..%...?S....).u.M$....B.
N....l....rf..0......*.=..*f..../.Im.....6.uH.B.......,[email protected].
..d.v.{.H.....K....L.Q.......c..t.K*>....(T%....Y..(SR.B.(..I.RCd .
.M...9..6.?..J..%$r..lM,.J...v........Q.A6...4..I.O.!.\}...J$W=..2....
...UV..{.Z._.Lj.Z....Fw#? .5$..=..U....ym..w.....u...-e`.6..;jTS-..\..
......p3.j..G......<).R..z....Tw.q..." i[T E.#V.T&..x....... WtK..2
F..'i...Q..... tu...#X.~..%..D...!...c*O.....\#q..0x...P.!.!c.d.IS....
....Fx%l$.....\=.>!n...<......(.V..HV..9....;<=....:......Gr.
.2..0.6......gHM^..n..w......U......}..x...x.......bA\......TG.u..^...
n.V.S|%...[..X.V>Q*6G...U..>...g...H..[.G.$...Z@...%.[Oz3o....P.
we...dE....m.....<(l..>T..=..U....#qq).h.....j..&.i.8...2.....aM
...*..#M..<..,o....S..!.OzG....jO'....j.#..R...G..u..(..|Ub.7[f....
sM;...$. ..tB.V..M....Vs..U.2:.D.ar./.?.T..../....[...A8>t..R...5.@
..p.w.d..Y... 25......x.g:.....u...k.c.U|.'[qfOqc.q......Z..;....../;.
.^..~.........P6.V....x..S%.....m_*....V.r../.....q).cK...)..p1...,z.q
..L{.<...6...8G.5..~. ayO. ....s.....Ld.k-HK.EJV......P........<<< skipped >>>

GET /cnnnext/dam/assets/150416184201-aman-pope-francis-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 25722

Cache-Control: max-age=1816

Expires: Thu, 30 Apr 2015 07:55:28 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.I..........................!1A.."Q.aq..#2..B.$3R...b..r..Lcs.....6D
S................................../........................!1A.."2Qq3
a.#....C..R............?..t.u...i....g.M.3.m.i.3.....9.;..(.....C..hR.
AM..]jW.....P...#$...N.O..(q...<T...}..C$[.....`.#6O....t........N.
h...E.8.....Av...j1.QI.......E....?j..H.....Uy7....G".(....egq ..s#.u.
#94.2...jI.i*.9.R..I9.l(....I...Jw~s..I'45..R..]9Q".[....GAOJ.nN......
....?z....... 1.......*6$T>.C.9..G`....)n...x.U.Il...D.........U92.
...b.M.....&..U...Xi..*....y.$..:..^.Z.t[Da\U\..V3....;hd.|.R.A....n..
....O.b..l.Y).]b....Mg......i..uq..n)"..qg<........ZI. }....{q....Z
.....B.Ek.(.F.d......t.@.....|.....m.... ..gg...3K.%...)..dA...4....gq
ZE.h.H.=......lx..`..Kc)......JSSCP w..j>.d........><..1__a.'
......W..R.I..=.....td......)..)...Nd...JT.\..r...xGlr?...T.u2.!?.I?..
..&..Ir.y.7%..........-........)....) .u.H]...V...v.E2.\z.62%8O.IS@~..
5'.Z....t5w.TB..Xs..6..O.w}kk..%M..qe...2..}y..j.j.<W.lK.......p.(a
I>....R....8...Q...}.\.....i.;.jBF.^v.{1..8....RJRU.k.Q.~..YQ..RP..
*...Oj.l:....T..Q....~..<M2.f.fTT.A......;I..qr..r..7)...rj.M0.1bc)
FG......Q<b.\.%.....P.....*.);"QE{..F.2)..z. ...&.j..Z.<....Zt.2
....xI..^'iv...`j...s.[X~.pf4f%6.E..%l:Zihz[...@...:...........%.a.t..
q.Nf-.0.p..1...$...y..m`q...t...........P.4l...8.o...l...'O-Q$...B<<< skipped >>>

GET /cnnnext/dam/assets/150428113734-defining-moments-london-marathon-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 42922

Cache-Control: max-age=3290

Expires: Thu, 30 Apr 2015 08:20:02 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.I.........................!.1..AQ"aq..2...#BR.3b.....$r..C..S...M..
Tcs...............................9.......................!1.A"Qa..2q.
.......B.#3..$Rbrs..............?........2.O.}......*t.Y|...a]...Kd{..
?..I.^n.--L.......`{...9...b.R.........{Um..d.U?|I.....AS.....pt.u....
W.{....#&....N{....A.o.;.].]f..3y..Hc......u5..t]..$....Ma..B........X
..%".....Y"..I....|.........Hz....|....:{.......,~"3......k.L^.5=dmt..
.i...........Tw.....u7...$..|..4h...6.%.(wzi.].)P.....\.......i....O'.
...|..C.....U...z'K.$c%..S..|..d....OUuk...D...J.....@.<....G..%...
.#.w.H....?M.2.N..?Y..*..2..4..c.x.i`Iv...p.k.p.=U.~Z..7..:.....Z[.C$`
........o....)......:.R...c.Q.0.,;.|...n...-6M....K.F..._..6RFd......P
.Y9..;...g..i.........eq.........L.6...;.i!a..F\..G.tY.g.....V.K%.....
.'....2C.....d.t.C..v.].LhiL.$3A"..>.a.I...w....0,!..-..t.....H..*[
..|z..R4.P..........O&..O...??..J.[.L...#.p*....~...Xz"Hj.e`f...19..'9
....a.j.}.Y...:[email protected]....=tIj..y...\..e(........"...Q....I.%.g . 
..}p}tK...1..]..ZB=pO....5.:...a.-.S.RDy,[email protected]...;.....;.2.
.s.....~..,.L.Yq..k.2..2.3.p....}A...t." ......{.L;.c..Cv...,...(..x.m
...d.o.w.........,{.c.5J&."...C...6...=.z..z......9.......[}.zU....C;.
.%......w:.Z.J ..WH...o.....>0^).-s<..e....O..B$.b.<NU....E%-
5.je..(k.1.=.<..H.y.6sQJ...ih..s.S....Gu.F.lR...*.O......Q=_...<<< skipped >>>

GET /cnnnext/dam/assets/150429053135-nepal-rescue-1-large-169.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/png

Content-Length: 167472

Cache-Control: max-age=4991

Expires: Thu, 30 Apr 2015 08:48:23 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive
.PNG........IHDR..............e4... .IDATx...G.$K.&.j.....#[email protected]
...../...4.~.h...wS.235..z.=....Y.A..)...O._...$(.%D....S...Q..O.O.O..
...y3Q....4..\~'..... ...-?.}.?.3.{.6.8:=..g.... ...o.7.~....7..7.....
.~.4&8;9.......3.........g.2..Y.'?.\...?............K...W.._....-....g
.....3.k5M0.G..D.'....'._9.......]^Q.........8..^.`.^.. .........Y>
'..tww....;............%L..6....@.<....W.7pus.7.wp_>.q.-...s9...
N.z.s....-.s~....kn...vfy....N.k1.y%..|....a(.8.....?^3.....y....<.
!.....3.S.......Ez....[.....q.I...|..f..OO...>...5./...~...x..9..m.
..u..... 8..c...C.gN;[_S.9....f~.r..:..........?.]r..|....u=....9..lK.
q".kr.......x,..q;....V..-..a....G.-?....k.c..zO..v...................
..8.{fk.w.. >>,.6.5..-.Hw3...r....5......r._}.;..........7......
a}$..P...&.......jm..........L....1...KV.....L.k.,.-z.......N..`.....@
...U...w...p..8&.K..~......z_.......l...)..Y...P.U...[.nP........mY7..
....=..N.O.....i.W.d.uS...........>...5.....F.8..../.g..P.?. .I....
[.W..V.^........\................... ...................^........E....
.l\...7...r..;M5PT.%."p#. ..7...-..........._....-....../^..l.........
.....c}\.....8..D.zT.g...y.....b.[..z.... 7G....n..m....<...k......
...cT>k.l.f.7I.7.......b.....r..=.....s.....A.KP>c[..T....-..*.q
.....^.d.'.Q..Q.0H..................r0(...f.q....Y...$[...x}e5.bP.k...
...5.`.P6.P3]..TG?.UK..c..9..'9f,?W.........^...5....?...lFU..._......
......^.7.Y?/k.....%.... ....\[email protected].{......8...-......~.
].....-..v...Xp.vNzK......#{....-._P.4v~..|.........~1.|q..'>.9<<< skipped >>>

GET /cnnnext/dam/assets/150427112735-pkg-last-man-to-beat-mayweather-todorov-pacquiao-00025615-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 25352

Cache-Control: max-age=502

Expires: Thu, 30 Apr 2015 07:33:34 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.G.........................!.1..AQ"aq.2....#B...Rbr..$3.....C.%4Sc..DT
.................................9........................!1.A."Q..2aq
....BR.#3..4.br................?...:..5.#.tC.K".......#Ux.zr)E......=.
.K`..qI.v.w.I..>.W.]....,..i.(....m........Nv.s...j....'...=.iLjqM.
j!N$......Q.f.X...a.[..8.iH.I.t.#. ...X.....A....xFM. >.%..:.......
(.,.Ae..<..y...q^...Npx..{..F...F......S...m5$.h.....[.T...zs$.Z..=
.T.cU....b9..Y...:t..n.,..{.94c.`s]...=(..)...8.z......(.B(u.-W.s^3.w.
...{m...s*......^!Y2b...bxU.i...L..=...z....._n]VFt.c....Oig.Cl......{
...v........:.h.....q..} R[.Z&B...Oz|.,...sR.x|......Wc..'.W....*..>
;<v.f?V'.....;.A..Q..r.w.b..F...NH...T.'......\.#4 .....0.hj.x....W
..!..A...4j.q^=...z.;W.hC.x.........*P8< .].......JlH.#..........W.
GF..>([c~.g.pO..t.<y......F...^1...).E.:[email protected]...".i...
.....$..*......).o-~B..>..[.29... z....WK.:E.K?..'.)}.......O..)i.t
.....{S.i......|..)F/...Q...k...z......~..t.S.}.._]..= ....;.\".Y..1..
>..)tQ......#.....W4.M.. x.#.9.m..E[*..).......9....1....-.>....
........|$5..g$....n$.GO>."KRG...Kj.d..;k.e.$.#...<T.( qK....y.V
......<.....k...q..Ai..h.c....Y$b/.=%.}.]...sJu../..b...4...."..c..
.X.<$h.Wj-.e."...C.#..#.W..."...B.<....0.9......,.>..f..&...L
.C..QL.............Q.m'.....JL.`..{...1.S....O.........S....i...#.<<< skipped >>>

GET /cnnnext/dam/assets/140630100952-slacker-tips-2-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 28734

Cache-Control: max-age=5034

Expires: Thu, 30 Apr 2015 08:49:06 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..F..........................!.1.AQa."q..2..BRb..#...$3Cr...c....%....
..................................5........................!1A.."Qaq..
#2....34...B.C..............?...H.....t...*/....!T...Gz..(}C...R.4..jT
...T..)r.K.....r....^k..>T. ...sR.@...*.....*.....$........5.....k.
.^....A....Q{..T%.f.*.n.7T%[email protected]%.*......B....4...M...^g....j.C.^.
.^.....N($.. .B.xU^.\h9.d=&.M{.PU.K!...MzE...<&.k.s^..C....zk.R...M
..M..4.C4.P4.E..P....Z.B{......PT( ..O..}.:..Q..~.B.E......9.R...]...e
.}..\S....U}x.H.?Z)W;......M..... 1..6u.^ iq! ..kC..o~V...Y...:..jJHt$
s..Y./..........f."CM.J..j..>,[email protected]..(.&..s....1#..Kb5G.
o.M..............l....Q..........FuM4..1....LT.......#.....u.Y.kzo.[.x
..F....1....)bSi$%......r.p..lM>...LtE.&.......c_.... x..`R.I.2..|.
..>.F...!.........v.M..H.M.:...0m...d?......xm..m.....I.S.d.%9.p2Og
B....oo.jam...&..F..#hZT..qS.l...[}'>Y.a.CH........6&..j...'....yJ.
..D...........J<R.d...._.r\...dR.:......]#K.bWF.*...*......;u{.....
T [email protected][email protected].{..h5..B.^.]....j..k.@.$=....T......@..^.I
[email protected]..~k.j,.........q............Xa...N2...<...L..7.C.
.... ..(.UC..'t..S.2... .*[email protected] #............
..[6G..v.....y.}a_.II..j...Y..t.Uy.....Z..W........#$.n~.....p.V......
.4......~....Q.....A....-[.....?.I.u.[j"K.........q.c..d.LU-4Z.5..<<< skipped >>>

GET /cnnnext/dam/assets/150416100728-pacquiao-2-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 33658

Cache-Control: max-age=6311

Expires: Thu, 30 Apr 2015 09:10:24 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..D..........................!1..AQ"aq..2...#....B...3Rb..r..$4C..Su..
................................7........................!1..A"Q.aq#2.
...3r......4B$R.............?....5..N6..d(.a.UZ?!...w....w;eF.......&l
t;..(......3..Th..[.%|HFa....i.K.."K.! U...Bh............w0.= .h6..?.e
....q...M.....1:..T....Yn.x..)./.g.K..XP..........G).TS...z."B.....cX.
s.1O...7*.ht..w....r.*....'1-K..A6.Bz...Yi..2/n.n:..\I..>..........
...nB......)A..{.,.&.)..P..R....4.Y.........^98t.!.`5.?.(u.4.I.c..a...
M.....u&R.....j,.9.Q...5[@].-...#.R<....u.X}...Q., .#.h)...hi.R.ab.
& F.w9u~...=.....^.Z.....*..X...T|...M..,..m..v..!P.~R-...^e.`y2..Y..u
.q4......nX0....0J.$.1..R..u..\%...i.0.......s..h.$...76.f..l....3(w..
..mk.1..xy.....P....F..1'x.>.-D.}:F...<..Nc..^.s..S(.v.(.B:...t.
.......)..0N..Z.x..G..:.!C.....&.m..X7.0.......A..O.E.....3,.7..qvS..T
...0..M....o.....f'y ..YCh..gK.T.y4s.n.L........e8...U-.....t.z..m..h.
....\..[...F.Vk.8.#.N'..............{D!....\p...'D.....S..Y.H..X......
..p..|...6Ru..A..J...%....7;[email protected].;....RVH
.=.h/....kw$...)[.w......U2.0..jM.q...`8R.:%6...."Fhj....[wZ....H...E.
g..."...~..R...%..%..6?....I....O...=.>.....]$...._s. R...D(.....c.
.w ....N.Yb.m...|F.....5%..s.V.X.ko.....@..[.B962:.... t...@...}R.Ao/C
....}?.(f....j .m.!*T..[..VU`4..#.q..=H:...B.N..X.2.sd.]a....(....<<< skipped >>>

GET /cnnnext/dam/assets/150427133507-pkg-man-reunited-with-baby-found-in-dumpster-25-years-ago-00004718-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 20076

Cache-Control: max-age=3096

Expires: Thu, 30 Apr 2015 08:16:49 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.A.........................!.1..AQa"q.2...#....B.$3Rbr.%.&CS..4.......
.........................../........................!1A."Q.2a...#3q..$
BR.............?...t....q.I.&.e.K.....R.....JG%.....Qu.`.c.%F..MR.-m..
d1.*}j...y...5L..C.K...#Y.E.qMY..0.j...W... SV...m.;....i...6:;_.-@...
... ..~)...:`.Tw.U..x....F......{...e'?#4..d.....L.....\.8.n.B.Q..r?Z!
Lc.i.K.....j1J..Ru...jgA.M....vpi....>Y*x.T.....L.7.;I...........KI
3.........Me....^.......A...].I....h..*..4k.#..H<...S.RV6..s.J..Y..
Y....B....>..BNsB"'......^)..>..\g.S....$R.g'..!.H..P.......{..x
....M.....W..0.5.....T.`...I|%..j4.......v...k..t..%.eGn*C.&..........
....>..u&......H...[.fm.d.^...... ........j..#...k......)1...$....&
o.....7.6. /.Md.E.....2^..,!.;......N...)dp.......e}].C....F..D...^...
.Ve&.V.mYw...Q].;]C..$..r....j....Jl...Dcm...9.Ec....C..9..........?..
v.I..9..Y.[K0.......N......9..\...F*....M._.....0....%.cP1Fk...Ut.....
.V~ .Z..l.#.Lg....J.^..a.5.[ ...fI.7.!......'jz,..Nn......cR.5....z^H.
w.}i.."...^1.P]3.....Oo pq...O...,Wj..i..>J....H...ph-m......qO....
y......u1."...tt...j~.....F..3..[i<....;.$.J..B.~H.A...\1#5^..Sc...
s.Zd.Db...T..QQg.`.j.......1......2..Y...#. ..<.....!a....t....5I..
.d.?.d....i.F7(.q.T.N....5.i...Y.Q;3..R;T ..J.#..7.n.Gs....r.36}3W..".
}.....C..L.........Qzf.g{.....*27.A4......}*/...)....r].........M.<<< skipped >>>

GET /cnnnext/dam/assets/150415153047-spc-vital-signs-sleep-disorders-b-00011708-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 24626

Cache-Control: max-age=1789

Expires: Thu, 30 Apr 2015 07:55:02 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.B........................!..1A."Qa..q.2....BR..#$3..b..4Sr...C.......
............................)......................!.1.A"Q.2..a..#3...
..........?...^(..G..R.gt*...7..........;.A....z.&.{.#.$....bp>..B.
...=.X1b....W..y........M.......,...o.l....U....^.rv.jmE= G..T.##|.w..
.V/#.....'.5.I...C...6A.eb..0.C.B.c..7.W.~..6.#.W.C.......q.Q.O.y.yT.{
..(\.......M......czJH.}.......jl..w.Q./.n{Q..........6#5....0p.R....O
.\..|....>,.E.[ip.$...V ..p2.....#j......>..u..jq..... .&5.<.
..rI.'....D._A...{..1..l4...a.n.G<.c..... V.G7.|.........p.X.).....
.A......5c.M...DY]...W.I..j.p..,.\.N2.7..E.oV9.I..S..I/a..>X....h7.
.F.T9..j..j.idA'2..Q-.T..\...1..4.._A........a.....K...O....W.A..3{w#y
c.........>h...K....G.-......Hwlz..}.#..c..[..n..A.......Is9/.i.#..
v........eh.....p.>y....-..uH.r9...&..unQ.4..VB..E......m....../a.D
X..X.c..R.*@%....E...97...2...~h..=V...JH3.....2.6u.~..*..FBmdI.Q.....
...... ......v....(.....mZ.....`..a.......k....$..d..P......:dn)"...&g
t;...v.. ...It.E.. f.s.2W.u.d.V....U.q..X...?.I.Uq....h.\b..S.J.....k.
.g.*..[.a..*.........M8m.pXu ...Q"Qa..`.K...t..)...(..t.}3.~.X.......m
.q...b./......wS...1...S.^.5.............%..q..U..zW...$..5.V.... ==..
_`|*.a.F..1.:0q..K..z..[j..(. 9.6....xB.N...2....o.V.I.`......e.'.. 25
...I...z.R.#..\..#/.8.Br>....0A..0kDb.. ..*..^|.?.GZ.a.S-..1O..<<< skipped >>>

GET /cnnnext/dam/assets/150428175511-barack-obama-april-28-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 23085

Cache-Control: max-age=4113

Expires: Thu, 30 Apr 2015 08:33:46 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.F.........................!1.A.."Qaq..2..#....BRb...3..r...$Ls.....
................................2........................!1A.Q."2.aq..
.#4.....3B.............?..-.T)O...kM....8...6.\.. e0E0d.U....s...X...T
{W.#z{gw.oHg...q..k~DoNm/.$....H.O.......|.-%L...(m[.WKmV..S.T......Dl
.T...!......jB.x..g6..G.W..R"d.%3'..8.....YR.l.-.. .}Gn........*..&.} 
.4....R.R.........m.f........\Sm.......pD..M>OM....v.Sr..[.h...T..8
=..~k.i=;:.J.....5.......b|(.l..}.c.$....S...w..k.`....h.[.....%)%. .*
.b....B......].]7..?..v..@. ).HH.n...$..../.DY..^.e.}.....$.....b.....
,....=n...B.X$.. ....u..K..{.....Aw...."I0. ..N..........;\m.Iz.......
.....S.O&8.fE..4.S.Nm........uZ..R.0...y....j....~).)...P..J........S.
:......]:......@... I$ .D...y....Z....w...S)RV.`...U.... LH..^..~..V.L
).).IPA.TD.O...q..d)%Ds.D?....yZ.U.KV.h(Qh.R....};.q.I2.&.W..8.t...z..
..;....{I..Edj=.r.3.IJ......V..#....v.y..2BU...A...O...T....Q.......j4
.....*.....Z/q....4...V...I.'mB.$PK@.)......h.1.5.M.@.#~M.n..qZ..bkE..
......W.$6.kk~h..E*H4M.....sIF..M..S.4CjI.NF.8..t.........R...).Z..'..
[email protected]'X..3J........v5...[V.
.......$.z...../....A.....\J.....q...z.?..=q..N...B..$..!YV.z.i'z#.].J
...]..~...@........!<.....MBg..W$....PH.n1..>)......N..#ft..O...
...Cq"..j.L.7.j.;..U.;y...X.*}".]b...Q..Y-.t...-.^..WI^%.[..&.q..m<<< skipped >>>

GET /cnnnext/dam/assets/150428043717-darlington-calbuco-volcano-journey-large-169.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/png

Content-Length: 147229

Cache-Control: max-age=3235

Expires: Thu, 30 Apr 2015 08:19:08 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
.PNG........IHDR..............e4... .IDATx...[.,..,. ....O....r...t..3
.S..$U....;..........|.."j.."b....{.w........_].............}...W..].?
......V.......}....?.........9............].~.....?.|....7..|>.....
.....w....?.w=.....`....v~....g..'._ _..5.~~...........}...O.......~U?
.-....?.........}^f.{._.y.O...W=.bp..#...c......|'..n.................
=...c.....r...u.g...........u..h..9...5z^..F.\#..%{uy].x...hM......._.
....3r.p......s=..k=c..J_......g....X{..=?.....*S9k|...u...K.[..?7.^..
BP7....u...{.........~.\.z>..7>?cZ......s......[...O^}.z.4>..
u9.i.l..........t...."...z.../K...`.:.gO.b.?{..}.=.Xc.Y....m.9.?..-...
.{M.U..<..{..o(\..Yk....}q<....9X ...C ..[=........U7..;....s...
......w%..k|...........7...........y>.....s..............g......0..
...gz........}.g....YH......P.........M.|.|..>...D.P....^.......G.p
..e\}..............B.;Y...f_K..........=..s~.9.W....X.....gC1...#6.s..
..\\[email protected]<..........,..<...Z....".........=j...^........
..../<..!.*t..wn?yj.a).W.c..s~.,...............sY,......;.?~...|...
g.B..*.'$....g..t..#^ ..%Q....sh.;.)....A...x.N......>4.@... .....7
@Vm`..I.e.......7....mQ..*.)...0.2..........]....}<...g..OW..U.....
%/}g(...t8,j.......N.. .......e..Q.z...<<...#}.|.x.....r........
....d..P...7.......x..G...j.5...AEa?V......~.....5...k..?..O.q.....V$.
0.....T....... ....V....W>..1UU..(....H..b-....t.v..Jo.Xe.!.Q.~.b..
77{.....1.*.......1.S.....n....l............q..Y.EV.eJ.6 ..........*.:
X.!..&..*:%..=..S..Tw.p...9...P..q...No....|.......g..&..}\OW.^...<<< skipped >>>

GET /cnnnext/dam/assets/150406142655-dsc-3459-large-169.jpeg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 50200

Cache-Control: max-age=4799

Expires: Thu, 30 Apr 2015 08:45:12 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.M..........................!..1A"Qa..2q..#B..Rb....$3..Cr....%s.....4
S.t....................................>........................!1A
..Qaq.."......2BR..#3..$br%4S................?..G\y%N....NSP.`...F..T.
..>...j.A.....v.Q..e.. ..h.M.J...m...ta....62d).o.....!.I......q '$
v.W...3q.%.f...."[email protected])i..O...O0!..,....^..o<7p..
h.Bk1T..hHN...?... vQ.........`.......m...!..u=..G.hb...j.<8.P....$
......!.U`..I6.....:..v....l!.S.V.....t6..4.Nd.....TkQ\C...i......J.Q!
)!;..m....x....6......jr.4/.m.......B.;4T!?,..M. e.....BB............(
.....E..1...-..~l..~..2.W.0..... ......,.V....o\JQ....cZ........;e...1
P.usj..R.$. S.(%[email protected].(.).......0....:.wG....<4r.
.....v..Dec}.W-.!ei...A.....8x...I..IL.l.[....b...<....$...kn......
....-. .w.T..C...!...E...J......U}B..N...3.....].....j..P...2.....Z"F.
|.6...!.......zF{`...<.&.Ct......>...J.4*.G...s.C.....j<.....
....`gh..."b...@. ..1..k..9.m.)...:)_....8*.7.\.-.MM..$-&.8..I?O.}..y.
....Mm.n(%........uo.q.,.u..s.!Qd..... ....0{.../..$. ..i...U..TH.,..^
.Q.R._...T.5..y.Z..p..}....j..........E)...K.w.1-(\1~.....z.......d.).
..-.O.25.....)Y..H..o.:n..89..J...1%-....9d.R5.....~}q.....M..........
......n..c.....x...\r\j.un.:[email protected]./.J xD..~....../
..1......FieEQ.................S.0.PW[9)......2......Hl .......!..<<< skipped >>>

GET /cnnnext/dam/assets/150416141451-08-worlds-top-ten-islands-0417-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 33895

Cache-Control: max-age=1837

Expires: Thu, 30 Apr 2015 07:55:50 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.G.........................!.1A."Qaq..2....B..#R.....b$3....Cr...MS.
..................................6........................!.1A.."Qq.2
a.....#.....3BDRb............?..XM.....v....R.6#.B0.s7.no......m.*8...
l$....F...H...M....k.8(...!.v7.?...[.c............... .........d..m...
5.E...cF t.....a".....:..X.....1y[.....1.rn...aF..(.....<gd........
..4d......^....lf.9~..4..m..m;X..q...p@i$[o...........p.N-.....jr..7..
.4b.p....-.za>.{n>..........3A..L....`...-.6..(2..>...!...s..
...;........4y`.....0D-..Gh..-.....{|?\[email protected]
..l..>hN.........-..}...Srq ..Dd.'...u.b.....'.~x.:.. ..7.........&
...j-.......^.`.v6;_.cb...r..XSe..[..X..K`.LN...-....av.."...!'...J..z
.....v........lt..6BG...5.! ...=..[..k8.........c[.....[m....Y$.......
\....%B#.B....<...-7.0c........p{#>^3e..OE..w...7...\.1....:..s.
....".... ..x.>V...m..3#.`.3.^S/...).A.P&..6....|L....o.3....O.X...
...B...8P..bd....V.W..u?,wj.v..P.............5..|....7.....".......S..
.s...&.Yn.....1.._.b;P......ski.M)...LO....Q..2..._<Gl..;.DFW.../.R
...^_.....b..> N......h..jj.U2..h...IMT...w.......g..Zl...zjZ....aO
_J...8..0HY..hp?2.\.........`..#..\...\.........*.W f..B..8...Me..Y.T.
.5.../..eq........4h.Rf.KK..U",P..`.WQ...0.lx....e.y0H.X.hmCv.}.......
..L...G.n....O/.....xr.....8.......].......>J..D....h.Sa.,..o.o<<< skipped >>>

GET /cnnnext/dam/assets/150416184201-aman-pope-francis-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 25722

Cache-Control: max-age=1815

Expires: Thu, 30 Apr 2015 07:55:28 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.I..........................!1A.."Q.aq..#2..B.$3R...b..r..Lcs.....6D
S................................../........................!1A.."2Qq3
a.#....C..R............?..t.u...i....g.M.3.m.i.3.....9.;..(.....C..hR.
AM..]jW.....P...#$...N.O..(q...<T...}..C$[.....`.#6O....t........N.
h...E.8.....Av...j1.QI.......E....?j..H.....Uy7....G".(....egq ..s#.u.
#94.2...jI.i*.9.R..I9.l(....I...Jw~s..I'45..R..]9Q".[....GAOJ.nN......
....?z....... 1.......*6$T>.C.9..G`....)n...x.U.Il...D.........U92.
...b.M.....&..U...Xi..*....y.$..:..^.Z.t[Da\U\..V3....;hd.|.R.A....n..
....O.b..l.Y).]b....Mg......i..uq..n)"..qg<........ZI. }....{q....Z
.....B.Ek.(.F.d......t.@.....|.....m.... ..gg...3K.%...)..dA...4....gq
ZE.h.H.=......lx..`..Kc)......JSSCP w..j>.d........><..1__a.'
......W..R.I..=.....td......)..)...Nd...JT.\..r...xGlr?...T.u2.!?.I?..
..&..Ir.y.7%..........-........)....) .u.H]...V...v.E2.\z.62%8O.IS@~..
5'.Z....t5w.TB..Xs..6..O.w}kk..%M..qe...2..}y..j.j.<W.lK.......p.(a
I>....R....8...Q...}.\.....i.;.jBF.^v.{1..8....RJRU.k.Q.~..YQ..RP..
*...Oj.l:....T..Q....~..<M2.f.fTT.A......;I..qr..r..7)...rj.M0.1bc)
FG......Q<b.\.%.....P.....*.);"QE{..F.2)..z. ...&.j..Z.<....Zt.2
....xI..^'iv...`j...s.[X~.pf4f%6.E..%l:Zihz[...@...:...........%.a.t..
q.Nf-.0.p..1...$...y..m`q...t...........P.4l...8.o...l...'O-Q$...B<<< skipped >>>

GET /cnnnext/dam/assets/150423163714-migrants---s046644079-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 34734

Cache-Control: max-age=5709

Expires: Thu, 30 Apr 2015 09:00:22 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..H.........................!..1A."Qa..q.2...#B...3Rb....$C..r.%&Ss...
4...................................7........................!1A..."Qq
.2..#a...3B....$b...............?.....j.P...].yM}....<.;m&.....?..c
...M..%H.o]....a..T..j.A. [email protected]...&c#. 1[....=4.........^...h...t~.
.m.C %..Mu..g5. 3.z.Pd...j#;..5.Y.!.s...i.f..'.Z..O..........(*..=C..r
....B...K..TG.F.......y.w...~=..,}X....Qk.. .f..).$.}....Z..%.j`...u.'
..r...FWG<[email protected]"..... ........C..3 x
...p..{a....y..qA#'.....1..}.B..5#\..g...R......BNI.# .:m..U.^..L..j..
....)..........P..X>.........8..P*#.I.}...E?Y{.....D6.u.L...u*..G.=
?.....w....R..8Z3.~...*..z.V..PaJQ8d.......v...7.i.V.... p((....O.. ..
5c.../.\..J.XI.Ud.7....bm....(...W.....I...e.d=......7..z.T.........E.
.|8@=.hVe....$N.c2O.........*a3!.u?.....J.k. .s..u.".9..(...t.l.sQ.i/.
\...|..V.j.WG.q..:MG.8.&.<D......,....7..8...r.....|....r...D}.?3@=
h(..........z.....Z.94.n.*k........F..)..X....w.....t>.....1.{.{.9R
|[email protected][....8.......iI......A........F.P1....'._p
...........wr6...'2........GZ.....S]....R........x..t.>...&.A#j...a
*..A.tv7..2............A(J.qQ}.....g.i.n.yjR7.....#..w...."L<...5..
f.4....d...^.Of4V$...a.J.p......#p..!(u..i.]angO_U. .Xq...kP...y.P.v.K
.[....t!`..ON..7-zwA...}Ap.........SA.@ \.>.D.&d9..!....9.n...7<<< skipped >>>

GET /cnnnext/dam/assets/150415150704-01-isis-documents-0416-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 27985

Cache-Control: max-age=2480

Expires: Thu, 30 Apr 2015 08:06:33 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.a..........................!1.."AQ..aq.2.....#BR.3br......$L...&56F
SUs..Tcdeft.......DEVv....................................4...........
............!1.."2AQ..aqR....#B...3Db..............?..e.Z.......TQ....
.9Kd.......D}jc....T$.:....!....@6.}3GJy......Z.V...>....).R2R...G.
....}.{!....%k.......q.'~Bp..R>.7\...FH..hl.......|vp...kw.ZV...9..
Q.y...P...; ....U..j..G....$`..j8.h)..F..=...w9..{V..}.=.k....rjk$....
....*..)^.....)...4...6.6........\...e5. .........se..;Iy....v....'.p.
..*.&...._..`......#Q.~.....Q...z;.6m.!=.....z............s.m....M..4.
....#..k....xu.D.....I..kfh.F....r...O...1Jw....... ...n].|.......c.T.
.'......Du....[Z1....4.H..f..7.R.......;..E.M.f...,j.c..SkF<t[....k
.......u.._2...._...&...... ..4....._u..gt .J..}..g.K..w...PW.<.FG.
.xX..K...a..)w?.Y...^._...#.e..............$...R...CRc.\SD.Ac&.F}.;L..
........H... $....Z..[. <....H,.?..R........1....v..'.i..*.?. ....G
....Y.W.......L......Su....3.V5..V?.CZ.4.3..E.b.".a.....,..K?...{.v...
v.|....h..#...he... ....'.u. .8~..^...$...y.OO.Y..P=.(Ko....cN.....~..
.)...;K..."g.5....9G..9.|..........mE ......i.?...h....(......j..\,z..
......$.....s9.k0.Ff.5{.b>.H?..z>&z).~.....i........~....5..kY.~
..7...Jb[x....... ....n)..n}>.E ..P....rkOd^.......V.f.oo........3.
zU&....;.*I..0.K.X .. ..19.(`.....sK#...=E......I....ol_.^n:.u.4[\<<< skipped >>>

GET /cnnnext/dam/assets/150420160008-iran-military-parade-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 54057

Cache-Control: max-age=3168

Expires: Thu, 30 Apr 2015 08:18:02 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.C..........................!..1A."Qa.2q..#..BR..$3b.......%Cr.4......
............................1......................!.1A.."2Qaq#B......
.4...3............?.%.y.i.&JE,!.:......'.:}...T...:RSv..........l)..Q.
17Np 9.P .....Q.N;*.LK...S..nZI*.........<N.%....it...."....H......
..p.."....."...=.vf.\..a.>...i].T..T=lp..%Lb..%T.%..^.............*
..e*...8^9...[I_-Ed.:Ucc..|Q.ENae."Rb.1.c..Q........~....i... ..]9...q
@,.t..{.....=E.Ia..%.M-]Cf..t.......j R....bS.B.0...-..IN....wa..?.4=.
.......oF2..ltJ.k..q..=F2*...YB.1..A.YN].........6....51.He.8.Y.H...qn
&.L."..b.6..|.....3.I.  R.Q.#..n0.v...^..dG....,-W)...W....<>...
Qv.Wb\.HI..6Z.`p.....U.5.A....We).....\!.......b.....c?.%.7..B..R.....
[email protected];.K........Iu..bC..I<.!Ei7Bobm......
&.."7.4.y...l..y![..-....j.t.]9.e:Hz...rRE.. ...E..b..G...:..\y.!d.]6.
..{.z.=......UPCC....S}T..IV.A.}.k.w...X..]vf...$J.....8..A....|...A..
.G...a..p .....s.?...*.54.#.%.O..%V......./.#.bI..q.........1Vlh.BN...
GM....9..d.......F..XZ.....'kz..:.[...t$3.....c.....QP..f:...[.0...$..
.?l..i...8.%....6t..\._.r!>>%!y.0.....ZTu.h..%WW`:.~...Yf.Sy.R..
.....R..%_..3.2.^-..(f*.[sc.I*I..-.....%.eXt...p..R.t.,(iZt...........
5.....mp.F..P....ZU.)v..b.:qBNM.!(IS.@i;m..n7...(."....]p.d...)....6..
.c....VX..<.~...wr........%n...|I.W...r..J..&.J....q.#.%Ss$....<<< skipped >>>

GET /cnnnext/dam/assets/150408180918-lok-damon-iraq-isis-yazidi-captives-released-00003419-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 37321

Cache-Control: max-age=1203

Expires: Thu, 30 Apr 2015 07:45:17 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..H..........................!.1.AQa.."q2...#BR..3b...$C..r..%4Scs....
&5.................................. ........................!1A.."2Q.
.3aq#B..............?..}.\......!..x.B.B.xP#..j....|.e.e..ZQZ\).F==E..
..M...chJ..B...8.)g.[o..../...$......}vD....)R#.8Q.SKam./#.....r@...~.
.]l.[.V......00.ps..z.Y..-2...|7..@ ..)8..)%..........ko.......VD...%.
8..-.......u.%A...z........*Hq........-yv..D...HIh..............,.....
..?...G..........d.:.GXm...;!%!`......A..~v(.rh.....#.S.W.......:;...%
~.......E ..iw...Z..-........1...G.........G...:..c)..{~c=.G....oJ....
........)>F....%n.m....$..g.AG..<...... ...S.Di....C...}.M9,^.LD
.m.9j..;........'..q.|......b....)..2..*Q*.. .n@....<..<.^.$....
.B.J.8..Sm3&..Cx.bc.. .p.8...>.'...i.*.E...6.a.QbG..T..t.~.........
.2....P.F.}.*.?[E.uJ.........I...9..8..... ...N)!..]b..k..V.l?....1...
?.f..\..tH.R...U..$d.y...o~#.]mM.....q^..Zk.,V.....B...M2..qR.."#/w..5
)@.r*2..G.4.L....mo.......u...'.>...hi......../....^...v...?Y....#&
lt;....q......A..v.)F..i.8.....Q......P..8#.>......!._i..2.C.....P 
......3"w..A&...(..Z..V=..I.w.p.?U..0.\.....U..X..? .;n<..U..c'...K
t...?N.m.../2...).?...Z..9e....*Twe.m..........?P...B..^..G.....K...7.
.HS.l..-.X.N0I...Tu.....pM...v....&8...>.......}h........,...l*B.s.
v<.....i.L.!.mW6.........q..Ut.].......O..&...,.lA.j{..j.....G.<<< skipped >>>

GET /cnnnext/dam/assets/150409105546-pkg-paton-walsh-afghanistan-kabul-waits-00001913-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 25270

Cache-Control: max-age=2686

Expires: Thu, 30 Apr 2015 08:10:00 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.C.........................!.1.."AQaq..2..#B....3R..$Cbr...]Tc......
.............................*......................!..1.A."Qa#2.3q...
............?.#6.n......2=.}....L....(m.%0O8...)L..X.......u=.@D..!..J
n...n.m......c.[...;...n..^.....uvI.@..;.?.T}...:y...).../.~h.xB%]ib..
*3JI.,..}.....,......#P.'.?j-..:..ut...8.0zC..#... G.8"^.H.9...OAc...f
.t.......5`.pI.L..V..oa...u.........G..L... )...K..}.f...f..-K#F.....g
".l.2......J.k!_H-..h...O8PFy...nK-.t...:..1.c.......[..I..=??J...AU..
E1h.......s.>..K;.r}G.$[X...Zg8.......P.,..Xf.Cw...jA...m....<V.
PBX(.....j.n.....gc.c.F. ...#,..d^.......W.09...~....E|....qDa.b...{..
o.v.?.b.r..'.......n....^..c.P.5..GK....:~.dP..3......&...i..|C...V.5.
...-......>x......j....#<.f.>Xb...p..1..7...........z....G...
-4er o..ZL..YzG..H..5.q........9......I.m[........._.....W...=N......T
......h....>J.<......pn:......H..1p.G..n..EiP..sR......QH. L...m
1...`|Th.`...[.V..G.ZB3..Dg._q.......-..3.....D.J.....#.w.'P.@;...o5..
V./......9..$-.4.o..*..9.K...E.19.......I......yQ..{.E.......ea..j .~.
.d...x:..A..U....pA.oO..*[email protected]..;..I...:...L.~.
..h...;d..Bi5......b....NK2.{.j3...^EY..][email protected]..}.5.
V6.Hr..._A....*.En..H.KK.{.T.H(.5.[Ol.Z..%.`dd.qV......m.k)..a..{..-.-
.&.\.:.k...L..N...)<W...aF..:.[..g...e..g.1K8..Aj.w..k..^'..I..<<< skipped >>>

GET /cnnnext/dam/assets/150403102941-cambodia-sex-revisit-freedom-project-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 34229

Cache-Control: max-age=1666

Expires: Thu, 30 Apr 2015 07:53:00 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.K..........................!1.."AQ.2aq..#B...Rb...$3r.4C....Scs..%5..
D.....................................7........................!1.A."2
Qq3a#4....B..$....Rr..............?......h.}.UELk..j....'...^*7...]4..
.....G.\...yo..?...i....2..!H....V9..E..I....{$.w..'.....#Ib........-.
...[Q).\e......$.....%%C.........i.F.F..AL.......U.....Tvko.Fz...J....
.......Q......q.6.....m.y...Nb..!.....E.y...i.#[email protected])G.~..8'U....
.$~D.g. ..zZ..H......W5..P.B.u.?:...MI.].G(%..c.l....3.&....=...}.....
Z.......((...I..#..r.&~.T........U.MrK.%YX...e')?_/.,,.GB.x.$.y.\.4...
.bn.......!..'.$r.Br...i^...W6.....p........@*vS.B...f.ujm>j....M;.
.....z.p.z..^..i.#p9..Rr....)y...xI.........Z..G*.E..&jq.v.Ym6.G.}....
...A.........,.x.h.........@.$......'.e.k~..'....e..^J...>...N.qmr.
x...8K...d..Rk>r%.$3f..B;VKU}.....a.n.NFY.J>.....lz..../..Y...(J
..q@..[.!....r.A..............wv}.....z.:......%...OOv..-J.........^q.
.........mK...........B..[)m*.....9t.#.>..&D...JG.9....H.....7d.i.?
.R......Tv.. .....#.57..'?._..W..... [email protected].
...&?..^.7.z.....9....v.o.... T.M.!!m...#.i.f<..r..B.FZ.6m......:..
.j....V[..[....W.w..`...u>A..E'S..$..I.-..:...W2*.. ..D......8..5..
...[.t...bF{.P...K...Xul.t.......q7(:.BC....\T.J.VP..b.KRX>4!.z...W
..eD...........$}.<.A...2s..*,7...g.&..WWm...!2.<vGa\nW.><<< skipped >>>

GET /cnnnext/dam/assets/150323200604-erin-dnt-elbagir-nigeria-children-for-sale-00032720-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 19305

Cache-Control: max-age=3489

Expires: Thu, 30 Apr 2015 08:23:23 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.G.........................!1.A."Qa..q..2...#BR..3...$b..Scr...LD...
.................................)......................!..1.A"Q..2a.#
BRq............?......S.~B..-...4....7..NS...g.r.vD:WN..hbvw...S...nvU
...{.k....T\.t.n2@..>k.!>..Ru. ...=... ?.9.U...ol*}....]A.k..../
glz...a....r..9G........d..%)..Pq..a.`.......<.[vD .=...c.1I;F..Hxl
..r..,....U $......&"...w.!BQ.%q....y.E.F..Y..R..c$v.......,k...Ko....
..)..<.v*p!.BP.q....Z....4.P.i..7*?..xR..x.4i......4. >lz.......
.p0.(..;.7$.....[.p.....C.].d.h..p.x*=.H(i.=L...y|..h..Q]."=m.....j...
.....c...s...V.[..Q$..`.i.%.=....s_Q%d.ies.<.8......3g.......AY...S
Q.R...^@i......bO.i...2..'.O..%F.c..|(......SX.6....)..o.v...`.....{.&
..=.FxsNA^1.a.8.....&.t...{.=......Q.R..O...I.z~:.?.L...7...'.v....T..
..D.5......6Ys...5..J6..6....Z..I0..P.)\I....D....g..0.I...tg.*}<..
%Qd................'[email protected]. .{ ...,Y...;...6C..k.KeP....
.P4;Y .....W7...F.(.. iy..~.QT..K .v..m<.r..8....S$..V...rM..TG?%jY
.M4.%..Q..p.....].%[...d...t...|..#..S..A.w.~... Z<.Q...e...O...*4.
.......8K.g..........$C.t#....i......h......\..tCm.3v..9......4."...d.
l.s...>...'..........7isk)|Bp8...|!..6...].?.k.O.[(.p.7..Q..1J.D...
 ...|......O!......A..R......4...c.f.a.kY..G..~.....v).w.Y.(.....i;.(.
T.8`.?..7..z......{.@\N.u:&....K;...E!.7.F.P.6.).REF;..,..P$.5....<<< skipped >>>

GET /cnnnext/dam/assets/150324165113-china-boy-reflection-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 35871

Cache-Control: max-age=890

Expires: Thu, 30 Apr 2015 07:40:04 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.F.........................!..1A.Qa.."q..2...#BR...3b...r.$CS..M....
..................................7.......................!..1A.."Qa2q
...........#B.3Rr.............?...:RI]ibw..X.\.....u_Z.J..^..E`......V
VVW....qS]........lg.h.vB.Cc...JG.=.p...b........r......SI[4]..e...-..
...{.|......c2..i.......".......?S........H...G.[.H......)..z'....B...
....uZ..*7..9.C...T.f.cw...t.*.L.EK.`..z...d.....R.h...=>TR..mQ.YR.
)...$........O3##.{.).J?.v.. ...!>]qQn$_.....PJ.....|..dlMs..].L...
..;..e....!.J.<.P..P..#J..a.6..t.n{t.%...w.<.....Rq.<.=.N.>
;c,[email protected]....?.....pCjU..B.|.....u..{..~.t..f4.h,..,.g.b1..c...
B....v-...8~._Q..d...8Pju.i..HlGE.......c)...........^...:...Fy......_
!.D..G$.S..-e...\...L.......I.] ....p.N..M.....ui(QI. ..... .o..../...
S...g....*[email protected]..=S...7.'$.e.[.I..XL.W..n.B...J...r..)qj..q[$.[:
B.{......X...>....*W.S|`.......`.$#.....\@.-..O...=.,[email protected]
....u.....0..,7UY.5%..Sg ......*.....8.s(4y~..Fy.J......r2...h.#k.{.Q.
Cj._... .........*A7.3.. .#u.....\.....R..)..F...'.".....q.w.....].-.L
..r...l..S.q!.d....S.....r.H.....sO.../.......N.....5"^......PI......e
..U......$.......'..)......J.....u..K<.....Q.J....F...SL.....TR.Q..
GF....\..8..|S.W.6:T0A.....u.....T...v..2..B.]e../..j...."%.n.......Yo
.)z~{..4Zy.....U.(..).T,.O.?...:.!w..............,......'U.6...:..<<< skipped >>>

GET /cnnnext/dam/assets/150320113558-bihar-parents-exam-cheats-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 66562

Cache-Control: max-age=1888

Expires: Thu, 30 Apr 2015 07:56:42 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.H.........................!..1."A.Qa.2.#Bq...$R...3b...%S.....4Crs&DT
..................................4........................!1."AQ...2a
q.....#B..3...R............?.^v.EM........:..t..r...&..<x...:vi....
.z...m...e5Utk<...Vulco.x_=/..T.Xk.Jz..A..m.....y.......tJ......U2;
H.A.8/$.p...p...:.9....dw.ZM...P.J.k.u.x..59..r....o{{...<p:?.. .-t
.8 .J.W#........ ..q......;.W....MO.V(..wVS.......7(#....j-.....Z.k...
.<...|&X..._....~s...h-9.l.....U..;..2..YV!$P.T............].pc..zD
...j...=7W[.XS%..Z.jD......i#.....c.,zf.o..GE`..*.I=,.....m,..d.rW.Fv.
.aI.n..#[email protected].~..z...$.|.I.......>L~......IcD.........Z.
qG,.3.M$.../........U......g....OI...$e.s........n..cW.".}-vj.M..N.2..
............._y1.V%.%.O.7."8.........>x.?{ L.....F..g......_....U..
.,.hH..Q3;...2..../....y.'.I.]1-...S."....JaH..p.....6.8../.#o........
Z.9(...je.G.l..*.6.e.`c'?.=.K ^).e...M4tt..!.Hdf..sE.....8o...b..at.X.
I.Jj..G.w....Y.....C<p...,7..Zb..).)A....Vr.........de9..A."RI.e=N.
..G.hw..-!....3....H....U..6).UH....I ...........@...,. .....A.i'.<
t....}=;N.j.z.cM..c......8..$..BR.R.7ZG.\. ev.E...;...m..*.G.d.......|
.f....d..t....B.Z...]Ml.(..T..iQ..t.....R..m..r0..h...0pU3.......J.n..
...w.....U..ZT.!YVf..#.Otp).~..g.K.'J...%.(O..'..>G'..Yf."Y.....qj.
[email protected]....#...sT...Y.........{o]Oi.T.. W..u.>rd)...........w...<<< skipped >>>

GET /cnnnext/dam/assets/150318175135-lemur-fossil-graveyard-madagascar-underwater-cave-diving-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 27011

Cache-Control: max-age=501

Expires: Thu, 30 Apr 2015 07:33:35 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.A.......................!..1.A."Qa.q...2...B...#$...R..b'3.4Scr......
............................1........................!1A.."Qaq...2....
B..#..............?.........7.[.R......XP.o.J....b.:j..8..w.C...7..?.=
iw.....y.._1-..w......O.....R..Qw?.q|....@......_.o......."A ..../j.I.
{....j.....6..d......BT..9..7..oH..i.G...$..F3[.}..X..M....T.....b.Pu.
-.6.....]HV.....#...%K."............NA.3".k.H.|1A.]..DmSfa ...2;M$J.%!
a..<..x..W..H.G.#..J...#...Vi...\[email protected].;.....VV.<d.x&fwAW"28.
*m.:0..)m.j*...Oy...4JK........2<..^-......{...u....V..K..x..... ..
.v...Id....'.U...)[email protected]=..5..?n.]g.J.....9...[....p
.....cjB..D.....I..}xK.j...i.]..|U.ai..@...~ l.j...u.........."....X.o
B..-0.G..w..J..o...K....!\.....4.q..<....zg.'Bi..L^_.z....)K.\.T.x-
.....Q...y.K.A....I.?...z|....?...,....H.....y....-D...jT.*..c....?...
...]>=t^.]...o.KW..!. ....Z.(.J.......R.l.....$v.........Z.........
..;..W......8.i.l ....X\.....g.....?......T.4.Aw.j..E.5..C.QT....AI.F9
$......./.......O.....K.1.~K......X........CuKS......:.E^..qn..J.Gq..*
.....@..".50...N...~...s...c8..].lJ..np..A......]..%@...".............
..j!..cY!.......u....&0H"pb8"~.....B.C;J......$..S..x.&...Ja........jO
..W.......[.c.3>.....C.=.p.X...!...%M.(....'..mP-.S%......s.....B&l
t;@J'...c.\.>.:m.........yWcI.E.<.........I.R |...mN2...B.g.<<< skipped >>>

GET /cnnnext/dam/assets/150310163122-iran-esfahan-blue-tiles-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 48392

Cache-Control: max-age=3020

Expires: Thu, 30 Apr 2015 08:15:34 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.I.........................!.."1.AQ.#2aq.......B..$3R...bCr...ES.s..
..................................3......................!1A..Qaq.."..
.......2..3B#R............?..8.."..#.j9....)3..)..TVF..K.*[email protected].=&K3.
..,..eU..)$...=e<.jx... .V.......mk.?..&..&...Y...nm<F.<..]..
...3.........j...).((.Z..%9.J.g...8...H]U.1.....7.c.L.nY..$|DX.....*..
pJ..<T.Q%\..1....... ...("7.I..(d.uLF.'.%.........Y...Y5.Y#V..,c..T
.X.....y:L.R...K/.3.Rf.....Z......BH....lVs<.x.7.L....4G..BQ..J.. .
H..t..`w....=.'.0:u.=/K...N#..-..$..3..0z#%.|US.h.G(..`.^..l._HR.i.=.U
.\...c4.....A$h.K..q.CD.....i.........0.9t...2e.Z..S.O..!..@F..t.....7
...R.AM.pR.$=3%-< ...F*.K*[email protected]..;.y|g..N..ih...b........p..
.D.......}........;....h....c....}.U..4.J..m?/..d...R.....Z%f...bA....
.N.6...X..........-..l..l.N...t...o.....}......Zh/..{.....ml<...;.M
.G..`.,IR......k..C.l."n..s....]Rt.. -..E...i......{.Z......CQ......V*
[email protected]......]......).$.JzL.^...y........J.wK .I:...:.........&..
.R...V"...>....y.L..Z...OK=MB.$qMM..f&....{[email protected]
.j... -"..h..n.7......| .(x........Vc.T..q...r...{...T^........ZX.\...
...lj.....F ...)6 .d..c...<.......m...2...Z.j$y&.!fP`d.c...'T.H.HV.
&MsZ...h)i..H........0.|..5..e......j.k.i)...1.r......I>.Q..u%J....
......3...z..5.6..)..0..0bum6md..t....<.u....[...QF..-,R..i..T.<<< skipped >>>

GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.hp HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:06 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.58 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Thu, 30 Apr 20
15 07:23:06 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.58 ms","message":"store 1 ac
tion and 0 update "}..0......

GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.nt.ff.tab HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:12 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.55 ms","message":"store 1 action and 0 upd
ate "}..0..

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:20 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Last-Modified: Fri, 08 Aug 2014 00:51:29 GMT

Accept-Ranges: bytes

Content-Length: 131

Content-Type: text/plain; charset=utf-8

Vary: X-Ssl

Age: 2

Via: http/1.1 yts201.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r18.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Connection: keep-alive

User-agent: *.Disallow: /print/.Sitemap: hXXp://finance.yahoo.com/site
map.xml.Sitemap: hXXp://finance.yahoo.com/seo_sm_finance_xml...
..

GET /rss/techticker;_ylt=AgNOUJ4WcWe1kmDTnkJPdaVk7ot4 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:20 GMT

Location: hXXp://finance.yahoo.com/rss/techticker

Content-Type: text/html; charset=utf-8

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts261.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r18.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
00000ab..The document has moved <A HREF="hXXp://finance.yahoo.com/r
ss/techticker">here</A>.<P>.<!-- c27.finance.bf1.yah
oo.com uncompressed/chunked Thu Apr 30 07:25:20 UTC 2015 -->...0..<
/font>....

GET /rss/techticker HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Redirect

Date: Thu, 30 Apr 2015 07:25:20 GMT

Via: http/1.1 yts229.global.media.ir2.yahoo.com (ApacheTrafficServer [c s f ]), http/1.1 r18.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: no-store

Location: hXXp://finance.yahoo.com/blogs/daily-ticker/rss

Content-Type: text/html

Content-Language: en

Content-Length: 405

Age: 0

Connection: keep-alive
<HTML>.<HEAD>.<TITLE>Error</TITLE>.</HEAD&g
t;..<BODY BGCOLOR="white" FGCOLOR="black">.<!-- status code :
 301 -->.<!-- Error: GET -->.<!-- host machine: yts229.glo
bal.media.ir2.yahoo.com -->.<!-- timestamp: 1430378720.000 -->
;.<!-- url: hXXp://finance.yahoo.com/rss/techticker-->.<H1>
;Error</H1>.<HR>..<FONT FACE="Helvetica,Arial"><B
>.Description: Could not process this "GET" request..</B><
/FONT>.<HR>.</BODY>.....


GET /blogs/daily-ticker/rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:20 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 90g29ahak3m70

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Thu, 30 Apr 2015 07:30:20 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts265.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r18.ycpi.dea.yahoo.net (ApacheTrafficServer [cSsSfU])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
0001399.............\.v.6...S`z&qr..&{Q/..#[..(.....A..&,...R..U.bn..y
.y.<.|.....d%-%.?."....B.W ....,e..X..;.p=h1.G:V..N.*.|..q.....adn.
.....J.....V..%...h.....ad.u:c.3..(.y.S.*U........r.Gr....v.J.l_EG.l..
.[........~...h.I.g.....tO.7...[....QE.R.4..g...-....0.y..u.0j..[..W..
.{...>s...{.G.l;M...2#.4.2.l.>}k..&;..[..\cA..W)..ca0.;.p.x....v
3.<)..>.\..T.).K.U..y8]_.l...m............]%.....35.l...6......V
M.v....X....Y......`sa.L.........6-.(...?....#.'.......$s.....[.=... s
.2......;.....V..6...N.L;....mQ.6....w......7....^...6.=_D..8o.}sw..~.
..~.w..~..F.d....zo..y...=..z...><......^[..T..;..f.m.&.l.n...b*
.Q..`C.0.=>.v#.1... .......W.. [email protected]<...A{S9
-[.....O......<..qmA.0.H&......z.Y.Bfq,LLleb..B D.$.b.A.D.....e....
..X..aLY...lZ......0e)-K..dOp......F.UV..eV...S..........@.;-..-....Y.
..6].......csV)0..I.....Nk*R [[ ......6...#..2/.t..R..E..v.....|...l..
..A..P..8..A.......T.O...W......A .x..{[email protected]...&..)R.au..3i..d..beg.
-e.w=..E.A5...W:......o[......(A...U...K6.%1..z..:y?.6.S.....W.mR..".[
...".....9m.....ag.t;..R....5....y...q.7.. ....6......Q.."....p.1...J.
.e..\{]n...L..R.>H/..&.P...../A..H7...x."9x8.i....{/....?..t.TOD...
.....[c..W......._....}.............{{./...>}........<.G....vG..
v...}.....v.Qp....../.0[......./^<.{/...}...F..*.K............G.!..
1.TF.."..O.2.....F..>...p.R.LO.q.$.....1G.h....RHj...P..Pr>..._1
 s...:..\.......r....Ho..D|.0x..'..7.T.../..P@[email protected]...;.t..W..
.P...h!9..........[.....Jg...o.........L{M%.8p.......bs=.......*..<<< skipped >>>

GET /rss/techticker;_ylt=AgNOUJ4WcWe1kmDTnkJPdaVk7ot4 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:21 GMT

Location: hXXp://finance.yahoo.com/rss/techticker

Content-Type: text/html; charset=utf-8

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Age: 2

Via: http/1.1 yts265.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r18.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
00000ab..The document has moved <A HREF="hXXp://finance.yahoo.com/r
ss/techticker">here</A>.<P>.<!-- c19.finance.bf1.yah
oo.com uncompressed/chunked Thu Apr 30 07:25:21 UTC 2015 -->...0..<
/font>....

GET /rss/techticker HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Redirect

Date: Thu, 30 Apr 2015 07:25:21 GMT

Via: http/1.1 yts265.global.media.ir2.yahoo.com (ApacheTrafficServer [c s f ]), http/1.1 r18.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: no-store

Location: hXXp://finance.yahoo.com/blogs/daily-ticker/rss

Content-Type: text/html

Content-Language: en

Content-Length: 405

Age: 0

Connection: keep-alive
<HTML>.<HEAD>.<TITLE>Error</TITLE>.</HEAD&g
t;..<BODY BGCOLOR="white" FGCOLOR="black">.<!-- status code :
 301 -->.<!-- Error: GET -->.<!-- host machine: yts265.glo
bal.media.ir2.yahoo.com -->.<!-- timestamp: 1430378721.000 -->
;.<!-- url: hXXp://finance.yahoo.com/rss/techticker-->.<H1>
;Error</H1>.<HR>..<FONT FACE="Helvetica,Arial"><B
>.Description: Could not process this "GET" request..</B><
/FONT>.<HR>.</BODY>.....


GET /blogs/daily-ticker/rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:20 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 90g29ahak3m70

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Thu, 30 Apr 2015 07:30:20 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 1

Via: http/1.1 yts265.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r18.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 5098

Connection: keep-alive
...........\.v.6...S`z&qr..&{Q/..#[..(.....A..&,...R..U.bn..y.y.<.|
.....d%-%.?."....B.W ....,e..X..;.p=h1.G:V..N.*.|..q.....adn......J...
..V..%...h.....ad.u:c.3..(.y.S.*U........r.Gr....v.J.l_EG.l...[.......
.~...h.I.g.....tO.7...[....QE.R.4..g...-....0.y..u.0j..[..W...{...>
s...{.G.l;M...2#.4.2.l.>}k..&;..[..\cA..W)..ca0.;.p.x....v3.<)..
>.\..T.).K.U..y8]_.l...m............]%.....35.l...6......VM.v....X.
...Y......`sa.L.........6-.(...?....#.'.......$s.....[.=... s.2......;
.....V..6...N.L;....mQ.6....w......7....^...6.=_D..8o.}sw..~...~.w..~.
.F.d....zo..y...=..z...><......^[..T..;..f.m.&.l.n...b*.Q..`C.0.
=>.v#.1... .......W.. [email protected]<...A{S9-[.....O.
.....<..qmA.0.H&......z.Y.Bfq,LLleb..B D.$.b.A.D.....e......X..aLY.
..lZ......0e)-K..dOp......F.UV..eV...S..........@.;-..-....Y...6].....
..csV)0..I.....Nk*R [[ ......6...#..2/.t..R..E..v.....|...l....A..P..8
..A.......T.O...W......A .x..{[email protected]...&..)R.au..3i..d..beg.-e.w=..E.
A5...W:......o[......(A...U...K6.%1..z..:y?.6.S.....W.mR..".[...".....
9m.....ag.t;..R....5....y...q.7.. ....6......Q.."....p.1...J..e..\{]n.
..L..R.>H/..&.P...../A..H7...x."9x8.i....{/....?..t.TOD........[c..
W......._....}.............{{./...>}........<.G....vG..v...}....
.v.Qp....../.0[......./^<.{/...}...F..*.K............G.!..1.TF.."..
O.2.....F..>...p.R.LO.q.$.....1G.h....RHj...P..Pr>..._1 s...:..\
.......r....Ho..D|.0x..'..7.T.../..P@[email protected]...;.t..W...P...h!9.
.........[.....Jg...o.........L{M%.8p.......bs=.......*..:x..6.W..<<< skipped >>>

HEAD /rss/blogs/daily-ticker/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Date: Thu, 30 Apr 2015 07:25:21 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Content-Type: text/html; charset=iso-8859-1

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Content-Length: 624

Age: 0

Via: http/1.1 yts237.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r18.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Connection: keep-alive

....

GET /rss/blogs/daily-ticker/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Date: Thu, 30 Apr 2015 07:25:21 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Content-Type: text/html; charset=iso-8859-1

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts244.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r18.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
270..<html>.<meta charset='utf-8'>.<script>.var u='h
ttps://VVV.yahoo.com/?err=404&err_url=http://finance.yahoo.com%2
frss/blogs/daily-ticker/';.if(window!=window.top){.  document.wr
ite('<p>Content is currently unavailable.</p><img src="
//geo.yahoo.com/p?s=1197757039&t=' new Date().getTime() '&_R=' encodeU
RIComponent(document.referrer) '&err=404&err_url=' u '" width="0px" he
ight="0px"/>');.}else{.  window.location.replace(u);.}.</script&
gt;.<noscript><META http-equiv="refresh" content="0;URL='http
s://VVV.yahoo.com/?err=404&err_url=http://finance.yahoo.com/rs
s/blogs/daily-ticker/'"></noscript>.</html>...0..
....


GET /rss/blogs/daily-ticker/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: finance.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Date: Thu, 30 Apr 2015 07:25:22 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Content-Type: text/html; charset=iso-8859-1

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Age: 2

Via: http/1.1 yts275.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r18.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
270..<html>.<meta charset='utf-8'>.<script>.var u='h
ttps://VVV.yahoo.com/?err=404&err_url=http://finance.yahoo.com%2
frss/blogs/daily-ticker/';.if(window!=window.top){.  document.wr
ite('<p>Content is currently unavailable.</p><img src="
//geo.yahoo.com/p?s=1197757039&t=' new Date().getTime() '&_R=' encodeU
RIComponent(document.referrer) '&err=404&err_url=' u '" width="0px" he
ight="0px"/>');.}else{.  window.location.replace(u);.}.</script&
gt;.<noscript><META http-equiv="refresh" content="0;URL='http
s://VVV.yahoo.com/?err=404&err_url=http://finance.yahoo.com/rs
s/blogs/daily-ticker/'"></noscript>.</html>...0..
HTTP/1.1 404 Not Found..Date: Thu, 30 Apr 2015 07:25:22 GMT..P3P: poli
cyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV
 TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND
 PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"..Con
tent-Type: text/html; charset=iso-8859-1..Cache-Control: max-age=0, pr
ivate..Expires: -1..Vary: Accept-Encoding,X-Ssl..Age: 2..Via: http/1.1
 yts275.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), htt
p/1.1 r18.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])..Server: A
TS..Transfer-Encoding: chunked..Connection: keep-alive..270..<html&
gt;.<meta charset='utf-8'>.<script>.var u='hXXps://VVV.yah
oo.com/?err=404&err_url=http://finance.yahoo.com/rss/blogs%2
fdaily-ticker/';.if(window!=window.top){.  document.write('<p<<< skipped >>>

GET /3428_3b67a5ef5d450c1556c543c6323981d9/1.pak HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko

Host: dlrkbt247pbk6.cloudfront.net

Accept: */*

Accept-Encoding: gzip, deflate

Connection:keep-alive


HTTP/1.1 200 OK

Content-Type: binary/octet-stream

Content-Length: 2211109

Connection: keep-alive

Date: Wed, 29 Apr 2015 20:59:37 GMT

Last-Modified: Wed, 29 Apr 2015 20:15:27 GMT

ETag: "a998ee28bb26d889b8eed353d164f5bb"

Accept-Ranges: bytes

Server: AmazonS3

Age: 37406

X-Cache: Hit from cloudfront

Via: 1.1 e13dc20cb35881b25fb296fb0383f55c.cloudfront.net (CloudFront)

X-Amz-Cf-Id: wGcdvddZBT_4b6qlkKjXNPzqjCh7hArSFnmC6xkI6An_3nj-TLHTuw==
...... . .......!.............474.json..[...V.m..[.:?..y....xL..@a....
..w..sN.....^.9....'.t.."....u...........N5..g(.......{.)..Q.!..Dk..ze
f....s.{.kM.S.*:.......6|.&...M..ZWYr.....uA....R/..,...0..........g..
]V3..n.`...}..g_j.......i.n..;.........Ts..C......o.l.'7u..........l..
.z.ZJ......S"Z....f....W..m..^....$m.=...O.Z...k.=..i...`_...;......kV
........V..8?V.;...*......EF...^'...?*..n.r&....o..wv..}\S.,......N...
.4.w...6.......:....s..)......C.eg..4..........~........P.F.E.i....0..
....c.....9..feKn.q.x......y.................<.(.....PK........|*.F
..3.e....K......uninstallDlg2.xml.\m.....^.......z.f.N...mo..As..$(..@
K...L.../...w(Q.d.k9.6^T..."....gH....o..1.'"...,gh[...G.-gV&...X(..E8
....'.Z.........E.....(........q"sQ.@}=..Fd..X.8.!...Y..........|.o..1
..Y......%; t..hfI...Q.c.....S..8B.~.x..S%....p.G......u..m.R~%..E....
....{.gp..9..?.'..k.\..I...]........K..B.$...q...5^.]..1...O......s...
-.b..L..M.s......Z.^qy.....ul.!7....N..2....!;.)..'K...t..4..5.O...q..
.......u...9...:iG4.P....Ek.....(..D.C......ng..{.oP.....{....t..nd8.`
. .c.x..!.;.$7........ve.........p4.s.P....C..l=7e.7.......\0"t=,"..(`
[email protected]*.6E%#....)..~N..6........1T.(......3.0...f.......7.
.xb...v.&..C..q.`)n..e.Y.L1....j.'"$.q.=~..D.4...5Rq.....B.<(...m.Z
....z>"...7 .fp..J.&..>*....e.mOl.)#.g@.*....?.?.=..8..f.....B..
Q.G.4.......!.!...`.2.V.....%....hQ.-.Q..^{[email protected]............\..
:..Kv.s....../OW.`N6(..&.....(5."....m..C....c.C..?{C^......pbT..*-...
j..F...R.......U..'o.OJUu.]^4..^........x~ I..0[nV....PA.O...8.'.r<<< skipped >>>

GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: ajax.googleapis.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/javascript; charset=UTF-8

Last-Modified: Thu, 29 Mar 2012 18:19:50 GMT

Date: Wed, 29 Apr 2015 01:10:09 GMT

Expires: Thu, 28 Apr 2016 01:10:09 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 33673

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 108807

Alternate-Protocol: 80:quic,p=1
...............F.?..<E..).b..(.........v..i.......E.,^"Y*.E......m|
#2...,.g...n.q$....;..v.f.y.o>.}...W....=.z.jq.77.Mq9/.|....^..?.[.
.r..c.....,.....&..m.g.^...\f.{z8....\e..O.<..?..^.O....oe~....u...
;."...U.w.....t6.....xs.Di/Ye.T.M|....]......:_foW~..<.z.v.{Y.]..O^
0.z.|......*DO..j.{.=_{.Cz....-U.n.x..=.../. '.x.{.Jo{|..j....n..l7..4
/.....T.{.rZ.3........C.jU..<..p.......'.V....e.J........?.m....fG.
..{......P.....t..?.B.X....k..s.c.K..-.".pS.n..P.6...:.Y.T5.4\.W;...U.
.44....;..,e.=...^..S?]c.i.C..O.h......_.....GK5.M..8....4.4.E..Q.<
...m.{[.....O.....=.lI..8....n....2.?.{/.....?&....}_...v5.....w..}..G
..w4.....l.V.......i.mw..&4Yi.@[&..........i.>.S%..aA0..fQ.hK..pP..
....<_......(.]..\-.R..z0Ym."....rPt........o.g..zM..!.P...p...Mi.l
w.rYx..|4..V.......0F..|4....<....1..-..S/....|Nx...;........".w.3.
{..Q>Z.i....x.Ut...:Jx. .3..f..G@Z.:.y..g4\j.v..B..]>...c...[.. 
z......\...:\.%.p...AB{[email protected].{?..d.[..dC....h...!X.V.w.[Q..
...:.h9\.i...........1.Ae.yr.W.........M.]..k...y...c.y.J.P..O..G....i
AJZ.{[email protected].}0.........^......&..5.....`.F.Y....<.......
....@[email protected]..`......V....78M.X yM.b.x(u....Q..f.l...f....E....
3.#..l.l...`1Y.t.N...M...o..ZR!.D.<..}.JFJ.bF..A.z.....z3.a....x.D.
..S9.D....N.n..j1...)f...$..?.z.Q>.....Q.3.'.n..P....x..|..v.....&l
t;...F..~..M.eh)..Q6..x..]..O.......G(@..N.H.... .Ip../.pjz....h.....t
UD..V.h2..........].Y4.N5........7j.}...3. [email protected]..}n4Pz..5.....h&
gt;...$...X0....U..S...u;...BV.A._ F.P.........T.F.6..I..b.%*..:..<<< skipped >>>

GET /nyt/rss/HomePage HTTP/1.1

If-Modified-Since: Thu, 30 Apr 2015 06:12:54 GMT

If-None-Match: 1430374374000

Accept-Encoding: gzip,deflate

Host: feeds.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:28 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://rss.nytimes.com/services/xml/rss/nyt/HomePage.xml

Content-Length: 264

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://rss.nytimes.com/services/xml/rss/
nyt/HomePage.xml">here</a>.</p>.</body></html&
gt;...

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: promotion.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Date: Thu, 30 Apr 2015 07:25:07 GMT

Content-Type: text/html; charset=UTF-8

Server: Google Frontend

Content-Length: 287

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
.<html><head>.<meta http-equiv="content-type" content="
text/html;charset=utf-8">.<title>404 Not Found</title>.
</head>.<body text=#000000 bgcolor=#ffffff>.<h1>Erro
r: Not Found</h1>.<h2>The requested URL <code>/robot
s.txt</code> was not found on this server.</h2>.<h2>
</h2>.</body></html>.....


GET /admin/items/get_items_to_promotion?numTimesFetched=0&uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: promotion.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Thu, 30 Apr 2015 07:25:07 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 161

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
[email protected].`o..x3.{.._..%n..9....D&l
t;..q....;.l.e.._..~..1.$$....0.1......V6.?.".^...b..i..o|.0N..H0..Q.-
...?ma.(..*.WN.../..........


HEAD /admin/items/get_items_to_promotion HTTP/1.1

Accept-Encoding: gzip,deflate

Host: promotion.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=utf-8

Content-Length: 197

Date: Thu, 30 Apr 2015 07:25:08 GMT

Server: Google Frontend

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

....

GET /admin/items/get_items_to_promotion HTTP/1.1

Accept-Encoding: gzip,deflate

Host: promotion.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Thu, 30 Apr 2015 07:25:08 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 161

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
[email protected].`o..x3.{.._..%n..9....D&l
t;..q....;.l.e.._..~..1.$$....0.1......V6.?.".^...b..i..o|.0N..H0..Q.-
...?ma.(..*.WN.../..........


GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: promotion.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:23:16 GMT

Expires: Thu, 30 Apr 2015 07:33:16 GMT

ETag: "s5BfJQ"

Content-Type: image/x-icon

Content-Encoding: gzip

Server: Google Frontend

Content-Length: 1676

Age: 112

Cache-Control: public, max-age=600

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
............iP.G.._k.~q.Lg..Om._...s...A..[...\....x0Z..HP.W.U.<.r.
"........#.E"7.<..@L [email protected]...}..=.}7.....[..#..q.Xp.W..YXh..}.q...
oH.....i..I<^..D..Z.....%..5..........._...n...\.;.B..gi[.......s..
..9....m ._.~.l.~.x<6.kf............)?r._K..J....x.<..::VQ~.....
....HT...........J..xf...&1=.......|~.\j)_C.|.y.l..z.}..${6.|9...[....
....T..O...~.<.......oh.a|...P.'...x..o.....422.>...|...........
7..iD..w..O.r...Mmge.b...?..]...i....TTh0>>m.........6.oi.e>7
..y...!V....ONi...!w..75...{W..Q.. =f./]R...t.z/[..%...}d.BC.......I.^
.lf.....7.......HLj]0.}.........F..l.F...U.X.nr...w#<.........}i...
3..[J..E...0(...A.....M......D.E..k{#[.......^..........j...f#$....Z..
..6x.4.w..... }...... ~\.._........!..r.3.h.....  .uN\.D..C~.bA..7..XJ
.(.._............4)..f..3oM..i.|.....9............9..4.&..w.M.x.x.....
...].gc..ma.....q(-..7e/...?.... .`.......Blz.I.G.........s.....7...p.
....}......f...E..5.H......l........S....G..4.#qSN..'lW..._Vbpl..^~...
.H>....j..3.(2...m...\...G....f............G...d.h.y..i....z.D..xb.
....=H.....}..jp$...A.P.j.;H..{.$.*.*.B^...w58....[.....i.W<...owb.
S.e......m.!-.).>..#.(.....~........Q9...&..k.b...&W..;BTB.[.../...
>/....8..m....P...w.......Va....M........$.L..K.....VVI.....8."wR..
..K.D........r.-.......[.k....l7..~.....`c...gi.q..............*.Se%y.
.T@ ,...m.._....g........v..N..!./..w~<x..................._(|.....
3..................X}}....Q....s..KH.....}|......r.<#m(7.....#.6...
..kr.\].&g.s]...4~..7.;8>...Y(M...E.Jlv,..7X'#0..N[ u..R%..:.."<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 Ok

Server: nginx

Date: Thu, 30 Apr 2015 07:25:02 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Cache-Control: no-cache,no-store,max-age=0,must-revalidate

Expires: Thu, 30 Apr 2015 07:25:02 GMT

Last-Modified: Thu, 30 Apr 2015 07:25:02 GMT

Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' hXXps://yastatic.net *.yandex.ru yandex.ru *.yandex.net hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.yandex.net yandex.st yastatic.net *.yastatic.net ws://portal-xiva.yandex.net wss://portal-xiva.yandex.net wss://push.yandex.ru; img-src data: 'self' hXXps://yastatic.net *.yandex.ru yandex.ru *.tns-counter.ru *.gemius.pl hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.tns-counter.ru hXXps://*.gemius.pl yandex.st *.yandex.net yastatic.net *.yastatic.net; report-uri hXXp://VVV.yandex.ru/log/csp?from=yaru.ru&showid=22910.28529.1430378702.198&h=u59&yu=8913819001430378702;

P3P: policyref="/w3c/p3p.xml", CP="NON DSP ADM DEV PSD IVDo OUR IND STP PHY PRE NAV UNI"

Set-Cookie: yandexuid=8913819001430378702; Expires=Sun, 27-Apr-2025 07:25:02 GMT; Domain=.ya.ru; Path=/

X-Frame-Options: DENY

X-XRDS-Location: hXXp://openid.yandex.ru/server_xrds/

Content-Encoding: gzip
e89.............:ks........X.....).W..T.(v,.nG.p...\..zw!..8........~.
..p3i;..../P..gw...I'..xl.{..9g.{.>.z......81F"..G...C.......[...C.
.....q....>K&..^._..$FF....X.....q..1o'...1n.n2.;.qc...DD`CN..]J.=.
.....$..X.~H..'. .....G.!.E...t..7.n.............zO.j..tL.......g..a..
.^.zf.....W.#...x..[$.?.).D.....\w.A...NL..%,.v......5.K.....=g.......
.. ?..F.~..J.2.O..a.....i.O....rP..........p.....P..I:...S..t....<.
?.f...../...E.......>.O.)x?.qX..d....$..._......Gp...\.G...`......%
c..Y....u...e..>.c.U.(..%L.)$..h.....=.!a...A....x21.P2l ).Y.$.....
....9.d-*.....!y9$...6K....(Y.b..(.....=.....Z......<.z..._.......O
...x|..4vw...\c<%.."af.....\0..........4...$~..y'.9..|t..).o)...!.%
.h.....<.......T7.r...$#..$.T...K..q...wwk..........W2../.Y.y.gf..x
r~.z.p....^dv(n.....$........p{U...H...y..\Z...E...<..$..Q.uigw....
.Nh`..<.\..zyY..=...3..fZ...Q.l..W.b...,...........'.... .....h....
.'.....|!.%.H...., %..@...........,P ..1...WwH..>.d.....~..i8:.....
......0..w.?>~r.zr.|.yhfQ~.....I...X..[..`.[[email protected]&.^...... &..5.
.....I.d..\...K$.74.{.^.eF2..8..m..H..;z.9g.b!m#.>K...g........F.3.
q..2.U^.j./.../.....w-...%..,wqzrF.K......2.q.fm{;.*-..V.(...I....xm2.
[email protected].'X......w..&..CT..............E.q..q.dD....u..........f.^w%.
.H.......O^.<..c._..7T..e...}.....hg.,lq ........,.9.O...y....%..v.
......`.j.k5..:..;5.=..4..<J..e...l.Q.B.....j.&_.3....Qc..A.......F
|."....X...\5.E.....&B. .........4...XQ.Y....3#...>...,I.@&...\.6..
..Sh...Y.'*s...,J..Z...5C ...B.T....\.a$...dm.k.dT[.....-,........<<< skipped >>>

GET /images/Tokyo/tokyo_sprite_full.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: dreejadsuld8c.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 26401

Connection: keep-alive

Server: nginx

Date: Wed, 29 Apr 2015 08:56:59 GMT

Last-Modified: Wed, 29 Apr 2015 08:47:22 GMT

ETag: "55409a9a-6721"

Expires: Wed, 29 Apr 2015 09:06:59 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 370

X-Cache: Hit from cloudfront

Via: 1.1 761f19bc2f5721b0be0a41147e1e925f.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Vt2pA73DlNsz-SObp5hcMkW0NRfM5QoqH6cs7NoFPYYnXX4TKR4z8Q==
.PNG........IHDR...............-)....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:080CC8DDBD6511E3B018CC78
0203A0F9" xmpMM:DocumentID="xmp.did:080CC8DEBD6511E3B018CC780203A0F9"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:080CC8DBBD6511E3B0
18CC780203A0F9" stRef:documentID="xmp.did:080CC8DCBD6511E3B018CC780203
A0F9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..!C..c.IDATx......G}.....9....,....;...Mx.
1..!.l...`............{..%.q...o..qp ...1.flA0..E.d......vW..W/S..3..I
gF:....5=..=}..3....._.B>......!...%.....RJr....e...m......M...uW*.
.v..j.J.b.~.w.7QI/....{.@...)]....}.Ugf......eM.u..].N."c%.,.V...;.5..
}.v.......A...l>.;.>O....Lo..ku^......3.8....x./M.G]5y.(P....p..
.X..^.z.....R._ ..m..u/|.......:D.Z....\........;\....k.....|x>7\."
....RLi.$.%ZWo\......o.]]q...|.r.......Y.3.mal...d{{..W.....fQ.-......
.j5..e.....6............k(......b^k.....|miA....A$..(;o.??D.p.S5S'..KW
.......=....>..H..f.5....N.t...6 .......0w.0.`.......x.y....S{.<<< skipped >>>

GET /sponsored/istartsurf/eula-istartsurf.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: dreejadsuld8c.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 26 Apr 2015 05:17:42 GMT

Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT

Expires: Sun, 26 Apr 2015 05:27:42 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Age: 594

Vary: Accept-Encoding

X-Cache: Hit from cloudfront

Via: 1.1 761f19bc2f5721b0be0a41147e1e925f.cloudfront.net (CloudFront)

X-Amz-Cf-Id: o0JWsVsvpsxHlgp2L8iS5cI48XHSDCczYmXifwlh7T6hnuRMKgVfEQ==
139c.............Z.s...... ..4.Z....m......g..........#y.>X|.b:....
....R.f&q........]<...o......Y.En.~....s39...}|>..q.....W_]....s
U.....J.........m7....v;.~<.......-.:....'.h.,k........"/..{.9...Ou
...l.?........;......oo.>....M\......G/.....S...f.....V..k..]...\._
...eW......d.1....{z.v....vy....r\...4.zvVvy~..}6........im..z.Y....k.
..Y.6.M.t...........O..O?.....a...M.V....nk.q.W.....w.....7..7.....~..
..>.....V....u.4.).RK....[...B....z....h....;H.....^Ze..o^.W..*].b.
.....~.5?>.?z..,.lw..\;....n...r..5A....*..lK.......|weW_..M......'
.z.......i.l......>....f.k_.p.E....v.$.4...x...y.^9I.zr.4..e.`...Q.
..f7.Wf.k.gS..~.:.....n.....W>..;J..&:...P......<.k..x........k[
C#g..].......(c...)~x......................^...y"...}.N.....)....<_
Ve{......ts;<[....g..`.4..K..#.]?.#.rE.%.{fR...Ilu....'..S..c.l....
'..=.{od...H....=>...}fN.r..G...H.............Ac.../.|........Cc.S.
...Z..\..h.....;.&iL.v..Sf........>..v ...6H.%.....j.\.....t.....7%
<[email protected]>.a/Bi|..1[[email protected]....]..)..|......X^.....<.G\.B..*3I
68..R.f....-.w...........u....E.2...w&u....q...... [email protected]..._...B.
rgZ_....U......>.j.m2....w.C...Z...M...w.^g. .....HO1....g.r... ..6
.P.o...... i.......z.B...9../[email protected]_....2....7.%
. .B....^.[.?N.....w.74........ 6.E_.j["kB..k..x.2'.L.N..Z6..ZN.E\!.7}
z....T...MyJp.aoY.1....x.\...iP.t.....3*.)...4.p...4.l.li.kD.W.......J
...n.=......f"..O@s|n.....m<B.J".Y.<....C.....!;#7.p..2..&.A.{.K
.....s.mp1.g.K.{P.. M....@....]]../.H.z.!X".b.....hL.W.e....vM...)<<< skipped >>>

GET /topstories/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Redirect

Date: Thu, 30 Apr 2015 07:25:16 GMT

Via: http/1.1 yts235.global.media.ir2.yahoo.com (ApacheTrafficServer [c s f ]), http/1.1 r03.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: no-store

Location: hXXp://news.yahoo.com/

Content-Type: text/html

Content-Language: en

Content-Length: 399

Age: 0

Connection: keep-alive
<HTML>.<HEAD>.<TITLE>Error</TITLE>.</HEAD&g
t;..<BODY BGCOLOR="white" FGCOLOR="black">.<!-- status code :
 301 -->.<!-- Error: GET -->.<!-- host machine: yts235.glo
bal.media.ir2.yahoo.com -->.<!-- timestamp: 1430378716.000 -->
;.<!-- url: hXXp://news.yahoo.com/topstories/-->.<H1>Error
</H1>.<HR>..<FONT FACE="Helvetica,Arial"><B>.D
escription: Could not process this "GET" request..</B></FONT&
gt;.<HR>.</BODY>.....


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:01 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: bgl3di5ak3m6d

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: HIT from ncache4.global.media.ir2.yahoo.com-2

X-Cache-Lookup: HIT from ncache4.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache7.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache7.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache4.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache7.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts266.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), http/1.1 r03.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 15

Transfer-Encoding: chunked

Connection: keep-alive
7b5.............Xmo.8..|.....8@)Y........m....).rE.P.e..D-I.q....J.-;v
..6...,.....3.....x.....K..T.......q..a......&......-t..L.H.H..O\WNr'e
n.....p.8....P.Jy.P...Ng..a.l. Z.[........|..F....j.xn..D!sm..!..36C/.
a.cg..%O....]P..)3.YM0....q...6e......F..a....>E4!J33.x. ........n.
;."...-.i...A.6..g.....('x...[.....[.e.......[.J.."2k...........-..[eX
.......k..B\w.;$#bn8....#..&.?...{.....:!#....p...T...)..Q4y$R.c=..E..
..oP.>....[7l>.*....t......'Jj.{."...Uk.P.H.....F.M.P1r...jp..id
=....g(....S...=C..-0.{.&..#V.".....e.`...R....j(V2Ee...A....Y..i#.g..
g8b.I.Z...Q..EQ...T]..%..8%..^.]V......s%s..|.......<jlk....~......
99Y3.......)...-...m74......zN.. ~.....x..s~."..E...1v..............f@
/;..K..............n......7u......I/F...I!......`....'.&.v..a..=..Z..]
.2.oE<|....~..Xh..E](q..v.f.|...0ub.b...4%j.......Zff...EX.uE..R...
^G..G]1..  .XK....'.T7.^r..K!U..O}.wG.#..w.......^..)9.Q.........O... 
.."p.c.|..,.....Z..?"x..x.7..~...L.=54..........'.*...GT.to...T..P0.CV
..j..Zm.....E....f.Sj..Q.sl4....p*C.)..-3LIn....9..f......L.qH....8...
......r..yt.#..#6....AsGg....1...~.F.WK..E...-.....).f.s...(lS........
2..].s.....{..9......1>?.I..3.q.Q .}............=F.l..K1........P".
jp.,w...t.....$.Z.p<^.>.%-.9F..E......{)....*.......f........`..
.r.d.=....e~I&o.O.G..?:.......!.'\D.......].x[...98h.j..:a....$T..... 
.2..?....K..:.....;..?.0.4.S...^[0.%...N.<...F}:x.EH4s.]....JT<.
..A.1....7..`.............^?.I.=$h.x.A......}...T..`..LW...)^..,h?....
.X..."....`.!..7...VU.h..pzSbGtH......uR.U?.H.5#t.. ...n....wq...C<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: private

Content-Length: 5430

Content-Type: image/x-icon

Date: Wed, 29 Apr 2015 22:56:35 GMT

ETag: "YM:1:d83eda8f-3aff-41f4-ab5e-c2546f7a2167000514e41a6e37fd"

Expires: Thu, 30 Apr 2015 23:00:01 GMT

Last-Modified: Wed, 29 Apr 2015 22:00:12 GMT

Server: ATS

x-ysws-request-id: ca40970c-a32a-4bd0-b219-2183de0d52df

x-ysws-visited-replicas: gops.use26.mobstor.vip.bf1.yahoo.com

Age: 30522

X-Cache: HIT from logo2.global.media.bf1.yahoo.com

X-Cache-Lookup: HIT from logo2.global.media.bf1.yahoo.com:80

Via: HTTP/1.1 web13.use26.mobstor.bf1.yahoo.com UserFiberFramework/1.0, 1.0 logo2.global.media.bf1.yahoo.com:80 (squid/2.7.STABLE9), http/1.0 l1.ycs.dea.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r03.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Connection: keep-alive
......  .... .....&......... .h.......(... ...@..... .................
..........;.p.5.o.6.o.6Dd.0...........................................
..............................................d.0.o.6Do.6.o.4...;...;.
p.3.o.3.n.3.q.3.n.3.r.7.n.5.o.6up.8Pn.7)i.2...........................
......m.3.n.6*q.8Po.7tn.5.n.4.n.3.q.3.n.3.n.3.p.3...;...;.q.3.s.4.s.4.
v.5.q.4.r.4.q.4.q.4.q.5.q.5.q.5.q.4.p.4.r.5.p.4.q.4.q.4.q.5.q.4.r.5.q.
5.q.5.q.5.q.4.q.3.r.4.u.5.s.4.r.3.p.3...;...;.t.5.w.5.v.5.y.6.u.5.w.6.
x.7.x.7.w.7.x.8.y.8.y.9.z.9.z.9.v.7.w.9.y.9.z.9.v.8.v.7.v.8.v.7.v.6.v.
6.v.6.z.7.x.6.v.5.t.5.r.3...;...;.u.5.x.6.{.7.y.6.y.7.z.8.|.8.}.9...;.
..<...<.~.<...<...<.{.:.|.;.}.;.z.:.{.:.|.:.z.:.{.:.{.9
.{.9...:.{.8.|.8.w.6.t.5.t.5...;...;.v.5.z.7...9.}.8.}.9...9...;...;..
.<...=...=...>...>...?...=...>...>...>...>...>
...>...<...<...;...<...<.|.8.~.8.y.6.t.5...;...;.w.5...
9...;...;...;...;...<...>...>[email protected]................
[email protected]...?...>...>...>...>...=...;...<.}.8.v.5...
;...;.z.7...:...<...<...>...?...?...A...A...B...C...C...D....
...............D...C...B...C...C...B...B...?...>...>...<.}.8.
z.7...;...;...9...<...?...>[email protected].
..................G...F...G...F...E...D...D...B...A...A...>...<.
z.8...;...;...8...=...A...A...A...B...D...D...F...F...F...H...H.......
............H...H...H...G...G...F...E...D...B...A...A...<.z.8...;..
.;...;...?...C...D...C...D...F...G...H...I...J...J...K............<<< skipped >>>

GET /rss/business HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:18 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: btjtmctak3m6u

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Thu, 30 Apr 2015 07:30:18 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts270.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r03.ycpi.dea.yahoo.net (ApacheTrafficServer [cSsSfU])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
00037b3.............}.V.<.....m..={..C.|3......G..$....l ..m..N....
s..Z... 9U..L...!..=.k....J*U=U*U.>...s........B..A.o....?6.hh.6...
o.B).|....s8.cc.E....d4...9........7.6.G4aD.{{L}...S.#.}..%....a3I.0..
.ob....?.........~9.....7..V2...-...}r..C.D@..>.H4f.....Y..A.xAv../
K9G.... dt.. V..6..m7F...Sw....."...Q.......d$B.d..Vvj.*..b:b..o.z0...
./..C>.G...O....!f.PN'z..9.p].~-I.$.....u........,...s6.Y'. .......
v.@.|)....~..(r?..........~...M.........w[.... ..J..J^....B.vk......}.
.!..i .3...9...s.!.#f.(..#bH.-|.q..8r....G...........2..Ff.G........?.
..E...(..l.....<d..1......2P'lf..3b.G.....4..i..y......Hy..G.......
...z..Y.....H.V!gn]..D..........rR..7.c..|gF....Y.u....7._z..v#q....b.
...T...m..al%......?.....b..{.u......e.$.0.}.......E..}..).....i..{.?.
2...........o..w.1`Q..h.P....U6.u..>(......j.r=PW.....T....w..r....
..9..3.....2..!~....s.......E.JPrrF..>....A8..p.0. J.~.d,...?6.C[.8
lQ....=...;..NL9.=..Ka<.%P..V.9N.`.$..s..%.p.=.D.1....J#".......1m.
..[....s2.0.H(-"..q.....J........i..._......K.5.>F.F..hN.._......b.
.23. .p..Km..M.....Gh....c..H.{.10..3.aBIk>...:.}[email protected]..
.H.2.5...wp"....Pc/......h@B...."[email protected]#..(.......Q
X........7.N}......D.m.D2G..nb...f..(b.H.4....M.6r...XL.3.9....wM/(...
!/.L.,S}8Lds....|......)....~..WC.=.y.......NT.JQ)|j....C.,...C0..=j..
@e......m.....-..X....bE.1...0....K.UDR...p..^......3......J^"bZ...D..
..sJ.......:.ZN]wC..C..G.uU.&1.?.E|. ..9`...j6..Bm..$7>'.......O...
*O....(..1...6>.`A..p.......Q.p....],h4..:)/h.:`.'m..O[...2'b.Q<<< skipped >>>

GET /rss/business HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:18 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: btjtmctak3m6u

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Thu, 30 Apr 2015 07:30:18 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts270.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r03.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 14348

Connection: keep-alive
...........}.V.<.....m..={..C.|3......G..$....l ..m..N....s..Z... 9
U..L...!..=.k....J*U=U*U.>...s........B..A.o....?6.hh.6...o.B).|...
.s8.cc.E....d4...9........7.6.G4aD.{{L}...S.#.}..%....a3I.0...ob....?.
........~9.....7..V2...-...}r..C.D@..>.H4f.....Y..A.xAv../K9G.... d
t.. V..6..m7F...Sw....."...Q.......d$B.d..Vvj.*..b:b..o.z0..../..C>
.G...O....!f.PN'z..9.p].~-I.$.....u........,...s6.Y'. .......v.@.|)...
.~..(r?..........~...M.........w[.... ..J..J^....B.vk......}..!..i .3.
..9...s.!.#f.(..#bH.-|.q..8r....G...........2..Ff.G........?...E...(..
l.....<d..1......2P'lf..3b.G.....4..i..y......Hy..G..........z..Y..
...H.V!gn]..D..........rR..7.c..|gF....Y.u....7._z..v#q....b....T...m.
.al%......?.....b..{.u......e.$.0.}.......E..}..).....i..{.?.2........
...o..w.1`Q..h.P....U6.u..>(......j.r=PW.....T....w..r......9..3...
..2..!~....s.......E.JPrrF..>....A8..p.0. J.~.d,...?6.C[.8lQ....=..
.;..NL9.=..Ka<.%P..V.9N.`.$..s..%.p.=.D.1....J#".......1m...[....s2
.0.H(-"..q.....J........i..._......K.5.>F.F..hN.._......b..23. .p..
Km..M.....Gh....c..H.{.10..3.aBIk>...:.}[email protected]...
wp"....Pc/......h@B...."[email protected]#..(.......QX........
7.N}......D.m.D2G..nb...f..(b.H.4....M.6r...XL.3.9....wM/(...!/.L.,S}8
Lds....|......)....~..WC.=.y.......NT.JQ)|j....C.,[email protected]
.....-..X....bE.1...0....K.UDR...p..^......3......J^"bZ...D....sJ.....
..:.ZN]wC..C..G.uU.&1.?.E|. ..9`...j6..Bm..$7>'.......O...*O....(..
1...6>.`A..p.......Q.p....],h4..:)/h.:`.'m..O[...2'b.Q2.r9.~...<<< skipped >>>

HEAD /business/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:15 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 5fsfu45ak3m6r

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: HIT from ncache15.global.media.ir2.yahoo.com-2

X-Cache-Lookup: HIT from ncache15.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache6.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache6.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache15.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache6.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts247.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfD]), http/1.1 r03.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 4

Connection: keep-alive

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=swiftrecord&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=1&index_in_screen=1&index_in_session=1&0.7530230079541508 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:22:19 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Thu, 30 Apr 2015 07:22:19 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=249864-

User-Agent: Better Installer(Mozilla)

Host: d3zcfo8zs4s5u.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 35694

Connection: keep-alive

Date: Sun, 26 Apr 2015 06:08:59 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 249864-285557/285558

Age: 980

X-Cache: Hit from cloudfront

Via: 1.1 da44a033908207250002410c047e8764.cloudfront.net (CloudFront)

X-Amz-Cf-Id: hT9O_N5XftISPuGDmI_abWllfuLJkxbu43ryShpnmeatylMEt2JBCQ==
..X..9f.q...%.@_e../xo....nFE5..b:.....I..}..ELr.......b.....=..Bq.G._
...|.eh:..B_]...'.q.T..XMz4N.@.....?.....Kg.I....f&.\.B6...........f..
Ff...,...i0E["...A/#.).....P..]..,.[..$.../..Q..>'...F.1.=.h.C ..l.
..Vc..^K]....z.Dp.<6.. .=..%$`.G...'..h..'"#......!^..}F7g..[.K..n~
.s..4fo%.K.....M...-......GM|V.......N..o...(.,........1...=...J{....~
v..C...HwM'rg=...Y..Y>Rj.[....=Xh%P.F(...Ph.D&..S.....EF..7....\.Z.
&/`..1q......(./..A.WWs.....L...:^.`....:......z.7.m.c.Xj(...z.....z._
.Y.Z.<..m....-F..-r.......yV....;\~....P...`qR..ue..Pad"..8.f&1/.w%
.e...m.....M].c..C.}.%_.s.WQxQ..1.WO.Ea.76.~..r.&..9..%8.0.......xE..$
..a/..*z.;khi.k".<}.....v....0)..a.&..Z..n..a|P.gjT....C.....[..W.g
.4.k|a.Zw-....k...?.{.......ZM......_.>i.@.`<#...y.S.<.;..kf.
.u.....6....$..}2..6.....h.U#.......j..=.{.4..}....@)..K...%...z^cxR."
.b....j.....T....U?is.3..L.D-v..{P....P....\...*..........NI.n.y...M..
..@...?d`N..k^...}....o5U.(..:'..|.c..wQ....)..T..y..uz.8......H...A..
..'}5....W.....u...@ ...s)........x..d.X.zz.p.....(.......c1..g.......
S..Q....Ae..&P;7./...A...%)'....~.q.T.3..j2..1..S.C..Dq.`...c.yZOpP..1
...z...D.3.f.__.F:.H......I..@.~...t..c.p.W.U."...1].>9..d:...i.6..
.....G{.mh..'...d..|{....:<.TZ..2I...._yI.fpG....S.??,[email protected]=r
.....{z.Q...Q.~.......t......1.]..Sf(.QD...6.%...5\.&HW......h.n*.j.cn
k..]....fz....W@... ..w...}.8...h.`n...........9>o.0.....pa.....U..
\e..%J.....`....OF.{.P &.....v..bk..n.c.M&..(.....8e.YZMw..R.M]Qa....o
.p.$g.D._.C...5........F.Pu{..n6...[.....T.&..N^[email protected].`2.<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=83916-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:21:59 GMT

Content-Type: application/octet-stream

Content-Length: 587412

Last-Modified: Thu, 30 Apr 2015 03:13:41 GMT

Connection: keep-alive

Expires: Sun, 03 May 2015 07:21:59 GMT

Cache-Control: max-age=259200

Content-Range: bytes 83916-671327/671328
..U...B...<..........wH...@.............................:.uF.......
t1.......B.............:A.u#.....................u....................
.......................t...<....U..D...E.......M..M...Q...D.....D..
............:.....D..............;.....D..............K....E.....E....
:.....t{.U..U.....M..M...Q.......M..M...Q.......M..M...Q........4....E
.....E...4...Q.)...................U......... ...........$......;.....
t{.E..E.....U..U...B.......U..U...B.......U..U...B........0....M.....M
...0...R.....................E............................K.....t{.M..
M.....E..E...H.......E..E...H.......E..E...H........,....U.....U...,..
.P.....................M............................#....}..t..M......
.......R..!....................u..........M...8...3._^.M.3........]...
........U.... ....T.H.3..E..}[email protected].
......M..M..U..................t6.........../t............\u........E.
..................U........E.;E.tR.M. M.....Q.U.R......P..H......M. M.
..3.f..M..........P.M.Q.......................3.f.......}..t..M.Q.....
.R.........E.P......Q..............R..@pG....u.j.......P...pG..M.3..a.
....].....U.........T.H.3..E.VW..|....}..t..}..t..}..t............}...
.S.....|....M.;H.........|....z..t...|.....Q..........|....B.......|..
....U.;Q.|.......>.....|......U.;Q.}...|.....Q.K........|......H.;M
.}...|.....P............|.....<...R..|.....Q..........|....E..B....
...Q.U.R.E.P..|.....R.........................|.....Q..........|....B.
.............t.3..q..........~.......^..........u.......K.........<<< skipped >>>

GET /utility.gif?report=fdata&f=1&c=000820&i=100&n=init_start_funnel_step_name&rnd=1430378605 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: ILNNrH3PXZ6AoFYBGb4D1CvwWo73X2l6xUEB6UAT1aAf3q/RxN2XxKlI/STTv2zdg9ULP5RUzb4=

x-amz-request-id: F6D10030E7F61DE2

Date: Thu, 30 Apr 2015 07:23:26 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: ILNNrH
3PXZ6AoFYBGb4D1CvwWo73X2l6xUEB6UAT1aAf3q/RxN2XxKlI/STTv2zdg9ULP5RUzb4=
..x-amz-request-id: F6D10030E7F61DE2..Date: Thu, 30 Apr 2015 07:23:26 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....


GET /installer-error.gif?action=sesamy&app=65743&appver=0&ver=1_36_01_22&version_date=15-04-30&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=C6473A77A4B54754A5C550B36164731API&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&error=0&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1073750533&asw3=-2147483136&asw4=32768&crtnm=na&procstarttime=1430378605&procruntime=2&rnd=1430378607 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 9TyVdwtns26Zmr/30iUf YvgkMbe4VBVHFpgyVERpm0TMVPQUbmjiXqwTFMOTDCwcKc6VzDSN7g=

x-amz-request-id: BC9815BE17298BA8

Date: Thu, 30 Apr 2015 07:23:29 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:06 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: 9TyVdw
tns26Zmr/30iUf YvgkMbe4VBVHFpgyVERpm0TMVPQUbmjiXqwTFMOTDCwcKc6VzDSN7g=
..x-amz-request-id: BC9815BE17298BA8..Date: Thu, 30 Apr 2015 07:23:29 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:06 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000820&i=200&n=init_end_funnel_step_name&rnd=1430378608 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: buddwCgLXuiELUwoReL24O2j0N1qdbx1g/eXGYi8OAJYdLUTxRtmuywpFwFkFz7ADweoREpyANs=

x-amz-request-id: AC3CDAC19BCDC3D8

Date: Thu, 30 Apr 2015 07:23:29 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=300&n=deploy_start_funnel_step_name&rnd=1430378608 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 3yL5agIySgOAjnB7ZOMoHsBT5EN66USGMWGltc rloqtGny/qmjCTL MOqzRtQ5SMj3CDwhNx6E=

x-amz-request-id: 03CDA0CA288B36F1

Date: Thu, 30 Apr 2015 07:23:29 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: 3yL5ag
IySgOAjnB7ZOMoHsBT5EN66USGMWGltc rloqtGny/qmjCTL MOqzRtQ5SMj3CDwhNx6E=
..x-amz-request-id: 03CDA0CA288B36F1..Date: Thu, 30 Apr 2015 07:23:29 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000820&i=400&n=deploy_verifier_start_funnel_step_name&rnd=1430378609 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: EGrhyMLYNX5WBZ5kpnxPGH8Xh2hnri4PPK/JluzUJuXAi0Z0GaVFgrMLMEJwTmPnbn33Y1nYfIk=

x-amz-request-id: 804C241E3EB971D9

Date: Thu, 30 Apr 2015 07:23:30 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: EGrhyM
LYNX5WBZ5kpnxPGH8Xh2hnri4PPK/JluzUJuXAi0Z0GaVFgrMLMEJwTmPnbn33Y1nYfIk=
..x-amz-request-id: 804C241E3EB971D9..Date: Thu, 30 Apr 2015 07:23:30 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000820&i=500&n=deploy_notification_start_funnel_step_name&rnd=1430378609 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: OViMxC183iDvd18ajuhG0APT80fmea3YdU9lACedaA1mdc5oQtH7NVTH9/cgpWU756Z2/py4CAA=

x-amz-request-id: F0900C15E6290C29

Date: Thu, 30 Apr 2015 07:23:31 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=600&n=deploy_omaha_start_funnel_step_name&rnd=1430378610 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: sAKgiVdfZsQ8k 9StINnUsNFkKRrtrdSCZIh1wcURvklVVh0IYd1rJSy DTCUV9OyIT3gwCdGtM=

x-amz-request-id: CF4123DFD5DFA098

Date: Thu, 30 Apr 2015 07:23:31 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=700&n=deploy_ch_start_funnel_step_name&rnd=1430378610 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: iS03kYZeYLf8ZN96Rc/u2uDJAu7rXu3KYDlxg3kxzU1jZ9bfRmyW0Y/gsZ8KJH7QEwutKVfZa1Y=

x-amz-request-id: CA7E6244DA1A6EF1

Date: Thu, 30 Apr 2015 07:23:31 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=800&n=deploy_nova_start_funnel_step_name&rnd=1430378610 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: XWIci1eEtqzgAfJHHZT1R0IFDwWc4nxi0MfDdmiaaG6uy32j3Mc437OEbkWAC7gbo9XBoYJPGXw=

x-amz-request-id: C7AA7CF09CE99FBF

Date: Thu, 30 Apr 2015 07:23:31 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=900&n=deploy_ff_start_funnel_step_name&rnd=1430378610 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: n5c4Q3ZoST70KapUlYoqQoIraraN1JbfBNfysAMEdVrAssn3wXrKV0 2swSO10pc6zQnGvhDbxc=

x-amz-request-id: 6ABE4204EEC1D54E

Date: Thu, 30 Apr 2015 07:23:31 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: n5c4Q3
ZoST70KapUlYoqQoIraraN1JbfBNfysAMEdVrAssn3wXrKV0 2swSO10pc6zQnGvhDbxc=
..x-amz-request-id: 6ABE4204EEC1D54E..Date: Thu, 30 Apr 2015 07:23:31 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000820&i=950&n=deploy_nova_ie_start_funnel_step_name&rnd=1430378612 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 2FcRHnShxI833882xlwPYn45VCQ7dJ4cCJ5YYyQSWdCGxrwO3YXKzmmBj4n0uS5jVmhDxMDm tE=

x-amz-request-id: 937FF97E26F3764F

Date: Thu, 30 Apr 2015 07:23:33 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=1000&n=deploy_ie_start_funnel_step_name&rnd=1430378612 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: wR1AncnjAaDUztvE3SoNj3ZrADdzM96X2tog0cjE3MmRUNLa7ImwIqnX5WomFuXNuvHUNSxlCYg=

x-amz-request-id: 0E6679CA3E0C9FF6

Date: Thu, 30 Apr 2015 07:23:33 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=1100&n=deploy_updater_start_funnel_step_name&rnd=1430378612 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: qAP2pQigS8m6127k adY O5rwEUshf8nI7zKrjzL5o0YcoFpJWavONiu9AF9TS/dCxv1dYrqcWE=

x-amz-request-id: 0F95FE427F51DFDE

Date: Thu, 30 Apr 2015 07:23:33 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: qAP2pQ
igS8m6127k adY O5rwEUshf8nI7zKrjzL5o0YcoFpJWavONiu9AF9TS/dCxv1dYrqcWE=
..x-amz-request-id: 0F95FE427F51DFDE..Date: Thu, 30 Apr 2015 07:23:33 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....

GET /utility.gif?report=fdata&f=1&c=000820&i=1200&n=deploy_watchdog_start_funnel_step_name&rnd=1430378613 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 5vZG/PPRrv5 MgdOK9NO2eah ah8CwyTqFbcMRDGbxBfTaNZ9BlmfSmhROs6y4Ts9sBSx1 TkSg=

x-amz-request-id: 582952647F1B0158

Date: Thu, 30 Apr 2015 07:23:34 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /utility.gif?report=fdata&f=1&c=000820&i=10000&n=deploy_end_funnel_step_name&rnd=1430378613 HTTP/1.1

Host: errors.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: rlEYqmuJzC8cAP0/PwafgfCJK4Xrhcmv1FnBwGOfF6FaXttvIO2 iEFwPZySX6HRwOqXEFhw EY=

x-amz-request-id: 835B615830950236

Date: Thu, 30 Apr 2015 07:23:34 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: rlEYqm
uJzC8cAP0/PwafgfCJK4Xrhcmv1FnBwGOfF6FaXttvIO2 iEFwPZySX6HRwOqXEFhw EY=
..x-amz-request-id: 835B615830950236..Date: Thu, 30 Apr 2015 07:23:34 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:14:17 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;..

GET /s/abel/v6/3YEwT2a1878zysq92S8_9w.eot HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: fonts.gstatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Type: font/eot

Last-Modified: Thu, 28 Aug 2014 18:23:54 GMT

Date: Tue, 28 Apr 2015 18:20:44 GMT

Expires: Wed, 27 Apr 2016 18:20:44 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Content-Encoding: gzip

Server: sffe

Content-Length: 10793

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 133372

Alternate-Protocol: 80:quic,p=1
..........e.eL.\..w..eq/..NY..].w..RX......R..h.[..}.7.....;.3.$s..L..
[email protected][email protected]..........,.....rL....-........C..
....x.......%...............S..o...}.0.......8....e.N!Keg.i.2e.x$f....
.J"R..b.?m.I9X%.1.C.zI..Ah^aJ I.w..%S.A..NJ...!8...vIC..S..H...%......
GD..]...4m%%....n.R..i..n.T..$..W..E.Sm.-*[email protected].~%....1.9u.
...1V..{xh....I..H..4.i..N...B..1.......;.<......e.?/...1.Jy ..`;..
$...k.p....:.L.-.......r....s..\..1_X.h.I....$o....d.C.cga~F.-..F.....
?.0~...C.'.7d...r..3..}....&=......9...q..7.....x/^:.K..Ec.......f.hx(
X..:... ....... J......%KX..1..0.kNX:.W...).......J.z..2....4b.......2
'.Gm9e..wS.Tx.dS.....=....j#.}..V...c..s.H......#.....G.r......\:.E.61
..D.7... I...y.9g!...L.%...8J..3.^F.8....]BgG.,^i......?.88v...;....&g
t;l=\x...O{..N.D.A.K.....O.b]o.....,.5...lW-N;....11-X..'.:.%..j....".
G%V.....G..Xg.......n....0w-."[email protected].'....p$....G4..p....V.w.......[|.
....C.........h..bB.Qc.`..K..v.|...eK..7.Vj...z.....fv.&PB.K.T.2..|1..
.._x..5...O....l."...(h...............W..Q....D_.&U...S....5..].......
.6.k.=......^......i./:.F0./..r_.........9.......7!...a.."...s........
.....3'.lz...k..H.$...wF.7...tlUI.^aH.Q..K.eZ.....IF.]kj..0.....f|:...
.....R.....\Q.mG....]/<....}1.1.>...b(<.\B.\...}.e........o(.
.>.o.=F..z.J"...l.....Ua?S..a.".3-q@v...$.'F..lNn&~0..Sy*......Y...
..p.......R*....T.G%M?....i..Y.8'..,F..Z.k....b....S......P.%x...0W...
]@;O...l..W....W.C(.....<..^.Y.(t=.#s....5..7.I.....}....E3.{~.....
. .^...1.....A[.....1l.R....jYX...7.`b.`.F.......Wh....X...)...Qt"<<< skipped >>>

GET /misc/preset_feeds_override2.json HTTP/1.1

Accept-Encoding: gzip,deflate

Host: download.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-amz-id-2: qjBF7TWvgyn10KBVlyQiWT0DdnjfSed3hIWeCSTny3sS20NGVw4mxeHPqDhU7cJa

x-amz-request-id: B0CCE38FE1E5AB5F

Date: Thu, 30 Apr 2015 07:25:01 GMT

Last-Modified: Thu, 08 Nov 2012 10:59:05 GMT

ETag: "c88671057883d87dcabc459b140b7809"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 18354

Server: AmazonS3
{..    "categories":[..        {..            "name":"General",..     
       "weight":0.00,..            "timeSensitive":true..        },...
{..            "name":"National",..            "weight":0.01,..       
     "timeSensitive":true..        },..        {..            "name":"
World",..            "weight":0.02,..            "timeSensitive":true.
.        },..        {..            "name":"News",..            "weigh
t":0.02,..            "timeSensitive":true..        },..        {..   
         "name":"Sport",..            "weight":0.10,..            "tim
eSensitive":true..        },..        {..            "name":"Business"
,..            "weight":0.10..        },..        {..            "name
":"Technology",..            "weight":0.10..        },..        {..   
         "name":"Entertainment",..            "weight":0.3..        },
..        {..            "name":"Science",..            "weight":0.07.
.        },..        {..            "name":"Health",..            "wei
ght":0.08..        },..        {..            "name":"Blogs-Entertainm
ent",..            "weight":0.10..        },..        {..            "
name":"Blogs-Sport",..            "weight":0.02..        },..        {
..            "name":"Blogs-Technology",..            "weight":0.03.. 
       },..        {..            "name":"Blogs-Science",..           
 "weight":0.03..        },..        {..            "name":"Blogs-Healt
h",..            "weight":0.02..        },..        ..    ],..    "map
pings":[..        {..            "dst":"CA",..            "src":"e<<< skipped >>>

GET /cnnnext/dam/assets/150429182329-new-york-protest-for-freddie-0428-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 40971

Cache-Control: max-age=6132

Expires: Thu, 30 Apr 2015 09:07:23 GMT

Date: Thu, 30 Apr 2015 07:25:11 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.H..........................!.1.AQ.."aq.#2...B..Rb..$3r.......4CSs..%D
T.................................8......................!..1A.."Qa2q.
...#B.......34..C..............?.....EuJ...w"..Ry?*..%\...;.,J.......\
X.ua8....oR.!I.(f@:..8.-.......*R.....#5s.M2.C@ ..<..@$v.]3..L6.FJ.
...)..6.Z...V.....! ......F;...\*wy.|.2.8P...[.......P...A..Gn>Vy&l
t;U...n/. ..4.JObhO..m[...........u...1 ..j;..U0#....'b.!#...)&....)..
..........5.%J.5..........>..2.k.1.{......\y....&.Q.....&..^...O.o&
lt;.Y.P...=Z..|..!xxj 8Cg..k.X.S.-X...}...0r..itf,.k._...z.s..8.1@uZQ.
N........0......n......6..c\..AI-....G...A.M......P....>.....5H....
D.... ... .r.[;...` _OrlXUs.jG&.r.m.....Q..74..b..)..A..}i .H....*B.p.
"..qxa.DR.....d.4..[;dlR.....ht.'M..:'.R.1._i...T.PD...J.A.EX..)Opk.Z.
(}..'.\\...f....F....BFrh..p.o............^..<...q.WQ....[ ..Q.aD.V
.u*U1....$..d.*...m.$.v.......3.Sc...U......TW......}MWr.\Ze*.*@m)....
...P....k...x?..Js...*r..:.zPJ.J..P..m......g...XM.Lm.'vFy....V...j...
...*..oW.S.~;.K.....Qb........!<.K....&;q..hZy................R....
,w..\.7.(...O..w..h....V....'..yW5o...n.(.LO.2.....k...*...;qbZ.NH.B..
.=*U.lx...#v..Pt...^.c.{..$....(P..Sj...`.x.F[ -j...jm.S.q.....9)Q..U.
..{......R.......Jk..T=K=....7.......7.ZZs.d...Y....^k't..`.'.Lo....u.
zBY..U.c..N|....GP.D.`.....c. .]..%n' ...= G......Yh).R.o.....y.v:<<< skipped >>>

GET /cnnnext/dam/assets/150429062811-pkg-ripley-japan-comfort-woman-00002207-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 22913

Cache-Control: max-age=503

Expires: Thu, 30 Apr 2015 07:33:34 GMT

Date: Thu, 30 Apr 2015 07:25:11 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.A.........................!1.A.."Qa2q....#B....R...$3br.45C..........
.......................... ......................!1.A.Q."2.#a.$3B4q...
..........?.....X..0....F. \!YWb....G.../.1......1....P...V.=...,c..v.
.N)....a....?.1?j..............*S... M..p..T(2v>.3....`..ShbY...1.}
.6..-.e..j...?..[.%...9q......(u....F...D}'.H.m..m.q.......g...r.[#I..
Z.m.....D...>.H..n...5.........wAEh'. {[email protected]..'o.
..R..c]..`N..C>..a..Qw..m.Bj..EaDG..u...9.8.....H.s.%.u...8.o[U`.x.
.m.1y.......k...d..P...|..'s;...*.....I...S......O..R..m5.$..7<..S\
X>...!.7.L......].$E...[^......V` ......j.Ic....ew....J2B..&I..1N.!
.q.Dq.jaUK.....O..H...@#...d.V...7.b.7.................u.0..}..6'7..Q$
...I..N5.jE}.fEF....u.........D....h.%..7...D....8UQ.H'z.....}:..4...J
....VX.g).k.I{V...2..{[email protected]..>..u...Rx\.$....:..J.....A6..u.5A
1...m.c.4.X..D......j............v....... .Vq.....;H....ix~.kaE.Z.;...
X.i...&CTU..q.6..b*.E....c...n......D...8.Z..3$.j.m...."D..5.n.>.Q.
..XS. ..h.6.......83JYa........3.Y..1.h.aV|................*..J*..i..t
[email protected].]l....#..X.V...<. ....P...U..$.0G....%.<....c.k.rU. ....
 ...H..l).....^9......j..........c..y..@U@h q.....7.....uH...lb......;
.- Uy....K.0V..*.K.@ .D....v....6..k. j=.qM].Z..&$..).8.).n?> .r.J.
,....5.....*V.a.....I#.j.!n....3..B.D(.E....}[email protected])..5....&g<<< skipped >>>

GET /cnnnext/dam/assets/150429072140-05-sexiest-women-in-the-world-0429-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 20512

Cache-Control: max-age=2925

Expires: Thu, 30 Apr 2015 08:13:56 GMT

Date: Thu, 30 Apr 2015 07:25:11 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.D.........................!.1A.."Qaq..2..#..B...3R...br.$4C..%c......
.............................,......................!..1A."2.BQa.3.#q.
..............?....d.A....!3...(...1.H........[.....B.2Mo..?L<(...B
....._MHx-.jc.K........Z|..OK2.....8k.8.....r.Y.[..3.P...F.y.0..&...dr
K......*6....e..n........w)7rB.&.lT^.......E.`..x.....u(}.........s.V.
.#0...R...;.9...<.K....f.....N0r.EL^@.>....'.sH........v.....[..
Lhxn.h..79..c...*R...K..K...L*#i'c..1..K.R2.f2..sw...........sr1.h5Ut.
..8..a...[.IQ....9....J.......(l...].\.g...?e;...)[E..#....<.....M.
;..{urlm9'..........N..<.*/.......|q2..n...q...UV7Q....OH.q.*.pI..M
......5....!.2f.1.4.(.X.. ...pq.9.g<.....s.d>g.\.....%.R@.*.t.M.
Qj...@8E(...8(.....N.bw.q.z..C..Q..<..N.1...../..ry&........iS*..S.
.4...(.$.?..i....J...%.......,g4,$,....&.....1...p../P.G_|$. X{{......
.n.........t...TE......)ftQ=...>.$1..cc.i..J....h.).V.......2.:.j~ 
.m5..*.Hj.OU.I..!8....c....L|&V...]..O............q5........ISSYGP..!}
Ov..H.*#..l.h..)m..v........xg......U.zlt-.g=.y...........d.T.OtC\.IG.
'.......4 .E..Ino,...0T...V.Y.Im..R.A...........r.jC.};-.W..p.Tq....-.
....e..F..=.A.9.....9.l..e6..>..{ [email protected]..].h....5..
...IR{...^.......K..sa{....%.....sH..R..\Q...9...3.}J.UZ...N.=.......~
Kw..e.J.....I.3..$...)....,[email protected]<<< skipped >>>

GET /cnnnext/dam/assets/150421150029-nr-freddie-gray-baltimore-officers-named-arrest-video-00014625-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 32595

Cache-Control: max-age=2934

Expires: Thu, 30 Apr 2015 08:14:05 GMT

Date: Thu, 30 Apr 2015 07:25:11 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.Q..........................!1.."AQ..2aq.#...BR..$3br.........%5s..&C.
..47DESTtv.................................,......................!..1
..A"2Q..3aq..4R.............?......3F......1..9..|Zh.U...#....y.'..2?.
i*..Yd(...<V..l..R........:.w..f.im.w..P<g.......b.?TL."B...a.P.
...q........L..._....sP....,G&F...S. ..:..i..p.g[.m..6.\........E.....
..:......w......\..~.....uM.o!!.N..|..Me6..=L%k....z.#.SfC.-;..Y.`...W
..T.NXu{z.....L0..w.\...F....h..,6v`.m..FeIu....7.>".........C..n.S
........3....N.I"b...4.v..s........^.m[.....uc.......a.6..A.....]Nk. t
.zK.."...i=......._.k ...^....v.V.m...... ..... ...."..kmB......z..-.?
.jr.g..{.G.f0.X.q......B.T.....z....S.......v.....J..7]4r..p;{...S.R.;
y$.y}).~.O.......}..~......9.|..............S.......Rr........!J9..3.-
.>ag..ix......}h.....X.Jp..SA.....s..x..........4.....8....V......R
.!......XV......F....u....A.%..k....W..uQ.U....M......a..R0.)J..?J[#[C
.h..4.vf.)...d.A).K.w...G... ...".%...............Q]...}.i............
..Oc.....wI..T6..%5...h....}Z......C..#.<.y_...$.......UfL4F{L2....
.Nt`....V=...))[Hx%;R.[.....?./..=zj..a6.N.....;.R.....z..#i...(...[4.
.<....................)....(.EJ..hB....|..:yP...........IZP.VR....E
zbU.....X.....7.)`.`g.s...8.#......S..R.C?...G.......f.......1..t....(
P.{..J...y$...[.oQ..L.....0.K...A.#9.. .}.sX.l......s.[(n:Xo...G.D<<< skipped >>>

GET /cnnnext/dam/assets/141127171824-10-lonely-planet-destinations---mt-shasta-story-top.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 93702

Cache-Control: max-age=6952

Expires: Thu, 30 Apr 2015 09:21:03 GMT

Date: Thu, 30 Apr 2015 07:25:11 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
........................h...."........................................
.F.........................!.1.."AQ.a2q...#B..R...$3b...r...4CSs...c..
................................5......................!..1.A."Qaq....
...2....#.3BR$............?...X.g?mn....J........W.....X..}l...y:QF}..
~}......u....o.}{..m&.Z........<k`.>?....<..&.O.....1..J..5..
Om-.....y....>=......u..q..mu.B ..0p.....{.B...........m1cn[.....:.
).[l<|{..6.J........o.....;{.kb.....ZJIm....Y......m..u....u...Q.I.
.6........}{a....]i...q...Q.o...1...B......RI. ..w..,...T&.....i..I..&
..|....:.G..}.......~.[H.@/..:.h.J...}...<.........u./.o.J.1.go..Kk
.{7{.Y.5..u....}"....=...a.........k.*KnT{.d)..t....R.9.ZN..x......:Si
.G..Bc......F.F04.&K|.{n_.....-.....#..[..c.yT.?.H.j......L7...M....m'
.=..xZ.OmlT.5........!.1.*..N>?Md..}...g....r^Rj..X...Ps..6...l....
V2.E.8..[..~A..;.`...Z..{1.... gJ2.?....:[]I0.=..k.s.6..t...x.s..#.,.U
}.**...eW.5 0A.3z.A.....#G.v..7.F....;D...._..{...V..S.#E.}k..E.r.t.X.
..q....e....].9e..9.a.f.*U.....@..;..........j.<W.x..kR....Ld.....w
..G.E.[.m...F'.....6D.Gr.v.@....<jf...r.H*.9%.Ux./..1.....^q;.!s...
.]wd_a...=..BXdh..p.........wW]:J.%...o,jv..e...b.......7.N.J.?..Kz...
..........},.'.......#.v2....%....i..b%[email protected]..^.....Wj....UE).4V.
d.v...._*..R.1.Y.F.M[.en..n.......F8......GR.;.-..17.....Bzs.y8...G...
..;C~.....*...4.,..\.r.@..>.....K..k..KE.X H~.'XkY........W....<<< skipped >>>

GET /cnnnext/dam/assets/140818151053-pope-comfort-women---s036314271-story-top.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 101505

X-Pad: avoid browser bug

Cache-Control: max-age=6764

Expires: Thu, 30 Apr 2015 09:17:56 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive

......Exif..MM.*.................(.;................This handout pictu
re released by the Osservatore Romano shows Pope Francis (L) meeting w
ith former "comfort women", Koreans forced to work in Japanese wartime
 military brothels, prior to celebrate a mass for peace and reconcilia
tion at the cathedral on August 18, 2014 in Seoul. Pope Francis wrappe
d up the first papal visit to Asia in 15 years on August 18, urging th
e divided Koreas to reject suspicion and confrontation and unite as "o
ne family, one people". .AFP PHOTO / OSSERVATORE ROMANO   -RESTRICTED 
TO EDITORIAL USE - MANDATORY CREDIT "AFP PHOTO / OSSERVATORE ROMANO" -
 NO MARKETING NO ADVERTISING CAMPAIGNS - DISTRIBUTED AS A SERVICE TO C
LIENTS..OSSERVATORE ROMANO/AFP/Getty Images.OSSERVATORE ROMANO......JF
IF.............C......................................................
..............C.......................................................
................h...."................................................
............}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:
CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................
......................................................................
..................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()
*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...............................
.....................................................?...BC.........as
.HR== .nt.n.'.e^.E.........0...#.#.?#......c..{.`CI.....~....i/_..I.'.
....f........?..pN>....~...t..@K....(...q..k.r.(.'.".W.K...1.1.

<<< skipped >>>

GET /cnnnext/dam/assets/150428145859-bali-9-vigil---s046870192-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 33603

Cache-Control: max-age=6335

Expires: Thu, 30 Apr 2015 09:10:47 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..E..........................!.1..AQ."aq2...#B.....3R.brC....&4..$5c..
.................................:.........................!1A.Qa."q..
..2...B..#3R....bCr.............?........}.R...Ar#..Zr...9..oZ...q&.p.
....oa.v5./..M-.JS......iO..z.3N]...t......9JT}1..*...Ue..*...........
y.m...ZZ.R.,)*I..._.,..t....jd.....|e.......3.....X4..F...........HZ..
-.I...j....k...;R.1ljp.Dh.m(......N..W ..*...\m.D..p..x..9.f...cf;h.V.
..8.......{..?.........tf...1.2........B.....WKGQ~..=.7s.|. [email protected]^.Eq.
.Z..4..JZ....v.g.2#\.....1.....B=.pM,h.......2>.\z.af.....FK..}..i.
F0.p0;..h.]. W.....3.K..d..w4L........p8.&.}F.'Atnl.}...f..........>
;.....1_ ...._.H.7.s........k...nx:..T....c....GzwT*....9q....N1..Q=.T
..&4. ur.|.8O.3."...qe.!L....M6.`l`....{?.d`..m....-?...S.n......HQ#.~
..m...x.=...o.OZ...n/...d..Fp.8R..;.O.YO..}..8..7..........$...v..g..;
...v..T.g.L..t....IG.A.Q...n.f.!..R....@..|sB6..;V......Q4.....y.-..-.
........R.q.D...M.O.n .}h...[.!!`.]u..:k.Ii7.K.82.Xl.X.>.......Z.j.
8.)..Tg...=.{.&.ah...;..s.9..L..............}...M...........7....t....
nR.}Oa]..sH....(...M........-.F..#.:F..... =.g=......R...&b.AIZ.!...3.
*....|A.L.mX6.oH[...Hi.,....@.$Uw.=..i.. ........6..6.c..b9=.i.-p..v[.
...A.qN.....SZ.....V..r.\/.R..N...!....._."$.0.v.4.w.&z...B......I.9&l
t;..U...;V.(....,Y...q.Y...,..k..sY...V,C...'..j)#.....'.(..../c.E<<< skipped >>>

GET /cnnnext/dam/assets/150115104730-nigerian-military-soldier-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 45043

Cache-Control: max-age=1109

Expires: Thu, 30 Apr 2015 07:43:42 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.I..........................!..1A"Qa..2q..#B.......3R..$br.C.%S...4cs.
...................................6........................!1A.."Qa2q
.........3.#B.Rb..............?...N:.8.........E.....<.......P."..R
.|J~C.......$_.R.......c.S..9r....G...'luH...k.....)....N(J..#.....@..
T...:$c.F6....|W..U.`M.Xd......N..E......H.......z ....oh...*.h..ct...
..%.:ZZ.Q.}.|_...U..wq.. ......a....1.Y...H..B...RT.. ...|9...J...>
x..}....Z.Y..c1.Vc1.......3.oVk/.2...[.vC.$6.......I...\.T.......{`J..
..N|.......t.|'.....&........i.{...e.n..D0..n.....[_t...MI.o.>...\.
m...Z...g..a.Y3........8x.g:%h.D....t..%....X...>.[..5$X...{._L.5_.
..............3..^.L......p.ov....|*..........j...FD...X:..[d.#...9rx.
c1...1...OA.......%&.) .r.........O.(*...S....c...R...s....W.(...:S...
m..Sc{.6......~Q.?.L...X..N.....w..f.Q#c`..=P.*.....e.9=."AF...\...P.9
.vS........T..uM..H7 .......f...B...QQ.M.......y.....c.mq.Z....(...._.
....... Q..T..u..TIk[.RN....o...$*..$...v-..{t.*.oA.O.FJ.b3..... ...K.
.q...U.3.Z~......1.<.f.....f7m...S..e.f.V[6R.....pQ.3..y...S.C..,..
.np.F..Z.W_*.:...N.d.....1.j*..... u#s...3..4.c7q.*5..Gp.Lz.A...N....l
.U.....Z.c!ZRP....6......r.P..s...(jU%.4.5....1Z...[.Z.......u*|tS.5..
.6:M..6.&..:g....[...0\..jZ %....P.I;...$.:]..[[email protected]\/...*Uj.^
.2.q.z.zh".=......)$..Z...z$..%@9...d..........b...I.....T..7..../<<< skipped >>>

GET /cnnnext/dam/assets/150429150345-indonesia-execution-tombstone-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 49722

Cache-Control: max-age=4331

Expires: Thu, 30 Apr 2015 08:37:24 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.G.........................!.1..AQ."aq2....#B..R...$3br.....L...Sc..
..................................3........................!1A.."Qaq..
.2......#B...3............?.|,..[."1....F..2.M?..l.HX.jDp...,*=5&8..5]
.................I....9RB..).Kc.?(.....u....1..RIV3J..R.6.)......;....
._.....}-%[email protected]*Y..3.....5..W..9{5.X.........7.......Y....r....&
gt;.e...x...f....f..P...v..Z.8&.`........)lr..n.......Up.......\K%....
.,[email protected].>..g.M./.v...Ym.9.6J.9/..<
;....J4../.1%s..;...}.gh<.3.*...K..\.....%4.&i.Q....F...x.m3<-..
.BMs.............<.......A9. ..../z.&.QW.K.AtY.*..._1..."..FW..7a..
..-=OA...S.....5 ....d_..`.....F.9O...... .2'J._.t.#\.WzU........Z...w
...H.&a...d......_.7Q..Z/v...i.....I.W.....%VbdR.HQ...s.?..)o..a..R.%3
.4qq(....].F.`..I..I..W...ONx.x.*.\.........*$..c.]Qp2.....9F;..Y,.^A.
...Q.........7..:K%.....'S......T-. |...j.n..X..5...Z.Z...]...|.PT....
....e.....Y.....:.c\...L..[....P..7H.fE.K".y.7y~kI.YX..(c.....H..r.>
;[email protected]...#.....E.u.."uGU..:f.r.4.5UT.
`..Xd.].1.[s..P.m%.. .}5,.f..T...i..op.X.x..................Mf...J.H..
L....y.. [email protected]=..AKPm....<.....2...lQ...s...o$g
?...).d...Rt'@....QMt.\.^..x.I*$..UK.[.;.............=G-...=.B.$).NU[.
0_\....mn......5v[....1.....H.A\.nd.M..i$`6.Q..`.u3WMKRmu..f..%.Yv<<< skipped >>>

GET /cnnnext/dam/assets/150421162725-quadruple-rainbow-irpt-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 45925

Cache-Control: max-age=898

Expires: Thu, 30 Apr 2015 07:40:11 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.A..........................!1..A"Q.2aq..#...B$3R..b...C..rL........
...........................8.......................!1.A..Qa"q.2.......
#....$34B.R.............?....J...P;r.W_.j.p....G..x..A....&.D.T)[email protected]
.\.l..p......<g[.$.eW.....1;.L....5.......dI..&........Z.A...V..l&l
t;.L...@>.u...t".`...r..C..MFW\....?Z.8?..k7.......r(.. ....:U.. s.
.FT.......Gdj...9.........R1.H.^[email protected][..)".....[.........!J..YM#
r..e$w.....H.".B...|.#C...*R..[......t.h.6..L%[email protected].
U..}[...x...T...c:...d..n...E..M.m^. .......1...j)U.a....#...i....'...
..!..g..5...t.E..0.5...q....3.:2.....p...{..:.5.=c..K.3(>..8l.\...5
.p1.....f...[.......s..(....O....?Mn.<i%^..M-.c.5.O1....m....)..[..
.F....m.].c#...[..I0.4.....a..... [email protected]..:.....l..gW....Mg..
[email protected].=kL..Ml.g.K.)..c^.>[email protected]$..k...u.<.....#.u..Q.
..6.>..Od.Fl......o_Wv....Z........&...F.B.5..%.r..2..H.....p.9.<
;.Q.n.Hj).h..1K%-X....5s..o"rR.IGe$.1.:...c..1zwh..........OW.v.]..Z)-
..(..pI...PK".VH...e.9R[.o^.w...W{e5=.....ut....C.1IE."%2. .B..BG..P..
.)%.0.. . [email protected].]....\.V....N.........{..]iP...y...I.
c..~.....,...:...V.LX....G].k/^...o.......,....c....n. ..i...Dl..$d..:
..Dh..2D.*.;.r5e]...Gv...#h.Ml...(c*|k!I.c.^W.x.?N....(.c.....bC8..:..
........D.}.2..6k.*T..(Y.yq>q.[[email protected]..|....7.v.i.1.o..l%.Rr.<<< skipped >>>

GET /cnnnext/dam/assets/140922054849-isis-militant-flames-of-war-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 23098

Cache-Control: max-age=2949

Expires: Thu, 30 Apr 2015 08:14:22 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.H..........................!.1.AQa.."q2....#B..3b..$Rr....C.&47STcst.
.................................(......................!.1.A."Q23.#4B
a.............?......#.O>]^.|..........#.O>]^.|.........#O>]^
.|.....H.Q.>.....G......H.Q.>.....G.........#.O>]^.|.........
#.O>]^.|.........#.O>]^.|.........#.O>]^.|.....H.Q.>.....G
......L.Q.>.....G.....t...3.N.]^.|.....t...#....E'.~....}...jt...zC
...4..j:'....8....j.....^t..;..j:G.....F...IC.......5).>......&jO..
......S.9.HBU.h.g .......s.G....7.K.P.8V......#....M8.........,..%^...
........e........DW...9;HO..kf#.O./.,.EkR...'...Q.'...~.2L./z.J....[..
"....W%[...j...M;..9..M\..l..$.N[.]mAA\w...3.....g#4t..G.......$..>
...}...j.i.>.tO.;..j..G..5..j:'..t..--.r(..D.Q...1GLzP.2.{...}.....
........GD.S...".-....}..GD.S..s..l.....'............C.Uz.h..l.]c!..wv
.m..^Qf.F..Z=Yj..]......c......;U3...-.6..LYq...Z..<N...v.%.....egc
...;N..T........".E.;..r]..!jK.,)..%1..d..eN.V.:..(..JRK.....".*.p.g.i
.r........&d....L>..:..$.Ks.R.J.&..B.g........1.GLzR.3..J:#.S.....=
(..DzQ....t...1.@..#.W...Ozc.......G...=).LzQ......=....).LzQ......=(.
.Jy...t...3..AGDz.y...t...3..AGDzS.....=(..DzW...O:c.......Dz.:#.S....
.=($g........1.GLzP.".GlP#.).LzRzC.........:..z:#...t....=M<..CGL{.
.>..!.i.L{........../...(..-.d.2...R .:#..K.A.....>.<&..c<<< skipped >>>

GET /cnnnext/dam/assets/150414130759-beheading-belgium-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 49585

Cache-Control: max-age=5712

Expires: Thu, 30 Apr 2015 09:00:26 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.G..........................!..1A."Qa.q..2B..#R...$b....3r...CS..5D..%
..................................=.......................!..1AQ..aq."
.......#2...BR.34.$5br..............?..2..t..g\DnCZ9.C.......u.1d...e.
}..ZB.....1.......<.....r....'.1......4R..aJ......L=.0....,....x..t
z,.U[C.x.M.-.%.R6..p.1.SK.K.B......X.....d.>/.S.CJ..A..p1.U..Mi..h.
~R.!jN..l..I.....V(....N.h...vd...Xa...(6(.7..{a.)..y.u)e_........,9.:
s...}.*m..V..k@M..."3TRb6.....e..)J.}_L:.(j.....i....59.i.T.0.i#...N.u
....ae....jT...cJ!.j.......Y..R5.Gv*.6.y.gV.puu......0.e.p..R...1..$.y
v.{}....@...,,.skNc.LfI..2..K.iZ.T......S5..P...A-.._'e_.#...L.xL..V.s
.....k[jm....tE...0..>..5..s.pyIiA......'`6....sQ.m...v..l.%.....2.
....w.{...q..s...z.8.......?...........V..6.....!IN....4.....*.5..4.$.
%O..!W@ ..k.\..Z$=..V..\.j..]:.v_.]Z...AI......'.Z.....D...m...J#.bz.A
...J....)-..w\h2,.Q7...Q..hS. m.0....\M....a..Aw0...h...\...C....,)...
......8Q...}..F.....n......C...[.r.G1Q...b....0.E...........j.... .zS.
..Qv...8..........M...E'u..F...t8.W.....).I........j. .P.......1f.../D
Sk.!*aaF.m...a..Ha.....6.5...V.^y........R..A .{.u.$..M..uR.a...q.. ..
....`.Ri./.S.q........^..I6x..}o..../..O...iK...uZ...n.....nm..%..x.y.
....B.w?q.k...S...Py-..kHgQ....I6.=v..D....Lb7P.ej.&Z[m.4........ .#..
.C-P....y.._-:.![.s.{.1,..k.....j...Z...I!D[..z....v.M....>P]%H<<< skipped >>>

GET /cnnnext/dam/assets/150414175002-yemen-aid-plane-icrc-red-cross-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 41778

Cache-Control: max-age=2528

Expires: Thu, 30 Apr 2015 08:07:22 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.K........................!..1.."AQa.q.#2B...R....3br...$..4CS...%.5Ds
..c..................................,......................!.1A"2Q..a
q..3B.................?...\IVU.$....j.....z.%t......~.#\...\j.8b...x.N
F??....5lW.`.~(......6..T...._..x....G.h..A#.ln.........d.1..]....1.P-
.....?S..:FY_...kl....#../}KZh.#..-...mER....;o...{..>.Mp2...V>.
..A.7.nJ.1[...b.B.=....F.....E.G3..To.)...h.9r..}......VG.p....k......
...Z......|...$.,J..$.<.n...2O.....D..|d..A.v..~Z.5L5..I9..L.*^2Q}.
..~....u.h.(i.U...0..}...}....d:....,!n7.r...G........:.I.....p.{.z.C.
2.{".....k5....(...>)...oR|.!/...U..G<..L..c.}.......z.j.I..e.BH
.).....?M.....cr..Z.........q.PF.q....=Q}.5.Z..>[email protected]
..Up..C.s.|.......=/[email protected]....<.C....A.c.vZD6d.!..i..<.W.._
..q=........zP ...`d........j.J....JZ6...V..o......chz^.[.....R9......
o.(......L.w.].....|.....|E-....Q..r...1.8....b5.......*7.)`..P....s..
..N..T,.....t.....Zh..$L.....BN.Y..w....8.........|....O...."...vuf>
;$......O...}...&W^ed.q.1.u.M%LO.g.?..W.]..E<..i;..3`......]9^kG.vs
Ym.C[b.K..!.&.F.b.\..<..%C......Fz..*.xU[. .,T...j...-..'o..y.OP.A.
.&8....;[email protected]#........|......
...X.^...A'......V].J.i..i0..o..........aYn2h,y.IREO~.i...$.EL...yd@\.
....3......jt.7..jL..Ki.&h../w.M......t...d.i.......M..GZ..N......<<< skipped >>>

GET /cnnnext/dam/assets/150407162433-afghan-rape-gulnaz-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 38518

Cache-Control: max-age=2138

Expires: Thu, 30 Apr 2015 08:00:52 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.F..........................!1A.."Q.aq.#2....B..$R..3b...%Cr....4.S5..
.................................;........................!.1A."Qaq...
....#2B.3...$4.CRbr..............?...W.M.iG..4..(RK.8I#q8.c.Q.,.n..!..
....3..........AS.X.......R.$p....)*'... k.].X...ei.D.q..KE...0.A'...b
........6.I.........8@?AT0..\.q$.)9.R..M!h$i{......`...X.W....AHkhs.W.
.V.P#..H...BT.4..I'...-...|8fT..rK..\B.......5.:.....%...-..iQ.'.".#2b
..k...*C`$..\b.:.....!......'n..W..[.>_.%.w..j...J..^....M'2.~.yi..
..Dxy.. ..D....?J.O.\.6.t.%.rR.....2Ts.....zm..$.....e...VI..s...Z./..
."x...m..7%!YH. ....H^..i$.hl...0.d...8..H........l...d.....s..s\X.r..
:.....i{k....~.-%?...S....lkd....>....~.OH..'....<....!1...1....
.JE.C..}r.r?.. ..D...W%eg...V.......^...o..3&...."....x=~F...t.2.....B
..U..}.h.Txl...8..#[email protected].>..$.......5....\.."......
.......9..........~.........f..xt.l}..}F..d<..`(q..g.Y....o5|.k[...
..h>.$...Z.I..pi..K..ei{..!8$c..............T......[:,....EA1L..)..
.R......S....._./.}0(.&Z[...<...........:1..i.... .~...{W.H....T.sQ
7......8W'. w.5?Dj.P4W.#$....g...".....%.......za\s.U..6.o='[email protected]
..U..|...9...}..I.6..B.......l..X... r.........^#uJ.......<....g]..
G..B..........&4e....w.....[.8.jO'..O.....g/A^D..)..I9Js..<R.......
..&.......U...Y..@ ..w.H.L...>..5...t....J#..J#.....<.P...O.<<< skipped >>>

GET /cnnnext/dam/assets/150408162525-us-soldiers-afghanistan-npw-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 37725

Cache-Control: max-age=749

Expires: Thu, 30 Apr 2015 07:37:43 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.I.........................!.1..AQ."aq2....#BR.....$b.3Cr.%S..45c.....
DT................................0......................!.1.A".2Qaq..
.3B...R.C..............?.%...bPP.u..0.......=...J. ..!.......d<.2N.
.....F..Z....b}..l...%.........T...6....VC.q....L......../<.z-...&l
t;\.....;V8...U...m.....SQK..T....Y..V`s..z.43o...G'.pO.....O.5..7....
g..(..o....d..".D...'y)^.q.x.g9g....8....R.u.#YV*.Th.US..$^1.....2M.G.
rt.......@....$...#...[.T.7.W.3..qm....O .H.4..L....c..Dj.....5..I....
.........K4.Q*'...S........<S.UMV..TG&1.I.........t.J...'.Q.".J) ..
q............Rd...j....%........E...<.......l z.K|.V*.CS.*......25.
w.........*i..kS..1\.......zh9...."<.p.E..d........n.....!..RN.YN.,
.31}.Npry.........;n....{]U7.V*j....xe....#g..E..3..>e.:O. .Z.=[]..
..4.i..........?Mi.Wa{..Q .f%J...8...........Z.....Q...D...tne.h.....^
Z{uo.1........U..d...{..^...c..#.#h...(... .PPz.mE...'..Gc..E...v.*.o.
8 ...f>.!N.9X.....jz.......1....$i~&..NH:.....$`..R<Y..-u.......
..:.Y.[.q._mlgis ...x.....sm.....c.......-.i....$....{.VG...;...tV...#
.U.=...?\jr....S..PN.F......(..'$.\V.W4...s..4..[......i...A ....=..^$
Z....g.......^...I..Z.~\.$rU...........4.N.6.9.Q.K........ s...2.T.",.
<..O.u......../.P;....es.....'.....I[_S[..&o=....{}....../....5B..$
.c1.o..C..a........JH*-`On...,D.%%K...s.]..x.y....x.K.>CI.[`..c<<< skipped >>>

GET /cnnnext/dam/assets/150331115950-high-school-students-in-eyeglasses-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 37004

Cache-Control: max-age=1181

Expires: Thu, 30 Apr 2015 07:44:55 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.M..........................!.1.AQ.."aq#2...B......$3R..br....LSs..c
..&FT...................................;.......................!..1A.
"Qa..q.........#2R3Bb..Sr...............?......Q .....}YN{....-..{.)..
o.U...5y...6..k....A*.z......T.O..L.G....o.t5'U..........onWv..b....m.
.p..9.O.iz.....d.y.....MQ.F.E....>0=h.....?.6.u...v....c.DOP.PJb...
t.S....1Q..}..YH?.........9H..B.W....5.=...p..`.......d.V'.:9.D4..,..w
NlM;u?...T..7....`.Z}....~J.......Fl:...v....JX......>.......J.-...
M42.Q..)...YR..]e.2.h..tD8..y......^Q...^..Y.)C...rs[.!..m S<w.....
.w..A%.{(.^DTP\e'..........VG....;s\.......O..l2.iI...(.;q.(9......j. 
]....pNjs.....4R..pk.W.......N../>j...Y..nJ....w`....lBD.Sm...J4...
..%c.RE........rY..p.1...!.~....?Oz..Lv................v.`...`.A?Z. .6
......!..IQ$.~B...V...R......U..=ewR\.m..}..Bw...2q.Q.E.$..J......u...
....m_...(.#.\ .c.j'....xn9....pO.'..kb....B.&Q..!DmO....G....\.._...2
.V.{q.O@..&8K..u.&J..~.)..L..*o.%w.<...V0..8.>g..}}._.....-y'...
...W..5..m.S.Hc....U..T..<-.Y..........!. ?Uw.)........GR..'cc..?@.
........$..=3O.-.lNG..i.#  .~<..Tr.....e\.v...vnW....4Wh..M5x.qc..!
%.!<..`.]b..{....I...m....*mn.....X>'.......>.~...l....#]Y...
G.-.:.3.......4.........>.V...m.....7W].F.....$.....-.......%.%.eC.
..H...,..........R.HO...O.C..q.[..'c.Q.k<..K....9-!...........=<<< skipped >>>

GET /cnnnext/dam/assets/150401182844-isis-driven-from-tikrit---s045690651-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 27931

Cache-Control: max-age=3612

Expires: Thu, 30 Apr 2015 08:25:26 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.H..........................!.1.AQa.."q2...#B...3Rb.....$Cr....%D..&4S
..................................5........................!1A.Q."a2q.
....3BR......#..............?.../*[email protected].<.
w.'43.....N..hP......hf..".....p(...U.M.....I.@....'<P.y.....Q....E
..UCu.(Q.C9...=.......u. q..I.([email protected].....@.."../ .n.....dP.M$..D
[email protected].. [email protected].......*[email protected]....... .:.^.j.........X}N.2.wq(
uE...9.....*l..<'..P....\.u.....|...u....Q)II..NA....Z..8......... 
:;..\f.n....|..R|....0....^u..y**..Q..2.G....\....3ZY$)G.4..j..<.F.
6n'....~...p..........\..-.=i... .[n..D...............m..e.!.B.q4f.~..
..H...s1/..k.TH....%.HK..Ck...W...t.r..3...j........-......Z.i..$.3!.G
..W'[email protected]$7.......M..E....U....f......L....>...o...T|4}@.).*.T.....
E.3C.. ..I...P.4.{.n..hS...d.pE.M1...f....4.....u#47P...C4.sC<..b..
...rM.M...P'4F..@...'u..(....f.h..h..C4Y....Qn....U.h.E...2.<.A..h.
TX..C.@..."..@.(...#[email protected].,P...I..M.:....(.I4....DN)X...ri9.$..`d.c}E-
(..(.b...[.m/-.s.......hn............]L....#...=W.&.5......U'.$.C.RRG.
EvH....(...Ysp&.R....<..K.....:.../x....V.[..9..Z..X.sU..hJ.j...N#H
....LJJ.$|.T.....nV......s.O...#.......Dv..-....$."...c...1....V..5...
..\y0..e.J.-.R.h.ll.nKB$-C.S.C..V.....z..g....mP.....N]d4..*$..c.T.l.$
.K.....^.i.......k...5.[<..Q]..PP.!2.io.#)......^....!D.....M|.<<< skipped >>>

GET /cnnnext/dam/assets/150330212733-sulaiman-and-ali-khalil-split-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 22814

Cache-Control: max-age=4152

Expires: Thu, 30 Apr 2015 08:34:26 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.G.........................!.1..AQa"q.2..#BR..3...$%brs...4C..5S....T.
.................................1........................!1..A"23Qq..
a#..B...CRb............?......9fo.E.U.. {.E.\r.Ql.\..H.*Dd..S.2q......
s.8...2....>[email protected]..{......,q..RA...z5..._?j.....1J
........fV.$.z....#..([.V.j.r~......A....!!X.=.[Y..C(.p(..ep.....D.(e/
[email protected]^k.1$Q3.8P=h%%.o.V,2..... Y....=.O..#._p..`......o
.^.(....|o%............'..mQ.U.O#.........vrd...P.I.).4.?M.[1.....t.Wi
...b.T.^*.....C.....=n...].!.E9w.\...Y~.#P..,....SHh.2y}..Q...g...'.j.
...S.M..Hw...M.xf"..j.........oq.jAZ.BM.s...IP.O.....w(Q.A.W.i...1Ip..
...ZH.2.(. E.p.a......w.d8c......*.4..f.|P...} .L.x.d....{n..O=....zDI
....<.......`y...j.i..w.G......x..'...fE..18....'.CwxQ.!.........Re
.h4.=h..Oz.I.[..(."3a...A.... .A9.4.|3v. .n..RP.8...N89..K....[V....j.
N..v`A....[..g..r..r...N...{..*.;6&,9.....[....<C.4.0G$.. ...]..=.G
.z..d.............(.......E.$....%.. .EW...[.p..8.OV......,|L..[d.{...
...3..P..P.}........3... -....,N.F....Bu$q. `......,.....[.'.......#.w
qNc.......<.A....T..(..q.......D.RASJrNO.4%..i....g..4gk..R.>..r
..1.P.0.&CdvrI..jx..F8$.).ae^OzMw...y...... .H..}.k....{.So..q...?...Q
p..Z.....#....w.......C.......#..eg..V.5.G..........l...M...E..qowi-..
.Oc|/.......n.8.....6...v...%...W.:b.@..[....B..M..sG.......T.-..s<<< skipped >>>

GET /cnnnext/dam/assets/150320070311-01-eclipse-0320-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 13335

Cache-Control: max-age=2903

Expires: Thu, 30 Apr 2015 08:13:37 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..F.........................!..1.."AQa..q..#2..3B.$R.4br....%S..&5CD..
..............................,.....................!1.AQ.."2a.3.....R
bq.............?..[.y#.)J.*.........`.x.%........eH.D.)......t..Oh...R
5..j.....fJ..,..2(....c.T2(.:,..\..Y..%..-.%..l........e....V....< 
kOg$......V..e..Q#p..l....Y..r......m\.p.my..e..O`.7.K.>q..eEw5....
.Z.mx9.......;n..6NRG.........o [email protected]..<.hqN.pw..k..?.v..w<
;.......Q..J[.,i .....^.<.QQDY.U.;S..V....4....x0..%.9..1o.0.......
.Y.f.e.A.n..S..!.A..HFT.h....r.#).$.........l....<!=.$}...B.....H..
T.e...>p#......8..n.b..y..[*a........n..O.V%.RH.Z.9i..%.Ic.h.w...5.
../.S.r..z.) `...O.'.FM....|R.....8/~v...k.e.m.N.J. ..4.....vJJ....6k.
.2.wI...8%,l.....Zx.|..........e%.......].w.D..t...utQUI.i..F..0.<H
(.!..!..!(..(..........oE#FSZ....7..e .R5.....)Z...c2VLQc...2(........
..\Qe.c.....R...$...;..[.<M......o0n.}....y..Y.Kg?(.]....ZC?e..5..\
.K......;.o..;..25........#....]..M2\.. e..%....(.n1......F?F..D...6t.
.......K....Wx.....{%.F...s.E........-..K...^..C..>...s.=..w..$.f.o
.M.b97X.....>......^...G......."....U..*C.B..L....e.....a.9.-E.@>
;6.(.7;)...n.......f..y.....G..vc...j.0D....d...v..$.....wEl^.....\.E.
.$.}...=..'e.4.l.EU@c$y-t...L..Q.cl-...z(.O..s.......P..A.[....w1FZ...
.i.~P.Z..z.#........%8..A..)...`.D!..!.>.v.........S[g...z..d..<<< skipped >>>

GET /cnnnext/dam/assets/150311142826-38-obl-photos-43-large-169.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/png

Content-Length: 205325

Cache-Control: max-age=1209

Expires: Thu, 30 Apr 2015 07:45:23 GMT

Date: Thu, 30 Apr 2015 07:25:14 GMT

Connection: keep-alive
.PNG........IHDR.............7..... .IDATx...g.%Yv%..G...=.> .|...H
B.!..?. .?....$A...F..=C... .*3 ...z..Gh..Y..n.....an5..].q..k...>.
.........).qy.%IR.L..k..X.(..(.VCT.]..:..5...%)r...<{f........~.oj.
..L.....A..2e-....dE.o.dN.[y. ."...r,.&i".BUU...W..7....Q.g..._?Sd.2..
4...L..K.ov..REU.u.....[.f....Q.5M.^.."....hH,.....A....h....../.....v
k....8.tF...2hy..,#0.[Ue\.kog..n.......a....<..ql.1.F...K..8'...U..
e.....^O.,..w.~.D/...A......C...,}....j..NdQ.......\.....On.G........,
y...i.v..]...i]....6z.*Z.l(..."..q...XULQ.n.NV.U....)....e........=...
#.z..j.,.h...~....(_O.G..j...".".u.$K...G.eH."I.UU...)..........h0..4 
......y..v..^o>~.>.p.W..G.'..'....,...^..=}..?....".Z....G.A. ..
'h-..U=C4S.....t..<a9........sz.a....x.(K. ..K.UeY_. ...)...(.....J
...x...%...y.o.e..|Q..s.........o./[email protected]
.^. .c..b=bL./v.y/..<{...l.A.ko4,...U..O-.y...&.,II.fy......j..yi..
t>w\..AF...@. .q.,c.r..3...(.Og. b|8rm...c..I.a.......2.%A.x....4..
._}uuu. I......{...7.........=..Y..L...$.n.FC..b..sg...^...-N.7../..7z
 ..?.`.].e......n.*..L.....7.n....VU.P.I.F8..=`m....,...|.....I..[...'
|`...j.cE...{0>>...|....j..t.....-.t..9x..kp..r......Y.....4....
m.f..wvu.f..?....>|....9....Wa..d..." ..]....K........./.p...Xx8.20
.z6mv.......1p....d6.=>..t;g*.....c...9...X....nw..X...$..... .,...
........<.}o.*i.....).v[.`.,..Q.x..|X.9.xI.:k..W....i..Q.n6G......A
..e..6q.H"Mw..V..1..#..I..,#*....kz.'.3.7gU...l=.W...).8^.e..zBo..;aw.
.........y.fi.....l.y..`.qw../.mC.....m......).[$"(b.....7h.~.;...<<< skipped >>>

GET /monetization.gif?event=4&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000820&country=ua&app=65743&os=7(64bit)&defbro=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430378605&asw=0_1073750533_-2147483136_32768&browser=ff&rnd=1430378605 HTTP/1.1

Host: logs.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:23:34 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1430378614.dop009.am4.t,1430378614.cds058.am4.c

GIF89a.............,...........D..;..

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=587412-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:21:59 GMT

Content-Type: application/octet-stream

Content-Length: 83916

Last-Modified: Thu, 30 Apr 2015 03:13:41 GMT

Connection: keep-alive

Expires: Sun, 03 May 2015 07:21:59 GMT

Cache-Control: max-age=259200

Content-Range: bytes 587412-671327/671328

MMMMMUuzt.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......(... ...@...............................~r......YRO..M"..M"..M".
.O$..S(..S).xH0.~L3.wG0.wH0.rE..xI1..YB.\TP.XRO..K...N!..O"..N"..N"..O
$.xI0.pE..ZSO..h:[email protected][email protected]_]..F...E..
.C...D...E...C...n5..l6..f>...n...s.[TO..L...I...J...I...s-..r...p0
..o1...j..._...k...l...m.ZTO..Y...K...I...w*..v,...h...i..i...Y...S...
{$..z&..x'...e...f..m...k...l...m...n...o...n...j...m...k...q...}....$
...*...*...7...?...D...;[email protected]...
............{...z...{...z...u.........................................
...............!.......$...!...&...'...*... ...-...*.../.../...3...3..
.5...6...5...7...7...8...;...=...?...7...V...p.....^][................
......................................................................
....j..........ttt.```................................................
..................................................................

<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:07 GMT

Server: Apache

Set-Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html); expires=Fri, 29-Apr-16 07:25:07 GMT; path=/; domain=bbc.co.uk;

Set-Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html); expires=Fri, 29-Apr-16 07:25:07 GMT; path=/; domain=bbc.co.uk;

Last-Modified: Fri, 06 Sep 2013 09:46:13 GMT

Content-Length: 718

Vary: X-CDN

Keep-Alive: timeout=5, max=796

Connection: Keep-Alive

Content-Type: text/plain

User-agent: *.Disallow: /cgi-bin.Disallow: /cgi-perl.Disallow: /lexaur
us.Disallow: /mpapps.Disallow: /mpsearch.Disallow: /mtk.Disallow: /wea
therbeta.Disallow: /weather/hi/about/newsid_7760000/7760846.stm.Disall
ow: /1/hi/help/8594343.stm .Disallow: /2/hi/help/8594343.stm.Disallow:
 /1/hi/help/8594488.stm.Disallow: /2/hi/help/8594488.stm.Disallow: /1/
hi/uk/1494064.stm.Disallow: /1/hi/health/363959.stm.Disallow: /1/hi/he
alth/4749331.stm.Disallow: /1/hi/england/1678616.stm.Disallow: /1/hi/e
ducation/3826037.stm.Disallow: /1/shared/spl/hi/pop_ups/05/uk_should_t
he_uk_vote_on_the_eu_constitution0/html/8.stm.Sitemap: hXXp://news.bbc
.co.uk/weather/sitemap.xml .Sitemap: hXXp://news.bbc.co.uk/weather/sit
emap_mobile.xml ......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:07 GMT

Server: Apache

Location: hXXp://VVV.bbc.co.uk/news/

Cache-Control: max-age=0

Expires: Thu, 30 Apr 2015 07:25:07 GMT

Content-Length: 234

Keep-Alive: timeout=5, max=800

Connection: Keep-Alive

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://VVV.bbc.co.uk/news/">here</
a>.</p>.</body></html>.HTTP/1.1 301 Moved Permane
ntly..Date: Thu, 30 Apr 2015 07:25:07 GMT..Server: Apache..Location: h
ttp://VVV.bbc.co.uk/news/..Cache-Control: max-age=0..Expires: Thu, 30 
Apr 2015 07:25:07 GMT..Content-Length: 234..Keep-Alive: timeout=5, max
=800..Connection: Keep-Alive..Content-Type: text/html; charset=iso-885
9-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html
><head>.<title>301 Moved Permanently</title>.<
/head><body>.<h1>Moved Permanently</h1>.<p>
The document has moved <a href="hXXp://VVV.bbc.co.uk/news/">here
</a>.</p>.</body></html>.....


HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

Cache-Control: max-age=0

Content-Type: text/html; charset=iso-8859-1

Date: Thu, 30 Apr 2015 07:25:09 GMT

Location: hXXp://VVV.bbc.co.uk/news/

Keep-Alive: timeout=5, max=800

Expires: Thu, 30 Apr 2015 07:25:09 GMT

Transfer-Encoding: chunked

Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently..Server: Apache..Cache-Control: max-age
=0..Content-Type: text/html; charset=iso-8859-1..Date: Thu, 30 Apr 201
5 07:25:09 GMT..Location: hXXp://VVV.bbc.co.uk/news/..Keep-Alive: time
out=5, max=800..Expires: Thu, 30 Apr 2015 07:25:09 GMT..Transfer-Encod
ing: chunked..Connection: Keep-Alive......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:09 GMT

Server: Apache

Location: hXXp://VVV.bbc.co.uk/news/

Cache-Control: max-age=0

Expires: Thu, 30 Apr 2015 07:25:09 GMT

Content-Length: 234

Keep-Alive: timeout=5, max=799

Connection: Keep-Alive

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://VVV.bbc.co.uk/news/">here</
a>.</p>.</body></html>.HTTP/1.1 301 Moved Permane
ntly..Date: Thu, 30 Apr 2015 07:25:09 GMT..Server: Apache..Location: h
ttp://VVV.bbc.co.uk/news/..Cache-Control: max-age=0..Expires: Thu, 30 
Apr 2015 07:25:09 GMT..Content-Length: 234..Keep-Alive: timeout=5, max
=799..Connection: Keep-Alive..Content-Type: text/html; charset=iso-885
9-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html
><head>.<title>301 Moved Permanently</title>.<
/head><body>.<h1>Moved Permanently</h1>.<p>
The document has moved <a href="hXXp://VVV.bbc.co.uk/news/">here
</a>.</p>.</body></html>...

POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.5

Accept-Encoding: gzip, deflate

Content-Length: 107

Content-Type: application/ocsp-request

Connection: keep-alive

0i0g0E0C0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.

.sR'..i..0.0... .....0...
0... .....0..
HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Thu, 30 Apr 2015 07:23:09 GMT

Expires: Mon, 04 May 2015 07:23:09 GMT

Cache-Control: public, max-age=345600

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Alternate-Protocol: 80:quic,p=1
0..........0..... .....0......0...0......J......h.v....b..Z./..2015042
9191340Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
...sR'..i....20150429191340Z....20150506191340Z0...*.H............. f.
;.Va~k...i6.u....X...K.......gmtZx.......6.Jd4e.u.. d.:.............Oo
.-......B.m..(....(.DM.S..k.H....J..?e...V..p;^...)......!-._.W...p.G.
DF..c.y-....#.[S......M.....l........B}v..:..Q....jW......^S.....]Cx.b
..*v.....'?...x.....S....dE.....\NT..F...JSHTTP/1.1 200 OK..Content-Ty
pe: application/ocsp-response..Date: Thu, 30 Apr 2015 07:23:09 GMT..Ex
pires: Mon, 04 May 2015 07:23:09 GMT..Cache-Control: public, max-age=3
45600..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 
1; mode=block..X-Frame-Options: SAMEORIGIN..Alternate-Protocol: 80:qui
c,p=1..0..........0..... .....0......0...0......J......h.v....b..Z./..
20150429191340Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....
b..Z./....sR'..i....20150429191340Z....20150506191340Z0...*.H.........
.... f.;.Va~k...i6.u....X...K.......gmtZx.......6.Jd4e.u.. d.:........
.....Oo.-......B.m..(....(.DM.S..k.H....J..?e...V..p;^...)......!-._.W
...p.G.DF..c.y-....#.[S......M.....l........B}v..:..Q....jW......^S...
..]Cx.b..*v.....'?...x.....S....dE.....\NT..F...JS....
<<< skipped >>>

POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.5

Accept-Encoding: gzip, deflate

Content-Length: 107

Content-Type: application/ocsp-request

Connection: keep-alive

0i0g0E0C0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.....F......0.0... .....0...
0... .....0..
HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Thu, 30 Apr 2015 07:23:10 GMT

Expires: Mon, 04 May 2015 07:23:10 GMT

Cache-Control: public, max-age=345600

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Alternate-Protocol: 80:quic,p=1
0..........0..... .....0......0...0......J......h.v....b..Z./..2015042
9190952Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v....b..Z./.
....F........20150429190952Z....20150506190952Z0...*.H...............A
.r..~.h2..............=...`....o.,..\y.N.G..w{)QU.P..?0_...$..).:....4
r..b./.........X..2(..(.8.,!..W. [email protected].......(
G..$.....&.....f .Dl.K...4..1...VSl.}..]u.~...IZ.R.w...gSk.v.....w.,%.
....O.ZI...Tw..%......G...{8..>.4.'.y....eAHTTP/1.1 200 OK..Content
-Type: application/ocsp-response..Date: Thu, 30 Apr 2015 07:23:10 GMT.
.Expires: Mon, 04 May 2015 07:23:10 GMT..Cache-Control: public, max-ag
e=345600..Server: ocsp_responder..Content-Length: 463..X-XSS-Protectio
n: 1; mode=block..X-Frame-Options: SAMEORIGIN..Alternate-Protocol: 80:
quic,p=1..0..........0..... .....0......0...0......J......h.v....b..Z.
/..20150429190952Z0k0i0A0... ..........j.....p.I.#z...(~d..J......h.v.
...b..Z./.....F........20150429190952Z....20150506190952Z0...*.H......
.........A.r..~.h2..............=...`....o.,..\y.N.G..w{)QU.P..?0_...$
..).:....4r..b./.........X..2(..(.8.,!..W. [email protected]..
.S.......(G..$.....&.....f .Dl.K...4..1...VSl.}..]u.~...IZ.R.w...gSk.v
.....w.,%.....O.ZI...Tw..%......G...{8..>.4.'.y....eA..<<< skipped >>>

GET /news/1.67.0293/img/brand/news.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: static.bbci.co.uk

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache/2.2.25 (Unix)

Last-Modified: Fri, 24 Apr 2015 13:14:33 GMT

ETag: "c32-514782d592040"

Accept-Ranges: bytes

Content-Length: 3122

Cache-Control: max-age=31536000

Expires: Thu, 28 Apr 2016 10:01:19 GMT

Access-Control-Allow-Origin: *

Content-Type: image/png

Date: Thu, 30 Apr 2015 07:25:08 GMT

Connection: keep-alive
.PNG........IHDR.......<.....kT.R....PLTE..........................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
....................................................&i.6....tRNS......
.......................... "#$%&'()* ,-./013456789:<=>?@ACDEFGHI
JKLMNOPQRTUVWYZ[]^_`abcdefghjklmnopqrstuvxyz{|}~......................
......................................................................
............................ ...2IDATh....CUE......"F.n......{!...i.R.
%.n...Q.e......k....R....$J`J.<.....v.lO......{g>o..9....U.7.*!.
{...|.. ...PK.Tm.XC..D...I............\....&=...;...AUA.=.!Q..t.8H....
.e.-(.'..7>m."...B..-C..%W6z.;.c.R.o.m........2.. .)..S.R...7J....V
...BS.....F.....:.,....ZY.Jg.....V....{idX.1 .`.e). i.Q.y4/X.......wA.
.}[email protected]...{.62.z*....e.v...q.~..F...M..'.fn_.y..b!2<
.yB....\Y.D/...3.........$.........u .wR...nu=..y.._....!t9.vk.p6\.<
;R.i"z(...N....G.@..."[email protected].(U..\.2,...m....s..;[email protected]. pXn..[..<<< skipped >>>

GET /news/1.67.0293/img/correspondents/circles/markmardell.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: static.bbci.co.uk

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache/2.2.25 (Unix)

Last-Modified: Fri, 24 Apr 2015 13:14:33 GMT

ETag: "4d89-514782d592040"

Accept-Ranges: bytes

Content-Length: 19849

Cache-Control: max-age=31536000

Expires: Fri, 29 Apr 2016 00:42:33 GMT

Access-Control-Allow-Origin: *

Content-Type: image/png

Date: Thu, 30 Apr 2015 07:25:08 GMT

Connection: keep-alive
.PNG........IHDR...p...p........K..MPIDATx...w...Y...f...;.......*.J.I
....HB.-0.....\r...h..=.Z`c...._.6..... !DPV)VI..Su.9;...J_....m...=zt
...].....q..{...o.....<.._^_^_^_^_^_^.>.x.....#oZ;....O==.,-....
[email protected]...=...|........[.. &.._..}..(.K...j.g..T:b
..D.1.L.R .".r....&NS..?......;..._...h..G...k..&........b^.g.Y'..g4..
.K....G.)...q....:.....bmMd..t...}......../.......z.p^....C.{....$6.,.
Q!P..AJ6..$Y.J..y.(M..u.,..g.RK.eC$......*x.n................../......
...W.y..q...N.......3.3-j..$...pL]..i.w.)%2......4UI/.0R.. ...>...`
 ....d.:.FIF.........z..P.......;_.I..Fi.<.BB]`..^...1.NJ/..B.g..N.
w..j@*.o...be...|..;@.....*L..3."..\.9.........^...............s.. ...
........R.&...`{o.....V...$I".y.."J..<............dB.v1...n. ....).
.k.......b.....n.Qq....7..'..._.....S?.M_s....Y.X......p.d2.\.l.LYT...
..N.`..j..o.f..^.4M........Z.P.[....X.%Bj66O..4$.b...fslU!. K.2#!..0Y.
7u..x...../...d.....m{...O.?....h.l>.75.O".......j..P!pu....C8...N.
Kg..pi....g...4...].wnq..Mj.9{...,#..u...-..v./...9...,......._.=.....
....#....u...oH...s.Q..u..i.....MMp..@E.(6t. .uP...`.^.O..[;.....:..l.
hk.~......p..X......7....4.{.l^..........t.{.s...7.w:.uMU._...........
....W}......!I...eo4e..pzs.b2...b..F..B)....IA..0...^.wz<p..t{]._..
...b{{...A...2.........,f..9.L....N.2..y..U......  ..?{...1....W....7~
............x....wUC.E`4.......;....%,.)[..JG...;.3..nl0....f....'....
k_....s..U>..G.uR..F.1Zqxx...DC#5..!.c..L.3L..G...#4.......7V...O,.
t.......w..?.....z.}...zt> ).d.)&...i:.....o?A.....}..o.0.-.<<<< skipped >>>

GET /news/1.67.0293/img/correspondents/circles/anthonyzurcher.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: static.bbci.co.uk

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache/2.2.25 (Unix)

Last-Modified: Fri, 24 Apr 2015 13:14:33 GMT

ETag: "177b-514782d592040"

Accept-Ranges: bytes

Content-Length: 6011

Cache-Control: max-age=31536000

Expires: Thu, 28 Apr 2016 10:01:50 GMT

Access-Control-Allow-Origin: *

Content-Type: image/png

Date: Thu, 30 Apr 2015 07:25:08 GMT

Connection: keep-alive
.PNG........IHDR...p...p......>.y....PLTE.......................}e]
M.yi....................mbUEphY........g.eE.x\XL>.....t......8.....
...........~L@/.nT....`C....tXQH;....rX...70%...}U5.^?.cB.[>....^@~
Y:.zX.`A.bF.P7....cA......zV8.X7zC1.X8 #..W6.lL.[=.]<vT7.^?~I4.....
...|..j.rRsO2.........yO4...........v~^B~S9.........lL4....gEwWA.W<
}N2wI1..........Z;....iI.dH.J3&...}][email protected]>-.....s.R6?/"/&.....
..E3#.....j.nR.^AoS=.................gp=(L7'........s.sQgG0.......tY.g
O{\I.eHnF/...........~..x..d..].lV..p.|_.kKb>*..............~.R>
U=,.....j:,...............c..b.^E.cB.V=........u.fL^D.n1#.....u.M69 ..
....c.^I.......{k.hEQ/ .............P:X7$H(......r........w..u..o.s]2-
-d8&.......|T.hT....dXX>&|5.g-...........}c.UID;<-......oZ.B7.D'
`/#........|......xloo`]`TS_IAO...xw^)..K&i%....\&..................tR
NS..N.5'o.l;...O....P.......lk...............c..^.......IDATh....O.u..
e..6..Qc....=..ZM..H[j/zAG..z.VK......ZK...RX..j..5..F...,%..`..-.7.4&
...W?O.?@../.......y.......U..{....h...w.q.U........{z~.....)..vj../t.
...c..[.bS..s.....s...].NT......[....<a;....o..].S..y`..'[email protected]..
.....Z........... .m#..}u......y..G66jZ[..&...S@t=.g'..J.!.K......U...
.......v.....^........q.M q.W[..};VN`.............C.........=j.......n
..|....g........c.."z/8.Tg[.}....=.s.........(.....x<.aI.5.>...D
..g..........fb.._U............b....N..M.....[..w..1...f..............
...6........<...^{.....1.2...7.Dm.O).*...CCtRu>..,.....kE.VP.F..
.......E.hL-..X,.&..[....T*.....u..IK...n......*.9......H&....Y.n.<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:21:58 GMT

Content-Type: application/octet-stream

Content-Length: 671328

Last-Modified: Thu, 30 Apr 2015 03:13:41 GMT

Connection: keep-alive

Expires: Sun, 03 May 2015 07:21:58 GMT

Cache-Control: max-age=259200

Accept-Ranges: bytes
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........*...D...D.
[email protected][email protected][email protected][email protected]...
[email protected]............
[email protected]............
@.......................................... ..............."..`.......
[email protected]................
...............text....P.......R.................. ..`.rdata...^...p..
.`...V..............@[email protected]...$O.......,[email protected].
....... ......................@[email protected]..................
@..B..................................................................
......................................................................
......................................................................
......................................................................
............................................U..j.h.NG.d.....P....T.H.3
.P.E.d......M..E....Q...e.P......M.......E.....j.j..M..K...j.j..M.Q.M.
.K....E......E..M.d......Y..]...U..Q.M..E.P.pn.....P.M..4.....].......
..........U..Q.M.j.j..E.P.M.Q.U.R.M..a.....]..............U..Q.M..M...
....E...]...........U..Q.M..M......P.E.P.M..d...P.M........]........U.
.....M..E..H.;M.r..M......;E.s..M.......U..B. E.;E.s..M..Q. U..U..M...
... E..E..E.;E.s..M..M.... U..E..H. M.;.w..M.......U..B. E. E..E..M..Q
..U. U..U..E..H.;M.s.j..U.R.M..?....E.;E.tS.M.Q.M.......E..E.P.M..<<< skipped >>>

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=864857-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: tFKRIW/BymA8rOQ1o5QfMa MIsjHRsNeGvVpGe0j71ufBc PJglCYEdYQismHCQ/DcoeOSQh IY=

x-amz-request-id: A2AA1AFC11B4965E

Date: Thu, 30 Apr 2015 07:22:03 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 864857-988407/988408

Content-Type: application/octet-stream

Content-Length: 123551

Server: AmazonS3
7f..]....|.5...[HZ-.....{\..Y......?...DQ....5Wp.!./...,LGv....- .....
.zw..x..B%9{..#....x.. Rp..by....KZ...k.t..y......8*.<.........L.d.
[email protected]..,...}..l....g....s.6*...".....F..f&.0.p..-....q....UN..
...^...-S.3.....@ /2.;......v.(.#....2.......Z.un....:....U.J4.......l
.....S.........Y....".W.1..r.-.!./.a.......v....6.......l..a.!.^.;..8.
t.]qeq..u..7'/..I.fEd.m....ij....L..R..$......0..1O.......D.C.........
n...^...eC~...>ec...xU?4......Y-s.F...y,..cM.....'.b.w-..z>U....
 .9.K.!4..y..&N...Y..$...R*........b....V....\6l...H..`.{.....4.Z.....
.X?.q.2Y.D..J.Z.z..~..p.JP(...v.#..P...._ ....G.s $..x[.e..$<V!....
h...I.h9O%,....R'S..F...*.G......I.Sp.1]....#|K.G..S........."=.XZ....
9.......S.DR..)9..x....:.....$......=....n.....{.J.......I..[..VLm.6l.
!=..Q.v.....f*....".)>..D.1......t..:9.....d5.).y|w..Z.(.=~....2Ix.
.o_;..........'..J.2Ds.!q.v.-.....#."..iq.:1A[d...]....,....-(.^Q..R.&
gt;..-=...[=.M.c...%.\hu.t...M...h.WC:r......|x)....[~k.[....d......@F
....X.....*..7YQ..Kai.m7.....Y...D.2.o.P......(J&>z..\[email protected]
#r`o.h.....c)y...=.x..%...%...A_.r.Po...}.........Uq...V.r....i.m].!..
.)d.....I..R.$..)*..V.z..O.).n.15.qP.]t.9..'.J2y..9?..S.....4C....a..%
.I....?g...5..M..cy.....o...........<...P.S3c.M../[=u.#.g.m.V._H=..
...E.>U.R..3"..u.|j.n..\...r*.....o.b...;.j\.H......g#..S........hv
..<..H!.(.......q.g .....Bc..u.E......./5.Qo....j....@^......J.....
_=.Iy..K.`.W..E.t...m.w.K..[<..e*.g(.T.fD=.........xeD.g....&.._.b.
.Lc.zvkn.Q.O..0NI...~.5.b%k...**.f...sk..)z[.0..JY.u:lJ?...'.M~.k.<<< skipped >>>

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=247102-494204

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: SfdB6QaMvIzHhMkyiLWGOvwZwKWpVn7aN9hAFtpW5Dm RIuf7wo2HtwGxmVLVcnO8ltLmeX624E=

x-amz-request-id: DF05B4FF362EEBEA

Date: Thu, 30 Apr 2015 07:22:02 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 247102-494204/988408

Content-Type: application/octet-stream

Content-Length: 247103

Server: AmazonS3
-s...R.... .e.>7........... )..51.n4..@..)....ck.../.01-. Z?L....k.
...O..<2Ma....7..r.2....j....O.".A......dK..&G..Hj6.(.P....ZxVA.>
;...Sr.l:.86....6bq.....>.d-p~R{..jI.L..M. .8O....q..[..J4...T..l..
...m.......)e.C..A....I,cPy2|.."-...".M.O..v...=Q......|.......'..Z..I
}....Dw.....f.i...m.~.o..H'.j.....&.agE.`._`.>...[.:O...^4......3..
.7.{[email protected]...<......BY..4C.}..Qf.'(.....rRf?...q.=|....|....
[........E..Gu...oD2 ...E/....2$..k......o......E.. h.....s7..ouq...N.
.".o.....L.....%.8-...zG.._.|.B{.e(w.iy.....ALA.}.,.cf1%ZE-.U.....oa.F
.~|o.":,.N.s...N.^x....GT..(.!..oy'.N..?.L....7...)..f1nS.P.6....._v..
....._)S......`....qe0.d.DI............sq..su...{j..Y..'...;..6.{..@..
Os3p4T8.z...8....L.Q.F...H../...b...(..k._..z.a...f...0......}.......P
.|-.3.g...<.,w=P.tk_$..p..\,...K..*..........S.....l&..^C.q.J...OD.
..$..T..x...`........:Ea#"...fv....p.u.YWE.........m..E...CV....=sR...
=W.DC..jQ..o.74;9 .5y^.H&f.3..|X.......w. ..^./E...X..lC.|.hR.. ...._J
r..v...E..X~.D.Q.......5.>...A..v ...a~=..F ..{a"....yj F..].n.....
.=1H<.Z...n}.1.;.!7U3..........G..N...T......A.........m .....PcC\C
ek.w.........J.a....{*.>.u..]9.....2K.}.G@........$-H....=9....f&f.
.6l...M...u ..k.N).O..8J.~........i ..`5.........r..g`..../...E.....R.
..P......l$r.GTJ...\...v9..Y.D.!&e..aq...)%.'.[.....Pgx..../.PQ..yv..D
...#...m.|P!.l..s.$.q&=..d6T.jQ...]d....7c ...ll.s...X..`T.(Da.P..b..!
....A>..n."..H.....Rrc...C.T..J]Jx\*.....l...q2..q...R......?9..4l.
....F..3`{..x.`..d^.g............C..t.G.'xdA>y...m....m~..."..~<<< skipped >>>

GET /analytics.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 05:36:31 GMT

Expires: Thu, 30 Apr 2015 07:36:31 GMT

Last-Modified: Wed, 08 Apr 2015 20:30:30 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 11178

Age: 6425

Cache-Control: public, max-age=7200

Alternate-Protocol: 80:quic,p=1
...........}{W.....|.....'.$@/....w..m.=.].$BJHR..R.......l.2.9.}...y.
.%..t...H...(...evG....X...v...&.....8.....B..=...}.;oT(E.]e&.e.;2>
..q..W..[......2....Z.2.gIp&su...2.&.,..,.Tfdn....u...N...w.<......
T.o...3.....p@..%.p.$F..........M6..,.....O..D..D.2C.O..l...xH-.T....S
.Z*..sJN&CjfB.gS.u.]PbBM.fJc8A......L....%.$ .._....Jhs,g.....(.<..
..i.f.....<[email protected]*J.0...e=.Fg...9
..b,..../.q...I.c<..v............X..*).......4.H..u.7o.U.....hI...%
../c7TR.i..,...t{"M..t.U....z=r_iou5..Q|<.S.t.~.Kn|.kno.....h..%}3.
ZH..G..<}.....W......}w....O..|...U...~...F...l.../~].n476.........
A.Nd...h......v....A........s....!.<"/..s.LQj.R...3......>.T.j .
.Fm...Z.."...z..2..m..K..4.&..E.D..H(B........vU/[email protected] t..Q....n...
V.}.V.>.......%n,B.\.f3.....{{|L......q.....N....U8.o..||......Z(.7
.?.5t.|<.w..D...5.C....C1St........6.`.7....Hh.Q...L..#;..V...o....
/...........ZA0..bu.`{...cpFch....z.....fNN3.H..t.f.z....B...P.;....)`
.....x.z............Jh:.......O.....Ls32Y.6(L......Z...R.p....g....S..
\.#.&..q<..sq!o......"i...$.pR..@....?..t9.!..#E.......AQ1q.:XhL'{.
...L.]...}..e..F.....(...CL.$....)3!.C....k...I.O.-..{.G....\.ZX*K....
.g...b.....q...z.....sq.t....L...MhZ...wZG.G....Db.:..mC."X_.tm1..[..T
.^......7B.$.TP.A_#.........K? ...}O.>...K...P..D.G...F....{...O../
....$N%.....g.j.Z.7E..3D...n."u...6M.dE}:#..?......Y.}PI.....$....pj..
f3\BR.-T.!.....c.vj..D(..q.a`Js..g......Yq. .t'.L.c.u..u..i..j..-.o.j7
T..f.5..F.4..<....K.Spt.........GK..`%*jk...H1...c......t.=.\.8<<< skipped >>>

GET /r/collect?v=1&_v=j35&a=18244230&t=pageview&_s=1&dl=http://VVV.appshat.com/home&ul=en-us&de=utf-8&dt=Apps Hat&sd=32-bit&sr=1716x901&vp=1018x770&je=0&_u=AEAAAAAAI~&jid=426254402&cid=99994774.1430378617&tid=UA-42656881-1&_r=1&z=140627520 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Thu, 30 Apr 2015 07:23:36 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Thu, 30 Apr 2015 07:23:36 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..Alternate-Protocol: 80:quic,p=1..GIF89a..........
...,...........D..;..

GET /root-r3.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.globalsign.net


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:26:32 GMT

Content-Type: application/x-pkcs7-crl

Content-Length: 594

Connection: keep-alive

Set-Cookie: __cfduid=d62d124f10471093317d5eb54f566a5d31430378792; expires=Fri, 29-Apr-16 07:26:32 GMT; path=/; domain=.globalsign.net; HttpOnly

Expires: Wed, 15 Jul 2015 00:00:00 GMT

Last-Modified: Mon, 23 Mar 2015 00:00:00 GMT

Cache-Control: public, max-age=6539608

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1df184dbde4b15b3-FRA

0..N0..6...0...*.H........0L1 0...U....GlobalSign Root CA - R31.0...U.
...GlobalSign1.0...U....GlobalSign..150323000000Z..150715000000Z0..0*.
.......1..F...141125000000Z0.0...U.......0*........%[email protected]
Z0.0...U.......0*........%..D...141125000000Z0.0...U......../0-0...U..
.....0...U.#..0.....K...E$.MP.c.......0...*.H...............Z.v..&...B
.....x)....'.u.}.r8.. ..i.......-..........@.:.5.v..?.. ....~V.=....R.
 .....rS....t.T_.....Y.R......p OS..2.s........(C.e.x3.#.d6L.d=.UI.;T.
.G...mx....... .......-........-.....J....$.Ko.e#......3....*..3.s...0
.........N..W?'.U...f..h..e...m.9.HTTP/1.1 200 OK..Date: Thu, 30 Apr 2
015 07:26:32 GMT..Content-Type: application/x-pkcs7-crl..Content-Lengt
h: 594..Connection: keep-alive..Set-Cookie: __cfduid=d62d124f104710933
17d5eb54f566a5d31430378792; expires=Fri, 29-Apr-16 07:26:32 GMT; path=
/; domain=.globalsign.net; HttpOnly..Expires: Wed, 15 Jul 2015 00:00:0
0 GMT..Last-Modified: Mon, 23 Mar 2015 00:00:00 GMT..Cache-Control: pu
blic, max-age=6539608..CF-Cache-Status: HIT..Accept-Ranges: bytes..Ser
ver: cloudflare-nginx..CF-RAY: 1df184dbde4b15b3-FRA..0..N0..6...0...*.
H........0L1 0...U....GlobalSign Root CA - R31.0...U....GlobalSign1.0.
..U....GlobalSign..150323000000Z..150715000000Z0..0*........1..F...141
125000000Z0.0...U.......0*........%[email protected]*
........%..D...141125000000Z0.0...U......../0-0...U.......0...U.#..0..
...K...E$.MP.c.......0...*.H...............Z.v..&...B.....x)....'.u.}.
r8.. ..i.......-..........@.:.5.v..?.. ....~V.=....R. .....rS....t

<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Content-Length: 0

Server: aicache6x

Connection: close

Location: hXXp://VVV.cnbc.com/id/100746255?region=world

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=251748-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:21:59 GMT

Content-Type: application/octet-stream

Content-Length: 419580

Last-Modified: Thu, 30 Apr 2015 03:13:41 GMT

Connection: keep-alive

Expires: Sun, 03 May 2015 07:21:59 GMT

Cache-Control: max-age=259200

Content-Range: bytes 251748-671327/671328
F......u,....... ;.t........@;[email protected].(i..Y.F.....W.......F.
.>.H....N. . ..N...~.WP.u...v......E..N.. .F..=....M....t....t.....
..............I......H..@. t.Sj.j.Q.Jz..#.......t-.F..].f....j..E.P.u.
...].f.]...u......E.9}.t..N. .........%...._[^....U..........f9E......
.SV.u..M.......u..N.3.;.u..E..H.f...w.f.. ....K.....j.f9E.s..u......Y.
...E.Yt,........... .U.Rj..U.RPQ............E.t...E.8].t..M..ap.^[..3.
PPj.Pj.h...@h..G....pG....H.....H....t....t.P...pG....U.....SV.u..M...
....]......;.sT.M........~..E.Pj.S.z....M...............X.....t.......
..........}..t..E..`p.........E........~1.]..}...E.P.E.%....P.....YY..
t..E.j..E..]..E..Y...-.....*...3..]..E..A.E.j..p..U.j.RQ.M.QV.p..E.P.h
.....$....o........E.t...M.......}..t..M..ap.^[....U...=..H..u..E..H..
..w... ].j..u......YY]...U....<S.u..M.......M..E.3.;.t...;.u%.x....
..........8].t..E..`p.3.3..O...9].t..}..|..}.$....V.u.W.]..]..M..x....
....~..E.P..E.j.P......u........E..........A...;.t....E.G...}.-.}.u..M
.....}. u...G.}..E.j.Y9].u%.}.0t..E......7..<xt.<Xt..E......$.M.
9M.u..}.0u...<xt.<Xu..G.....E..}..E..R..Wj.j..U.......]........M
..E..U..M.......C.....t......0..%....tP.A.<....w... .p.;u.s;.M..M..
;M.rQw..E.;E.rG.E.9E.u.;M.u.3.;E.r3w.;u.v,.M...}..u;.E..M...uA3.9E.t..
M..M..E..E......Q.u..u.W.....3......E..U..E....E..E..E...............u
'..uT...t.9].w.r..}..w...u>9u.r9w..}..v1.o....E...."...t..M...M....
.E..t..e...]....M...u..E._^..t..M....E..t..E..M.........E..M..}..t..E.
.`p..E..U.[....U..3.P.u..u..u.9...H.u.h..H...P.=......]...........<<< skipped >>>

GET //images/Tokyo/tokyo_default_logo.png HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d3i779maf1zmkk.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/png

Content-Length: 3921

Connection: keep-alive

Server: nginx

Date: Wed, 29 Apr 2015 09:12:31 GMT

Last-Modified: Wed, 29 Apr 2015 08:47:22 GMT

ETag: "55409a9a-f51"

Expires: Wed, 29 Apr 2015 09:22:31 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

X-Cache: RefreshHit from cloudfront

Via: 1.1 09052d1a6e392e4f4a3fd97bf34a2b24.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Jgl5wWynBZNnzDu5xIR0h1kB_esfw9J8H9uhlmtd4_W-rJ5O7m0SYA==
.PNG........IHDR...0...0.....W.......sRGB.........bKGD..............pH
Ys.................tIME...../.fCI.....iTXtComment.....Created with GIM
Pd.e.....IDATh..Y{p\.}...w...}K Y..e.......[.6I.a.k.v2..f4N:.p..7&R3..
d\21i......I..0....&...T`..e....%.d.....]...{......a..-&g.7g_........!
..%{..u....9..|...B.\...o.l.............J....z.Q..Y.(J.RZ....h...{....
..s.)..=...Z..DKoooK___.cl........?..b.f...VD".....J...UU5.p8*.E......
....nEQ.PJA..... . ..z.`..-{.....RZI...R..94-c&.c.W_}.......u........7
...........e.Z.3..\WW...{....#I.....t*..G..w..(/.xp...... >........
z...>..D......u....;;;.p-...oFF..;....r.8......`...I.....1......g..
BL...$..?........4;..|..^^.l...1...t:.U.V]...s.r9455.6m..r8.3....={...
..k....9xgg......).`.!;..i..$..>....i....x2.d2.Db.....t..p.eLNBQ..B
!D"...aH..].q....m....F.........KJJ..c.x<..b.......R..2..2..T:....4
.p..L..a.$oZ.JH...b_....war........'O.<|]1v.:p.......~....X,..9.N'(
.`....L..i.0..a.f]...C(.B...n...G.?.@ .@(..a.8q......?x..g.y....O.V.\.
M..8...........y!..c.u.&3.p8.....z...........*.$...Ji.^.B..].}.......=
.....z...y!..C4....... .....d`...E.CQ..x,.z..*..l..A.....  ...!..`..u[
..`..O?........L/4..rD.Q...Au.....L2.._q. a..1..B.d011.......oR.TKOww[
2........BC.._.`.....r..(..y.v]..V`2...i.d2.O...E.4.........#...<..
c.$.Is...m^3...j.v.QRR.S...e.zp.h..-...iH..H.SH...u..R..............R.
.....H$.d2)...|....8d.......x..7.N...H..$Ip8.p8.PU.EEEp..V..*<^/.v.
..n.\...ntvv..@`..X.t&.B(.~?"..R..(.p8......j..........PU........8 .2$
;#YAL.$It...!r.1p....P8.ND"[email protected].*....RJ!Q..I..8AO...Q.t.z..<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTEemCaVgs8Tuh2B9fGVE0pKKNyzgQUTF+nNhcF4oZhIkk5jLmo40rgOBoCEC6utoKGY/7ZdVX4/iTzOxo= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1552

content-transfer-encoding: binary

Cache-Control: max-age=578655, public, no-transform, must-revalidate

Last-Modified: Thu, 30 Apr 2015 00:10:33 GMT

Expires: Thu, 7 May 2015 00:10:33 GMT

Date: Thu, 30 Apr 2015 07:26:49 GMT

Connection: keep-alive
0..........0..... [email protected]
0001033Z0s0q0I0... .........z`.V.<N.v...TM)(.r...L_.6....a"I9....J.
8........c..uU..$.;.....20150430001033Z....20150507001033Z0...*.H.....
........e...E;....([email protected].....,.jPVAh..z...4..eL. ....2.G9.i}..
H..!.}..........<.w..0W......a...S.K)AR.h..N...V}.5:,..xE......n..j
n.:wg.h{....D.:-...~.7....L?..W...<.Vm..5.6o.g...3..=...f.R.W(.t.`.
. &.4:..d....K..K..A./.e.d..W..K=a..l......f...........0.......50..10.
.-0..........y.P}~.EY....T]. 0...*.H........0..1.0...U....US1.0...U...
.VeriSign, Inc.1<0:..U...3Class 3 Public Primary Certification Auth
ority - G21:08..U...1(c) 1998 VeriSign, Inc. - For authorized use only
1.0...U....VeriSign Trust Network0...141202000000Z..151216235959Z0..1.
0...U....US1.0...U....Symantec Corporation1.0...U....Symantec Trust Ne
twork1?0=..U...6Symantec Class 3 PCA - G2 OCSP Responder Certificate 3
0.."0...*.H.............0..........6..]......w';.r........I..c..4.... 
.........TyW......hd_.....!C.k......SE<?o.H.. .me.c..9N.&....e.^-..
a.....i\:..*."..u...|....".Nf3.~.L...QW...p.....-]UV8U...J&.<./.G..
...I...4.T....#I*.i.E0\..~q$.I.......X?G....f.t......v.l.U.Ld.I...B...
..=...Sf...H.s.........0..0...U....0.0l..U. .e0c0a..`.H...E....0R0&.. 
.........hXXp://VVV.symauth.com/cps0(.. .......0...hXXp://VVV.symauth.
com/rpa0...U.%..0... .......0...U........0... .....0......0!..U....0..
.0.1.0...U....TGV-B-2740...*.H............1.`...i.....H.C.i.9~.i..Z.r.
*$..(./.ag9.....J.Q.~.`.$?b..C....<.h.........d&....3.kV.....f.<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRODEXefhs/UZFum2o8YfzOFwceMwQUkz5j3yJ0BOBkhDHd2yOfDq+2TZMCEA89qsgV9niZmSI6gIO0S/U= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=353163, public, no-transform, must-revalidate

Last-Modified: Mon, 27 Apr 2015 09:29:58 GMT

Expires: Mon, 4 May 2015 09:29:58 GMT

Date: Thu, 30 Apr 2015 07:26:49 GMT

Connection: keep-alive
0..........0..... .....0......0...0......%bn.$..5.......?'4....2015042
7092958Z0s0q0I0... ........N.E.~.?Q.n.j<a.....3...>c."t..d.1..#.
...M....=....x..":...K.....20150427092958Z....20150504092958Z0...*.H..
...............\..u-......5...F......:A.u.R....k}...."q...(........7E.
.`[email protected].;.L........v..{.....O.U.M..........[Bh.<W....q..9..
e...n..k6..W.}.....B-%.B.^.......{.&|..X.5.v.H.....L...G..e....TF.?..L
.-XE.Xhe\.%........sg".......sk..qa....f7..%......X Ykl.>TG.....0..
.0...0..........7.R.~|..r."....#0...*.H........0..1.0...U....US1.0...U
....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of
 use at hXXps://VVV.verisign.com/rpa (c)091.0,..U...%VeriSign Class 3 
Code Signing 2009 CA0...150401000000Z..150630235959Z0..1.0...U....US1.
0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1Ver
iSign Class 3 Code Signing 2009 OCSP Responder0.."0...*.H.............
0..........z..|..>.....5.Z ...2.C MWIH.5......M.\.... ...eW..`.B=..
`:..R. ...Z.k.Y.....p@.(3.c....a.;..[E....J:'...`...B....M..&......{. 
(........%......^[v[....m....*.T.o&4..3.....3.........G...e)...'?.K..2
s..8=?..z.:..T..-.8R..8wv7*U.K..c...<s...]{.........6.?_...........
0...0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://
VVV.verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's 
CPS incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... ......
.0...U........0... .....0......0"..U....0...0.1.0...U....TGV-B-34920..
.*.H.............,..-......q3a........z....t;B.z.h...]...#}.6.,..Y<<< skipped >>>

GET /softwares/5/2/vlc-2.0.6-win32.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:22:03 GMT

Content-Type: application/octet-stream

Content-Length: 22943014

Last-Modified: Mon, 05 Aug 2013 14:46:25 GMT

Connection: keep-alive

ETag: "51ffbac1-15e1526"

Accept-Ranges: bytes

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L...#..O
.....................P......'C............@..........................`
................ ..........................................a..........
......................................................................
...........................text...D........................... .0`.dat
[email protected]...#.......$................
[email protected]@.bss..................................0..idata..................
[email protected]...@[email protected]....
[email protected].............................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U..WVS.......U..E....t...F
.........{B..H...H.......M..E..5H{B..D$...$....B..M..E.....SS...E...$.
D$... .B..M..E......M.WW......M.)..M..NT....NP........E.....}...VT....
....FP..E........}..VP........U.......FT.............}..........E..M..
.$..|.B..E..R...D$..E..D$...$....B.....<$....B..E..Q.}.;}...Q....~X
........F4..$....B...W..........$.E......E......D$.........B.RR.FX..$.
D$.....B..5..B.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$..{B.
....B...|.......T$...$..QQ.<$....B.S.M..E..D$...$....B.PP1....D

<<< skipped >>>

HEAD /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: redirector.gvt1.com


HTTP/1.1 302 Found

Date: Thu, 30 Apr 2015 07:22:15 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, must-revalidate

Location: hXXp://r7---sn-2apm-f5fd.gvt1.com/edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1

Content-Type: text/html; charset=UTF-8

Server: ClientMapServer

Content-Length: 638

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Alternate-Protocol: 80:quic,p=1
HTTP/1.1 302 Found..Date: Thu, 30 Apr 2015 07:22:15 GMT..Pragma: no-ca
che..Expires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Location: hXXp://r7---sn-2apm-f5fd.gvt1.com/edgedl/ch
rome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redir
ect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm
-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,i
p,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965E
EA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1..Co
ntent-Type: text/html; charset=UTF-8..Server: ClientMapServer..Content
-Length: 638..X-XSS-Protection: 1; mode=block..X-Frame-Options: SAMEOR
IGIN..Alternate-Protocol: 80:quic,p=1..

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=503496-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:21:59 GMT

Content-Type: application/octet-stream

Content-Length: 167832

Last-Modified: Thu, 30 Apr 2015 03:13:41 GMT

Connection: keep-alive

Expires: Sun, 03 May 2015 07:21:59 GMT

Cache-Control: max-age=259200

Content-Range: bytes 503496-671327/671328

PARAMETER...TEARDOWN....PAUSE...PLAY....SETUP...ANNOUNCE....Refusing t
o issue an RTSP request [%s] without a session ID.....DESCRIBE....OPTI
ONS.Got invalid RTSP request: RTSPREQ_NONE..Failed writing RTP data.Ca
nnot pause RTP....Cannot write a 0 size RTP packet....Got RTSP Session
 ID Line [%s], but wanted ID [%s]...Got a blank Session ID..Unable to 
read the CSeq header: [%s]....: %ld...Got an error writing an RTP pack
[email protected].._E..0E. `E. `E.........@0E.......
......D...t.G.N............HE..$E.."E.p.G...F...F...F.................
....................................EHLO %s.HELO %s.STARTTLS....AUTH %
s.AUTH %s %s..No known authentication mechanisms supported!...HELP....
%s %s...VRFY....MAIL FROM:%s SIZE=%s....MAIL FROM:%s AUTH=%s SIZE=%s..
..MAIL FROM:%s AUTH=%s....MAIL FROM:%s....%I64d...<%s>....<&g
t;..RCPT TO:<%s>....RCPT TO:%s..QUIT....Got unexpected smtp-serv
er response: %d.STARTTLS denied. %c.STARTTLS not supported..Remote acc
ess denied: %d....Authentication cancelled....Command failed: %d..MAIL
 failed: %d.DATA....RCPT failed: %d.DATA failed: %d.........SMTPS not 
supported!....AUTH=...localhost...........Failed to alloc scratch buff
er!.SMB.....`.G.0FE..... [email protected].......
..............NT LM 0.12..curl....i386-pc-win32...?????...\\..pop.POP3
..........G..PE..VE..NE.....0VE.._E. PE. `E. `E..........OE.....n....@
..D.....G. ... ........HE..$E. \E...G...F...F...F.....................
....................n...........CAPA....STLS....USER %s.APOP %s %s

<<< skipped >>>

GET /index.html?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

Location: hXXp://VVV.nytimes.com/

Cneonction: close

Content-Type: text/html; charset=iso-8859-1

Content-Length: 231

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:31 GMT

X-Varnish: 13615745

Age: 0

Via: 1.1 varnish

X-Cache: MISS

X-API-Version: 5-5

X-PageType: homepage

Connection: close
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://VVV.nytimes.com/">here</a&g
t;.</p>.</body></html>...

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRIt2RJ89X++hEzqoBeQg8PymQ2UQQUANhaTCXBIuWLMe9tuvPMXynxDWECEGVSJuGyLhjhWQ8phawi51w= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1453

content-transfer-encoding: binary

Cache-Control: max-age=358481, public, no-transform, must-revalidate

Last-Modified: Mon, 27 Apr 2015 11:00:26 GMT

Expires: Mon, 4 May 2015 11:00:26 GMT

Date: Thu, 30 Apr 2015 07:26:39 GMT

Connection: keep-alive
0..........0..... .....0......0...0......T3t.%..O.E..~..F.=....2015042
7110026Z0s0q0I0... ........H.dI.....3..^B...d6Q....ZL%."..1.m..._)..a.
.eR&.....Y.)..".\....20150427110026Z....20150504110026Z0...*.H........
.....cp......;.......zX.5J.|Mw......Mq)........#V.!.$.?r.a....s]....,S
Z..N.5..4bI4.^.....B...;........:#.1....3W..tV...V..............{....%
..i.......x..L1j#,..G.S..).x.....r..h.....tx#h....>M\.t.U.1M^&{..0.
5..9U..'h..:zy......j...X.u..X......>Y...........T.N.4....0...0...0
..3......./...b.v..-....l}0...*.H........0_1.0...U....US1.0...U....Ver
iSign, Inc.1705..U....Class 3 Public Primary Certification Authority0.
..141202000000Z..151216235959Z0..1.0...U....US1.0...U....Symantec Corp
oration1.0...U....Symantec Trust Network1?0=..U...6Symantec Class 3 PC
A - G1 OCSP Responder Certificate 30.."0...*.H.............0..........
'......Y..x.3B1.7..Q..`..d.. ....s..t.$a.....j2R.{ ,*..c{.3.....H..3-;
 ).....0._...*..9M..V...... ...{m...-.......)..tR..{D....~...M...T..pS
.p..^|o....S..v.).)[email protected]#qh...u1T.].G0.]E...=.
_...... ........TE...Sa.s4........r...3.............0..0...U....0.0l..
U. .e0c0a..`.H...E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .
......0...hXXp://VVV.symauth.com/rpa0...U.%..0... .......0...U........
0... .....0......0!..U....0...0.1.0...U....TGV-B-2730...*.H...........
..$..H......oU....Y!.z{*.V.M..u.._z..3>.. 0....3..m.....e.......a..
D...........e..F6:.y.....di.......<y.Z.......x}..q.2....UZ1 :,t>....<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAxNF3PJUX7iAOhAP2oGxcI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=418415, public, no-transform, must-revalidate

Last-Modified: Tue, 28 Apr 2015 03:40:02 GMT

Expires: Tue, 5 May 2015 03:40:02 GMT

Date: Thu, 30 Apr 2015 07:26:40 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015042
8034002Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
..M.s.Q~...@?j.......20150428034002Z....20150505034002Z0...*.H........
......>...|.#%....9.x.Fl.{.j..i.{<...B......5h..T.....<....).
nU,7.L.,UpM&F9~.....ye.wpA.W.(9...VO{R.".~.C..G.t.*B...L......D.tj....
[email protected]$...zL........{..G...............].A..z..:{.*&*..2Q
S..s..Nt3..G..CR..D...-.T....H...l.7\..z..:.E.}L.Yk.Zvc..[.....#0...0.
..0..........r..?.*......y"..0...*.H........0..1.0...U....US1.0...U...
.VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of us
e at hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Cod
e Signing 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US1.0
...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Term
s of use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign C
lass 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0....
.........m5*R........2....>...yU4..L.. ...........u..Hez..Pn.....d.
..nz(...V7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i..F
*]...*....{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....&."
...:.C.Q.i~rl..<..krS..8.B..o][email protected]
...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.v
erisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS i
ncorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...
U........0... .....0......0"..U....0...0.1.0...U....TGV-B-32010...<<< skipped >>>

GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Tue, 14 Apr 2015 05:02:07 GMT

Accept-Ranges: bytes

ETag: "2711f7277076d01:0"

Server: Microsoft-IIS/8.5

VTag: 279782516600000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 554

Cache-Control: max-age=900

Date: Thu, 30 Apr 2015 07:26:45 GMT

Connection: keep-alive

0..&0......0...*.H........0y1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1#0!..U....Microsoft Code Si
gning PCA..150413163223Z..150713045223Z.a0_0...U.#..0..........X..7.3.
..L...0... .....7.........0...U......Z0... .....7......150712164223Z0.
..*.H.............WK....e.\.-.n......./......."]..E!.. //=...[....w...
 ..........#...[.l.J..f|..... .s......w...J._.......3.[..#.z....ko.I..
Q{....e.nV......F..d}..rF\H.jlH]dQ.E....x......W............j....&L. 2
.$.?...X?.#.(.....pK.v.......y..r....t......=.AW......K.G.gJD.b...

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=370653-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: tRZRue6L1FbN1lsrKSE2xMEXhDC1ZZ/uEmjBsMryAbP 0 JB4L4WWZKDAYQCS1sFK23Ku2ruzZc=

x-amz-request-id: 6AB90BE5A345ED6F

Date: Thu, 30 Apr 2015 07:22:03 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 370653-988407/988408

Content-Type: application/octet-stream

Content-Length: 617755

Server: AmazonS3
.......F....T2Y..B..U7...r....yR.5e..v.l.....a:{r.Ju.$..F}R..7Ul.4...N
i]H"x.O.....7..<...._*.;.....}U.).@k?jCE.4C.6|..{E.......1..t.^.<
;..F..z..>[email protected]&.e.......7u.(.q.1....=jm...e....- .......S>.
E.:.Qk..../l..n.J....R..^s... Q72.....Z.....X..IK.D}.. ..1?r~.. ..O..y
...y.7..\.h.Q..w..E...I-._....[.....K.jG.....q.5.*?...R\.f....u..P.?.i
.>l.9`..g..Q...p.f....k.m)...dK..N..).P.............w....!.......e.
.`.:...n..Bp2.jr...td.....~....wi-.P..?j8.j,.....].....K.<H...n....
.2.?".?.....4...QR...<R......c.\....._.%..v.dg.N. ...e.Xe.,&7,MY...
:,e.Z...,% .\.hK.....Y....^T. . ....<.A4.....6.(._x>........V...
...Sx.M.b)5)....Q.....V(..,..<t2.v.b..H.C...K......f];...a.R..14...
#Y..u.Aj....8<...... (.....l.DsaM#..$[_.IM|.WK.[%..[u?~...4.n.%..a.
...."...h/..i...`M.../...............X.\F.q.......;#....f....x.h."....
m..3nK.Jp(k..8.1.../.r.|...(.....#.,.....&%0.y..,......)..5.~.,...V...
;d.Vu...H.4G.#l....gL.j...y..?o...>I..)...g...H.!.;}/.Z..5.j...5...
..uR.......PM{....=...O..hDI...=H.6.PL..a6.!uz(.A........T.w...../..X.
.`\.x.7.'........>[email protected]
.@.^r#U.F...qv..D...j..%....8......r.%...K.....v$...i.t.....c.E......o
1e.Z>."..._4.UM$Keg..D...F...:.-1.ak.........-..|Y..A.#].g3...7..4.
.....Z..-.Q..yS._.uL.nK.e.M..Y"...p0OX...s2$w1....y.....06.)...(..C...
\.gX..>.h&..-.q&1....C..lI..>.W..T.J..MS..l.u.m81.R2..03R..3.<
;.....=X.........m.$wNp(3....D2.5.i..D4E.G..Z..?....eO.R.e......(l.Y..
. .....PE..!.|[email protected]..[XY.dz.;.u....U..r.... a<<< skipped >>>

GET /media/img/favicon/favicon-196x196.cb79ae3b6daf.png HTTP/1.1

Accept-Encoding: gzip,deflate

Host: mozorg.cdn.mozilla.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Thu, 30 Apr 2015 07:25:10 GMT

Location: hXXps://VVV.mozilla.org/media/img/favicon/favicon-196x196.cb79ae3b6daf.png

Server: ECAcc (ams/4875)

Content-Length: 0

HTTP/1.1 301 Moved Permanently..Content-Type: text/html..Date: Thu, 30
 Apr 2015 07:25:10 GMT..Location: hXXps://VVV.mozilla.org/media/img/fa
vicon/favicon-196x196.cb79ae3b6daf.png..Server: ECAcc (ams/4875)..Cont
ent-Length: 0..

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=142780-

User-Agent: Better Installer(Mozilla)

Host: d3zcfo8zs4s5u.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 142778

Connection: keep-alive

Date: Sun, 26 Apr 2015 06:08:59 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 142780-285557/285558

Age: 980

X-Cache: Hit from cloudfront

Via: 1.1 017ee4b2e5ba6b7a7dd1443f39b6e832.cloudfront.net (CloudFront)

X-Amz-Cf-Id: srw1CTQSkgZlKgKt21lbqkT3H23fwamEbJ_e1Gk5hiU_3rc55Q_PjQ==
..<......O.. ..o...U ...h..y.O..X..C............2.[..,..."m...~b...
.......V:...!.......;n .f.P..i?.|...B..w..?5w{...z9.].8*..3..(x...z/E_
...oz...#.".2:...z-.&ng...&y.......H|.q$...Y.....G..M..E.*N...&..z...U
.`....t.?T5.m..<.<...BK..nY_#[....YI?.4...!h.Y..>.....c.M....
F..j..Ht7.gN...z..(..l..\u.~...].Ub...M!..<{.P.M.MM.ne?..<.:....
O.,=.h.....Z.b.........Y....R.s.e.I).i..fpk.j.O0........].2|.0.C``....
...m_z.=W..^...C:............Q...xbR.....t...eF.V.....aR..2o..w.>..
r!U......Xs%.Wm.&.LbX0{.P........@..\w.......>.../.bW........X....^
e8......Lq...[.3a...n*..........2..!c_ .......{...Z.lf...z..o...~*..l.
...G..2.w.8.#.*........DH..-df.][email protected]...'k.... ....m.
=....X..J........e.... .R.7.........!..\..C..G/./..y..*=.......,..V..f
.%....LF.|......T..g..fPs.............-6.".l.t 5..'B.....=.}K.9.%.j.1.
.J.\u&...mg!..Y(...U./?q=B{.z..Q...>....<..B.|keIL.c;........N..
..n....*K...F..~.5.2......K...'n..,&rt...N.G.59.]k....N..3....P...)...
...M w..........6.G.2T......L...B0.#.R....5..,.N..|#..%.lN...9.j...j.2
x....R....Mh..-...D.2...l....*....9c..m.9.e....].j....a.2.7...\....E.B
iu.Bf....a..Oh..r... ...(2n..7BD7.D/........D...T..*.q...u.J..4...v...
I..u.Wr......*.......b....`[email protected]@...zrR..Z..Um....Z.D>\..
........3C.b.._XI.[s..t.......].R..p.=.&E..Z4<....z...=..%.Y..>.
.CF.,]tp..C.iV..z.dh.pI?c\7..4!2..^.M....GDiK..*.=...!.?.......H......
.)]...(..@..(..{..E^yVP ......%M,..O...S2........d^....T..VE.....j.y..
.....}..GqN....E7rG{.E.....y...N/.WG..,...QV.GC.m.gY..........4...<<< skipped >>>

GET /pages/index.html?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:31 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://VVV.nytimes.com/index.html?partner=rss&emc=rss

Content-Length: 265

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://VVV.nytimes.com/index.html?partne
r=rss&emc=rss">here</a>.</p>.</body></html
>...

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=494204-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: Oe yebF74jdInioBUWgozi5I4JDVyi9kpEv 0UeSPhjupg7IUc6klo FR7fP8mcproGKtwRKnoA=

x-amz-request-id: AAABDE302A615AD7

Date: Thu, 30 Apr 2015 07:22:03 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 494204-988407/988408

Content-Type: application/octet-stream

Content-Length: 494204

Server: AmazonS3
.;M@{..M.?..4R.[v. .-..bIcw.......b.....!..rf.P.........0.....{......y
..WL.D*^[email protected].)4......V.P!s...!pW6$~......T
..i...kQ.X..-.V.&...;.`...._B..-*.V.*[.S..?...)$\....i...E;........|p.
B|ON......:...@,.qX.vb8.%.<@..z.>_.RB..y.n.oX.AW1(....YU.4..O...
.Q...........A.z[.G..-z#......4/...X..N..l|.p..5!'hV.._.n..c..^.k...E.
....p..5B.......HEm.dh.4.sGUh..WP7.#...........:Z.].K"............B]W.
V...L0q~.].AB.`.trp.eW..J##..[.r,.(.&...."..G..B........#o..`....p...]
5{w.......%z......P}......Wj. M)^...5...Y.C._.7..*........'.. jI.c...t
..@$.X.ty...1.He...eV....}.l.R.2....A.P.....q....#"..58.Yg.f...(...1).
....,......|.#.KB...3H$..N...r...r.)...^.ST.$..?\.... 8,d....{ M...u..
:C........e..FL.j....S...MMd....%.N.i.....y.c..M..H....v.~5........:.f
DI...#.....0.(TH...sWso...:.#~....p....B!.....D."m..Xt..c,.m...e....z.
F*..m.Ci.Qt.....j.m*<...n.7...M..J......(..{....z......y.v.."@kNX.k
3{.m.[.._m\....(...Rz.ka..Qwb....3.\o.?.x..6........j..Do..j....)q....
]Q..}.. ....9....x.. b#Q/ .g.._.-Y.ZZ..r>2.e.\zu....d:w..].j..ma.0D
[........9..2.=...<....j..h.D.3Z..0.f.{$......i..tm..y.J.>.$.kz.
......_.....z...Q.K.(..=.7..I....C.9R_.z...w...B.... ..y...2.j..@'q.m.
.zs..}.........z...r).~....%.............]..rY0..Y.sgE...B.e.....|.<
;h..q.tLPw.....MD....z.....z..3..jP.KQ6>.I..#.{...gyf...@|..#....|.
.,t..m....q*.r.OLX`"B.....k....!n.Q;n......2vn....... a....{..|z...H..
..C.!.eGn.#.....-..m.R...N...._..e..k.&../p......b.....jq.L.-.c..q/..O
/b.......m....~.....:D.A&..Y...`...z..c..U...F...jZ.G.s....*..AI..<<< skipped >>>

GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Mar 2015 05:02:25 GMT

If-None-Match: "a1132b8ef65d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 304 Not Modified

Content-Type: application/pkix-crl

Last-Modified: Tue, 24 Mar 2015 05:02:25 GMT

ETag: "a1132b8ef65d01:0"

Cache-Control: max-age=900

Date: Thu, 30 Apr 2015 07:26:34 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/pkix-crl..Last-Mo
dified: Tue, 24 Mar 2015 05:02:25 GMT..ETag: "a1132b8ef65d01:0"..Cache
-Control: max-age=900..Date: Thu, 30 Apr 2015 07:26:34 GMT..Connection
: keep-alive..

GET /softwares/5/2/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=20075138-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:22:03 GMT

Content-Type: application/octet-stream

Content-Length: 2867876

Last-Modified: Mon, 05 Aug 2013 14:46:25 GMT

Connection: keep-alive

ETag: "51ffbac1-15e1526"

Content-Range: bytes 20075138-22943013/22943014
:.......c.07.Q...vM.m/Z...R.QD..^*..t.gL]..^[email protected]]v$.H.0
...,.cNuK3.^...1b..g....;2y..,......c&.....|............g7 ......Y.7td
.........o....mp......66...e.Z.K.s.>.{.:sV.3...b....b6].........W..
....)........~...\..g).....ZL..u\..3/...<.....cU^{.hJ"v..7w.m.l..%.
.oXz.k..'.'[email protected]/...W.l:..]...Q....0.x%u..Jh.[.^.G.e.....C...X&
gt;.P."....a$m.)@..pSG..S.M1...6..S./.#...M..GT8....X...=..*.$.K.R.Ow]
g.E}.b^..;bC...Dk!....."O&#.....L..y$...../....*t... ...G..&.%:.......
.h..N..op.....V...s......ZnFB. }.:1...V.T....P...Z...;....v*Vf.{..."m~
....!..$.b.....\lJ.{][email protected].>.,..1}.].',
Ex.).|J....c..[`h..............d.e.r.15.|...8.Ez.-..X.....6}-..i......
..3..&.7..4.....o..=..... .nL..=.......v....^..$..qD...s..@...\<...
....P1q...{<...!....O&P3L..qe....{.K.m..2`;iD......G.. ..T....B.K..
.>.a...(.....l.'.....E./PJ.......A2C8..K.$h.h..oG.P$.J?........LI'.
..]{....:...H..3...t,.~g.J.C.{(......h).SS.5.]3...d.8g.={ .j....o.....
......8.^ZT...f.8.O=........>7....k...j.a..:...D.S...CV.*....=}...z
.2k.H....F_<......Q.........*...i..=U.....i.\..e6 .[...;<...X...
......Vo...Oc....BX'.Z......C .:z.?...%..v.F...?..AfM..Y...?..RW...?..
u.j.Vl6o......q..JN[ .`..6..........8c.|.mA.*.f.D!...........4.=O.....
k........R.....P.=.....c...uo.w.......D..,...d .(~s.X..?.g._..19.Z.. .
...1.R....y......i.....p,.7.H...Y...{ mC..^.*..C0..c..~ .$.......<.
4;...I....*...t...fx..6..9:..H(.........a.O ."...n.~,..k..Xd.o.g%.....
...........[i..'.;..M...jm.J...\E...4a...h....PAm.g...^M".H.q.:...<<< skipped >>>

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: vRJy3S5YvzIWD pYVHRJEpVyN2m1Q0Sp7Wz8eMHznv1YFrx1NnZjUtICR /V5xII5PImGcT9CY0=

x-amz-request-id: 25AC7DD217C1C000

Date: Thu, 30 Apr 2015 07:22:02 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 988408

Server: AmazonS3
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
.........P...............`............................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
rc...P............v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET /services/xml/rss/nyt/InternationalHome.xml HTTP/1.1

If-Modified-Since: Thu, 30 Apr 2015 06:11:30 UTC

If-None-Match: 1430374290000

Accept-Encoding: gzip,deflate

Host: rss.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: MF2=19hhj9gt8nsle; RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 304 Not Modified

Content-Length: 0

Date: Thu, 30 Apr 2015 07:25:10 GMT

Content-Type: text/html;charset=UTF-8

Server: FeedsPortal

Connection: close

GET /v4/searchprotect/535559167_198339_B48A115F?action=visit.heartbeat.smt&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,4.0.1.2253 HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:35 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"1.63 ms","message":"store 2 action and 4 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Thu, 30 Apr 20
15 07:23:35 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"1.63 ms","message":"store 2 ac
tion and 4 update "}..0..

GET /rss/cnn_us.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=UTF-8

ETag: UgbworA9ZAWcQF2fSCx1DmR2FHM

Last-Modified: Thu, 30 Apr 2015 07:24:44 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Thu, 30 Apr 2015 07:25:17 GMT

Expires: Thu, 30 Apr 2015 07:25:17 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
37EB.............}Ys....{W..@...<.a..dI.g(.......yIA.$1".. -....{oP
..$<&E......IdK.......=......{.IW.........#.n0.s..z......?...|.....
r.yL.y..\..C.. .5.....\.N.y.F&..........=....(...|.....x..9.M.8.7q..'.
6..g,.1....<.7p.0./$`'..b.......l..D.5....\[.v..p.D......s.2.o.h...
.MtY...,Z....3aA.=|......=;Cs......?6......L.Z...fO.n.6.`..6&....q....
..cS...:.0Gn.......s....4.4.p..A.s...$,..7...g.6...%.c1..I...XD...d..&
lt;...E..(fn...u....]'[email protected]".G.x....|D,...]6.89C/
.x<....\.........6.#L.{.._.|.N.>...t.....mt....?6./..!..2...X}&.
....}8I.-..n8.`#V..z;....7].....'......6.....?6q..h...._f...f..~7.j*Z.
?6.......4.,..i.8G.o\...o.N....g.at6...5.q......-n.,.=.Q>....`...Q.
7.....F6.....l#v.D..k?.....d..3p!.d...$...]."V.)[x.z...$y.O..;.I..D"..
.#.K..3..8q.....>........$_...._.M..i.7..9`^..GE#W...9.P...3....h..
o...p.....mm>t../........W7.m...O...d0'......(..........E..t......U
.C....\...=.t.cS.. .....Fv.9Atx.O.$c...j:=w.^...1.......... k8..k.....
......0.p..<.............?P.h........../..........#.......m52...."#
.i`.-7..._Y........r..4(.l..3|Dta.~.Z.g...;U1dG...........oo*ap.Y....o
[G{....ZV.|.#..a|t..........>...B....&.$.9......4.6...._#...#......
.f~..\)dZv....ORH.a..r. `..d..l.............2..n.<..f.h[=.gu:=j...a
...<@}p&...p.....B..9./J.?...X...a.[......V..4>.........cs).^..m
Pb,..#[email protected]$.....>..}..G....U5p....*..>...'.N.D...q..j.".
.0.........l.N.t...P.........3.K...ff........c.....F1{..&1{..}.^.B....
.y..1{...2{.!...Ff7[.1{..Z.eRX......!5.....S$........Y..o'....!.`]<<< skipped >>>

GET /rss/edition_sport.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=UTF-8

ETag: z62ukkjsglalMvPCOau4u9YkWpE

Last-Modified: Thu, 30 Apr 2015 07:22:12 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Thu, 30 Apr 2015 07:25:18 GMT

Expires: Thu, 30 Apr 2015 07:25:18 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
1C9F.............].s.8........./..X<u}.L..s8.;.s.. ..i............l
.9l..W...-S....>.F...7qD..T.H..1w....O.a2.k... .........|..l.q.p..l
...v2~.unT.Cb......I....H>.k...~g...T...Q..o...O.yJ... ..a.....d..q
.B....I..l...".".:....[6.8.^.;g..E 1...Y.;....2..L1a1W).......;.d....Q
..'.3/`I.#|..,./.>|@r...T..Eg.1.>....%1`5.v..x~...O.0...n.......
X....._.F|......;R>.Bd..)....N.0.3N.>S.%>....1.....^!....I.)Q
..!W...3..|...q..0...9IE..z..b!...N....K&9...<......g.$..e8.....'b.
.K..(...r..g3!....99999..._.6.|t...........T..0.....}rt..Eg...G..4....
..0^r..<.2Z...z~....T4..uvy'.'(T.HL.~....(..p...-@C.........,......
b./:..m......L..1.1Z.p....g......g....._...#..<..,U.K.(.......m.A} 
........y....C......._.... .=`.$T.#.|..v.'@' .,h......bFf".|2.9Q).A.o.
o.....N...Q.r...`...1......#l:............k.h.........|^.......$k.Z.&l
t;....;l2}.....=[k.Wz.U$.>y.....(....RO.#@...<._..}2.....$sr...&
lt;d.PJ.Qy..-'.N............S".D....p.........XF.A .......e....%...D1R
.....Ap...BQ ....).]<..>...k...'..^..Cc0t.?i..".. .G...;..=...5.
4w..._i ....`.T.t.......6..L..Fq..\.................../.R...S......:.)
...lI=......&4..........2...$......X..@?......g..A/..F.K.....&.O....4?
O.]R.........u..A...{...=....<.........`$.:?.....C.....Fl.P!.....=.
.0..].1*.......W...DBL........Nc.P..........Z....t]....f..B......C..*.
K.9y.K.R..)W(..".8.....u..$T.K......7.YB...........?;...xz..y...5..._(
 ...`.%...h....<[B.|.}........s.6..W..............[.,._v..;f..as..|
x.....T.,>Z.....pP....<=.......~...B...D.YE,&.d.6V..!l.>&<<< skipped >>>

GET /rss/edition_sport.rss HTTP/1.1

If-Modified-Since: Thu, 30 Apr 2015 07:22:12 GMT

If-None-Match: z62ukkjsglalMvPCOau4u9YkWpE

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 304 Not Modified

Date: Thu, 30 Apr 2015 07:25:18 GMT

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

GET /services/xml/rss/nyt/GlobalHome.xml HTTP/1.1

If-Modified-Since: Thu, 30 Apr 2015 06:11:30 UTC

If-None-Match: 1430374290000

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:09 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://rss.nytimes.com/services/xml/rss/nyt/InternationalHome.xml

Content-Length: 273

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://rss.nytimes.com/services/xml/rss/
nyt/InternationalHome.xml">here</a>.</p>.</body>&
lt;/html>...

GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ds HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:06 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.51 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Thu, 30 Apr 20
15 07:23:06 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.51 ms","message":"store 1 ac
tion and 0 update "}..0......

GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.finish HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:12 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.46 ms","message":"store 1 action and 0 upd
ate "}..0..

GET /webplayer/appshat/config.json HTTP/1.1

Accept: */*

If-Modified-Since: Sat, 1 Jan 2000 00:00:00 GMT

Cache-Control: max-age=0

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.bigspeedpro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:35 GMT

Content-Type: application/json

Content-Length: 778

Last-Modified: Mon, 27 Jan 2014 15:16:30 GMT

Connection: close

ETag: "52e6784e-30a"

Accept-Ranges: bytes

{.."group-name": "AppsHat",.."program-name": "AppsHat",.."about-text":
 "Apps Hat\n(c) 2013 Somoto Ltd. All rights reserved\n\nTerms and Cond
itions:\nhXXp://VVV.appshat.com/eula/ahd\n\nPrivacy Policy:\nhXXp://ww
w.appshat.com/privacy/ahd",.."title-icon": "hXXp://VVV.appshat.com/ima
ges/16x16.ico",.."tray-icon": "hXXp://VVV.appshat.com/images/16x16.ico
",.."shortcut-icon": "hXXp://VVV.appshat.com/images/64x64.ico",.."unin
stall": "Apps Hat",.."url": "hXXp://VVV.appshat.com/home",.."width": 1
024,.."height": 795,.."cache": 86400,.."alwaysontop": false,.."program
-version": "2.13",.."start-on-windows": true,.."title": "Apps Hat",.."
tooltip": "Apps Hat",.."minimized": true,.."update-url" : "hXXp://VVV.
bigspeedpro.com/mirror/nerocrossrider/appshatmini/appshatmini_update.e
xe"..}....

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=71390-

User-Agent: Better Installer(Mozilla)

Host: d3zcfo8zs4s5u.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 214168

Connection: keep-alive

Date: Sun, 26 Apr 2015 06:08:59 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 71390-285557/285558

Age: 980

X-Cache: Hit from cloudfront

Via: 1.1 e89c67951b2bc58773e3664c08702f34.cloudfront.net (CloudFront)

X-Amz-Cf-Id: UVtjpGVLjCTZXexjnUeeLE4Hm6iZB7jLslxgdMcMW0eWuvqYrqttgA==
..IK.#.ikv7..=....\z....if.J^.;,5!.._...MR..w.OX..&.....p:.........5.L
.iT.L.O.....7D.]b..........3.. 2=v.a.....^k....xp .`..y.1>...A.Q!..
._.J.D.......j..].8v....>.P.\ei%..OU[.V.p.*ky..E*.D0).-l.B.....*..a
G.b^..T.yqu8.Np.'.Z&V`..-..2l..Bu.l ........4X.U..9p..}E|..J...".m..:.
[email protected]$h...8D.s"..]......3.. .$..H.Sf.z.....q.Ke.....b.......
IO[[email protected].....].<.........g.mG.
.as..ez|.C.......=p.^U|.`s6.).\).]........2j.....N....a...i\.m.<...
...8......z....=....i.s.2...r...n.=h.D".O.MN..a.S..f. .S.i....N>.O;
...>..4%.{.L....... m.....%.Hw.U<...."...ns.Z....).)`o:....O....
0..SDt..|V.G...iU.d P..x..{`i[.X.Uh..@..`C...;6.\..y.]-W.... ...G9`.%i
~.G.......r#`...`...G....Z..KQA~'vL2XAM..(o......jU.....3........7...o
[email protected].`....u...G......H.N.|..;#..G.n]J.Kx......t.if
.8u.^....L..L..;..# 6...p ...........U..KU%....F...>....L.sZ.Cm.!..
cllj...&.:......p..y.....ds_.....W..t2.,.I...Z..c.T?/&O...8..q..<:C
p.....7&.D7.....e,2.)..G..FP.l. .N....(......I.......4&...8.1;...M...=
.2..%;.V).>[email protected].!..GHUZ.nnh..........n#.....F.v.S...Z
y.m..........;..k...3..(. .k.............,H.D.L.....K...`[.. C..7X.uq.
zV.t...m..`..H.....s.e..R.7...4.F..`.b!..N.pY...=%K...s.Tt*9.rR..A....
xt.hR.k..25...=`...7.........&=....vK.A...4.d7y.....(....7.(..l.k...h.
C.w|..yP..#...lNI..\8....c...I&.h.[.=p... ...._......).;.>"@.....@.
n@..)...,....80.W......kh..z8.......W3S..E...3..H....^.t.L.\........3G
..b.....!.^....U......d...Rf.f.d.,...RZ.6#M............-.W....]><<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEEES5jLHsYoCmjofrIA6uJ8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=546501, public, no-transform, must-revalidate

Last-Modified: Wed, 29 Apr 2015 15:15:07 GMT

Expires: Wed, 6 May 2015 15:15:07 GMT

Date: Thu, 30 Apr 2015 07:26:46 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015042
9151507Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
.A..2.....:...:......20150429151507Z....20150506151507Z0...*.H........
.....M...2..s..7...........rh.O..2Q........Vn...09..e]..D$.u...r3...x.
...T.#...................3.X.."[email protected]".)=..d.3...SZK...bH.PD..
I..9Js.H).2I.....l^|\.?$_7;E......y...ff...}^9...1....}.....fc..:.....
........T...1;'.o..V.e.=.b*tX[.,..M.H..O7..!.%.A..,...#0...0...0......
....r..?.*......y"..0...*.H........0..1.0...U....US1.0...U....VeriSign
, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at http
s://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code Signing
 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US1.0...U....V
eriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use 
at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Class 3 Co
de Signing 2009-2 OCSP Responder0.."0...*.H.............0.............
m5*R........2....>...yU4..L.. ...........u..Hez..Pn.....d...nz(...V
7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i..F*]...*...
.{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....&."...:.C.Q.
i~rl..<..krS..8.B..o][email protected]
.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisign.c
om/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp. by
 reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U........
0... .....0......0"..U....0...0.1.0...U....TGV-B-32010...*.H......<<< skipped >>>

GET /US/index.html?eref=rss_us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Server: Varnish

Retry-After: 0

Content-Length: 0

Location: hXXp://edition.cnn.com/US/index.html?eref=rss_us

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:17 GMT

Via: 1.1 varnish

Connection: close

X-Served-By: cache-fra1227-FRA

X-Cache: MISS

X-Cache-Hits: 0

GET /pub/firefox/releases/34.0.5/update/win32/en-US/firefox-34.0.5.complete.mar HTTP/1.1

Host: download.cdn.mozilla.net

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.5

Range: bytes=900000-1199999

Connection: keep-alive


HTTP/1.1 206 Partial Content

Last-Modified: Wed, 26 Nov 2014 16:59:55 GMT

ETag: "4b1e700-2dc5623-508c5f506dac8"

Server: Apache

X-Backend-Server: ftp3.dmz.scl3.mozilla.com

Content-Type: application/octet-stream

Accept-Ranges: bytes

Access-Control-Allow-Origin: *

X-Cache-Info: cached

Cache-Control: max-age=312235

Expires: Sun, 03 May 2015 22:07:04 GMT

Date: Thu, 30 Apr 2015 07:23:09 GMT

Content-Range: bytes 900000-1199999/47994403

Content-Length: 300000

Connection: keep-alive
d,.f.\s..H.vB9..b.I`.b..8%..g..m....x..*.....{....?..u;f....._nU._....
..y q....].~..N...=....c.:..wuz. g...O?....*-..U..,..]u.iE...9..s.gN..
5.A.v....;BK..H.....>.J..T.n.#. .......^:...9.giR..h.s..dX[:..D..3.
..I.`.5..pb.s.-..........P...M.3.,.Z.....t.&Z$nJ."o'.\..O.h.B,Y.......
W.........!<.eu.BWsJ.=...Z.l....~..l'...l..9l|....d.x....Fw.B.Gv8..
..2.XJ.Ed..r...V.J.%.$.~^..N..b.....!..w h-..3.......C[m......R.*/[email protected]
Jg..L.......t.#A....X......D.B.....w.d...$6....8.I....GP..e...o\.UJ.u.
.yX.I....c..<KG..T......L..mT..,7rA..g..".?....../.&...dI......&.. 
.k..p.....s..J\..J..p....!.1(...U...A=.......D.....{.H.....v..5!..w...
....&.s|......=...V...Ig..Dp..@k..*...o".......Q..r..l]u.u/...(.i.....
.(..j........1.g7..f._N..eVm..~...)%.hX0Zm............z.w...R.".^.hI.Q
..nZ@..|[email protected]..._.....(!$....gR..;O.$$#...w.{.k.hB.4.?.
....u.$...&}.......Od.. ....".......;[[email protected]$.n.[...B?n.....
.$.\%2........!S...l.(.k...:......c...h.f/...x..VZ..A..R*~....dHh.....
9...I.m [email protected]<...i.v./-.\-......d..~h..H. ..6.M
..0....Z.A.T....N..K @....j%....U:.^..z...~.I.....F"..J...`.......1F$.
..s.D......x$O6....;r.P./.es4.*......n.{g._.U..R?(......|.....B.......
m.N....p&.Z......*..ZQ..VR..[..8@".1xy.P..........z.n^.<....^...n3.
..1...'Ki../[email protected]..<.M$..2..|.v.n/6...V.
.......lE/......w8-........-R..\e...WA...756.H.]/d.....-......'.......
.. ..4J@.<.S.4....Fu6%...du.iP.....*>........%/..>#..}....._.
..c.b.f..!...D%L...../.......,...o&u...#..1...Ex.k.P.. .S.J/......<<< skipped >>>

GET /core/release/r16741/framework_setup.gen HTTP/1.1

User-Agent: Genieo

Host: download.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: lIeK/8mAAok8N40aVs69pyr9Jog5 K M 1//FoB6v8h is0HMecCs5RXukP3W2sl

x-amz-request-id: 0436CB2313D3511B

Date: Thu, 30 Apr 2015 07:23:46 GMT

Last-Modified: Mon, 20 Oct 2014 09:49:46 GMT

ETag: "34c98936c21425abe1a3587cfd4c47e5"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 7957904

Server: AmazonS3
bbbbaaaarrrrbbbbaaaarrrr(6.aflyaalya..ya.lyaelya%lyaelyaelyaelyaelyael
yaelyaelyaelya.lyaks.oe.p.D.x-.M-...Y.......Y......L..E...E..A!#*A....
KatkAlyaelyaT..[....................................D...............7.
......elyaelyaelyaelyaelyaelya5)ya)m|a..c*elyaelya.lv`nm.ae0yae.xaehya
Y^yae|yae.yael9ae|yaenyaalyaclyaalyaelyae.{aehyaP..agly.eliae|yaeliae|
yaelyaulyaelyaelya..ya.lyae.{a.`yaelyaelya}0.a.}yaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyae.ya.nyaelyaelyaelyaelyaelyaelyaK.
...lya?6yae|yae0yaehyaelyaelyaelyaEly.K.....ya.}yae.yae~yae.yaelyaelya
elya%ly!K....lya..xae.yaehyae.yaelyaelyaelya%ly.K.....yae.yae,{aelyael
yaelyaelyaelya.ly.K....lya.`yae.{aebyae.yaelyaelyaelya%ly!elyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyael
yaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyael
yaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya0.
...0..ic.J..u'.)m.h.1yu.t.[.y.-h)..|..i..i.y1.%l.#dly23.L.[.y. ..1..q.
p .!e...e.<m.).1..q.p<.!e......a.q=.%l..elyn.* n.:/n.9...G4.j..b
..4q...R...n.*(n..v. 9v.(.z......c.71c.4...n.*)n.)ib......qn..r..).1.!
..p$.!e.<.a.<u5.<.5..m.y-.%l..q... .}X..v.......!.....Q.l-.,y
...<u.9..i.x6.).qely. .qael.t5.9a..!6.y-.%l..q.L9.,y6...$i.<..Lq
ae<....O#e;.t=.9a..u6....q... .)..d.t9.9a:2J.>..qe.5Ea.._'l..6..
yaly72.-cm..c.#..d_.ZP.G#e.;....yaly.!mq.m..c.o>.{..e.e..*...E.<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD/yl6nWPkczAQUe1tFz6/Oy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS+zcBkvzl4= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1503

content-transfer-encoding: binary

Cache-Control: max-age=404396, public, no-transform, must-revalidate

Last-Modified: Mon, 27 Apr 2015 23:44:56 GMT

Expires: Mon, 4 May 2015 23:44:56 GMT

Date: Thu, 30 Apr 2015 07:26:47 GMT

Connection: keep-alive
0..........0..... .....0......0...0......&Km...."....}....,.c..2015042
7234456Z0s0q0I0... ........0..k....&..p..^.X.....{[E....z.1..j..F.WHP.
.G.Mxs..../.p./.^....20150427234456Z....20150504234456Z0...*.H........
.....c#...q..*3.i.....!.......&. ..PT....;.......=.l.6..2...A.eE..NV..
a....h...7.#R.R.o.;U. ..kt.).....K..A...z.I...\^?.!....=I^.l&...7.p...
.mH.G......6..M9zZ...PkS....==..m.....<.....?u}..R&......(.6.w....\
...i.}......RG...Bg_h....|.D.../.A-..&...........,cr.>....0...0...0
............I...*....^n...0...*.H........0..1.0...U....US1.0...U....th
awte, Inc.1(0&..U....Certification Services Division1806..U.../(c) 200
6 thawte, Inc. - For authorized use only1.0...U....thawte Primary Root
 CA0...141202000000Z..151216235959Z0_1.0...U....US1.0...U....thawte, I
nc.1907..U...0thawte Primary Root OCSP Responder Certificate 30.."0...
*.H.............0.........x...F83..,.D.,2D.;JGc.|_.k.....B.7.....G}.M.
s.....S.i.Uu.h.Aq..v...4:l..U.......T7l...~vl...r....{*..........V.o..
8|.B..^.a.. ...z....x..s...\[Y....<....'> ..YC..7.zVk.$...o3..ka
o]c...>C./bPX.......I..Oc.....NN......g.....,/..]......qN.....V!<
;.3.)...y#.........i0g0...U.%..0... .......0... .....0......0...U.....
..0.0...U...........0!..U....0...0.1.0...U....TGV-B-2770...*.H........
........lt..\..z. ..N.f.!.S5d?J.&....r...D........L.`.s.p...HC.L.8f...
 .........GA7......P..Z.%.../............z.n.6~I...].).....W...W\|.uya
..:...^...hW..7.Z.uc.'....:.xL...HS.....>.........5......%....3S...
.h........U....o.C.\.t.....G.._.C0(l.E9..6UTxg.gF ..;.....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9+WQCtWAQU1A1lP3q9NMb+R+dMDcC98t4Vq3ECEBuYvHdVmNDEAeDWzENJUpo= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.thawte.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1396

content-transfer-encoding: binary

Cache-Control: max-age=502225, public, no-transform, must-revalidate

Last-Modified: Wed, 29 Apr 2015 02:55:51 GMT

Expires: Wed, 6 May 2015 02:55:51 GMT

Date: Thu, 30 Apr 2015 07:26:47 GMT

Connection: keep-alive
0..p......i0..e.. .....0.....V0..R0......Qw.}`[email protected]
9025551Z0s0q0I0... ........l....r.vdv0..*.~Y..X....e?z.4..G.L.......q.
....wU.......CIR.....20150429025551Z....20150506025551Z0...*.H........
.....VsV.}..........J...z..`..)E...J....T...E..^&...[..I...A..}).J....
XC....\.FA..7.'N.....".c.< 6P...V..[I.r.f...8T...\.0j..3g..&.Z<9
.c.2.w.,h..9b)N..$.b&.....-...Wh....t*...`.L......^..._....x>'..H@.
..?..8..,m..RC..M.A.... ..t..2>..........'P..hv....N......m.....0..
.0...0..y.......^..........N...)0...*.H........0J1.0...U....US1.0...U.
...Thawte, Inc.1$0"..U....Thawte Code Signing CA - G20...150303000000Z
..150601235959Z0Y1.0...U....US1.0...U....Thawte, Inc.1301..U...*Thawte
 Code Signing CA - G2 OCSP Responder0.."0...*.H.............0.........
...).Z.......O.~.l...,\.3.".'.'W .ih./..}OA...K...HJd....K^..<.....
-.rWJ.j.U.._......W.../.6....J.y.u-.\...2..U.52B.>...=F...RbR.y.zm.
......{b.bj....Y..J..m...*=.^......V.}p......rmA......9.L ...{?.g.-Y..
..........8...k.$.:.5..6#4..F.#....t.B.8.O)'F.p).........d0b0...U....0
.0...U.%..0... .......0...U........0... .....0......0"..U....0...0.1.0
...U....TGV-B-32450...*.H..............C.....8.Aw.{....`...y1N...W4M..
M.J.3~..7#}..X..:x..5....$...Z^%.?6..e...}I.)....... .A.w......_...B..
j.T..Yu.o.....g....H....q.Ju.SA`K.....~..O_.....S....I>..O.X..E....
...]...y..L..F....K......../...._XSk6.:a};.?`...:^.....p....4Z.3L;....
...t....>.....j....<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:06:02 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/robots.txt

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 82

Content-Type: text/html; charset=UTF-8

Age: 1147

Connection: keep-alive

Server: ATS

............Q..U(.J6../(.K.0..L....K..U..(Up,(R06P00.20.20R..qV0204U..
.....F;.>...HTTP/1.1 301 Moved Permanently..Date: Thu, 30 Apr 2015 
07:06:02 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="
CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi 
SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA PO
L HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: htt
p://news.yahoo.com/robots.txt..Vary: Accept-Encoding..Content-Encoding
: gzip..Content-Length: 82..Content-Type: text/html; charset=UTF-8..Ag
e: 1147..Connection: keep-alive..Server: ATS..............Q..U(.J6../(
.K.0..L....K..U..(Up,(R06P00.20.20R..qV0204U.......F;.>.....
..

GET /rss/mostviewed HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:22:34 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/mostviewed

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 82

Content-Type: text/html; charset=UTF-8

Age: 155

Connection: keep-alive

Server: ATS

............Q..U(.J6../(.K.0..L....K..U..(Up,(R06P00.22.26Q..qV0204U..
....j...>...HTTP/1.1 301 Moved Permanently..Date: Thu, 30 Apr 2015 
07:22:34 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="
CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi 
SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA PO
L HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: htt
p://news.yahoo.com/rss/mostviewed..Vary: Accept-Encoding..Content-Enco
ding: gzip..Content-Length: 82..Content-Type: text/html; charset=UTF-8
..Age: 155..Connection: keep-alive..Server: ATS..............Q..U(.J6.
./(.K.0..L....K..U..(Up,(R06P00.22.26Q..qV0204U......j...>...>....

GET /rss/mostviewed HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:22:34 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/mostviewed

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 82

Content-Type: text/html; charset=UTF-8

Age: 155

Connection: keep-alive

Server: ATS

............Q..U(.J6../(.K.0..L....K..U..(Up,(R06P00.22.26Q..qV0204U..
....j...>...HTTP/1.1 301 Moved Permanently..Date: Thu, 30 Apr 2015 
07:22:34 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="
CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi 
SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA PO
L HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: htt
p://news.yahoo.com/rss/mostviewed..Vary: Accept-Encoding..Content-Enco
ding: gzip..Content-Length: 82..Content-Type: text/html; charset=UTF-8
..Age: 155..Connection: keep-alive..Server: ATS..............Q..U(.J6.
./(.K.0..L....K..U..(Up,(R06P00.22.26Q..qV0204U......j...>...>....

GET /rss/topstories HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:22:18 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/topstories

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 82

Content-Type: text/html; charset=UTF-8

Age: 177

Connection: keep-alive

Server: ATS
............Q..U(.J6../(.K.0..L....K..U..(Up,(R06P00.22.2.P..qV0204U..
.....{@l>.......


GET /rss/topstories HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:22:18 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/topstories

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 82

Content-Type: text/html; charset=UTF-8

Age: 177

Connection: keep-alive

Server: ATS

............Q..U(.J6../(.K.0..L....K..U..(Up,(R06P00.22.2.P..qV0204U..
.....{@l>...HTTP/1.1 301 Moved Permanently..Date: Thu, 30 Apr 2015 
07:22:18 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="
CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi 
SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA PO
L HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: htt
p://news.yahoo.com/rss/topstories..Vary: Accept-Encoding..Content-Enco
ding: gzip..Content-Length: 82..Content-Type: text/html; charset=UTF-8
..Age: 177..Connection: keep-alive..Server: ATS..............Q..U(.J6.
./(.K.0..L....K..U..(Up,(R06P00.22.2.P..qV0204U.......{@l>...>....

GET /rss/business HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:22:12 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/business

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 82

Content-Type: text/html; charset=UTF-8

Age: 186

Connection: keep-alive

Server: ATS

............Q..U(.J6../(.K.0..L....K..U..(Up,(R06P00.22.24R..qV0204U..
......O.>...HTTP/1.1 301 Moved Permanently..Date: Thu, 30 Apr 2015 
07:22:12 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="
CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi 
SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA PO
L HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: htt
p://news.yahoo.com/rss/business..Vary: Accept-Encoding..Content-Encodi
ng: gzip..Content-Length: 82..Content-Type: text/html; charset=UTF-8..
Age: 186..Connection: keep-alive..Server: ATS..............Q..U(.J6../
(.K.0..L....K..U..(Up,(R06P00.22.24R..qV0204U........O.>....
...

GET /rss/business HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:22:12 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/business

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 82

Content-Type: text/html; charset=UTF-8

Age: 186

Connection: keep-alive

Server: ATS

............Q..U(.J6../(.K.0..L....K..U..(Up,(R06P00.22.24R..qV0204U..
......O.>...HTTP/1.1 301 Moved Permanently..Date: Thu, 30 Apr 2015 
07:22:12 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="
CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi 
SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA PO
L HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: htt
p://news.yahoo.com/rss/business..Vary: Accept-Encoding..Content-Encodi
ng: gzip..Content-Length: 82..Content-Type: text/html; charset=UTF-8..
Age: 186..Connection: keep-alive..Server: ATS..............Q..U(.J6../
(.K.0..L....K..U..(Up,(R06P00.22.24R..qV0204U........O.>....
...

GET /rss/us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:22:45 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/us

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 82

Content-Type: text/html; charset=UTF-8

Age: 161

Connection: keep-alive

Server: ATS
............Q..U(.J6../(.K.0..L....K..U..(Up,(R06P00.22.21U..qV0204U..
........>.......


GET /rss/us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:22:45 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/us

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 82

Content-Type: text/html; charset=UTF-8

Age: 161

Connection: keep-alive

Server: ATS

............Q..U(.J6../(.K.0..L....K..U..(Up,(R06P00.22.21U..qV0204U..
........>...HTTP/1.1 301 Moved Permanently..Date: Thu, 30 Apr 2015 
07:22:45 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="
CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi 
SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA PO
L HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: htt
p://news.yahoo.com/rss/us..Vary: Accept-Encoding..Content-Encoding: gz
ip..Content-Length: 82..Content-Type: text/html; charset=UTF-8..Age: 1
61..Connection: keep-alive..Server: ATS..............Q..U(.J6../(.K.0.
.L....K..U..(Up,(R06P00.22.21U..qV0204U..........>.......

GET /rss/mostviewed HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:22:34 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=3600, public

Location: hXXp://news.yahoo.com/rss/mostviewed

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 82

Content-Type: text/html; charset=UTF-8

Age: 173

Connection: keep-alive

Server: ATS

............Q..U(.J6../(.K.0..L....K..U..(Up,(R06P00.22.26Q..qV0204U..
....j...>...HTTP/1.1 301 Moved Permanently..Date: Thu, 30 Apr 2015 
07:22:34 GMT..P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="
CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi 
SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA PO
L HEA PRE LOC GOV"..Cache-Control: max-age=3600, public..Location: htt
p://news.yahoo.com/rss/mostviewed..Vary: Accept-Encoding..Content-Enco
ding: gzip..Content-Length: 82..Content-Type: text/html; charset=UTF-8
..Age: 173..Connection: keep-alive..Server: ATS..............Q..U(.J6.
./(.K.0..L....K..U..(Up,(R06P00.22.26Q..qV0204U......j...>.....

GET /news/news.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: company.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:03 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://company.yandex.ru/news/news.rss
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.6.2</center>..</body>..</html>..HTTP/1
.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Thu, 30 Apr 2015 
07:25:03 GMT..Content-Type: text/html..Content-Length: 184..Connection
: keep-alive..Location: hXXps://company.yandex.ru/news/news.rss..<h
tml>..<head><title>301 Moved Permanently</title>&
lt;/head>..<body bgcolor="white">..<center><h1>30
1 Moved Permanently</h1></center>..<hr><center>
;nginx/1.6.2</center>..</body>..</html>......


GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: company.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:07 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://company.yandex.ru/robots.txt
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.6.2</center>..</body>..</html>..>....

GET /blog/index.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: company.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:07 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://company.yandex.ru/blog/index.rss
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.6.2</center>..</body>..</html>..HTTP/1
.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Thu, 30 Apr 2015 
07:25:07 GMT..Content-Type: text/html..Content-Length: 184..Connection
: keep-alive..Location: hXXps://company.yandex.ru/blog/index.rss..<
html>..<head><title>301 Moved Permanently</title>
</head>..<body bgcolor="white">..<center><h1>3
01 Moved Permanently</h1></center>..<hr><center&g
t;nginx/1.6.2</center>..</body>..</html>.....
.


GET /news/news.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: company.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://company.yandex.ru/news/news.rss
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.6.2</center>..</body>..</html>..HTTP/1
.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Thu, 30 Apr 2015 
07:25:08 GMT..Content-Type: text/html..Content-Length: 184..Connection
: keep-alive..Location: hXXps://company.yandex.ru/news/news.rss..<h
tml>..<head><title>301 Moved Permanently</title>&
lt;/head>..<body bgcolor="white">..<center><h1>30
1 Moved Permanently</h1></center>..<hr><center>
;nginx/1.6.2</center>..</body>..</html>......


HEAD /press_releases/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: company.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://company.yandex.ru/press_releases/

HTTP/1.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Thu, 30 Apr
 2015 07:25:08 GMT..Content-Type: text/html..Content-Length: 184..Conn
ection: keep-alive..Location: hXXps://company.yandex.ru/press_releases
/......

GET /press_releases/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: company.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 184

Connection: keep-alive

Location: hXXps://company.yandex.ru/press_releases/
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.6.2</center>..</body>..</html>..HTTP/1
.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Thu, 30 Apr 2015 
07:25:08 GMT..Content-Type: text/html..Content-Length: 184..Connection
: keep-alive..Location: hXXps://company.yandex.ru/press_releases/..<
;html>..<head><title>301 Moved Permanently</title>
;</head>..<body bgcolor="white">..<center><h1>
301 Moved Permanently</h1></center>..<hr><center&
gt;nginx/1.6.2</center>..</body>..</html>....

GET /windowspm/up?ptid=smt&sid=WindowsMangerProtect&ln=en_us&ver=20.0.0.2227&uid=&upv= HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.theviilage.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:24:21 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Powered-By: PHP/5.2.14p1

Content-Encoding: gzip

15............3............0..HTTP/1.1 200 OK..Server: nginx..Date: Th
u, 30 Apr 2015 07:24:21 GMT..Content-Type: text/html; charset=UTF-8..T
ransfer-Encoding: chunked..Connection: keep-alive..Vary: Accept-Encodi
ng..X-Powered-By: PHP/5.2.14p1..Content-Encoding: gzip..15............
3............0..

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=istartsurf&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=2&index_in_screen=1&index_in_session=2&display_height=50&0.09724644423417455 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:22:19 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Thu, 30 Apr 2015 07:22:19 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: d3zcfo8zs4s5u.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 285558

Connection: keep-alive

Date: Sun, 26 Apr 2015 06:08:59 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 0-285557/285558

Age: 980

X-Cache: Hit from cloudfront

Via: 1.1 1415e6a9d308119037d1fa89386da72a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: H2xjxtaMi_qt33Wb34zWnVfqC3Yi1WAEsOQNqwMXZEW4ju_0lwOhVg==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
......@...............................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
[email protected]..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET /pinger?event_type=offer_shown&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=appshat_madness&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=3&index_in_screen=1&index_in_session=3&display_height=75&0.15874706407308353 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:22:31 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Thu, 30 Apr 2015 07:22:31 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /services/xml/rss/nyt/GlobalHome.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:09 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://rss.nytimes.com/services/xml/rss/nyt/InternationalHome.xml

Content-Length: 273

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://rss.nytimes.com/services/xml/rss/
nyt/InternationalHome.xml">here</a>.</p>.</body>&
lt;/html>...

HEAD /pages/index.html?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:30 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://VVV.nytimes.com/index.html?partner=rss&emc=rss

Connection: close

Content-Type: text/html; charset=iso-8859-1

GET /home HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Set-Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Content-Encoding: gzip
17b5.............][s.Hv~._.....D..j[..%...(*.m.xj....$,....dyg.R..J...
&O...!....C.Ivry._...H..%...)vI".F.O..s..9.._......u.(........m....Su[
.w.;.W{..........A....E.s.".Q.M......p..q2....;....._nd.'./.Z[_=.?..8.
..%...m.O.x..!...-......W.<.1...x.....%..\ ...Q...8...N.Tp.....7>
;....f.a..IX...f.!KG.ek$........x....1.(f).l.....fk...(...y.....V....3
..h..ls...V....":fh.da...d..=......Y4.X.&..O~..f.I..l.0.8$.. ..K..#t2!
i.'..iFF,D....xA...,[email protected]"~....W4...O.1 :.FqR..I<..8.\>.7
....b.' l>Q....6=v..l#..........KC.........../..BA.:...=.....os../.
@.b....'n.<8.....&.8..][...S:..........5[..b......Z)&0s...0'..u[.O1
!q$..U.9o.....U0j.p`...3/.h.b..:.-qL.H..pB>..|....I.{S7.|...p.9..y.
.|(6Pu...sZ\m.4q1."}K.]......N*..q..KQ.LA)..c......\,...~.O...,Y....6.
....6-...2Z<].....2..4.....3_... ..l&..B.....;.q.......d.....:.~.e.
...H.Y..=.-s...6.g.......O?........S~K.1o!...O...D.L..c...cH...o......
'\B...=~..nB.$.o:!....O....qw...V...O....h....3*..2r7e...7|6.&4A/.... 
JY..`>$.cNb..o.<.."/.X.b7...Z1Gk.k..-.....D.....M.rH..<...sH.
..t....W..M1t....._(.&..?TL..&e...L ..T.~....}Mv.x....I..e....?B$!.&.f
8..RW...,..C....3..G..N..T ...L.@....#<[email protected]..].
>.,...eA...q.8w. ..:.6o...c. {m...e.x=..*K.`.....Cb../.R...3..=....
.]&Q..M.uMf........... UL..f...].;...NL.....CJ.I....y.... ANf.Px~. .r.
r5..0.Y.......x.1ED.`.e...Hn....*..........,[email protected]"....H'@........\t-
...a....R.....vez...Oa....%<....kLs,.).h.c../Q_6=]V.Uv..x.c.{u...".
..rt..R.....e..8.y k}.N.d...".....Q....._..%....[.........d08=}SC4<<< skipped >>>

GET /css/main.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: text/css

Content-Length: 0

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-0"

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes

....

GET /css/product.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: text/css

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Content-Encoding: gzip
221............}T.n. .}N...S^.Jnb'.*....K.......i.E..q.vp..HN....{..^.
..A.V_..V.q.TG...L..|...p....R.h/8........w..o.p.<....p......20..E.
!cX.C.......Z.|...........Ip.SR=m......Y."a......'.]...v`...-.....W^B.
]....Bl$..b..Wk...............M.w.2.^.. .g_0):......3D3.BfE&..>l).V
=....M...S.*......#&F]..."...L.2..T..|R{E"....'%W}.b.8.G....7.J..E-u..
.5k^;......_7b`..M-:....t.........Il@y...?.5Gqh.e^h5....L....%...Q)o.r
m0.=...anT>k......y#........\c.A...E.P..s..B......q..F.C...$...F..q
>.j=..."...gj4m..........w...... ;....K.(~r........8....vE....&....
....0......


GET /css/lightbox.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: text/css

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Content-Encoding: gzip
487.............WM..6...W...$..._k.h.o...$.6.....(.0%.$.]o...!)....|..
...E.g...7.....A..r]Ob)=F.........7zW.<..`....!TrI..E.p$9. ...*^...
w....}uh........R...!*..h.~..1....p!S.r. ...<U...[....1U..W.....>
;.uw.....%..................P .g..m......m........r0............%.....
..IqN..<f..&.e.}B......x.....p...l.$..H"hj .6. ........{:.)n.g&.*4.
W\.....-..7Y....q..D_.e..XrY.p((. ...>q. A.V.`*.....|_$N.......x...
.^9.!e...q....v..B.EF!u>.q....U....8.{...5.....W..7.....8!?[..N?q..
...........:.t.....%4.......T..<s.k.xR...[B.im.(..&.....y...`.R...r
.enB.B.L.b...=......G.$...Q.......@9h..J.IB.L..NE.....C.cH....m.W.o...
.........-G.....>.yy....5C.MX.......rk..bl...B_......51^..e.e.. .9.
xpW....k......E.T.M...}.'X..,x..j.%Y.'.|...'....y.<n....y.........]
}.....o....H...wA..z..h.8.[.......\7PK."..]'..C...M.-]J.....J.X..w..mq
...R..j.b.o..S{xB....e......E....... .. %.gG...........&..3-.^..4j.l..
t)..%(..C. .W....K%..P..6...t...p..Kej..oW#E=.*Y.=.\. ........v...s...
..p}K3B..03W{.._io.....]...>.*Q..~..Z..........62$..Pv&.<....!..
xm..l.....m'..vC3./b\.......%}...f.y;.v.Yry...}.r.#V..yTqf.!SIC31....b
.....v=..H.|..C.b.l0`\.v.f.uU..4......w....B.O^.....E..^H]d%.A..T?F..)
4........0......


GET /js/jquery.smooth-scroll.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: application/x-javascript

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Content-Encoding: gzip
51e.............Vao.6..._...!6,m..6H...-.a-.-......:I.iI........(9....
.....;...G._..y.........]Q....U...Y7....%.b...5|/...u.{.D.-....p.mxu.]
......7..w..Q......o/F.wE.X.43....**.]?@..*.|4B{ZI.k..&...L..._n<..
...?N....5....F_$...1e8.?<<..D...$..J.#p=.).f..2 Ov.ysl...ef.]..
...Y.4.4....i.oo.H.V`.*.$...BB0.....yJ...WK.......!p....ZS...k.1.,V.l6
.......G.......qpS.~d2U3.2{:.iU...v......r.un....x .s.7...pG.....aA..M
.....j..%......c.S...}....d.9.>QUm|k.!OMF0X`u....u4..zZp..M.....G"N
..6,..|18....b.!<L..3$.......r&..C ..l..'.........Y.:...O...L...h..
.k..Uz....C`..X..h...$H...b.....0Y..),.Y..\..8...._"...V...0..._..4..'
.....4.{gYQ....:x..]w~4......oD..r/x9.W.).........P8..:#........c..,8O
........6...&x.."u.C..E..U`..y2.1.....uD.X1U.. Ye..k..u....#........E.
...&.......icVVp....U= H...).:r..0<...j.oC.".....).mx..vxls.B.\...i
JU.0U1.c..`....?.../Rd;f:E..u1.%..'m......'.%.K$.R...N.jj......A_.H...
..a6._...].G'.L.u.....k..$Q..nJ..4Z...w....6{..2d........2......E...P.
.....D.?.}^...B?.. ...<.Ko......z."[email protected]!.#.&w.
.I...Ill...lI.>......:\-..\G............)^,L$.w.^..X.EW...... .....
hL..S....x.^b.j....].Ib........_9A.7DS...*..Vy...Y..=........\"..v..[.
...=T5.s.......'.?z"..]...|N}...K..._... l%.....?..[z..:1....{......p.
.6.?......pa.?...7...N.....=N.*6....0...O.?^...........W..=.gx.B...-..
..{.-......0......
<<< skipped >>>

GET /images/logo.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: image/jpeg

Content-Length: 5807

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-16af"

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp
MM:InstanceID="xmp.iid:B61A1BBFD29B11E28771DAFB2D1987AB" xmpMM:Documen
tID="xmp.did:B61A1BC0D29B11E28771DAFB2D1987AB"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:B61A1BBDD29B11E28771DAFB2D1987AB" stRef:d
ocumentID="xmp.did:B61A1BBED29B11E28771DAFB2D1987AB"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
....................>..............................................
...................................................!1AQ"...2..aq..B#..
....Rr.3.SC.5.......................!..1Aa".Qq......2..B...b3$%.......
......?..u.......i...>#...-..LPv.....t..T.J..5........*jO....5UP...
t..O.h.nP*;.jOJu=?-.%(.%!.Ggh.H#@l. |..UN..~.....C...(e....YA!....8.).
[email protected].\.jY".......z.b;......6..7...M...6..X.&i..Tw.%... ...
..=.c.\$.1l....q;.*.).M..nij..;.....:........J...x..z.....5*......<<< skipped >>>

GET /thumbnails/banner/images/assets/5/b/5b8f93845e4dd380fec57bc644ec49d1.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: image/jpeg

Content-Length: 49981

Last-Modified: Thu, 13 Jun 2013 17:05:34 GMT

Connection: keep-alive

ETag: "51b9fbde-c33d"

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......JFIF.............`Exif..II*.......1.......&...i...............Pi
casa............0220..................................................
......................................................................
......................................................................
.........................O..........................!..1.."AQa#2q.B..$
3R....br...4CSc.......%s...5DT.....................................I..
........................".!12B..#AQRaq.3br........CS......$4c...s.....
...........?..u]s#...4.&.-.D.....1...TQh....A.E...c.H.....JW..N...J...
$.t.g..... O...|?{..g...#.........V..D............:D.h......)..H5R6.@=
..G..$m..<H.t.....x.........<l. .. ...*.......\..4...l...3.V>
ac.......G..O.RV.)'..Bh..c......c.$..h.J.j..#...)?.&.q...z.?.......#..
..G..#..F..j.m}$`.wO.;.i{..._...4..mQ[.4...mC..IU.. ...*....k..I..B?{.
......~.m...}!...B"h4.B.i.A$:B...!.Y`...,[email protected]..#2.I..e...FFe!e.."e...
.!..!..&.$bM.zA...ZA...Z....- ....!b..}#.dP...(4.... B.....*[email protected] I...
Fb......#..i.c..B#j......dM..t..i...........)..i.(<..G.A..@<.Dc.
.....{.&].x......HX.7m ..{.<P.o...'.>....:.3..7..0..t..9.z.hq...
...........{$..p.I#.cUA..1......'_D(..,~...<...mQv'@.....k6;..c...r
$.Z...L......4.12...6...&HF>m..o..|...vo.......QJ..JO.X...=Fe...:..
(.!..$...3.4....!......#HF&....}!...B!h4.@[email protected]...
K........YH.q.4D.D"=...#..x..z....4...(..x....x........#.t0i.....4..m!
...........WF4J...H*..~.m!...H3.t......f.K@.....<lU.V.8#..... .>
.aY[....2...ki.j.....Pi!.......(4.h.*."i.(4.@IU q....P4..T_swD..;h<<< skipped >>>

GET /thumbnails/banner/images/assets/1/f/1f8ffa22b53dfc2f6b7f1850bb6b73e8.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: image/png

Content-Length: 173932

Last-Modified: Thu, 13 Jun 2013 17:00:48 GMT

Connection: keep-alive

ETag: "51b9fac0-2a76c"

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR.............X.h.....sBIT.....O... .IDATx...w..G.8.^U.
...9h....%Y.ec..9c.1`...8L<8...w...3..q&...q..c.c.. ..........6....
.....LOOO.J ~..i>.....W..zU...0...{.N... .f........\.!S...9K.[..4_.
... ..D$N.O..}....'.\.QQSU..\Y..$.R....9.......@B........ .......a..zh
.._&.#..$.$_..[....W0.IB..........S...[..A..B0....B..........}.S.e.}..
....}..8...\c.D2...\[email protected]`*99.y....#1.lHa..k:.
........'..)....`n.e 2.f....S...........P..G?.zi.(..I........a.S...B..
<.....cID...a ......._.'.c....!g..=.R.....i.J....:[email protected]
5.Y[gG}....J...i..\p......y8....(.Qg.H...3x.....OD..x,..Ec.h$.....h\I.
..).....$......D,...D(.@%. ."..f..e...t9.^...r..^...qI.D........T....R
.."I..lvrz....h...P;.8.........pa...B...4strL.L.".us.i...0...}F.B.....
.......\... D.#...?Uf..M.9.......Y.e.6.F...K..D..U..;wr..-RM..M..P'...
..=...'..._|........315.,..nH..6...s.....A^.y.%.\.:._J.R.Lb6...9Y....&
lt;...Y.9......*.....  ..U&N.U.....^.R..dQmC....TUcL.9...!.a.J)..T5...
..........@4.@!.v{..].......|^...r.....!..$I._I.V...7..jBpMc..TU....h4
............?..D...!...........}^..f...g...T.4.Pb...X|lp....=.... ..7.
.......A._0k~.......B7..9>M.......uV........sl...N.........3"?..0L.
2..k...6.....@.`4?3.F.=n9.5.I.vc.(..%.. 5..H ..e. |.....W._[YW.$.M..Q.
..!D.%.022v.....3.M...Y.......1-.O\\I......M..m.Xbhx....{..S.[..s..v..
.4..C...cvj..[........h.5....p..X>..|....K$X...).....H....{....,.T.
[email protected].@ ..........".'.....E>...i.... a.w.aa...\...D......j.\
..-....'~V...m...k.....r....1.9..7..h....}.......-?..f=.....X....T<<< skipped >>>

GET /thumbnails/icon/images/assets/f/4/f4e4b853ddab3b763f0af17d513631bd.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:37 GMT

Content-Type: image/png

Content-Length: 309779

Last-Modified: Thu, 13 Jun 2013 17:05:34 GMT

Connection: keep-alive

ETag: "51b9fbde-4ba13"

Expires: Thu, 30 Apr 2015 07:53:37 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......pHYs...#...#.x.?v...OiCCPPhotosho
p ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE.........
..Q,......!.........{.k........>...........H3Q5...B..........@..$p.
...d!s.#...~<< ".....x.....M..0.....B.\[email protected]..@F....
&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH..
...........0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I.
 [email protected]..._-...."[email protected]~..,/...;.
.m..%..h^[email protected].~<<E.........J.B[a.W}.g._.W.l.~<..
....$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..&
gt;.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?..
..D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/[email protected]..=p..
a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2...
.G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.
."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.X
H,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!.[.
[email protected].(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.
....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&
..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._.
.. .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).).
.4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.
n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC][email protected]....
..<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......<<< skipped >>>

GET /thumbnails/icon/images/assets/8/3/83a4cee7a59522b93ed0ae1fa73ce8f3.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:37 GMT

Content-Type: image/png

Content-Length: 48422

Last-Modified: Thu, 13 Jun 2013 18:07:09 GMT

Connection: keep-alive

ETag: "51ba0a4d-bd26"

Expires: Thu, 30 Apr 2015 07:53:37 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......pHYs................MiCCPPhotosho
p ICC profile..x..SwX...>..e.VB....l.."#[email protected]..
..H....(.gA..Z.U\8.....}z............y.....&...j.9R.<:...OH......H.
. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....
ly|B"......I>..................(G$.@..`U.R,......@"......Y.2G.....v
.X..@`...B,.. 8..C.... L..0...._p..H.......K.3.....w....!..l.Ba.).f.."
...#.H..L.........8?......f.l.....k.o">!.........N..._....p...u.k.[
..V.h..][email protected].<......%b..0..>[email protected].@...
...qanv.R....B1n..#......)..4.\,...X..P"M.y.R.D!......2......w....O.N.
...l.~.....X.v.@~.-......g42y.......@ ...........\...L....D..*.A......
........a.D@.$.<.B........A.T.:.............18....\..p..`........A.
..a!:..b.."......"aH4... ...Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u
@.......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v..
..a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._
.H$....N.!%.2I.IkH.H-.S.>..i.L&..m....... ......O.......:...L..$R..
.J5e?....2B...Q.......:.ZIm.vP/S...4u.%...C..-....igi.h/.t.....E....k.
......w......Hb(.k.{...../.L......T0.2..g...oUX*.*|.....:.V.~...TUsU?.
y..T.U..^V}.FU.P.........U..6..RwR.P.Q_.._...c....F..H.Tc....!..2e.XB.
rV..,k.Mb[...Lv...v/{LSCs.f.f.f..q.......9..J.!...{-.-?-..j.f.~.7.z...
b.r......up.@.,..:m:.u..6.Q....u..>.c.y.........G.m..........704.6.
.l18c...c.k.i........h...h..I.'.&..g.5x.>f.o.b.4.e.k<abi2.......
)..k.f....t...,.......9..k.a........E..J.6.....|...M....V>VyV.V<<< skipped >>>

GET /thumbnails/icon/images/assets/2/3/23428f8768d928d2bd45dd3b0c4d0057.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:37 GMT

Content-Type: image/png

Content-Length: 288086

Last-Modified: Fri, 14 Jun 2013 16:44:16 GMT

Connection: keep-alive

ETag: "51bb4860-46556"

Expires: Thu, 30 Apr 2015 07:53:37 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR.............{.C.....tEXtSoftware.Adobe ImageReadyq.e&
lt;...hiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:9D2D46458C206811B0C8A4DF2123BC4C" xmpMM:DocumentID="xmp.did:77F1
49EBC46E11E2B747C631FF1479F9" xmpMM:InstanceID="xmp.iid:77F149EAC46E11
E2B747C631FF1479F9" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0280117407206811A8
98904B6C307B73" stRef:documentID="xmp.did:9D2D46458C206811B0C8A4DF2123
BC4C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>6..i..a.IDATx...k.d.u%v...>2.....H....^.
.....v.x"..v.?.o.'..?h.c ..c4.([email protected]..^k..U.A..%....b...2...
U....k..GO...{.!..A....|p..U..X5uh.......U}....Z.........~...qip....Uk
7;.w..pq..g.4..7...\p....ir.8..2...;..&yT..........s5.^;7.....6..d....
.'."..L..<....M{..J..B...s..=..'..>.].._...O)xZy.$O..C.._.=.Y..&
lt;|.]..B.N)z~.,/.B.....z...W....../'.4f.f.J......[|.|*'#g2..4.....&."
. _.n....i.{goY.....).....^.n8.......M.....w{...uu.g...^.|....]<w..
......".*T.{7.....{...q.......R?..a..4MyJy..9......?.....y<...x<<< skipped >>>

GET /thumbnails/icon/images/assets/b/b/bbbde9554589bda63791709a6785e0a3.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:37 GMT

Content-Type: image/png

Content-Length: 98253

Last-Modified: Sun, 28 Jul 2013 10:29:06 GMT

Connection: keep-alive

ETag: "51f4f272-17fcd"

Expires: Thu, 30 Apr 2015 07:53:37 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR...,...,.....y}.u....sBIT....|.d... .IDATx...y.m.U....
=.s.}[email protected].`CpD..J....$.2D).e.....bp..!.`[b(...B...Zj..
.o...;.aO.1.......O.#..}V..{.y..i.......o..X.*V..U.b..X.*V..U.b..X.*V.
.U.b..X.*V..U.b..).}...*.$.....%../...b._P........X......}..|@........
.......~........p.~..?...v....C..s...<...>.sX.*...../G..Pnu=....
|...x.o^...b....c([email protected] .[.
..`}..V..qpb......H2."[email protected]......~.M.s<..z.....D.e.@`.E..
...X.....p..<....8...u38}!..*."..........8.0"[email protected].*.(..*(..!T..
_....l._.~.....z. .<....g3.....w.~.m....q..s.. ....{xx..p0..c.4....
...?..Gz..@.~|z.. .;u...yfY..{..s.z'.33.9....5u.9.....$].W..l..c..g..V
<.S,[email protected]/....L..................v..y!.:c....>D
.)yB)%.......p."F*......CH..A.....u....!D.[3s....B.1..~q.`w...........
....>.`. .... ..*.9wKc,....\[email protected]...*..B...?....7.k#@U.T
....V..|o.T ...i....o......g.:}..R.O.X.>.*[email protected]..
..1.......s..YJ.....\p.t..8..`...........#B.`.#...9.s.....M....^.r....
.}z.......f .q.\!.={........-.........v.'........g.....S..@......../}.
\......5../.i..y...r........s.........}......'....P2`M........5l.!8...
..........3@0..,.u.M... .1..RI..b*N....CJ..4.w...J.q.!%.c`\ .sp).8....
...B).!`........m{qk{..k.;.>r...............JJ.9.}.v.s...=..7......
........_F...*...../][email protected]..}..K3........?......7...O...<.`
.A.\.o[D....]..v=.1...Y.g..s...1...eI)!..s..s.)..w.".,. [email protected]..&
lt;.R.!.q*......`.eU.q...t.C..Ke....8...eUAe.`.B....3.....7..u....<<< skipped >>>

GET /thumbnails/icon/images/assets/0/7/07fce0a4ff78cc7e6376e227f046ce06.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:37 GMT

Content-Type: image/png

Content-Length: 514647

Last-Modified: Thu, 13 Jun 2013 17:01:53 GMT

Connection: keep-alive

ETag: "51b9fb01-7da57"

Expires: Thu, 30 Apr 2015 07:53:37 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......pHYs................OiCCPPhotosho
p ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE.........
..Q,......!.........{.k........>...........H3Q5...B..........@..$p.
...d!s.#...~<< ".....x.....M..0.....B.\[email protected]..@F....
&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH..
...........0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I.
 [email protected]..._-...."[email protected]~..,/...;.
.m..%..h^[email protected].~<<E.........J.B[a.W}.g._.W.l.~<..
....$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..&
gt;.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?..
..D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/[email protected]..=p..
a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2...
.G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.
."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.X
H,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!.[.
[email protected].(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.
....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&
..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._.
.. .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).).
.4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.
n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC][email protected]....
..<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......<<< skipped >>>

GET /thumbnails/icon/images/assets/3/d/3d8bbea6bcae57d705c676f7050a7d51.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193

GET /thumbnails/icon/images/assets/0/6/0692c2494a7331a77c05954f79c5480a.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193



.......^(.......7O.~..n.....,....Wq.x.8.zx_...~%..e.~..........D...S-k
FO.O.P..hN......%.PU.....f.......i.....i`.6.......i......E...X`f...r\e
./.}......Q.m...~..vN.V...9s*v....A..4JA..rj...../...6.zMi.....)N...i.
....\H@.}...9.$.\..R.9.^.....A.. .y..pCx...a...a..........p.......t...
[email protected][z.VV.$....$ .z.....zu..._a
N..zacUW.:..hq......>...J@.....'../]?U...e..<...2....v^kV.....ke
....a................bo......:......\P.n...*]._'..X9....N..e^.'....B.V
..Pn.n.....5aX..4mwZ......'Ts....MV.!...(.A.pj...4..i1...$.1......7.Y.
.Fk]3.y.E......3.1.S....9R...G..B..i.I...<O..WX.n.lx.X..p'./.Nx....
Hx...p...a <.......@..&%.iMkZ.v..3....~..C`.O.<....1....8.,.....
g9..2..S|..=.....V..".....T.........5Q.s..9......5.......'.O.......S.e
.W=...)....s7.E2.......Pa.sH&.^...k....3..[.... ...p...m..cj.R.9......
....j.5.,i~..~....N.J.A..4b. V*Q.v.Dmp.Os.).'....b"<.<.[.V`...g!
..^...S..0.'Y...k..R:...>.X......k..t.R...NHr..'..o!K...)....d:....
.wM...g.R.d.Q..,l...Q..,....>5>u..l. ...K....x.$R..r.`..........
.C.. .I..x......<0.j.,N........hr.ld.i."G.at..^.........J.l.$...m..
yf.o....h......i.......Z.7.....p.....y_.}.......~.........6p.m.)?W....
.J.~.?...v..........D..y.t..... .....|..~v..........<r.{G..D.E.W..@
.:).wW......0o]..>.^].s>g.kv!.....K....._.E.0.L..Z.ine.x'|.g....
...O.. <[email protected]}.Q.._..S$......_n.Z..v..wj<s?7,...y.a.;.G.
.....r~=\..Q......n..9..w.u6...Y...9..B1..g.....I.-.S.....H.P.......J.
A....s&...?..7$.7....2...#..3...B........EQ..-.~.........{_.......<<< skipped >>>

GET /thumbnails/icon/images/assets/d/a/da84c206c2019448521379d2ff837774.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193

GET /thumbnails/icon/images/assets/e/9/e94782c9200f8de809a50327879df1cc.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193

GET /thumbnails/icon/images/assets/d/5/d586df222f5069b6c396373d67d0163b.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:37 GMT

Content-Type: image/png

Content-Length: 389080

Last-Modified: Thu, 13 Jun 2013 17:01:34 GMT

Connection: keep-alive

ETag: "51b9faee-5efd8"

Expires: Thu, 30 Apr 2015 07:53:37 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......tEXtSoftware.Adobe ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:EF6B70037212E2118073EBF64AF82230" xmpMM:DocumentID="xmp.did:E117
CFAA127811E2985DB6A8A980C008" xmpMM:InstanceID="xmp.iid:E117CFA9127811
E2985DB6A8A980C008" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:EF6B70037212E2118073
EBF64AF82230" stRef:documentID="xmp.did:EF6B70037212E2118073EBF64AF822
30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>P.......IDATx...y.m.Y...k.....7..=...Dl.a..Q.
...81Eb(..R...OH.J..$.;.2.....v*8..R&1qpR`..b.#!.0K.h.ix....3.i...7u..
k.}.y...;.....k......~..<{.8k..s.......!........Zc]|...?.3|.l...g.1
........9........>..&.G[..-=.l> ..W.........0.....o..........'..
..~..4>..k........%T.U\.x.>.c.k....k..d]:7S.....w.~....1Z.o]..q.
\.y.5.q..u............5&...#...}..q........../... ..... ..x.,...s.....
.O...#....C.K......}....?....-_.}P. ...'.>..al...5.....;....c|q.}..
W.7&........[3.7aj......{P.........vp.....k......B..c;B.....>.&<<< skipped >>>

GET /thumbnails/icon/images/assets/5/6/567f43cb72fe3ac6419369953394cadd.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193



..C..M..Q..W.p..r._.......T..3..6)..m0.U.X.........P...SLg ...~.y.L..O
[email protected].. 8.....g->.....o../..@./^._1L..uA. .H ..:..... ..
.....3....f...../g...` ..0....A...n3.... .....Y....L8..._...to....2...
h...T..=(..U.@uv,....A...i..)zKA..g ..........'.......@*j.Y0.>.E]..
[email protected]).N.y.k.......!@....?Iw?......~'...o.[..R..._6.v..O...
..F4..Ly...`.|)..Qe` ....V..K.z.&\..c...%...Yz..Y../.pt=......@_...b..
5...?.(/..Xn..F......./}..=t>.....Qz.....b......\~.....|...$}.L.I.e
e|..;..O....?..oz....d...........H#..A...j.........v..L....5..7R..4rC.
.!...9.t.K;..;G..:~e....} U&n.u..'.Hm....{S.....M...G.?.H.....0M....$.
{(.O...{.Rm.J...i`.t......?.'.K....ro...../..N..N...t...yZw...^2.12.&.
8.a...cu..V........S.S`..M..87/...q .......^A}......{..5..(.=W..y..i..
.|...0...].....vZi.6%....j..xy......c..E1....^...O....q.{.)i..g.m..k0.
f.....P..7.2.R.6x.....y...,.`o.8[..w_L......rKQ....S....?@.~..N.C.G...
.?..A.G.m`...8..<N..Cz........`.].T.K.k1l.=.a.E.N.].......2....../.
.}....>..].......%...(..'.H.........B8...=.Q..}.(NS..q..v;9.....i.E
'..E'.......... ....).dU.^.|\g..wA.g..~.ui.u..(.o.......6.TzU..o..V..U
..x.&(..x......1=..y....N..k..[. -............F;.:.2...4.......n......
.h.c'k.D......<'...H..V..Y.x.VQ....3.y../..}...[..a...}%...I.......
w..._.......rf;..b.......Y....._...xQ...aM-..*.!P...v..nU..C...N.mEy..
..^..;.lCT..5...0vN.....i.p.T........N2tY*pp....E.!..r.Y.3...9.As.....
.2.Q.(:....m..B.H...........4....N>[email protected].[.J.Z......
...... ..0.r...?Hw?..t....F..t...$~...I..."..%.`.L....t...._.`P...<<< skipped >>>

GET /images/logo_illust.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:38 GMT

Content-Type: image/gif

Content-Length: 8476

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-211c"

Expires: Thu, 30 Apr 2015 07:53:38 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
GIF89a . .............................................................
......................................................................
.................................................................!..NE
TSCAPE2.0.....!.......,.... . .@[email protected]:].d.....Xla[.....@$.,..
T....G!.c>..#..p..0.yzk................#). ..........k..rwv&... ./$
/..._.B..}}..O\..(.O....'.O....e..N.....'..0.,....n..` #.(.#..........
&&.....tu..QH..P......-R1.. ..\,..."......@ ".. 9 .8.W..$...`L!I....H.
...f#S~h..Z"==...XP.....Z`......*[email protected]`.NCP'..&,. @..Y.yR%!..J..
Q....!.....3.,...... ......pH..D.M$......Pqx=..l........r-gc..P.y.He.R
.Q.8/7i......!!yn.........^ ......#j^......^.....(.^*...P.Q......R(...
.%.Q.....D......C...i.B.....3...................3..."..#........".'...
.,@....{.T .P'[email protected]......#...0.....2....$..*%.tya.L
2H(8&..Bg..1.Ji.b...-`.`.....".HP.....=3.....Q.<....!.......,......
 [email protected]....... .T...H..c........PmB..v..FL..Ta8......6.RD%...!w$k
.|]1.D....!.*.....!.E.I...#c../.D....M................S.....r.S....%.S
.....D.....'.R......C....b.B..""..."."..............R7" .....P....x..z
8!..B...$../...#Jp.."#..%.|[email protected]. ...3.)b..@....:.IP.T&..
G......S.F..tVA.P.6q...l...Z.....!.......,...... [email protected].%[email protected]
1`......}..Rb.....Z.......O.a.oBY.D.ns.D%.....vXK|.mm..C..II..........
}.32.B ......%a....&.C.....'.D.&2.......D'.D...........*..#..._.......
.."".N.......R..............=..'[email protected]<.P.B. .8D1b ...P$.
...B."I*......%.|.!a.B.)R.l....:..%..Ya....Vd......D."U.T^.....M..<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:21:58 GMT

Content-Type: application/octet-stream

Content-Length: 671328

Last-Modified: Thu, 30 Apr 2015 03:13:41 GMT

Connection: keep-alive

Expires: Sun, 03 May 2015 07:21:58 GMT

Cache-Control: max-age=259200

Content-Range: bytes 0-671327/671328
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........*...D...D.
[email protected][email protected][email protected][email protected]...
[email protected]............
[email protected]............
@.......................................... ..............."..`.......
[email protected]................
...............text....P.......R.................. ..`.rdata...^...p..
.`...V..............@[email protected]...$O.......,[email protected].
....... ......................@[email protected]..................
@..B..................................................................
......................................................................
......................................................................
......................................................................
............................................U..j.h.NG.d.....P....T.H.3
.P.E.d......M..E....Q...e.P......M.......E.....j.j..M..K...j.j..M.Q.M.
.K....E......E..M.d......Y..]...U..Q.M..E.P.pn.....P.M..4.....].......
..........U..Q.M.j.j..E.P.M.Q.U.R.M..a.....]..............U..Q.M..M...
....E...]...........U..Q.M..M......P.E.P.M..d...P.M........]........U.
.....M..E..H.;M.r..M......;E.s..M.......U..B. E.;E.s..M..Q. U..U..M...
... E..E..E.;E.s..M..M.... U..E..H. M.;.w..M.......U..B. E. E..E..M..Q
..U. U..U..E..H.;M.s.j..U.R.M..?....E.;E.tS.M.Q.M.......E..E.P.M..<<< skipped >>>

HEAD /index.html?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

Location: hXXp://VVV.nytimes.com/

Cneonction: close

Content-Type: text/html; charset=iso-8859-1

Content-Length: 231

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:30 GMT

X-Varnish: 1714241007

Age: 0

Via: 1.1 varnish

X-Cache: MISS

X-API-Version: 5-5

X-PageType: homepage

Connection: close

GET /sponsored/swiftrecord/eula-swiftrecord.html HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3i779maf1zmkk.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 26 Apr 2015 05:00:26 GMT

Last-Modified: Wed, 11 Mar 2015 08:59:19 GMT

Expires: Sun, 26 Apr 2015 05:10:26 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 248

X-Cache: Hit from cloudfront

Via: 1.1 a034346227db119f7e0813186ca2d2c2.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Elg8YBvYInDuhDDkR9uIxCtq9eFkYcPvYG8QqjRjFP1rcgCSdAWR2w==
36d5.............}.r....s. r8.c*....n.r..!..`....K..8@ [email protected]@.gb".Cf~
..d.Z{.K. %_:b......'.e_......i.d...]..f.....y...;<>............
..y...U1X...d5.....q.r..._..o........;..w....g............j...........
...a^........r8...7.........u....zu{..|.....qZ...E...U.yu<.k~..M5~.
...7.jZ-.......w.h6\.M.o.W....dU.....|S...l8....|uXO..>}.z.9}v;.M..
o...rX...-.._...o.JN.V~......b..N1...G.~U..i.........U. {/.^hh.Z3...I.
....].)...c.|c?..X{..<....[SL... ...../...?./O..~.W.....v.z.k./...&
lt;.-......E..?h..w........=.|h.......=R.....{~.....{......t/O;.N...P|
x.9y..N..O.....{...Z.:...89o....>..........>>.\`..3|......6..
k.;.....o.;............~....=..\...4U..V..d^..'u....k.mq>....,Zw...
..U.......^..eY...X.R..E5/@U....0.]..rT-.|.,.N..b8..;(.....Z.{........
....0.l......Xc.uQ.......j........c.....t2...._....Jj......XV.....z...
.v..........G.....G......S...u7...W....ZN>.G..U..<..&....;...C..
.-..rY.G%..d..i.9....d:..s.W.Q.6xY..]j?..K.......O.^/.>..p...&.d~W.
c.......p9.?(n..y.<.5|^a..?..Ln.p.8...wh;z.....w..l..jU....M......G
.3. ..n.|........x(o V....5...O.J........z.....}.x9H~<......~.W..r|
[email protected]..@.$.H..zP/#..9R....B..X.
4t...C}P,....s....H,d..tU.6n..@qgY\.E.....#.......g.8.0.bY..Y...b..1.e
.X...V.=.~.,..(L....AW..QY.<..W.9.....#.4&...| ........L.d.m._8....
.D...EU$..r.Zc..z..f....f.6..(.IRX.'L.[].k..i..WH...o}h......8}mo9...u
.b.P...&.i..Tkl.S.18...B.- .1e.....6.v=. X0>..~.,]Q....F.U...#q...%
......4....U55.r.3R................i1 ..!..u..^.:...II..U..N.<N<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3i779maf1zmkk.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:04 GMT

X-Cache: Error from cloudfront

Via: 1.1 a034346227db119f7e0813186ca2d2c2.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 7UpYOBrr6mlTb53lRewLA7se95P_40yu9RD320CGM8j3CfbqMulkBQ==
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3i779maf1zmkk.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:04 GMT

X-Cache: Error from cloudfront

Via: 1.1 a034346227db119f7e0813186ca2d2c2.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 7375YEmGGHfbPtTFKEg1c5bqunlsu2syrntNd4eairXBC5KteJIMHQ==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3i779maf1zmkk.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:04 GMT

X-Cache: Error from cloudfront

Via: 1.1 a034346227db119f7e0813186ca2d2c2.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 8adMPkl7Eo7R7XgYw2_PmrZmrmP6jscknXMs7kOOGjl4FhsMlMwtZQ==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3i779maf1zmkk.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:04 GMT

X-Cache: Error from cloudfront

Via: 1.1 a034346227db119f7e0813186ca2d2c2.cloudfront.net (CloudFront)

X-Amz-Cf-Id: hF25c8RboDmBu-QuGA54Gi_OmVxNk0r-2nQgAV5PjgT7bhUnXqNNRA==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>..HTTP/1.1 403 Forbidden..Cont
ent-Type: text/html..Content-Length: 162..Connection: keep-alive..Serv
er: nginx..Date: Thu, 30 Apr 2015 07:25:04 GMT..X-Cache: Error from cl
oudfront..Via: 1.1 a034346227db119f7e0813186ca2d2c2.cloudfront.net (Cl
oudFront)..X-Amz-Cf-Id: hF25c8RboDmBu-QuGA54Gi_OmVxNk0r-2nQgAV5PjgT7bh
UnXqNNRA==..<html>..<head><title>403 Forbidden</t
itle></head>..<body bgcolor="white">..<center><
;h1>403 Forbidden</h1></center>..<hr><center&g
t;nginx</center>..</body>..</html>....

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=4&index_in_screen=1&index_in_session=4&0.41939162852451905 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:22:57 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0......


GET /pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=swiftrecord&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=1&index_in_screen=1&index_in_session=1&0.8430300459453166 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:22:57 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Thu, 30 Apr 2015 07:22:57 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_fail&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=swiftrecord&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=1&index_in_screen=1&index_in_session=1&0.2052016786790497 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:01 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Thu, 30 Apr 2015 07:23:01 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=istartsurf&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=2&index_in_screen=1&index_in_session=2&0.3480514426288644 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:03 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Thu, 30 Apr 2015 07:23:03 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /cnnnext/dam/assets/150430133656-nepal-earthquake-gorkha-district-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 50643

Cache-Control: max-age=3531

Expires: Thu, 30 Apr 2015 08:24:01 GMT

Date: Thu, 30 Apr 2015 07:25:10 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
D.........................!.1."AQ..aq2...#B...R.....$3.4CbrS.&..c.....
.............................4.......................!1.A."Qa2q.......
...#B$3.CR............?.......tO].>.]}4..)&T.....S.....Y.&U.s.g....
5u]40.H..1..g......w.....2C..<n#......c...Y........$.%GFl.....\.EK&
lt;U.n.*......s..Gs=RI..F....;A$........X%.gL..-..N..PC...%P..n.>..
z...2/....1...D..,..w.F..IF.e..*..}P...G.G...V.?C..2.......I...k..<
............4.cx.x.......K.gr..?....%X.;.q...}j.R...0..2...Q.*.#.....1
.0.p>..~....FX.%..|..`.v%O...B...FwE(#...r.aY.$bFB.....C^.....T...F
r}1......$......O.......>......Q.en.6....#A*e.2x....` 8....).u....&
lt;....]P.m..[&..eu.......O.........;...a..5..7........}..x..V3..O..x.
...)..*m.`....|.w{&..2..I..."V@G...<g...P....cW......u...EW.I9S..&g
t;.s...<nIj.....(.y.......?6....A..A.Z.6.,..T..C........k%.Z..x.U.F
......n.C.J.......I...In3H..H|..!...F...J.ib...J)l...uz:..k...;.......
.....D.P.4. .]..d .=....F.. ..3..T.3...13........H:..y..y.!...........
....X......[......7 ...j..x....=J..J.v0b0..O....?....i.a*@*....}.020.x
..-[..........}.:..w............J.V..4..|.W.G..M6..m....<..e ...:..
....01&0B. ..H*N........HZD]......K..S-C...2..S..CST..V.9.3(b>...u.
....Z.e......_ .}....a._0.[..a... ..]..y..Q#2..c........I....Y.s.p>
. .\q.....T4..X(I. ......t.)......c.1...)k..C,.. 2A.q...?]..h.m4q.<<< skipped >>>

GET /cnnnext/dam/assets/150427155529-floyd-mayweather-bling-sunglasses-smiling-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 33240

Cache-Control: max-age=1207

Expires: Thu, 30 Apr 2015 07:45:18 GMT

Date: Thu, 30 Apr 2015 07:25:11 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.E.........................!.1.."AQa..2q..#B...R...3..$Cbr......%.45..
...............................1........................!1A"Q..2aq.B..
..3...#4.............?...".........v...5... $rNkf$..rqA`djV.....$a....
..>.......p0..c.,I.Ib.T....8.#.......)Wb.7.4..)....r........U;.8..c
......`B.''....${..![.{...x......A5..,FQ...... 7..K6}!...E....gw......
..x..z.[.t.r...........2.........eD...7..jV)..;[email protected]....
.rX......Z.r.m.....P.s....C..<..N.@..)..=).&..X.G....Y... .T...r...
J.O.; 4"[email protected]...>.h......|..g..~....o>.....^..WFV.,..,..
.r3...;[email protected]...`..U.f.0........-|_..Z....Y.f...$.*G.R..../.zwN.S}.
.{..\\...V..`....|z..../...F....)#a..........J..5mg....owg ..)....g...
.!.....@^..m......F.$.......).X...n..p....H,..m2.P.|.C.....%.c.y.M:.QG
..2.7JX...5.........G`....y..:G.:....../.. o..e.D...~..<!..\....Q..
K..].../r.... ...~.i...4...;.2.....l..=......,>..GCK.y.R.?.Z.k....:
H..-...<..@2.}.}..p*}q..gi...I.c..WN....].z....G^......C.A..F..M.[.
.;.A..}9..p%s{.....0[`.......^BH.y..X. ..>...7.*_.z..#Hr..<.l...
H.S....hU...!..VS..&.n..'.>.'..V"....4\[n.....)pc....;..(u..pTeOpi.
k-..9.I......6.)x..`.(e q..#.k..A..)k.b.....P.....q....L........'m.-.?
.?....7..x|"c.5.......g=.*_.]...7.......<......C...kf.._..g.c......
.h.....s....,.,P0|.........:D.,..a.{...kA....=.....e....PO#.Q....'<<< skipped >>>

GET /cnnnext/dam/assets/140905070556-sofia-vergara-august-2014-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 25211

Cache-Control: max-age=663

Expires: Thu, 30 Apr 2015 07:36:14 GMT

Date: Thu, 30 Apr 2015 07:25:11 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.J..........................!1..A"Qaq...2...#B.R.....3C...$b...%Sr.46.
.c..................................5........................!1A."Q.2q
3a.....#R..$4Br...............?..A..(.`.(P..B....9.....(P.......#.....
.m.......[.(...0...A..#J.Y..S...}...$.kY..6.m..1..z...1. ....O.Y.#e.n.
....7....S...E...@....=...fL.zd..M.P..n..=..H.lCRru.L..F.<..~.<&
lt;....i....i.(i7 Y..T....*.SVj.*.yU....,.....t...0c9[-....F.m^...a..J
.IraC"I.Q.....<.}...uF.}GF.p.10.K..qA.....P..:._.5U).*-6..6lt.....k
.T.....,.m..n....uR.Z.....(..SS.6.Q..G].h...|..4..]...:.......y.....Bl
.v...z.~......0.I...s&..$.^..4...m.Q.e.^c...Z...l..>~p........VBYI 
a). .8N.].....(...e.u7K..%..IR,?.=.z.0?&....$0..}R[..........L....N[.^
.P.1G....1..M..E..tUv:^.(..W,..@R.[.'.R..D$..=J.>...z.V.....O../.Q.
..;N.~Nmjm.4.....=.H...>.......d......@..[.%.RY".qx.%kT......2vy:..
...%..2N70.....1.....[....2...9..Q...t(........=...(.qR.;J=..J.......g
JK.J1x.g....N.....yFUK..;....~U[.....B.q...BA......Z..D|.i...y/....k7I
.....8.7.\H.Vd.......e...0..oM........:_Qn]....Z.x.....bI<MH...y/KL
 )*...>16..o...s.a.....dF$C.1....(c...1;....AB.xP..CC............P.
.@ .B...<B..xmX.17.1V .T...:[email protected]\Z.......O.
0.j.F.....2Vzf.8I~A.YC..s2Ps6....&.7.h...X.-.....b.L1U.L...7W...e)~F].
......s.Ym(...>....3.......a,,.-...F..S.`....V....|.?)...E...(E<<< skipped >>>

GET /cnnnext/dam/assets/150129180257-smart-bullet-change-direction-mid-air-orig-nws-00010016-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 10621

Cache-Control: max-age=3463

Expires: Thu, 30 Apr 2015 08:22:54 GMT

Date: Thu, 30 Apr 2015 07:25:11 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
....................}........!1A..Qa."q.2....#B...R..$3br........%&'()
*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................
......................................................................
..........................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.
....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................
.............................................................?.....(..
.(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(
...(...(...(...(...(...:..(......O..Q.......B.$...L?..?..G.a......}...
..\......B....(...(...(...(...(...(...(...(...(...(...(...(...(...(...
(...(...(...(...(...(...(...(...(...(...(.......M.W..`......V7.4....k.
m.Ssyaqo.c.].e\...@.......|B...n.n.N....E..a..m.e.T; ....v..{=......o.
....^....P..bO.Y.... ...*'..m.:z......<..h...z.z....t.N8..g..I.H..J
.. ..r;.J....n..tu..9/_P..J,..%....0...).B.........?....../.5.mV]>;
......F....yc..:._0..,..X../.WZ....k.......e...:.;.h.....!..4.*.M..h,.
9.G...?j........Z....N...k....`v..y....c....<.eeg..i.u....P.....$..
r...>.E\6F............F...._.....T.......W........t}z....F.bb[n...#
..[<?g&......&..8....T......o....Sy]:i.e9;u.,,..2..Q[.(QE..QE..QE..
QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QE..QK
My.!.eA...........i.;R...w....e..o..g.........w4...\4....1.Dw.7...<<< skipped >>>

GET /cnnnext/dam/assets/150429152540-top-barman-alex-kratena-tease-only-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 38398

Cache-Control: max-age=90

Expires: Thu, 30 Apr 2015 07:26:41 GMT

Date: Thu, 30 Apr 2015 07:25:11 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.N..........................!.1..AQ."a.2q...#BR...b.$3r......&Ds.....%
4CSTc..................................6........................!1."AQ
.2aq...#3B.....4R.$b.C............?.T.Q...y.Z.........V L.~.>.D....
.......nrn..:.. .......9.j[KE.$...>..?gY.....I1..e..h.'.........45.
\?.m..J....wL!. 8.......qAEk{..N6.....!c#....../...Q....~.s.a.)... ...
.F.].....R.1x.i..i=.........y...Zm.Sm.K...2.%j......Sa.....~.}wG^...#,
....;a.5....J...i.Z.2........TW...N.P....J&.....N....."l..../q7.Uk{.w.
.$8.....&nT}...f....~T......%..Z}HC.w.......c..m...........\..J-IY,...
.. .;.@D.!..RG".[.......0...`.i.t...-6M<.S..($~.]..&....%..BCi<%
\[email protected]....:.Pj.\..A.c..M6...q..l..<.Y........T2...1^:z..*..C.%
|.hv...W.Y.t.f........gmd.S.w...}.u%............x...m...... ......C...
..s.z......=ql..!~..v.d.kX...HRW'*.}.G.:)W..u!..w.e..JF.!.......GK..x.
. .^...-....2....x$..8...C..s.>:...J[)...|6:..X.a...%'..cJ...F.i{..
"]Zz.'.i_.).u.[.u..s....S..%..\6..P..5a.e.KG....n......Z[I.c..k.Q. ..i
.^..l..|.........n=.m.l!..z|.c.i  .0E78xZ....1.o..g......84....T..K...
.o..\ ).y.9.-.t..........8.@_..Nl]2nE...........wp!.;Lt.[q...!...B....
..z..Qk.e.q.C......*.i2.[...v..)})..pA<..../...*d).l .P.R.jV..e....
wQ...{l;*..$|SC..TD.G.SiIL<....S..Rom....!......J.e.uu~.."...d,....
=y.~1[.....=e.B<...W3..[.T.s..}s..2..V....K[."-.......9,...j.Rx<<< skipped >>>

GET /cnnnext/dam/assets/150429003438-vietnam-fall-of-saigon-evacuation-anniversary-orig-mg-00015805-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 15649

Cache-Control: max-age=16

Expires: Thu, 30 Apr 2015 07:25:27 GMT

Date: Thu, 30 Apr 2015 07:25:11 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.=.......................!..1.A.."Qaq....2.#3B.R....$b%'Cs............
......................).....................!1A..Q."a2Rq..B...........
....?..0wD.R.....`......8.}..].Cf.8.OM...L.....d.8Q.. NS.......F%>@
.V.x.).....sb!..l.SiG..&....sd.<.!...D...........-]..n~.m&A.X...Z..
.v.G..2kg...I...{{#."......H........'........?)~.r.....as\f...n&3...s.
...1..{e.j.hK$`.k..:9.).y|.... [email protected]...<
....<......H..S >T.................#..... 4.........)....9...p..
..)..R8.>..v.(..g.;.ve.jG~..A.f>..w.#.e.......{B.C.$$....H..8...
...5.b.y.wK{.....5XI%.....qs.p...........}Q.....? `...9t.!5.....L S...
......>.j...........uze.\...!D........sZ"BN..pV.8([email protected]
..Qv1......)..H..s..n....|......($}M0aOJ.3.PM90...F..O....LJ.....0.`.u
.<./n;J A.........[.d{.*.<'.S...;c..eb...{..c....M3.H.&;....l..*
O.......8."[email protected];[email protected]/.pP....E...I.l'...6...&..%3.,k&
gt;e*.&[ aW......~r.q.OiG..,L..K.)...;....p.....@.. [email protected]
....;'._qL.@G.)..../.O3...M.K.....p?t!5..h.<....*....e\|.L.k..H'..L
.w.L..4.Q..4..-.YO....'p.....[.O.MSS.c.uF....qD.q....rc.`]u...e.......
.v.u-.U.=...~N...j.......&>J.u.X.4.HF......<...[.tL.~..#`.P.....
...0f..v.9..n.3.H.[3..3A.L.Q....*..M...A..J...Lr..m3%.4... .?U.t..i...
............G..f...ny\K.U.....D..wO6......*........~..Q.O..2.z..n.<<< skipped >>>

GET /cnnnext/dam/assets/150429154754-pkg-paton-walsh-libya-human-smugglers-00005617-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 22031

Cache-Control: max-age=5455

Expires: Thu, 30 Apr 2015 08:56:06 GMT

Date: Thu, 30 Apr 2015 07:25:11 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.F..........................!.1A..Q"a.2q..B...#R.$3b......Sc.6Crv.....
................................/......................!.1.A."Qa.2q...
...#B...............?..,.}.....s5?...`..i[V...U....H?j...9....l. .~I.2
^6...$E .I.y....Cp?y.W!.-@%.*4...J..a$.DG....q..fX...{T...<I...O.^ 
..P..9.....l...%....p....%ODO..[.........R.....j..D..z..Q..,..Al.w..[.
J..9.x.J.Pw~SYD.&...U....}..\....4....i3......Q......  Z.wBL....[...\.
...V8.....J7I....\..d.:q~J....r.-.&D..Li.S));A...0.O..."..]).T.H.8....
...mh.W.d8...)?~.b.m.BB!3.Mo9V.mj.H.;.5.....R\...> F,..D...$6.H...z
.c..\..g...6.$!..K..v......d.:..yH.."....%B....!P..b..>[email protected]...
/...>.5.......RO..W.M..r-..."B..9.....G1..>..I.~h...kV7.=x..%)3.
l.j.l.)....v5.Q...d..........)V..9..E.E.$.l.Z......;..V.....DI.].1._R)
...^.Px.>...B6.T.<TZ}/py>#.B....A...J......} ..@'.s......4.ZH
.$T.`......"...M..mc...V...s..{ x..HT.....c.v.c..a.........R..tNX'..V.
%...Olr(.&.3....S*...G......L....&(.TI.3@..#L..;...E:.U...E#.......{sL
...4..j(P..~.....;d...zDA..s..c'.@.;.<....sR$..*d..TX.l.h.;.7...#.!
0..A..*w...;..g.E#..4.?.....l8.[.eL..Q..Z...F........W.\t].....h......
D.kq.i.;D.i2?...i-@..%.T6.JI...V.!. .#.y.VL..6uq(.Y..!!)@O.A......p...
!F....\.$}......]#%.[....;v... <.l.)x.GDr.`.........J..,.BfD..p...)
...i...."......%. .=.].xe.].ejPM...N.e.J...YL...v..>A.W.....p..<<< skipped >>>

GET /cnnnext/dam/assets/150429141342-nr-sot-orioles-no-fans-games-baltimore-camden-yards-00000702-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 35635

Cache-Control: max-age=5647

Expires: Thu, 30 Apr 2015 08:59:19 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.J.........................!.1."AQ..aq2....#B...R.$3br......%C...Ds.4d
..................................*......................!.1.A.Q"2.#Ba
q3R..............?......9.8......a.....A...Ko|.kg.lrq.M4..........U...
G.#....UkZO....K<.)..5Y.....|......pO9.w.]h.:...'.~.........t.O..&M
D_.../.nO....!6.....gr...9....S. ..Z.{...][!.{[email protected].$.u)../...l..9...
...P~..[..D..f.k?.|I-.3.`.J....m.'...1).....u.CX.B.../.q..[..HbG.]...#
....K./.|E..}.w...kZ9"..:i......f.cl...g.FF..o.7.|[=`j.9......7-K,f...
...../.#........~ .z..r...Z.'....rl?..o.......?.4U...N....G[[......X..
......eA.*.n..=..% .h......57.K.T..,......O<...%Q.7.(..8.U\....\...
pT.0N21..k.6K....i..).k|uO...%j..IN..B.`m`....3.......m..s\^......=a..
. KB*P)*.....1....K.J....$.JGX..P.x'..?.u..l....r..W.......&.Y.V..c...
..>.T..... U.. .../....4.TX......8V,H.0s.{.K..e......zn.H..5j......
......3...t m..2....\s.RN..$.5;.HD.~....R{.H.l..06..'.CS.I.....Q...}..
I.zJ.R...W.6..c.8<......._T..R|K{}..K.......q.................dg[..
.m.w .J...O.[(.Eq43%.N......pH...2......>...2.F..t..i ..}U..b.n.%.Y
...`.o3j.U..v.....eg..BW...To..\..'........?.i.....(.....i..Fg.5;.Q...
<.r...[.. ...?........vG y....Ga.?-.]./...R.:...,<.Ag.....G.P2..
...<..C......j-/5....5v.'........INK.X.N3.1..L...Q..H.j.,l.B...>
Rw....x9..?hd.....}/._.i.....:.....#..n.*.F6..#...F./.}.Mx...Z...O<<< skipped >>>

GET /cnnnext/dam/assets/150424115939-sony-awards-lifestyle-tease-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 29096

Cache-Control: max-age=1569

Expires: Thu, 30 Apr 2015 07:51:21 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.@.......................!..1.A."Qa.q...2....#B....$3R..b..%r.&C......
..................................................?..[.3..#[email protected]..
..<._<.P'.4...{P" .4...R.).....4.F..R..)F'[email protected]..~...(.b)e4`.
.[b9..@.=.G9.A.0>T...h..a..s$.sEb......D@.../ZC.s@s....#......?.h.c
?Jo.........DD.R.........j.E.F.....4..$pb(........"[email protected]...
......H..a.#.B.3.....5....V.. 2.,H....j............n....[S.&&.x....?G.
.1f...!..X*[email protected]..=i..$!.5j......iu...L.PJ.'.S.....q....
..F..HK........;...........U.....d.......!. ..$ ........n.[..P....#.B;
..0G.Q.................A...0~.../C.....cT.N..vw4...3.x38..<M{....:.
SZ.....4..T.D .. . ..v.....n......$.>....8.IL..D.$..3'...$B........
....I.O.......R8..T.$..3<..3.}..L. c...?.,.{[email protected].'?... [email protected]
.. ....Ffh.$.?\RH.@. c.`.t.<.?OJXPVG..}i.Br$w.._...H..........3..q@
.....A8.....t...e....H..ooZ.0.4....#....O.....z.....l..'.=d.?/..._..j.
....-.......c.q*q.AK...pg....S./.....77v}I.u.w.VIF..Z.5h..j.3v.-.[.:..
.W'....B.y..].......=yw.i.Wb..kK.{n......w..>...I...p6.... &`m.....
....^9.k$.^..]'.=(.z..........{j.o".......G.E.................7Z.....F
.iyw.8.x......|...]R..mu...Z....._.FO..h.S..2'.....?*..C.h.1.8..)....@
.9.=..(.D......t.<z...;..P#..(D..F~.........C...J..'...#...I<g.)
..ZG'.M.6....n?/JP{.H.y.. d..@b?.4s.<..FN..z.?f..I.C..\R.i..QD.<<< skipped >>>

GET /cnnnext/dam/assets/150430130536-audi-logo-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 31135

Cache-Control: max-age=5602

Expires: Thu, 30 Apr 2015 08:58:34 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..b...........................!1.."AQaq.2.....#BRb....r.......$3CDSs..
..FFcdt......&5ETU..'Veu....................................?.......
..................!1AQ."aq........2...BR..#3...4b.CEr.............?.r.
o.Za...S,.c".S. E...s....91.U.=5*..l......R..A.~..jn%.P*H 8.fKi...E...
V...{y..R.&.y.(*[email protected]!Jh........;...Gw.)F....<.z.Lg.T...
.g(..W...w..{...N.1M.J..Q..Tx.......)...[.>....8..(.......m#....I..
[email protected]&.K.....d.L..F.d.0z.|...5...;./~...U.R.V..i-%...6.".d....o..N
}J..>..A..[.L.R.......C.w........Bu..b.i.......i......6...fJ..I.fvG
.0...lzJ...V...:..........jm.J)..#. ..l.&...^<....c2....(......S.J.
.(9...h.b...O].\..m...`.s....... 9..r..........S.'.S....iI#bV..i?..6.=
.....c.....a........^..X.)..U....jSD.-..;...g .. 3?~T.[..W.....{.Z....
..$...)'0.O.l..d.w....D....n@|F.........v.....m.VL.d..24.t..2......J.3
L...P.r..w8.`.q..J....E..wo..`~ .Ore.....g..._7n. Ng...x ..$..:.......
....4?.....N...%.]s?.J._Q...{.Ob..W..d...]...x...?..\.......E3n..9....
G3.).?B .i...9..hxS...LH............`......r..0.;v.=..M'd.6..1V..5.m$"
.XN~S....;.q....G.*.!Kq.G..tO.....U...)..1...5Yu.rj.2.....*...o>1\.
.k...O.H=fq....C..gt....>...?.O....w.~lJ?.j...I...m..~.Gj.....~....
..:.\......'....'.i;....PF.lg..o........8........^B.0.R.s...k.O.&&....
..V"....hO.....#?c......V.@T...?....>(?..V...o...''..e!.t..m..,<<< skipped >>>

GET /cnnnext/dam/assets/150428063123-damon-nepal-village-death-large-169.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/png

Content-Length: 215927

Cache-Control: max-age=2956

Expires: Thu, 30 Apr 2015 08:14:28 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive
.PNG........IHDR..............e4... .IDATx...i.e.q%......P.y...(."%Q.(
JbI.HKbw....n.G......_............@.>X..[S.%.%V.E..U..*.*3 ....{...
.b...dQ...d...{.=g... .Z.7Ng>[email protected]..../..R..
b.J..(.dn.....B./....z%l.g..^. .}.^7._..w....._.............\>v{..U
........M._..l{]..O?s...z.....)...........'y.....3<.=....K>{...&
gt;DT.E.....W.].U.C...A....{....;.k-........6.................ZB......
.....u...?P.%,...:a..O..5.............^...|n.3..2.._.k/...........Aj..
.....u......o.5.Ac.:..9.z kc....... ........z...|=y.Q....s.....|M.<
..k/.fU.Tj.]> .}..I>....}...}=....N..s.~...(.....c-.8_yy......=.
.=.!.^O....[.!.......k!.).3q..Lu/..*..[..,k....v.~.q....t...{.....znr]
.)_K]O.......k..Q.'Mv........sX>...........W.{.r.........z..l.O.r.r
........S.%.-...S..7T.1...e.&Y#..i.u5%8<Hu=.......%8w.p.\9.....y.i.
.C.>.x.....Mm....._.55.u.Z.......P.,..yS.M...l7..p...&. Q.J...7....
>...IL...}[email protected];.ea..*..6v=`..M.Pi.>.`..]....R^S7z.j..
Z.@.%.b.......m.G.:.[..7..`.....`zp..e....r8b.T.QI.\.=......>[=T50.
3#...I...._.7..a....Q.^9`-..?S.....V....P.@..\Vy..K-XS..$.UY..Y.;...u.
a...l.]G.$u.......?s.....)?.nwy..}~h?_.^....3..Os...(.b,.....A.>.T.
C*.6..... 9L..j.-a..oK.P.E..T..'...z.<.&Y....3...{...l...._.n2..P..
..Y_.....,.....I.6.5.r...[X.r.......m.i.,.V.n.3#&......`(....r.....A..
.}'jb..(.4....._.....Y...w_..3N5r.%.]B..$s....h......'...(.w.....<.
[23..(IR..5P..9.. gL.`.....^I.nq.l.$.W..$..P.....J.Y..._.w..{.M.......
=.......N...].h7C...........r......e[@h...f! [email protected]<<< skipped >>>

GET /cnnnext/dam/assets/150428182048-tony-abbott---s046818710-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 27328

Cache-Control: max-age=6003

Expires: Thu, 30 Apr 2015 09:05:15 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
..J.........................!..1A..Qa"q..#2....B...3Rbr...$CS..%..5...
cs....................................0........................!1.."AQ
2..aBq.#3..................?..(I...<d......}5.).J.V6.O..\......... 
..o>b.P.z...,......H.V.Krb9.GnB..t.Q....A#..@.\...1%n...$..........
.vA..)...;.....g...1..........&&.. ,.p.........."[email protected].\....
5.e..)iKl...p;S6>....M#.\$.*...iJ..%.......c...W..P......m...Emi..)
.0jL.......w.j.......W.p..xs.._L.mQP.7J...Re.G@E.P.HHI...9........1.T6
.p..5>..-....).N.9.9..Q.&..<.D.....c._.#......0.....e..\54.pp..(
...R.l..P.....[..EY........]5U...*vS.$....j#..>.Rw.._..?.....c.9.*q
[email protected]..*.........#..z.S..4j.<W...].j........).N.w...!$t.......
.d...|..d.....S!f...r.R6).... 2...8.......... .y).....p| ...K...).4.L.
.z....Oh..1..W..w.{... ...)..?1H.|0jTg.........[...*.....S....cqIo.k.-
(..;......._.....c. ..Q ...P l..I.>......fd/.{R...3kBV.@.... J_....
o...m..#.W'.....4.=...=..........zS...JF.G..y......Y......Ryph.9K9..N7
.Z;...B..`:%.'|..I*[email protected]..^'5..#.:...t<.65G
j..4...Sl..|....p.....rY..q'.z3.P[../.m!...Q.>.l.....R..r*.].h....e
.Li0.HqH.u...>.Ey)HRrz..zt.*...."q..".|mw .......R.l...6......f....
ZX..8...T.$|.*...c_.......&..R.V. .B..e..m..=..........<G..R....h..
...v..e`.}..WFxr..c(.8."6..$.......g..E.e..%.!...U.B.7..?J. ......<<< skipped >>>

GET /cnnnext/dam/assets/150428171541-hydrogen-pace-car-nascar-00001926-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 24568

Cache-Control: max-age=61

Expires: Thu, 30 Apr 2015 07:26:13 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.O.........................!..1..AQa."q....2B.#Rb....3r$CS......%s....
&4ETdt.........................................................!.1A..Q
."a.2q...#3................?.........4.Vc#......z.1..;.05..A8...$..3B.
.P..f...J.....u.O..m..6../.O.u.Ro..?x..A......d.2.jNKi.......=^..!P.V.
<[email protected].%..-).i......".qa7...ha.....Z.G....ZA..H...V....
...(.. 9*...fA..~...b.raL.....T:.P?Z].F.E. !.k.7...:..-../~....>x..
T.......ni.F9.Ou=.g..?...N...IF..<.......K.n....$...C.#.7.*........
[..Dw.}.<.I.Q^.c..z.Ci.V.j.d.rA..,%g.Fi.ItR<=..u...C1T0w..z....p
.T..=..#.....?.VECZ.....Z...fB? 3.(8..Rs...............4.....;..3O.kn.
........q.7..V..X..5.$.T...%.$..t,......w.'.(y..1....V..M.l)'..a^.<
.......K.>(P4....5...q. ...>J..m ..\.......[.H...K.0F....>D.|
...>TXd......L..~`<..u#.T.;..>%&.D.gM-...}..7......"......I&g
t;T.\XB.|>t...h....z...G...BR.Mh.4qh.X...........P...F...61[.z..?..
{.g.H=.iWO..>)7w...P.D0.(..$.}.......FI....F..p....%.......I..P..*i
.'=..PK.:d0....0 ..4g......Uq$....N=(.j^2....%gzZ;....1\u.%d%?..12.H..
O.4.$...y..h%....D)....e...Er$...&......sM.....(..AA.\.......B.2....9 
.0..M.Ry...2 .......'....Il. .'zI*..Ls.s.....vLf..!o/d.&..i.'2..T....|
k...{6.[.Vn.k!..d...H..t.v.@..... ....5.l..../..i \....../rQ.c.)....M)
.....z.?..=.4....>....v....n..7..\f.q.r0FTpH.?Ivj......%."3.-.J<<< skipped >>>

GET /cnnnext/dam/assets/150424094531-mcli-laser-cloud-tease-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 21719

Cache-Control: max-age=109

Expires: Thu, 30 Apr 2015 07:27:02 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.?..........................!1A..Qa.."q.2..#B...R.3Cbr...$...D........
.........................3........................!1..A"2Qa.q......#3.
4B...............?..R@.:$.Rg.u0..x.........hA=...=....B.\...H..l.p.m.'
#*P(Fz IC...="w.g.m.U....?OI..<[..F...`.F.8..6....4-..)E.d4.....8..
.;...@..`F..pK.....e....$.P.B5..,.:.c . ..<[email protected](
.:...E9CC ...z#...O6k...#..=U3..n./..]%.v2.|D^...j...)c...R.wx.......9
.eL...K.L... .;........l]....t...H..M;[email protected]
.....#.1.{.nW..yq;...6.u.[....."..WW.<dg<.Z....]....OK=E9|......
6...sz..}.I$d3sZ.d.O.....G^V.......a7zh.av........R..w..F..#....YT..Y!
...#....B._.q..........#sD8.OL [email protected]..."......
....6.s....vS3o.dY......,.:......;.0u..,......q.4.@4n.\h..*....Q...&i.
..i.=....I...G.([email protected].....;g...@..#k#.:bp.P
v;=...:q....=2..F..........s......0..@'....N.....9Bm...Q.JF.k........K
:.....}..A..F4....!79M.r...p...[.Qc.....uc....T..?..sH.S5L|... &..p..=
.~Q.F........z)..H..HF.2......Z...3..q...{r....~.[..}.2Q...x...$..RO..
....Y*.H.r...........V./uL....<..d....-.n..{I....Z.>X*W.....nk..
..aM...v.....I..........**Wo.....^CU..M..?...iV.I g.......S.<.|..8.
...C..<.....[&..L.Ot..d2H....PX<m.......i..i..O.Q>f.5.>..U
a...q...|.v.>...Or.r.^...9$E....-.7s..=...\..8w)...G-.......\..<<< skipped >>>

GET /cnnnext/dam/assets/120820111022-dollar-bills-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 27038

Cache-Control: max-age=3546

Expires: Thu, 30 Apr 2015 08:24:19 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.H..........................!1.."AQa..2q#...BR...3br...$.L..s..5DSc.
.................................'.....................!1..AQ."2a..qB.
.............?..|.Z..MG<.....'...*p..d...i...v.>....I.... r.G..8
..I.r.A).>...4.. .....NY.-.m. ..vv.......0.....`.R...-. H.U(.!.j..F
..3K.A#'.V....QW..l......\CH<....Z.GB..~....jH...;....R.....EX.`...
n..m......c....FrO.Yw;_..$.sQ.....BG.$.lR.9$...KY.>.P.$....^./Bw{.q
.J<.....Z).P......mV.....s.].B4.l.T.@. T....G.q...........CJ.I..oz.
......./..M.K...0H...S$N[.J...............Mj;.`........B..i..im.)....U
.t.q..$$..T..2..L.iD ...Q;.. u.M...a..F)....\.!...s.=(..............i.
1.....g7.*.yh...E.kI%. .S..&#X.`S....j.......Z&....kqjm.#.5.. y....y..
uwn...ulYq....\Q.#z~Pbk.(............P.G.].w;rqRW..e...Jz&...........5
[.'[email protected]..........]......m..HXR.
y.... .\...pL.PrU.....Q.......$...w.mb.g*H..q..;6..5....RU..9#......1.
h.s.c..V.....4....n6p....B.(`......J.C*<!.$z.......Mz....qM...9#..u
..L.Q.....d..qT..iM_....].1....T....#.....5v)..........U..O.......:..)
(..eh;.NJ.)@K._'$.[A#...=..k.7.;....-..zA.B..H!_J.... .y...S..J.q9...3
.0.}..C...."./...$...K(y..A...).F..j<K'..BzQm......P.yd........pI.I
[email protected]...'q....bA.s...5...?SR.C..x...k....V.$.#....G.g4.5.
....u..*..x.OSXz......n.G.p...%[email protected]....%-.....nx. .I.<<< skipped >>>

GET /cnnnext/dam/assets/150429070324-01-nepal-quake-0429-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 31653

Cache-Control: max-age=6302

Expires: Thu, 30 Apr 2015 09:10:15 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.K.........................!..1A."Qa..q#2....BR....3r.$4b..C....&Ss..%
5c...................................7........................!1.A.Qa.
"2...3q....#$..4Br.5.............?...........c R.........9.k.n..B[..l.
J...w....\.o.v..sLA...S.}....5|\......L(S.=...W..>l....0;VT.Q=} P..
..Z......Ej..G.#.9..i....'.j5....vP.........'..,...<.v.yA.YV..$...2
O.......!...]..WS.=.._....U..R.....Q..4e....!x......\.S.......V,...._.
<3h..f.Z.R.@.].;V.,.VAI#?.).4..)nG3..%...T....lv>...W..t...y.^..
.v.q...Q^........>I..!.l.....O...oJe..:...T.u.r.3.....:..`.^e.R..ty
(%)...V4N....j..Am.....L......L.....B.../0`.:LV....{..m.~...t..8N.y!..
..I.) .....Z._u5...E..c.....o.2.........9b..._ '...5...)...~...r}.2...
[email protected]. [email protected]..)
!...(..M.!d...."..9..-<.qi..8.S.....=.K..Y...x.Y#>.BY..-K*i]A.'o
.K....)...x.v...@*Cp..'8.IH..{uA>.v?J.....\^..|. ....G......}......
.o.)....2-....V.wO..?.3.R.a ..*"...oZ.$.I.., ..V..w.F.sh....G<.. .g
..L....r...T.K`>.....~...B.....8.R..U.`Z..p....y.D..s...J..*Vx.xt".
L..<2..ia.W......Ib:..S.}.....B.T...l.5/.....l......y^u%*-.m...R.%z
j{N......LE.....}....W..5.~..P.koP[.U*e......Rw.t'.n... y.Ry.d..ys..dt
.<[email protected]...{..V.^..fB........".....[.s.x... q..t....].v.....[jZ.KaJ.
.D..ul:......X^.....0T..... ..J..z.pj.S........F0..$.5..4-..._:...<<< skipped >>>

GET /cnnnext/dam/assets/140306150604-russian-owned-hyde-park-story-top.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 93805

Cache-Control: max-age=1488

Expires: Thu, 30 Apr 2015 07:50:01 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive

.....tExif..II*...........?...p...........................;...........
........................i...........%.................<<enter ca
ption here>> on January 19, 2011 in London, England...Canon...Ca
non EOS 5D Mark II....Dan Kitwood.2011 Getty Images.............T.....
......\..."...........'[email protected]...
......................................................................
..................................73..........73..........0100........
......................................................................
......................................................................
......2011:01:19 14:11:54.2011:01:19 14:11:54.........................
........ASCII.........................................................
......................................................................
......................................................................
................................................................U.....
.!9...............R98.........0100....................................
<...........D...(...................L........... .........H.......H
.............JFIF.....H.H......Adobe_CM......Adobe.d..................
......................................................................
.........................................................f....".......
.........?............................................................
..............3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.Td
E..t6..U.e.....u..F'...............Vfv........7GWgw...............

<<< skipped >>>

GET /cnnnext/dam/assets/150306091907-hubble-supernova-explodes-star-nine-billion-years-02-large-169.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/png

Content-Length: 226630

Cache-Control: max-age=1424

Expires: Thu, 30 Apr 2015 07:48:59 GMT

Date: Thu, 30 Apr 2015 07:25:15 GMT

Connection: keep-alive
.PNG........IHDR..............e4... .IDATx.|.i.%.u%v.c{KfVUWw. D.#..L.
I2.......L_$..3........*3.....9.....&.%*.-......s.......XY..%Y2.......
lK.l...l..f5%..,....>b.4VjcKZ....1\.o..j.ZW.5e.w.^klN=......X....U.
Wl]...Y.}s.[,|.o.s.>?.X.N#...........$k.|1..p 5..x..q.....kb<s.w
8~....z.W.........b;...(^p.....s...f.{......3..S1.._....Z.{u.2.}....0.
.F.....3>......6.M.k.........}...S.'.S.b....Q....q.6../...u.lo..R..
......V{{.......^.F...x.f.._'.L..x.ygO..N..........v.....4.k.....{.f..
l...........Y.....Jw.[.y.<.c..._."_.ly..WsW...yng{..y.b.......{....
]gu.x..6....yz.5>Z.G[g.j......Z..../.....>...........\...l/....h
...k?..]....zF.....pF.L6.>.....#.............b...U..k.ug?w.=.......
.f.v...i?..]]....V....{.[x.a...#.....x.Xw;.4....\g.......z.~......{,Y.
...._.p...............fg....vo.-..p.8....lO.[;>..._.OV..7..xc.....l
.a1...3..x.....?..M...v.......}...GX..j.R..M.._X.....f..v.........0u..
.`.#k..K..d..t.N..g.G...m....W.q...>..48.....s..:..9qNf\.g.......`M
..l.v....7...(.p.....].c.YP....2.K.... ....d.....IN<..~n. }.......q
Y....T..e%.x....ck):.k.....gV.3.$y.).(.\...K............q.~.......z..]
.yY%.q_-.e..........z...b.:.!.......x....~u4{......~..l...w..7..=|....
......Y........m*."..g...TU.k.>-...^......N........}..?............
....'...9.........c-zn...rn.......z.o....w\...g..........u.\.$}...*a.5
..0..X@.....).................coB...{,6?Wq..?..U d.J....f\{.X,nBm...,.
.....l..O......M.W...5.....#a..\.l.'.C.rNu0..5Q.N.NM...M..$y..\).0.M.q
T.....mM)6b...(.(..j..4Q.b...??/...!.lh....1,F5.A...x[.q.v....J..(<<< skipped >>>

GET /v4/sof-installer/535559167_198339_B48A115F?action1=xa.geoip&action2=visit&action3=smt.visit.istartsurf&update1=ref,smt&update2=identifier,installer&update3=version,6.6.86.1606&update4=nation,us&update5=language,en HTTP/1.1

Accept: */*

Accept-Encoding: */*

Connection: Keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36

Host: xa.xingcloud.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:02 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"1.00 ms","message":"store 4 action and 5 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Thu, 30 Apr 20
15 07:23:02 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"1.00 ms","message":"store 4 ac
tion and 5 update "}..0......

GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.dlzip1.istartsurf.finish,2 HTTP/1.1

Accept: */*

Accept-Encoding: */*

Connection: Keep-alive

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.65 Safari/537.36

Host: xa.xingcloud.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:04 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.64 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Thu, 30 Apr 20
15 07:23:04 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.64 ms","message":"store 1 ac
tion and 0 update "}..0..

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Vary: Host

X-App-Name: homepage

Cache-Control: no-cache

Content-Type: text/html; charset=utf-8

Date: Thu, 30 Apr 2015 07:25:31 GMT

X-Varnish: 413232522 413223781

Age: 181

Via: 1.1 varnish

X-Cache: HIT

X-API-Version: 5-5

X-PageType: homepage

Connection: close

GET /services/xml/rss/nyt/GlobalHome.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:10 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://rss.nytimes.com/services/xml/rss/nyt/InternationalHome.xml

Content-Length: 273

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://rss.nytimes.com/services/xml/rss/
nyt/InternationalHome.xml">here</a>.</p>.</body>&
lt;/html>...

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: ZeEJNmFg 36TYbtMMRI2apTAYpxz02Ri5ISAeWOzT5Pwb6GZDCGFNmILM37bzTn9nqXXXxVXo4M=

x-amz-request-id: 18C36CFFA51C0A3E

Date: Thu, 30 Apr 2015 07:22:03 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 0-988407/988408

Content-Type: application/octet-stream

Content-Length: 988408

Server: AmazonS3
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
.........P...............`............................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
rc...P............v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:07 GMT

Server: Apache

Set-Cookie: BBC-UID=f595b4e1cdd84d632488f9f1212d626b817727728e88f31913c55b5470493b700Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html); expires=Fri, 29-Apr-16 07:25:07 GMT; path=/; domain=bbc.co.uk;

Set-Cookie: BBC-UID=f595b4e1cdd84d632488f9f1212d626b817727728e88f31913c55b5470493b700Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html); expires=Fri, 29-Apr-16 07:25:07 GMT; path=/; domain=bbc.co.uk;

Last-Modified: Fri, 06 Sep 2013 09:46:13 GMT

Content-Length: 718

Vary: X-CDN

Keep-Alive: timeout=5, max=799

Connection: Keep-Alive

Content-Type: text/plain

User-agent: *.Disallow: /cgi-bin.Disallow: /cgi-perl.Disallow: /lexaur
us.Disallow: /mpapps.Disallow: /mpsearch.Disallow: /mtk.Disallow: /wea
therbeta.Disallow: /weather/hi/about/newsid_7760000/7760846.stm.Disall
ow: /1/hi/help/8594343.stm .Disallow: /2/hi/help/8594343.stm.Disallow:
 /1/hi/help/8594488.stm.Disallow: /2/hi/help/8594488.stm.Disallow: /1/
hi/uk/1494064.stm.Disallow: /1/hi/health/363959.stm.Disallow: /1/hi/he
alth/4749331.stm.Disallow: /1/hi/england/1678616.stm.Disallow: /1/hi/e
ducation/3826037.stm.Disallow: /1/shared/spl/hi/pop_ups/05/uk_should_t
he_uk_vote_on_the_eu_constitution0/html/8.stm.Sitemap: hXXp://news.bbc
.co.uk/weather/sitemap.xml .Sitemap: hXXp://news.bbc.co.uk/weather/sit
emap_mobile.xml ......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:07 GMT

Server: Apache

Location: hXXp://VVV.bbc.co.uk/news/

Cache-Control: max-age=0

Expires: Thu, 30 Apr 2015 07:25:07 GMT

Content-Length: 234

Keep-Alive: timeout=5, max=799

Connection: Keep-Alive

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://VVV.bbc.co.uk/news/">here</
a>.</p>.</body></html>.HTTP/1.1 301 Moved Permane
ntly..Date: Thu, 30 Apr 2015 07:25:07 GMT..Server: Apache..Location: h
ttp://VVV.bbc.co.uk/news/..Cache-Control: max-age=0..Expires: Thu, 30 
Apr 2015 07:25:07 GMT..Content-Length: 234..Keep-Alive: timeout=5, max
=799..Connection: Keep-Alive..Content-Type: text/html; charset=iso-885
9-1..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html
><head>.<title>301 Moved Permanently</title>.<
/head><body>.<h1>Moved Permanently</h1>.<p>
The document has moved <a href="hXXp://VVV.bbc.co.uk/news/">here
</a>.</p>.</body></html>...

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Via: 1.1 C aicache6

Content-Length: 392

X-Aicache-OS: -:9999

Connection: Keep-Alive

Keep-Alive: max=20

Expires: Thu, 30 Apr 2015 07:26:28 GMT

#.# robots.txt.#.# This file is to prevent the crawling and indexing o
f certain parts.# of your site by web crawlers and spiders run by site
s like Yahoo!.# and Google. By telling these "robots" where not to go 
on your site,.# you save bandwidth and server resources..#..Sitemap: h
ttp://VVV.cnbc.com/Sitemap.xml.Sitemap: hXXp://VVV.cnbc.com/sitemap_ne
ws.xml..User-agent: *.Disallow: /preview/.....

GET /id/19746125/device/rss/rss.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:20 GMT

Server: Apache

Keep-Alive: timeout=15, max=94

Content-Type: text/xml;  charset=utf-8

Via: 1.1 C aicache6

Content-Length: 12801

X-Aicache-OS: 10.10.1.21:80

Connection: Keep-Alive

Keep-Alive: max=20

Expires: Thu, 30 Apr 2015 07:25:25 GMT
<?xml version="1.0"?><rss version="2.0" xmlns:atom="hXXp://ww
w.w3.org/2005/Atom" xmlns:metadata="hXXp://VVV.w3.org/Metadata"><
;channel><atom:link href="hXXp://VVV.cnbc.com/id/19746125/device
/rss/rss.xml" rel="self" type="application/rss xml" /><title>
Top News and Analysis (pro)</title><description><![CDAT
A[CNBC Top News and Analysis]]></description><link>http
://VVV.cnbc.com/id/19746125</link><pubDate>Fri, 04 Jan 201
3 21:47 GMT</pubDate><lastBuildDate>Fri, 04 Jan 2013 21:47
 GMT</lastBuildDate><language>en-us</language><tt
l>60</ttl><item><title>It's a bull market, but ne
utrality is best: Gartman</title><description><![CDATA[
influential investor Dennis Gartman told CNBC Thursday that he's 
still optimistic about equities ... to some extent.]]></descript
ion><link>hXXp://VVV.cnbc.com/id/102634283</link><pu
bDate>Thu, 30 Apr 2015 06:30 GMT</pubDate><guid isPermaLin
k="false">guid_102634283</guid><metadata:type>cnbcnewss
tory</metadata:type><metadata:id>102634283</metadata:id
> </item>  <item><title>Meet the next ruler of oi
l markets</title><description><![CDATA[There's no 
one individual whose comments carry more weight in the global oil mark
et than the Saudi oil minister.]]></description><link>h
ttp://VVV.cnbc.com/id/102632475</link><pubDate>Wed, 29<<< skipped >>>

GET /id/19746125/device/rss/rss.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:20 GMT

Server: Apache

Keep-Alive: timeout=15, max=94

Content-Type: text/xml;  charset=utf-8

Via: 1.1 C aicache6

Content-Length: 12801

X-Aicache-OS: 10.10.1.21:80

Connection: Keep-Alive

Keep-Alive: max=20

Expires: Thu, 30 Apr 2015 07:25:25 GMT
<?xml version="1.0"?><rss version="2.0" xmlns:atom="hXXp://ww
w.w3.org/2005/Atom" xmlns:metadata="hXXp://VVV.w3.org/Metadata"><
;channel><atom:link href="hXXp://VVV.cnbc.com/id/19746125/device
/rss/rss.xml" rel="self" type="application/rss xml" /><title>
Top News and Analysis (pro)</title><description><![CDAT
A[CNBC Top News and Analysis]]></description><link>http
://VVV.cnbc.com/id/19746125</link><pubDate>Fri, 04 Jan 201
3 21:47 GMT</pubDate><lastBuildDate>Fri, 04 Jan 2013 21:47
 GMT</lastBuildDate><language>en-us</language><tt
l>60</ttl><item><title>It's a bull market, but ne
utrality is best: Gartman</title><description><![CDATA[
influential investor Dennis Gartman told CNBC Thursday that he's 
still optimistic about equities ... to some extent.]]></descript
ion><link>hXXp://VVV.cnbc.com/id/102634283</link><pu
bDate>Thu, 30 Apr 2015 06:30 GMT</pubDate><guid isPermaLin
k="false">guid_102634283</guid><metadata:type>cnbcnewss
tory</metadata:type><metadata:id>102634283</metadata:id
> </item>  <item><title>Meet the next ruler of oi
l markets</title><description><![CDATA[There's no 
one individual whose comments carry more weight in the global oil mark
et than the Saudi oil minister.]]></description><link>h
ttp://VVV.cnbc.com/id/102632475</link><pubDate>Wed, 29<<< skipped >>>

HEAD /id/19746125 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Date: Thu, 30 Apr 2015 07:25:21 GMT

Server: Apache

Vary: User-Agent

Via: 1.1 aicache6

Content-Length: -1

X-Aicache-OS: 10.10.1.22:80

Connection: close

HEAD /?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: international.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Vary: Host

X-App-Name: homepage

Cache-Control: no-cache

Content-Type: text/html; charset=utf-8

Date: Thu, 30 Apr 2015 07:25:11 GMT

X-Varnish: 413231563 413047154

Age: 3745

Via: 1.1 varnish

X-Cache: HIT

X-API-Version: 5-5

X-PageType: homepage

Connection: close

GET /tableau/tableau.html?device=desktop&lang=uk&target=blank&preset=ua&service-id=www HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:02 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Wed, 25 Feb 2015 17:26:15 GMT

ETag: W/"54ee05b7-a01a"

Expires: Thu, 30 Apr 2015 10:20:35 GMT

Cache-Control: max-age=10800

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
3403.............}.s..u....m.\..^$A.1...f4..{2...-kU...........X5..6..
f...S.n.o.ak?l..{.^..T.....?..s....!..........{.=.s.%t...'......2H..[.
.S..^....;.(9.E*.}......z.K.5..I0u.?.}......^.......Q..RW}o...g..-{..^
..h...5... ........K%..i.......~...q.V.t2..A4..Z.z....\....8.z~e."....
.3M..q.'j.;[email protected].
.....kh.(H./..'X.?x ...........^..0.;_.u....,.....`..N..w..y:.....?8..
\.e...O........Q....P..z.....<.:jI......x.l..|.%_..f..i....08.u.A..
...F.9GR<H.t...Q.......d...@P?VFQ.L..tVO.B..2._.rt..A^.jw,,.;...`t.
.U...i....ZW.L..7g..N.4...:..."...kg....H%...?M........[...u.Qm._)C...
............4............*<.%KL'..d`a..(J..4...........E.I=i.....\ 
...\VIvVt.."....spa$....n.....7J.2i.....<Hk\u..C..J.A.n.p%......._.
T..z...J.....nm...~C..Vi4..j....0.......vc._.u....q$i..@ ...v(. ....y!
1.i`e.B.%M..9./...e.$.8~.<...r.f.4.Zg..I._..l..~/.=F..9gpN.0...1y.c
.4H...x.C...L.........v2=.z9...Cf..}..E...Q.n...lo.x.....G........"..f
......er.oG/.M2..&......a..... ......;.w..X.J..|d..i......6.M.......=]
..M.hO.......}..Jyd55.]o;.A.yn6..n.....<..`Y.:..s..Z.6.h.........c.
.M..7...`...,...S7[...;..YV......r.Wk..^3t....f...h....t.5...a...5tQ..
.yC_C..m9VK"cP'........A...............k...lA..C_0. ...pzz..[.....jM.Y
k....A....G....hv..h.....jlp...4x...!.........Rvm.na....64..-G3u...'5.
.fn...z.....X..7[4Q....f.S../...hts..p6.7.5..-[#..^S...l.....71...L...
[..".......j.vMZ.f[u._P.64.O.B.........[Z.........-t4.|.....K.:->=.
....h.D|p...Dj..UaV{.'ik.q....m...%[email protected].!-B.<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:03 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Content-Encoding: gzip

83..............(.......HML..).,.I.310Q../Qp./.K..........&..T*$.'....
.*.gd..*...S.JR..l2..M....C.Av..Ayy..y...z.z...J.A...P.............0..
....

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:03 GMT

Content-Type: text/html

Content-Length: 185

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.7.10</center>..</body>..</html>..HTTP/
1.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Thu, 30 Apr 2015
 07:25:03 GMT..Content-Type: text/html..Content-Length: 185..Connectio
n: keep-alive..Location: hXXp://api.yandex.ru/jslibs..Expires: Thu, 31
 Dec 2037 23:55:55 GMT..Cache-Control: max-age=315360000..Cache-Contro
l: public..Access-Control-Allow-Origin: *..<html>..<head>&
lt;title>301 Moved Permanently</title></head>..<body
 bgcolor="white">..<center><h1>301 Moved Permanently<
;/h1></center>..<hr><center>nginx/1.7.10</cent
er>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:03 GMT

Content-Type: text/html

Content-Length: 185

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.7.10</center>..</body>..</html>..HTTP/
1.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Thu, 30 Apr 2015
 07:25:03 GMT..Content-Type: text/html..Content-Length: 185..Connectio
n: keep-alive..Location: hXXp://api.yandex.ru/jslibs..Expires: Thu, 31
 Dec 2037 23:55:55 GMT..Cache-Control: max-age=315360000..Cache-Contro
l: public..Access-Control-Allow-Origin: *..<html>..<head>&
lt;title>301 Moved Permanently</title></head>..<body
 bgcolor="white">..<center><h1>301 Moved Permanently<
;/h1></center>..<hr><center>nginx/1.7.10</cent
er>..</body>..</html>......


GET /morda-logo/i/favicon_islands.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: image/x-icon

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Tue, 28 Apr 2015 18:44:47 GMT

ETag: W/"553fd51f-a25e"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
141d.............].t.......m%[email protected]].Z K@*...5.d....Y..A............m..z
..{O[....."...   ..M..,.LH&3I&..}....M.w.~..d..=.w2..{.....7w..A..t ..
...}Q.[.........%?@h3y......!.I......#..3......#..$B.....<.<....
.~B0..Q....iD.HH..4_w{.....K.$.G..H..S..MX/6n....I .......&,aM../.k.~.
.g...KM&.!.|F......%..{..w.......=P....[.....g.?....il.P.g..J....x....
|..g.?....i8.^... ...{S....v......E..mi.4..l..?h....B~6.Pe.......->
........w......!?./.b.B...F.Z[..Co...O2..C~:^...._$y..F...a......O..~.
.t<.^]}..K$....hk.c..v...W..8.$|..t<.....I.8......~L...F<bp9.
t....R$.s8..$.....H.......7.\@.. ...........jjjN....G$.....@}...L.ou.v
.4..?..N......b.IH.[.m?..O.....;......v....7...9....!.[...<.Y.v....
S#..(*)- .Fp.O...h.....C.#..#.....r......n.>..Z......J.L.>%3.'..
...'uB........m..~...-[d..|..I....W.}Z..Q......PV^..d.%?...p.d..>6.
...wlsp.=.....}.(?....J..t.)..l.6.....E.*.f.y"w.(.....p..G..,...5.....
[email protected].\......{.J..e.~...~....J....|..[..s{.b....C.1....Y.
 h.deot....o...}...@??.7...o.c.cG..g.D...4.6....b..j%.X......|O..nQ>
;/=.}..e....Tv..8z.-........9N......8"..."..6...i.}.....Y..$.....x....
.8J~J.......zA...6........|.....i"o...%..(.../.0.J..X...;E.i....m...W.
..v...t...e(..........{g#f.%.....k...i.Wxuu.q...(.0>...a..,.9>..
.c!....}......'4.X.`^;.`../.......C_5.E6.WC...$...C.r.7.....p._.be..N{
.....4G...gM...........x........./..B.....x..dpM..n....:R.. .]..9.5.~w
....OH<....n...g..u E=.......F.f...H`..n.-$.......K.9..IV.....V..{.
...~....zdq...U.q.....v..k....^..f<..I..b.U.'.W..(3.......t$...<<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 185

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *

HTTP/1.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Thu, 30 Apr
 2015 07:25:08 GMT..Content-Type: text/html..Content-Length: 185..Conn
ection: keep-alive..Location: hXXp://api.yandex.ru/jslibs..Expires: Th
u, 31 Dec 2037 23:55:55 GMT..Cache-Control: max-age=315360000..Cache-C
ontrol: public..Access-Control-Allow-Origin: *......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yastatic.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 185

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx/1.7.10</center>..</body>..</html>..HTTP/
1.1 301 Moved Permanently..Server: nginx/1.6.2..Date: Thu, 30 Apr 2015
 07:25:08 GMT..Content-Type: text/html..Content-Length: 185..Connectio
n: keep-alive..Location: hXXp://api.yandex.ru/jslibs..Expires: Thu, 31
 Dec 2037 23:55:55 GMT..Cache-Control: max-age=315360000..Cache-Contro
l: public..Access-Control-Allow-Origin: *..<html>..<head>&
lt;title>301 Moved Permanently</title></head>..<body
 bgcolor="white">..<center><h1>301 Moved Permanently<
;/h1></center>..<hr><center>nginx/1.7.10</cent
er>..</body>..</html>....

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=167832-335664

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:21:59 GMT

Content-Type: application/octet-stream

Content-Length: 167833

Last-Modified: Thu, 30 Apr 2015 03:13:41 GMT

Connection: keep-alive

Expires: Sun, 03 May 2015 07:21:59 GMT

Cache-Control: max-age=259200

Content-Range: bytes 167832-335664/671328
...}..u..x&.........._.....].V.u...u..[&..........^........u......Y...
.#.....V.;.t.3.^]...U...}..u...&..........^.....]..E...t.j..p..0.u....
.....].j.h..H..9z...e..3..u........u...%.........l^...........]....t..
[email protected]...@u..}..G.=....v....}.....u.V.....Y.e..V.....V.....YY.f..
....N....t.....F.j._.-.E...u W..#..Y..u.....H..M.....N..............N.
.~..F....f...E...........E...y....u..{...Y...U...=..H..u..lx...u...v..
h......s..YY][email protected]
..u..6.<.@[email protected][email protected][email protected][email protected]....
u.j..S...Y.......u.j..B...Y.3....u........y.j...u..Y..TpG....I........
.H........y.j...u..Y.......y.j..~u..Yj..Us..Y;.t.P.ku..Y.R....E..t...M
...j.YQPVh..@..|....E.9u.u.P..t....u.....E......M.PQ.....YY..e..E..E..
}..u.P..t....t...E......E...w...............U.... .E.VWj.Y..vG..}....E
..E._.E.^[email protected]$.......t$.......
tN......u........$......$..........~.....3.........t..A...t2..t$.....t
......t....A..L$. ...A..L$. ...A..L$. ...A..L$. .......U..WV.u..M..}..
.....;.v.;.............r..=..I..t.WV......;.^_u...I........u..........
r)...$...B..}..}..E.F.0.E...;_.w.;.v..Rp....k...E._^[....U...E.V.u....
.w.........F...w..........^]...U....w............;[email protected].@].3.]...
U..V.zw...u.;.....u..jw...N.......^]..Yw...........H.;.t....x..u.^]..o
...N..H.....U......T.H..e...M.3..M..E..E..E..E.@.E...B..M..E.d......E.
.E.d......u.Q.u..*......E.d.........Pd.5.....D$. d$.SVW.(...T.H.3.P.u.
.E......E.d......Pd.5.....D$. d$.SVW.(...T.H.3.P.e..u..E......E.d.<<< skipped >>>

GET /?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: international.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Vary: Host

X-App-Name: homepage

Cache-Control: no-cache

Content-Type: text/html; charset=utf-8

Date: Thu, 30 Apr 2015 07:25:11 GMT

X-Varnish: 609637631 609453198

Age: 3746

Via: 1.1 varnish

X-Cache: HIT

X-API-Version: 5-5

X-PageType: homepage

Connection: close

Content-Encoding: gzip

Transfer-Encoding: chunked
3A9F.............}.r......q.!..#.m....(..l.i...IY..P8.@.(.P.S.)ZVD.M..
...D.<..OD.u.I..<G..fVU.6..m..]....?3.=.\k........=6.......-..=b
.....Xs...7.z......_.c.w.{9.....A..s=.}....m..l7.....;..f........cv(..
....a......&a8...B.;..l2....xN...[.`".| .P....p.....I.%L..u.......E.x'
D...r...c.H0.......G..!E...9..O..@t".p.......#./&.....G..d..T..bm_.K..
.. ..x.3...);...`C..n."dq....9t?.Y./.}.....u..x....;@...67......p,....
..J9.....|{...f&.r...n..W\....mw.].^..^.........i3..O...OU.bo.........
p.c....<.......... .3o...>..3......>=w.....0.......|R...J....
..s_..O5x.z;b.S..'97?..TU...x.."s{{D.7b&!.:...|......so7,8.}8y.}..&.{.
..Lp....O..*...[.%.C...x..`W.o~t.>...>..gN<Nj...`A~.........A
............Dog...].f#..b..OI.\...}.B....c.C...P.G.........m..........
.}.....S;...A.C....;...?.....W..`g.)-.O..:(f.\.?K..........{An......n@
..........$..]^.y...P..O.2...^N1.b.............X.d....].H...GS.pssS..S
....a..yh.FiS.T.|.........*........O.R..v.....T8.{..Dx.O..-._....s|8..
.D....DA.M[a...($ Tk...,./....(.v. th.....=.=..........1.!.%...3..}...
...7....N../..*y...\....OI.$.u2...2....Ry%...\......3Q*..z..W..b...XN}
8{?.y.T'_..`3.ob.X.-...r"....};.p.;_....r.....y..5.....1vZ.......].ljH
A.....v..L.P.Q.....:..X'9..a...d..tg..~@...}.....!...,.&....HM....2..R
w....|X.b......y@...[%p...N.ZQ.....~.>Zo.........k.._r..m...=..i.8.
..Vi......mq.F.^..)....SL}.....aS.}....X.p-....\..C......s........(..{
.....=i...L..%..@...^..\....Y.>.>}:..B...l~.l8F.M.&..u..H...#L."
.P*............D.../n!....?.....1.^.. ....)./s..9.%......!"....s.9<<< skipped >>>

GET /pinger?event_type=offer_accepted&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=istartsurf&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=2&index_in_screen=1&index_in_session=2&0.3654363112618356 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:22:31 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Thu, 30 Apr 2015 07:22:31 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

HEAD /US/index.html?eref=rss_us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Server: Varnish

Retry-After: 0

Content-Length: 0

Location: hXXp://edition.cnn.com/US/index.html?eref=rss_us

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:17 GMT

Via: 1.1 varnish

Connection: close

X-Served-By: cache-fra1227-FRA

X-Cache: MISS

X-Cache-Hits: 0

GET /partner/gim394750002/release/live/partner_manifest.xml HTTP/1.1

User-Agent: Genieo

Host: download.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: PYVVJue36gfEBbt DllE6akgAxe0uymqCqX1oA6Fp3Vn97kis1Gz6TV7vlqgwIDl

x-amz-request-id: 5A8A8C64AC18A469

Date: Thu, 30 Apr 2015 07:23:40 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:45 GMT

ETag: "53b4c24db1dafc7e0844c8b6c2b9b8a6"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 550

Server: AmazonS3
<manifest version="1">.    <file unique_name="gim394750002" p
ath="\genieo_temp\genieo_setup.gen" url="hXXp://download.genieo.com/pa
rtner/gim394750002/release/r16741/genieo_setup.gen" version="1.0.400" 
revision="16741" md5="78b9f8e478525a7f2b3734230010b4cc">.        &l
t;action type="save" timeout="600"/>.        <action type="run"/
>.    </file>.    <updater_manifest_link url="hXXp://downl
oad.genieo.com/core/release/r16741/updater_manifest.xml"/>.    <
core_manifest_link url="hXXp://download.genieo.com/core/release/r16741
/manifest.xml"/>.</manifest>.....


GET /partner/gim394750002/release/r16741/genieo_setup.gen HTTP/1.1

User-Agent: Genieo

Host: download.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: RKE0ZSufBJGoZQ2YTI/YhLCal/oalrEKndsqF3gDSZ4N4gtlPrVIQu98rnB8Mpj4

x-amz-request-id: 95023FF529EE5B01

Date: Thu, 30 Apr 2015 07:23:41 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:30 GMT

ETag: "78b9f8e478525a7f2b3734230010b4cc"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 477720

Server: AmazonS3
bbbbaaaarrrrbbbbaaaarrrr(6.aflyaalya..ya.lyaelya%lyaelyaelyaelyaelyael
yaelyaelyaelya.lyaks.oe.p.D.x-.M-...Y.......Y......L..E...E..A!#*A....
KatkAlyaelyaT..[....................................D...............7.
......elyaelyaelyaelyaelyaelya5)ya)m|a..c*elyaelya.lv`nm.ae0yae.xaehya
Y^yae|yae.yael9ae|yaenyaalyaclyaalyaelyaelzaehya..~agly.eliae|yaeliae|
yaelyaulyaelyaelya..ya.lyae.{a.tyaelyaelya.T~a.}yaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyae.ya.nyaelyaelyaelyaelyaelyaelyaK.
...lya?6yae|yae0yaehyaelyaelyaelyaEly.K.....ya.}yae.yae~yae.yaelyaelya
elya%ly!K....lya..xae.yaehyae.yaelyaelyaelya%ly.K.....yae.yae,{aelyael
yaelyaelyaelya.ly.K....lya.tyae.{aevyae.yaelyaelyaelya%ly!elyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyael
yaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyael
yaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya0.
...0..ic.J..u'.)m.h.1yu.t.[.y.-h)..|..i..i.y1.%ll..,y\.lya.g..p..!e.i.
f.<..)r.c*C...@<..g...t.....e.;a.)<ae;.t..9a.2kae...Ugya6..re
l).D$ya.Y.ae.....ya......jae.j....rel.7.y..%l...k....saeU$.j..nel/.. y
a..v..cya2:.D'ly....kel*.?.ya...$m<..ehya3.l..,y...Z. dB..IAy.M/.. 
ya^..o..U1..q..(ya.e.$.myae.fX8.v..}ya.l}ae;..p..!e..pel....kae.4i4:.a
aly25?.t..9a..v..}ya.cvae....~ya5:.\$ly......]..wly...<...~7.... d.
.Zly7...!e...m:.f!ly.r.y.'l/../ya5.._el).o(ya3.3'el...,y..dz.T:..#<<< skipped >>>

GET /core/release/r16741/updater_manifest.xml HTTP/1.1

User-Agent: Genieo

Host: download.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: b2VS7QTnpxD3A0Rr HPpyEXTJU3rTUzzqU9dmhgyUya1R6Upw6SCaQNilEyEqVFR

x-amz-request-id: FED86635AFDD5103

Date: Thu, 30 Apr 2015 07:23:45 GMT

Last-Modified: Mon, 20 Oct 2014 09:50:50 GMT

ETag: "033e90ffb050eb32705a3c56d2bc65d6"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 297

Server: AmazonS3
<manifest version="1">.    <file unique_name="updater" path="
\genieo_temp\InstallGenieo.gen" url="hXXp://download.genieo.com/core/r
elease/r16741/InstallGenieo.gen" version="2.7.688" revision="16741">
;.        <action type="save" timeout="120"/>.        <action
 type="run"/>.    </file>.</manifest>.HTTP/1.1 200 OK..
x-amz-id-2: b2VS7QTnpxD3A0Rr HPpyEXTJU3rTUzzqU9dmhgyUya1R6Upw6SCaQNilE
yEqVFR..x-amz-request-id: FED86635AFDD5103..Date: Thu, 30 Apr 2015 07:
23:45 GMT..Last-Modified: Mon, 20 Oct 2014 09:50:50 GMT..ETag: "033e90
ffb050eb32705a3c56d2bc65d6"..Accept-Ranges: bytes..Content-Type: appli
cation/octet-stream..Content-Length: 297..Server: AmazonS3..<manife
st version="1">.    <file unique_name="updater" path="\genieo_te
mp\InstallGenieo.gen" url="hXXp://download.genieo.com/core/release/r16
741/InstallGenieo.gen" version="2.7.688" revision="16741">.        
<action type="save" timeout="120"/>.        <action type="run
"/>.    </file>.</manifest>.....


GET /core/release/r16741/manifest.xml HTTP/1.1

User-Agent: Genieo

Host: download.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: x0EQnueyPtDiWrfSR078azZvsIVL9P8oA3baFy6V5KmyNsmjZJS3GV/BaSUTZjq1

x-amz-request-id: 29CF1B07FDEA9FDF

Date: Thu, 30 Apr 2015 07:23:46 GMT

Last-Modified: Mon, 20 Oct 2014 09:50:36 GMT

ETag: "fd1e7c4b8f0e6b33f94043e682a1a802"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 644

Server: AmazonS3
<manifest version="1">.    <file unique_name="trayapp" path="
\genieo_temp\trayapp_setup.gen" url="hXXp://download.genieo.com/core/r
elease/r16741/trayapp_setup.gen" version="2.7.688" revision="16741" md
5="6dd988fd9f0ac122be346470a6a76c20">.        <action type="save
" timeout="480"/>.        <action type="run"/>.    </file&
gt;..    <file unique_name="framework" path="\genieo_temp\framework
_setup.gen" url="hXXp://download.genieo.com/core/release/r16741/framew
ork_setup.gen" version="2.7.688" revision="16741" md5="34c98936c21425a
be1a3587cfd4c47e5">.        <action type="save" timeout="600"/&g
t;.        <action type="run"/>.    </file>.</manifest&
gt;.....


GET /core/release/r16741/trayapp_setup.gen HTTP/1.1

User-Agent: Genieo

Host: download.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

x-amz-id-2: Q336Vtqhymv7EaItKEOcplTSW1G1YXNS1DKbonzDPW7fPE4AESoOAqOVyi9Qyrt5

x-amz-request-id: C58643AF6B246BBD

Date: Thu, 30 Apr 2015 07:23:46 GMT

Last-Modified: Mon, 20 Oct 2014 09:50:39 GMT

ETag: "6dd988fd9f0ac122be346470a6a76c20"

Accept-Ranges: bytes

Content-Type: application/octet-stream

Content-Length: 1738176

Server: AmazonS3
bbbbaaaarrrrbbbbaaaarrrr(6.aflyaalya..ya.lyaelya%lyaelyaelyaelyaelyael
yaelyaelyaelya.lyaks.oe.p.D.x-.M-...Y.......Y......L..E...E..A!#*A....
KatkAlyaelyaT..[....................................D...............7.
......elyaelyaelyaelyaelyaelya5)ya)m|a..c*elyaelya.lv`nm.ae0yae.xaehya
Y^yae|yae.yael9ae|yaenyaalyaclyaalyaelyae.{aehyaw.cagly.eliae|yaeliae|
yaelyaulyaelyaelya..ya.lyae.{a.`yaelyaelya-.ca.}yaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyae.ya.nyaelyaelyaelyaelyaelyaelyaK.
...lya?6yae|yae0yaehyaelyaelyaelyaEly.K.....ya.}yae.yae~yae.yaelyaelya
elya%ly!K....lya..xae.yaehyae.yaelyaelyaelya%ly.K.....yae.yae,{aelyael
yaelyaelyaelya.ly.K....lya.`yae.{aebyae.yaelyaelyaelya%ly!elyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyael
yaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyael
yaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya
elyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelyaelya0.
...0..ic.J..u'.)m.h.1yu.t.[.y.-h)..|..i..i.y1.%l.#dly23.L.[.y. ..1..q.
p .!e...e.<m.).1..q.p<.!e......a.q=.%l..elyn.* n.:/n.9...G4.j..b
..4q...R...n.*(n..v. 9v.(.z......c.71c.4...n.*)n.)ib......qn..r..).1.!
..p$.!e.<.a.<u5.<.5..m.y-.%l..q... .}X..v.......!.....Q.l-.,y
...<u.9..i.x6.).qely. .qael.t5.9a..!6.y-.%l..q.L9.,y6...$i.<..Lq
ae<....O#e;.t=.9a..u6....q... .)..d.t9.9a:2J.>..qe.5Ea.._'l..6..
yaly72.-cm..c.#..d_.ZP.G#e.;....yaly.!mq.m..c.o>.{..e.e..*...E.<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=8913819001430378702

Cookie2: $Version=1


HTTP/1.1 200 Ok

Server: nginx

Date: Thu, 30 Apr 2015 07:25:03 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Cache-Control: no-cache,no-store,max-age=0,must-revalidate

Expires: Thu, 30 Apr 2015 07:25:03 GMT

Last-Modified: Thu, 30 Apr 2015 07:25:03 GMT

Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' hXXps://yastatic.net *.yandex.ru yandex.ru *.yandex.net hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.yandex.net yandex.st yastatic.net *.yastatic.net ws://portal-xiva.yandex.net wss://portal-xiva.yandex.net wss://push.yandex.ru; img-src data: 'self' hXXps://yastatic.net *.yandex.ru yandex.ru *.tns-counter.ru *.gemius.pl hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.tns-counter.ru hXXps://*.gemius.pl yandex.st *.yandex.net yastatic.net *.yastatic.net; report-uri hXXp://VVV.yandex.ru/log/csp?from=yaru.ru&showid=22886.16059.1430378703.40978&h=i27&yu=8913819001430378702;

P3P: policyref="/w3c/p3p.xml", CP="NON DSP ADM DEV PSD IVDo OUR IND STP PHY PRE NAV UNI"

X-Frame-Options: DENY

X-XRDS-Location: hXXp://openid.yandex.ru/server_xrds/

Content-Encoding: gzip
e8d.............:ks........X...,..@_..SM......U.Y.Kr-<...(F.L.~..N.
[email protected].$..v........=.].h...'.~.....(..._..1...v.{oy/N..
.s.....fBC.,.p.zi|.'...!...b).J...M.....l$.....p.D...G.....9a.w)...o..
...$.cA.!A......C.'......*B......._.......#W.V.=...W.1Y...F.r.....'.{.
..}..C._......qHl........#F..r.)....;1.n....a2L\.V..,...o...q<D....
P...$...... q.`?......W..a?..C..ae..V....b,.}..^.@}`$.p..N.S.e<4...
....../....k..j..RR_.d<u.....a....W?......5.'H......:r..UXs..?**8_.
.I.g.....u........%Tm..v.0....~.y..Z..(...p..y:.3....C....,d...k......
..T...4..".....(...,U....d..q..$..........kQ.&(r............K..?..o...
P...A..r.........[.rbp../P..3...d...^..i.....$$..aD.,...1....8.)?O.c..
..s^.BS.D..b.......R=O./.........AxC.WT<.>._.D..Xg..E..5$...y...
1.$,z....A..?d....$rJ.B..Uq..#.."..rpi..B........x(F.....]Z...:..Q..&l
t;r!...e.6..K.....iu.bD..i.^a..~<...?"..S,....d._..h...R.q*C.#.$...
x..0.."ib6<...dB.1..^.G..G.6.@......:\.!.t....=.e=....pt......c....
a<...~|..............._....C{..]........r.4.L...7..o!@L$]j@!hk3H.
...5.....HNoh...^.eF2..8..m..H..;z.9g.b!m#.>K...g........F.3.q..2.U
^.j./.../.....w-...%..,wqzrF.K......2.q.fm{;.*-..V.([email protected].
..j.'X......w..&..CT..............E.q..q.dD....u..........f.^w%..H....
...O^.<..c._..7T..e...}.....hg.,lq ........,.9.O...y....%..v.......
`.j.k5..:..;5.=..4..<J..e...l.Q.B.....j.&_.3....Q...A.......F|."...
.X...\5.E.....&B. .........4...XQ.Y....3#...>...,I.@&...\.6....Sh..
.Y.'*s...,J..Z...5C ...B.T....\.a$...dm.k.dT[.....-,........O..7.&<<< skipped >>>

GET /monetization.gif?event=3&ibic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&campaign=000820&country=ua&app=65743&os=7(64bit)&defbro=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&starttime=1430378605&asw=0_1073750533_-2147483136_32768&browser=ff&rnd=1430378605 HTTP/1.1

Host: logs.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:23:27 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1389114507"

Last-Modified: Tue, 07 Jan 2014 17:08:27 GMT

Cache-Control: max-age=86400

Content-Length: 35

Content-Type: image/gif

X-HW: 1430378608.dop002.am4.t,1430378607.cds058.am4.c

GIF89a.............,...........D..;..

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Cache-Control: private

Content-Type: text/html; charset=UTF-8

Location: hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=y9hBVeuACdfANPvFgPgJ

Content-Length: 260

Date: Thu, 30 Apr 2015 07:24:59 GMT

Server: GFE/2.0

Alternate-Protocol: 80:quic,p=1
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>302 Moved</TITLE></HE
AD><BODY>.<H1>302 Moved</H1>.The document has mov
ed.<A HREF="hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=y9hBVeuACdfA
NPvFgPgJ">here</A>...</BODY></HTML>..HTTP/1.1 302
 Found..Cache-Control: private..Content-Type: text/html; charset=UTF-8
..Location: hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=y9hBVeuACdfANPvFgPg
J..Content-Length: 260..Date: Thu, 30 Apr 2015 07:24:59 GMT..Server: G
FE/2.0..Alternate-Protocol: 80:quic,p=1..<HTML><HEAD><m
eta http-equiv="content-type" content="text/html;charset=utf-8">.&l
t;TITLE>302 Moved</TITLE></HEAD><BODY>.<H1>
302 Moved</H1>.The document has moved.<A HREF="hXXp://VVV.goo
gle.com.ua/?gfe_rd=cr&ei=y9hBVeuACdfANPvFgPgJ">here</A>..
.</BODY></HTML>......


GET /images/icons/product/chrome-32.png HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: image/png

Last-Modified: Mon, 06 Feb 2012 23:52:59 GMT

Date: Thu, 30 Apr 2015 07:25:08 GMT

Expires: Thu, 30 Apr 2015 07:25:08 GMT

Cache-Control: private, max-age=31536000

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 1310

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=1
.PNG........IHDR... ... .....D......jPLTE...3.?..(..!...L.IB.D?.C.ZL.S
G.. .KA.A:."'."'..'=.C9.B.A:.73..$........(L.IE.F.]N.UH3.?.109.B..%.73
..&.'*.. ..(L.IB.D.PD3.?.Q!.KA........(L.IE.F.gV.]N3.?9.B..... ..&..(L
.IH.G.kYB.D.bRm.:....KA.<7."'L.I...H.GB...KA.<7.'*.10.. ..$j....
.c..J.H...Z..E.FQ...kYE.FM...gVB.DK...bRF......]N.ZL<..6..6...UH.SG
.PD1{.....A:....73...."'.!$..!.21......p..?.Ck...`b...=.C.......XX9.B.
..`..J.C.........-y.,x.U..6s.)u.,s....!m.......u.r...z....'v.... ...[.
?.ko..............'...l.i..&..s..d...A.... ..Q|..x..f.f..(........,..C
.RA..7.eRi.`...o.4X.A...Yr0.I).H#.CC..\"p.....HKn.;r_,.W-....>@.c..
F [email protected].$".%...4....&.......L.....E...BtRNS..............UUU
UUUUwwwwwVVV.....................................;..X...!IDATx^..Sc.Q.
.....Mi#.....m.....m... 3....{.=......9.wj.Z..Ms....[.......l.{.....S.
1^..n...n....O.......x=....e...A.(....t....[...8.(......!.E..IK..{...0
.........2.!.E8@....[..'|.....}...\............D...a8.f!..t.8.n.hk.h.;
..........|...........4.k....lG...?._V...Ry.......@..._..-...T.1......
.G/ [email protected]:.......Y...7.{..s9!....-....,...........>./d.`.
......C..%....<.MaqNV............:..}.......\.v?9..[.N.t.......[.%.
..]j.....7.P*...a.n.QMu......I.4...F...(....<)Y lX.w...x....$).,".4
9#..SS.....X.u"..! .....W.XLr.}.P...y.3.o._..n&...?............IEND.B`
.....
<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Cache-Control: private

Content-Type: text/html; charset=UTF-8

Location: hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=5thBVbSuKNfANPvFgPgJ

Content-Length: 260

Date: Thu, 30 Apr 2015 07:25:26 GMT

Server: GFE/2.0

Alternate-Protocol: 80:quic,p=1
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>302 Moved</TITLE></HE
AD><BODY>.<H1>302 Moved</H1>.The document has mov
ed.<A HREF="hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=5thBVbSuKNfA
NPvFgPgJ">here</A>...</BODY></HTML>..HTTP/1.1 302
 Found..Cache-Control: private..Content-Type: text/html; charset=UTF-8
..Location: hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=5thBVbSuKNfANPvFgPg
J..Content-Length: 260..Date: Thu, 30 Apr 2015 07:25:26 GMT..Server: G
FE/2.0..Alternate-Protocol: 80:quic,p=1..<HTML><HEAD><m
eta http-equiv="content-type" content="text/html;charset=utf-8">.&l
t;TITLE>302 Moved</TITLE></HEAD><BODY>.<H1>
302 Moved</H1>.The document has moved.<A HREF="hXXp://VVV.goo
gle.com.ua/?gfe_rd=cr&ei=5thBVbSuKNfANPvFgPgJ">here</A>..
.</BODY></HTML>....

GET /webplayer/appshat/config.json HTTP/1.1

Accept: */*

If-Modified-Since: Sat, 1 Jan 2000 00:00:00 GMT

Cache-Control: max-age=0

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.bigspeedpro.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: application/json

Content-Length: 778

Last-Modified: Mon, 27 Jan 2014 15:16:30 GMT

Connection: close

ETag: "52e6784e-30a"

Accept-Ranges: bytes

{.."group-name": "AppsHat",.."program-name": "AppsHat",.."about-text":
 "Apps Hat\n(c) 2013 Somoto Ltd. All rights reserved\n\nTerms and Cond
itions:\nhXXp://VVV.appshat.com/eula/ahd\n\nPrivacy Policy:\nhXXp://ww
w.appshat.com/privacy/ahd",.."title-icon": "hXXp://VVV.appshat.com/ima
ges/16x16.ico",.."tray-icon": "hXXp://VVV.appshat.com/images/16x16.ico
",.."shortcut-icon": "hXXp://VVV.appshat.com/images/64x64.ico",.."unin
stall": "Apps Hat",.."url": "hXXp://VVV.appshat.com/home",.."width": 1
024,.."height": 795,.."cache": 86400,.."alwaysontop": false,.."program
-version": "2.13",.."start-on-windows": true,.."title": "Apps Hat",.."
tooltip": "Apps Hat",.."minimized": true,.."update-url" : "hXXp://VVV.
bigspeedpro.com/mirror/nerocrossrider/appshatmini/appshatmini_update.e
xe"..}....

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Content-Length: 0

Server: aicache6x

Connection: close

Location: hXXp://VVV.cnbc.com/id/100746255?region=world

GET /nyt/rss/HomePage HTTP/1.1

Accept-Encoding: gzip,deflate

Host: feeds.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:26 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://rss.nytimes.com/services/xml/rss/nyt/HomePage.xml

Content-Length: 264

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://rss.nytimes.com/services/xml/rss/
nyt/HomePage.xml">here</a>.</p>.</body></html&
gt;...

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3i779maf1zmkk.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:04 GMT

X-Cache: Error from cloudfront

Via: 1.1 2d2eb60d814c8202a5a69fa957cd569d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: v-A-lWG5trSUVKFKwuZoQkHusGd5hOH-D2Br7gOJXYGjh2pu2FveBw==
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3i779maf1zmkk.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:04 GMT

X-Cache: Error from cloudfront

Via: 1.1 2d2eb60d814c8202a5a69fa957cd569d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 0NSD5LKjfWvcC3wUrxmydRX942y6EJm82-O0_I9QsX-1qweieWRrfw==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>..HTTP/1.1 403 Forbidden..Cont
ent-Type: text/html..Content-Length: 162..Connection: keep-alive..Serv
er: nginx..Date: Thu, 30 Apr 2015 07:25:04 GMT..X-Cache: Error from cl
oudfront..Via: 1.1 2d2eb60d814c8202a5a69fa957cd569d.cloudfront.net (Cl
oudFront)..X-Amz-Cf-Id: 0NSD5LKjfWvcC3wUrxmydRX942y6EJm82-O0_I9QsX-1qw
eieWRrfw==..<html>..<head><title>403 Forbidden</t
itle></head>..<body bgcolor="white">..<center><
;h1>403 Forbidden</h1></center>..<hr><center&g
t;nginx</center>..</body>..</html>....

GET /vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: bi.bisrv.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:25:01 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
600a...............v.G.5......f.2 $AR....R..E.......&i......@a.`..,..|
Ov.>'"2r.%..]..%"3##"c8q.}.o.g.....6ZN......?J.>..j.'.2..F.|.,.`
..l.5.'..<.\..^.,......}.w..og..f..vu......R.t.X..q2?...[....t.v...
"~.l.....w....tW.....D.x.H....t:\|. ..d...w.g..Yo........t...g...c.Z.&
.2..-.....]M..W.&sw......a....o.....I..l6.$.Et..3.--f...x..-..a......{
.x...~........W.-...2.M..U..H/.v.z0.....l.Y..=y..OV.1..3..I..d60.|....
f.P......W..........~.5...K,..-<....E..{..$......?1h/..$...q...lq.&
gt;...C...e....|6D..g.x~v..{....~..0....x.....8Y...v.2....g.x...->.
....7....e.....=[$... z..=\.Wg.U..wd..;..x.!..8K.......c..........b.=.
...]..y<..0...[...q5..ez6....Y..a:.....l5].?...}..d*.../...[-......
'.x.......N'..#..m..M...;].]'..,..P .{..........'.{.dy.......]M.h.....
.\.S|.Y.K.l..9..g.:..B.hL0U.....d..A{ow.K...c..g........b>8.H......
.........{{.......~|/........c.{.`t....f........._v.d#..L....._pti..].
.i\...N./<.zX...<M..U.......l....[...}.:..~].......}............
.wP..W~..W~.^..n.......|..bee.....y. ..N..V.......])_..7._..........W~
.......{. ....X...{_...*.w...W......W~.........b... .!....8.f../...8^,
....Ky....g.H.0J.z.(^$r#..>..p..w.O..?...?T..o.[G.N^..)/.......U..Q
f.. .....2..{.j1...y..3...%:..VS...q..{..y.\..W)...{....'.5YM..c.._...
.~V..7..B/.[`..e=h....u....l^g.$..O..Z.d:\.....q...}s#....dkw..{..i...
o.<.2.....k|..O...W.....?~.....(].*?.....u.[..X`v tX..a..vC..h.,..%
sSi.Q..~..k).7..o.h.s.......lR..Q.[`.........yK..{.}y..L........mB...~
./f.Y......F..Cp9=o...4...TfU>..<.T.X7.FQ...m......W.[...:..<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: bi.bisrv.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:25:04 GMT

Content-Type: text/plain

Content-Length: 26

Last-Modified: Wed, 29 Apr 2015 08:47:26 GMT

ETag: "55409a9e-1a"

Accept-Ranges: bytes

User-agent: *.Disallow: /.HTTP/1.1 200 OK..Server: nginx..Date: Thu, 3
0 Apr 2015 07:25:04 GMT..Content-Type: text/plain..Content-Length: 26.
.Last-Modified: Wed, 29 Apr 2015 08:47:26 GMT..ETag: "55409a9e-1a"..Ac
cept-Ranges: bytes..User-agent: *.Disallow: /...

GET /?product=firefox-34.0.5-complete&os=win&lang=en-US HTTP/1.1

Host: download.mozilla.org

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.5

Range: bytes=900000-1199999

Cookie: optimizelySegments={"245617832":"none","245875585":"direct","245677587":"ff","246048108":"false","869421433":"true"}; optimizelyEndUserId=oeu1401956287616r0.2603029596469415; optimizelyBuckets={}; __utma=150903082.1617578787.1401956289.1401956289.1401956289.1

Connection: keep-alive


HTTP/1.1 302 Found

Server: Apache

X-Backend-Server: bouncer3.webapp.scl3.mozilla.com

Cache-Control: max-age=60

Content-Type: text/html; charset=UTF-8

Date: Thu, 30 Apr 2015 07:23:05 GMT

Location: hXXp://download.cdn.mozilla.net/pub/firefox/releases/34.0.5/update/win32/en-US/firefox-34.0.5.complete.mar

Keep-Alive: timeout=3, max=492

Content-Length: 0

Connection: Keep-Alive

X-Cache-Info: cached

HTTP/1.1 302 Found..Server: Apache..X-Backend-Server: bouncer3.webapp.
scl3.mozilla.com..Cache-Control: max-age=60..Content-Type: text/html; 
charset=UTF-8..Date: Thu, 30 Apr 2015 07:23:05 GMT..Location: hXXp://d
ownload.cdn.mozilla.net/pub/firefox/releases/34.0.5/update/win32/en-US
/firefox-34.0.5.complete.mar..Keep-Alive: timeout=3, max=492..Content-
Length: 0..Connection: Keep-Alive..X-Cache-Info: cached..

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain

Content-Encoding: gzip

Last-Modified: Tue, 23 Sep 2008 14:49:00 GMT

Accept-Ranges: bytes

ETag: "05676838b1dc91:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Content-Length: 164

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
[email protected]..)w..ws..|.O.Q.....#......s..MW
W...h......O..l.Y...^C.b..>M..Cf.....f.......6.V.z.........>.V..
*-...v....... .c|.Q.6.h.?.W.......


GET /Movie-News HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: application/xml

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Content-Length: 356

Cache-Control: private, max-age=171

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive

............AN.0...Ozw..o.. T...!. DQ...L....l.....H\.qH.J...Jf.......
...Kc..}...."..1..U..u....*....p...-.F.6....Xgu... ...._E.\.].....V...
.7...*.h.A...yqf.......B....:..F.2R.......PP.u4X...Fv.}`..Z.........&g
t;.'..........0H..H.............O;v......=t..CM..k..E.cd...OW8........
.|/B.R....Z....h4e....g..F..)...OVo...l.....8.r.....y./..W.0..0?.O:...
...@.........

GET /Movie-News HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: application/xml

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Content-Length: 356

Cache-Control: private, max-age=171

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive

............AN.0...Ozw..o.. T...!. DQ...L....l.....H\.qH.J...Jf.......
...Kc..}...."..1..U..u....*....p...-.F.6....Xgu... ...._E.\.].....V...
.7...*.h.A...yqf.......B....:..F.2R.......PP.u4X...Fv.}`..Z.........&g
t;.'..........0H..H.............O;v......=t..CM..k..E.cd...OW8........
.|/B.R....Z....h4e....g..F..)...OVo...l.....8.r.....y./..W.0..0?.O:...
[email protected]/1.1 200 OK..Content-Type: application/xml..Content-Encod
ing: gzip..Vary: Accept-Encoding..Server: Microsoft-IIS/7.5..X-Powered
-By: ASP.NET..Content-Length: 356..Cache-Control: private, max-age=171
..Date: Thu, 30 Apr 2015 07:25:13 GMT..Connection: keep-alive.........
.....AN.0...Ozw..o.. T...!. DQ...L....l.....H\.qH.J...Jf..........Kc..
}...."..1..U..u....*....p...-.F.6....Xgu... ...._E.\.].....V....7...*.
h.A...yqf.......B....:..F.2R.......PP.u4X...Fv.}`..Z.........>.'...
.......0H..H.............O;v......=t..CM..k..E.cd...OW8.........|/B.R.
...Z....h4e....g..F..)...OVo...l.....8.r.....y./..W.0..0?.O:......@...
......

GET /breakingnews HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6IkQxdTBaenJocXhrZWIyZFpvSThOekE9PSIsInZhbHVlIjoiaVFGYWNxYnlkUUJ5cVpSd2xIT3RBayt6cmp0ZzNvT3VTa3J5NmJXUStxVGN1SkVUc2M2MzJ0XC9cL3BOMk93MkhBeGZnbUFMQXJPamM1ME5KMThBXC9qR0E9PSIsIm1hYyI6ImFiNzBjMjhhNDgwZDc2Njk4NjllMTc0NTFhNDIzNDAwNTk4Njg0N2MzMjU3MjE0ZWVkODU1NWMyMmE2ODc3YjcifQ==; tvg_user=181c6be9-2ea4-4aab-b788-0f237dd2f301

Cookie2: $Version=1


HTTP/1.1 200 OK

Content-Type: application/xml

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Content-Length: 9792

Cache-Control: private, max-age=180

Date: Thu, 30 Apr 2015 07:25:22 GMT

Connection: keep-alive
...........}...8...m.~.d..d.Y x_QyL..GU.a.9.....$A......J...}.}.}...f.
(......R".#...1....... .p...........g/.M"r..,L..G..|Dx.%~.....y@.../..
.gi...T,.......!{~4....$e....d..Ir.%.i..I....,8-..$IG..I<.......(..
^......X!.)M...x&U..#...g...1......y._|....}............g.y&.E..Q.....
..f'..h...L...J.<..p..B^....,'aF.l:.1..'3h..DU...<ey...D.H>_]
.O........Ga..W.}~&...R$^.....&,......{a.z......B7y.BQ.V.P..N.h....J..
.wX2...?.....(.%'.0x&.s.Jv...FAj..,..d....-'..t...<..oO...sr...._..
..9.Y8y.?..Y.fE..8Kb.e..Q.S..#zUL&<.I..:(..G.....EF.-.#.F.. .)..|..
.K/A...J3.\.. &./Q..._F./...q.....)....p2",.G.....#.&....G.....l..b...
..<.BI..C.uI.%.h..3F.j.T......PY.U.7MO.mI1d]u(..........B?.C..-ht..
........E.....>.(.qr....#.....y.A*.N...6d1.w...6.....??.....T&.....
............0.y.......$0.Ii.,.H..h..S.<...4.{.0L.m6N`..}[email protected].
..........,.............,...H...,Io....X.{6'.},./...5)b.....1.|6?.=...
(>..=(...0K.hQ'XM..x..n...2....~5....."o.F{....,gi........HA..u..q.
......F...~...e...8~.c..h..|L..CZw....ZpS...?..O....Gu.....}.#.n..../g
...[....J~......t......(~-....._..c.w...... [..T.Qw{.."......x:a...GyZ
.....XO...p/X._.'...!..).HIT.T.O5.PY......O...Q.._,..LZ.T....4 .1..F..
T...1..Z}...F!...^..9...9...,.y....Qk..`...F..........`...S>*)`K$..
U.i...... .Lj....q1qc0.{z.....g.w...|SMS.T.2\.W|G.|.rT..LKw...tO.COR=P
Ug..j.T.........@/.z1...^,.w..X.....;....._.y..`.a..........m=..8..J..
..<.....]~#.`.......'."..l_N.t...G..,O.........e[.......rQu...^g.;.
./...v....(....K..p).5..[6,.o.I[.(.n7Xi.....B......c....l...|.h.`.<<< skipped >>>

GET /breakingnews HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6IkQxdTBaenJocXhrZWIyZFpvSThOekE9PSIsInZhbHVlIjoiaVFGYWNxYnlkUUJ5cVpSd2xIT3RBayt6cmp0ZzNvT3VTa3J5NmJXUStxVGN1SkVUc2M2MzJ0XC9cL3BOMk93MkhBeGZnbUFMQXJPamM1ME5KMThBXC9qR0E9PSIsIm1hYyI6ImFiNzBjMjhhNDgwZDc2Njk4NjllMTc0NTFhNDIzNDAwNTk4Njg0N2MzMjU3MjE0ZWVkODU1NWMyMmE2ODc3YjcifQ==; tvg_user=181c6be9-2ea4-4aab-b788-0f237dd2f301

Cookie2: $Version=1


HTTP/1.1 200 OK

Content-Type: application/xml

Content-Encoding: gzip

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Content-Length: 9792

Cache-Control: private, max-age=180

Date: Thu, 30 Apr 2015 07:25:22 GMT

Connection: keep-alive
...........}...8...m.~.d..d.Y x_QyL..GU.a.9.....$A......J...}.}.}...f.
(......R".#...1....... .p...........g/.M"r..,L..G..|Dx.%~.....y@.../..
.gi...T,.......!{~4....$e....d..Ir.%.i..I....,8-..$IG..I<.......(..
^......X!.)M...x&U..#...g...1......y._|....}............g.y&.E..Q.....
..f'..h...L...J.<..p..B^....,'aF.l:.1..'3h..DU...<ey...D.H>_]
.O........Ga..W.}~&...R$^.....&,......{a.z......B7y.BQ.V.P..N.h....J..
.wX2...?.....(.%'.0x&.s.Jv...FAj..,..d....-'..t...<..oO...sr...._..
..9.Y8y.?..Y.fE..8Kb.e..Q.S..#zUL&<.I..:(..G.....EF.-.#.F.. .)..|..
.K/A...J3.\.. &./Q..._F./...q.....)....p2",.G.....#.&....G.....l..b...
..<.BI..C.uI.%.h..3F.j.T......PY.U.7MO.mI1d]u(..........B?.C..-ht..
........E.....>.(.qr....#.....y.A*.N...6d1.w...6.....??.....T&.....
............0.y.......$0.Ii.,.H..h..S.<...4.{.0L.m6N`..}[email protected].
..........,.............,...H...,Io....X.{6'.},./...5)b.....1.|6?.=...
(>..=(...0K.hQ'XM..x..n...2....~5....."o.F{....,gi........HA..u..q.
......F...~...e...8~.c..h..|L..CZw....ZpS...?..O....Gu.....}.#.n..../g
...[....J~......t......(~-....._..c.w...... [..T.Qw{.."......x:a...GyZ
.....XO...p/X._.'...!..).HIT.T.O5.PY......O...Q.._,..LZ.T....4 .1..F..
T...1..Z}...F!...^..9...9...,.y....Qk..`...F..........`...S>*)`K$..
U.i...... .Lj....q1qc0.{z.....g.w...|SMS.T.2\.W|G.|.rT..LKw...tO.COR=P
Ug..j.T.........@/.z1...^,.w..X.....;....._.y..`.a..........m=..8..J..
..<.....]~#.`.......'."..l_N.t...G..,O.........e[.......rQu...^g.;.
./...v....(....K..p).5..[6,.o.I[.(.n7Xi.....B......c....l...|.h.`.<<< skipped >>>

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: e7rIRLzVgxBLSG2SlVk1bpOx92x 7fjQoqySo1XkJaRx/yfB0GPBpm64tUXvZMtD5LuDlzz8bXI=

x-amz-request-id: B3C00900FA35A403

Date: Thu, 30 Apr 2015 07:22:02 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 0-988407/988408

Content-Type: application/octet-stream

Content-Length: 988408

Server: AmazonS3
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
.........P...............`............................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
rc...P............v..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: Apache

Vary: Host

Last-Modified: Wed, 14 Jan 2015 23:04:46 GMT

Accept-Ranges: bytes

ntCoent-Length: 1061

Content-Type: text/plain

Cache-Control: private

Content-Encoding: gzip

Content-Length: 378

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:08 GMT

X-Varnish: 413231435

Age: 0

Via: 1.1 varnish

X-Cache: MISS

X-API-Version: 5-4

X-PageType: legacy

Connection: close

Set-Cookie: RMID=007f010126c35541d8d4000b;Path=/; Domain=.nytimes.com;Expires=Fri, 29 Apr 2016 07:25:08 UTC
...........SMo.0... 8#Q.v..4...&.....6Z.T...........vj.....8oLa..9Y...
..~X..5C...(.b. p40....B.uY......_..x......6=e.N..P.$...TQ..(....<.
.N..b....U.;Mc.....>..}...-.q.....G4..`.kh.Scm......z..e.#..8-....x
..~.m ...:a`:..H.].&/..Gt.I.u.ef...........&.I.sn1.;..T....FeFW, .{...
e...d#.G....g. KS.[&$.k..^.S.....r.hg..lW.Z.].p...eD..Y.B....c...V...[
T_.........O.....C].....}.....%.....

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=8913819001430378702

Cookie2: $Version=1


HTTP/1.1 200 Ok

Server: nginx

Date: Thu, 30 Apr 2015 07:25:03 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Cache-Control: no-cache,no-store,max-age=0,must-revalidate

Expires: Thu, 30 Apr 2015 07:25:04 GMT

Last-Modified: Thu, 30 Apr 2015 07:25:04 GMT

Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' hXXps://yastatic.net *.yandex.ru yandex.ru *.yandex.net hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.yandex.net yandex.st yastatic.net *.yastatic.net ws://portal-xiva.yandex.net wss://portal-xiva.yandex.net wss://push.yandex.ru; img-src data: 'self' hXXps://yastatic.net *.yandex.ru yandex.ru *.tns-counter.ru *.gemius.pl hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.tns-counter.ru hXXps://*.gemius.pl yandex.st *.yandex.net yastatic.net *.yastatic.net; report-uri hXXp://VVV.yandex.ru/log/csp?from=yaru.ru&showid=22905.19420.1430378703.52485&h=s58&yu=8913819001430378702;

P3P: policyref="/w3c/p3p.xml", CP="NON DSP ADM DEV PSD IVDo OUR IND STP PHY PRE NAV UNI"

X-Frame-Options: DENY

X-XRDS-Location: hXXp://openid.yandex.ru/server_xrds/

Content-Encoding: gzip
e8d.............:ks........X...,..@_..SM......U.Y.Kr-<...(F.L.~..N.
[email protected].$..v........=.].h...'.~.....(..._..1...v.{oy/N..
.s.....fBC.,.p.zi|.'...!...b).J...M.....l$.....p.D...G.....9a.w)...o..
...$.cA.!A......C.'......*B......._.......#W.V.=...W.1Y...F.r.....'.{.
..}..C._......qHl........#F..r.)....;1.n....a2L\.V..,...o...q<D....
P...$...... q.`?......W..a?..C..ae..V....b,.}..^.@}`$.p..N.S.e<4...
....../....k..j..RR_.d<u.....a....W?......5.'H......:r..UXs..?**8_.
.I.g.....u........%Tm..v.0....~.y..Z..(...p..y:.3....C....,d...k......
..T...4..".....(...,U....d..q..$..........kQ.&(r............K..?..o...
P...A..r.........[.rbp../P..3...d...^..i.....$$..aD.,...1....8.)?O.c..
..s^.BS.D..b.......R=O./.........AxC.WT<.>._.D..Xg..E..5$...y...
1.$,z....A..?d....$rJ.B..Uq..#.."..rpi..B........x(F.....]Z...:..Q..&l
t;r!...e.6..K.....iu.bD..i.^a..~<...?"..S,....d._..h...R.q*C.#.$...
x..0.."ib6<...dB.1..^.G..G.6.@......:\.!.t....=.e=....pt......c....
a<...~|..............._....C{..]........r.4.L...7..o!@L$]j@!hk3H.
...5.....HNoh...^.eF2..8..m..H..;z.9g.b!m#.>K...g........F.3.q..2.U
^.j./.../.....w-...%..,wqzrF.K......2.q.fm{;.*-..V.([email protected].
..j.'X......w..&..CT..............E.q..q.dD....u..........f.^w%..H....
...O^.<..c._..7T..e...}.....hg.,lq ........,.9.O...y....%..v.......
`.j.k5..:..;5.=..4..<J..e...l.Q.B.....j.&_.3....Q...A.......F|."...
.X...\5.E.....&B. .........4...XQ.Y....3#...>...,I.@&...\.6....Sh..
.Y.'*s...,J..Z...5C ...B.T....\.a$...dm.k.dT[.....-,........O..7.&<<< skipped >>>

GET /sponsored/swiftrecord/eula-swiftrecord.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: d3i779maf1zmkk.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 26 Apr 2015 05:00:26 GMT

Last-Modified: Wed, 11 Mar 2015 08:59:19 GMT

Expires: Sun, 26 Apr 2015 05:10:26 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 63

X-Cache: Hit from cloudfront

Via: 1.1 09052d1a6e392e4f4a3fd97bf34a2b24.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 0dtBn1Xi9AMiBHPIKzYiRZOG4OlQ6_Oa-PUKiVh3lNHiMjYeuPGZjA==
36d5.............}.r....s. r8.c*....n.r..!..`....K..8@ [email protected]@.gb".Cf~
..d.Z{.K. %_:b......'.e_......i.d...]..f.....y...;<>............
..y...U1X...d5.....q.r..._..o........;..w....g............j...........
...a^........r8...7.........u....zu{..|.....qZ...E...U.yu<.k~..M5~.
...7.jZ-.......w.h6\.M.o.W....dU.....|S...l8....|uXO..>}.z.9}v;.M..
o...rX...-.._...o.JN.V~......b..N1...G.~U..i.........U. {/.^hh.Z3...I.
....].)...c.|c?..X{..<....[SL... ...../...?./O..~.W.....v.z.k./...&
lt;.-......E..?h..w........=.|h.......=R.....{~.....{......t/O;.N...P|
x.9y..N..O.....{...Z.:...89o....>..........>>.\`..3|......6..
k.;.....o.;............~....=..\...4U..V..d^..'u....k.mq>....,Zw...
..U.......^..eY...X.R..E5/@U....0.]..rT-.|.,.N..b8..;(.....Z.{........
....0.l......Xc.uQ.......j........c.....t2...._....Jj......XV.....z...
.v..........G.....G......S...u7...W....ZN>.G..U..<..&....;...C..
.-..rY.G%..d..i.9....d:..s.W.Q.6xY..]j?..K.......O.^/.>..p...&.d~W.
c.......p9.?(n..y.<.5|^a..?..Ln.p.8...wh;z.....w..l..jU....M......G
.3. ..n.|........x(o V....5...O.J........z.....}.x9H~<......~.W..r|
[email protected]..@.$.H..zP/#..9R....B..X.
4t...C}P,....s....H,d..tU.6n..@qgY\.E.....#.......g.8.0.bY..Y...b..1.e
.X...V.=.~.,..(L....AW..QY.<..W.9.....#.4&...| ........L.d.m._8....
.D...EU$..r.Zc..z..f....f.6..(.IRX.'L.[].k..i..WH...o}h......8}mo9...u
.b.P...&.i..Tkl.S.18...B.- .1e.....6.v=. X0>..~.,]Q....F.U...#q...%
......4....U55.r.3R................i1 ..!..u..^.:...II..U..N.<N<<< skipped >>>

GET /softwares/5/2/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=11471508-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:22:03 GMT

Content-Type: application/octet-stream

Content-Length: 11471506

Last-Modified: Mon, 05 Aug 2013 14:46:25 GMT

Connection: keep-alive

ETag: "51ffbac1-15e1526"

Content-Range: bytes 11471508-22943013/22943014
$n.............V."r..S...%...\.d.A.H..vc....K......1E..a...e.........^
.C...\......C.h_eh.......O#(DOIcGd.NP.......D.....[..g....Xl".Y.!%n. .
 Z.$.|.N...!.^E....a.4.!Yp....;..n....:.,.F$.M.Rf..cp....s....p.L.u...
n...u.......,.(&K.....xO.G..M..6......f6..8.....b.....0.I>..Z.AJc..
&3$.".B...).RT...$.......d.#.%S.d...5,i.....U..b....|. P...Pu..Iw.N..)
.D.....F.r'[email protected]..{l.4.....m.GQ.n.g,...VLQz.K..l.....2.4(
kJ...].....gJ0...Ay).u...".=.7.|e.?U.E..1...z ...............|...{MI..
........[..;.t.}..8........7{.a.......z..O(. .yG.s..^./A...{4i..R...2.
....L...qh...L>..{....2hx....Rh..XC.?.h.k.... .(......<.....I...
.V.":..........^..z..T./a.N.fR......n.....#2... kf.7.......).......9GI
.!];O.........}..7...:......Z.n_8F>.....C.....kKJ.....l...k.....EHj
L.-.[=|..2.^.K!.....f......-3g....p.q...2.I..a}1....#.".OT.<..Eo,qT
(....Q.h.....@..=..T._.AXC.....]b(.6. Y<W..vM.....d..F...lZo.5.s...
x.....V.PS...f.....~'.........-b&r..D.O.........up.y.i.....*.dB...1..c
E...L..(. ...w..Z...T...A.1.......N.j...q..*......8t..c...z..tn.C.....
....1..4Y..9o*........3.\.!..#.(m.,g;...C{!Cu...*.. ........H. .5.g...
E......H!..f...o............zx..6..~..r...... pc.."........F..........
...X .e.h...sw.Af.....!$...p......H)..J)t..Z.?_.V....w....^.....N.....
?!.....?....w.........a._v............h.p....=...Q&}...#._..7....`.-&l
t;.nR8.B..%...OP.61..r..^o.,H..pT....LJ`..n..{a..J.....F.yL7Z.{b.I..x.
. .){...ZJ..P4...o........K...=,.../..uH%\.|.F...7..U<.k&........$.
...&3.WQ.1G6M.{vu...h. ..'....h...B...7.....v&=.......g..v!e.k8a..<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.mozilla.org

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Thu, 30 Apr 2015 07:25:05 GMT

Location: hXXps://VVV.mozilla.org/robots.txt

Connection: Keep-Alive

Content-Length: 0

HTTP/1.1 301 Moved Permanently..Content-Type: text/html..Date: Thu, 30
 Apr 2015 07:25:05 GMT..Location: hXXps://VVV.mozilla.org/robots.txt..
Connection: Keep-Alive..Content-Length: 0..

GET /gscodesignsha2g2/MFMwUTBPME0wSzAJBgUrDgMCGgUABBQpEOCqbmTiQA9OjY//t2aa8NSkuwQUGUq4WuRNMaUU5V7sL6Mc+oCMMmsCEhEhJz1lhSyxS2RYZQVJ48M2bQ== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp2.globalsign.com


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:26:32 GMT

Content-Type: application/ocsp-response

Content-Length: 1493

Connection: keep-alive

Set-Cookie: __cfduid=d88a711e93ff1ab8550d75219195b6aae1430378792; expires=Fri, 29-Apr-16 07:26:32 GMT; path=/; domain=.globalsign.com; HttpOnly

Last-Modified: Wed, 29 Apr 2015 23:18:40 GMT

X-Powered-By: Servlet/3.0; JBossAS-6

ETag: 75cb20db80af71b35230a2051b0ade8d8aab5b43

Expires: Thu, 30 Apr 2015 11:18:40 GMT

Cache-Control: max-age=180, public, no-transform, must-revalidate

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1df184dcea4015c5-FRA
0..........0..... .....0......0...0.......0?.....!...>., ......2015
0429231840Z0u0s0K0... ........)[email protected]...^./.....
2k...!'=e.,.KdXe.I..6m....20150429231840Z....20150430111840Z0...*.H...
........)Lk..#U8l.T..<[email protected]....}/.0.."JS..|..Lo.|`.E.x...c......a
..h.L.H.?.....F...x..........:..Q..........iSq.W..82.9...7......z._8`.
.../.....^........#...u.h....`v.[M.2.i......pt.-..b...j!.o.....y....:.
.;,...........J....3{O},.{.....y....YA.. ......x...E.C..d....0...0...0
...........!.}.*./..(.....C.0...*.H........0Z1.0...U....BE1.0...U....G
lobalSign nv-sa100...U...'GlobalSign CodeSigning CA - SHA256 - G20...1
50318093923Z..150618083923Z0..1.0...U....BE1.0...U....GlobalSign nv-sa
1C0A..U...:GlobalSign CodeSigning CA - SHA256 - G2 OCSP responder - 21
.0...U....201503181039000.."0...*.H.............0..........]W0..;Cq..t
....H.mQ...C.PN...0...Z.p`xT`...g...^c.`....&S..<.w.......o&..,...n
=.{i`\....Fhn.....i%.b,.IS... .]...Vh...~._i.Y......sF%...I..V.I]Kn.x.
....h........)...5..F.6m0;....l..B..d-.ha...>T._.o.7...."..e....~5a
...=..9.h'F>.X...k.l....gCC'[email protected].
..........0...U.%..0... .......0... .....0......0...U.......0?.....!..
.>., ....0...U.#..0....J.Z.M1...^./.....2k0...*.H.................&
..Y.7).!......9s..~.N..4..uz.t.K2Y..=. ... .........W..8......9t.D....
....V.d)...s.. ..4.v~r{~..*..&..}............D../TE.t.&V.e.........l..
1........y...--=|~..z..3j1..\..<..~..6.[.Z}'[email protected]._...,r..T...W.K.&
lt;.<m...;z...k.=F..5........|Z..g.!......p...!..<<< skipped >>>

GET /infv5/index/3428/bnd HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko

Host: dqoup4b5zs0bi.cloudfront.net

Accept: */*

Accept-Encoding: gzip, deflate

Connection:keep-alive


HTTP/1.1 302 Moved Temporarily

Content-Type: text/html

Content-Length: 0

Connection: keep-alive

Date: Thu, 30 Apr 2015 07:24:45 GMT

Location: hXXp://dlrkbt247pbk6.cloudfront.net/3428_3b67a5ef5d450c1556c543c6323981d9/1.pak

Server: nginx

X-Cache: Miss from cloudfront

Via: 1.1 8cd0e1b054d4e5083057646da4909e74.cloudfront.net (CloudFront)

X-Amz-Cf-Id: C1KsD-WZdMsqO7x7AirzPLMainASakB9oK2tz1QwN5oB3ay5M4MIFg==

HTTP/1.1 302 Moved Temporarily..Content-Type: text/html..Content-Lengt
h: 0..Connection: keep-alive..Date: Thu, 30 Apr 2015 07:24:45 GMT..Loc
ation: hXXp://dlrkbt247pbk6.cloudfront.net/3428_3b67a5ef5d450c1556c543
c6323981d9/1.pak..Server: nginx..X-Cache: Miss from cloudfront..Via: 1
.1 8cd0e1b054d4e5083057646da4909e74.cloudfront.net (CloudFront)..X-Amz
-Cf-Id: C1KsD-WZdMsqO7x7AirzPLMainASakB9oK2tz1QwN5oB3ay5M4MIFg==..

GET /services/xml/rss/nyt/GlobalHome.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:29 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://rss.nytimes.com/services/xml/rss/nyt/InternationalHome.xml

Content-Length: 273

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://rss.nytimes.com/services/xml/rss/
nyt/InternationalHome.xml">here</a>.</p>.</body>&
lt;/html>...

GET /rss/cnn_world.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=UTF-8

ETag: gk7qqtCfRBg02PThxxmDQmRKDzM

Last-Modified: Thu, 30 Apr 2015 07:25:02 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Thu, 30 Apr 2015 07:25:16 GMT

Expires: Thu, 30 Apr 2015 07:25:16 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
4E58...............r...%..#........*..G|.....Y.....G.(.01.....F?...H..
6.....w..-.de....*  ....<...H8........p..,.........|.........."..\.
..$..._.b..o=........}.f................lEBh..u7.....?.g.Q0......cm...
i.^[email protected]....;.>,.;...%....E.y\....A4.Z.
g.]N..i.5.......s........=?Gs... r.........O..06.....]\..m9...6..s..8.
...Y6B.A...0UN...Of,.:..IB..4.9..?.9..L..[...A.1...?....... AHD.D...d.
...m....(f...W.$.\'v.l,/..._[yO...'....s..^....q..p.9.;.... .)j......9
zy.c.:%........,.>.c..h.<....6.6$.a...v.U7.'.{7.m-..."v..*0.qzi.
o..._.$r..w6M....;(......[.7..i..&..l.....~......`..c....N....K.......
..._..]..4.,.<U1p.....O.~.p.gz.[.)Jwk.^.@"........G..C.1S.........c
.......} [..k..m |.D..>..mu....o..])...|..6....8./..O...y....q@N`.=
...0.3@..$...DQ0K'..B..s'...U\r......>.. ..?......t.........f).5.C}
.2...3..%l.sw._[h....g.....o._} ....O....<..O..}.k.$.[.............
......r. I').'...#../...o....d.M...7.....n...[p.sAfv......^l...E......
......r....M.....r....{b....4.Wc.E..................g.o...$.....hp...g
.....o....v:8...."".il4/6W7w..._..`Z#..Oy...LO_3..HD......o.Ov$ ...8./
?..S.r'.....)e.q..~...N.........5.drt>.?.]....v.*o.........j>...
..?].xRU....IEC..s.'....?8.XY..>0....*U.Fl'..g..d...9...*.....I.Y..
..<.[jW.hCU..M.^.;t.DB... %[email protected]...)...!.#K-.~..3...
....PW.....zv.......... ;[email protected].>........oA} A.......@
h.wf.i.............t[Ft.d..n..6..{.A...E.....#..3.l;.9."...p`...4vbT%p
..(..G...TR.<.a..sw.]....AL.U#....f`..l.}..O.N.....|......eo'..<<< skipped >>>

GET /rss/cnn_us.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=UTF-8

ETag: UgbworA9ZAWcQF2fSCx1DmR2FHM

Last-Modified: Thu, 30 Apr 2015 07:24:44 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Thu, 30 Apr 2015 07:25:17 GMT

Expires: Thu, 30 Apr 2015 07:25:17 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
37EB.............}Ys....{W..@...<.a..dI.g(.......yIA.$1".. -....{oP
..$<&E......IdK.......=......{.IW.........#.n0.s..z......?...|.....
r.yL.y..\..C.. .5.....\.N.y.F&..........=....(...|.....x..9.M.8.7q..'.
6..g,.1....<.7p.0./$`'..b.......l..D.5....\[.v..p.D......s.2.o.h...
.MtY...,Z....3aA.=|......=;Cs......?6......L.Z...fO.n.6.`..6&....q....
..cS...:.0Gn.......s....4.4.p..A.s...$,..7...g.6...%.c1..I...XD...d..&
lt;...E..(fn...u....]'[email protected]".G.x....|D,...]6.89C/
.x<....\.........6.#L.{.._.|.N.>...t.....mt....?6./..!..2...X}&.
....}8I.-..n8.`#V..z;....7].....'......6.....?6q..h...._f...f..~7.j*Z.
?6.......4.,..i.8G.o\...o.N....g.at6...5.q......-n.,.=.Q>....`...Q.
7.....F6.....l#v.D..k?.....d..3p!.d...$...]."V.)[x.z...$y.O..;.I..D"..
.#.K..3..8q.....>........$_...._.M..i.7..9`^..GE#W...9.P...3....h..
o...p.....mm>t../........W7.m...O...d0'......(..........E..t......U
.C....\...=.t.cS.. .....Fv.9Atx.O.$c...j:=w.^...1.......... k8..k.....
......0.p..<.............?P.h........../..........#.......m52...."#
.i`.-7..._Y........r..4(.l..3|Dta.~.Z.g...;U1dG...........oo*ap.Y....o
[G{....ZV.|.#..a|t..........>...B....&.$.9......4.6...._#...#......
.f~..\)dZv....ORH.a..r. `..d..l.............2..n.<..f.h[=.gu:=j...a
...<@}p&...p.....B..9./J.?...X...a.[......V..4>.........cs).^..m
Pb,..#[email protected]$.....>..}..G....U5p....*..>...'.N.D...q..j.".
.0.........l.N.t...P.........3.K...ff........c.....F1{..&1{..}.^.B....
.y..1{...2{.!./..\/.........DL',. .7''.....N3.g.......C. ...1...$&<<< skipped >>>

GET /rss/cnn_us.rss HTTP/1.1

If-Modified-Since: Thu, 30 Apr 2015 07:24:44 GMT

If-None-Match: UgbworA9ZAWcQF2fSCx1DmR2FHM

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 304 Not Modified

Date: Thu, 30 Apr 2015 07:25:17 GMT

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

GET /installer.gif?action=started&app=65743&appver=0&ver=1_36_01_22&version_date=15-04-30&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=C6473A77A4B54754A5C550B36164731API&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_47&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1073750533&asw3=-2147483136&asw4=32768&crtnm=na&mdat=&procstarttime=1430378605&procruntime=2&rnd=1430378607 HTTP/1.1

Host: stats.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: Vwhk1w/LXofenK230Z876PXk/ms94kTH5sf/0cpBWJ85hfYjWsgMRqkysT/IGtzCpu69rGTGhVw=

x-amz-request-id: 1064EB60F9504450

Date: Thu, 30 Apr 2015 07:23:28 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:16:15 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: Vwhk1w
/LXofenK230Z876PXk/ms94kTH5sf/0cpBWJ85hfYjWsgMRqkysT/IGtzCpu69rGTGhVw=
..x-amz-request-id: 1064EB60F9504450..Date: Thu, 30 Apr 2015 07:23:28 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:16:15 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;
....


GET /installer.gif?action=finished&LFMR=_ffDll_0&app=65743&appver=&ver=1_36_01_22&version_date=15-04-30&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=C6473A77A4B54754A5C550B36164731API&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&xpiver=0_95&crxver=1_26_47&silent=1&os=7(64bit)&osbuild=7601&osprod=Windows 7 Professional N&ossp=Service Pack 1&osinstdt=1363796288&admin=1&type=85899350029&asw=0&asw2=1073750533&asw3=-2147483136&asw4=32768&crtnm=na&procstarttime=1430378605&procruntime=9&rnd=1430378614 HTTP/1.1

Host: stats.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: dP3OFAMIGdGvtD6TWf/o9DEKqYnlB5QrOyVEr8uGcu5LrIn1e8nw9yn UooinOiy33NGiW6nBGQ=

x-amz-request-id: 555A11BDE438313E

Date: Thu, 30 Apr 2015 07:23:35 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:16:15 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3
GIF89a.............,...........D..;....


GET /apps.gif?action=install&app=65743&appver=&ver=1_36_01_22&version_date=15-04-30&bic=d5d8d8a61601751d467a5854a16ce35aIE&verifier=e9d6e2e9e6a34b6d6a4be51af1aeacc2&upi=d5d8d8a61601751d467a5854a16ce35a&procid=C6473A77A4B54754A5C550B36164731API&srcid=000820&subid=0&zdata=appshatmadness&browser=ie&browserver=10&default=ie&chver=42.0.2311.135&ffver=29.0.1&iever=10.0.9200.16521&curtime=&country=ua&aver=X&installtime=1430378605&lifetime=0&silent=1&crtnm=na&procstarttime=1430378605&procruntime=9&rnd=1430378614 HTTP/1.1

Host: stats.nodedomax.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

x-amz-id-2: 1c2UaepViqRg4PTnCiyNQTDtsYlA3fQ7Vj6J/1oejdpL0wM7qU9M1zU8CplvYBvK7lWHAIM3YKY=

x-amz-request-id: E5DEFB4CDC92B187

Date: Thu, 30 Apr 2015 07:23:35 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Cache-Control: no-cache, must-revalidate

Last-Modified: Wed, 01 Apr 2015 13:16:08 GMT

ETag: "28d6814f309ea289f847c69cf91194c6"

Content-Type: image/gif

Content-Length: 35

Server: AmazonS3

GIF89a.............,...........D..;HTTP/1.1 200 OK..x-amz-id-2: 1c2Uae
pViqRg4PTnCiyNQTDtsYlA3fQ7Vj6J/1oejdpL0wM7qU9M1zU8CplvYBvK7lWHAIM3YKY=
..x-amz-request-id: E5DEFB4CDC92B187..Date: Thu, 30 Apr 2015 07:23:35 
GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Cache-Control: no-cache, 
must-revalidate..Last-Modified: Wed, 01 Apr 2015 13:16:08 GMT..ETag: "
28d6814f309ea289f847c69cf91194c6"..Content-Type: image/gif..Content-Le
ngth: 35..Server: AmazonS3..GIF89a.............,...........D..;..

GET /install.gif?bundle=istartsurf&ptid=smt&uid=535559167_198339_B48A115F HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: log.very911.com


HTTP/1.1 404 Not Found

Server: Tengine/1.2.2

Date: Thu, 30 Apr 2015 07:23:08 GMT

Content-Type: text/html; charset=utf-8

Content-Length: 668

Connection: keep-alive
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">..<html>
..<head><title>404 Not Found</title></head>..&
lt;body bgcolor="white">..<h1>404 Not Found</h1>..<p
>The requested URL was not found on this server. Sorry for the inco
nvenience.<br/>..Please report this message and include the foll
owing information to us.<br/>..Thank you very much!</p>..&
lt;table>..<tr>..<td>URL:</td>..<td>hXXp://
log.very911.com:8080/install.gif?bundle=istartsurf&ptid=smt&ui
d=535559167_198339_B48A115F</td>..</tr>..<tr>..<t
d>Server:</td>..<td>us-pub00.v9.com</td>..</tr
>..<tr>..<td>Date:</td>..<td>2015/04/30 02:
23:08</td>..</tr>..</table>..<hr/>Powered by T
engine/1.2.2..</body>..</html>..HTTP/1.1 404 Not Found..Se
rver: Tengine/1.2.2..Date: Thu, 30 Apr 2015 07:23:08 GMT..Content-Type
: text/html; charset=utf-8..Content-Length: 668..Connection: keep-aliv
e..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">..<html&
gt;..<head><title>404 Not Found</title></head>
..<body bgcolor="white">..<h1>404 Not Found</h1>..&l
t;p>The requested URL was not found on this server. Sorry for the i
nconvenience.<br/>..Please report this message and include the f
ollowing information to us.<br/>..Thank you very much!</p>
..<table>..<tr>..<td>URL:</td>..<td><<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Vary: Accept-Encoding

Expires: Thu, 30 Apr 2015 07:25:14 GMT

Cache-Control: max-age=0, no-cache, no-store

Pragma: no-cache

Date: Thu, 30 Apr 2015 07:25:14 GMT

Content-Length: 0

Connection: keep-alive

Set-Cookie: tvg_session=guardedeyJpdiI6ImtZWHRpa1BEY0Y4UTMxWVNYMzFRNGc9PSIsInZhbHVlIjoiSDlXdTVYcjBQQ1dWdHg4Mm9cL09XRlBsWlR5SFA0OTFXaSt3NFh6S29NeHJJUHoxZ2NPKytPOXpVKzJHNWxvQjM2Z3gxd3VaQTZcL05qVEUrTjRQeTdRQT09IiwibWFjIjoiYzk5MDNkN2NiZTMxYzRjMGI0ZGRmZDMwZDQ1NDIzNzhmZGFlODhiMzQwMzM5Yzk4YWJkMWU2MDUyNzJmN2RkYyJ9; expires=Thu, 30-Apr-2015 08:25:14 GMT; Max-Age=3600; path=/; domain=.tvguide.com; httponly

Set-Cookie: tvg_user=181c6be9-2ea4-4aab-b788-0f237dd2f301; expires=Tue, 28-Apr-2020 07:25:14 GMT; Max-Age=157680000; path=/; domain=.tvguide.com
....


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6ImtZWHRpa1BEY0Y4UTMxWVNYMzFRNGc9PSIsInZhbHVlIjoiSDlXdTVYcjBQQ1dWdHg4Mm9cL09XRlBsWlR5SFA0OTFXaSt3NFh6S29NeHJJUHoxZ2NPKytPOXpVKzJHNWxvQjM2Z3gxd3VaQTZcL05qVEUrTjRQeTdRQT09IiwibWFjIjoiYzk5MDNkN2NiZTMxYzRjMGI0ZGRmZDMwZDQ1NDIzNzhmZGFlODhiMzQwMzM5Yzk4YWJkMWU2MDUyNzJmN2RkYyJ9; tvg_user=181c6be9-2ea4-4aab-b788-0f237dd2f301

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Vary: Accept-Encoding

Expires: Thu, 30 Apr 2015 07:25:14 GMT

Cache-Control: max-age=0, no-cache, no-store

Pragma: no-cache

Date: Thu, 30 Apr 2015 07:25:14 GMT

Content-Length: 14031

Connection: keep-alive

Set-Cookie: tvg_session=guardedeyJpdiI6IkQxdTBaenJocXhrZWIyZFpvSThOekE9PSIsInZhbHVlIjoiaVFGYWNxYnlkUUJ5cVpSd2xIT3RBayt6cmp0ZzNvT3VTa3J5NmJXUStxVGN1SkVUc2M2MzJ0XC9cL3BOMk93MkhBeGZnbUFMQXJPamM1ME5KMThBXC9qR0E9PSIsIm1hYyI6ImFiNzBjMjhhNDgwZDc2Njk4NjllMTc0NTFhNDIzNDAwNTk4Njg0N2MzMjU3MjE0ZWVkODU1NWMyMmE2ODc3YjcifQ==; expires=Thu, 30-Apr-2015 08:25:14 GMT; Max-Age=3600; path=/; domain=.tvguide.com; httponly
...........}.w......WL}..da.z.Np.....r...|\V.H...Yr%9.K....g..e[v.0.{n
.5...{.{............d.L.......i0..X.:.}...Q....?a.%..F1K..Y.J......I2.
..3.|.._.....p2..g..E.0HX..~z:d..a....y..$.)...v.t..s*J['.^...._......
.>....?......,.."6tg..xap..A;9..=....<....m....9.H8.....r.FI|...
.c.%o.w....A.I_..n..)...{..;.X2.p..Ax..~j.......-...~.8ZY....1.]RF.0mV
.;[email protected]>...;......sX>.|...\.^..-..D.......v......;,...
@g.4.G..m A........;..qt...X...x....N.u.t...b.....S>"M.y..A....<
a.../.`...)V..........%o....n:..08.m6....mG.&.h....8.E...>c.......S
.O.N....[A.?.a/.V.....(.[..A6....f.#...z....q...6c../[email protected]..*k..).AV.
J.....].'..ag..W...........f.....P ...c.8 ..m..........f..\/`N.....0..
=.......,....9..m.2xIG....~...j...`.C..m..x.'..a.D.5K.....c..........^
..@[email protected].&...FQ......uU......Ii..'...k.........#Em.G...t9j=1..~y.S....
..z.$:.J. d..P=.&..9.J.Y...t.._F..E..........I4....6....?cGa."...:....
....H<).s......x..?. ..~J.!.`..I.S...... .....O...quJ...S..k..;m .6
.;Ss.\.Q.... ....U..B.8....w....s.>u..x.......b........I......0jG.?
.!.....1..9k..._z?>.)CT<..z.*.$..Z.......O[[email protected]...
....vYs...w.S....Z.sV).e..|...._..@..................>.........8h..
..L0J..#.b..1.....m..l.c.......>...3rG@<.t.s....?.Bp7.).A...N...
.8....7....,[email protected].".._mz....C.....~H.j.x.(. '8(....8...=L{..
...=..).......@1H.#[email protected][email protected]...>..t..c.s...5
..'...'...f..fc6<@....&..'...........b..3j?...O...(....E'. ...P03..
C..h.[N....X..r..Fo.....v&^.y..>..a...C......r.y#/8....i.1....0<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6IkQxdTBaenJocXhrZWIyZFpvSThOekE9PSIsInZhbHVlIjoiaVFGYWNxYnlkUUJ5cVpSd2xIT3RBayt6cmp0ZzNvT3VTa3J5NmJXUStxVGN1SkVUc2M2MzJ0XC9cL3BOMk93MkhBeGZnbUFMQXJPamM1ME5KMThBXC9qR0E9PSIsIm1hYyI6ImFiNzBjMjhhNDgwZDc2Njk4NjllMTc0NTFhNDIzNDAwNTk4Njg0N2MzMjU3MjE0ZWVkODU1NWMyMmE2ODc3YjcifQ==; tvg_user=181c6be9-2ea4-4aab-b788-0f237dd2f301

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx

Content-Type: image/x-icon

Content-Length: 18094

Last-Modified: Tue, 28 Apr 2015 15:13:54 GMT

ETag: "553fa3b2-46ae"

Accept-Ranges: bytes

Expires: Thu, 30 Apr 2015 07:25:15 GMT

Cache-Control: max-age=0, no-cache, no-store

Pragma: no-cache

Date: Thu, 30 Apr 2015 07:25:15 GMT

Connection: keep-alive

............ .(...6...  .... .(...^...00.... .(-......(....... ..... .
......................................................................
......................................................................
......................................................................
..................dd..))..AA..TT......??..]]..NN......ff..ff..........
............................ww......................qq................
......11..PP......~~..............bb..........tt..................::..
....aa..tt..TT..]]..jj..........""....................................
......HH......................................................!!......
........>>..........xx..................................!!......
........................................................!!............
..........pp..................................VV......................
~~..//......mm..........................))..............}}......''....
..}}..UU..............................................................
......................................................................
......................................................................
............................__......II......................$$........
..............00..........SS..**......................................
........NN......bb......CC......................$$....................
..??..........................................................22......
....bb......CC......................$$..........  ..........))........
..........................................//..................bb..

<<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6IkQxdTBaenJocXhrZWIyZFpvSThOekE9PSIsInZhbHVlIjoiaVFGYWNxYnlkUUJ5cVpSd2xIT3RBayt6cmp0ZzNvT3VTa3J5NmJXUStxVGN1SkVUc2M2MzJ0XC9cL3BOMk93MkhBeGZnbUFMQXJPamM1ME5KMThBXC9qR0E9PSIsIm1hYyI6ImFiNzBjMjhhNDgwZDc2Njk4NjllMTc0NTFhNDIzNDAwNTk4Njg0N2MzMjU3MjE0ZWVkODU1NWMyMmE2ODc3YjcifQ==; tvg_user=181c6be9-2ea4-4aab-b788-0f237dd2f301

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Vary: Accept-Encoding

Expires: Thu, 30 Apr 2015 07:25:22 GMT

Cache-Control: max-age=0, no-cache, no-store

Pragma: no-cache

Date: Thu, 30 Apr 2015 07:25:22 GMT

Content-Length: 0

Connection: keep-alive

Set-Cookie: tvg_session=guardedeyJpdiI6IlJvZVNBNk1GUjBuVWwyR0M0UnNRVEE9PSIsInZhbHVlIjoieHlzSWFRS3dwcnRTVWlaVDROZ2N4U0JQXC9kMDZpWmRKQVwvb3pud0VxNEQ5cnVFMEw2ZmZnZjNveHowU0RVOUlTTG9uMmVLeWpVQjh3cUJiNDEzZGJiQT09IiwibWFjIjoiYmRkZWI3Mzk1MjYyZTliODNiZThjNTcxNjdkNmJhMDZjMTJkZjRhZWZmZWU4ZWJkODQ1NWZmODJlNTgzZmYyMiJ9; expires=Thu, 30-Apr-2015 08:25:22 GMT; Max-Age=3600; path=/; domain=.tvguide.com; httponly

....

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6IlJvZVNBNk1GUjBuVWwyR0M0UnNRVEE9PSIsInZhbHVlIjoieHlzSWFRS3dwcnRTVWlaVDROZ2N4U0JQXC9kMDZpWmRKQVwvb3pud0VxNEQ5cnVFMEw2ZmZnZjNveHowU0RVOUlTTG9uMmVLeWpVQjh3cUJiNDEzZGJiQT09IiwibWFjIjoiYmRkZWI3Mzk1MjYyZTliODNiZThjNTcxNjdkNmJhMDZjMTJkZjRhZWZmZWU4ZWJkODQ1NWZmODJlNTgzZmYyMiJ9; tvg_user=181c6be9-2ea4-4aab-b788-0f237dd2f301

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Vary: Accept-Encoding

Expires: Thu, 30 Apr 2015 07:25:23 GMT

Cache-Control: max-age=0, no-cache, no-store

Pragma: no-cache

Date: Thu, 30 Apr 2015 07:25:23 GMT

Content-Length: 14033

Connection: keep-alive

Set-Cookie: tvg_session=guardedeyJpdiI6InltS0syZDdicnpQTHNUYm50bVArdFE9PSIsInZhbHVlIjoidFArbUlaWWpDZ2pMRGZZTnhZUE50NnpSOENXUmV0b1Zsb2c3Z2hUamcxZ2NNYnAybjJnOHlcLzRkQXc3MlwvanVreXdaakEwV0NIZXBORng1UStnZCtUdz09IiwibWFjIjoiYmJmMWU1YzgwZjVlYzdhOWE2MGExMWY4N2NjZTFmOGM0OTVkMTA1Y2ZlOGYyYWNhZDM4YjQwNDRkMWVmM2JkMCJ9; expires=Thu, 30-Apr-2015 08:25:23 GMT; Max-Age=3600; path=/; domain=.tvguide.com; httponly
...........}[email protected].^...;..f....|\NNKj..Y.Hr.....Uuk.e[..0...
!V.....{..[..}...WO.(.{'7....Q.8h0.qr.....6..qo.bJ...#......z..._..x".
?...........`<..kz.A......^<.0{.......IL.....1.....9........../.
=.........O...gg~x..H!.8S....?`M...~J.Ix.O.sp....?.tNC.........a..}...
.A.;.}...w...W..[?m. *[email protected]...
.. <........1......w...w........../G..G..$).$>`.'...7..'v.6K~7).
."......H.t..d.f4p.(`..6'..s29..<.w..-:.x....!. ...H.x....);l.OX4..
.:X.)i.......... {..!......)..h.....oZ!.1;.6=7..catd5..90at.|.\...S`.A
.....g....t...1........ >.Y...G..;}.t......<........6....yJi.V..
....g..1 v.....;f...SB......1<<<...8...6..a...@9.(.....o3....
.d"t0L.<..}. .9(...1vN.....^.!{..._..5..j.X.@0{.k<.Fq0~...kNc...
...F.._..Cja..{......J...y.J0Z|.. .G...B.h:..;;[email protected]./.lY.e.R.
F.Z.K.2G`..!..O)N.#.....s.....".W....`.w..W..N.3..h..F1kkEQC..(.y,.1..
 ..6?&4m..6.];. Y..8..q:..0.k..iP.k[.m..m.x...*...!...ZR..,..nvYO.. ..
...7.E.e].,....80...`.....d..~...X.P.>.{..7..j.....|..V.!.&........
.&..T....dU.....89,..n..%I.\.x1y....sfK..0rn..A........z....c..F.y[ku[
r..a.I...........m[ii.]Z.......z.|.u.K......z1.9]....?nY^0..0..k.6....
C).Z.z..8......o....S..m.gk..T.v`juf.~...E..e$\3{.5...;.T].Y].].`.m...
n.o*...,..hQA.5 :...x(...vc4b.1.)2 ..Z.Td......$o....*....&.....J-...@
n....'>&....y...#...........^`..KK.Z.....S......&h....;d... t....,0
...>...w.. \/@.G.d........U......F..o......%...=vm...gI8.....-3*O..
....{.@...<q..G.....jgC[&.L,....|N...:P..Bq......F.s-.pVh'....v<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.tvguide.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: tvg_session=guardedeyJpdiI6InltS0syZDdicnpQTHNUYm50bVArdFE9PSIsInZhbHVlIjoidFArbUlaWWpDZ2pMRGZZTnhZUE50NnpSOENXUmV0b1Zsb2c3Z2hUamcxZ2NNYnAybjJnOHlcLzRkQXc3MlwvanVreXdaakEwV0NIZXBORng1UStnZCtUdz09IiwibWFjIjoiYmJmMWU1YzgwZjVlYzdhOWE2MGExMWY4N2NjZTFmOGM0OTVkMTA1Y2ZlOGYyYWNhZDM4YjQwNDRkMWVmM2JkMCJ9; tvg_user=181c6be9-2ea4-4aab-b788-0f237dd2f301

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx

Content-Type: image/x-icon

Content-Length: 18094

Last-Modified: Tue, 28 Apr 2015 15:13:54 GMT

ETag: "553fa3b2-46ae"

Accept-Ranges: bytes

Expires: Thu, 30 Apr 2015 07:25:23 GMT

Cache-Control: max-age=0, no-cache, no-store

Pragma: no-cache

Date: Thu, 30 Apr 2015 07:25:23 GMT

Connection: keep-alive

............ .(...6...  .... .(...^...00.... .(-......(....... ..... .
......................................................................
......................................................................
......................................................................
..................dd..))..AA..TT......??..]]..NN......ff..ff..........
............................ww......................qq................
......11..PP......~~..............bb..........tt..................::..
....aa..tt..TT..]]..jj..........""....................................
......HH......................................................!!......
........>>..........xx..................................!!......
........................................................!!............
..........pp..................................VV......................
~~..//......mm..........................))..............}}......''....
..}}..UU..............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................(... ...@..... .....
......................................................................
..................................................................

<<< skipped >>>

GET /services/xml/rss/nyt/InternationalHome.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: MF2=19hhj9gt8nsle; RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Content-Length: 8961

Content-Encoding: gzip

Date: Thu, 30 Apr 2015 07:25:30 GMT

Content-Type: text/xml;charset=UTF-8

Server: FeedsPortal

ETag: 1430374290000

Last-Modified: Thu, 30 Apr 2015 06:11:30 GMT

Connection: close
...........}_o.H.......^`....%[N.q<.e.Vb...N...(.%.b..."...........
...,w.I..=.......R...3...H.S.....S....y..{&......]..a./..O....y..~...#
..Q.<b*d,%.<ao^..sZ....$.l..E..I.^.J....O........x.....z...t....
4Vm.......f.......z.....6....w8j..............z....z.~,n..Dyc..H......
...2hV....t^/......9.....9........{......."6eq.....<.b..pn.....@...
.T....._......uw.....1...P....w.........{.C#...p....S&c..{it..l.~.!.Eo
v...;..wh.D............<..q.....I....u..wT7..!.._a-..../?....y7L.._
.*[email protected]}.>..w..L..'.....x....Y.dxS.....\.I..w. .t.-r.2.g3...
w..."]1Mh<?./.:J..)M..M....K:.4.....^..'g.7G..6.D.'....<....4..[
 <.s.......F_!...I.}......U}.._........D.s..~.ww.xrT..l...y.x.....(
[email protected]....`.~..b......K..D.....I'.E..8Dr*..
........j.........~p...........6..%..Q..p..#n..6.N..v.....s;n7Sn.h..5.
p.\..W....;. .......\..[`.=.!...J........u.....S..D1.t!.......,..?'3.E
......J"6N.J......N.I..><..kx.$R..g....rN."...t#.;...!..$c...1.s
..x../.@../ ~|.).._.@........?E._.t./......)..Y_*..Uc}........ #!A.o^.
/.81..H.?.e...p....K.p..tw.X..!S.iV$(....f......g..W...../..~...`_..;.
c.Eb.S.F....F......qw.6........h.H..{FA.U.....6.8..~..../....N.P..2K..
.R...........M@-.@L)....c.W.E.y..3x.........n/...PM..........%.......\
s...(.....F. P..$.....9v..t.5h..2.o..F...<.......k....T...1........
k...$ ...K.`..s...A.......sK?.i[.?........f'.q..2...&...T..........Z..
C.V..h..a.g`Hvi.S...C....cw....... ".x...-..hq...)g2~.`......F.._....F
.....w=g.F_|t."......d..k...u.5..(.S.i]....;......G.......Qw0.....<<< skipped >>>

GET /softwares/5/2/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=17207262-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:22:03 GMT

Content-Type: application/octet-stream

Content-Length: 5735752

Last-Modified: Mon, 05 Aug 2013 14:46:25 GMT

Connection: keep-alive

ETag: "51ffbac1-15e1526"

Content-Range: bytes 17207262-22943013/22943014
b$.qJ.S...fi.&.... ...,.6r...n.r.b.7..!.....J...p".~.Qo...i..A.I.....L
...K......`..T.K..2q1k.I.I..Z..I.G..4..e5.....gfuK.8..D.S.l#....4..b..
v....9...$....C48x...DYN;..J'.9......1.H.gQ..7.....?e..B.j.!..R..m%h.X
....!e.2.......Q....pE.......#..1....}.l...[..a/.i.g .5.<...H......
..E../pN.........Q..'G.].3.TBr.......j..6............IJ........]..'..%
K....li...Y._Y.?.6.:.......c.@C?.............. /.....jh.....i[..l.m.".
.Kc.*.:6..H.~....d.?..u .x}.t>....wn...;....C'6..[.FI.2...u.&....1.
...o..|..:..~......}...b .-Gf....J.;.).\B.u...:e.Z...a...=n...|I...?..
....=.A..R...i.....4....7'Y.R..7.w6..#Q.<mb...l>D...{=...AAu,...
..b.D4.. .%.Z.d...v.">.(@...-(K.kt-....(.S-.N..`.dF..Y..w}.l.Jz..k.
..J.|..W.=G.T....y..L.......p...}H..-.{..*......8m..}...>..r...2n. 
.U.1o..4.Z...m3<t.K.w.....k........k..w1....E}......<_H.$.1jsN..
...}.K.KkC..n.^hF..UO.N^.G>....k.,N....2......U%.l...>....P.~:..
^%..r\o....@.=.....w...V0........Q.Ad.n.U....|.r...$Dx.]....z....&.8..
....Wa.u........._.v.L\..Wn"..%I..............a..[.m...yS......*.1.6..
]...t..l.Q..Z....s.5./[email protected]..(x.3..@,S...YI....b.ta......0..Np..[.../.
...-...H..,O.............G...~.].Z..`.....@P.. ...B....\h.!..%...)....
......<ZT.[...X....0q|......~!D......V.....W...Kk.........At .....7
.c....u.{.. .%_...,..|uN....|..[...:SC.-".1.._.....~.=..&A..0.._._O...
..p...(Q..o..H.y........3a.2...x4-KX...G(.M.A..I...m...~O...]...M@...,
..q....:`E..... .K`i_..J.>.5..0.>..3 .zg.X.....(.4./Ti.......q..
........9...iD.......yI....}.&.W..%~|4..w......^Rw..|.u..7...g.&f.<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=335664-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:21:59 GMT

Content-Type: application/octet-stream

Content-Length: 335664

Last-Modified: Thu, 30 Apr 2015 03:13:41 GMT

Connection: keep-alive

Expires: Sun, 03 May 2015 07:21:59 GMT

Cache-Control: max-age=259200

Content-Range: bytes 335664-671327/671328
..M.u..C.PWj.Q..;.......M.....E...;..}..t)[email protected]....;..._
^[..].3.......E._^[..]....V......Q...............t.Q..h..G.Q.........7
...^......^.........V........Q............W..(......t.Sh..G.Q.b......_
.7...^..O..A..G...t......_^.h..G.......h..G.R............u..B.........
._^.......W3...b...t.Qh..G.P.........7..._.............QRP..G..j.j.j.j
.j.j.j.V..j....,3........_........U..3..}.....t..8...3........]...U...
..SW.}...8......T............E..M..E.....u..l..._[..]..{..t.S........_
[..].V.M..U.R.E.PSQ............uk.{8..M.t....t..U........M...tM.C8H...
.......$...E..........QW.S..........u ..8..........t.S............z...
..^_[..]......(.................V.....QW..............................
`.....Q............3....H....y....I.m-E.v-E..-E..-E..-E..-E..-E..-E..-
E..-E..-E.....V.0Wj.j.3.....H......(......G.t..._^............U.....SV
.u...W..(...3..}.....6...9.,.....*....M...t..................9.p......
...9.,.........9.D.........9_.u ............t.h..G.....H........h..G..
...H.............u._^.C.[..]...T....U.RWSPV.L.......E...t.S....H..E...
._^[..]..E.;.t....... ................l...S.. .....$.......H..........
............}....G...t.P....H.....G..........._^..[..]._^3.[..].U..V..
....$......(...t...............D....Q...,....t...D....t.V.............
....u.WV.w/.........U......^].......U...}..V.u.W......u .G,..t........
t........u........W......GTPV.|[email protected]@...._3.^]....
........U..V.u.W.}.VW..........u.9.t..._^]..0.._^]......U..QV.3Wj.....
.j.V.FP.FT..B..j.j.V..B..j.j.V..C..j.j.V..B...E.P.........4..u.9.t<<< skipped >>>

GET /cnnnext/dam/assets/140208185334-iran-navy-warships-file-story-top.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 56105

Cache-Control: max-age=3429

Expires: Thu, 30 Apr 2015 08:22:22 GMT

Date: Thu, 30 Apr 2015 07:25:13 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
........................h...."........................................
....................}........!1A..Qa."q.2....#B...R..$3br........%&'()
*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................
......................................................................
..........................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.
....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................
.............................................................?..z>.
.J.W.."WA...qR.G..R.JA.}9M ...)..MH9.A.=[.h.D........)1..u0.)......J.0
S.y....R#v...R(...QD..S..5.U..#.....6...4.4.<....zVf.\B.SsK..L..Gjh
.?u=y S.dz..9....T..px4..M6.....8.MXI....(..;.bx.S...".....U..%...u}..
....b......QT-.M....3.....K._.>.......A..~.4s*B..kd.pf.`e.q.5......
...h/.....7../N..;..=...V.S%...U....[....s.8-7t h},.V#..g...Y.........
......?.....x.P..g......v.,M...*..b.G<?..=.F....u?..j..D....P.%.d..
...][email protected].....('4....R...)A....5!.HZ...M.!c.V...O.".......)1..
;5....AC..4.F8.....RP9.P..JJv.2i.px.H.i.....h.>..q..M..y..h......P.
..Q...q..Fi..(.H...a.4.!bh....Ljy.Lj,$D..a..0...sR. ..d....P=...".qU.2
>.u..8.I.Jd.PJ.m....@.(...Pj.5<m..0&....)..J.jB$.)wb......i..B.5
 ..U......x.Z..0.O...6..~.(.R... 5..R-".2..../..T...z....L.9N*T|W3._.M
....T.O}B;h.Y..cTQ....)..c.*.....C..\i.vRo..[..Epq......#?..O.I5......
.O....Hc..F...............8.....x.O.x.A.& .}e..eR..(9..=.../.z-..y<<< skipped >>>

GET /cnnnext/dam/assets/150302143142-tipping-tip-jar-i-large-169.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i2.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: image/jpeg

Content-Length: 28441

Cache-Control: max-age=845

Expires: Thu, 30 Apr 2015 07:39:20 GMT

Date: Thu, 30 Apr 2015 07:25:15 GMT

Connection: keep-alive
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.L..........................!.1.A.."Qaq.#2....BRb..3r.$Ì....Ss...&..
..46d..................................2........................!1A.."
Qa2q#3.......$B..R............?....W...z...?J{MC.UpM.D..J.....T. ..G.$
..` b......)..!=Oc..3...j.*...K.g6{..W._5.LN.g...TWP..... 5..pb..z..9K
...4.L...{G...t..1S...5...G.Z6.V....\.G... .h.xeA>U..i..YJ.I...6..n
....O.......ag...g..h...&.~TF... n...~...C.y..I...#Y.6...I.S.^.....-. 
...},...-G....YV...VG..Q...K3b%..2...4.?.'.....A...\.rp%f.ZA...N6...D.
.............7T...a.#..].........jOfzD.'.as...G.Z.....U..c........i.VW
wb.K8Z]..".wbb..Q.!E@~un...wF.sS.\....... 4.;.q.G}......Qv.aD.<.o.E
M ....~.m.(.T..%_.[n.}...'.....x.......D..IiKRr..2y...z5h.EB=eh[|6c)I)
.(...GF....n.N..%Aj&....w'...(q.MG..u_..."GR.Nt.;.^.Hn.#.V.........q( 
%..y.......-0.).KJ(*A..*Q....P/1V....%...R.....pj.dr.....y...,....H..1
J.LOB...jV.8...x.i..H*.]....Gz.7k...v......F..^..f.BuId.7R>.....)`.
=...YN...z...um......q...o..{..^...\d.<].....>..R..`..{...i..J..
....#...:...ZPI....z..S4,.....e.B`.rDa<..A.B.Hm...bz.`._....<.I'
#8..9..U..Gy/M....H..u?..B.,. ...D..)...c.W..TE...w[b..Q..#....;G...f.
...y.%.g.[.~..{.C...Jt.. (|)....G>t..,1.A./.'2.....:....".l,....[..
...`..D..u.....Jk........._.:X...."..R?Z._...4.%.6..P.~(.....$=...n...
.@4;U.n,'w4L..k...'..I..^...y..y.<]......y..[.A9;.S.b..........<<< skipped >>>

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=107085-

User-Agent: Better Installer(Mozilla)

Host: d3zcfo8zs4s5u.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 178473

Connection: keep-alive

Date: Sun, 26 Apr 2015 06:08:59 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 107085-285557/285558

Age: 980

X-Cache: Hit from cloudfront

Via: 1.1 d6fa2e1de8f392301c10fd5bb7b263c3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: y2Mz_L9YeyWAN5JBued_DIxPp8IddDgd-bBl1Okunngv1SgBCbsCTA==
...^]..)..;....h.d1...5^1...B...Q...z.N....WC'./..h......U.S....[...*.
>P.^jM..%i.3T5..w..$.X......?u.U...!.0..s.../..F.....i...k........9
M?.....p..3....J.Q.../s............8.0w2J"h..1...W.#[email protected].,Kao.@..:Kl
...Pk./%[email protected](j8&R..;..KE.UZ..&..........B.Y...'3D.
....K....>..6/......DM.....5B...k.I5.&....3....2..oe\[email protected]...
?...0r..J..ko...Kr.3.?A....um..r6..k......3....tX.....hQV.'.`.....X.3u
[email protected]"}.e..W.......BP.i...(GG%...P.]3".q<.A.l{.
......u..J.J.J.6Z(..-.w......)....nI\Z.B.>.xi#p. .9._(..m......"..c
...AnY.~......;..W....(..".d...EF...2..V....D..I .._..z.Y..o.......^..
.i2.c....'J...0B?............<...TM....T..)....Y../..Xg......>|m
C....O.......-7.z 9A..U..<U......Z.Q.X...i...C...D.s_...^..r..aJ...
.mm......p.......W.......'.*....LA".P......Y5np.z..../ro..>..\.$d-.
i_.g..=...*.]0$.Z:r...D. ..O*i.......B.%..K..^@...6Z....%....c...q...z
.R!].w(}.e.....R}7.c.......-...0/..i.....;..... ...'...tf.=....g>.N
...A........\..vHz.........{5.."s.........R...\.p.xj}...~=..w.V..$%...
.,o..Xa>...8.Q..E.....b.qL.K..a.....o0{...CEd/......J_n.......0T...
.#. .x...k0.....M'yr.X.U..E...oF.z.rE.oX....E...q...M..l*....q...~.`b.
.\..#..kJ..Mlt".P9..B.Y..r.j....Q.Y.1..w...%.x..nH....Mg-....#RZ.g..c.
..`no~.~.=.7y.....cI...jM;.....8.4O.Y...w..5..RZ.}..`..V..z/.{.....t..
y#Vr.9_;.-.G....s..\l^..h.]...{.^...{..`...oae....A...\&|....4.z......
....t.0...MzJ'...!.iW`x.xG#.T.Q...p..<.7...S...... q.6n=m2....o..aW
[email protected]{h;k.o....#.H.".c..<I#.b......].<<< skipped >>>

GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ClearnC HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:17 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.67 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Thu, 30 Apr 20
15 07:23:17 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.67 ms","message":"store 1 ac
tion and 0 update "}..0......

GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ient HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:21 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.45 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Thu, 30 Apr 20
15 07:23:21 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.45 ms","message":"store 1 ac
tion and 0 update "}..0..

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=214170-

User-Agent: Better Installer(Mozilla)

Host: d3zcfo8zs4s5u.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 71388

Connection: keep-alive

Date: Sun, 26 Apr 2015 06:08:59 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 214170-285557/285558

Age: 980

X-Cache: Hit from cloudfront

Via: 1.1 da44a033908207250002410c047e8764.cloudfront.net (CloudFront)

X-Amz-Cf-Id: zFlDDOsVWGAoow60TbhRxdSiN5o9f0EmrqlfgaPhwxjlEJFHx-SBsA==
a...:X.h0...d...,Q..b:..... <o..^..z.nI...n..b..3........$.#....k..
m...L:M..^..b..j.*G.:c'^T... .k..|..?D...c....\..P.}[email protected].
...x.X..7.[.f...!......g...)aT......k.....1..K.....ou74.U..#.k3-...N..
.....t....u8n.7.c.2..7J... ...h..s......[.V..44.a..<.- .....x..O2oZ
*...u.....oY...T..k..r. z'._GC..B.W.9&1......'.~/].2 v~..:f.=.x<0.}
.e3F/5..b..<!..H...1)......V~G...7.........A..1VS..s.!6.k.J6...h.o.
..8..A^[email protected]>.[.Z...I..P..................Y..... .I."....s....6
d..<F-..[....\]^... C4w>..'j$.qT........J .{..\....X>........
......|EU.*................c..Q.<......Mk..%....1c...8.g:...=.d'.R.
..Im,O.o$..Q.....O..fS43.(...`..........M.s...Rx..[.|:...&.^.....c....
..)...>.6.C4c".%..O..r.Cg.........|._...9..m.h.6.;.Y.L.~).M..]A\...
e.u`...U....s.X....m.....1y|.....k......~..uEi.$...J..pK.:Xt.....z9.bu
*...1:.C....`.]..N.oR.....0..(.5U!.*....$.......3t.0..Vd6..H....6.9N,.
...)T....e.h.."..N6..nUE.......Z..d.........&.....`..1..............b9
..K..g..9Md...K...6q.?...MU.GW.c.C..Ppfw..u.{.."..]....wf|k./(BX......
V...p>...'.;..(..Q.....9.:...R.v";...zv\;..Ow.2...7.~.IT.D..mu.k.OG
w....<U.....x.. ...i.....W.5|w.#....DR.w.}..r......D...^Y..v.... 05
...K.:.{..}Q...t.Y......P..#Hl....2........&c.....C.*...D....l...v.K.v
D.wC..vK4..W.P.).X.....Z..;V2......,j....q./.q.i..d.........\..F.._a..
.U....T...m...d.....>....{z.tf.T..%...5.. NF.......).....:.b,..O.Yq
.....u/oT<.`[email protected].|T..mVLY.......C(
E.....F...e|...hu.\.\. .....~ ..Fi>..M.;..f.U$..!.&6 Y......s..<<< skipped >>>

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: d3zcfo8zs4s5u.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 285558

Connection: keep-alive

Date: Sun, 26 Apr 2015 06:08:59 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Age: 980

X-Cache: Hit from cloudfront

Via: 1.1 e89c67951b2bc58773e3664c08702f34.cloudfront.net (CloudFront)

X-Amz-Cf-Id: FmM-4qYUWYvwJrs2x4YjOIIurbHJB5KIh8NLW1YJlF1nJLNqV45bMw==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
......@...............................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
[email protected]..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

GET / HTTP/1.1

Host: ipgeoapi.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:23:26 GMT

Connection: keep-alive

Content-Type: application/json;charset=utf-8

Content-Length: 40

Server: thin 1.4.1 codename Chromeo

Via: 1.1 vegur

{"country_code":222,"country_name":"UA"}HTTP/1.1 200 OK..Date: Thu, 30
 Apr 2015 07:23:26 GMT..Connection: keep-alive..Content-Type: applicat
ion/json;charset=utf-8..Content-Length: 40..Server: thin 1.4.1 codenam
e Chromeo..Via: 1.1 vegur..{"country_code":222,"country_name":"UA"}..

GET /yandsearch?rdrnd=739957&text=sdf&lr=147&redircnt=1428581802.1 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.ua

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Date: Thu, 30 Apr 2015 07:25:02 GMT

Set-Cookie: yp=1746602702.sp.; path=/; expires=Thu, 31-Dec-2037 20:59:59 GMT; domain=.yandex.ua

Set-Cookie: Cookie_check=1; path=/; domain=.yandex.ua;

Location: hXXp://pass.yandex.ua/?retpath=http://yandex.ua/yandsearch?text=sdf&lr=147&redircnt=1428581802.1&fretpath=http://yandex.ua/yandsearch?text=sdf&lr=147&redircnt=1428581802.1

X-Yandex-Items-Count: 10

Content-Type: text/plain

Content-Length: 0
HTTP/1.1 302 Found..Date: Thu, 30 Apr 2015 07:25:02 GMT..Set-Cookie: y
p=1746602702.sp.; path=/; expires=Thu, 31-Dec-2037 20:59:59 GMT; domai
n=.yandex.ua..Set-Cookie: Cookie_check=1; path=/; domain=.yandex.ua;..
Location: hXXp://pass.yandex.ua/?retpath=http://yandex.ua/yand
search?text=sdf&lr=147&redircnt=1428581802.1&fretpath=http
://yandex.ua/yandsearch?text=sdf&lr=147&redircnt=1
428581802.1..X-Yandex-Items-Count: 10..Content-Type: text/plain..Conte
nt-Length: 0......


GET /yandsearch?rdrnd=50263&lr=147&redircnt=1430378702.1 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.ua

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: Cookie_check=1; yp=1746602702.sp.

Cookie2: $Version=1


HTTP/1.1 302 Found

Date: Thu, 30 Apr 2015 07:25:02 GMT

Set-Cookie: yp=1746602702.sp.; path=/; expires=Thu, 31-Dec-2037 20:59:59 GMT; domain=.yandex.ua

Set-Cookie: Cookie_check=1; path=/; domain=.yandex.ua;

Location: hXXp://pass.yandex.ua/?retpath=http://yandex.ua/yandsearch?lr=147&redircnt=1430378702.1&fretpath=http://yandex.ua/yandsearch?lr=147&redircnt=1430378702.1

X-Yandex-Items-Count: 10

Content-Type: text/plain

Content-Length: 0
HTTP/1.1 302 Found..Date: Thu, 30 Apr 2015 07:25:02 GMT..Set-Cookie: y
p=1746602702.sp.; path=/; expires=Thu, 31-Dec-2037 20:59:59 GMT; domai
n=.yandex.ua..Set-Cookie: Cookie_check=1; path=/; domain=.yandex.ua;..
Location: hXXp://pass.yandex.ua/?retpath=http://yandex.ua/yand
search?lr=147&redircnt=1430378702.1&fretpath=http://yand
ex.ua/yandsearch?lr=147&redircnt=1430378702.1..X-Yandex-Item
s-Count: 10..Content-Type: text/plain..Content-Length: 0......


GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.ua

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: Session_id=noauth:1430378702; yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:04 GMT

Last-Modified: Mon, 27 Apr 2015 14:56:24 GMT

ETag: "de0573-6fb-514b5f31db600"-gzip

Accept-Ranges: bytes

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/plain

Content-Length: 504
..........}.M.. .....9X9X..l.v..Z.v/.w...&....$..........<..;0|....
_..v.(.W..u..../.....z.A.N....B.&./E.L...J ..z..6...y...&,..a...m...xC
...<.W_...(=.~.....OV.O..v..Y.j....0.p.....G..]...4V ....|....C.; O
[email protected]>..).`.y6.3aQ..yD\N...<.../.80...?.7. J....B.-
.R#e...$........i#....o.O].bx.p...M.*.\....J....-..;s..V.K1..&"..8D.9!
..=Q.lt.M..c..[...q.j.~....D...Q'..!SL4CAsVJ.7h4..s'..-...%p.>....u
......k....Q3....X.....Y3....LY..T.....[x.}#.....w.aU?.....yC..A...;..
......Y..Z........'.....K....HTTP/1.1 200 OK..Date: Thu, 30 Apr 2015 0
7:25:04 GMT..Last-Modified: Mon, 27 Apr 2015 14:56:24 GMT..ETag: "de05
73-6fb-514b5f31db600"-gzip..Accept-Ranges: bytes..Vary: Accept-Encodin
g..Content-Encoding: gzip..Content-Type: text/plain..Content-Length: 5
04............}.M.. .....9X9X..l.v..Z.v/.w...&....$..........<..;0|
...._..v.(.W..u..../.....z.A.N....B.&./E.L...J ..z..6...y...&,..a...m.
..xC...<.W_...(=.~.....OV.O..v..Y.j....0.p.....G..]...4V ....|....C
.; [email protected]>..).`.y6.3aQ..yD\N...<.../.80...?.7. J...
.B.-.R#e...$........i#....o.O].bx.p...M.*.\....J....-..;s..V.K1..&"..8
D.9!..=Q.lt.M..c..[...q.j.~....D...Q'..!SL4CAsVJ.7h4..s'..-...%p.>.
...u......k....Q3....X.....Y3....LY..T.....[x.}#.....w.aU?.....yC..A..
.;........Y..Z........'.....K......<<< skipped >>>

GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.ChromeSync HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:21 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.68 ms","message":"store 1 action and 0 upd
ate "}..0..

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=8913819001430378702

Cookie2: $Version=1



*.4p.".8e!v.t.z....X...]....d..N.$.T..Ex5[.k.W...~.~.[....O.~.~......4
../..%X...0.....H..|.......h.....w..w_.}...(.........d.......2/!S.~\ .
......@.......#..Q.5'......E..$z.../q.$.jYHx..DB..*l.).A.I.'.w..$j.rH.
!waP.....L.|..:J.R....q....?%.N...Jc<*.~L^......2...(JV...?K.(.pe.,
..z...d.2.?/.].m...o.../............fI .... .H.i......F...W..`.0.F...4
.b ../.....#"c...O@?...!..Y6.....S.....}.\.f...!).(......A.A.......dpI
...C.......4...3.GD<=;k.f8..../s;.7.p..l..y.DA.......yy..U..X....G.
.~.f.p#.....z...K-:4.R...-.'...^\X7./_..F..\...c.........'s...c.\>.
..y.Yn..:.6..!%.'2...M.(../_.c) .&f...HI.4.....xL.h,....d.8&.......;..
.=._5.O_<..G_.=9:9..^z..S...GGO..L.^L}..m......>N0....u...lv./[r
#SH.....~.b....D.......C.......f.^"9........s..d...h..F..........i.I.y
.Eg.#$..*[email protected].:s.WKj.B.U..........b..n.UZ.B....N.O.`.i....P./o....s...
.o...-MK.?............-.ei.`.Z..c(.y..._...-L.....g>:.)..l..)....F!
.3.t...;m.).y.F..I:..2. ......yu..'..r.o......W.Hlj3;......vfG.J.. d..
j~..3;......H..-.k"[...1...,....q....~`..O.....CvM........$.......!3n.
..ow..s...........z;vb.COM.........$.h.6..Q'.VF..C;[email protected].;.....Y.
.DZ@. ..Q:.c..C. ;.Em...".....l.S3....8rA......]FbX^H.......u~.eoma...
_d..6x......$......... ~..B%../..c.K.z......Ni...%....]d....].^&).A K.
...F. ]cn..].....|V....&k........u.I.....!n.1.9.........3.....tW..w'P.
.e..A.m(]C.......@....\..Qi..l4&....*[email protected]<)Cog...*B1.,0.M.%.
A...I...0&L.-.J......~.'[......H.................y....y..$.J.....S.,h^
h.R.......=D....(e.!hCV.`..C...%.=...P.8...E.(....pAJ2..i.....TvO.<<< skipped >>>

HEAD /WORLD/index.html?eref=rss_world HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Server: Varnish

Retry-After: 0

Content-Length: 0

Location: hXXp://edition.cnn.com/WORLD/index.html?eref=rss_world

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:16 GMT

Via: 1.1 varnish

Connection: close

X-Served-By: cache-fra1245-FRA

X-Cache: MISS

X-Cache-Hits: 0

GET /vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4 HTTP/1.1

Accept: */*

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:21:54 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
600a...............z.F.6...g...N...N.....s........I....A....LR>D.\.
w-....]..P8P.........PU...u|....,Y~.H...d.......4..o.q....F2...t......
_.}.H.......`.~\n...c..<x;;.4kD...=.^.......e<...S...%.n...Yo.n.
....l.iJ}....i.rx:...h......q.M...{%}.N._...l.<MFir../~.g..t<.~]
....l./...2],....i....d.N..89?.._...V.......Og.A:_D.>?...b6X~....b|
9....5Uzo.O.P....q.)..q..R.],..t.]...."..... ..ON...y..c..r9...?sz9.a.
....O......J.C.9W.ez..'[email protected]...."E..l2I.}<tC.O.:..e...
[email protected]....:....b>.....^<?.H....}..-8L...0.f.. ....7.n^F..[.
t./.....l...q.!..Z....l..Ez........%zu:.....l0s.4..?.....4._.1.}..y...
.!.;]\.N.a...V;.....7.sK..=..x..N.......}..gq.4.]N..O.p|..*..G..K.e...
...cf..y<Luca..wg....~.6Mf.A6.N.i...#../...^&.C:."..$.4u..,.>...
.O{..>...G.. ....|...9]fK.E.......0..L.-c....|c..........}...|..X.b
...N.S,. ....;..&................?.v..]. ....vX<......s./..~..l...)
.............#. u..I..GQ.u=.....\..A.*.1.w;z..2.....ap...._W.nm..../u.
..-.......w..[w..cwk.v.X..~...k.ww.......S......p. fW..~....~...wk....
...~<.~......|. .3w.....{...~{......s. ..^...[.......K.!....8.f../.
..8^,.....x....g..R0JGz.(^.r#..>..p..w.O..?g..?T..o.[..N^..)/......
....G.iN.L[l.P............w.<....l4.......^......r>....w....u8..
....8FP.e..*..E.z..-$Q..f-[6.......w.7...,.F;{..dk.N...^.....A.onDQ...
l...~r..DQ.....,3..{...G.....pu......g;o^_...V..6{a............Ku<.
P6n.P......tn*m..Z.o.}-.....M......~8._.O.."....s<};.8$.;o..y/./.. 
..spa[...6!..=...3.,XU_^.}.X.....[..(.:.=.Y.Ox;.?.5..zQ.t.....{...<<< skipped >>>

POST /installer/ajax HTTP/1.1

x-requested-with: XMLHttpRequest

Accept-Language: en-us

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept: application/json, text/javascript, */*; q=0.01

Content-Type: application/x-www-form-urlencoded

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Content-Length: 2742

Connection: Keep-Alive

Cache-Control: no-cache

country=UA&uid_orig=3dcb990301cdcc4caf3f2b66db05a4ce&uid=3dcb990301cdcc4caf3f2b66db05a4ce&affid=vlcplayerpnua&sid=vlcplayerjiix&cli_id=&softwareName=vlcplayer&installerVersion=2.0&osVersion=6.1.7601 Service Pack 1 64bit&ieVersion=4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)&defaultBrowser="C:Program Files (x86)Mozilla Firefoxfirefox.exe" -osint -url "%1"&defaultBrowserName=ff&originBrowser=ie&hostBrowser=ie&tzo=MTgw&muid=96d78f35e7b7ea4fc32736d428df43b4&cu=false&cd=false&tokyo_csrf_key=ef11e043c1b5cf5a97b01f6ea9b1ad3f&tokyo_csrf_timestamp=1430378514&unique_id=9c129a294d7cc0fe9ed53d890dbde85f&clientIp=193.138.244.231&ffInstalled=false&dfz=false&avdr=lDKrp/3VMDh61tuJfJlrKXs1VI6ezbhGnJBKbIRjXeIYfcyodTGERY6ZOIkepjCAJ6l5ti1eroI6fZ94jJ7hVTGSxjM0U9E77FGnMsZ1LcvOzHafQu4ZCzL8juT87O
HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:21:56 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Vary: Accept-Encoding

Content-Encoding: gzip
ed3.............[.s....W0.i..e.....8yi.y..'I_.M..@$(..U...d...o.....v.
.G:SS ..b.ow..N .B...W..{.;..H.....D.<.8.u.E$..l.e1pNw..:..eA.%..-e
.1.'..X....X...T..K../....M..\.UZ2U..%O.V.L`.oA..N.:/B.<.}.a].\.<
;VD,...\.X$...H...?.Z....v].......*.s.....r.........Y...g...":g...Q,..
...2.R..,Og....M..;.L.T.1.ZY.....g"..V .,3.YT.3H.....<.......H'f]..
Zq...........:.. .X.b.....I...B.....X]....{w...R./%.ff.....G...`.]z.. 
..X4...IH..2.x(....%..kO.......6...\...*...../..$.......<6.....i3.Y
>.>{-.'.t..4[..:..P...i.T....h..p..;......b.^i5y..0.'..u...A3.(.
...Z..O%.x..w....K....V..(.X..q.Z.......$...]......R.hl..7,.x....k....
...J.LI^..AZ..R.C!...\..O2.Y...In0..'..s..geemn=..5..(.....q0Ck../I...
c. .n..T..r-G...%.cSt.._....Z.(@......Z.C.O......t.....".M........|p..
..Z.;j)...)..{.H.e.6.!\A..:.W....y..EQd.....=.=?H........t_..J..".BK{J
..I...h....x>'.M.....f.5..Q......#...O..h..A.!..,%r.fD..L...GJ`D..S
.K0.l...3..~..._..T..U.& .~..........I.*"R........../.2.0p..1..To~1...
..].n%.s.....Z....b..\...^...h.K.0....._N...O..y{..9=..~.....[.j..Y...
b....}..s....{.v.u..EN.........).5...I. .w.~/q...3.....dO..[..`7^L0.mX
.~/..pO... ..._1..O.x<J....-.RF..h$..".y.KR._F.w.k-.Fp.^..M.I.=...k
.l5."...vC-...`..(....pO......J..^3..j.S....z.)h/....R.(4I....1W.,.$..
.V7.`*b.m........uh......W".2m,G`.Uo..g..w...3..%....R.b/.s......Z8v::
jsY B^F.S.7..#...% .l.d.....?..........[..$MP9.fm.nd(a(.a...PhY@......
.3`........}..0.w0.......Q....f.k.>..kZ......"....n.1r...\C........
i.....j...[.&p..&.b.$..YL.o.........X....w~...S.....`.A.#.. ....2.<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain

Content-Encoding: gzip

Date: Thu, 30 Apr 2015 07:25:15 GMT

Expires: Thu, 30 Apr 2015 07:25:15 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Content-Length: 49

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

...........-N-.MLO. .R..r.,N.../.R..K...."..]........

GET /rss/cnn_world.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=UTF-8

ETag: gk7qqtCfRBg02PThxxmDQmRKDzM

Last-Modified: Thu, 30 Apr 2015 07:25:02 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Thu, 30 Apr 2015 07:25:15 GMT

Expires: Thu, 30 Apr 2015 07:25:15 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
4E58...............r...%..#........*..G|.....Y.....G.(.01.....F?...H..
6.....w..-.de....*  ....<...H8........p..,.........|.........."..\.
..$..._.b..o=........}.f................lEBh..u7.....?.g.Q0......cm...
i.^[email protected]....;.>,.;...%....E.y\....A4.Z.
g.]N..i.5.......s........=?Gs... r.........O..06.....]\..m9...6..s..8.
...Y6B.A...0UN...Of,.:..IB..4.9..?.9..L..[...A.1...?....... AHD.D...d.
...m....(f...W.$.\'v.l,/..._[yO...'....s..^....q..p.9.;.... .)j......9
zy.c.:%........,.>.c..h.<....6.6$.a...v.U7.'.{7.m-..."v..*0.qzi.
o..._.$r..w6M....;(......[.7..i..&..l.....~......`..c....N....K.......
..._..]..4.,.<U1p.....O.~.p.gz.[.)Jwk.^.@"........G..C.1S.........c
.......} [..k..m |.D..>..mu....o..])...|..6....8./..O...y....q@N`.=
...0.3@..$...DQ0K'..B..s'...U\r......>.. ..?......t.........f).5.C}
.2...3..%l.sw._[h....g.....o._} ....O....<..O..}.k.$.[.............
......r. I').'...#../...o....d.M...7.....n...[p.sAfv......^l...E......
......r....M.....r....{b....4.Wc.E..................g.o...$.....hp...g
.....o....v:8...."".il4/6W7w..._..`Z#..Oy...LO_3..HD......o.Ov$ ...8./
?..S.r'.....)e.q..~...N.........5.drt>.?.]....v.*o.........j>...
..?].xRU....IEC..s.'....?8.XY..>0....*U.Fl'..g..d...9...*.....I.Y..
..<.[jW.hCU..M.^.;t.DB... %[email protected]...)...!.#K-.~..3...
....PW.....zv.......... ;[email protected].>........oA} A.......@
h.wf.i.............t[Ft.d..n..6..{.A...E.....#..3.l;.9."...p`...4vbT%p
..(..G...TR.<.a..sw.]....AL.U#....f`..l.}..O.N.....|......eo'..<<< skipped >>>

GET /rss/cnn_world.rss HTTP/1.1

If-Modified-Since: Thu, 30 Apr 2015 07:25:02 GMT

If-None-Match: gk7qqtCfRBg02PThxxmDQmRKDzM

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 304 Not Modified

Date: Thu, 30 Apr 2015 07:25:16 GMT

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.regok HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:06 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.58 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Thu, 30 Apr 20
15 07:23:06 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.58 ms","message":"store 1 ac
tion and 0 update "}..0..

GET /gscodesigng2/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRruLd2WRFk6cRYGFIqkQ4J8hxDogQUCG7YtpyKv+0+18N0XcyAH6gvUHoCEhEhhrE10BUs2OqNBLZ9KgzPNA== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp2.globalsign.com


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:26:32 GMT

Content-Type: application/ocsp-response

Content-Length: 1474

Connection: keep-alive

Set-Cookie: __cfduid=d25db6a1fa85132f2f3b5beae7c49c63a1430378792; expires=Fri, 29-Apr-16 07:26:32 GMT; path=/; domain=.globalsign.com; HttpOnly

X-Powered-By: Servlet/3.0; JBossAS-6

ETag: 956ea3baf7e8543841b53fc9e5541ef4c5625974

Expires: Thu, 30 Apr 2015 16:45:43 GMT

Last-Modified: Thu, 30 Apr 2015 04:45:43 GMT

Cache-Control: max-age=180, public, no-transform, must-revalidate

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1df184dfe67815dd-FRA
0..........0..... .....0......0...0......,p... ...Gy.....'..B..2015043
0044543Z0u0s0K0... ........k..vY.d..X.R*.....C....n......>..t]..../
Pz...!..5..,.....}*..4....20150430044543Z....20150430164543Z0...*.H...
.........<...&..|."P2W.>j..:.b.r..u.K......3<X.*.._......w&.,
.P W.......f...5..[.*qM......w|...<...lE.z....N...p.bL...[.......'.
O`.I.d..,,......0r.H.......J.;..... 6.9:H.......y..N.&.L....=GP. ..dVO
.u.D.........q.[.\.l......{...p..}..q..&.../?!.c...P.............e....
0...0...0...........!~.(......gxK.2.T0...*.H........0Q1.0...U....BE1.0
...U....GlobalSign nv-sa1'0%..U....GlobalSign CodeSigning CA - G20...1
50303092326Z..150603082326Z0}1.0...U....BE1.0...U....GlobalSign nv-sa1
:08..U...1GlobalSign CodeSigning CA - G2 OCSP responder - 11.0...U....
201503031023000.."0...*.H.............0..............E..%p...1.._N.DD.
.y:\Q...........\.2!PFr...=.C-..dYY........e....yAy...U.HZ3.O....w&Z.:
.>.[......>.(..l..t.g3@X&..*i......i.u{...C.....B...........gj..
....s.!..~..].mS.#.,A @.......b...i.*G....2l.u.....<ISC....F......}
0....w2W..KC......6_.........Wua........0..0...U....0.0...U...........
0...U.%..0... .......0... .....0......0...U......,p... ...Gy.....'..B0
...U.#..0....n......>..t]..../Pz0...*.H.............y..6.-....H.~..
.H.....L..:G.....p...C..:.... /...5M.^}...5Q.~.....VC...Y.Z(I.k....P. 
s.!..b..,.A........~..y.G.H....N._......J.........|.k4..../...........
('.....)..:..t....-..}e&.*..:*8IH|2s::r..63..Y..G.....#.- ........N...
.R..X..@. j.,.........N.h........<<< skipped >>>

GET /?gfe_rd=cr&ei=y9hBVeuACdfANPvFgPgJ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.google.com.ua

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:24:59 GMT

Expires: -1

Cache-Control: private, max-age=0

Content-Type: text/html; charset=UTF-8

Set-Cookie: PREF=ID=8615c5ae7b7b7b2b:FF=0:TM=1430378699:LM=1430378699:S=Ozo5E4d3Uk0YPSru; expires=Sat, 29-Apr-2017 07:24:59 GMT; path=/; domain=.google.com.ua

Set-Cookie: NID=67=MZ5ak4Ufl2ENhdavA8tHzRo6VohQ8AccK1vJVzaiUADgP7n48IDZSFDnz9U8crcUQA15PRGnP56diQoXGrJyHgJYyGGNdn9Ps7x_3ekSRWV-QPkB1iq__hLlz0gAkhZf; expires=Fri, 30-Oct-2015 07:24:59 GMT; path=/; domain=.google.com.ua; HttpOnly

P3P: CP="This is not a P3P policy! See hXXp://VVV.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."

Content-Encoding: gzip

Server: gws

Content-Length: 17375

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Alternate-Protocol: 80:quic,p=1
............i..H.(.=...... <$J..!.3...y_.GefeF...(f."...R...x3.<
.`..z................/D..g..$.....]3..}..../........o-Y....vm....-....
..f........ .$...Vl.l.6..i...g....G...L.......-.Nh....=Nt....-n9A.x...
......l4.....FA. ,#....g....o...VlFn..h.'c3q.qC...c 8n.............o..
w...>..?u....M.:9.}..........{...U..uW....v7.......f..ol...s.....F.
.....a..U....N.?7......vV.M..`.:=.?E...j.\............>W.=.... ..ym
[email protected]......'|.=y.v..f.Um....P...mM.\'t..&...5r.....us..l
o....v}6.Po..{._..\....:.GGd.L..^..su-.;v.{_..Pu:.....j.....%.Yn&I....
[email protected]`...N&..f|...s..L...E............}.'P.K..9....
...l...b.&..$0./.....Yt...|...}\.M.[....<.5 ....{b.....N....%..T$#=
[email protected]..?*..j.c;..H...P....D..>....H.;go6._......]...u.h.6..Q
C.....e.:.e.i.Ul...|0(..X9...P/.8.S..e]dY......?.........0.JKYnx.t..~G
[U.ee..y.....n.. u...,.....og'yM...A...........z]...........l(TQ.R.L..
.S.x..o.T"AR.7...^/.6.l.^.6...&.9!..E.&|[email protected].
...Km...XE<...4...........*[email protected]..}l"..;..==.Z..>....
.bTg.....6.$...aC.JQ.;.-.iB!O<1b .c...m..P.....G,$...*..Je.*A...O.9
E..[.T..c'..x[..3J].b..F7...5//....\[]..aS.D......Qh.AL.S.KY.a....X#..
,G.$....5....AU.N....P.9....,.!H.|.n..g....=K....C6..[.CWB.l2..!.I....
.*L..., ..P}...pL|g.e...l..X..'. .|..0p.....'..zxR....#1.. .L..`d..(.w
..d.....8.0.][email protected]_. .........XmS..&.)...c..^W..
.i.J........A..'.&c..D.b....m...lnnB....5\.MN.#...q...........IP ....p
._>.".NV....|A...c..@J`R"@dl........Zm.....J....4....$..eG F.$.<<< skipped >>>

GET /?gfe_rd=cr&ei=5thBVbSuKNfANPvFgPgJ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.google.com.ua

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: NID=67=MZ5ak4Ufl2ENhdavA8tHzRo6VohQ8AccK1vJVzaiUADgP7n48IDZSFDnz9U8crcUQA15PRGnP56diQoXGrJyHgJYyGGNdn9Ps7x_3ekSRWV-QPkB1iq__hLlz0gAkhZf; PREF=ID=8615c5ae7b7b7b2b:FF=0:TM=1430378699:LM=1430378699:S=Ozo5E4d3Uk0YPSru

Cookie2: $Version=1


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:26 GMT

Expires: -1

Cache-Control: private, max-age=0

Content-Type: text/html; charset=UTF-8

Set-Cookie: PREF=ID=8615c5ae7b7b7b2b:U=59bde862d6eaba4b:FF=0:TM=1430378699:LM=1430378726:S=S89mA744gk4G5UuR; expires=Sat, 29-Apr-2017 07:25:26 GMT; path=/; domain=.google.com.ua

Content-Encoding: gzip

Server: gws

Content-Length: 17377

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Alternate-Protocol: 80:quic,p=1
............ko... ..~..>...i..,?$..*....~vU...H>D.LJ4I...p...,..
...g......^,p...{z..../...Fd&.$E.Q.......d...........`...4. ...nm.o..m
?2G.. .{...2....hD...i}.:.....:.R........5......1...al.c]i.>d...h.x
.~......l.........@WXF.%vc..u...h...... .U...f...5ur....q.W.O..w.7;...
....G...........w^.$....Cr{U....a.........*>....>.[.{_]o......{.
.[.\_k.{[..[........j..z.=WY=......k,_......ZYN.........\.....r....skd
.>....5.........{....u..<..a....'..lw......&..J.Y..i......8...F.
^....4....Z_.oj7.=............T..=ytD...w.....kI.....=-@.I....hX1z.Z.-
P.r;.C.....O.5C.......UU{*.....qOG....x.. ..OI;.w.......>.{....]...
.8."]....&V.Ut]`.72).....G..Kk.=.x....=[omh.W...V...!OMM.x#G.=1.M..S'.
.K..;[email protected].%&.......O.........P..7...Pc..r.,..c 9........s....Z]j.
.Q.l....R.].`.Zu..XS.....a..W(..r0.....q(.n........,..~@.)1.W.).a....X
............&....U..."]T.&t[Y4..E...N..b6....9)u.....{...!5u...wm..YS.
...&.D.....|....D......a..{...^.zc&...KrB,..Xu....K.......T.p.$.N..?..
u...w!rOL.......<..EOj..........P.(*JL.I."C -..%#..j...i...cOO.V/..
..f....Y.. ..u..}.._S.RT.NmCG..........A`i.4 T=......I5a..*.R..J..i..j
F.,....{....=.V...RU..9....f@......).VU`@..1....&.g..a.....RZ..`..-...
...&I .ii.l/. P...a..4TA.. .9.`.........(..lN.b.....`......7.L'Y.a.r..
......(...:T_|.1....g.x z..!.lD.)H)_9...0.6..I....Tn...HD...0S.....3..
[email protected]/..]M..w.....,[c.M<..C..Z....
{]..r&! .....O.&.5..p4.Z.8..s~..m.6di}}.Zp.F..zn|....e..6.......u..G..
G.......6..dYJ[..7.._.,..I.LJ.....~y...6].,5.k.^)1....].X..Qh...1.<<< skipped >>>

GET /news/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

X-Cache-Action: HIT

X-Cache-Hits: 269

Vary: Accept-Encoding

Cache-Control: public, max-age=3600

X-Cache-Age: 1646

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Date: Thu, 30 Apr 2015 07:24:50 GMT

Location: /news

X-PAL-Host: pal168.back.live.telhc.local:80

Content-Length: 20

Connection: Keep-Alive

........................

GET /news HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Cache-Control: max-age=60, stale-while-revalidate

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

X-News-Data-Centre: telhc

Content-Language: en-GB

X-PAL-Host: pal119.back.live.telhc.local:80

X-News-Cache-Id: 73513

Content-Length: 32823

Date: Thu, 30 Apr 2015 07:25:07 GMT

Connection: keep-alive

X-Cache-Action: HIT

X-Cache-Hits: 5

X-Cache-Age: 36

X-LB-NoCache: true

Vary: X-CDN,Accept-Encoding
.............v.:...|.Z....t$m.n..9.q....mbg...s.(...S......k.o....|.|.
[email protected]...{[email protected](.~{........9b#ol.......Y.N.[..<)0..)8....k...
./...8|`|.......&...=....n..  .....o......1}.9..:...T...'.P..}..S.....
..=.h..3y....q..=?....W..c.y.........@...'O.. h...HVj.4(U.sWw..g....O.
5..0....'U..z#^....q..WX....a......v.i~...f...k..p.z.cp....86.v.......
...}*.._..i........k&}t..../.....{0....tm..........q.kX..v...-.W....e.
.........j.A....KU.}.s.....B...T.g.C.......=#..........^..M)a...`lv..f
....P`# .NA....E...k.]...D....?.  ..K.......7O.y.._Qn-.y..}.4.T.]..#.W
.21.....C...D-y.{@.|Z._.&.7S.......t.<.B.V.q...7.....1...{#.Y......
..Q$.i%}.Tr....4..X........Yo5......fc{c..Y....A.k.k.X..T.zS...0<..
]]s.J..?.k.e...!..f.YWPXL....AG..&nV.Y34..........,....1(4.......N.U{.
..2^..P...g..A.L&&.A...._...E......._...W.e...>.c.f;.B..R./....=..A
rW..4.9~NbS..Y]..Y<N.<.{.....E..$y.....f...X.*.L$3 O........f.J.
..R0.Z.dVa.....Q].. [email protected]..$.Tt-*...>.........&.....
._...6..ll..dL.s=.....P..Y...5Z;...p..V.][email protected]
........PXa-.J.....!.K.]..........f^.V..p....<9J._s.......*m.vx.h6.
..yP1A...5B...*>.um.....<S.....bM.J.S.....g{......O.T^.....o#.5&
.Q..?i..H-..k.....t..M.N...=..^.\...wb..1..*.h.W......rB^..V..sc..M.w.
s0.......J..G/..N...i.Q/'....q..i....x....Y..m.G.X#......J.....{)0..5.
.n..G../[email protected]`_/..7......c.fyW.r.dF.....%[email protected]
....1.........*...|1..S....!j.>?7t.g|.0.2<..U..x.f...6..........
..Z.............A.j;..h0..=..L.W...............|..N...........'...<<< skipped >>>

GET /?gfe_rd=cr&ei=XdhBVYTwBpGDNITQgNAB HTTP/1.1

Host: VVV.google.com.ua

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.5

Accept-Encoding: gzip, deflate

Connection: keep-alive


HTTP/1.1 302 Found

Location: hXXps://VVV.google.com.ua/?gfe_rd=cr&ei=XdhBVYTwBpGDNITQgNAB&gws_rd=ssl

Cache-Control: private

Content-Type: text/html; charset=UTF-8

Set-Cookie: PREF=ID=99d02176e9854f5c:FF=0:TM=1430378589:LM=1430378589:S=XeJZcNgVErP8BLLY; expires=Sat, 29-Apr-2017 07:23:09 GMT; path=/; domain=.google.com.ua

Set-Cookie: NID=67=DbDTH08klIYIRFJs8Feav9fbZlvVzTHpor01qjSwSqtdGjcFKBXw-plNV0KpCMZKLTeZ0YKNL548Lu2zPsPQVeU_QzGtPFp4nZrfEc-38gjo8hBP-zQn72x3rWJ48wGe; expires=Fri, 30-Oct-2015 07:23:09 GMT; path=/; domain=.google.com.ua; HttpOnly

P3P: CP="This is not a P3P policy! See hXXp://VVV.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."

Date: Thu, 30 Apr 2015 07:23:09 GMT

Server: gws

Content-Length: 276

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Alternate-Protocol: 80:quic,p=1
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>302 Moved</TITLE></HE
AD><BODY>.<H1>302 Moved</H1>.The document has mov
ed.<A HREF="hXXps://VVV.google.com.ua/?gfe_rd=cr&ei=XdhBVYTwBpG
DNITQgNAB&gws_rd=ssl">here</A>...</BODY></HTML&g
t;..HTTP/1.1 302 Found..Location: hXXps://VVV.google.com.ua/?gfe_rd=cr
&ei=XdhBVYTwBpGDNITQgNAB&gws_rd=ssl..Cache-Control: private..Content-T
ype: text/html; charset=UTF-8..Set-Cookie: PREF=ID=99d02176e9854f5c:FF
=0:TM=1430378589:LM=1430378589:S=XeJZcNgVErP8BLLY; expires=Sat, 29-Apr
-2017 07:23:09 GMT; path=/; domain=.google.com.ua..Set-Cookie: NID=67=
DbDTH08klIYIRFJs8Feav9fbZlvVzTHpor01qjSwSqtdGjcFKBXw-plNV0KpCMZKLTeZ0Y
KNL548Lu2zPsPQVeU_QzGtPFp4nZrfEc-38gjo8hBP-zQn72x3rWJ48wGe; expires=Fr
i, 30-Oct-2015 07:23:09 GMT; path=/; domain=.google.com.ua; HttpOnly..
P3P: CP="This is not a P3P policy! See hXXp://VVV.google.com/support/a
ccounts/bin/answer.py?hl=en&answer=151657 for more info."..Date: Thu, 
30 Apr 2015 07:23:09 GMT..Server: gws..Content-Length: 276..X-XSS-Prot
ection: 1; mode=block..X-Frame-Options: SAMEORIGIN..Alternate-Protocol
: 80:quic,p=1..<HTML><HEAD><meta http-equiv="content-ty
pe" content="text/html;charset=utf-8">.<TITLE>302 Moved</T
ITLE></HEAD><BODY>.<H1>302 Moved</H1>.The d
ocument has moved.<A HREF="hXXps://VVV.google.com.ua/?gfe_rd=cr&
;ei=XdhBVYTwBpGDNITQgNAB&gws_rd=ssl">here</A>...</<<< skipped >>>

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=35695-

User-Agent: Better Installer(Mozilla)

Host: d3zcfo8zs4s5u.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 249863

Connection: keep-alive

Date: Sun, 26 Apr 2015 06:08:59 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 35695-285557/285558

Age: 980

X-Cache: Hit from cloudfront

Via: 1.1 1415e6a9d308119037d1fa89386da72a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: ypVXysf_uDcNYLaZFZkzU8F4d8mui9YEvCl8DAu9b-AtjdPiAKC1QQ==
[email protected].>>>.555.,,,.&&%.!!!.............
....................$"".)''..,,.200./--.*((.866.QOP.qpp....=..........
......................................................................
........................................776.........%##.=<<.ecc.
............ihf.OON.>>>.444.   .&%%.#!!......................
...........%##.,'(.0...100. )).-  .@>>.XVW.~}|..................
......................................................................
.....................................AA@.   .....&$$.<::._]].......
......kih.POO.>>>.444.   .%%%.#!!............................
.#%%.''&.-)).1...0//.*((.200.HFF.`^^..................................
......................................................................
........................_JJI.##$.....##$.<<<._^^.............
kih.POO.>>>.444.   .%%%.!  .........................!!!.$&%.(
((.-**.3.0./--.*((.644.LJJ.ecc....k...................................
......................................................................
..................9UVU.&&&.....!!!.999.___.............lki.PPO.>>
;>.555.,,,.&''.!##..  ......................  ."&%.())./ ,.4/0./  .
 )).:88.RPP.hee....3..................................................
......................................................................
...!`_^.,  .....   .444.YYY.............kmi.OQN.>>>.545., ,.&
%&.#!#.......................... ..#"!.)&&./,-.310.,)(.-**.><<
;.SRR.nnm.........................................................<<< skipped >>>

GET /softwares/5/2/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=8603631-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:22:03 GMT

Content-Type: application/octet-stream

Content-Length: 14339383

Last-Modified: Mon, 05 Aug 2013 14:46:25 GMT

Connection: keep-alive

ETag: "51ffbac1-15e1526"

Content-Range: bytes 8603631-22943013/22943014
Te...@[email protected].. M..Q.2:.&Q.)fYq..`..0.7..@.&....y..<..4...3.(.
3....B.e_Na...1..-.e.5./E~.....$w..\.t.Nn....7mQ.'.J.-A ..=.......FSI.
.. ."&..h.2?}.;.|#....E...Q"u..A.=>.....2.ly..#./4.....&Z68E.....&l
t;#).k}..>.a.Q...c....1..0$. [email protected]... .v.Q..-.
...f_...0..D]...st&. ..*nj.ZJ....u~.8.....pZ5R..S.W"..Y..Z9K.W.:..M.._
,c....=.....}..q=Y....kA...x~.,  E..d2...8a....7.w8o...h8V.....K$F....
.....P..b..5........RQ..T.z4.. .j8E.._C..) m!n.7.I.Y}[....a.t.H .1EnNY
s .|h.e{..$[....g....W.....k.S.(..b..}....}.'J..6{`e.\{^..Q$m.......y.
...O.....e..y.h.g.Y.#...\..Z>uj...hr...$:A.r....LCR......-.G.W.*...
d.U..;...4#..............i.C....F.1r_.U..3.37.,...0?.O....j...|.....R.
....n.....(J....M..aZ$..D.p......[ .>.tt..G.........c.8....dX*...Mz
<o.6............6g.XY.....{..-g...w0.Ii(..I...W..W.#.P.7.e....<V
.!".._.....3i.......v..nC....!.hx..!...\.H...5.....\]T].0d=..E>..9d
` .d..-Y...h...c..$j 0.....R#..uT....N....n!..0.:4q...U.qa.22.I.M...Wz
.J....\[email protected](..d..........\.P..6
[email protected]...{.6l...o-..P..p............O|
."[email protected]... .w%...n.v..F.%2.L.....5..H........A..8.. .{...<..p.o.
....it...~.ub...l.....R....=y..t\.....1.f.8h.U.vV.q..4d...s..,....o|..
... Jd...U....$d.......)|....6S....s.L.c....Y.^....^Z...0!..s..G.,Tt..
.Vd............Y.BN...........5.\...F..*TN..C.....!.%.....p.W|..P.p.n.
....2....FXg..lqK.c.....dI3.(C.}?.3.M..;.>EQ.Mm.Ma..........v.. U..
..b...21. 9t(..`.%O... ..-."[.[7...X}.5..%...4.#.OP.......zpYT:...<<< skipped >>>

GET /company/rss/posts.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: clubs.ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=8913819001430378702

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:07 GMT

Content-Type: text/xml; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

Cache-Control: max-age=0, proxy-revalidate

Expires: Thu, 30 Apr 2015 07:25:07 GMT

X-Frame-Options: SameOrigin

Content-Encoding: gzip
7a53..............ks..u....W...RR2.fp.$Z%S..O.D'...R).......d..f>."
....)...u...U*.4.h.17T............w...d.J..A.0........Y....?...._k....
./UF.....Bc..|.....k#..^...^k...w.g...............9.m...T......I.d?:..
'......}.y..6......V......rc..R}....X[[...[XZ..:z.:.\.[h.\....{m...o..
.^.ke..7......k.....b.g.....................Jezv.\...... O.g.n....j...
..5..0...1u..-U...._..#............oV.j....b)....XiF...TT..........<
;Q..6.o.....`...x...o..j,..#..[.]....Qm._m.......j.7..u.....?v..\kV...
......;..,7.7.K.Kv.K......i..j7.)..Iz.y.u.>..ln...'.....0..R...I...
..........;........K..K..K.7;?7531..X..3Ow...T...f[.u....7..u.:0..q.fm
ym.[^K>..S...'...'OO.N.O.E.X$.z;./..'.l.7O.....v..$:9...s.0...I.$..
7{.I...}4>}t......)|..vE...#...N.Nw.o.=...?..4W.f,.s.S....<i...[
3_z.0:.g.>b..9..l....8......Q..=.f/?...\..."....;IG...Nw..q.Rl.*.n.
.........S.n..Rs...A6...;Kt..............g.....l.a.px..........W.6....
......F7..k./...j....6n.*.g.c.Vm.......=.Z[x.f}...te..%s1s....Qui...K.
.Z.........h....}At...v#.Z.|i..m..?......E=x....g.5h..yM...&...\....8.
.o3p.q,N...=.e...U..bb.Ez. .o..'[...C.6.............n.....lc...Z..z...
v.]zFc.`..}s....Nhk..}#..!...........qhY..OE.U.by..c;j~\n....9...C...z
...lzolq..J..9.W..kc .l.xp."..I...,W...~..5..].Pv.*;....y....~..h..3n.
.........U]_..h.OU.S...A./ZK.g2.G.....e6.......o..Y/1L.Y.[.4..o..?.^z.
/n...........9. ..s...\..o.5...BG]f .....<........a.f..........=...
8.`[Nw...v.9..S1|"J.....}p...X.{....J..9.Dvj.nf.X/...O7N7...E..~2.=;..
.I.g.....{`0.b...].k.....p...w|..o....y.....[08.{...S.......Y.....<<< skipped >>>

HEAD /company/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: clubs.ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=8913819001430378702

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://blog.yandex.ru

X-Frame-Options: SameOrigin

HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Thu, 30 Apr
 2015 07:25:08 GMT..Content-Type: text/html..Content-Length: 160..Conn
ection: keep-alive..Location: hXXp://blog.yandex.ru..X-Frame-Options: 
SameOrigin......

GET /company/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: clubs.ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=8913819001430378702

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://blog.yandex.ru

X-Frame-Options: SameOrigin
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.6.2..Date: Thu, 30 Apr 2015 07:25:08 GMT..Content-Ty
pe: text/html..Content-Length: 160..Connection: keep-alive..Location: 
hXXp://blog.yandex.ru..X-Frame-Options: SameOrigin..<html>..<
head><title>302 Found</title></head>..<body bg
color="white">..<center><h1>302 Found</h1></ce
nter>..<hr><center>nginx/1.6.2</center>..</bod
y>..</html>....

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=419580-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:21:59 GMT

Content-Type: application/octet-stream

Content-Length: 251748

Last-Modified: Thu, 30 Apr 2015 03:13:41 GMT

Connection: keep-alive

Expires: Sun, 03 May 2015 07:21:59 GMT

Cache-Control: max-age=259200

Content-Range: bytes 419580-671327/671328
.<...Q..8...QRP.0>.... ......^]..u...4...Q..0...QRP..>....(..
....^].-rF.?rF.hrF..rF..rF..rF..rF.=sF.QrF..sF.........U..V.u.........
...Z=..............0.....4...^]..U...E..M..U.............].......U...E
..M..U.............].......U...U...|!.M.....r..E.......@............].
.E............................]......U...U...|!.M.....r..E....... ....
........]..E............................]......U.........T.H.3..E..E.S
VW.8..............3...t.....x.....d.....h.....l.....p.....\.....`.....
T.....X.....P.......;...U. .4......U..E. .0....E..5P.G..E............`
........E..U........z....................M..U..m.... .................
.......z....................E..M..m....................9.......j....M.
..P.............9M.|....U.;U.v..E..M....E....P....E....T..............
.......................}...I.........|..........U....E......E.........
.......M.RPQV..:........E...u.......u....P....M. ..P......T......T....
.|....].x-..=7.A.v$..|....E..5H.H.....................^j.h....SP.Z*...
......RPSQ..................2........................;.|...;.w........
................................tk............R......Q......R......Q..
....R......Q......R......QR......$..t.h4.H.W..=....._..^[.M.3........]
.........t].............. .\$........\$........\$.........$Q......$..t
.h4.H.W.u=....._..^[.M.3........]...P............xF................t.Q
P..0...h..H.P..........0...h`.H.Q........................ ............
....................................PQVS.......\.....`.....|[.....'..v
.j.jdVS.....R......P.......#..|2....t,............j.jdQR.2(..VSRP.<<< skipped >>>

GET /www/img/favicon.svg HTTP/1.1

Accept-Encoding: gzip,deflate

Host: static-5.tvgcdn.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx

Content-Type: image/svg xml

Content-Length: 3296

Last-Modified: Tue, 13 Jan 2015 06:53:31 GMT

ETag: "54b4c0eb-ce0"

Access-Control-Allow-Origin: *

Accept-Ranges: bytes

Cache-Control: public, max-age=22304547

Expires: Wed, 13 Jan 2016 11:07:42 GMT

Date: Thu, 30 Apr 2015 07:25:15 GMT

Connection: keep-alive
<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg w
idth="32px" height="32px" viewBox="0 0 32 32" version="1.1" xmlns="htt
p://VVV.w3.org/2000/svg" xmlns:xlink="hXXp://VVV.w3.org/1999/xlink" xm
lns:sketch="hXXp://VVV.bohemiancoding.com/sketch/ns">.    <!-- G
enerator: Sketch 3.1.1 (8761) - hXXp://VVV.bohemiancoding.com/sketch -
->.    <title>favicon_32</title>.    <desc>Create
d with Sketch.</desc>.    <defs></defs>.    <g id
="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenod
d" sketch:type="MSPage">.        <g id="favicon_32" sketch:type=
"MSArtboardGroup">.            <rect id="Rectangle-1" fill="#FD0
000" sketch:type="MSShapeGroup" x="0" y="0" width="32" height="32">
</rect>.            <path d="M20.4246045,24.804235 L18.082367
4,24.804235 L18.0823674,18.6655698 L20.4007377,18.6655698 C22.3330778,
18.6655698 23.1295887,19.6067692 23.1295887,21.7022539 C23.1295887,23.
9285598 22.198927,24.804235 20.4246045,24.804235 Z M20.392855,20.13906
76 L19.7306408,20.1390676 L19.7306408,23.3474023 L20.392855,23.3474023
 C21.1500988,23.3474023 21.3946794,23.1183329 21.3946794,21.6943759 C2
1.3946794,20.4009369 21.1579814,20.1390676 20.392855,20.1390676 Z M15.
4548228,18.6655698 L15.4548228,24.8043109 L17.1424363,24.8043109 L17.1
424363,18.6655698 L15.4548228,18.6655698 L15.4548228,18.6655698 Z M14.
5526262,22.6108806 C14.5526262,24.1248292 13.7404229,24.9187697 12.092
0036,24.9187697 C10.4516859,24.9187697 9.61583474,24.133086 9.6158<<< skipped >>>

GET /www/img/favicon.svg HTTP/1.1

Accept-Encoding: gzip,deflate

Host: static-5.tvgcdn.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx

Content-Type: image/svg xml

Content-Length: 3296

Last-Modified: Tue, 13 Jan 2015 06:53:31 GMT

ETag: "54b4c0eb-ce0"

Access-Control-Allow-Origin: *

Accept-Ranges: bytes

Cache-Control: public, max-age=22304539

Expires: Wed, 13 Jan 2016 11:07:42 GMT

Date: Thu, 30 Apr 2015 07:25:23 GMT

Connection: keep-alive
<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg w
idth="32px" height="32px" viewBox="0 0 32 32" version="1.1" xmlns="htt
p://VVV.w3.org/2000/svg" xmlns:xlink="hXXp://VVV.w3.org/1999/xlink" xm
lns:sketch="hXXp://VVV.bohemiancoding.com/sketch/ns">.    <!-- G
enerator: Sketch 3.1.1 (8761) - hXXp://VVV.bohemiancoding.com/sketch -
->.    <title>favicon_32</title>.    <desc>Create
d with Sketch.</desc>.    <defs></defs>.    <g id
="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenod
d" sketch:type="MSPage">.        <g id="favicon_32" sketch:type=
"MSArtboardGroup">.            <rect id="Rectangle-1" fill="#FD0
000" sketch:type="MSShapeGroup" x="0" y="0" width="32" height="32">
</rect>.            <path d="M20.4246045,24.804235 L18.082367
4,24.804235 L18.0823674,18.6655698 L20.4007377,18.6655698 C22.3330778,
18.6655698 23.1295887,19.6067692 23.1295887,21.7022539 C23.1295887,23.
9285598 22.198927,24.804235 20.4246045,24.804235 Z M20.392855,20.13906
76 L19.7306408,20.1390676 L19.7306408,23.3474023 L20.392855,23.3474023
 C21.1500988,23.3474023 21.3946794,23.1183329 21.3946794,21.6943759 C2
1.3946794,20.4009369 21.1579814,20.1390676 20.392855,20.1390676 Z M15.
4548228,18.6655698 L15.4548228,24.8043109 L17.1424363,24.8043109 L17.1
424363,18.6655698 L15.4548228,18.6655698 L15.4548228,18.6655698 Z M14.
5526262,22.6108806 C14.5526262,24.1248292 13.7404229,24.9187697 12.092
0036,24.9187697 C10.4516859,24.9187697 9.61583474,24.133086 9.6158<<< skipped >>>

GET /css/style.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: text/css

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Content-Encoding: gzip
53f.............X.n.8.=._..1....%.8../s.o.(..9.D..;I.....&jq...4.R.X.{
....$.Z......f.o3JxUN.7w3....x....V...g.x%..UF..R.c]$G%............^..
...b...qvUQU.:Y......K.}/k.......|..1.....n.-S|.8#......l......../..B&
gt;'...#.]../.:!.w.7/......g^.C....3...J...|.e.b...=....2...._...wp...
7....j....I.ee.a.L..{3Y7/....d^....Z.........f6.L..jv.....ql.mA-...Dau
......x.^...........8......:.l..u]1x..7`Z....5.5.`...?.n...-..d.)..)F.
...z..n......"3.Bh...E.r....Nl.W..R%...k..I.... 49`...{ue>.'....L..
...........c.*iN.......?....L.B..%... ...1.b...._....S`.9..S.....B....
.2y.....`.....Zugx.:O)}........C.?]....%......(4...d...... ..0./.!.S..
%.%...d...f.b.J.i..-.][email protected]>0"..(
....L./...4[..;n.x..=.(..A...P.T..AD.X .\x......D.Gq6&p)x.b._...7..D..
.''....C..jA,.......Q..7.. #..3.{...1..p..:..Y....P...0g ..&.......k{.
E....JV.......=..y:[email protected].. `.[.\t"..g8...b*X..aZ...\...'.<Z
/........a..0.v.n..4|.......G.S. D..g7..;.....m./.U..j}`..~....yP...#"
....3;T%.g.1....Y^B.....J.........|..:.s.5.l...C....M.W..fk.......c...
.K..a..}."......n...#....._.iV....u.-d..f...:=..|..T..Nr...E.P6.hK{7..
.r...#=.P..T.6.t...S....x......Oaq........#..:9....5Xa.q{..I!........8
.Z)..BQ.x..?6..{^.<Q...|[email protected].}w...e..!..........(....3..P
..6...M.t..t.Z8%....9.....5...o.H.....P.......c..p..CTu..~..[..PP.....
...... ....la..5 bv.@......|.......0......
<<< skipped >>>

GET /js/scripts.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: application/x-javascript

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Content-Encoding: gzip
1ff.............T.n.0... ...S.!%-b..zp..P.h..g..V....H.9....zDJ.....`.
..vvv..|....52.)..[.w._5.......JW...2.W.*..j.. X.....~} *.>?[]|....
Q..&s.[.....tA.7..D...n.Z!s.^....c|.8..l/..J..w..L).XU'.FLvV.0...w...(
.........s.........S_2....w.V{....|.|.3.".f"....X....v)Gq.g..kG..z6...
.B...E..G.B...........4.k=.h0...4..kJ;.. ........u@.(...M.{ 2:..sa....
...CBx.......:..>k.....T..d1..........'.d.......9.n."...c:quU.tP...
F.:.g.-Z...q{...z....W.Nw...O..4.....x.;y}K...$E.E...T...X..%.Y...-...
....)C=...x......>:....G.&.|......0......


GET /js/lightbox.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: application/x-javascript

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Content-Encoding: gzip
bde.............Zyo.......SUXJ..JR..:....t..q..X.A.P.H..".<|..w....
K...N`.3..y...h...4^o.ev....O...7.4........A....,w.........H..a...^g9.
f9gq...mP.Y:g.q...#...Z...7..."Q../F`$.i.#[email protected].....(.<^V
D..].`,....o..g..D..b..Y.h1:b..s.~YU..l.....y..A..4b...a.W.-...~......
,..e..YP...L.-...$N/.........~.AX..0:...E.....,.?ve.N ...$.....%....U.
.f.fJ./.m.q..(.o.mP..U.)..8...J2.*fb.q..b....M..4..xY. ."/.....|]-yz..
i..7>mF...fZ....';.[..p>.z..$(yQ....HP..Z..z....F..2.,[.0...e1z.
.1.x..#.H).v....e^.e..-N...xJX....$.......B].7.`M.E.oNd.8..]l. ='6....
.../9.&t"..'Y....z...V..MI.o..2..H.Gq...PK^..'...F..!{.R~.=.....v..f.j
.#.e..R.r:c..1v.c...*...>.a.....{........:V,aL.i.VtiI.....'....R.6o
..y-H......{*.:@'IV..rAB..w......a..r.j.....u.A.N?iL'..'..X<.k.b...
...JM.....yY.iS.B.....&.....#.gh.b.C=.X..e...O.k.a..0,..7p..Xr......L.
.%bjcZ.|a.........%3.J..h.h.".[4..T..9$$.n".._.......:...[f..7...^..z.
...|.....6..pt...A,4..s.rg../<.t2.k..<..5/gJb........[-......ow.
.. MP.5$0..........z..3O..].<.n<..v.. ....#..sH...... 8.Q..8L...
...QV..q..B....s7t.]7..1 ........`....V......&...H.ui. ..`..e.$....4..
P..yx,=..1-.n.h..A.#|......^*.....[..t......M.:..V..{R..$"..).?gB.m.lc
n..g.....3.|.c......Nf.o.YN..x..%.2.."_q2!..gy. .......p...}...^.y3...
.Q...p?.aN....=..a.....m.kR(N.=U#....=..Q;r........Y..y..X.!...;..m..!
..7.....6.....%...j.]!.....)V..~.. _.sTo.9..p.._r....d*!...2.F.!.$<
.4....OP..Y...~.8.....(.6....2N......=".......|.U....o........#.[..i.J
.........&....S(.M.......$o.ia.$}.C.}v8..s...U....Ca.^....l...7.. <<< skipped >>>

GET /thumbnails/banner/images/assets/6/e/6ef6fd5410a7fb481fe6841cb381c046.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: image/jpeg

Content-Length: 40230

Last-Modified: Thu, 13 Jun 2013 18:08:34 GMT

Connection: keep-alive

ETag: "51ba0aa2-9d26"

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......JFIF.............`Exif..II*.......1.......&...i...............Pi
casa............0220..................................................
......................................................................
......................................................................
.........................].........................!..1."AQa..q.#2B...
..r...$3Rb.......&CS...'4tuv........V7Udfs..........................
..........G.........................."2!#1B..3AQRq...ab.....$CSrs..c..
.......4..............?....r.......<([email protected]...:...(.H.F,(..."....c
....l9..8q._.D's.A$.r....HD......#....YRs......Ha.BlE ..A.0d&......k..
!N.pdy.....C..O......bpC...1b...tQa..P.. #K..$......wN...|..........VS
.)... =...]..pG.B.I...m.0...G..K..!..r.i......H....:...x...B....!Zc#..
..90..q.5Q.......Y..I.`@ ...!.X...........A....t9....A........M...h...
]r.E....6...u>..w...76Y.....0.......tL.6.......)..X...t.{.k_A.d.k.;
`....f...7>..fk...y.]....u=.(.X.. (..o.O..O.......Ds.....:Q.x......
.q.~.V...i.....a."..$t..1!mRe......vX... .0Kb:.....&,f.....Z.....g.dx.
[email protected],.2.F....K.-m..eRgz....>x...{.G.............<eg....9#
@..=........."...t'..:..B...b8...........).p.b.C.F...HXK..HXE0....p..B
0.".....M....K.H#.l)(g?...*[email protected]..
....r ..`...8q..........4..........JhV!q.i.i7.q.........qZv....(..}NQ.
..-]Q..Ij...j..-0f..(.D.R..].j([email protected]"ekjU6.U..
`.A....... ...F..3..S.....z.'.....K........?w3..).o...:.7...qL....e..I
......?.....H...RF`...4R.b..-Z.%f$."i.&......l...H*..`n......#pA .<<< skipped >>>

GET /thumbnails/banner/images/assets/1/7/1759703220576e41cab39feb18a11b14.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: image/png

Content-Length: 116206

Last-Modified: Thu, 13 Jun 2013 17:53:06 GMT

Connection: keep-alive

ETag: "51ba0702-1c5ee"

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR.............X.h.....sBIT.....O... .IDATx...y.mGU/...j
...>}[email protected]#~..\.@@}.(".<..{A.."......J.A...AHBh.D
........j.....Ys5.............Y.....(z.O.......HU.H... 0..h.0Q_..?....
@...W...<.$b...-..T?.J...".. p*\.LZ.......Q)1......h.....KT...].4..
.%u..E.h.S.1:........d.<.s.AK....V....K.d..G....m .Q.~....F.<5Z.
....Uk5}.j.n.......B.Q@%. [email protected].*H?G....D..%H...b..i...E.bf...5M3
.7~..c. &ff.w.-.. 1..C.c.!......w.....mv......jYt......9&.....0"T....H
EI..L_4....S...$..,...N.l*P.B..A....\..QU!...@U4B.%.HT...*..bT..%h..A.
D..Q.&.9..heuu...;..]..o......v.......|..C.7.O.M...t...m..0.B'.b..j8..
.1\t..kR...#...uT.i..Hu...>Q..[d...R.J.vE.I..c..@>....R..."=...f
.I.w....a@\.s*..D=uI.....3.?bw..d...tE....n9n:....V.S....3...4..B.....
P..<C.a..NN=..G....<.4..R..#..\..R..PQ.(....H..#i.......D..JQEEU
Db...1...Q.....e{...j.b...Jl?2.cfG.`I..*A..*g.'..r$..j..H.U.....Y.~..Z
.....FT...S5N.P...*...y.5.v...~TUUDD4....b#ff&b&.).1...rD.&..m../|..2.
...XS...f4.J.._.......j..h.ZtKL...R....i....Y..f^..0..)s.j..,.Y......`
.3:L..z....................D....D.E....Y.*.s../~.2.>l3.."M.hn...C..
.j...Z..;...;G...j!#C...9v12......(1J'.E$.$.o.vZ...".%. .c...%.(b.JT..
W.F...S."...9&..1.#v..1.*.T..*$..J...i......2%..y.U..^.`9.Z....P-}HRB.
.. W.~.1....<;;:..DUEEDb.(....1..9b...9V.9.....X5....?..1.dy}...p.f
{. O4..Z.S1.P...p......u...,.......hZF...tk$]0...c.7...X6..b7....=....
P^....L..f...$.%....n....)U..*-.. ....j4.............,..tI{.fdoa...!s1
.......s.i..L9A...FC.e...F.GO.....(Q..w1.....D.9.`R.3........3.9..<<< skipped >>>

GET /images/4.5stars.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: image/jpeg

Content-Length: 2275

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-8e3"

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:C50CBA34D0FE11E2A837F7F58
4958E09" xmpMM:InstanceID="xmp.iid:C50CBA33D0FE11E2A837F7F584958E09" x
mp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:D2ECCA94C82C11E2B97E98D68EE09333" stRef:d
ocumentID="xmp.did:D2ECCA95C82C11E2B97E98D68EE09333"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................9...............................................
.....................................!.......1"a2B34AQ.bc.............
........!..1A....a2...Qq."BR%.b#...3.$............?...3...y{....oT..w.
..W<.>V....*....e..,..X}P....O..d...<.......5MuV6.w.3....o/q$
Tb."*.[.K..J...h.....]..........\v.-I..f.$~...H.........Z.....U33\.7.J
.N.GA<-..-.....RK...L..}..........i..[.V.m.k.v.T..ze.b[.u..2...6"..
..).q....?.:.n#t&..g..`.."*.D.;.. ..1'..2...L.*....eTIW.LOtaAO.`&l<<< skipped >>>

GET /images/5.0stars.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: image/jpeg

Content-Length: 2286

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-8ee"

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E712C81ACD1411E29568FF5E7
C4F2C36" xmpMM:InstanceID="xmp.iid:E712C819CD1411E29568FF5E7C4F2C36" x
mp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:D2ECCA94C82C11E2B97E98D68EE09333" stRef:d
ocumentID="xmp.did:D2ECCA95C82C11E2B97E98D68EE09333"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................9...............................................
.....................................!..."..12BA&Qq.b3c...............
......!...1A..a2....Q"B%q.R.#.b.$..............?....3s....b.v..Q@...\g
.F^.v.G.`$.*.yAiX.........?o.%<........OST.n.m...:?.Q.W2EF*"".....F
./.....w.tl.!..=..I-J.U^J.R.Y...y.j.B.}Z"_S..0.~..xT.f.Q..W"x.:...X>
;.O/../.%zO.......f.~x*.O..D.$X....w..ZJ..o)'.Kq.|.E..Qr.T2bPu..1..x?N
j...!59.yK...B"[email protected].$.u..dI&..Vg..2.$..&'..X..\<.....h....<<< skipped >>>

GET /thumbnails/icon/images/assets/6/a/6a12dc1a298e870b610a58a56ba0f5ec.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:37 GMT

Content-Type: image/jpeg

Content-Length: 18198

Last-Modified: Thu, 13 Jun 2013 17:15:43 GMT

Connection: keep-alive

ETag: "51b9fe3f-4716"

Expires: Thu, 30 Apr 2015 07:53:37 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......JFIF.............C................................... $.' ",#..(
7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222
222222222222222222222...........".....................................
.......................}........!1A..Qa."q.2....#B...R..$3br........%&
'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................
......................................................................
.............................w.......!1..AQ.aq."2...B.....#3R..br...$4
.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................
................................................................?....(
...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..
.(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(
...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..
.(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(
...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..
.(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(
...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..
.(...(...(...(...(...(...(...(...(...(...(.......q.....B...Z......X.D.
.TT.,[GF...^4.....WV....../..W.Hr.[.`.;....SKD.O1.....h..Q... MQ.U.m S
.....8: ...6.t1..........'..`T:f.-.1N.F.2N..;Y{....n..^c......V....c..
..4.y...X...H..q......m4.B.M..R.Da~eld..Z..b..\rJ.ms/......p.W.%...u.;
...R.p....!..l..T.mv:....~~..O9.......b9...c.).....v..c9..............
....G.E..<....c.)|..X....?.............<...o*<.....Z.~.k.<<< skipped >>>

GET /images/3.0stars.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:37 GMT

Content-Type: image/jpeg

Content-Length: 2022

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-7e6"

Expires: Thu, 30 Apr 2015 07:53:37 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:C0AD31E0CD1411E28C01DE2AF
24957C3" xmpMM:InstanceID="xmp.iid:C0AD31DFCD1411E28C01DE2AF24957C3" x
mp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:D2ECCA94C82C11E2B97E98D68EE09333" stRef:d
ocumentID="xmp.did:D2ECCA95C82C11E2B97E98D68EE09333"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................9...............................................
.........................................!..1...Aa"2qB3Q..Rbc$&.......
................!1A...a2....Qq."BR%...b..#...$............?....Y..n...
VN\..(.Yy..........L...\.(- ..V|.....3......N.*..6i<MSJ.X.".,..isy{
."....U......%t.6..W~..d.......IjP...T........#V..[..%.`.f._....Si....
.W"t.:...B=./.....%...E36e..3i^..a'.}h..E.Q..Wy........r...G.tQIU.!.C&
%.\.s.....s0M.n..s,[email protected]..$......&UD.{..z...?...n<<< skipped >>>

GET /thumbnails/icon/images/assets/e/5/e54e8c720dffffa619c3b0eacec9381a.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:37 GMT

Content-Type: image/png

Content-Length: 53266

Last-Modified: Thu, 13 Jun 2013 17:53:06 GMT

Connection: keep-alive

ETag: "51ba0702-d012"

Expires: Thu, 30 Apr 2015 07:53:37 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR..............x......sBIT....|.d.....pHYs...........~.
....tEXtSoftware.Adobe Fireworks CS5q..6....tEXtCreation Time.3/8/12bk
.... .IDATx...y.\.u/.jw.9G....c. C...;.  .&..2z..H.\..$..y....../..O|.
..I.5J.3v0F.....{.D0...f.1...61H.q.....{....=..VU..N.....].j....k..k.)
%0....../D.V..`0..F......`0.c.v.......C...`0..........`0....0....1.`..
.`0..1.;.....`.!..`0...c......`0.c.v.......C...`0..........`0....0....
1.`...`0..1.;.....`.!..`0...c......`0.c.v.......C...`0..........`0....
0....1.`...`0..1.;.....`.!..`0...c......`0.c.v.......C...`0..........`
0....0....1.`...`0..1.;.....`.!..`0...c......`0.c.v.......C...`0......
..B.S..C...g...?..g.....G..5\..B .,.....m.Jb[....- N.....a0..R}.r..1..
.w...g..".....S.....T.NF&n.f.%D.................0... .......T...'.w.).
i .e.R._a......g<eT..c9..x...(............%*.`xA.R.<...$jW......
.ih&.vaan../.LV..[...>.......M.X'.z...,.8b..e.W......8...J..`..S..Q
.......J..Ie..}z...G........D..t?..h.T....L..0..k...:p..1t.]y.....t...
...x.......y|y..../........%X9N.}.b2r..8..o..f0.....(a...H..j.R={.....
.K.....O9...W...a..16u..G..h.5.......#R...0....0... .:_.8^.......<t
x.go~.v...a7..5.9c-......R.J.B.>..b..:g./..8~....K..`..S...A.......
Ag.?......LW..g7..T"5..CxM....~.^ ..&....~cF...{[email protected]
$.N.....Qi].3q.f.s...q..H..N...Mcl.......~.....9.......S..fZ....!.....
0... .:A.x.H.....w7......'[email protected]
OF.....`.5...".j.r..........w-.S2*.0G....Q.i..R.2.._........P..=..."..
d....`..S_<...p.....\.5?...g.w....3.y.E~^)..q&.`..h.M>..~..B<<< skipped >>>

GET /thumbnails/icon/images/assets/f/1/f1ed3cd0cae7a3524376e6f9369c7ab8.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:37 GMT

Content-Type: image/png

Content-Length: 101632

Last-Modified: Tue, 18 Jun 2013 12:27:16 GMT

Connection: keep-alive

ETag: "51c05224-18d00"

Expires: Thu, 30 Apr 2015 07:53:37 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR................l....pHYs................OiCCPPhotosho
p ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE.........
..Q,......!.........{.k........>...........H3Q5...B..........@..$p.
...d!s.#...~<< ".....x.....M..0.....B.\[email protected]..@F....
&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH..
...........0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I.
 [email protected]..._-...."[email protected]~..,/...;.
.m..%..h^[email protected].~<<E.........J.B[a.W}.g._.W.l.~<..
....$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..&
gt;.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?..
..D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/[email protected]..=p..
a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2...
.G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.
."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.X
H,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!.[.
[email protected].(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.
....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&
..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._.
.. .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).).
.4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.
n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC][email protected]....
..<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......<<< skipped >>>

GET /thumbnails/icon/images/assets/4/f/4f263f4be4c4396c9078d1874c05b928.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193



...o?..'..}{x..?.].1....#....|X......R,.c.9YB.3..).|.....?.S.Z...|....
..p.?..;x.;...dH...E.5.......R.`.:........w..O......8..J... ;9....t1..
R............c~.M..^..WJ....R]..#.......Y.q.i....#...S......r/e...X.yN
Y.....hw........>{7/.....{G4.J.a}...uX.E..m..K.L]%.sdC....W..Q....v
..D....Rm.U.I.j..a.....P.Fy.-vP....TYBY05.....(...i....?z..L..].....T.
...iTV....*.h..J.......0..a:......=....g=*..n.R|...x.......c0.C>EM.
(7Gm.P.F%..T..d.....3...)..Q....)TQ..9^.%.?..b....#.....:.?X..%....q.Z
..8.*.Q.F5.......*/EV..*0.iF.*...=...J.CY.SU(mP...9*.]...(8c.....8...m
..AN...h.N...Q~e.J.0.v"W.&rQY)4.TR....;..BiP.B..*rp.x.Y..h....fQ.qf.G.
..m...bmLr.B...G.{.......o/o.....G.......|*A.U!.iX..>D.f0D..n...U..
....Os.c.y............<..]l...2X....1....0....2R...Yho.7y..U../>
 ........ML..h.....~....g<f[........x.v#By....X..........6's.....8}
.{B|{........Y.ZP....ST..LS........[...'..,2.c.#.......B......B`c..I%/
.M]O`!.......Y..F..Z*q.i%f[..d/...B ....1.6R..7R.le.E.Y..Yl...p.A{....
..K5..".C.............I.R6F#>......z&.8x.}.........{?~.C...;.......
gv..%[email protected]'.m..Y`.....`}.F...... ......_....
......A... ..JBN....j.N.p`}...3N.}8{...p..........I.Q.C....`|.1...y..z
...K.......[.B.T....F2.a1...^ ...9.....\.J.tZ.F\T..z..-_..".=...Fb#Q.Y
-.....M......R....b........:....21..?.`..D|#e..).%f.O...y....9<...&
lt;.wgy._\.9~.... .../...x.[."...ad../.^.bE5.....o.K.s..G)Y.8w.......V
.I.q..d.....5../.p7....w.g....{..s..,,u%#!..'....B....iEFP.....T......
0.vk......|.......&v....~..........q.......p....6.8.%T.V....'..:.f<<< skipped >>>

GET /thumbnails/icon/images/assets/5/2/52d5414e7372639389ab7e9e4d479aee.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193



.l..?=5.B._,(...e..$..%.......6$)..."U.....&.h:....j...v..>`.......
.%...uo....&....\..i...(.HX.6U........27zz?}[email protected]}...
[email protected][email protected]....??v.3/q...`.....
p.BW3....>...I..F....$..|.n\.tl........>ow..?......~s...........
r.#*.k`\[email protected]..".....`..s:....D._..xqq.....<...R.$S.#.@
 C..%......F-....ZH]3.......z..0:.Yw..~....!.7^C..~?.w...4.D..T.......
........I....R..3v..h....G.{wx.....;H..D..........y......d....7...u..c
.f.Ny..&[..l...wWIc...zq.^....h.&..Mw...wJ.,.#.~.............<..u.c
...................T..I4...a.. l0......<.B......s..tU..r....[.F....
...a.T.#[email protected]..]...3...a.. QT........3.3...{cm.
..\9.,.$...?~.|~(..=..k.so.S....H.!...........J...sO....e...k..'.7Dq. 
....X......$...........[N...)OUyo.Rp.'W.F.E..s...D(.MK..S......~X.ki..
..5......J.N...E.wd....5....|...g....C%.$.z...m5....-..!E.T...l~~...z.
!1R.`.."..|1.#F.;.^....(..a..c.$%[email protected] ...?...~L[r.%@.
.0......o}........a..BfA..G[.....V....\~....p..3m..X5......L..HY.|.Nno
...j.....Z.O.Xu<..l&".|dng.{....Y].r.{>.\.`[email protected]..
.a..6.n....]....'..b!V..Nw...#...b._..c.Z$Q....|[email protected]....
[email protected][email protected].#..
.<.q%D..pJ..I.~.6...X.i..A.t.....~....L3yTwF.c..t....d.....Dp.|....
.M.......i.d........~....f!........./.......vU...E...:.....cA.V.....g.
q.....t1L.>..\...?'.s...f"5.|&.2,.,.?..W....`..KC.......p.....G....
C.`.....R}S<.<Y.a..~6.>.T..u..sD......"...z=......K...|..<<< skipped >>>

GET /images/4.0stars.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193



55>....NL..."...#l..........kx.....20. Y..'xG9V....../.......}.8.'{
UZ..I.......0v.....2i2gE...x..3...\j=x...0O..Pm.Z6C...<....8...p..B
|.k.....;.E.~....7..}0.`Z..._...g...U..........T4.~...s..5... ...\..vr
.......W.....yp.TZ..@...... <.....a]...C..V........gx'..\......7...
.........w......=G.._:C...$w%........._......Y=..v.;..5.i.!c.uI..?....
..g.......z.....j....$..e.p4M......y?...ta....N..{a...^N....4*....t@@*
u.8|...r...Q....z.V.,... .z..V=.....t.&.._...'~mY..;`....;.^.p..Yi:...
....M..`.c...".?y..t.v.}o..l._..v.......go.....xs.j....}/C....u....}'!
....~....q=.=..w!..;.c.n..w!...a-..W...5..........i.c..?Au....qG..v...
[email protected].?.z.n.M;`L..#.v..rT5..............aEX........C8..<
;.\...)..x%.A|.Z...V.....o..K...F~..s.g......?<...x........^.<..
q.a'/\$=..,d&|../...3.......O..so.....7...g ......0'.....`x1..v.c.E.K.
.p3.8<.S@[email protected]...{.....kgr...q a)...^v.z'..?.v1W.Ur,..
O....-..Z(. .>..J.-...V..1.............3._...V{.....{.T...]... ...(
[email protected]]57.#.......O......\.;.3......f.}....tt;.....y.$3V..Y.ls....
.YN..9.N`w..Z............jz.F..>..j)./.m.O..........g).}...t...in..
x.Z..4..N..lX.U.;.;q.......k.n./....{...S...$.....o.03.....I......ay..
.`...u...#.).....,.?..n..rX.6......7....s.5a........'.4C..z.h].9.1....
J*..{:...N.........O_m.yr.n.*}_........\...VI.=..z...g............U.y.
.......Y...7..<..O...X...r..2....K/p3l.....|...8.?....>....W..V 
x/......}......R.mt..........f...~..S...|...........7....J...*.......f
.W.3...Kq3..../B.7......q.|g|.....S..Q..4.....K.=......~t...#.8.p.<<< skipped >>>

GET /thumbnails/icon/images/assets/4/4/442a5f30204dd385d17de5848683274f.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193



...-T.......-..%..-).b.<)"_.K"cA.....4J... .'.Q.D.2.D.0.2........`.
...z6ypR..G..k^[email protected]..%E..|'. .3......".QD.;......YN.
... ....b.qV.............>.....M...-q.m?.J...%t`:....F....W~....9W.
......N.......I....~.?..1I......,.K..H.../R.......E.......}...<.K..
....y{.,.Y8z..R...~....O?.....,Y.._.N$.N...&*..5~......q.$DLD....!.G&g
t;..jpv....h.}U..(&....n..kCxR.b/s........nc..V.m.j.g.....8`U.D.e...i.
.;..5..X2mH.....^.l..S_.C.w:....TP.cu:.D.9.zF"3n.R.N.mr..........{.xn.
m..~.{w.8.%p..vl.G..O...%....f.].K.m.d.T............BVHi....8.....)/.l
g.H..QV..Mc.6.7.# !^..zZy...)z......p%..9..E.v..].][email protected]..\E...e..F
x.G..#S........G.".A|...F.....j..........=.C.......)H....U..#.........
i....5S...k.Q..[...o.....v...Y'.....................7.....$...g.......
....,..fm.O?......]..0...C.k....Rs^.........Y........;^.....I.cI.v<
..../....`..Y......~m.....O.^.].^K....Tz.......).9._.}..z.....-Q...`..
..E...w?'N..n..4.........C....}..{...W\....}........E..4..8 .8..D.:.s.
..........z...Z2.vD|;.m..~.....~.;...A,.M....Z......KD..7...<..V.a|
Q......u....jxT].DGB...@]..4..f..#Ay.>G.....guD.Q.g..\....;.\j..n-.
.O....U.\....$t..b.E .....e.L".^M}..C..S....~.Oh8>..B?qR...d...%...
...V.w..A...T.Y.m....M<.4.c..OI......3......s.E...7\.8(wU...U......
.).N.IR...w...2......~4.....k7j.v2.T...yl.=.m..[.c..t...F..~,..=.P~..A
z.&.....q....6.~...s.k..YMdV.X....7..].W.c..I.c..............8.@....'.
..i.....'.g.mN........mL.....y..f[.9.#t.'..;...I..8.U....ES]"W.7k.....
.)&....{Sd.......a..5.........L1...7..;.E...&Z..e..N........h{..|.<<< skipped >>>

GET /thumbnails/icon/images/assets/b/8/b85261679e262228a562f693b3e6ef6f.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193



.[.K.E...svASM|f.\....4!r.4..j....FH...!58......p...kb<..A.<T.?U
....v..3........hkp.;z '...u.'&.JU...Xa}-..9..8y..s...!X..Kk...Lb..M..
.....i.bN....D..q.#.....E.@.:U.Kgf..]...C..V.K..oo1Y.9CwF.......8.....
<..akVh....!.>z72..Q..6....Uc.M.C.(...=..,.AuK.1.-.[MI\....G...,
.K...oY..y...D6.'HJ6.\ .-._.8dL.....H.R......}.w....d...........o.....
...u..(FJ1D.A......._"..sd....b...P.PvPn.<.....c_...~...E.....y%..&
gt;..?K..;q....?.kn6....~!-P....<@..k"<.A.R.....d....0..).......
....c1L1..E...z.')...XkI.Y/)..q...!..Y[T........~....[....3.]....... .
....g.....,.z..K2..Ab..\lJ.)A...1#.........v.....).<.....4......u..
....p...a/#..k. ...,9....z.....dZt..rS2..'....H...s=...7..5.....R.[9..
...NJ/.kW.......>>T).<s.#!.a....m.....~..{v-....y.t<..\.[W
x....&A.ka..p.....m*.."..*.f...'.........PO....)...x$..s..L.0....<.
..cg5.r.gs.U....>.].m.u...&.D..a.Dq-.........P.c....c..q.g.v..A.H..
7.../.Y....x..L9.....G0..4,."I......G.bEY_q.hX.B.4.>P..t.8.k(J...0.
2....x[[..n...!..~s..).u.`..6(.Yc.p.v.........u\5....gZ.!..LQ.P`.J.G..
*.T..m............>6.......W.....T..KA...... ` ...N.k...~O./<..e
.r..1.*WU-.5E]Q.#..|.....b.}.......S..).......U....}...fT.$..........}
..y....v.......k^.z._.....2BWG&}}?."_/.X.%..H...U2>%.1|..k...&.@g..
..a...$..J..E..M?..n..O#c..8.i..D..S"n..J..PN..1J>.J%J..W.....1....
.U.tfL..2&.r..A..G......8....W..|.3|....s.L(bO.......D7t..Bd...6..-C?.
...][email protected]..(.H).........A.5X........>..x..g. . 2].f...
[email protected]:....;.?_Mzf..nFR.j.j.4...:........:.?.......l.d..T<<< skipped >>>

GET /images/bg_main.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:38 GMT

Content-Type: image/jpeg

Content-Length: 1554

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-612"

Expires: Thu, 30 Apr 2015 07:53:38 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp
MM:InstanceID="xmp.iid:034EE34CC83911E282B1D0F6CA9F1811" xmpMM:Documen
tID="xmp.did:034EE34DC83911E282B1D0F6CA9F1811"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:034EE34AC83911E282B1D0F6CA9F1811" stRef:d
ocumentID="xmp.did:034EE34BC83911E282B1D0F6CA9F1811"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................\.............l.................................
................................b...T..U...!1a."2..3E.'...............
...............?...x.V.!...E..R.R e.&Urr......I5..JYRM9e.(..G.w.n.5...
q.I....D}.y&.#[email protected]}.y&.#[email protected]...
q.I............U.*...44......E..........g.w..}zzH..,.....S.3)......p.e
8.2...N....fS.3).:... h.....N.2...;...Z.6C8.. J.. ..........j)*^aZ.eEb
.I..<:......F.E....B.H.H.YX..C..I.. ...y#I".eb.!.$i$_,.X.!..$..<<< skipped >>>

GET /images/close.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive

Cookie: symfony=rg62v7s8nrdo9jl8hmtsoi8193; _ga=GA1.2.99994774.1430378617; _gat=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:38 GMT

Content-Type: image/png

Content-Length: 1200

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-4b0"

Expires: Thu, 30 Apr 2015 07:53:38 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
.PNG........IHDR...............1R....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:75A8A812CEB911E2AE0AE7EB
A740C145" xmpMM:DocumentID="xmp.did:75A8A813CEB911E2AE0AE7EBA740C145"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:75A8A810CEB911E2AE
0AE7EBA740C145" stRef:documentID="xmp.did:75A8A811CEB911E2AE0AE7EBA740
C145"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>he.....$IDATx.b455...`..|...EKK......%%%...
[email protected]..(.........Yrrr999.......r......f..q..U....
...~.....&..7o.........ijjN.4....X.srr..................WTT.:u..3gp...
......?xBA\\.........x.... 55u...@vLL..'O.\.@N<........c.g..r......
.1p..].......!By.PRR".G..*U.=..#[email protected]`.
..<<< skipped >>>

GET /pages/international/index.html?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:11 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://international.nytimes.com?partner=rss&emc=rss

Content-Length: 264

Connection: close

Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html>&
lt;head>.<title>301 Moved Permanently</title>.</head
><body>.<h1>Moved Permanently</h1>.<p>The d
ocument has moved <a href="hXXp://international.nytimes.com?partner
=rss&emc=rss">here</a>.</p>.</body></html&
gt;...

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=180,public

Content-Encoding: gzip

Content-Type: text/plain; charset=utf-8

Date: Thu, 30 Apr 2015 07:25:09 GMT

Etag: "YM:1:bbebb2ef-0d91-468b-9922-e136465027260005095692211cb6"

Expires: Thu, 30 Apr 2015 07:27:58 GMT

Last-Modified: Wed, 03 Dec 2014 21:31:47 GMT

Server: ATS

Via: http/1.1 yts13.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), HTTP/1.1 web20.use45.mobstor.bf1.yahoo.com UserFiberFramework/1.0, http/1.1 l5.ycs.loa.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r01.ycpi.dea.yahoo.net (ApacheTrafficServer [cSsNfU])

x-ysws-request-id: 38dc50bf-ba67-4965-97bc-5f6d3c14ea73

x-ysws-visited-replicas: gops.use45.mobstor.vip.bf1.yahoo.com

Age: 0

Vary: Accept-Encoding,X-Ssl

Connection: close
...........-N-.MLO. .R..r.,N.../.R...,I.M,.R.())(....K-/..L....K.../..
.U..p.........$..E.....

GET /softwares/5/2/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=2867877-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:22:03 GMT

Content-Type: application/octet-stream

Content-Length: 20075137

Last-Modified: Mon, 05 Aug 2013 14:46:25 GMT

Connection: keep-alive

ETag: "51ffbac1-15e1526"

Content-Range: bytes 2867877-22943013/22943014
.K.R..h..7..KZQ...<.nM./...k....O.y.4....UN.D0..R.. ....m.....!.2.I
.I......4.g.:..QN1..........&.!_...-P.>q....U.">c.C.L......[..u.
....G..JCPPW....<.$9]..[N..X...yx.......5..b.PC...._..gD._&.......Y
.e..g?.l~.I.l.zJ....N.].S..A.....D..m=...`.....^.3..>...jH......{..
'..n.-......&4.M....GV...at...y-.Rm,.r.Q7n$......0*...2V..Op....4.@O..
..e.dh..........'....k.Q6O#.....j(...!.....?=#....Y....J._.U.....\..h.
..I..\...!m.......<..~G.,.u8M).......w...-\...aJ.o.Y......P2(v.....
b../s......'Pm8..q.3.Fqc. '...Q..GDN..d...U....2.m.#....<....c.T...
...3........vTd.D..o...'..PP=..1i>........Zs..../....vE-...Y..b....
..M..\...*_...k. b1Z35..kW%..5..R..1h.0.....~.D5~.....J.M...3s.3....&g
t;o....DX...P.s.*o&|...Q.MN......`...uO..."..............S.8-...M.7.z.
.w.e.../...h1...g.,).k...KA[74..<.....C..v=..hr.63S.X.....&?.....k.
...Z..../Z:.%......{...^.5..... ..>.KAlaK ?,....!Qo5C..R..WE.o..$}.
#..S.1Uq.^........d.7...r....:6.~..`=....J.zT....dc..0.....j.... .....
E..x.w...k.......Xw..?6G...4".....]....#....FT.e..?...&.l.....YO...]..
...F6......Y...qc......&.........P..}...@,&S...cU....N....R.....-Q....
.j....E..`.o.......yd;........L....l.......!..eM......QM.:4.........7.
UrwZ..c.........#.".d....c..D.#.>..Y6`1.}...Rf.......7.F.-q.Nz'(kI.
..bG"...5......w........}..nu~.*..g.|p:......N.....Un~.jN..~P..[N.N..S
.U..VD(.Y-..p. .mX.g]U[.......Z..2?.M.uy......l.......o.~.r....K\A....
....>.....V..&..w,..]...h.....&...8iHNopn&T....3u...=P...;...#PAYUc
a...U..Jis.4=.=..v..|k.....8......4sc....{. tTF........J ......K}.<<< skipped >>>

GET /pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=istartsurf&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=2&index_in_screen=1&index_in_session=2&0.7277258088139926 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:22 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked
0......


GET /pinger?event_type=install_start&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=appshat_madness&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=3&index_in_screen=1&index_in_session=3&0.9077707321676313 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:22 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Thu, 30 Apr 2015 07:23:22 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.wpm HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:17 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.65 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Thu, 30 Apr 20
15 07:23:17 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.65 ms","message":"store 1 ac
tion and 0 update "}..0......

GET /v4/sof-installer/535559167_198339_B48A115F?action=smt.installer.istartsurf.RegWrite HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) Pi/3.1415926

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:21 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"0.42 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Thu, 30 Apr 20
15 07:23:21 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"0.42 ms","message":"store 1 ac
tion and 0 update "}..0..

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:04 GMT

Last-Modified: Mon, 27 Apr 2015 14:56:24 GMT

ETag: "43a054d-6fb-514b5f31db600"-gzip

Accept-Ranges: bytes

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/plain

Content-Length: 504
..........}.M.. .....9X9X..l.v..Z.v/.w...&....$..........<..;0|....
_..v.(.W..u..../.....z.A.N....B.&./E.L...J ..z..6...y...&,..a...m...xC
...<.W_...(=.~.....OV.O..v..Y.j....0.p.....G..]...4V ....|....C.; O
[email protected]>..).`.y6.3aQ..yD\N...<.../.80...?.7. J....B.-
.R#e...$........i#....o.O].bx.p...M.*.\....J....-..;s..V.K1..&"..8D.9!
..=Q.lt.M..c..[...q.j.~....D...Q'..!SL4CAsVJ.7h4..s'..-...%p.>....u
......k....Q3....X.....Y3....LY..T.....[x.}#.....w.aU?.....yC..A...;..
......Y..Z........'.....K....HTTP/1.1 200 OK..Date: Thu, 30 Apr 2015 0
7:25:04 GMT..Last-Modified: Mon, 27 Apr 2015 14:56:24 GMT..ETag: "43a0
54d-6fb-514b5f31db600"-gzip..Accept-Ranges: bytes..Vary: Accept-Encodi
ng..Content-Encoding: gzip..Content-Type: text/plain..Content-Length: 
504............}.M.. .....9X9X..l.v..Z.v/.w...&....$..........<..;0
|...._..v.(.W..u..../.....z.A.N....B.&./E.L...J ..z..6...y...&,..a...m
...xC...<.W_...(=.~.....OV.O..v..Y.j....0.p.....G..]...4V ....|....
C.; [email protected]>..).`.y6.3aQ..yD\N...<.../.80...?.7. J..
..B.-.R#e...$........i#....o.O].bx.p...M.*.\....J....-..;s..V.K1..&"..
8D.9!..=Q.lt.M..c..[...q.j.~....D...Q'..!SL4CAsVJ.7h4..s'..-...%p.>
....u......k....Q3....X.....Y3....LY..T.....[x.}#.....w.aU?.....yC..A.
..;........Y..Z........'.....K......<<< skipped >>>

GET /id/100746255?region=world HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:22 GMT

Server: Apache

Vary: User-Agent

Content-Type: text/html; charset=utf-8

Via: 1.1 aicache6

Content-Length: 32582

Content-Encoding: gzip

X-Aicache-OS: 10.10.1.21:80

Connection: Keep-Alive

Keep-Alive: max=20
.............r.H.?...1....).cQ..............rU..*.D..."...fu.F........
.......'.s2..$.P.-......$. .............O...9= o.......^...M...Z.....$
}..6.e..n.X....@,[email protected].
p.....9r|.:...Cm.......].$..g9...1.y...d... ..<`>........V......
....d.f.......*..l1..I.1.1R^...>.....~.....j!V.. ....{.......S...&g
t;...g.6{.?.....b.!..w.........-...$.......`...0.6u..I....3/..>....
o.......A...b].u...[^.).....J.......:..........Y....]/H.O].....u..O..l
....7..(.......tJ&..}2..iG.q."]...A...A.>#;.EK..cu......V.....i....
.o.w...........g.6`[email protected]..{3..'../![{..."..5U`[ y.,.|#z.. l.kf0.k.
].w.../.Cw...X........$T.\;V#....h...;..>([fYU.Z...FH*..>.B....O
.a..W...^.oLw0m...m.>b..'Wa..V'.W..=Qta....Y.)...x....R......r..o..
......)....[...t..Zk.....~j8'..V...|.....N._...n./;._..wJk..a .=O..m..
G...9. .....Vz....K...#....{h..f......}.Q.2{.0......;..<..:~...4).A
......y.e...5LST...J.v....zSi.....G$.x.M.2.D..U..s.hju.....>.......
.x<p;...Q.....m:...Y.;.........V.c..cQ.......Z.5.X...k1.....O.fY..Z
x....^.....8..)08. ..@[.:.....S.......I.JA<..U..:....]8..`...@Gt..'
........vL.K...U.t.w..6;^H......m.....#..V..>9: ._.[..WC.......~.K.
........bPO>....h.d..K`.3..x..... pH......_m.7]K...&..W.Z..2.i.....
xOI.x...z]...M....t].W..O0....)..^.<.-.IO.=`...S....../.M.......x..
|.c.O.[.?m...@._.q3.7.]8..Qs..C...m....Uq.x0.....f!BN..9.c._....C..E..
....b...)..(.-..n.?..%T.fL..(xA;..1a......,..m..?...^."......w......R.
...Z&.j..........n.D..9...B...U........!.V..,.)>...j;.i.V......<<< skipped >>>

GET /id/19746125 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Content-Length: 0

Server: aicache6x

Connection: close

Location: hXXp://VVV.cnbc.com

GET /business/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:15 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 5fsfu45ak3m6r

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: HIT from ncache15.global.media.ir2.yahoo.com-2

X-Cache-Lookup: HIT from ncache15.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache4.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache4.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache15.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache4.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts249.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), http/1.1 r05.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 4

Transfer-Encoding: chunked

Connection: keep-alive
75e.............Xko....|. ...q.R.K..$N.}....Ql.m.b.P.eqC..H.....;.,[v.
l.......5gf8<3.....w../..42......a.dd~P. .....xd..}.`..9/....L.....
..rj....f./o.f3 ...B\YD.v.q.v....p,..|.\.1O..x.d.'...R....t. C].{R.J..
:3^`E{....s.....{!...TaC{....6..D..)[email protected]\I.F...AC.>..
..b...g...*.......|[email protected]_.....hJ...6^...B....(.2*.GfW.42.
.DUBX.5g.X......{..0. F....'pL....V...."O$.b.K &....$...WIE%.........w
.$......n9S....6lf....\..W...Q...T....&h.$hZ...Q......W._.bl.]... ..$.
FM..$|I.Q..|1.O.r..JT.J.I.....D...]..s...1.......( Q.J.Gf.....dIg....A
.D~.o....Z......:...[..Q......Kf..m...A......&..}..^..Q....!...g3..o..
}...MH........_....@.{.ZH;g..i....R...].$.W..M...K.........*....I....t
gWux...B.e...W...l...h...$=......m..U3....tY....<..|........j.).K..
.J......[G.].4...p(E:.h...S....s..s.E...C@.~....zG.........P..67...=c.
.).....}g......S...z..3.........6u#7...k...... .v.u.kx.O.U...c\...a.).
S8.T=*j>D....-.{`.t...K!i....{.N......P..Xg.<..2Dp...I.9...,q...
L.D..W.u..)..\..5etV..[Ag,Q.([email protected],5.2^.4...[....d...b.....Y..
[email protected]}.8...ny.....K?#t..S.;...IA....7.......-&..C....K.
.)...;Y...'L.j..N<........%.4.G......".##.d.."..&E_r..z.....q...a..
......!.....R-L..........Oz..i.p...l.. ..3..^.......w.m..|..ur....(.6t
HB...._.B .X.......v.r..g7.,..wG..43...v...B..\[email protected]{.G9..U.
J..?.........F.h;,.......]..A.x.O.24.X"........N.;].SZ..*]...#h.R. ...
...T...#H'..P..~......I... F.jlD..z.mlnk....@..[....}..r.9PB...\b/.d."
V.).7...%g...Mwm.!v|\..4.......Y.5.rT..R. '........s....e.. ...3.N<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: private

Content-Length: 5430

Content-Type: image/x-icon

Date: Wed, 29 Apr 2015 23:00:02 GMT

ETag: "YM:1:d83eda8f-3aff-41f4-ab5e-c2546f7a2167000514e41a6e37fd"

Expires: Thu, 30 Apr 2015 23:00:01 GMT

Last-Modified: Wed, 29 Apr 2015 22:00:12 GMT

Server: ATS

x-ysws-request-id: 26cd17d4-51ff-4f6c-8f92-239883bb6907

x-ysws-visited-replicas: gops.use26.mobstor.vip.bf1.yahoo.com

X-Cache: HIT from logo1.global.media.bf1.yahoo.com

X-Cache-Lookup: HIT from logo1.global.media.bf1.yahoo.com:80

Via: HTTP/1.1 web7.use26.mobstor.bf1.yahoo.com UserFiberFramework/1.0, 1.0 logo1.global.media.bf1.yahoo.com:80 (squid/2.7.STABLE9), http/1.0 l2.ycs.dea.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r05.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Age: 30317

Connection: keep-alive
......  .... .....&......... .h.......(... ...@..... .................
..........;.p.5.o.6.o.6Dd.0...........................................
..............................................d.0.o.6Do.6.o.4...;...;.
p.3.o.3.n.3.q.3.n.3.r.7.n.5.o.6up.8Pn.7)i.2...........................
......m.3.n.6*q.8Po.7tn.5.n.4.n.3.q.3.n.3.n.3.p.3...;...;.q.3.s.4.s.4.
v.5.q.4.r.4.q.4.q.4.q.5.q.5.q.5.q.4.p.4.r.5.p.4.q.4.q.4.q.5.q.4.r.5.q.
5.q.5.q.5.q.4.q.3.r.4.u.5.s.4.r.3.p.3...;...;.t.5.w.5.v.5.y.6.u.5.w.6.
x.7.x.7.w.7.x.8.y.8.y.9.z.9.z.9.v.7.w.9.y.9.z.9.v.8.v.7.v.8.v.7.v.6.v.
6.v.6.z.7.x.6.v.5.t.5.r.3...;...;.u.5.x.6.{.7.y.6.y.7.z.8.|.8.}.9...;.
..<...<.~.<...<...<.{.:.|.;.}.;.z.:.{.:.|.:.z.:.{.:.{.9
.{.9...:.{.8.|.8.w.6.t.5.t.5...;...;.v.5.z.7...9.}.8.}.9...9...;...;..
.<...=...=...>...>...?...=...>...>...>...>...>
...>...<...<...;...<...<.|.8.~.8.y.6.t.5...;...;.w.5...
9...;...;...;...;...<...>...>[email protected]................
[email protected]...?...>...>...>...>...=...;...<.}.8.v.5...
;...;.z.7...:...<...<...>...?...?...A...A...B...C...C...D....
...............D...C...B...C...C...B...B...?...>...>...<.}.8.
z.7...;...;...9...<...?...>[email protected].
..................G...F...G...F...E...D...D...B...A...A...>...<.
z.8...;...;...8...=...A...A...A...B...D...D...F...F...F...H...H.......
............H...H...H...G...G...F...E...D...B...A...A...<.z.8...;..
.;...;...?...C...D...C...D...F...G...H...I...J...J...K............<<< skipped >>>

GET /rss/us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:22:05 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=300, public

Expires: Thu, 30 Apr 2015 07:27:05 GMT

X-Yahoo-Request-Id: bo9nfmtak3m0t

X-Frame-Options: SAMEORIGIN

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 201

Content-Length: 10927

Via: http/1.1 yts228.global.media.ir2.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r05.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Connection: keep-alive
...........}.r....{........Ma..8.EK.%[[email protected]..]ku.
....%..fU..H..5..5....a..d..$.}..ZkL.~..q..."....?_.."S....... .....&l
t;.X_WRd..:..$...p}.O..MGt`Dx...8..|..<./O.'Uv G..H.Da,......_...u.
.O/....f..~...P./....^[email protected]..&.W.`2Y/K...U..0...Iq.{..Saa
.G....XDc.*...$.c....y...T.d.T......=.._..|)c~z.k....$.8.....f........
......*.D..........^.O...EZx[...g2.0..:i.Gq.......[5.z.^>.....u.u..
..zEO..".....8.....r=X..>....B........h}ql.......8.O/.......4..GB..
ci....$.}...$....F.JDy8L2Y....Iv^.b.~^.....9..Q...."f'.0U.l....2._.Y..
....uw...../...a......BpMCZ\.D_...k..<,..\.....10.R......q.. ....d.
.&0f&p.s..N.`.T._..(..|.0.......rJr...g@.....,...^$.sX8....`...../...q
u...0..."l`...5....a.*.4..'.B.d03..d*`.....H.........@... ...'....z...
.....`Z`..9.......AED.M!..^M.T..Y,l$...#.e.K2...a..a.6......P..B...5x.
...b...I..c6.QtE...([email protected].:.........*)p..X..>...
.&cZ..KC./.../_......d6.{0..k=.).....x..c...&....=.4.!.J.h...h.K.(`..S
(.}X[..24.J.:.!./.@^.............`.L.&0.*..*.L.%.Y..9.]...<........
[email protected]"g*..|]..:...]u....N... .e.I. ....V.........?.....
.~...y..a...<9...Cw.}py..../....n.".]....X..G..(...z..R.>....-..
....q.....G............Q...?=..............9...=z..Fa....p...HTN....k.
 .....D..m"0..X..y)c......I...}0"".......#[email protected].._..
Y.dg..M..`N.we..."U.Rr~r.....B_.C.....r..)V........$.$.PP\..Z.H... ...
........<f*..\K=...E...(...... ..7C....L#......7Q..y.......o...-.R.
..U..i..j0.q^e]. .......=....../$JH4Z@._......,..eD.W.........Nqm.<<< skipped >>>

GET /rss/us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:23:04 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: max-age=300, public

Expires: Thu, 30 Apr 2015 07:28:04 GMT

X-Yahoo-Request-Id: 6b09fidak3m2o

X-Frame-Options: SAMEORIGIN

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 142

Via: http/1.1 yts275.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r05.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 10927

Connection: keep-alive
...........}.r....{........Ma..8.EK.%[[email protected]..]ku.
....%..fU..H..5..5....a..d..$.}..ZkL.~..q..."....?_.."S....... .....&l
t;.X_WRd..:..$...p}.O..MGt`Dx...8..|..<./O.'Uv G..H.Da,......_...u.
.O/....f..~...P./....^[email protected]..&.W.`2Y/K...U..0...Iq.{..Saa
.G....XDc.*...$.c....y...T.d.T......=.._..|)c~z.k....$.8.....f........
......*.D..........^.O...EZx[...g2.0..:i.Gq.......[5.z.^>.....u.u..
..zEO..".....8.....r=X..>....B........h}ql.......8.O/.......4..GB..
ci....$.}...$....F.JDy8L2Y....Iv^.b.~^.....9..Q...."f'.0U.l....2._.Y..
....uw...../...a......BpMCZ\.D_...k..<,..\.....10.R......q.. ....d.
.&0f&p.s..N.`.T._..(..|.0.......rJr...g@.....,...^$.sX8....`...../...q
u...0..."l`...5....a.*.4..'.B.d03..d*`.....H.........@... ...'....z...
.....`Z`..9.......AED.M!..^M.T..Y,l$...#.e.K2...a..a.6......P..B...5x.
...b...I..c6.QtE...([email protected].:.........*)p..X..>...
.&cZ..KC./.../_......d6.{0..k=.).....x..c...&....=.4.!.J.h...h.K.(`..S
(.}X[..24.J.:.!./.@^.............`.L.&0.*..*.L.%.Y..9.]...<........
[email protected]"g*..|]..:...]u....N... .e.I. ....V.........?.....
.~...y..a...<9...Cw.}py..../....n.".]....X..G..(...z..R.>....-..
....q.....G............Q...?=..............9...=z..Fa....p...HTN....k.
 .....D..m"0..X..y)c......I...}0"".......#[email protected].._..
Y.dg..M..`N.we..."U.Rr~r.....B_.C.....r..)V........$.$.PP\..Z.H... ...
........<f*..\K=...E...(...... ..7C....L#......7Q..y.......o...-.R.
..U..i..j0.q^e]. .......=....../$JH4Z@._......,..eD.W.........Nqm.<<< skipped >>>

GET /rss/mostviewed HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Redirect

Date: Thu, 30 Apr 2015 07:25:27 GMT

Via: http/1.1 yts204.global.media.ir2.yahoo.com (ApacheTrafficServer [c s f ]), http/1.1 r05.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: no-store

Location: hXXp://news.yahoo.com/rss/

Content-Type: text/html

Content-Language: en

Content-Length: 402

Age: 0

Connection: keep-alive
<HTML>.<HEAD>.<TITLE>Error</TITLE>.</HEAD&g
t;..<BODY BGCOLOR="white" FGCOLOR="black">.<!-- status code :
 301 -->.<!-- Error: GET -->.<!-- host machine: yts204.glo
bal.media.ir2.yahoo.com -->.<!-- timestamp: 1430378727.000 -->
;.<!-- url: hXXp://news.yahoo.com/rss/mostviewed-->.<H1>Er
ror</H1>.<HR>..<FONT FACE="Helvetica,Arial"><B>
;.Description: Could not process this "GET" request..</B></FO
NT>.<HR>.</BODY>.....


GET /rss/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:21:47 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 2u3cc4tak3m0b

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Thu, 30 Apr 2015 07:26:48 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 221

Content-Length: 7833

Via: http/1.1 yts224.global.media.ir2.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r05.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Connection: keep-alive
...........=.r.8....X...t.!.*.n.S.%v:..v.N^T .J.y.AZ...#.e.f...d..HIv.
.cI...L:.%.8...\...OIL.y!.,}......S?....l.*C.]...O.....L.Z...=[..e..n.
......A...,i'.d{e2..#.....)...2*c..._ .|(.%.X.E.~..K._..gA..\....?....
...)<95.z[~..z.._Dy.3o..8....8ai@...$,..H .K.."/xI....X.zC.Y.q.f...
.....,..9.F..e..L=...2....4..6K..<..S... m~.=..Q.....v......14.n`.O
....c".......<[email protected]...%.$J.D..
MU..#qk.%}.uq.................N.....[y._o..?...h..'.5..E.p.*.,J..<.
#..........n...".R~.:m5._.......?.....#...cZ....)....jn......cq.%Y..( 
...k..5,.5(.x...v...........6..6 .......'W...nR..ow..D.}.=......!;...s
;....}r..Ob.....Y.82w...7Np.}:....z.... ..B...^%......JX\........fY.m.
...evm......aQ.?...n....`s..g...n...W...tk.......n.....`.....1A..8....
ng..^=[..........Y....(.F<.X....*.G..x.........QJ.X:`e.R.'..X.yX..I
..2..../............`..na.V...J.d8...f...Q...0 @.(.y...s.........P[K.=
&b. ~.R......9.u..%....k..z......=.....p8l..(%h .5........*.....H. ...
J.b.W6....6.....e......5.~pv-G90.....9.......k...Y.?..(R.-%.R...$.....
...JRd.! [email protected].$.._..3m.....p.s........BY.E.y....l...a.a.9.....
...)..)NM.......g.).G.|T...m.N......t.G............w....p#.{C......9..
.............h....3....vA..lSm=X.d.%,%R..`..@#>.\Pc.h.0p6.].......@
.....DgF...........t...7V.`..ZU....AU.@.*..(&..*.m..7.....y..U...l9...
...B..... ..H(.n..)...........!...&.@.|D.MOYY.09<~.D......../..F.6.
..#Cf!|.U.!............".<..a. .8/.K...19FO.....DN...._>/v.Xxl,.
....<.;.<.yS...........".....9H...!>...St..l..Q.....]....<<< skipped >>>

HEAD /us/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:21 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 2ji2catak3m71

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: HIT from ncache5.global.media.ir2.yahoo.com-2

X-Cache-Lookup: HIT from ncache5.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache2.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache2.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache5.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache2.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts228.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r05.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 6

Connection: keep-alive

HEAD /pages/international/index.html?partner=rss&emc=rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:10 GMT

Server: Apache

X-API-Version: 4

Location: hXXp://international.nytimes.com?partner=rss&emc=rss

Connection: close

Content-Type: text/html; charset=iso-8859-1

GET /services/xml/rss/nyt/HomePage.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: MF2=19hhj9gt8nsle; RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Content-Length: 9245

Content-Encoding: gzip

Date: Thu, 30 Apr 2015 07:25:29 GMT

Content-Type: text/xml;charset=UTF-8

Server: FeedsPortal

ETag: 1430374374000

Last-Modified: Thu, 30 Apr 2015 06:12:54 GMT

Connection: close
...........]_o.Hr.....p..9D.(...u./h..5k.>I.....E.D.I6.......5.....
.....o..$U..${=3....E..YI&Y...._UWU...9...HR_F.^5..WLD.t.h.......{....
^e..,..'D..Y,.......9.^1/..w..,...z....,.C.n;2. ."...x..........C.....
w[....t{............z.i..F:.2......*.......i..u..X^.....q..t.0P.......
..xU$.Y..-.......'..=....V!>...u~K.u."...2$.._.gy$.;.....n...X..O3.
..........6.....G....P....n..,?sy.R.....$p@/.....P\......X".w[...[jp.x
....3 ...3]U?<..,....C..I.'.Oa........s..Fb.0... >o{Y....$.D..(.
....D....:=......12qX.{P_.. ..$...Ed.xc.....,.'^v.)?....eCO.....2.aCd.
ud..hvP_.t...c......X.dV......f..|.N/....2.$..r?p.s.....,8l...?.~H..W.
.h..'..=.I..H....C?u.....9.?.t.n...w..8....)Z..^..g"|.....0o.F=G....^.
>.I..#.@=I....'.?Ms..[......2..4.......LF.......u..r..[;o...q.....5
.i}g...M..A.o.A.<7..-f..4M..kvL..i..<5;.;.....]..i....).V/j.....
...'..y./J..i&...@q<4m,.Hy.x...H..E.c...r...D..(c$4....1...).1.B..$
.c.J'...aq"R..u....%..h...C....'l..........E...............b#....^...8
G..(aN.k..W<...~.#..........L2.. ....]..Nkw.|S...........%N........
....9.*I.`P......J.m.[.w....D....|I.h=. Z....2.M......|.....Vc.\...2K.
....A..a.._b..;se.....3..)...`...3S|......l.....Z.........Q.....d....'
.Q...A..a}.z<.N..Y5.a<qu..If.~..y.>....:..?.M.:\2.W`.g.......
.'.T.S..6.?...e"_..o..f{w.......8....?...nk..Tl}.1.....H....v..(.....?
....s...f../....W....x.j.....-F9.9..oE..<.....-.?./?.|....>V.X.Y
..:c.......#P.....f.s..............."..?L$.x.:[email protected]....=.
.j.V,...mm..3..P.\...,|e..Fw0....T.....F(3o.S<!.]W.....So......<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSpuCE3aK3GivZPzGQJ6L5BRyZofwQUl9BrqCZwyKE/lB8ILcQ1m6ShHvICEAKQll6RM0DNpmNM7zH3/Qc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1790

content-transfer-encoding: binary

Cache-Control: max-age=535754, public, no-transform, must-revalidate

Last-Modified: Wed, 29 Apr 2015 12:15:02 GMT

Expires: Wed, 6 May 2015 12:15:02 GMT

Date: Thu, 30 Apr 2015 07:26:58 GMT

Connection: keep-alive
0..........0..... .....0......0...0......'.V.8.F.V....H....JW..2015042
9121502Z0s0q0I0... ..........!7h....O.d...AG&h.....k.&p..?...-.5......
....^[email protected]...*.H........
.......d...W.P".....!..%.p..0....e."..<.\l&.. zl%ln@{.Sc.....l....;
R....@).(E.D...c.\.Q.L&...;]A$:.o1.(>.l..G#Db.!....bO..T=&}?.`.....
w.}1[.1.P.{[.%..Lji..`H...............Z...9M\\du8.X.N..c.A.:j$.p.2...0
.....7.2x....C"."...1(.LA6...&....SH,..../[email protected].....#0...0...0
..........r..?.*......y"..0...*.H........0..1.0...U....US1.0...U....Ve
riSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use a
t hXXps://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code S
igning 2009-2 CA0...150226000000Z..150527235959Z0..1.0...U....US1.0...
U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms o
f use at hXXps://VVV.verisign.com/rpa (c)091<0:..U...3VeriSign Clas
s 3 Code Signing 2009-2 OCSP Responder0.."0...*.H.............0.......
......m5*R........2....>...yU4..L.. ...........u..Hez..Pn.....d...n
z(...V7.}^...d!RX...bl..[..a...L.. .~..Ij......%..%p.-...u..:..i..F*].
..*....{NH..|0...gHX.Q.r....S..........._.9.(w...suC...N..s.....&."...
:.C.Q.i~rl..<..krS..8.B..o][email protected]...
U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.veri
sign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS inco
rp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U..
......0... .....0......0"..U....0...0.1.0...U....TGV-B-32010...*.H<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1762

content-transfer-encoding: binary

Cache-Control: max-age=385885, public, no-transform, must-revalidate

Last-Modified: Mon, 27 Apr 2015 18:34:46 GMT

Expires: Mon, 4 May 2015 18:34:46 GMT

Date: Thu, 30 Apr 2015 07:26:40 GMT

Connection: keep-alive

0..........0..... .....0......0...0......;O}a.!..u...au..eUNp..2015042
7183446Z0s0q0I0... ...................B.>.I.$&.....e......0..C9...3
13..R...%V.......K3.....20150427183446Z....20150504183446Z0...*.H.....
........<........4Tl |..2e....".....7..\.|........H...LdiH..C.#=ty.
A.m2."......,....F..eK.H...t.C...Ak.y...M4.d..n.N..X.Jn...^....:...~.}
R.b..k]....E.]...&...0?.]....8..*E8..1'E:a<..~N.....A...=...d.6...7
..._..R..G.....A%h.0jN.H....`u...^.YX.DW\3$.yG..g..BW....!......0...0.
..0...........2...'U.BM...g.B0...*.H........0..1.0...U....US1.0...U...
.VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1(c) 2006 Ve
riSign, Inc. - For authorized use only1E0C..U...<VeriSign Class 3 P
ublic Primary Certification Authority - G50...141202000000Z..151216235
959Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Symantec
 Trust Network1?0=..U...6Symantec Class 3 PCA - G5 OCSP Responder Cert
ificate 30.."0...*.H.............0...............2&..PL...,..2....:..t
H...`JG.%..*...s.c%[email protected]"1.5?..s..
...3[...u......]...R0..Z}....l..I.Y.....j\H.q...#.uw.4qz.#.J.....@2$".
.$l.B.......D.ye..(..2.........@...... ...."... E..0M,..b{.^..s'....f.
6.pr4.J........'j..........0...0...U.......0.0l..U. .e0c0a..`.H...E...
.0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0...hXXp://VVV.
symauth.com/rpa0...U.%..0... .......0...U...........0... .....0......0
!..U....0...0.1.0...U....TGV-B-2760...U......;O}a.!..u...au..eUNp0...U
.#..0.....e......0..C9...3130...*.H.............(.&..Dgr.Ve..#...5

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEALa8SdwQh28+NjkQGqVhx8= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=329605, public, no-transform, must-revalidate

Last-Modified: Mon, 27 Apr 2015 03:00:05 GMT

Expires: Mon, 4 May 2015 03:00:05 GMT

Date: Thu, 30 Apr 2015 07:26:40 GMT

Connection: keep-alive
0..........0..... .....0......0...0......N$p...v....1.;..vn....2015042
7030005Z0s0q0I0... ...................F....0.yV......{&.K......&......
....'[email protected]...*.H........
...........;JP........<.....TU.I.T.......Q.[..}....P...........R.f-
[email protected].<'....0.....|...(..SKB.}p........vW.......R.%.g.
6. !.]m...a.....[.xr...F.......O...tDB....G.<..K........O9_...H....
....(.>..l.H.~.>.q..bu..9........@2D].i!RY.K.%..C..S.t'v.4&.....
0...0...0............F...I]A([email protected]...*.H........0..1.0...U....US1.0.
..U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms
 of use at hXXps://VVV.verisign.com/rpa (c)101.0,..U...%VeriSign Class
 3 Code Signing 2010 CA0...150225000000Z..150526235959Z0..1.0...U....U
S1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1
VeriSign Class 3 Code Signing 2010 OCSP Responder0.."0...*.H..........
...0.........q<...A...#......A...u..Lz.............o..D.vQ%..s.....
..f....e../jI.d.W.....|K;.j5...#.B%.]..~S.... .|;S.&.....N..`...5.....
!D.p....M/.. ..;j...q..`6...2.Ck..BnLHvCZn%....,.w.Ooi..z'...\.Yx.....
.b..L...5.o..o..{..}.........%e.....N..._i........*Bc....:yQg.........
0...0...U....0.0....U. ...0..0....`.H...E....0..0(.. .........hXXps://
VVV.verisign.com/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's 
CPS incorp. by reference liab. ltd. (c)97 VeriSign0...U.%..0... ......
.0...U........0... .....0......0"..U....0...0.1.0...U....TGV-B-31830..
.*.H..............-..^.........f.P`...s.....8.....V.......... ....<<< skipped >>>

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=178475-

User-Agent: Better Installer(Mozilla)

Host: d3zcfo8zs4s5u.cloudfront.net

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 107083

Connection: keep-alive

Date: Sun, 26 Apr 2015 06:08:59 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 178475-285557/285558

Age: 980

X-Cache: Hit from cloudfront

Via: 1.1 017ee4b2e5ba6b7a7dd1443f39b6e832.cloudfront.net (CloudFront)

X-Amz-Cf-Id: DpsvO6Lt3HOSnTWMAfJTJE3ZndhBRxjQU7YQjMbc6VriQ8byInv8Kw==
w.N>.Pq..A)...[N......B.x../.>[email protected]..
N.Z......j..&...h....A.hO..\....'.....sj.`.....H.S.|.s=.......I.)L>
...c....i.>.....G.u..H.D....P......qC0<.(...m..y.dm.\1N.m...v.T`
- .Ss. .G2..rk.......N{[email protected].......}......6P$....2
.52..!.x....L.R. [email protected],.].\...a..........k
.....A.....P....u`..I.///....b~.y..^...P...z..p..:.d.....R.4....U. ...
../.M]..~.........(...... y.).. ..In.I.)..ua.*..N!Q.......1.e..b)F5...
x.bS..f..|q.H..K...V.`.^...x!Su4_"?...uc.tY.m...%....r..be.z. ....0.^.
....]y........)... .u_/..V..6).v..\.7n-z.q.............Y.w.oBk..f..}..
[email protected]. .*.b.;..).....|.\@c..)......H.P..;......!"...gN.......9W..
.. ......NJJJ....N|..)T..aU..1....5~.G...=d.m..Qfl..?.yO|e...`.sXm$Op;
."p................t=V.........Q....f.r0.........i...M......E....Y.../
....N.7/.;.....|..R...(./.4..{)..~.M....).......f.w...6.^.0TB...H..c..
.....^-a.G`0ub..|a;.C..T.<..N/......^..>."....f..$..d.=.X0..x4R.
..W...=.....`..w.$\a/.~R.~<.....jS.q.es....-.....#W#.D.4H...tw...&.
A.w/...t...[H"D....9E].....A....B<D.7[.2.3.!.......P.......R..R._.I
...y........([email protected].\D.k.2....3..".".......
.p...?_X.........$v.....,......\.V..EV.G...........Z.DO....B..V...%.D.
...].n..`...H.!..=<.. Y.*l..].j.u.d.o.M.i...>..m........$K..@...
..]~.H.z.p.O.?.i.&.U.....U."<..o.S#..x.....s..g.[.....A.6~'-.1D....
....`Pim2....;.xsV2.'7.#..jlW.1-..4......h ..~...oV..."...]|..i=.....V
(.....e..!..EU.d....ui..9).....^P.o.g..e..H.1x.....\.#..D....G.w.p<<< skipped >>>

GET /smt2b/all/hat/row/setup.exe HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: dl.newinputinfoservice.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:23:22 GMT

Keep-Alive: timeout=10, max=100

Connection: Keep-Alive

Accept-Ranges: bytes

ETag: "1430375449"

Last-Modified: Thu, 30 Apr 2015 06:30:49 GMT

Cache-Control: max-age=456

Content-Length: 13466698

Content-Type: application/x-msdownload

X-HW: 1430378602.dop002.am4.t,1430378602.cds045.am4.c

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L......P
.....................n......-A............@..........................`
......./........ ..............................p.......... C..........
......................................................................
...........................text...<........................... .0`.
[email protected]$.......&.............
[email protected]@.bss..................................0..idata.......p.......
[email protected]........... [email protected]... C.
[email protected]..........................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U..WVS.......U..E....t.
..F........T.D..H...H.......M..E..5..D..D$...$...tE..M..E.....SS...E..
.$.D$... uE..M..E......M.WW......M.)..M..NT....NP........E.....}...VT.
.......FP..E........}..VP........U.......FT.............}..........E..
M...$..|sE..E..R...D$..E..D$...$...uE.....<$...sE..E..Q.}.;}...Q...
.~X........F4..$...sE...W..........$.E......E......D$........sE.RR.FX.
.$.D$....sE..5.sE.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$.\
.D....tE...|.......T$...$..QQ.<$...sE.S.M..E..D$...$...uE.PP1..

<<< skipped >>>

GET /yandex-tech2-www/_/FA2t0d4VnPfgtJ9YRwNyI8OccPQ.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.st

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: image/x-icon

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Tue, 28 Apr 2015 13:36:09 GMT

ETag: W/"553f8cc9-47e"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
15d............c``.B... ...... ......@[email protected]$
[email protected]/...n.%O?..{p..........w.......l.
A......_....e.......q..]?.....?.._R........_.O..................}.....
...I.l...t.EWd.....?{......>.$....X..0z.e........*f.......~..?.....
....<......v..B...D.. )......o....Q.n.#... J..4...1;.3C1#..........
..D0b.~.....0..HTTP/1.1 200 OK..Server: nginx/1.6.2..Date: Thu, 30 Apr
 2015 07:25:08 GMT..Content-Type: image/x-icon..Transfer-Encoding: chu
nked..Connection: keep-alive..Last-Modified: Tue, 28 Apr 2015 13:36:09
 GMT..ETag: W/"553f8cc9-47e"..Expires: Thu, 31 Dec 2037 23:55:55 GMT..
Cache-Control: max-age=315360000..Cache-Control: public..Access-Contro
l-Allow-Origin: *..Content-Encoding: gzip..15d............c``.B... ...
... ......@[email protected]$..4..~b.?x.....t....D...p..
[email protected]/...n.%O?..{p..........w.......l.A......_....e.......q..]?..
...?.._R........_.O..................}........I.l...t.EWd.....?{......
>.$....X..0z.e........*f.......~..?.........<......v..B...D.. ).
.....o....Q.n.#... J..4...1;.3C1#............D0b.~.....0......


GET /lego/_/pDu9OWAQKB0s2J9IojKpiS_Eho.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.st

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:09 GMT

Content-Type: image/x-icon

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Wed, 08 Apr 2015 15:37:16 GMT

ETag: W/"55254b2c-47e"

Expires: Thu, 31 Dec 2037 23:55:55 GMT

Cache-Control: max-age=315360000

Cache-Control: public

Access-Control-Allow-Origin: *

Content-Encoding: gzip
228..............QhRQ...#E..p.."...*V...H.f.Aa.....j. l.C.=.1......M.&
gt;4...>..CE.B..Vb..A.C.......<p."?..w.w.... ....A..}bj..;....[.
....g..........@*..:..D"QK....H$........j&.A/...O...C^..Bb].......B.".
..:...5.....K.X,...{!.k/..P...|..<[...{.?A.K.......^./..E(...04T...
g......}..r....G...t.T*A7;..}}&..:..~...d..sf...j...0jp...B&....6..R.T
,f...f..e4...w....3..|...R..e>D'M.....V^.;........\.f.K....v..e...c
.../_[8~...R.....z...".I...<^.q1..Mn.O.m....s)...dn7{........m.a...
}`.......r........:.8.z...}...6...:.j.......].....kG.u?..=z...t..M]...
ri.d..?3...~.....0..

GET /pki/crl/products/WinPCA.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Sat, 07 Mar 2015 06:01:44 GMT

Accept-Ranges: bytes

ETag: "dde36a309c58d01:0"

Server: Microsoft-IIS/8.0

VTag: 43879645100000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 561

Cache-Control: max-age=900

Date: Thu, 30 Apr 2015 07:26:03 GMT

Connection: keep-alive

0..-0......0...*.H........0..1.0...U....US1.0...U....Washington1.0...U
....Redmond1.0...U....Microsoft Corporation1 0)..U..."Microsoft Window
s Verification PCA..150306223202Z..150605105201Z._0]0...U.#..0.......p
............<.J0... .....7.......0...U......40... .....7......15060
4224201Z0...*.H.............4......n[.t........'....Dx.P3R.!3.|D.6vL..
"k..9'....L..k......e.4......._..N..TJ......N.fP...H.....8...TJA...fGA
.e...^"{../...H?..E.Y.U....h..0/.......d...6..K..V?QM...{..h.....{.3..
.v.....\~.7n..5..'..k.Ia.YL..LP.b....._7.V..%......z*$q..Y..f.b..L8<
;~..v.w....

GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Last-Modified: Thu, 05 Mar 2015 06:01:35 GMT

Accept-Ranges: bytes

ETag: "cf2633d6957d01:0"

Server: Microsoft-IIS/8.0

VTag: 43853244400000000

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Content-Length: 550

Cache-Control: max-age=900

Date: Thu, 30 Apr 2015 07:26:03 GMT

Connection: keep-alive
0.."0......0...*.H........0w1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1!0...U....Microsoft Time-St
amp PCA..150304221607Z..150603103607Z._0]0...U.#..0...#[email protected].. .
.5..0... .....7.......0...U......20... .....7......150602222607Z0...*.
H.............Y..}y`....T.Z..`B<..I.N..O... E:....7......a..)......
...._|W5laoqi(..>t~.."...&`.._.7J...:..{bO_Kyi...R...!...B.s..I.c&j
...(I\.S{._;@B...[i.e.[."...R` \...........M^k.=q[.V...9y..G.1o#k3<
.W.......H.$>}...U...2qyd2|b.fB.....r....H.P...;....Q...b......5%.P
.#..

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=167832-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:21:59 GMT

Content-Type: application/octet-stream

Content-Length: 503496

Last-Modified: Thu, 30 Apr 2015 03:13:41 GMT

Connection: keep-alive

Expires: Sun, 03 May 2015 07:21:59 GMT

Cache-Control: max-age=259200

Content-Range: bytes 167832-671327/671328
...}..u..x&.........._.....].V.u...u..[&..........^........u......Y...
.#.....V.;.t.3.^]...U...}..u...&..........^.....]..E...t.j..p..0.u....
.....].j.h..H..9z...e..3..u........u...%.........l^...........]....t..
[email protected]...@u..}..G.=....v....}.....u.V.....Y.e..V.....V.....YY.f..
....N....t.....F.j._.-.E...u W..#..Y..u.....H..M.....N..............N.
.~..F....f...E...........E...y....u..{...Y...U...=..H..u..lx...u...v..
h......s..YY][email protected]
..u..6.<.@[email protected][email protected][email protected][email protected]....
u.j..S...Y.......u.j..B...Y.3....u........y.j...u..Y..TpG....I........
.H........y.j...u..Y.......y.j..~u..Yj..Us..Y;.t.P.ku..Y.R....E..t...M
...j.YQPVh..@..|....E.9u.u.P..t....u.....E......M.PQ.....YY..e..E..E..
}..u.P..t....t...E......E...w...............U.... .E.VWj.Y..vG..}....E
..E._.E.^[email protected]$.......t$.......
tN......u........$......$..........~.....3.........t..A...t2..t$.....t
......t....A..L$. ...A..L$. ...A..L$. ...A..L$. .......U..WV.u..M..}..
.....;.v.;.............r..=..I..t.WV......;.^_u...I........u..........
r)...$...B...........r.......$.$.B..$. .B...$...B..4.B.`.B...B.#......
F..G..F.....G..........r....$...B..I.#......F.....G..........r....$...
B..#.................r....$...B..I...B...B...B...B...B...B...B...B..D.
..D...D...D...D...D...D...D...D...D...D...D...D...D..............$...B
... .B.(.B.4.B.H.B..E.^_........E.^_........F..G..E.^_...I......F..G..
F..G..E.^_....t1..|9.......u$.........r......$...B......$.\.B..I..<<< skipped >>>

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: d3zcfo8zs4s5u.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 285558

Connection: keep-alive

Date: Sun, 26 Apr 2015 06:08:59 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 0-285557/285558

Age: 980

X-Cache: Hit from cloudfront

Via: 1.1 da44a033908207250002410c047e8764.cloudfront.net (CloudFront)

X-Amz-Cf-Id: uyyoKnMMhh4NuQp3aKb_CgY0rmQ_fhomQGq3nox-YkJX-2rK2j0n2g==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................\..........<2.......p....@......
....................................................................s.
......@...............................................................
................p...............................text...ZZ.......\.....
............. ..`.rdata.......p.......`..............@[email protected]........
[email protected][email protected]
[email protected]..............@..@.................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
.....>[email protected].>[email protected].
P.u...Pr@..}[email protected]... M.......M....3.....FQ.....N
U..M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u
[email protected]}[email protected].}.j.W.E......E.......P
[email protected]@[email protected] [email protected]..
.\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i.....
.D.......t.G.....t...O..t .....u...3....3...F.....;5.>B.r._^[..<<< skipped >>>

HEAD /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Length: 41792592

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0

HTTP/1.1 200 OK..Accept-Ranges: bytes..Content-Length: 41792592..Conte
nt-Type: application/x-msdos-program..Etag: "5358c"..Server: downloads
..Vary: *..X-Content-Type-Options: nosniff..X-Frame-Options: SAMEORIGI
N..X-Xss-Protection: 1; mode=block..Date: Tue, 28 Apr 2015 18:12:35 GM
T..Alternate-Protocol: 80:quic,p=1..Last-Modified: Tue, 28 Apr 2015 17
:23:00 GMT..Connection: keep-alive..Alternate-Protocol: 80:quic,p=0..<
/font>....

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=0-8155

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 8156

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 0-8155/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$........ K..A%..A%.
.A%..Nx..A%..A$..A%...K..A%...Y..A%..A%..A%...]..A%.Rich.A%.........PE
..L.....>U.................&...N}......,.......@....@..............
.............}.......}.....................................p0..P....P.
..L}..........x}.P<................................................
...........................................text...2%.......&..........
........ ..`.data........@[email protected]}..P...N
}..*..............@..@................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...................................................1...1...1...1......
.1...1...1...2...2...2..:2..P2..f2..r2..~2...2...2...2...2...2...2...3
...3..&3..B3..N3..d3..z3...3...3...3...3...3...3...3...4...4..$4..44..
J4..Z4..n4...4...4...4...4...4...4...4.......5........................
>U........0...............{.8.A.6.9.D.3.4.5.-.D.5.6.4.-.4.6.3.c.-.A
.F.F.1.-.A.6.9.D.9.E.5.3.0.F.9.6.}.....{.8.B.A.9.8.6.D.A.-.5.1.0.0.-.4
.0.5.E.-.A.A.3.5.-.8.6.F.3.4.A.0.2.A.C.B.F.}.....{.4.D.C.8.B.4.C.A.-.1
.B.D.A.-.4.8.3.e.-.B.5.F.A.-.D.3.C.1.2.E.1.5.B.6.2.D.}.....{.4.e.a

<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=8156-20669

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 12514

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 8156-20669/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
...M..?.....u..u..M.. ..._..^...E.P.E.P.4.....YYu.......P.u.3.f......f
.............YYt..E.P.^.........P......P......P.u..E.Pf......f......f.
}.f................u..E.f....:[email protected][email protected].
.........u..E.g....(.................P......P......P.............j....
[email protected][email protected]=..w... .E..P.f...w... 3.f;......].U..V.u.
..69E.w.2..?.U.3.;.f...v0W.E...........f.<}[email protected].<[email protected].
D..A;.r._..^].U...M...t..}..t.3...f.<[email protected].].3.].U..V.u...Wt!.}
...t..U......f..AABBf..t.Ou.f!>2._^].....U...U.V.u.RV......u. .R..F
P........^].U...}..SVWtH.][email protected]) ..<0..{..|!...P
.E....pP.......YYt.NKKOy.....2._^[].U..S.]...VWt8.u...t1...3.f..t#...3
.....QP.q.....YYt.G..?...0f..u.....2._^[].U...U...SVWt^f.:.tX.E....f..
..tC ......f...u.t"...f..t0P...7P.......YYt.FFf.<7.u.f.>.t.CC...
GGf..u.3........E._^[][email protected]"........f..-t.f
..t..u.Q.Q.....YYu.2.^]..M...t.......U...E....w.3.]..U..LB...f.9\t.II;
.u... ........#.].U...E.V.u....u..&.P.F.....@.....^]...3.9......1.q...
[email protected][email protected].;.u.2..eP....@.;..E.t.S.......Wh....j.WWh..
[email protected][email protected]..}[email protected]...<[email protected].....<.@.....
.[_^......0...........1.......0...........5.......1..........&5.......
....................1...1...1...1.......1...1...1...2...2...2..:2..P2.
.f2..r2..~2...2...2...2...2...2...2...3...3..&3..B3..N3..d3..z3...3...
3...3...3...3...3...3...4...4..$4..44..J4..Z4..n4...4...4...4...4...4.
..4...4.......5........RegQueryValueExW....RegSetValueExW....RegCl<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=20670-32847

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 12178

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 20670-32847/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
B...N[N.7. .7.CHe./1@H.......\.,.....B.A.C.,.*...=..Uv..L...G.....=.;.
.."...E.7d..}3...x.A....cz..@.%.L.2......2S.0.Q=b...T..o ..&t.98..Qo..
.F.?U.y.C..z.s.|d%.i....I.....F|6...g/>.0....;...1....x..\.c.fs@=.R
38.!C....Hj..XC.(.....,}.....V~B.2{......\...'..J=..u......L.4...3M52.
W.P.\..Y.9....vQ......_}.^......J_.7...j.}.......... $..7...|E...B.v..
]<.....B.I].........0.v....N......V..h..z.@/..U......G{U.d.X.$..W..
P.....U#..9o..(..s#:.K,b.~.*n.5..A.s.]]....0...D...D.nN._d.../...&.X.p
vMJ]..,.....\.%fw..~........d....r.../....B....\....~s..~..wl..~N.....
}...3'w......5,.{...Z$f.S`a........%.Q...2..:U...w.Zq........s..<&.
9../I....0.Zr.0.O..zM.}...g.#JxG.0...\[email protected].....,l.....O...|.
...Av...9..D...Xl(.E..p......-.p.Rh.....x%..9...OQ$.|.I.]..]...".A1..b
...jh[[....i.F9...0...$r...AL.....\.D.4-.H.w...j....w.{......i.....e.O
9....V.Ei.....h.p...W.....i.....7x..6oR.....w..r..>.{..n..]~.o.$9.[
J..c......)..=K....ey.lC..7......M...Hn.......c...aA.....{...4.../.k.z
...@,.$.a.R..u.0...#..u`a.$z...~7.....R.B..C.....9..Rr...7....._.Q>
..b.(..%..o].*.....(1.c.[:.6.V.wS..H54......:.S....S.`...........o]l._
......3...V..w.....z&.p..)^..]R..W.2.| ]....y\$e.y....yQs4hN..V......Q
.Vt. p$y.F....pvH?.k;.....J..4.f.....$f..O.u.8..To...2.......X......vi
.=d.o>....#d....*psV..Q....n.WP...A...yP......A|...I....B....%7....
?...[._......9N...F.(...M...<3Y%&Qyj.....",.D.`.......h[.H..(....NG
.(IY9...ey.o.J.....y.,....1tH?.......^......&..}rD.\......:*..._..&...
...v].N/.\.qx.f.s....F....Y.k.*.e1.....)x-ib.% e....-.E.3NY;.q.Z.M<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=32848-47295

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 14448

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 32848-47295/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
<..>.9 k.c...e.;......X..j.q..&........:.....q../.s.a.`....4....
u@3.'i Hw...6V.H....-mA...}..!...qhw...)&......n..z6..\.....tD........
Q#....p.............UL.B..2.u%..V.~).....Z..q.w...W.-.I>..XS.PZ...`
?OE..6.......|...bC.&;.n....*r.V........-..t.u.:...............S.%.^..
.AI0M.v\"..v-.....KZ..w...p.]j..>..H.^]K..D.'v........mWZ."4Hca._B"
..6..pr..c.S..G..D.=......J..V.Ded........)4...k.....a..$..L..u.'kO.e}
.N.m..D.j.x...1.@%7.....q.zq......\..YE ....3...y<([.....S./......n
...,..\.8.......(I...R..].........T.{H..C.L8=|.]......~....r....^.4$.H
w..^..y.Jp.t...>@.C.P=.D..q..\m.p...........#6..*.l..3t.0....6I.n..
....hF....z.hv..w....(.W..uZw.....U:..3....2.....y.O.[e..h.N.......qV.
....K4.0.q<[email protected].^4.......Y...l.wy=/...#......`.k...F...8W.W.D..
...&....r....P..S.?.3F.?x|T...........Zp..........K....WS..........}..
!..6...j.....$.y.3..*........_......3.........s}m....f[p>. ..t<.
,..A0..v...L..v...3.|....4.z..I:{r......]......."........=....!/..;.0.
..'..68.......S..I3."t.q>[email protected]*[email protected]...."...u..#.... ...Em
.W..v..!f.Y..K..W]O....J$S..>z...gR..8h!...n............O.f .m}...?
.....]..&W.EC~.Y.<[email protected]..<..-.M.bL.......o.<
...^...0KA5x...x.N...y.........cFm..x...=.........O.~......cb.<....
..^.........;=...8.go....7[.5.wJ.F....tk..o4.....s...*S..PqJ...@ .s1*.
.A#.4L..{._jl.l......H.r.b]..."JQxK].!h.......n.).<.K..=....pt...#.
L.I_>.......?....4%.~.T\..H..t.....p.[jS.....A....(.....39.........
............:.`..{H..'`.Ms.`....C..r.....ri\...L....C..Ti.K...zl..<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=47296-78836

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 31541

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 47296-78836/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
..,NU 7uu...B..W\.4.\aKh&.3...8....t....U...3r...z.g.|.mrNT.]...y.b..~
.Z..w.N.BM.h...DI...!f{ .j..F.h..|...`v..^.m.<...^[email protected].."
..2..20. .\..o. ..9..~.2J.!.8.RO...z.@...).;.A|H.a.(.5-..&.d...N...z*5
..2.<.3....5....Q.P....q..T..,.....k7&...p.........h.H.8....Ep?j..n
."Y'[email protected]..|.,G.L.......Y.._....Q.....N.|.."....cDV....q.
..;h........$....v.dhF....l...x.C....A...}q.......IoL.Y.k..7.g...E.p!t
.32..9....Q...Qtbp..>`.'.i...pU......Z..xe.`$r7kg..id...tP.ZA....~/
^....b..!..`..S"h<.g.k..O"..........=.B...#QF...<.c..8=.....%...
...h.....$..p...N....E...G-...2v..{d...l........?.6-....e.~a...`.Hy..3
/&.......-".*....8.[..CY.oj.......z[;z...#f...Wt.Sh.^.....>.[...mq2
).[.W..|[email protected].;.Y..%._..9.....7.......K..`....%......
.5...........SmU>..)Q.)...5...........8....L.....e...h...$.o5.MJ..2
w.h. ..([email protected].=...8..I.................u......9d.Q..
dF.{.c...3...IRk.w.6.HV.I..N. ...e....3..5.fS<.....SN'......T[.m...
.4.<A.).).vQ..'.&.U.8..P....`..6...J.ch5Q..V7..t.kY.....v........._
c...}..&....._.].z...%...P..x....W.=.#......qCKAdT..&.Qe..p.....S..t%.
c....5......._.m.a..8.p.....D.a.........2....]..w.-n......U.r..^e.m...
.jF.).._..Fy6...T....gU......%>6.>....@=..W..!.........x..Y.!.*.
3...9......_.i...C......./aW~.._...-...`...c..._.w...A........;.......
...7.....m...U..#Z. a..s..T..(y....8S/.o...%.)]XBG..!..*....^'c....q.7
.[.%G..h..sX.M..o...........Q.Gh.nk./[email protected]].....<...Zp
.....\..O..8.[<.E..yzK_h....a....v..7..L....B.........'Q8.U~...<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=78837-123069

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 44233

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 78837-123069/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
.^......=fi/..h...K|.......8.x..=4..........u.&..{....s......ba...e..G
S..f.&....A.-....N.........|.......<R..........<.K...G. P..Y..*.
..`.d...A...e......]........(k..`.-`M..q.*.C.fy]P..........>.w.....
.Z<0....H...>`...4(..%1..W..L...u.W...0L..0.!.z...f..`_...j.eu"f
..4.5;.O.I<.pti...R.~.l.E... &..7!..n.........{.)h....|&(......`.U.
........-.w..C..v.B..xV. ...JU. ....<K.w....<..e......*Z.p....D.
...."......oEf..g..'5.M%.....G.O....../..e&.|s#tg=zW...I.e..^....c..)4
......N?.Ab..|. .....t.....Y.e?4.?]...=^....:`...>.w....xx.........
%.d.vuH.......g..7v.......1D....?u..-.r...m...... .......q......R.nR.1
q.......CL.v..E....j.\...>..c.t.{_.U.o#........A.........m..m2.b...
.B*.....^.......C.8.`bI....;....r;u..!....'3Mm..T..O....NN.....].2H...
.}....B.<...Ab... ...f.*.fe/....m..l.l.j.<|n.P...v...O...x....c3
.....m../)Q....wP[..n.K.4...k.K...^NE..Y...Y...b.m...!.a.ffj...9I.q.$.
..:.IlbG{..B.>.*.(.....N..?e.(..cAj.....N.,..8pp*b.1D...Q.^.`..-.jS
.Mg.tN|..#s......t.......LC...'..%..........s..3u..<..L......U..=.=
._. ..btb...F..b.d.&../......,s..8.....q.6.$6-n.S;.<.)..iv....C:\.L
4s.m2C0*.m..t.1...~.Z(...?.......T.FL<i..\..zL..... kf/r 6.2O..pDZ.
.`};8V8}o6A.>.6.........T.D....4..U...F..tf...-M..7...B.o.....`..j.
..r.<>..b.G...a.....q.....f)>...A..8v....A*Goe.7.K^....W...3.
G...l.........B....U...R..O...1....rK..c...b...qfNQ.Q.~.........Z.....
.i^.r7.qx~A.nj..DV..X...s...X..x.H2..... .4....@>]........... ..!.N
...!L..az..fK}..\....k..,...2.t}k3...h..:Wu..o.......>....J.c..<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=123070-213557

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 90488

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 123070-213557/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
.}....5..h{:R...tS/...:.[.b..Y...LgL...R.q......n}.m.3PS.5G..("v.|e!4Z
[email protected]......}..,.........!..d>5w#..R..~.....B.......&l
t;..m>O..N.4.t6.....O.>..*._7..9....Z#.<Z......}....|.I.....9
....G.U.&.a5.H".w..A.#.'.....`....S....*h...e.H.....X....4>...10..]
7........a....@1:.c.3..........5(D.....}..K....Uo...";.a....0..Oa..(."
!.....RG..~............._....\...e9..E...........#...]W...Qm\cs.N..j. 
..X...h........8..m,_,i...`...m8..D..Sj.!kU..5.....G.|3..*:...G....om.
.F.$;.I...x]w#h<[email protected]...[[email protected]{..dw_Hq..]
...}LUd.......a...M..E.pk.u.0...@....).f.;?!Hs..J.<..o%..0i}.... .5
.L...^.^....`...R".RK).B.....46,......*..............^................
.;..>....C. .......-..h7....w..........L...m?.R...W...p...`.I.CR..f
...,.../........i.-G.| .<..:..I(%.`[email protected]#.......Y...M..6..wy..
..M.......n.H_........o...5.bG..F........d;...[...m......N.;.........v
....y..p.. ....^...%.....Q.....*Z..C|......N..d0.....J=9o<.p....m..
..%(......em...UwMk.....L...#[email protected]....(qVZ...`
]x.B...!.1=G....w^6,.*.D........tQL...:..D..).|7......L.*N2..ZA..~. ..
.H.......d&..` ..p....aV3"1.h.i.]U.....\t..b.{./.a..-...-(7.T'.l .%...
.....M....._".3 ....{.%....[.....-.XD.`....ge...y~...VYsJ.. Q}...s..m.
R....a.....*D..C..*......3!.H......^`&j.%..w&b]jQ.\ .{2=.l.' A....CZ..
..Xu.NC.c..'.yo.......@...[..q.6.||X.w..J.q.9.`7..........A..O.....u2D
.Z..R....=l%6..Zh.......q........u...<...nw..E|.s.C(.k.....a.......
..Ix.^...!hQV...M.........,.0.^!..7.l.67...]...'...gaW.6P.#.Q...A)<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=213558-395445

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 181888

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 213558-395445/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
p. ..7..9..m..j.F.T..H....I.ml^.La....=...)~*..3. 1..V.....>..T....
|...E.v. .,.........V.Y;.X....0.Zd.r".3.....Y..L'.f^..c.>.7.....%~.
.]..y....B..S..!.....-B...LP..jzA...D.....|.|..%...._ ...P.....h{.....
..>[P.e.'y..s....YP.495...q..4.Uh.V.$o.2.!k...qS......14" .f..s.S..
.Y.q"T...~Ih..-^.T......Y;F#...n&...:.0.....m...Kl..}...q.3..r.....ri.
.E.dJ$'FcDQ:...#...4.`...Lm.F.7..(...=..e.2nW...-.e'..;wRA...=.....m.&
[email protected]|z.6s.........c.?Z".....}...Wt6...{0H.q.-(U..._!d....
.$\...~>....".|.O.v:b...a.>....4..D..P...p......4....^..`..N..L.
{hV.h.I|n}H...LX...;..%..r......15...5..p.....g.U....bOM.......j...Fa.
.jZ3....k.a..........?TC...(.4. ]T..c.&....Q*......fs....^..........i.
.F.,.......&......<.-.a....A..T.. ..E..Y.L#.X.......f.6Q.L.}...qF..
ms. ../*..O......}BBA3.7%z....U.s..C/.?K........T..m.9...5.n.k.....k(.
&.(........PF5..d:Fh(.Uc..9..re...&..U0^....V.=.Z..>.t..?(.^2.Ul..Z
.....J9.].T..vhr5a...............Pn e.?.).^|...!..r..5..~.......Q.....
.?.....l*J.[..U.(...C:#.Ey..{...R?...<......!...{.7s. [email protected].*
.W*.F....Y....K..........O.. S..kUx7.5..99\.[k$...."ZdA2.E>...k..".
.....LK.....E...*."F..jbF.|.y~..lTt.Z/.U].G..7sU.........Y../.)Y....h.
.R...s.....*........... .oloI..S.b.B.......lm.........%] .r.@A....|m.P
 8.Q......>..a<...d....0.k.....x..JyaiX.4.K0;g5...$.?o;..Z..O...
.....6...=.dm.........3.....c.m4....(....p).{3s..p..l.d..... .x7p.m_~a
1H$..:....G.xW}<.....GV.....<. F....7.0......Q[gv.M.X....!.._..-
..OH.........#Zd.......9........b.v$At.T$i9"..(..?....u.],^.. ;...<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=395446-761560

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 366115

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 395446-761560/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
'.....d.H..67.M..n...!m..?O.f.....X..4O..G...^..:....X.}.[o..fl.....np
h ..........DC~.a.A......8...J.........\..[...1.a>%G..."..D..E....i
R.%.....Y...`..6.s`]F.....J.#..l.......Cs...gAJ.g V..w..y.e..<l..!:
S......./.!...#.\... .....1."..M...i{..R.z.%0.h......4l..Y!.?...'n2..e
6'.3.R....S....7..r.Z.........s.W.K...m.qxd.C].(.:.i....E.u......A....
...U$UIK.i~.~....&.G.....$.9`......N2.H9"X....Z..B.'..b.,>Ch.Z.$.w.
E....t...t....PK.T.K]....|...Me....'..l.V..Q..5...:.S......#.......w.%
....~ k.aj....8/R........^.b..{AP<.7ET....F.......wRD.2....9..j...S
..1q...W......|.n...JrsD.3k8..._.........,\...:9...uQ....j........ ...
.3....:.oZ....pq..i.:....f..7.p.z..Wm..`kg'8.V..e.H.o.Q[.T(..mn.F.T...
.&Z.......M&.1C....;%5.".N..J.o.....3 .d.&. jK...J...N.\.._..Q.(V...O.
....-.....*3LA.?..w `.>....,..n..=.8...?h....N.B..d/.X.Y...=.....2.
..?.;..p..... Q..u...).4.|..4.v[....~..`ws.=.E...!]...=.y.t.)9_.W..i.P
K.>T8C.../J...... r(@.8.......#.1....v...e...b.. .`.....t..~|b.....
....>K...6tS.o...Qc....).Vg...r........\V......Y.Q..5........4....V
../..-.|.....$5z2....M.p....1..z.....s&o.r...M-.&o.....?....f)...s....
..-..#......O0.p.w.Nu.<$...s".$..;5....}...)...6..#.^f..KT".r...n..
.....!.u..>./]8R...j... .43^....FsS..0R'.8....e.......:..j..Z..Q...
6..E.sB.zb...p....t..M...............A...Z..7S...j..Rz(..../,..{..q...
.3a...^...q|G..H..G...T....s...$..^..O2|n... .Z....L....]T.m..H..#...B
.I~{...7....{....R..../.t..lp. ...#.vA..K..>..iy.$...>....?N..B.
.u.P.a.....-.Mv9..M... ...X..]...`9.7.&...|.a.Z.)....K.yz0......Z.<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=761561-1498123

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 736563

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 761561-1498123/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
.........uI.s...8.b.k.A.Ag.f..op....h....N.,[email protected].].z...Q,.C.V.'o.....
}"%..lo\..VvU(=q.,.....'........_...tgZ5....(...W*. ..%.L....T3..4...4
..]Wg.......6... ....scg...i*.7.........8......E.M'.8.....3?.....^H.6x
....T......IZ....0E....o........./.%S..s.(....u...Z...wd......U.#~..C'
.$...1l..$..kU;.NI.7.... ..M....n,/...k[gG...Y.Sflo4...$...h.....$...n
../.....*.9..'R=..M.....U7.2...7$...?>......lq.y..l.a>\.c@#\H..U
..*...G.......3~...q......]..=".7B..m....B...r.....*9q(.uW......f...p(
8..'.C.z....b...y.U*.Q..iJQ..V.u>DE.K.U..,..%..q.&6.....It.e.......
z..%<...B.r.....Q.}........~|..E~....?.7qG.d..#..F0QE.W..e.5......~
K.x.Sq.9...yL...(k....L..AiN;....wBt-.R...2'...,..r<.......-..>3
i%..I7...y.MB.`.o..X...%7..MZWEOF.Z......g.....:.".....4jP*.H[%...1...
u..Z............._n.B.@*........F.5..........."Y.u.k.6..............Xh
...XK.<..{...v@._...wHN.st.LpR...u...!n.Y..}........;../...r. ....&
..*..........r@.....`.e=....%u=/....e .#.=p....C.j_....\.3......t.Z*Zi
....3.m......a..........N.=.2d.J..S..i.((.H..N2O.....n{D...g._..:s....
...e.........$z."n.f...kG.1\!.?& {..OC.......y."......O..1......[v.C=.
w..B{=d....Km..l.k=g...`=.AQ....r.......{..S'...5..$.(C5>>c.P.SX
...m...S{.BDo}...l|.vtdQ;@....g......-I.1.....`[email protected]|-,..8.9B.&l
t;.d%.e.!.....~....j.x..kI.d..E.\@....~...?....b.......(......W....O9.
I.....#.(&.4&.......{...^.dr...TA~..y..t......Q..m..J...z....XO.TZ...%
k.['....Qc..2(.....mx.S.2.'k.".r.e.\.A...p....."..&./S.e\..v/(b\LGt%..
>H.s.J.WuC.. 3.JO."....,.v.......<....G..M......`...#......B<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=1498124-2979527

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 1481404

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 1498124-2979527/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
_j.f......'b..G.w:..J..b.f_.qe....K.G.......;..`..A8...S.......?dy.Y.:
.N./....eQp.E......l.........f.l..!..Fv.}pV,_../.,..`Y.D..x.^I...^. ..
UN.QA.......$.A.L~X.Dv..e=m..'..(...D .CG..`..u;..l;.....C...i.;......
..es..9vU.....`'. x..X^&.-..0.).%.>k..t........lz.^.:.....I....sP0.
.5....nzi.Tr..F.#....=.....c........g..$r..(..m...i...S.....;8.:.."H..
.~.._Z..)..{..!...j.JQ.P.e....^..;s...F#H.<XY.N...'..Z..."a..O..G.:
....L..<...9de..m.....r....|.:...n$.7.B...l.d.c\....t.....r..c.q..4
..R.Z...e).....1....e......I..............t........K....?D\...Hx...8L.
t..>i..C......a{cZ...../-!^.~.J8J~#.8.a|M.i.e%......$}.2U\.u_.B..\ 
N<#..V....V..p.. .G..R....i.P..LW [email protected].,zB.`.=h......=.`l.e/)..
.ls....k<..>9.\..~.r.h.G8....5..6o:.}V...%..#.....'....x.5.l..%.
..l..x..h......3Z..... ...........@.:6Yw..}KL..C..........6.Kz.q..2.J.
.D.enM&>.Ra...\..z...........Xm.&I*=H..RV...~..r...Q(..qn'D... a...
..s......9j.....{8....P..h.....5..p1.Fi...3]..|.U-.|e.ZX.g1j..L.W^...f
.>C4.....'\..~..E=.T..q..J.8.}...\.~.O..'....q.......e..e,!...u.OF_
.`._)...[.....A..2.4%..5[...dJ..4.kt.j.......^iR.xDy..|..%........j.h.
.}...5.......8...RqY8.B....Z`~......]..[Py.......2.......M2_..hYh..[.)
....[...o)....X.....3,s0.x.B....~..y.$.L.w.d..?.x.E.z.....d..k...>3
.hc.*./.u#.po.z...J...J...J,]......"....h.W..W........A"f-9...k...[...
.B>...e..M..1OF....P}...M..Q.v.O......kJ..._.lv.U.g.3u.-.w...B....B
.4.......M..:l.oi......^....(4.g..v.....q.}-k..X.I.xO...9.U.#p40...r..
U..c.5.S=.w.(..j...s.1.....XG}.>..5.|....._.E%....W.........5..<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=2979528-5946915

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 2967388

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 2979528-5946915/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
K.\...../...^]...l.59}.)...8y..Y.r.P..=,$.....P.6u..e.~..s.]l.....cC..
..[....0.. ...Z,.... M......._..r...._V(..Pw...B.U.:.Aton.T...c;....:v
.D...{....f.w..(..%....-......*=4.Fd.Db..Q3.X../..f...M......0Y.p...!.
......o...v...'.."-77.jJw_c........'G.G.z."hQ...!l.....2j.....[..0....
..`.mpI.)..O.[[email protected]'..L.8.....i.=X.....x.[..%.....?o...Ii.
...3.S...7.V.d.x....u..*.#.v.eK|=.VU.#..:K'>4oT........F.E.^g.*...Y
!..{.-.W{...X..0.^v.....c.m..#*<. .q.PDV....P..S?..!...l..../]..<
;`qc...C6.Zy. .9".#....a.....}.W..`..Z..tm.`.....?`N..qu..MV.H......\.
.v.}...E..>]..0...*.5[......!^...d.U...(.S7,@.q.K-....!.]>.d.4{.
j..x.#......3..........<..\.G..-z....$.l.......l....$...{...."#.f.c
.].......w..j.~.2..G.......^....*.5t.....H......_.K..#.1.R.f.8........
C........W0....F...6..3V..r0.`.E...;G.......(./..>..\K..........B.K
(....M..U....0].xmi.i..]y...z.h|.j...I.1G..7....ee.D..d...G..v.p....B.
dL..CU@{.C..(....".n.f..).t..JN.....~2b....]m..a.Eb..k....o1.......^..
.R..0..}..}..>^79..........(j!oo.43.......,..2.x.'YuH.v....B......c
K<\[email protected]=.......!...Fx-...xL..3..d.......|...\*.=..M".[=.
lO....@Fd0*PV....v...../......`_..G... ..Z./....".x...X...S}`........&
*.........9I.].R..W'............r...T......T..5..t.a...{..c^W.\...[Ih.
.H.qyG... .........S.ez..@[email protected]!.."........9..j.@.=Ge^E?. M
.(M...Fd...1..9...w..I}...t#..8:........f{......|r!.'...z%i|c.....,...
..$etM.k.i.*........l.h...?.........l.VL.........!....N.=3..`^b\..k.u.
..Ibl...*..#.............wz...Y..S ..P......{.3!.......c...Uo.[.R.<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=5946916-11897214

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 5950299

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 5946916-11897214/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
.A.}.C....^._.[..?...H.....e;9..PE.2.......%...-.W..........%.....[4d5
G.DX..c./.z.5....H....E4cu.do.)..c..ix..o(.S.T*..?........|.oe.....~..
..f.U5..j.....-y.E.,...y....k............z..ca.uE...]..j.T0.E.......hN
.m.e.#..X...V ..............._*'..<[email protected]..
._......9.......-.\tm.....g.\.e.A..e.!.E....B6._........}j...5T.8....Y
.x..[...I..Rz0.mY>....e.Wl....h'...R.ls..../5W1{.........jt..o....O
..\.=~.i .P<-].8.....9.;J.....`.......G]....|...-~.URWugIn3..lp.p..
g]E..i7.#.u.........dUn4G[.....K...l..[.mo.....T../A6,.3....d..[`{W.j.
f1....%.v..\'\.ifL. g.xb[V0......Q...P..{..`;.*.......x8J.OK...b....2.
..t.=..vs"..Yx....Xm."s....s...5....5.dP.m?i&g..?....V...`NNR....mg..!
.x.'....'n"....Z}....d.._.V.!f./&.~....c.Q.,.<@......Q)rx.6...L=...
aE.C.1&V.q.E1......|a.\H.3;.w.O.(@7~4..NW.(.m..".MtT...]t..'....[;. ..
....4W&S.x.....{y.D1.O.....geG.A.t.....U?..........;. .<S.o.8g.8F..
`.f.....\..q.C.......6!.....S.%_F|Muc.m...3.......>.....^?...u.(31.
..2.$.{.F{.UaO....;....v...KaQv.2...0m..B.8..Rg.....r..&...qm...'*.J..
.|.;.a.Zk.6y.M....fK.........l.....Wa>......= B*:...}..........x...
..Sh...x.....y..|.Ok4$..._........K..$.....1i.Q.N.Wh....H.....y.4.zZ..
.........r'...t1._..[...y..;..$..6..7.qu.>..;g.........t..c3u.dD...
{.. .Y.......M....2B......x.(........H.-......B.5.....W...._...#..:!..
....t...-....eI..l..g~5.N...|......wb.`...c...X^...d..!@J)............
TV.T.].v.p ~<.A.ut..'........||....fX......[.....R..q...{.C~..O...?
2.m..c.......dD5....`..&.j....L..yxS#.,.....9...).......c.Ha.U...s<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=11897215-23803600

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 11906386

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 11897215-23803600/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
.....E.,..W...K.4..2a.....A4.DX......J.........H.v..e.2<h..o.....F.
Z..twq.....=zn..1.[F0L..;j.../Y...f.....G....e...E.......I..I...v.8..*
.......c,.......Vx......H>.oM...G.4.......L..]9>O.U.\..TBF./.|WY
4....$D._A.../....E.i.hb.&E..:.._<...y.A..o,P........q.q...".Lg.$O.
yd..8.........4.6K?...|./O......j..JHt?R.........).i_..Hg.....s..;m.}.
./.D).=[.......X.......=...6.f.6.Szz.._.46....P..G.;..pS]..s9.N#......
.p...Y8...FO.......I!.B.....Q*m._ e.y.;...'.......8...].!..!... ....X.
...!B.)#..f.....aO0...Z..s."$.F;.l.........xf...0T...b..\.. ..........
......$..C........w.*m........lz..._X......i..<......!.B./...{.;..R
J.]..A....a.."....Ad......@.....,...!9.V?.......C.q..~.NV..-.....)....
.....k{.#M.=B].R...G-......='.'O.B.4$.....1.1.UI9pS.$*m.KS#..,O.5..NA.
...#.\....F#g..cF...I.l...<.Zf.....P> .K]......S3~.`....DV..?...
....3........B....9.Lv.n..q...JR....nr~BGv.....]S9.....}...1....y.:!..
..L...W6...d....[*..9..^.Fn2..x.....l-.5.WU.h..0.fO....ew.3..J.,O `:..
q]z...qI...Zz.9.Q.....Vk....mS,.%.... .*..i..5;....[Qp....V....?..2D.1
J..W*E.....XEH..i~pm...Y..,{.....-...U.q<;j.`s.......Y.H'..).5.^.$o
'...P..W..F........2.N.9..,.....P.p a.\.C...../M.|.4..];`.^..U........
<...I...a.f..<s^8>.......hk..R.8l...5..../...V.....A"...-..o.
....:u..........7..3.D....A.5<8.7.l....u...qz...Z..../.....AA.C1@..
$...........I...E....n.^.N...7.r..f....Y...5..K.d3..i...":.#O.`YR....6
........e...x.*.......Y.0W...%....;.......8...3w..!..Q.Z\t..D.3....m..
......<....36'.#&l..a.......<..5.....`$%..K......z......O...<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=23803601-40485042

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 16681442

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 23803601-40485042/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
,4.<....k.%w....Z$3..s..{ r.....*.8[.ae.... r.^.:Bls.z..jto^_Id6...
..*O.4q....l..(.y.z..`?.....iI.....(5)e.....aWq.{A .......N)I...8"..P.
..M...(.Y.V..m.'.......L~H...E....w.*....x."V..Ty.S.f`{.]0L#.s..Ma....
..I!$.9G.v...@......`nz|2L_1e[.L->...Yo.3[.;.-....-.w...`........?.
'..}x&./8.rd...?.,...D:G...i..C..ZLnE....<%..L..e..-t..Y...........
....[....c..YR....:..2.....yY..!...".d=.G^."..v.M:[email protected]...
..)!.t......X.P.#].....iHd0]L..M.t.....g...$......s75...?.d..d.......?
...My'...v....nb..8P.W........)=...c..xE.V..._.lv...d..ohE<~.v...2.
Z_R...$......&^[email protected]]..rj.nA..3.......F...Np.........'......
v..C'.."h.m.,N.../../....0.n......Y..)....$.!.....S..nJ..u].p.$.M.....
...).d.A.... :C&..5.:s..B.K.JU..}Ee.f45w..U.@.~.2.v.C.)...xQ...9..J...
..-Qu.M........',...../.......,4...ma..)....fm.....("%0Zz.....e/t...{a
.~...v..v...K..s......."..K....vX..Q...Ha-.....]_}.G........&.B.|V0...
...."...#..F......@b...(..=1..{..wC...L.OzV.vR...y..'.A..<.........
.].B..pV........../....X.....s.|..#.M.u.D.O2ja.w..:.!f.....:#....../0.
.O.*..s..kt...~.Q=..v......QKv).[<..Y....y.~,p.I.6;....eR....o..pP.
...'....*..dM,{*.,/.!p..?U">..s...r...m.4..../.Tz...rJ.ez..h ......
.J...1.../...#........h...<m..%Or..MD.9$..iJ...t.{..]b.3..y....W'..
.`CI.. E....u../.!.u...N..?.!.../....Un....k\t..9..?U,.......s.... ..6
..L...>w...^)h.. .I.\./......J....93.x........'..zFH.Bjl.-.Ks>^2
48...Z.......T_.F.&.....He...*( ....0......V.>.~.....>....%.....
.l..'.r'[email protected]'......,A........)....t.x0&g<<< skipped >>>

GET /edgedl/chrome/win/8E219F321F3A3148/42.0.2311.135_chrome_installer.exe?cms_redirect=yes&expire=1430392935&ip=193.138.244.231&ipbits=0&mm=28&mn=sn-2apm-f5fd&ms=nvh&mt=1430378528&mv=m&pl=22&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=2ED994545675B9D9AC89965EEA7F5190DB0966E9.6CE940A56811EFF5E4F4E69ACE49FF72FDD8EB96&key=cms1 HTTP/1.1

Connection: Keep-Alive

Accept: */*

Accept-Encoding: identity

If-Unmodified-Since: Tue, 28 Apr 2015 17:23:00 GMT

Range: bytes=40485043-41792591

User-Agent: Microsoft BITS/7.5

X-Old-UID: cnt=0

X-Last-HR: 0x0

X-Last-HTTP-Status-Code: 0

X-Retry-Count: 0

Host: r7---sn-2apm-f5fd.gvt1.com


HTTP/1.1 206 Partial Content

Accept-Ranges: bytes

Content-Length: 1307549

Content-Type: application/x-msdos-program

Etag: "5358c"

Server: downloads

Vary: *

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-Xss-Protection: 1; mode=block

Date: Tue, 28 Apr 2015 18:12:35 GMT

Alternate-Protocol: 80:quic,p=1

Last-Modified: Tue, 28 Apr 2015 17:23:00 GMT

Content-Range: bytes 40485043-41792591/41792592

Connection: keep-alive

Alternate-Protocol: 80:quic,p=0
./..{.-o.o....K....P..r......\\[......Ye6.?J.3 :=.....v.....Q.z.P.....
.P}.3.d.......^......../..,1....fY..K.._...Kg{._.#S....Wl....G..[ ..t.
.W...../{...$(......r....{..g.-{Gl...g.6...?..O3.......0X;....0.......
..;.*....I#........1.$D^.st..?..[\......c.&..J.k-......}........!x....
.j.b......*...}........]. pw/.5W.-..y...*.!...w.Z.......m..t)...!<j
A`..8...M'.0ms][email protected]...[..7...x [email protected]..)...{..'...g......(:....&g
t;Y7.H......"..v.......k.-~.a.l..\..........H7.N...<..r.......q..UV
....8..8V. m7.5.B.......<_.6I...-....p....-.8Q...7..H.F.9.a..c.iS..
9...j.-........*..}[email protected].}*/AV...k).L..o...}..!w9.:.R.W#~.J
..IV.5..A...\C.7o.Nu.l!.-m.../.......J.......a.1 R. .k(..<..7.M:Z'V
v.o...V.....0.{.&.J.?...6Ql.`C.d*.J......S)=4Z.6....~}#...4.....4.r^..
...C..}..4.%.]2..z...O....1nRlM.\....|.....j./.........I...oD.E8-.....
u.....F......((.`..R?.0.".B.q';.dc....X.R*...s_ot.u.B..\.,l..Z...v...1
;...R6p.....|.....*.......Z}.5.1[.p.w...lKw..A6p.Rpp<.Em.G#.B8.....
.P$.Ib..TK6.t.(... ..B..\....].Z..zM..V.-...(.e3.b^.\...GU..q... ..]\K
[.7..v.2A.. /....9py......F<..F..2..4F./[email protected].*a;.._...i.
.....f..4..5..x.............W...`..N(G...F4.c..~x....*d.B7.c....xf.2.{
....~\|z8!..m..M.. Fy...o.#.?..y..Fdn....F....e8x....."..i:_..WR.UN.B.
n..~.H..C.D..]....c.Q.....tS...../..hX.Gx..H.....RE..<.v...V...7E` 
......=.....R.2...l.*v..L6..H........:T[E.....,...E}.N...H...V....{.|.
.M..6.....cJ.1G..~..e=q...J\.o...y..7.S....c........Lk.\B.T..../1...iy
W.T.B..$?.5..}9..Gy<.!..wm....)[email protected].....<<< skipped >>>

GET /ajax/libs/jqueryui/1.10.3/jquery-ui.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: ajax.googleapis.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/javascript; charset=UTF-8

Last-Modified: Tue, 07 May 2013 09:09:49 GMT

Date: Wed, 29 Apr 2015 01:10:16 GMT

Expires: Thu, 28 Apr 2016 01:10:16 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 60666

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Age: 108800

Alternate-Protocol: 80:quic,p=1
............kw...0.}...$.0.)r&.&.!..x..Y..{.N....!["..`.p......K......
......{WwWWU......_..N4.N.......l2.N..............=9Yw.6;?.......,.[H.
.Znv .f'.1..FL...V..ru#:/....~.US...o6..z...7.-..Ho.F,.PF.....5....%Le
U.....j..v#:..7...._.........(.M}.......V.Y..Z.g0^n.m8.A......z5..u1.S
o....o.....P...m...:..........oCY.rh.]ST.u.....yI..-..ro....Y.....^{..
..z...Z?..7........C. .S.......{`L'E.:...hN.u.5%...i/N.*..j..../_.<
9....6....T$w....EZ&wo...J..H.\L*X.o.[.c..~'..E ..........E..y3. (....
....u^M*.......gg..Yt[l.t5..<....... 8.P8.E4.G."J......8;k."I..Y...
e..u{>..N..p8{>`..._!.|.....d~*.0.x.WY$..c....L.i..44....y.M..4.
.r.....-.....gg.....o.dR.V.(..._\..[.....JT8.n.l..[.m.Q....>D.!.lDu
........y..]9.W..V._._t.=r.g..;.8.NT..S...0H.1..OG..........._....=..2
.].....~..~....._.|.2..o.......7...7.e.>.?.^~..../.x.......O.......
.._...U....o...w.?{......T.~...._?.*...:........2S)....T........}.gH..
J....x..... ...w....k..........=K.{......~?M...?....>.i>{..z....
)........ ....z.k3.Df.uR..z........u....>)..t.Q,..2......Z..*oE....
.e..8I[.x..h..}p..I&&.v.....hnv.....!..SM..l...;.y...<.8.D$.8;;....
.r....} .y8h...#...$.......]'..c...?...c..^5........u...q.x..y...5l..M
..JF........>.4..x.d.....h.s.......Hb.. ...I`....|Y..{.%....qy.."Q.
M7..#.x.P......nb.Km..A...4.\....t..fU...Q...h.8R..h...#...7M.>`..2
..h..U...8.t..9-.o.o...N..*Q...j...1N.2uzHwU........'.3L..j....<b..
.NF..V..6..V...l....\...w2...w].W../.FW....t.e.".........K....b......(
zSI...R.. <..[[email protected])pj"...)y1a.....W..]...<<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?85b0f8b965ff9a14 HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Feb 2015 00:37:01 GMT

If-None-Match: "80b4d90ca4fd01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Tue, 24 Feb 2015 00:37:01 GMT

ETag: "80b4d90ca4fd01:0"

Cache-Control: max-age=604800

Date: Thu, 30 Apr 2015 07:26:31 GMT

Connection: keep-alive

....

GET /msdownload/update/v3/static/trustedr/en/D69B561148F01C77C54578C10926DF5B856976AD.crt?b7542056dbc1fff3 HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 200 OK

Content-Type: application/x-x509-ca-cert

Last-Modified: Fri, 20 Feb 2015 20:14:50 GMT

Accept-Ranges: bytes

ETag: "05934e1494dd01:0"

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Content-Length: 867

Date: Thu, 30 Apr 2015 07:26:32 GMT

Connection: keep-alive
0.._0..G.............!XS..0...*.H........0L1 0...U....GlobalSign Root 
CA - R31.0...U....GlobalSign1.0...U....GlobalSign0...090318100000Z..29
0318100000Z0L1 0...U....GlobalSign Root CA - R31.0...U....GlobalSign1.
0...U....GlobalSign0.."0...*.H.............0.........%v.y.x".......(..
.v....r.F.C....._$..K.`.F.R...Gpl.d...,...=. .......y.;..w...I.jb/.^..
h..'.8...>..&Y.s....&.....[...`.I.(.i;...(....aW7.t..t.:.r/.......=
...3.. .S.:.s..A. :......O..2`.W....hh.8&`u..w..... [email protected].^....w.
d.z._....b..l.Ti....n...qv.i.........B0@0...U...........0...U.......0.
...0...U........K...E$.MP.c.......0...*[email protected].
...A.....(.3.k.t...-..........sgJ..D{x..nlo.).39E....Wl.....S.-.$l..c.
.ShgV>...5!..h....S......]F...zX(./....7A..Dm.S(.~.g.........L'.L.s
sv.....z..-....,.<.U...~6..WI...-|`..AQ.#...2k.....,3.:;%..@.;,.x.a
/....Uo.....M.(.r..bPe.....1....GX?_HTTP/1.1 200 OK..Content-Type: app
lication/x-x509-ca-cert..Last-Modified: Fri, 20 Feb 2015 20:14:50 GMT.
.Accept-Ranges: bytes..ETag: "05934e1494dd01:0"..Server: Microsoft-IIS
/7.5..X-Powered-By: ASP.NET..Content-Length: 867..Date: Thu, 30 Apr 20
15 07:26:32 GMT..Connection: keep-alive..0.._0..G.............!XS..0..
.*.H........0L1 0...U....GlobalSign Root CA - R31.0...U....GlobalSign1
.0...U....GlobalSign0...090318100000Z..290318100000Z0L1 0...U....Globa
lSign Root CA - R31.0...U....GlobalSign1.0...U....GlobalSign0.."0...*.
H.............0.........%v.y.x".......(...v....r.F.C....._$..K.`.F.R..
.Gpl.d...,...=. .......y.;..w...I.jb/.^..h..'.8...>..&Y.s....&.<<< skipped >>>

GET /services/xml/rss/nyt/InternationalHome.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Content-Length: 8961

Content-Encoding: gzip

Date: Thu, 30 Apr 2015 07:25:09 GMT

Content-Type: text/xml;charset=UTF-8

Server: FeedsPortal

Set-Cookie: MF2=19hhj9gt8nsle; expires=Sat, 29-Apr-17 07:25:09 GMT; path=/

ETag: 1430374290000

Last-Modified: Thu, 30 Apr 2015 06:11:30 GMT

Connection: close
...........}_o.H.......^`....%[N.q<.e.Vb...N...(.%.b..."...........
...,w.I..=.......R...3...H.S.....S....y..{&......]..a./..O....y..~...#
..Q.<b*d,%.<ao^..sZ....$.l..E..I.^.J....O........x.....z...t....
4Vm.......f.......z.....6....w8j..............z....z.~,n..Dyc..H......
...2hV....t^/......9.....9........{......."6eq.....<.b..pn.....@...
.T....._......uw.....1...P....w.........{.C#...p....S&c..{it..l.~.!.Eo
v...;..wh.D............<..q.....I....u..wT7..!.._a-..../?....y7L.._
.*[email protected]}.>..w..L..'.....x....Y.dxS.....\.I..w. .t.-r.2.g3...
w..."]1Mh<?./.:J..)M..M....K:.4.....^..'g.7G..6.D.'....<....4..[
 <.s.......F_!...I.}......U}.._........D.s..~.ww.xrT..l...y.x.....(
[email protected]....`.~..b......K..D.....I'.E..8Dr*..
........j.........~p...........6..%..Q..p..#n..6.N..v.....s;n7Sn.h..5.
p.\..W....;. .......\..[`.=.!...J........u.....S..D1.t!.......,..?'3.E
......J"6N.J......N.I..><..kx.$R..g....rN."...t#.;...!..$c...1.s
..x../.@../ ~|.).._.@........?E._.t./......)..Y_*..Uc}........ #!A.o^.
/.81..H.?.e...p....K.p..tw.X..!S.iV$(....f......g..W...../..~...`_..;.
c.Eb.S.F....F......qw.6........h.H..{FA.U.....6.8..~..../....N.P..2K..
.R...........M@-.@L)....c.W.E.y..3x.........n/...PM..........%.......\
s...(.....F. P..$.....9v..t.5h..2.o..F...<.......k....T...1........
k...$ ...K.`..s...A.......sK?.i[.?........f'.q..2...&...T..........Z..
C.V..h..a.g`Hvi.S...C....cw....... ".x...-..hq...)g2~.`......F.._....F
.....w=g.F_|t."......d..k...u.5..(.S.i]....;......G.......Qw0.....<<< skipped >>>

GET /sd?is=sm HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP002C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Fri, 01 May 2015 07:21:56 GMT

Date: Thu, 30 Apr 2015 07:21:56 GMT

Content-Range: bytes 0-523255/523256

Content-Length: 523256

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
................. ...............................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h [email protected]...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .

<<< skipped >>>

GET /root.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.globalsign.net


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:26:32 GMT

Content-Type: application/x-pkcs7-crl

Content-Length: 649

Connection: keep-alive

Set-Cookie: __cfduid=dc468d248222c8ee8e777a54e34976e261430378792; expires=Fri, 29-Apr-16 07:26:32 GMT; path=/; domain=.globalsign.net; HttpOnly

Expires: Wed, 15 Jul 2015 00:00:00 GMT

Last-Modified: Mon, 23 Mar 2015 00:00:00 GMT

Cache-Control: public, max-age=6539608

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1df184df18650485-FRA

0...0..m...0...*.H........0W1.0...U....BE1.0...U....GlobalSign nv-sa1.
0...U....Root CA1.0...U....GlobalSign Root CA..150323000000Z..15071500
0000Z0..0*.........D.....141125000000Z0.0...U.......0*........)E.....1
41125000000Z0.0...U.......0*........ ...h..141125000000Z0.0...U.......
0*........,^.....141125000000Z0.0...U......../0-0...U......00...U.#..0
...`{f.E....P/}..4....K0...*.H.............&...f#...5.[4........{pV.#.
F........:...*Q.....Mx9}....,.S.D.>@.Ju.[)c...`.?.j~...-..{.FHj....
.#.C2.[.,`.......)...Bj2........n...........%......p.6......Q.....1..p
d......F.........mJO.!y.W.......V.M).N.R.....V..|...7.ry. ..gy..I\....
.....j....... .z.E..".HTTP/1.1 200 OK..Date: Thu, 30 Apr 2015 07:26:32
 GMT..Content-Type: application/x-pkcs7-crl..Content-Length: 649..Conn
ection: keep-alive..Set-Cookie: __cfduid=dc468d248222c8ee8e777a54e3497
6e261430378792; expires=Fri, 29-Apr-16 07:26:32 GMT; path=/; domain=.g
lobalsign.net; HttpOnly..Expires: Wed, 15 Jul 2015 00:00:00 GMT..Last-
Modified: Mon, 23 Mar 2015 00:00:00 GMT..Cache-Control: public, max-ag
e=6539608..CF-Cache-Status: HIT..Accept-Ranges: bytes..Server: cloudfl
are-nginx..CF-RAY: 1df184df18650485-FRA..0...0..m...0...*.H........0W1
.0...U....BE1.0...U....GlobalSign nv-sa1.0...U....Root CA1.0...U....Gl
obalSign Root CA..150323000000Z..150715000000Z0..0*.........D.....1411
25000000Z0.0...U.......0*........)E.....141125000000Z0.0...U.......0*.
....... ...h..141125000000Z0.0...U.......0*........,^.....141125000000
Z0.0...U......../0-0...U......00...U.#..0...`{f.E....P/}..4....K0.

<<< skipped >>>

GET /images/64x64.ico HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:35 GMT

Content-Type: image/x-icon

Content-Length: 32038

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-7d26"

Expires: Thu, 30 Apr 2015 07:53:35 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
............ .h...F...  .... .........00.... ..%..V...@@.... .(B...:..
(....... ..... [email protected]{.[[
[.;;;/WWW.........................................jii.....efe.233.&%%.
!  ..--.[[[I............................[\\.,**.....]]\.011........."!
!.322.jhg?........................WWWg"!!...~.[ZY.   .........&$$./--.
`^^.........................vvu;#"".zwv.^\[.*)).........*((.755.wuuU..
..........................,  .rpp.`_^.))).........-  .ECC.............
....................544.ccc.RQo...?...2.....,*1.FEE...................
..............'&R.......x.! F.43?.KIJ.WUV.OMM.a__.mll/................
....}u..%%w.=<N.CA@.*((.&$$..,,.200.?==.jhh.gcd.NNNW........111gUTT
.....trq.YWV.?<<. .#.........#!!.301.QOO.xst.a__.{zz.110/....311
.^[Z.SQV.(';...T...8...............&.;::.`[\.vrs.QON3....(''.!...** ..
.....2.--....9...........#.! ".766.ZXX.omm.lll.........443Q''&.   ..-,
.A?=.$"".............&&&.<::.URR.cbb_................]]\.433u2//.20
0..,-.%##.........0//.FFF.\YY/................................sss.[[[/
>>>;ECC9][[%jgi..............................................
......................................................................
.............................(... ...@..... ..........................
......................................................................
......................................................................
.......................................vwy.ded VVWSAAA]555]POPMhgf#YYZ
..................................................................<<< skipped >>>

GET /images/16x16.ico HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: VVV.appshat.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:36 GMT

Content-Type: image/x-icon

Content-Length: 1150

Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT

Connection: keep-alive

ETag: "5214ef07-47e"

Expires: Thu, 30 Apr 2015 07:53:36 GMT

Cache-Control: max-age=1800

Accept-Ranges: bytes
............ .h.......(....... ..... .....@...........................
........ppo....Mmnn.:<<.,* ., ,.EDD.}}}9........................
...._^` \[[.....Z\Z.,//. "!.........544....Y....................ttt.BA
A.755.....YYY.)**.........!. .....SRR.~}}%....................KKK.1/..
....XXW.''&.........$"".(%%.XWW.||| ....................eef. )).....\Z
[.&&'.........&$$..**.yxx.........................yxzq, *...x.cbV.''".
........ ...522....k.........................|q[-,$.hg..BA{...B...9. .
:.20:.DBB....Q........................LIeU..X.......y...H.1/D.FDM.QPS.
NLL.fdc.wwvsjii.................XV.g..p.75H.@?9.20'. *$./.,.1/..643.WU
V.lij.gee.....NNN-AA@O..|o....sqn.][N.:81.!. .........#!!. *(.GEE.uqr.
qmn.ppp.$$$. * .^[[..~z.caa.43B. .G...1............... .334.NJK.}xy.fa
b.HHI...../-,.0/2.......J.. ....@...............%. **.DBA.oll.olm.||}.
=;=.!  ........., A.A?d...&............." !.,-,.CBB.a`_....u....TTT.MM
MI@@?.-,*./-).30*.)&$.#!!.............022.MKJ.mkkw................VUU.
VTTKJII.DCC.;9:.,  .%$#.*((.=<=.YYYwged/srr........................
......................................................................
.......................................HTTP/1.1 200 OK..Server: nginx.
.Date: Thu, 30 Apr 2015 07:23:36 GMT..Content-Type: image/x-icon..Cont
ent-Length: 1150..Last-Modified: Wed, 21 Aug 2013 16:47:03 GMT..Connec
tion: keep-alive..ETag: "5214ef07-47e"..Expires: Thu, 30 Apr 2015 07:5
3:36 GMT..Cache-Control: max-age=1800..Accept-Ranges: bytes...........
... .h.......(....... ..... .....@................................<<< skipped >>>

GET /mg?alpha=SRV6Ig8LKEsMPX0pVQgASFEpLw9JU3hTCE0KeGkbSkU7NwptbGdQaE4keyxcEgViAXs9EGciRVJhK3ltWh1AL30xQmZtBBlYQzZrVi9y HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP002C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Thu, 30 Apr 2015 07:22:57 GMT

Content-Length: 2004

o1rkZr/8ZpE09ZQh2RrgtAKgbrD2Tbtx9MdtsjaprQOkYv6/ZrEC27NggxyT7VDzc5LndJ
hu79w11l7c22P0FYyPGvMk/YFZrCeogAbxXfmNKqFiofMG4k/8uViScfblffo6qOo0okGN
5E2GMbOqXutthv9wlnao9xzgae3zW/43lYgNtHDnt1quf/iJBdBb6J8Xpm6l4CzpT yOJu
xy8vlI7Wyor2WwV47jTOpquK4QombfsXnCNa77Tr9 6 Na1XqC3wHyaLP7Bu5xrpYaxxq3
8z6ZVISnQ6Na7pFs9C6xxkL7KeSyc6ZOgP1blAyOvROyZoDgPPc7o YY6ni7uh3eN5WIDd
gr5KcU D2vgwaOGuipBrdkp AL10vjkGH0Lv3gV RsqKB5pkOE30m8OaiqP7lmkPg gDKs
4x/gJrv/TMwhlo8MtHDvo1qxNvbND9pZ7qVU6HOh8Ar8BvTHbbI2qawKpGL v2axAtuzYI
MDie1Q83OS53SYbu/cFfZj9 Ja2jiYkRvKFtq2RKs9vZxIjhr7sBqnYp3kAuQItYtxuni/
t17wMO lYrFEt/BEvTX89RKkb5 /Ptw7v wJy2vt/0nNFZGYC/1os6RXriC/w0jLS mmGa
Bj8b8J4Eb8gCj0cev0WPxisLJkoUWcvVPqObrtRugx37FowySorVanQtLFaIp6240J4iKr
 BSRKqmGBNZd/78XvnSP2S70XuC3cbhnsbkZ/iHms3OaQYz0CvI q6MQ/SGW62zfN7nqCN
Nr9eNaimyXiAT6ZqukWbAwv6EL1lH7tDW6YrDuTbtM7ol3szix/EjsN W0cvYah/BEuzXy
7RmpYpDnPoAgv/oJ CbitFbMdMPEW7po/btGp3HgzSLpa9rzWvB3svEHoxCttn2lff3hXv
ou66pliHyx40erFKuiDPMv0eV91iGowQ3ob7usUd06ldFK8zL5p1W2Nr65C85N6PNMvHK/
6UOjTOCXZ7Na8uFS/iXJrnO3S8OrTqk8rapQ82qA92vVJqmtVuNr9eVahHSchQn1Pqv4Qr
Amv5JG2RrktVToPuepTfVT/4Am7Dbb3mjfYqbkZrVUibMS6h23rA6 cJz1aOYImuYC4WXu
5WP0FYyPGvMk/ZRTsCCzgAT ZNi/H7x0p QD7XbTpGqifd/6XO8l OQ69laA/V2tHr iGf
M5neZw1njv6hT1b/riWswAmJEd82izrEOuP/bNDM1K7rQ4s3O68wrCQuqGb/Qu9fRX yWm
5H nRJb Wqxy5KkdvXCWvz7fLKzsGKcw7eRKzSvVhkr/Lqv4B/Jh9s0e20jo80zwT5jWOK
MGrZVlonyxrxnFKem0eadPh V0lAe3oRi dIDPQPkhv/0J637P803bP5aTNMof56tYsSe7
gwb ZNq4BLd0u Qd6gijx3K3eObwdekt7 QsulWN/QTqNaa/GbJ3lvdK2zi46k6/ZOz6U4
R0n5Ia9S/Ho0KrJb sAsdb5vNMtGa/9gqtCOaWYKF74fEZsibrqmWxDMP0UKkzqu1G

<<< skipped >>>

GET /fp?alpha=UwpSIG8NAT1tAyNZfQpgUk4BLW9TVkRRLnQLEz8zVB5fIClRe1UkcFFBRiM/Eh9XBBZOeDUnXlIEAXt/SykmVGpOChg7GwJRMDN5dl4pLXAQC1FsMUQSBVRqLWRSYnpWXhM0awNwW18DVE1OOz0JGV90EFJ0PCYwTgwDfm8EHHAtf0BPQX48H1NCNT57GixOfUAWRHZiVV4PTGokdFY3bgRSHjVuFndSRgdYWBwkLlwbRydHQyg+NH8SAWMkJgMBd2gJWV1DZDddChtyY3pJNDIJZQAGM2dIDQddbiViUGBlBBhSOw1fKAYJRhJYOnNoWkIDIFE9MD8rLksLAUZvExp3dBRMCBg8bXZTQjhLJw1VU2tkE1VsQkwMA0FuJWJZEHEmXHxCHgQqPhFsUS9b HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP002C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Thu, 30 Apr 2015 07:22:59 GMT

Content-Length: 0

....

GET /ii?alpha=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 HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: install.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP002C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Thu, 30 Apr 2015 07:23:00 GMT

Content-Length: 84

E6OHCQ0Z cUNeAzAunVMFe7FHRIXrMAEfxqv4VkNB7eZQxpMgcIjPw3zxlofDOTVCWMZi6
xXE0Lc7h7RhcyC....

POST /if?alpha=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 HTTP/1.1

Content-Type: application/x-www-form-urlencoded

User-Agent: NSIS_Inetc (Mozilla)

Host: install.theswiftrecord.com

Content-Length: 78

Connection: Keep-Alive

Cache-Control: no-cache

alpha=VgYbIDokBC0CSggQHkRUcVlIMyUsUhoBVlEoWRZ3FAYrSmBQK0c6MAEZR0oyVkcmIzIGTiYW
HTTP/1.1 200 OK

Cache-Control: no-cache, no-store

Pragma: no-cache

Content-Type: text/plain; charset=utf-8

Expires: -1

Server: Microsoft-IIS/7.5

X-AspNet-Version: 4.0.30319

SVR: SP002C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Date: Thu, 30 Apr 2015 07:23:00 GMT

Content-Length: 41
{"status":"OK","url":null,"message":null}..

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.mozilla.org

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Thu, 30 Apr 2015 07:25:05 GMT

Location: hXXps://VVV.mozilla.org/robots.txt

Connection: Keep-Alive

Content-Length: 0

HTTP/1.1 301 Moved Permanently..Content-Type: text/html..Date: Thu, 30
 Apr 2015 07:25:05 GMT..Location: hXXps://VVV.mozilla.org/robots.txt..
Connection: Keep-Alive..Content-Length: 0......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.mozilla.org

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Thu, 30 Apr 2015 07:25:06 GMT

Location: hXXps://VVV.mozilla.org/

Connection: Keep-Alive

Content-Length: 0

HTTP/1.1 301 Moved Permanently..Content-Type: text/html..Date: Thu, 30
 Apr 2015 07:25:06 GMT..Location: hXXps://VVV.mozilla.org/..Connection
: Keep-Alive..Content-Length: 0......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.mozilla.org

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Thu, 30 Apr 2015 07:25:06 GMT

Location: hXXps://VVV.mozilla.org/

Connection: Keep-Alive

Content-Length: 0

HTTP/1.1 301 Moved Permanently..Content-Type: text/html..Date: Thu, 30
 Apr 2015 07:25:06 GMT..Location: hXXps://VVV.mozilla.org/..Connection
: Keep-Alive..Content-Length: 0......

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.mozilla.org

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Thu, 30 Apr 2015 07:25:08 GMT

Location: hXXps://VVV.mozilla.org/

Connection: Keep-Alive

Content-Length: 0

HTTP/1.1 301 Moved Permanently..Content-Type: text/html..Date: Thu, 30
 Apr 2015 07:25:08 GMT..Location: hXXps://VVV.mozilla.org/..Connection
: Keep-Alive..Content-Length: 0......

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.mozilla.org

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Content-Type: text/html

Date: Thu, 30 Apr 2015 07:25:09 GMT

Location: hXXps://VVV.mozilla.org/

Connection: Keep-Alive

Content-Length: 0

HTTP/1.1 301 Moved Permanently..Content-Type: text/html..Date: Thu, 30
 Apr 2015 07:25:09 GMT..Location: hXXps://VVV.mozilla.org/..Connection
: Keep-Alive..Content-Length: 0..

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=741306-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: L1DnQcTabvBb wIpC Wugb/M5tMj9ecUrJiNZKzrnAGMl0T7mvFsZ qIA1m0PqMxt937n86pRW8=

x-amz-request-id: 932386E4707956EC

Date: Thu, 30 Apr 2015 07:22:03 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 741306-988407/988408

Content-Type: application/octet-stream

Content-Length: 247102

Server: AmazonS3
......yM.[....~.....8.^..$5*iD..8.'.~N.1.Dfm.Pz.\..M.a.. .h#....H..&..
.@..............*P......\..d....#V..Q...p7.sY....8FX.....k...~...P....
[email protected].].....y..N.k.%U..L......8..?.....8..x.v...{.e.. .p.Zp..O...JBe.H.
.M.\(..y.d.&.B....H*........5...........uZ...JfY(..;.x.......k..w1....
..>.n.&$I....~K...M......w..#A....D..ms.z...zx.a6.5.BY..k.f...$....
.H|..^.....9...F.m.u-...'...H.w.eYA......{5....R."..d#..z:..0......H..
.....su..........t.5.....8.t....T1...C7.9y......_wO_...b.....)/....^..
....NH...7.;i...U..o...u..k#o....\Z..Ha^..T.H"'......s.........1...U.{
g..r..*o...^.....t%B....o.DV......!...8.....V @j....P.4o.z\..B.8S $z8.
/.x...~sw?ol..f.0}...a..`u.A...(n..o...:.).Ga..h^.jZ.'.c...q..^$..)...
..n.....y~~s[50...E.. ...S._A.F.}...F.e.shd<.4fL...j....|E...'U..e.
B.....Q.!J...K..Q._......6ME....b...`8.!.5.E..........'1.....2.D.SA.Lo
.]../..d.........SP......-n..g*.k.../....G]{..R...6s.....j.;..M.4.....
..s8.Q~.jbx.o.!..G.O... ..C....).:..........n".c.=.q].e..2.D....J..lFn
y../-....e....?......3`.|.......n.A...|h$;.....wu...1...4z9.t..#..f.&g
t;....A.).._..J..Bs/5.b_....C.}.....&...nU?n...Lb.hH....H.o...........
.RE.{...=.v.sjw.m!4f..AC).....1..F..A*..s.......;z^NMQ.P..D.SEf.......
AM........$.qzgM......=.....A.8..y...,......{..|......!...Q....u......
........m...8?......q...t.w...M.yE.D.K.h.........).......|....#...3...
.[.6.G......C..e..T.....!......k=...JuEzV./.w..."Cj.0......~T.N.......
.O.[..G5o..........Q...V.c..H.......'z..mX1.......}w.NE.K....j.1T=.)}.
....zS..9...v......A....$...........r..dc.."r.0..l..h..H.......;..<<< skipped >>>

GET /sd?is=sm HTTP/1.1

Range: bytes=130814-261628

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP002C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Cache-Control: private, max-age=86400

Expires: Fri, 01 May 2015 07:21:56 GMT

Date: Thu, 30 Apr 2015 07:21:56 GMT

Content-Range: bytes 130814-261628/523256

Content-Length: 130815

Connection: keep-alive
[email protected]}R...;B...,..vgQ4...W..O&....=.....
..s../y.wa.h.0p$.Vf.J...JD..j5..........;...Y.....:k.tT=..x./....E..n.
..........$.s=.....)8p.E....B..c.$..Vj;.,.t.D|6d.B.lp.>Y.C.........
w.^|..Yx.P`N..j.RN.. ...~...Lok.....o..m%`,@,.....J.S...jM@.....#...J.
.h..U^...`.RV.,^z..1.d/>?.u.\......{.r.l....M........e.&...[.6<.
.M.......h.^...H.)..6.........../.O.]........W}. ...$..x9.9.i.......).
.~..b.T.........f...<8...C..$>YC............t..R.....`.*Q.va...q
@..........q.........Yz..`.....i...X.y...1.KQ...w,d.....4Oxn....... (.
...6.MY. .u...".Q.Fn.D..<..o..M.......&ZYJ.b5.24o...M...j..$...l>
;.`rlx~..~F6Zh..>..`...i.y..-.e.....2.. ..CCkx...&.g.....j..Y......
V.5...5.[....z.J.....R..x..u..i...|.....Y.s..-s.1.>...F.....G...YWH
.0.H.... .6=AQ.s.......%..3n.S.,..RY.D%...l.G^..Ny.QMb...>..=.1:h8.
2.......%.Qv.=.g.i.........{.~.o....5.1g[...._ .C.o.=.....%...[..[..i.
...Z/.z..i..UP.......8...sX..Y......iYI...C.(E7..S..9...H,L...e..^ N.7
...x.Qp.J.T....xz}.....&.%...<,. ..{s.=..Vp.........'./......Zv9.m.
.P.f..8....w...`..pJ....>a.'(....s'...l|t.....WO ..)3......2.....F.
..@...#.v........29.#..w.-...nN..S"w..b........4.HY.......>.v..?...
...>.#..\...sA.......W....^pS.z......9..%Q.l...7.}...[..*<  rq.L
:....[.$7=.=B.mE-......)s..KM...........!..s..xa2...v3..uF...gO.G'.B.e
..-...z#..ck{`.v....`gx....Eg........`[email protected]...'.A.....Z...LVA
Qd.q..( ...........6...6....P"..~.9......47..T.....IE..([.S.O.|o.1{Ue.
.?C^-................T9P.pb..B#.....0_B....:#....v....8<.M:A.."<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-31.nodes.56m.dmtio.net

Cache-Control: max-age=2592000

Content-Type: text/plain; charset=UTF-8

Via: 1.1 varnish

Content-Length: 866

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:08 GMT

Via: 1.1 varnish

Age: 468341

Connection: keep-alive

X-Served-By: cache-iad2129-IAD, cache-fra1235-FRA

X-Cache: MISS, HIT

X-Cache-Hits: 0, 105

X-Timer: S1430378708.428358,VS0,VE0

Vary: Accept-Encoding

Sitemap: hXXp://VVV.cnn.com/sitemaps/sitemap-index.xml.Sitemap: http:/
/VVV.cnn.com/sitemaps/sitemap-news.xml.Sitemap: hXXp://VVV.cnn.com/sit
emaps/sitemap-video-index.xml.Sitemap: hXXp://VVV.cnn.com/sitemaps/sit
emap-section.xml.Sitemap: hXXp://VVV.cnn.com/sitemaps/sitemap-interact
ive.xml.User-agent: *.Disallow: /editionssi.Disallow: /ads.Disallow: /
aol.Disallow: /audio.Disallow: /beta.Disallow: /browsers.Disallow: /cl
.Disallow: /cnews.Disallow: /cnn_adspaces.Disallow: /cnnbeta.Disallow:
 /cnnintl_adspaces.Disallow: /development.Disallow: /help/cnnx.html.Di
sallow: /NewsPass.Disallow: /NOKIA.Disallow: /partners.Disallow: /pipe
line.Disallow: /pointroll.Disallow: /POLLSERVER.Disallow: /pr/.Disallo
w: /PV.Disallow: /quickcast.Disallow: /Quickcast.Disallow: /QUICKNEWS.
Disallow: /test.Disallow: /virtual.Disallow: /WEB-INF.Disallow: /web.p
rojects.Disallow: /search.....

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-57.nodes.56m.dmtio.net

Cache-Control: max-age=3600

X-XSS-Protection: 1; mode=block

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Via: 1.1 varnish

Content-Length: 41353

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:08 GMT

Via: 1.1 varnish

Age: 113

Connection: keep-alive

X-Served-By: cache-iad2133-IAD, cache-fra1235-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 1, 233

X-Timer: S1430378708.477907,VS0,VE0

Vary: Accept-Encoding
.............v...0..{..gf;Y..D....%.r..nwo.IOf.,/H.$.......L.:...u..W.
...'9U.)QWR.....E.H..P(...B...9.....S....}.=~....|s....<.g.......HO
8.w.7...7.......#..8......}.......[.-Fc.Y]........j.^.6..az..W@.....{z
;.. 9...<X|2..w0.1.Lo....V.S...X..Y....l ..xDF.l......m9.d.....B...
..[.y._....7.7C@..=r.......9.Fl.._(.?(,..V....q.t.=.u.{...B.q...`....q
.0.E....%{.6...z.......3../.Z$.....D....\.#,2...w.k.)................r
...O........|..m....!w.H.@.....@$.!.X&.....}u.......u..x...df.T...)y..
.E..KE.B.%Z.....J..Z...2v...O............jt[.Ti.B...b..h.T..:0$..0W..}
<.L..[..K...W*.a2...[..%|.. ./,.$....p..nH........pG.....X..c"=.Z..
..tu}i9\.#........../..H...\.. S...!P..]..#$..~..H"........3T.........
C..2`..5%.Z@[email protected]......#.v....Z"......;.Un.1VBVL.Z..
....*{F...([l69"....a..t....{...........F...#.{Bj.n...~..@.)W.....EZ..
.Z e.?.1wzg3w......{....Oz.]U...E..c32.._< .G8.LF. ....ra.].15...Q6
J.F3...=....2..M.!.<.STT}E....-.].-/[email protected] z.(..1.:.m.
. ...L........D..P..c.s.....f...B..Y}.`.e.4.;.LzS..3.....L.Sq..p....Q.
.....`.F0.....l..t'.'..HJn..b.....q....M..s./d.............1J.......34
....X.c`..gK4..l8..X.....^A....[h......1...?..R..Wz.*...=Zi.:m...}V...
.^.Z...U...s..{.>......~7..ML.M..Q....(T(r.4..;..oP..>.J.*......
(.;&...6..%.,. .....NH.w.....r9....}...G.u....N.k...-.......0]l}.Y#~..
.........2%..}k.m....e.m.w/OH...,81.@h......._..1.......A....p'>..q
pR..h.ZM.............{........i.;....|.S'..M......:......`...4OH..3.&g
t;...>.=Q2....(.......N..rqz=.6.F.t0.^..y..Y`.g....Kh...:`.`><<< skipped >>>

GET /feedback HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-120.nodes.56m.dmtio.net

Cache-Control: max-age=3600

X-XSS-Protection: 1; mode=block

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Via: 1.1 varnish

Content-Length: 8714

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:08 GMT

Via: 1.1 varnish

Age: 9

Connection: keep-alive

X-Served-By: cache-iad2121-IAD, cache-fra1235-FRA

X-Cache: MISS, HIT

X-Cache-Hits: 0, 1

X-Timer: S1430378708.788251,VS0,VE0

Vary: Accept-Encoding
...........}.v.8....9{"yF.%[...r....sr..Ng.Kgu .......V...O.....M.I...
^$..%[email protected]... .x../..n.u...b..>...th..4...D..1j...,.....y.@.|
9`....Y..l...|.......h..?........;LS.g4...N..~.-...}l .Ed."_...)&..Q..
fw...Z.......b...t..".g.6u..........in.fI.....d...@3&...^.f.mx.H...v=.
bf..K..H...4..Sf......4X..a.m...q.z,l..k..g..a.S...1..?.....i. p....9.
...7...... .P...a.W.Ycj~%.o....n[..Z..6...O...[v.A&. S..QtA'..wwwm..s.
. .k$.....|...~.:K....TT.'... 6`s........."3.....U......$....l~..VT...
......Z......|..p.F\...|g.1..&...rwl.H.E..VY.-..|....-5.f.(..&.H....t.
.....<....Myd[......V.<.-/_*H....X./.A..I.......E..}...8....@...
GQ,..(/.mK.......].l.*...f...$V.5..O.....@N._...y.Q<w.0....*.......
.mw..H.f..6;......n....".W...E...P*..O..g.....Jn. .....".C$....,1]/H..
...)......(.0.....&4.....Q.c......4.q....3.._....`.c..L.P?...z....'...
.............~.oi........<<.......-.L\[email protected].?!...J.;
.....x......{.a..<Xl.L.d.x&...@!....a...[,......&~i..:.......p.r.T~
l..:.nP..........4..X.)u.......6.F}[email protected]=..#
....V....B..........e1.W_/.>...9......).se..]...2.&...~...3m......:
...MY..hL..A....3N".$b!.o....|.Feb..P...V.d~...U?..~.|.Z0.....a.......
..|:...#|:..^.....p..N....8.'^....c^.....^......P..t;.X...O:......:...
...<.j......7^D.d ...\.`^.....y... ?....D...>[email protected]..
NGH....7A...y.0...~....%..$mo..K!.W.....O.........6C.q...J.kp...I.C.,.
D.BqnQH..z~.6.jTH.^.K..v.}/.D.u..[.%........B!..`.~.....N..w.L.@R.\..Y
\r.8'.....1t..44h....ik..m.....^`..#.J..T......#[email protected].<<< skipped >>>

GET /feedback HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-120.nodes.56m.dmtio.net

Cache-Control: max-age=3600

X-XSS-Protection: 1; mode=block

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Via: 1.1 varnish

Content-Length: 8714

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:08 GMT

Via: 1.1 varnish

Age: 9

Connection: keep-alive

X-Served-By: cache-iad2121-IAD, cache-fra1235-FRA

X-Cache: MISS, HIT

X-Cache-Hits: 0, 2

X-Timer: S1430378708.913548,VS0,VE0

Vary: Accept-Encoding
...........}.v.8....9{"yF.%[...r....sr..Ng.Kgu .......V...O.....M.I...
^$..%[email protected]... .x../..n.u...b..>...th..4...D..1j...,.....y.@.|
9`....Y..l...|.......h..?........;LS.g4...N..~.-...}l .Ed."_...)&..Q..
fw...Z.......b...t..".g.6u..........in.fI.....d...@3&...^.f.mx.H...v=.
bf..K..H...4..Sf......4X..a.m...q.z,l..k..g..a.S...1..?.....i. p....9.
...7...... .P...a.W.Ycj~%.o....n[..Z..6...O...[v.A&. S..QtA'..wwwm..s.
. .k$.....|...~.:K....TT.'... 6`s........."3.....U......$....l~..VT...
......Z......|..p.F\...|g.1..&...rwl.H.E..VY.-..|....-5.f.(..&.H....t.
.....<....Myd[......V.<.-/_*H....X./.A..I.......E..}...8....@...
GQ,..(/.mK.......].l.*...f...$V.5..O.....@N._...y.Q<w.0....*.......
.mw..H.f..6;......n....".W...E...P*..O..g.....Jn. .....".C$....,1]/H..
...)......(.0.....&4.....Q.c......4.q....3.._....`.c..L.P?...z....'...
.............~.oi........<<.......-.L\[email protected].?!...J.;
.....x......{.a..<Xl.L.d.x&...@!....a...[,......&~i..:.......p.r.T~
l..:.nP..........4..X.)u.......6.F}[email protected]=..#
....V....B..........e1.W_/.>...9......).se..]...2.&...~...3m......:
...MY..hL..A....3N".$b!.o....|.Feb..P...V.d~...U?..~.|.Z0.....a.......
..|:...#|:..^.....p..N....8.'^....c^.....^......P..t;.X...O:......:...
...<.j......7^D.d ...\.`^.....y... ?....D...>[email protected]..
NGH....7A...y.0...~....%..$mo..K!.W.....O.........6C.q...J.kp...I.C.,.
D.BqnQH..z~.6.jTH.^.K..v.}/.D.u..[.%........B!..`.~.....N..w.L.@R.\..Y
\r.8'.....1t..44h....ik..m.....^`..#.J..T......#[email protected].<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-57.nodes.56m.dmtio.net

Cache-Control: max-age=3600

X-XSS-Protection: 1; mode=block

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Via: 1.1 varnish

Content-Length: 41353

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:10 GMT

Via: 1.1 varnish

Age: 114

Connection: keep-alive

X-Served-By: cache-iad2133-IAD, cache-fra1235-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 1, 238

X-Timer: S1430378710.084035,VS0,VE0

Vary: Accept-Encoding
.............v...0..{..gf;Y..D....%.r..nwo.IOf.,/H.$.......L.:...u..W.
...'9U.)QWR.....E.H..P(...B...9.....S....}.=~....|s....<.g.......HO
8.w.7...7.......#..8......}.......[.-Fc.Y]........j.^.6..az..W@.....{z
;.. 9...<X|2..w0.1.Lo....V.S...X..Y....l ..xDF.l......m9.d.....B...
..[.y._....7.7C@..=r.......9.Fl.._(.?(,..V....q.t.=.u.{...B.q...`....q
.0.E....%{.6...z.......3../.Z$.....D....\.#,2...w.k.)................r
...O........|..m....!w.H.@.....@$.!.X&.....}u.......u..x...df.T...)y..
.E..KE.B.%Z.....J..Z...2v...O............jt[.Ti.B...b..h.T..:0$..0W..}
<.L..[..K...W*.a2...[..%|.. ./,.$....p..nH........pG.....X..c"=.Z..
..tu}i9\.#........../..H...\.. S...!P..]..#$..~..H"........3T.........
C..2`..5%.Z@[email protected]......#.v....Z"......;.Un.1VBVL.Z..
....*{F...([l69"....a..t....{...........F...#.{Bj.n...~..@.)W.....EZ..
.Z e.?.1wzg3w......{....Oz.]U...E..c32.._< .G8.LF. ....ra.].15...Q6
J.F3...=....2..M.!.<.STT}E....-.].-/[email protected] z.(..1.:.m.
. ...L........D..P..c.s.....f...B..Y}.`.e.4.;.LzS..3.....L.Sq..p....Q.
.....`.F0.....l..t'.'..HJn..b.....q....M..s./d.............1J.......34
....X.c`..gK4..l8..X.....^A....[h......1...?..R..Wz.*...=Zi.:m...}V...
.^.Z...U...s..{.>......~7..ML.M..Q....(T(r.4..;..oP..>.J.*......
(.;&...6..%.,. .....NH.w.....r9....}...G.u....N.k...-.......0]l}.Y#~..
.........2%..}k.m....e.m.w/OH...,81.@h......._..1.......A....p'>..q
pR..h.ZM.............{........i.;....|.S'..M......:......`...4OH..3.&g
t;...>.=Q2....(.......N..rqz=.6.F.t0.^..y..Y`.g....Kh...:`.`><<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-57.nodes.56m.dmtio.net

Cache-Control: max-age=3600

X-XSS-Protection: 1; mode=block

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Via: 1.1 varnish

Content-Length: 41353

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:15 GMT

Via: 1.1 varnish

Age: 120

Connection: keep-alive

X-Served-By: cache-iad2133-IAD, cache-fra1235-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 1, 248

X-Timer: S1430378715.336248,VS0,VE0

Vary: Accept-Encoding

....

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-57.nodes.56m.dmtio.net

Cache-Control: max-age=3600

X-XSS-Protection: 1; mode=block

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Via: 1.1 varnish

Content-Length: 41353

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:15 GMT

Via: 1.1 varnish

Age: 120

Connection: keep-alive

X-Served-By: cache-iad2133-IAD, cache-fra1235-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 1, 249

X-Timer: S1430378715.381646,VS0,VE0

Vary: Accept-Encoding
.............v...0..{..gf;Y..D....%.r..nwo.IOf.,/H.$.......L.:...u..W.
...'9U.)QWR.....E.H..P(...B...9.....S....}.=~....|s....<.g.......HO
8.w.7...7.......#..8......}.......[.-Fc.Y]........j.^.6..az..W@.....{z
;.. 9...<X|2..w0.1.Lo....V.S...X..Y....l ..xDF.l......m9.d.....B...
..[.y._....7.7C@..=r.......9.Fl.._(.?(,..V....q.t.=.u.{...B.q...`....q
.0.E....%{.6...z.......3../.Z$.....D....\.#,2...w.k.)................r
...O........|..m....!w.H.@.....@$.!.X&.....}u.......u..x...df.T...)y..
.E..KE.B.%Z.....J..Z...2v...O............jt[.Ti.B...b..h.T..:0$..0W..}
<.L..[..K...W*.a2...[..%|.. ./,.$....p..nH........pG.....X..c"=.Z..
..tu}i9\.#........../..H...\.. S...!P..]..#$..~..H"........3T.........
C..2`..5%.Z@[email protected]......#.v....Z"......;.Un.1VBVL.Z..
....*{F...([l69"....a..t....{...........F...#.{Bj.n...~..@.)W.....EZ..
.Z e.?.1wzg3w......{....Oz.]U...E..c32.._< .G8.LF. ....ra.].15...Q6
J.F3...=....2..M.!.<.STT}E....-.].-/[email protected] z.(..1.:.m.
. ...L........D..P..c.s.....f...B..Y}.`.e.4.;.LzS..3.....L.Sq..p....Q.
.....`.F0.....l..t'.'..HJn..b.....q....M..s./d.............1J.......34
....X.c`..gK4..l8..X.....^A....[h......1...?..R..Wz.*...=Zi.:m...}V...
.^.Z...U...s..{.>......~7..ML.M..Q....(T(r.4..;..oP..>.J.*......
(.;&...6..%.,. .....NH.w.....r9....}...G.u....N.k...-.......0]l}.Y#~..
.........2%..}k.m....e.m.w/OH...,81.@h......._..1.......A....p'>..q
pR..h.ZM.............{........i.;....|.S'..M......:......`...4OH..3.&g
t;...>.=Q2....(.......N..rqz=.6.F.t0.^..y..Y`.g....Kh...:`.`><<< skipped >>>

GET /favicon.ie9.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-62.nodes.56m.dmtio.net

Cache-Control: max-age=2592000

Content-Type: image/x-icon

Via: 1.1 varnish

Content-Length: 5390

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:15 GMT

Via: 1.1 varnish

Age: 1349315

Connection: keep-alive

X-Served-By: cache-iad2130-IAD, cache-fra1235-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 2793, 30434

X-Timer: S1430378715.526759,VS0,VE0

Vary: Accept-Encoding
......  ..........6...........................h.......(... ...@.......
......................................................................
..........................  ..55..%%..*)..**..""..&&..! ..&&..,,..88..
=<..00..::..JJ..FF..MM..XX..UU..YY..oo..kk..qq.....................
.................................................................""..'
&..((..==..................................@@..KK..[[..PP..ee..vv..uu.
.~~..rq..uv..pp......zz..||..kk.......................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
............).)))))).)......................)).)))))).................
....)))...).).).))................))......7.7....)))............)))...
777777777....))..........)))..777:::::::7:7...))........))).777::::B:B
:::::77..)).......)).777::BBBBEBEBB:::77..))......).777:BBBEEEEEEEBEB:
:77.)).....)..7.1....?0EGEG5.1BB:7...))..))).7.w.......5GG.....B:'....
)...).. ..^]]]QS.fG9..S."E..j^..).)))...mj.....m.mIc.fU.!:..^s..))<<< skipped >>>

GET /2015/04/30/asia/nepal-earthquake-epicenter-region/index.html HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-123.nodes.56m.dmtio.net

Cache-Control: max-age=3600

X-XSS-Protection: 1; mode=block

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Via: 1.1 varnish

Content-Length: 24500

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:15 GMT

Via: 1.1 varnish

Age: 181

Connection: keep-alive

X-Served-By: cache-iad2148-IAD, cache-fra1235-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 2, 10

X-Timer: S1430378715.570933,VS0,VE0

Vary: Accept-Encoding
...............F.(.~."...Y.&8.D...$Kv..ZU..nK. .$I.@[email protected]../..'.
KnDd&...I..[^.*..!2"2"222...|......|........e......z............3.s#.F
.........9....l..~......_...x}m<.F>...#J.......q.7.K.mF.CTC...=.
.......r..4........1..hxi..m...*.v........P......Q<J_A.....a ...Z.C
..[..E.~.X .....:3...........=..Q.``.R-....S..U.r.Q.."....f.n.*j.hPkU.
.....S...Y....#.bsH-V}w.z......A...9..v..H..bc.q.s.\...\..a. ....{Q...
.S..........75...yxh...|(....f.4.....6Z...i...4..(1?.|.D...7..q...X...
n.:gP...H...G#[email protected].&#A......f...P....].8s=^....
.#.e....".I....#.."]....8l................;.........v..'.........h"...
[email protected]...`C..l.{v.A.0.f...*.S.....}D.gUg`.Dh.._.e.8..\.@
D>..}PN.u/../.....}r...Ht..\.0..x0.:<......~4.......).p.&p...e..
.....2.E.n..L2..a.qRo...V......s./..r...(... ....E..?..E....E.p..z....
KHj.h.00K3J..P)l.x.#u]..A....$,..y?2q....6...l._d)[email protected] ....9..Mbg;.
....P...B..w..:...#.......0.K..m.;....I..2>.l...A;P...y=..R.....N.;
..&...b...}.0.....]..0.:..*...j.KCE.R..F.....f.a....R..ci...(.._../0..
8h/...."\...3..s.H#./.v_...s...<..#....F.8...k.. .8...n..>.h.>
;H.........o.o.......i...M..Y....yb...L.}....:.F.7.........D...1.Y....
...7.....L.oR.<3..$..#...HY....8....h.U..X..Mpy..b.m}..V..}.-.>Y
...:[email protected].... "..`Y...{.............W.....#q........h.\[!,....
.6.`[email protected]`y..S....T)UJ..z. .R....~&u..|vz..]..
]u.y....w.V.QL......,Y.u.I..%.G.g"zX...'..B..ycuX..t..{.x}(.!^.U..rx..
......;.%.w....vJ...O<.0....5`.(.a...pY..(.....z.V......d7.9...<<< skipped >>>

HEAD /WORLD/index.html?eref=rss_world HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-170-37.nodes.56m.dmtio.net

Cache-Control: max-age=3600

X-XSS-Protection: 1; mode=block

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Via: 1.1 varnish

Content-Length: 42952

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:16 GMT

Via: 1.1 varnish

Age: 121

Connection: keep-alive

X-Served-By: cache-iad2147-IAD, cache-fra1235-FRA

X-Cache: HIT, MISS

X-Cache-Hits: 1, 0

X-Timer: S1430378716.756439,VS0,VE88

Vary: Accept-Encoding

....

GET /WORLD/index.html?eref=rss_world HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-170-37.nodes.56m.dmtio.net

Cache-Control: max-age=3600

X-XSS-Protection: 1; mode=block

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Via: 1.1 varnish

Content-Length: 42952

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:16 GMT

Via: 1.1 varnish

Age: 121

Connection: keep-alive

X-Served-By: cache-iad2147-IAD, cache-fra1235-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 1, 1

X-Timer: S1430378716.971438,VS0,VE0

Vary: Accept-Encoding
.............r#..0x..)p8...1....([email protected].......
.......7..d3.*.H.."Y%..r.)[email protected].!....goO..{."}.....?I.aJ.(..~T.x.....
!...H.....p.z......=9./....G............T.G..m....}.)....K...m..._...7
vj....h....h.V..Hz~a..X.~...oE.S.c..W..9Tu..]=(..!<....#h.....=.}Q(
v.4 .......@<..(\..X'.... ..:.. .....(./....Q.....c..~...;..a.....^
..^.rP*...fNq(T..F#.S_...n.`..B....;..../|...Uz.M..X.J..5..3!]...`2..\
.. _z. .\.."l.....%v...iha...n!....l..4.KV....:.........?.d...........
...|......N.........-.....:....S'...x|.s..$..\7...Sug....x......'.."..
,......Onu.....']X... .}.T..g......9y#l.......5.as...Z...U....3...43..
{f.\....x..3.......1.......'..vy.F......F}...P....g..J...k.)....y...y=
~..t..?.>.......<.mlt..b.r....p...t.wV....gaE,.;*UKV.*W..q...1..
.aG.T....9.xw..k.Jw..s/^KA.......=......t$..SQ....3.<j.......Gh..j.
C...T..`.../".e........].....9..8H.O......X#..).5z....U..S.(U..(......
m.#.%.?).c..m..%l....][t...).z~............v.c..am9.!4.P;s).$..@7.....
..y..u..\.......l$P.z......#Jq.E.d...N......6X.....]V.V...Z....0.....\
......"....X.........S..!.........P.7..d.....(.L...(..6......%.,. ....
..I7p......8jU.............p.r...s...3.][...{....._.l8ZW..?Q.4m..mW.pl
=.8..4.SGt.............64.sx....J..N....P.._.M.WTs...?.g....{]?<..?
A..<.......-....2......jo.t....68...I..D.>{....;...U.JH.>....
.N.Tx...q.MbC.....b>.>...Y......W.CE.'`..>....:.2....`..0....
..#..^..B.rP;[email protected]...~....!~;.o.*~...Z.....C]...t..._...e..#].*....d!
....YU...T.....~.C...<.....DY..z....E^.:g|.B..dv._.e....w.<.<<< skipped >>>

GET /favicon.ie9.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-62.nodes.56m.dmtio.net

Cache-Control: max-age=2592000

Content-Type: image/x-icon

Via: 1.1 varnish

Content-Length: 5390

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:17 GMT

Via: 1.1 varnish

Age: 1349317

Connection: keep-alive

X-Served-By: cache-iad2130-IAD, cache-fra1235-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 2793, 30435

X-Timer: S1430378717.081807,VS0,VE0

Vary: Accept-Encoding
......  ..........6...........................h.......(... ...@.......
......................................................................
..........................  ..55..%%..*)..**..""..&&..! ..&&..,,..88..
=<..00..::..JJ..FF..MM..XX..UU..YY..oo..kk..qq.....................
.................................................................""..'
&..((..==..................................@@..KK..[[..PP..ee..vv..uu.
.~~..rq..uv..pp......zz..||..kk.......................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
............).)))))).)......................)).)))))).................
....)))...).).).))................))......7.7....)))............)))...
777777777....))..........)))..777:::::::7:7...))........))).777::::B:B
:::::77..)).......)).777::BBBBEBEBB:::77..))......).777:BBBEEEEEEEBEB:
:77.)).....)..7.1....?0EGEG5.1BB:7...))..))).7.w.......5GG.....B:'....
)...).. ..^]]]QS.fG9..S."E..j^..).)))...mj.....m.mIc.fU.!:..^s..))<<< skipped >>>

HEAD /US/index.html?eref=rss_us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-52.nodes.56m.dmtio.net

Cache-Control: max-age=3600

X-XSS-Protection: 1; mode=block

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Via: 1.1 varnish

Content-Length: 33842

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:17 GMT

Via: 1.1 varnish

Age: 116

Connection: keep-alive

X-Served-By: cache-iad2128-IAD, cache-fra1235-FRA

X-Cache: HIT, MISS

X-Cache-Hits: 1, 0

X-Timer: S1430378717.706500,VS0,VE87

Vary: Accept-Encoding

....

GET /US/index.html?eref=rss_us HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-52.nodes.56m.dmtio.net

Cache-Control: max-age=3600

X-XSS-Protection: 1; mode=block

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Via: 1.1 varnish

Content-Length: 33842

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:17 GMT

Via: 1.1 varnish

Age: 116

Connection: keep-alive

X-Served-By: cache-iad2128-IAD, cache-fra1235-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 1, 1

X-Timer: S1430378717.921478,VS0,VE0

Vary: Accept-Encoding
.............v.6.7..~..f.q.m."u.$'.,..8.....s.,/..$F........u........9
or..T..D..HI....g"K.T.....@...........%..C..[.$...|Q...E...g...C.0b./.
^..t}...=~h.}1./.....(.5t._..F......X.t\^...3_rx;...Y....OA..H.;....d4
..1`Z.w.x$..4.1v..........qH.....Ri1.D=2..........v.o@.>..(........
.#.R">w_.n.....r..J$..^..!...'....)2X..r.9.l.(.}..G...-. ...3...GF.
...s.CGZe6....".......E..o.....{...?}.tsD^..$.....2qyHn..;\.....cs..._
.F..-.7..$..H..[..L....f...jVn .I.qR...DF..q?..(...(..,.9_..V.S.F.V.[.
rb.N......`(...D.0...@....\).C.}...Z.#.T..l.,.....d"B..F.9..4..M...a..
.Z..@'...2........**....*NS...8.w.A..'../.~8...'.......l....1.....o.E.
.S.t.~.o=xV..!.'w..{.N...~0v...'......w..|.&<...=.....o)=.Bn;...%.3
k.5....Z..d......s..W)..`.r:s..|.....>...Hxg....'D.....FG5.2.J(')0.
4.a..(.....)..t.].{(:...n.....ed..-..?Q.O.K.2..$..%..`.r...s....]lL...
.#..n.lIYvx3..G..T,....T..z:).m..KD.O....t.E.Ts. V...jQ.w...k...(Mim1.
!.g.}<.?92`.<..9.....u...#...........)/.._........b...e.i...h...
.i0N....6[V.n`..~.....9.P...?.....;.-.G...!...2d....D.?..,. tH.K....H.
r...<...w...._.... .....NH7.T7..<.s.,$.C........................
.\.X..~...M...UO..;.0m[.l.:=,[....'m..u..<[email protected]
I....a.`.G........m.{.n7.....`.rx77..'.`........P.|!..Iw.........Rk...
ko}...NT....Kh...U.~.F....._p.M.E..x..b....L.,.M..r...........#......c
....4.3..x=.~y$..z`R..G....p....&~....1~;.o..~k..z..5...z......._.....
.M..Y..-...|LC.f....QRr.....@..{.E..b@?....(.'.#/.;.|.=.K........]....
...,..a...\#Z.^.....p..I.0...8...#E.Z[...T?.=Q..P_?...B....c[M_.1.<<< skipped >>>

GET /favicon.ie9.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-62.nodes.56m.dmtio.net

Cache-Control: max-age=2592000

Content-Type: image/x-icon

Via: 1.1 varnish

Content-Length: 5390

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:17 GMT

Via: 1.1 varnish

Age: 1349318

Connection: keep-alive

X-Served-By: cache-iad2130-IAD, cache-fra1235-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 2793, 30436

X-Timer: S1430378717.975938,VS0,VE0

Vary: Accept-Encoding
......  ..........6...........................h.......(... ...@.......
......................................................................
..........................  ..55..%%..*)..**..""..&&..! ..&&..,,..88..
=<..00..::..JJ..FF..MM..XX..UU..YY..oo..kk..qq.....................
.................................................................""..'
&..((..==..................................@@..KK..[[..PP..ee..vv..uu.
.~~..rq..uv..pp......zz..||..kk.......................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
............).)))))).)......................)).)))))).................
....)))...).).).))................))......7.7....)))............)))...
777777777....))..........)))..777:::::::7:7...))........))).777::::B:B
:::::77..)).......)).777::BBBBEBEBB:::77..))......).777:BBBEEEEEEEBEB:
:77.)).....)..7.1....?0EGEG5.1BB:7...))..))).7.w.......5GG.....B:'....
)...).. ..^]]]QS.fG9..S."E..j^..).)))...mj.....m.mIc.fU.!:..^s..))<<< skipped >>>

HEAD /SPORT/index.html?eref=rss_sport HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-123.nodes.56m.dmtio.net

Cache-Control: max-age=3600

X-XSS-Protection: 1; mode=block

Content-Security-Policy: default-src 'self' hXXp://*.cnn.com:* hXXps://*.cnn.com:* *.cnn.net:* *.turner.com:* *.ugdturner.com:* *.vgtf.net:*; script-src 'unsafe-inline' 'unsafe-eval' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' *; media-src 'self' *; font-src 'self' *; connect-src 'self' *;

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Via: 1.1 varnish

Content-Length: 26276

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:18 GMT

Via: 1.1 varnish

Age: 94

Connection: keep-alive

X-Served-By: cache-iad2143-IAD, cache-fra1235-FRA

X-Cache: HIT, MISS

X-Cache-Hits: 1, 0

X-Timer: S1430378718.376496,VS0,VE88

Vary: Accept-Encoding

....

GET /SPORT/index.html?eref=rss_sport HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)



gqY.?q.....9....,.......l...A.Oh..J...6....../l.G`.8...@.?............
zc....[.g5..F.X^;.t.-....M^.&........x...).[....)......m......r=/$...4
-..P.{..R.......@..._..O..1X...).. ...0....{y//....M\ _....<....x..
.j..).j....:..Z.q.ez.X.w...Nq...C...9(..k.....|[email protected](..t
...p...P.K.. ^\aq..5..m.wM..{/........~..t}[.E/...q.$...W_....gY......
..r...9......A..3...c...R_..b.0\.].f...c...q.hZf..=$.}...!..B..&=.O...
..6.r.9w.Ur.9.U>.".;,|.....I.u.R../.m....=?9${S...^.............{#.
.....T....];.......U.....z...W.......[l..r.........g.g.x..].....joA...
.....A.1X..r..1.A.:v8........:....^...S.o5.V.o..~...R..U.[Y.o5.V.5..M.
....*.h.|..:.._....p.......Z!'............q....Y(.z".. ..VuN..........
[email protected]..>D.=..n_XF..X((*.q -<..U..;.6......(.....i.
...M.x..j.....-<.....m...u.8>(p..=?.=..t.&.#.fD..{..K......_L..S
...`NL.q}f...n..X....:(..g..........$...`...T..x.....c...~.y.L:...8 .j
d.....h.?......-.j..U......0,....E..1...{*...UX...c...|..$>C.......
...>..LW._...2.fs_...a........;..x..LC....;,...y..'......{b......&.
.....Q.'8C..W/.s.........N..*..B..:[email protected]|..vg..k.0w.........
.....Cx8J.LPa...([email protected]..@.]..|..8.n.C.o.. _....`~..8.'.-.... .....5.V
...R.8#.p :`..y..x..A. ,...^ !.m`].x..2a.X.(..".!L..p.......[.o..2"...
$........=$.".....1C..~.................>Qmp....7.s.m..E.C..n.....&
gt;.....=....a..~ws.T.i.B...........3.q=..........5.....d .\.Qbx.$..).
....<3.S..]....c.O...../.c....Y.m...p.....4-[..0/....\....o.5[-...6
.TEF.k..X,..*L ...H.k...p.B$....<[email protected]..,<<< skipped >>>

GET /favicon.ie9.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: edition.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

x-servedByHost: prd-10-60-168-62.nodes.56m.dmtio.net

Cache-Control: max-age=2592000

Content-Type: image/x-icon

Via: 1.1 varnish

Content-Length: 5390

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:18 GMT

Via: 1.1 varnish

Age: 1349318

Connection: keep-alive

X-Served-By: cache-iad2130-IAD, cache-fra1235-FRA

X-Cache: HIT, HIT

X-Cache-Hits: 2793, 30437

X-Timer: S1430378718.560735,VS0,VE0

Vary: Accept-Encoding
......  ..........6...........................h.......(... ...@.......
......................................................................
..........................  ..55..%%..*)..**..""..&&..! ..&&..,,..88..
=<..00..::..JJ..FF..MM..XX..UU..YY..oo..kk..qq.....................
.................................................................""..'
&..((..==..................................@@..KK..[[..PP..ee..vv..uu.
.~~..rq..uv..pp......zz..||..kk.......................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
............).)))))).)......................)).)))))).................
....)))...).).).))................))......7.7....)))............)))...
777777777....))..........)))..777:::::::7:7...))........))).777::::B:B
:::::77..)).......)).777::BBBBEBEBB:::77..))......).777:BBBEEEEEEEBEB:
:77.)).....)..7.1....?0EGEG5.1BB:7...))..))).7.w.......5GG.....B:'....
)...).. ..^]]]QS.fG9..S."E..j^..).)))...mj.....m.mIc.fU.!:..^s..))<<< skipped >>>

GET /jslibs HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:03 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs/
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>......


GET /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:03 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://tech.yandex.ru/jslibs/
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.6.2..Date: Thu, 30 Apr 2015 07:25:03 GMT..Content-Ty
pe: text/html..Content-Length: 160..Connection: keep-alive..Location: 
hXXp://tech.yandex.ru/jslibs/..<html>..<head><title>
302 Found</title></head>..<body bgcolor="white">..&l
t;center><h1>302 Found</h1></center>..<hr>&
lt;center>nginx/1.6.2</center>..</body>..</html>.
.....


GET /jslibs HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:03 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs/
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>......


GET /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:04 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://tech.yandex.ru/jslibs/
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.6.2..Date: Thu, 30 Apr 2015 07:25:04 GMT..Content-Ty
pe: text/html..Content-Length: 160..Connection: keep-alive..Location: 
hXXp://tech.yandex.ru/jslibs/..<html>..<head><title>
302 Found</title></head>..<body bgcolor="white">..&l
t;center><h1>302 Found</h1></center>..<hr>&
lt;center>nginx/1.6.2</center>..</body>..</html>.
.....


HEAD /jslibs HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs/

....

HEAD /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://tech.yandex.ru/jslibs/

HTTP/1.1 302 Moved Temporarily..Server: nginx/1.6.2..Date: Thu, 30 Apr
 2015 07:25:08 GMT..Content-Type: text/html..Content-Length: 160..Conn
ection: keep-alive..Location: hXXp://tech.yandex.ru/jslibs/....
..

GET /jslibs HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://api.yandex.ru/jslibs/
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>......


GET /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: api.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 302 Moved Temporarily

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 160

Connection: keep-alive

Location: hXXp://tech.yandex.ru/jslibs/
<html>..<head><title>302 Found</title></hea
d>..<body bgcolor="white">..<center><h1>302 Found
</h1></center>..<hr><center>nginx/1.6.2</ce
nter>..</body>..</html>..HTTP/1.1 302 Moved Temporarily
..Server: nginx/1.6.2..Date: Thu, 30 Apr 2015 07:25:08 GMT..Content-Ty
pe: text/html..Content-Length: 160..Connection: keep-alive..Location: 
hXXp://tech.yandex.ru/jslibs/..<html>..<head><title>
302 Found</title></head>..<body bgcolor="white">..&l
t;center><h1>302 Found</h1></center>..<hr>&
lt;center>nginx/1.6.2</center>..</body>..</html>.
...

GET /sd?is=sm HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Cache-Control: no-cache


HTTP/1.1 200 OK

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP002C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Content-Length: 523256

Cache-Control: private, max-age=86400

Expires: Fri, 01 May 2015 07:21:56 GMT

Date: Thu, 30 Apr 2015 07:21:56 GMT

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
................. ...............................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h [email protected]...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .

<<< skipped >>>

GET /v4/searchprotect/535559167_198339_B48A115F?action0=xa.geoip&action1=visit&action2=install HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:35 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"1.36 ms","message":"store 4 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Thu, 30 Apr 20
15 07:23:35 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"1.36 ms","message":"store 4 ac
tion and 0 update "}..0..

GET /infv5/index/3428/3rd HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0

Host: dqoup4b5zs0bi.cloudfront.net

Accept: */*

Accept-Encoding: gzip, deflate

Connection:keep-alive


HTTP/1.1 302 Moved Temporarily

Content-Type: text/html

Content-Length: 0

Connection: keep-alive

Date: Thu, 30 Apr 2015 07:24:55 GMT

Location: hXXp://dlrkbt247pbk6.cloudfront.net/3428_92a5d683c188790231b1aa2af09de41e/2.pak

Server: nginx

X-Cache: Miss from cloudfront

Via: 1.1 e89c67951b2bc58773e3664c08702f34.cloudfront.net (CloudFront)

X-Amz-Cf-Id: RwEagouFBhw9MTRkHKNkCcmEJrr9vO2w-F-nvdveKZL9iNpO3tjpew==

HTTP/1.1 302 Moved Temporarily..Content-Type: text/html..Content-Lengt
h: 0..Connection: keep-alive..Date: Thu, 30 Apr 2015 07:24:55 GMT..Loc
ation: hXXp://dlrkbt247pbk6.cloudfront.net/3428_92a5d683c188790231b1aa
2af09de41e/2.pak..Server: nginx..X-Cache: Miss from cloudfront..Via: 1
.1 e89c67951b2bc58773e3664c08702f34.cloudfront.net (CloudFront)..X-Amz
-Cf-Id: RwEagouFBhw9MTRkHKNkCcmEJrr9vO2w-F-nvdveKZL9iNpO3tjpew==..

GET /softwares/5/2/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=14339385-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:22:03 GMT

Content-Type: application/octet-stream

Content-Length: 8603629

Last-Modified: Mon, 05 Aug 2013 14:46:25 GMT

Connection: keep-alive

ETag: "51ffbac1-15e1526"

Content-Range: bytes 14339385-22943013/22943014
n..{m....2......G..<.>@.........euXk....wsUk....X.....o...@.....
..v........F...o.Q..8..pI......c......v.-...Ea.|d.L.\D....(.i.....?#.o
.=u....S... .O...B.wk..U.M}.;.......7..-.........9h...U.\GC.H.........
qqVn/.egg..7...S..P"_..v..1>.w.,|<s...Y-.....\m.0.....i........7
Z7=..' .b.A..E....TJJ..!.*...74.V.......^..J~..8.#.pV:......f....J.R.5
..>m....Z...Z.4...JQd.d...'...n.....~Hff......5.ht.2.pBn...b..S.f..
...... ......NE.A.......Su..._.o....;[email protected].....?..;...8*g.Z...L,H,
..e...Ea......r......J..Qb....%[email protected]...._.\.IB.........`. ...UN
...-..kF9...V|.y..>.CL}.kc..|.2.....\.....-Vd....b....yJ.~.g......Z
..UkJ.s.&.P\.:....}H65[]...T.D.&....]"i..T..=$j.F...\.v.L.....2#.Upr..
@..up:...n..^2..\8..WG........).=..}.?....m.|T.v.;.ZQ..y......m......v
.!....9p^...N.Un...m.....QF<o(.BJ.E.N[..c...."(8...4....z......9A6.
.}.f.e{[email protected]~I...{F.)......S.......D...#..A....E....
`4B>M...!^...VJ2......mmSu.......`3:O..o.1#......u.%.%....;......5&
)=......b....rp..C..K..0..4.8.8q..u3..l..N......&.'...9.....}.......s`
.l..ms....{....7Zu.tRu..R......3...L.~y../6..*j....3.|Wk..........:..-
T.h...brv.....jA5..UH)...lKo.aHO.m..z.X...Z..D........E..\1.-.".zJ.v;.
J}h.H-5.D.l....l.:...r...........C.X...l.?..V..C.L.s....y.m|es:..U9.&l
t;..W.%..%N...=.(@.[!.5...gd..."......4....m...t..].3.UA.......t .Xf..
...D.g.....B0......\...\......p0...K3..L_fk'... E.T_....q..:M..N..v}. 
..`[email protected]...=.......ZS."0...P.w0|[email protected].. :..@
....P.q$......$P.o.....f..#3{...).-.l5~W~....r..o..k......G&.T.1..<<< skipped >>>

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=247102-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: hSUgeufdT1vWLiGm OkSG8x4JSaDOaNZNM7Eu1LDocDJxq4lgO6FRGl9g4mM6le6mNZnBVUFhNI=

x-amz-request-id: D5928C4B46FC7467

Date: Thu, 30 Apr 2015 07:22:03 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 247102-988407/988408

Content-Type: application/octet-stream

Content-Length: 741306

Server: AmazonS3
-s...R.... .e.>7........... )..51.n4..@..)....ck.../.01-. Z?L....k.
...O..<2Ma....7..r.2....j....O.".A......dK..&G..Hj6.(.P....ZxVA.>
;...Sr.l:.86....6bq.....>.d-p~R{..jI.L..M. .8O....q..[..J4...T..l..
...m.......)e.C..A....I,cPy2|.."-...".M.O..v...=Q......|.......'..Z..I
}....Dw.....f.i...m.~.o..H'.j.....&.agE.`._`.>...[.:O...^4......3..
.7.{[email protected]...<......BY..4C.}..Qf.'(.....rRf?...q.=|....|....
[........E..Gu...oD2 ...E/....2$..k......o......E.. h.....s7..ouq...N.
.".o.....L.....%.8-...zG.._.|.B{.e(w.iy.....ALA.}.,.cf1%ZE-.U.....oa.F
.~|o.":,.N.s...N.^x....GT..(.!..oy'.N..?.L....7...)..f1nS.P.6....._v..
....._)S......`....qe0.d.DI............sq..su...{j..Y..'...;..6.{..@..
Os3p4T8.z...8....L.Q.F...H../...b...(..k._..z.a...f...0......}.......P
.|-.3.g...<.,w=P.tk_$..p..\,...K..*..........S.....l&..^C.q.J...OD.
..$..T..x...`........:Ea#"...fv....p.u.YWE.........m..E...CV....=sR...
=W.DC..jQ..o.74;9 .5y^.H&f.3..|X.......w. ..^./E...X..lC.|.hR.. ...._J
r..v...E..X~.D.Q.......5.>...A..v ...a~=..F ..{a"....yj F..].n.....
.=1H<.Z...n}.1.;.!7U3..........G..N...T......A.........m .....PcC\C
ek.w.........J.a....{*.>.u..]9.....2K.}.G@........$-H....=9....f&f.
.6l...M...u ..k.N).O..8J.~........i ..`5.........r..g`..../...E.....R.
..P......l$r.GTJ...\...v9..Y.D.!&e..aq...)%.'.[.....Pgx..../.PQ..yv..D
...#...m.|P!.l..s.$.q&=..d6T.jQ...]d....7c ...ll.s...X..`T.(Da.P..b..!
....A>..n."..H.....Rrc...C.T..J]Jx\*.....l...q2..q...R......?9..4l.
....F..3`{..x.`..d^.g............C..t.G.'xdA>y...m....m~..."..~<<< skipped >>>

GET /rss/mostviewed HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Redirect

Date: Thu, 30 Apr 2015 07:25:09 GMT

Via: http/1.1 yts289.global.media.ir2.yahoo.com (ApacheTrafficServer [c s f ]), http/1.1 r01.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: no-store

Location: hXXp://news.yahoo.com/rss/

Content-Type: text/html

Content-Language: en

Content-Length: 402

Age: 0

Connection: keep-alive
<HTML>.<HEAD>.<TITLE>Error</TITLE>.</HEAD&g
t;..<BODY BGCOLOR="white" FGCOLOR="black">.<!-- status code :
 301 -->.<!-- Error: GET -->.<!-- host machine: yts289.glo
bal.media.ir2.yahoo.com -->.<!-- timestamp: 1430378709.000 -->
;.<!-- url: hXXp://news.yahoo.com/rss/mostviewed-->.<H1>Er
ror</H1>.<HR>..<FONT FACE="Helvetica,Arial"><B>
;.Description: Could not process this "GET" request..</B></FO
NT>.<HR>.</BODY>.....


GET /rss/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:22:09 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 85dhdktak3m11

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Thu, 30 Apr 2015 07:27:09 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 180

Via: http/1.1 yts228.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r01.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 7832

Connection: keep-alive
...........=.r.8....X...t.!.*.n.S.%v:..v.N^T .J.y.AZ...#.e.f...d..HIv.
.cI...L:.%.8...\...OIL.y!.,}......S?....l.*C.]...O.....L.Z...=[..e..n.
......A...,i'.d{e2..#.....)...2*c..._ .|(.%.X.E.~..K._..gA..\....?....
...)<95.z[~..z.._Dy.3o..8....8ai@...$,..H .K.."/xI....X.zC.Y.q.f...
.....,..9.F..e..L=...2....4..6K..<..S... m~.=..Q.....v......14.n`.O
....c".......<[email protected]...%.$J.D..
MU..#qk.%}.uq.................N.....[y._o..?...h..'.5..E.p.*.,J..<.
#..........n...".R~.:m5._.......?.....#...cZ....)....jn......cq.%Y..( 
...k..5,.5(.x...v...........6..6 .......'W...nR..ow..D.}.=......!;...s
;....}r..Ob.....Y.82w...7Np.}:....z.... ..B...^%......JX\........fY.m.
...evm......aQ.?...n....`s..g...n...W...tk.......n.....`.....1A..8....
ng..^=[..........Y....(.F<.X....*.G..x.........QJ.X:`e.R.'..X.yX..I
..2..../............`..na.V...J.d8...f...Q...0 @.(.y...s.........P[K.=
&b. ~.R......9.u..%....k..z......=.....p8l..(%h .5........*.....H. ...
J.b.W6....6.....e......5.~pv-G90.....9.......k...Y.?..(R.-%.R...$.....
...JRd.! [email protected].$.._..3m.....p.s........BY.E.y....l...a.a.9.....
...)..)NM.......g.).G.|T...m.N......t.G............w....p#.{C......9..
.............h....3....vA..lSm=X.d.%,%R..`..@#>.\Pc.h.0p6.].......@
.....DgF...........t...7V.`..ZU....AU.@.*..(&..*.m..7.....y..U...l9...
...B..... ..H(.n..)...........!...&.@.|D.MOYY.09<~.D......../..F.6.
..#Cf!|.U.!............".<..a. .8/.K...19FO.....DN...._>/v.Xxl,.
....<.;.<.yS...........".....9H...!>...St..l..Q.....]....<<< skipped >>>

GET /rss/mostviewed HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Redirect

Date: Thu, 30 Apr 2015 07:25:09 GMT

Via: http/1.1 yts13.global.media.ir2.yahoo.com (ApacheTrafficServer [c s f ]), http/1.1 r01.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: no-store

Location: hXXp://news.yahoo.com/rss/

Content-Type: text/html

Content-Language: en

Content-Length: 401

Age: 0

Connection: keep-alive
<HTML>.<HEAD>.<TITLE>Error</TITLE>.</HEAD&g
t;..<BODY BGCOLOR="white" FGCOLOR="black">.<!-- status code :
 301 -->.<!-- Error: GET -->.<!-- host machine: yts13.glob
al.media.ir2.yahoo.com -->.<!-- timestamp: 1430378709.000 -->
.<!-- url: hXXp://news.yahoo.com/rss/mostviewed-->.<H1>Err
or</H1>.<HR>..<FONT FACE="Helvetica,Arial"><B>
.Description: Could not process this "GET" request..</B></FON
T>.<HR>.</BODY>.....


GET /rss/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:22:09 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 85dhdktak3m11

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Thu, 30 Apr 2015 07:27:09 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 180

Via: http/1.1 yts228.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfU]), http/1.1 r01.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Content-Length: 7832

Connection: keep-alive
...........=.r.8....X...t.!.*.n.S.%v:..v.N^T .J.y.AZ...#.e.f...d..HIv.
.cI...L:.%.8...\...OIL.y!.,}......S?....l.*C.]...O.....L.Z...=[..e..n.
......A...,i'.d{e2..#.....)...2*c..._ .|(.%.X.E.~..K._..gA..\....?....
...)<95.z[~..z.._Dy.3o..8....8ai@...$,..H .K.."/xI....X.zC.Y.q.f...
.....,..9.F..e..L=...2....4..6K..<..S... m~.=..Q.....v......14.n`.O
....c".......<[email protected]...%.$J.D..
MU..#qk.%}.uq.................N.....[y._o..?...h..'.5..E.p.*.,J..<.
#..........n...".R~.:m5._.......?.....#...cZ....)....jn......cq.%Y..( 
...k..5,.5(.x...v...........6..6 .......'W...nR..ow..D.}.=......!;...s
;....}r..Ob.....Y.82w...7Np.}:....z.... ..B...^%......JX\........fY.m.
...evm......aQ.?...n....`s..g...n...W...tk.......n.....`.....1A..8....
ng..^=[..........Y....(.F<.X....*.G..x.........QJ.X:`e.R.'..X.yX..I
..2..../............`..na.V...J.d8...f...Q...0 @.(.y...s.........P[K.=
&b. ~.R......9.u..%....k..z......=.....p8l..(%h .5........*.....H. ...
J.b.W6....6.....e......5.~pv-G90.....9.......k...Y.?..(R.-%.R...$.....
...JRd.! [email protected].$.._..3m.....p.s........BY.E.y....l...a.a.9.....
...)..)NM.......g.).G.|T...m.N......t.G............w....p#.{C......9..
.............h....3....vA..lSm=X.d.%,%R..`..@#>.\Pc.h.0p6.].......@
.....DgF...........t...7V.`..ZU....AU.@.*..(&..*.m..7.....y..U...l9...
...B..... ..H(.n..)...........!...&.@.|D.MOYY.09<~.D......../..F.6.
..#Cf!|.U.!............".<..a. .8/.K...19FO.....DN...._>/v.Xxl,.
....<.;.<.yS...........".....9H...!>...St..l..Q.....]....<<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:01 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: bgl3di5ak3m6d

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: HIT from ncache4.global.media.ir2.yahoo.com-2

X-Cache-Lookup: HIT from ncache4.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache9.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache9.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache4.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache9.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts212.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r01.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 9

Connection: keep-alive

GET /v4/sof-installer/MAS_WIN7X64_adm_1FEBFBFF000306C3?action=smt.chromesyn.exist HTTP/1.1

Accept: text/html, application/xhtml xml, */*

Accept-Language: zh-CN

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)

Accept-Encoding: gzip, deflate

Host: xa.xingcloud.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx/1.6.2

Date: Thu, 30 Apr 2015 07:23:22 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

Content-Encoding: gzip

57.............V*.I,)V.R..V.Q*..M....L..r......... .....T.C......<.
...........T..Z.....H.....0..

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: feeds.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Vary: Host

Last-Modified: Wed, 14 Jan 2015 23:04:46 GMT

Accept-Ranges: bytes

ntCoent-Length: 1061

Content-Type: text/plain

Cache-Control: private

Content-Encoding: gzip

Content-Length: 378

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:26 GMT

X-Varnish: 290548069

Age: 0

Via: 1.1 varnish

X-Cache: MISS

X-API-Version: 5-4

X-PageType: legacy-override

Connection: close
...........SMo.0... 8#Q.v..4...&.....6Z.T...........vj.....8oLa..9Y...
..~X..5C...(.b. p40....B.uY......_..x......6=e.N..P.$...TQ..(....<.
.N..b....U.;Mc.....>..}...-.q.....G4..`.kh.Scm......z..e.#..8-....x
..~.m ...:a`:..H.].&/..Gt.I.u.ef...........&.I.sn1.;..T....FeFW, .{...
e...d#.G....g. KS.[&$.k..^.S.....r.hg..lW.Z.].p...eD..Y.B....c...V...[
T_.........O.....C].....}.....%.....

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=180,public

Content-Encoding: gzip

Content-Type: text/plain; charset=utf-8

Date: Thu, 30 Apr 2015 07:25:17 GMT

Etag: "YM:1:d5b4b517-a870-40f5-b43b-96c0f169d2e60004dc50a9d356a4"

Expires: Thu, 30 Apr 2015 07:28:17 GMT

Last-Modified: Thu, 09 May 2013 22:35:11 GMT

Server: ATS

Via: http/1.1 yts273.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), HTTP/1.1 web19.use45.mobstor.bf1.yahoo.com UserFiberFramework/1.0, http/1.1 l6.ycs.loa.yahoo.com (ApacheTrafficServer [cSsNfU]), http/1.1 r11.ycpi.dea.yahoo.net (ApacheTrafficServer [cSsNfU])

x-ysws-request-id: 52994b91-933c-4135-8309-3bac3f4f5f44

x-ysws-visited-replicas: gops.use45.mobstor.vip.bf1.yahoo.com

Age: 23

Content-Length: 123

Vary: Accept-Encoding,X-Ssl

Connection: keep-alive
..........T.;.. .E..UX.....AH-..(.#.....He....q.3.....Z.c.tY..v0.....g
...X...}.3...Z.....(.,p..l..D.S...s..^........l.,........


GET /top/rss;_ylt=AlwdHRvtXpvepkk.PZVQ41o5nYcB HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:17 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Location: hXXp://sports.yahoo.com/top/rss

Content-Encoding: gzip

Content-Length: 1453

Content-Type: text/html

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts214.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r11.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Connection: keep-alive
...........Wmo.6..._qU.u b...%.e.E:...!h3..HI.E......d..;RR"....H...x/
.=...> dn;......f........$....x{..=.F......!..U.!....-".7..#q.O....
6*l....=[....:......VR>..,.1|.[V...5mXcE...*5.......9....^..{..2Ytp
W..&..B.8:a5P..8...2.sz..F.cC.33L.r.O.....e7vF..4I...^.-.......e.o*<
;h...._.$........7.....|.|.e...!....`..:.R...j.7.I.KE..7........Y&..u.
..Y....x...G.a....V..Et.....hk.2..`:....)x.GeY~...nSS....|S.GQ...f....
.`.BR..V..E..p.....!z...G.]<...$.../- .....4..9.p}..g.. ...LP...X..
.U...C|....a..-.Q.vI#..V..(..c]x`......y2..q.[...& i...!e.Z.e..._6Z.M.
.1......u..v..}.............3..$..R1.6.|h..[....s......E;{:..... ,G|2!
./...^..].-.a..!.;M..dh..y...uH.(.5...C.V.f../..F.4S.Zp.a.*..D.....j..
...........'h...? ...............3.....)...%^#....:u...U.c.Tt.u...S..f
.jT..D..:.....V.r...o...F....Q.-.R.$Y...P1..."..........qtI...G..}9O..
....VM...{......G.2.H.Z_W......AE..~.=.k...L.b..6&\.J`.H....Q. T.. .X.
.,....{[email protected]."On......A'.....n..E..5.#.&......?....u...l..
Qw.b.nM-..."..V@%k.(.a=.._.....HLrSaj........]...nIIk.:[email protected].
<g. ..^.#..a..vPr.yW.......D.......t.wF^....r7..KFCk..M......].l..w
[email protected]]J.........g.....".. ..8..i...M.ne...![.z.;g..D.B.CC.
....G...7.f5G.[*Z..4d.t.5.......T.E..Z.kZli........H..j...z.76..~..d..
....Dj*[email protected]<.....q..K.....4..S'...h*..j`e.....0..,..@.
C) ...K.:...../...&>....5.......fnzX.=.T..........\.....P.Gs..R..N.
.k.R..O...8.A.G.H.&.... H..fP...hP......u..k..?......$>..7.=Z..:...
..L........
<<< skipped >>>

GET /top/rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:18 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: private

Content-Encoding: gzip

Content-Type: text/html; charset=UTF-8

Vary: Host,Accept-Encoding,X-Ssl

Age: 2

Via: http/1.1 yts273.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r11.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
db5.............9is..... .t......$..{.N.6[c;.....$Zb..".-....$..c..73.
...@l..._..._?|q0..~...........a.....$...B.c.~...._([.X`..7D..L6)..~..
 .R....,....Q...d.n...............Y.h.Z..<.._.D...7z....<...w0..
...b.X..9.Q........x.6 [email protected]..$....lI A.
$P.SR'.....hd6D.....4.b~.M.7.O......z..Vl2}.#J..1WOtJ...w{..e-_).|W...
|.[......Nh.LL..._.r.....(.M...uTE...}...v.bb_.`....".Pf../.N...QF.bFe
<X*.B.f..|\.;7.9.....HZg.Yg./co..&.(Tk.jWC...<.b< .7..V..^...
r..*#2.....[./...v....~.....uj..A............>.f8..k6)[.K`.........
&.....~.....6o. .G%>.@?..........j.|W.5./z.yx...n'5....x.Mf.ry0..j.
z<.t[.a2.[j....Wy..UV.N..#4..P./.K.......h{.;.V'....wf...y.....O..9
..}...... .Q$<.....Sb..H..............&....xv.@.)'.ZG..k9..[<...
.hU.W1.g....%_(....hR..d.x!.?..Z..G:X.K..&.*..|QV..|A6b.Z..`......[...
..........6...i.......?=..GY.3...0...i.B)4....4....r..qlZ.e0.N..G...].
.../.b.>.....n.&.......a....]...o*Z?...........G...]e..m=X........S
....*..R-.n...Q.f.D..eWi.......4*..Qjm.wA...H......,....t...W.....jk.K
...u.5.....bz.6:.B..;.......o~A.u[..K......jw.W..}6.__}..l....~..%j_.o
H^./.r.K.\r...^...[../...R^.&.cG....h*g..:.n.J...\.;...Y_.}..m.O...(5^
....d.\N..@'f.3.#..E.....U.pc..Ade..>9...s..uNVJJ2.p:.t.m.....;..b.
n...~.........Q..]. .n.....}..*U...N....!..oI.{.V..I...X..q.>.~...`
[email protected]^.C...h.........;.-l..!B..".....\..)FO0.g.i....B.8{:.
..F.[..(....U9...j1k.1.$h...m...-;.E3._?.Zy.U".'.CF...)...I...*.;.P...
...*...../.......c...r.......I...........q...)p.,)1........A.3.R..<<< skipped >>>

GET /top/rss;_ylt=AlwdHRvtXpvepkk.PZVQ41o5nYcB HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Moved Permanently

Date: Thu, 30 Apr 2015 07:25:18 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Location: hXXp://sports.yahoo.com/top/rss

Content-Encoding: gzip

Content-Length: 1453

Content-Type: text/html

Cache-Control: max-age=0, private

Expires: -1

Vary: Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts276.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r11.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Connection: keep-alive
...........Wmo.6..._qU.u "...%.e.E:...!h3..HI.E......d..;RR"....H...x/
.=...= ea;......../ ...<.$....x{..=........!..U)!.....c....#q.O....
6.m....=[e5..*.......R>.....>.- .........Ho....G@^B..B.K./..=...
,;..dkS.P!H......T..Ll...=...........Z..7.?....FT.u........\..qd.-Ky[.
A{xp...&I\.......U.;...f..[.....jxY....c..n...z..t.P.,y...}..n..ri.l._
...7..$3|.?.......NO/.3.,[email protected].. :..........}..l.n.Ao..
5. $..`..].|.w}..\...E.xT..Cm.O..........:E.z.....}~...b8...ur..9.}]..
..$g..`k.b...%h....nU...0;...&`.../.'3.......o...[..R&..[..i.e...-.#..
...\....n../..s|92..Y.<p ..L..!..h;....zc.....|.R.B.hgO.A8.8....O.d
......?...e.F .b..TMK...?.R#......!.pbH....x.._...f.Q..5.\....0..Uq#5;
..=....X.2...x...._.z..P.r5"2`.wb.X3.. #..e.kd.9UYen8x..ql....np.UF...
Z.*.1............(...<....b.mT{K..<I...9...c9O..`..#.2.u.]......
z_......A.USGo..'D|F.....7R.V.5..u.`.........5Jjk&q..D...p%0.$........
.aP...........mPZ*.q...H'....*n.'...V..........n..E..5.#.&......?....u
...l..Qw.f.nM-.5."..V@-..(.f=.._.....HLr]cj........]...nIE..:......0.l
[email protected]..`. ..^.#..a..vPq.yW.......D.......t.wFQ..9.r7..KFK...M..-...]N4
R.;.... .............%.G..O....3.3..c..}.._....e..&.........=..3._....
..N....#o......G.[*6x.i....k.Is./......7..W................%...ol...$1
.7..S*[email protected]..:.nSq8W. [.......`9..Z
.JYe..]J....?.x../5.. ...-.d....4s....I.*......\.....`.}.j?.{.V.xv.._{
...|.G..I.Z>[email protected].,..b.I<.v^%......k..?......4...7.=ZQ....8
...........
<<< skipped >>>

GET /top/rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:18 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Cache-Control: private

Content-Encoding: gzip

Content-Type: text/html; charset=UTF-8

Vary: Host,Accept-Encoding,X-Ssl

Age: 0

Via: http/1.1 yts276.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r11.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Transfer-Encoding: chunked

Connection: keep-alive
db5.............9is..... .t......$..{.N.6[c;.....$Zb..".-....$..c..73.
...@l..._..._?|q0..~...........a.....$...B.c.~...._([.X`..7D..L6)..~..
 .R....,....Q...d.n...............Y.h.Z..<.._.D...7z....<...w0..
...b.X..9.Q........x.6 [email protected]..$....lI A.
$P.SR'.....hd6D.....4.b~.M.7.O......z..Vl2}.#J..1WOtJ...w{..e-_).|W...
|.[......Nh.LL..._.r.....(.M...uTE...}...v.bb_.`....".Pf../.N...QF.bFe
<X*.B.f..|\.;7.9.....HZg.Yg./co..&.(Tk.jWC...<.b< .7..V..^...
r..*#2.....[./...v....~.....uj..A............>.f8..k6)[.K`.........
&.....~.....6o. .G%>.@?..........j.|W.5./z.yx...n'5....x.Mf.ry0..j.
z<.t[.a2.[j....Wy..UV.N..#4..P./.K.......h{.;.V'....wf...y.....O..9
..}...... .Q$<.....Sb..H..............&....xv.@.)'.ZG..k9..[<...
.hU.W1.g....%_(....hR..d.x!.?..Z..G:X.K..&.*..|QV..|A6b.Z..`......[...
..........6...i.......?=..GY.3...0...i.3....E....y.).......3|%...W.>
;....F...p.B.}../.D...wh../..D=..PoR...?............l....%R......=..$S
e/ 1.n.cl<(IP......1.L).....D.()......xd\....KZ......GL. ...f.."_..
[email protected].....`.C..)..C*.........^A(..Ks............
0....;...-<E..6..T..J.!....pT.Yf...$.8[.z....E....9..S...Wm....V.".
..MH.............WP........h..7Y.q....c.x....'.5U Uxh.v$....Ns[a.....,
B>%....^:.,[email protected]#...a.>p4.P.'~K8...H....E..Jo.........
w.y.1Y....U.wG..q....c..WS...Bji..,....;..m"....3oj....o.o........3..[
..E.)(e`[email protected]....?bhV(..oK...B.!^[email protected]'...
xxL.W).r*/..7k(. ....I....2.....uS......=.....B.`..,.c&c_..e...'..<<< skipped >>>

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:18 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 19o5q41ak3m6u

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

Via: http/1.1 yts276.global.media.ir2.yahoo.com (ApacheTrafficServer [cSsSfD]), http/1.1 r11.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 2

Connection: keep-alive

GET /__utm.gif?utmwv=4.7.2&utmn=209626249&utmt=event&utme=5(engine*engine_started)(1)&utmcs=UTF-8&utmje=1&utmhid=1654674914&utmac=UA-27085171-1&utmcc=__utma=999.1088082643.1430378700.1430378700.1430378701.1;+__utmz=999.1430378701000.1.1.utmcsr=(direct)|utmccn=(direct)%7utmcmd=(none);&gaq=1 HTTP/1.1

User-Agent: Java/1.6.0_18

Host: VVV.google-analytics.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Pragma: no-cache

Expires: Wed, 19 Apr 2000 11:43:00 GMT

Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Wed, 29 Apr 2015 21:31:17 GMT

Server: Golfe2

Content-Length: 35

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Age: 35624

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Wed, 19 Apr 2000 11:43:00 GMT..Last-Modified: Wed, 21 Jan 200
4 19:51:30 GMT..X-Content-Type-Options: nosniff..Content-Type: image/g
if..Date: Wed, 29 Apr 2015 21:31:17 GMT..Server: Golfe2..Content-Lengt
h: 35..Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-re
validate..Age: 35624..Alternate-Protocol: 80:quic,p=1..GIF89a.........
....,...........D..;..

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: static01.nyt.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: Apache

nnCoection: close

Last-Modified: Wed, 23 Jan 2013 20:33:05 GMT

X-API-Version: 4

Accept-Ranges: bytes

Content-Length: 15086

Content-Type: image/x-icon

Cache-Control: private, max-age=58114

Expires: Thu, 30 Apr 2015 23:33:46 GMT

Date: Thu, 30 Apr 2015 07:25:12 GMT

Connection: keep-alive

............ .h...6...  .... .........00.... ..%..F...(....... ..... .
....@.................................................................
.............................................`...............@........
............................... ......................................
.........................................................`............
...............`............... ...........@..........................
................................. ...@................................
...........................@...@......................................
.....................P.......`...............................@........
...............p......................................................
[email protected]................
...@...@...................................@...............`...p......
.........`............................................................
............................... ......................................
.............................0...........`... ...............`........
......................................................................
........fe..e/..ta..1...m/..oj..ts..rt..le.............G.....?(... ...
@..... ...............................................................
......................................................................
......................................................................
......................................................................
...............................................................0..

<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: static01.nyt.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Server: Apache

nnCoection: close

Last-Modified: Wed, 23 Jan 2013 20:33:05 GMT

X-API-Version: 4

Accept-Ranges: bytes

Content-Length: 15086

Content-Type: image/x-icon

Cache-Control: private, max-age=58094

Expires: Thu, 30 Apr 2015 23:33:46 GMT

Date: Thu, 30 Apr 2015 07:25:32 GMT

Connection: keep-alive

............ .h...6...  .... .........00.... ..%..F...(....... ..... .
....@.................................................................
.............................................`...............@........
............................... ......................................
.........................................................`............
...............`............... ...........@..........................
................................. ...@................................
...........................@...@......................................
.....................P.......`...............................@........
...............p......................................................
[email protected]................
...@...@...................................@...............`...p......
.........`............................................................
............................... ......................................
.............................0...........`... ...............`........
......................................................................
........fe..e/..ta..1...m/..oj..ts..rt..le.............G.....?(... ...
@..... ...............................................................
......................................................................
......................................................................
......................................................................
...............................................................0..

<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tools.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/plain

Last-Modified: Tue, 31 Mar 2015 20:32:08 GMT

Date: Thu, 30 Apr 2015 07:25:04 GMT

Expires: Thu, 30 Apr 2015 07:25:04 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

Server: sffe

Content-Length: 2030

X-XSS-Protection: 1; mode=block

Alternate-Protocol: 80:quic,p=1
...........Y.n.:.....E...t.....2........6d....-E.rU.~(....*$Y....$E...
....=L...... ..6..7..;1.D....h.-.F.. ...M.......&.........&.Q...y.JT.T
.D0.D.f?X..........$..4.Q...2..._...w?.x...}.....{.{ ....\@..|.....K..
^.~Y.... ....../.-`..K.94B4....f..u. .~..$.......s...8:i._.:.@......&g
t;.....'..Y..)..7...U....;[email protected].....:.5..H.gd$B.SSZ......~..XwF
.c....*P.:.U..P"..UF{..S.....Z..oV..;<.j.....>S..sz.4..~...D..{.
[email protected]~...;}'EF..i.......j......:....cgd....M..(
.0_..EAE.Ik.....{,.....].w...bc..l_.....^..*i.....3..w.N..<.|..@...
.k2..7l_.(....T?.?.-1m...e.YL...'..2.P.6<p7..7.w,..,.]..|.......w..
..fy....l..f.....YheW.......XN:.P./[.r. ......w....K...`n.}A*..y....Z.
...S.......^}V.q..@b......`*.}.....k..;>..3WW..^SSh...;"e.*lB..Q./.
[email protected].../.b...y .Q9:..YJe9...r....1...L..U...#.......b.-,%..n...n.q.!
Ya.;$......G.8.....q..g...e..x....E;[email protected]......$./.4)U.
i.tW.8..y@.........#n|j..8f...`...e.u....D...#Z..c.w.E2....tk8..-!6F&l
t;.5.`.}.....0. ...&..1....L...........>^"..|...)u.LYa[.F......?M".
/.5...P....W.*..v...y365k\h.4].........R..`..q.x..,..o.Y...vT.....K...
..b..~2. d]........{.....X...............n.x%|o.K?..hN.EOj..6.v.......
.h......T{... K...&..Z..:/(E.h......E-Q....E.....)|.{.4$2..$...5W.s.H.
........ .X...o9..P\....:q...X....& .....B.I.=.....t...|.........'2..!
..Jb...!...=...........X.5.?..O....#e......"..............M...._......
.@.;..*6.....c.4.d..J.].........k.d.A?....M.x.i...{..5.....g.^.....=..
...T.....}...c-.V..........._..,..V..`............PqC.?>P....t_<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tools.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Location: hXXps://VVV.google.com/chrome

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Date: Thu, 30 Apr 2015 07:25:05 GMT

Expires: Thu, 30 Apr 2015 07:25:05 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Content-Length: 176

Server: GSE

Alternate-Protocol: 80:quic,p=1
..........m....0.D.~...M{-1.56.E.....b...h ......e..ax...J.1)...uQ...}
a...d]......!b........T.u..].D@....>[email protected]).F....2.
GJ.u..k......ig....!.).=...../.........HTTP/1.1 302 Moved Temporarily.
.Location: hXXps://VVV.google.com/chrome..Content-Type: text/html; cha
rset=UTF-8..Content-Encoding: gzip..Date: Thu, 30 Apr 2015 07:25:05 GM
T..Expires: Thu, 30 Apr 2015 07:25:05 GMT..Cache-Control: private, max
-age=0..X-Content-Type-Options: nosniff..X-Frame-Options: SAMEORIGIN..
X-XSS-Protection: 1; mode=block..Content-Length: 176..Server: GSE..Alt
ernate-Protocol: 80:quic,p=1............m....0.D.~...M{-1.56.E.....b..
.h ......e..ax...J.1)...uQ...}a...d]......!b........T.u..].D@....>.
[email protected]).F....2.GJ.u..k......ig....!.).=...../.........<
/font>....

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tools.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Location: hXXps://VVV.google.com/chrome

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Date: Thu, 30 Apr 2015 07:25:08 GMT

Expires: Thu, 30 Apr 2015 07:25:08 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Content-Length: 176

Server: GSE

Alternate-Protocol: 80:quic,p=1

HTTP/1.1 302 Moved Temporarily..Location: hXXps://VVV.google.com/chrom
e..Content-Type: text/html; charset=UTF-8..Content-Encoding: gzip..Dat
e: Thu, 30 Apr 2015 07:25:08 GMT..Expires: Thu, 30 Apr 2015 07:25:08 G
MT..Cache-Control: private, max-age=0..X-Content-Type-Options: nosniff
..X-Frame-Options: SAMEORIGIN..X-XSS-Protection: 1; mode=block..Conten
t-Length: 176..Server: GSE..Alternate-Protocol: 80:quic,p=1....
..

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tools.google.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Moved Temporarily

Location: hXXps://VVV.google.com/chrome

Content-Type: text/html; charset=UTF-8

Content-Encoding: gzip

Date: Thu, 30 Apr 2015 07:25:08 GMT

Expires: Thu, 30 Apr 2015 07:25:08 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Content-Length: 176

Server: GSE

Alternate-Protocol: 80:quic,p=1
..........m....0.D.~...M{-1.56.E.....b...h ......e..ax...J.1)...uQ...}
a...d]......!b........T.u..].D@....>[email protected]).F....2.
GJ.u..k......ig....!.).=...../.........HTTP/1.1 302 Moved Temporarily.
.Location: hXXps://VVV.google.com/chrome..Content-Type: text/html; cha
rset=UTF-8..Content-Encoding: gzip..Date: Thu, 30 Apr 2015 07:25:08 GM
T..Expires: Thu, 30 Apr 2015 07:25:08 GMT..Cache-Control: private, max
-age=0..X-Content-Type-Options: nosniff..X-Frame-Options: SAMEORIGIN..
X-XSS-Protection: 1; mode=block..Content-Length: 176..Server: GSE..Alt
ernate-Protocol: 80:quic,p=1............m....0.D.~...M{-1.56.E.....b..
.h ......e..ax...J.1)...uQ...}a...d]......!b........T.u..].D@....>.
[email protected]).F....2.GJ.u..k......ig....!.).=...../..........
.

GET /sd?is=sm HTTP/1.1

User-Agent: Better Installer(Mozilla)

Host: install-cdn.theswiftrecord.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Pragma: no-cache

Content-Type: application/octet-stream

Server: Microsoft-IIS/7.5

Content-Disposition: attachment; filename=SwiftRecordSetup.exe

X-AspNet-Version: 4.0.30319

SVR: SP002C2

X-Powered-By: ASP.NET

p3p: CP="CAO PSA OUR"

Content-Length: 523256

Cache-Control: private, max-age=86400

Expires: Fri, 01 May 2015 07:21:56 GMT

Date: Thu, 30 Apr 2015 07:21:56 GMT

Connection: keep-alive

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................Z....... ...0.......p....@.........
................. ...............................................s....
......................................................................
.............p...............................text....X.......Z........
.......... ..`.rdata.......p.......^..............@[email protected].......
.....p..............@....ndata.......p...........................rsrc.
...............t..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h [email protected]...\r@._^3.
[.....L$...nD...Si.. ..VW.T.....tO.q.3.;5.nD.sB..i.. ...D.......t.G...
..t...O..t .....u...3....3...F.. ..;5.nD.r._^[...U..QQ.U.SV..i.. .

<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3ffn9rvm681fx.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:04 GMT

X-Cache: Error from cloudfront

Via: 1.1 f989b812753677758cd8909391e239ac.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Fttx_QazxJPb45T5oIDvO79Pp_5IQMSMW7cK4qb70Fv27a5vL8PxcQ==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3ffn9rvm681fx.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:04 GMT

X-Cache: Error from cloudfront

Via: 1.1 f989b812753677758cd8909391e239ac.cloudfront.net (CloudFront)

X-Amz-Cf-Id: GDB94-bv3hoAZy2QPL9dJfCzsP2gaAxTMY24WQ3uKifPgRg8eOnZww==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3ffn9rvm681fx.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:04 GMT

X-Cache: Error from cloudfront

Via: 1.1 f989b812753677758cd8909391e239ac.cloudfront.net (CloudFront)

X-Amz-Cf-Id: ZF7xoO-jQB_XrL-yKaQj_Ikx-Pkm3D-7TGSHkzcEonXkg9n5bF6mIg==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>..HTTP/1.1 403 Forbidden..Cont
ent-Type: text/html..Content-Length: 162..Connection: keep-alive..Serv
er: nginx..Date: Thu, 30 Apr 2015 07:25:04 GMT..X-Cache: Error from cl
oudfront..Via: 1.1 f989b812753677758cd8909391e239ac.cloudfront.net (Cl
oudFront)..X-Amz-Cf-Id: ZF7xoO-jQB_XrL-yKaQj_Ikx-Pkm3D-7TGSHkzcEonXkg9
n5bF6mIg==..<html>..<head><title>403 Forbidden</t
itle></head>..<body bgcolor="white">..<center><
;h1>403 Forbidden</h1></center>..<hr><center&g
t;nginx</center>..</body>..</html>....

GET /images/Tokyo/tokyoLightGrayStripesBG.jpg HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: dreejadsuld8c.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: image/jpeg

Content-Length: 3430

Connection: keep-alive

Server: nginx

Date: Wed, 29 Apr 2015 09:42:21 GMT

Last-Modified: Wed, 29 Apr 2015 08:47:22 GMT

ETag: "55409a9a-d66"

Expires: Wed, 29 Apr 2015 09:52:21 GMT

Cache-Control: max-age=600

Accept-Ranges: bytes

Age: 197

X-Cache: Hit from cloudfront

Via: 1.1 2d2eb60d814c8202a5a69fa957cd569d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: -Ce8G9BA3CSYn9s8fmbkShoTNLlGpCCgz_ZnlXSEwZJYs3gIl612dQ==

......JFIF.....H.H.....C..............................................
......................C...............................................
..........................D.."......................................".
...................U......a...........................................
.................?....................................................
......................................................................
......................................................................
.................................' x.eo...r...V...' x.eo...r...V...' x
.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.e
o...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo.
..r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...
r...V...' x.eo...r...V...' x.eo...r...V...' x.eo...r...V...' x......@.
[email protected]....]..l....]....=... }w..... }w...0
[email protected][email protected]....]..l....]....=... }w.......
......................................................................
...................................................................\..
.t.~M..@.:p? `*ipz.....4.=.\...........N......s.........K.8..K..%.....
..\...t.~M..@.:p? `*ipz.....4.=.\...........N......s.........K.8..K..%
.......\...t.~M..@.:p? `*ipz.....4.=.\...........N......s.........K.8.
.K..%.......\...t.~M..@.:p? `*ipz.....4.=.\...........N......s........
.K.8..K..%.......\...t.~M..@.:p? `*ipz.....4.=.\...........N......s...
......K.8..K..%.......\...t.~M..@.:p? `*ipz.....4.=.\...........N.

<<< skipped >>>

GET /affiliates/eula.html HTTP/1.1

Accept: application/x-ms-application, image/jpeg, application/xaml xml, image/gif, image/pjpeg, application/x-ms-xbap, */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: dreejadsuld8c.cloudfront.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 26 Apr 2015 04:55:23 GMT

Last-Modified: Sun, 26 Oct 2014 17:23:05 GMT

Expires: Sun, 26 Apr 2015 05:05:23 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 337

X-Cache: Hit from cloudfront

Via: 1.1 2d2eb60d814c8202a5a69fa957cd569d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: zh6IsdjjTOe2N48lY0YDl1-zeOmlkYwPaf36kcORPiygaOAoiDTDCQ==
1500.............Zks.F......N.......|.-y."!...P.P.... .)".....1S..{...
.R.g.Jl...}.{...>....F7..ZV.T]NO..Pu....?...Q4R..G.c...VEE..I..Y...
...:..Z........?...n...G......o......w>.o.d..U.../......4..`..?~{T.
.d]..i..;.~......y.Q....7i<,..<.....d...|...l.?..t..F.OeU$.....:
Xl..U;8...Q.~.vGw......E.I.....z.7S....q.I..f.q.DW.....U....|..(.u.1..
.z..3..|....A.....:.............P....X$..*.w..........s.;..]..........
u.?..%f...~....S..b...,..........5.(,Qm...w .NK...Y>......u.......}
n..C......8$....)..R..4IuwS....h...*...f.e.q7...<y...I.....:8...s#Z
/M./...B...s..|}[email protected]..)t..uJ.WR..._.LTvz. yV._.L.tz..6 ......
..e.......6.....#b.j.A..yw.[.p.a...6n.6;(u40..8.....&..DT.....EQ..k..J
D.C....zDq....W...X...f.W..D....I.:............~..........f..a.QZ....&
gt;f%.(..n....z.v.u.mCc..].......u$..S..UK<...."T.......dhR.U7i.3..
.....4.K.....6..-..]......'$Y..9$.....U>Et....y....M..M.2x.....`An|
.^.t'O.. !..m>.:8.KZ.........$C...f..Ll...4.<ZGm.$H{Q...........
z..m................p........|C.......i^.W.}'.>..*.....z .=,..7..L.
WY^..T./..zS&...w....g.x..O.U\$q.S....Y.S%*.7..................W..,^'8
......o..W..Z....Q.U.7bp...l5.E....=P....A.D;45....d.q...Jg....."...&l
t;._&...>(VQ..<......Q..v.....?@,...h...P8..i.<N.......fs5.u.
8...8v..-. .....OG..'O.....3{*1u....P..?TK...!..:...e.......6.N./.....
C...'...V&.].....|.b...\.D..J...Y...n-.j.j...u..G.....B.h.Z......s..dw
...9.\...D....]w.n..r&#...~..q4.St........&..3RC'pO.....p.C.2R..."7..6
x8.'#/..I..S......vd..r......I.9..79..B.4..^}ur....S..s...u2."...~<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:19 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: b5jugg5ak3m6v

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

Via: http/1.1 yts219.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), http/1.1 r04.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 0

Transfer-Encoding: chunked

Connection: keep-alive
807.............X{o.8....)./pq....l.I..l....}.6.^.(.J.,6....8n....}..$
7...m.y\s.l...f......._.{[email protected]$E.?........D,evb
.|...1R.C......|.G8 >..z..c`.........b...Y..;?..s...V..P.9.....59Uk
B.\NR2.^bI.....K.....QS....XS. .gAo&....).."#.@5..$........8.DN>^..
..q~..3I%#.W8.\...\..?..w..................3N%......i...,.3.b.\.t.Ea*P
.... FJ.....<...1.^k9a.^.....VY]......L..^.a,[email protected].
[email protected]?x....:...!...y.?...c=f=.z.(j.E..L....Ry;..X....\0.....$Bj...
..WQ.k^.kT..l._..X.....4...p..J...1*`.o....r1.E....).[J.M...Fcg.tb..dm
...w..i.g..Po.uv./..Q....>0F9..].s^.....x.M.a..7.....4...6&..Yh.q.K
.~{)...W.7.@..^...H.4..Rl$.....(u..h....LN..qd9.......];.T..r.....m...
V;0ON.;..'.9.......m..>?..F...$W.xB....3F2..-f..A..qH..%.......,.i{
..od.=.r.".L.";.h..-........"Ip..I.......\..w......{..{v...^I.#b.5....
(.~....yI.y...[r...{0...|.#...X......T...E...9M=$...Y.......c.|.$/..R.
..~.<Ep./.&od...eW..>5..J.^.,....g.*...)...[w...I.3".d5...<..
j..i<Uv.....>.v..5-.F..J..%.W....b.......qADo.....Z'Y....^.k.|..
...n(......i(.IHnh.......C.>.HcR{.J..^-m~..NS....}.7............".7
(.)....lK..v.....9.D..F..:?.I.nK.Q..Jn.......y..:...X......ED.{.Nj.BQ.
...`.......j'. ....'.%..RRm.....H....'I^1.F.......z.....h..G.:._[.9]..
...)~Z\..[........?..up60....._.:>.....w......V..~*bB..ZN...;R.~.C&
>..XWT.`......Q........P.........A.s-yV...8.Q..c.cA...J0H.KT.z..5..
j..,...q7,I..........(.....4.i(@.........{U.7$.0d.......L.".9.........
A*...3....k..VU...^....../ ...M.........5#...q...M.%........c.Y.o.<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: sports.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: private

Content-Length: 5430

Content-Type: image/x-icon

Date: Wed, 29 Apr 2015 23:00:02 GMT

ETag: "YM:1:d83eda8f-3aff-41f4-ab5e-c2546f7a2167000514e41a6e37fd"

Expires: Thu, 30 Apr 2015 23:00:01 GMT

Last-Modified: Wed, 29 Apr 2015 22:00:12 GMT

Server: ATS

x-ysws-request-id: 26cd17d4-51ff-4f6c-8f92-239883bb6907

x-ysws-visited-replicas: gops.use26.mobstor.vip.bf1.yahoo.com

X-Cache: HIT from logo1.global.media.bf1.yahoo.com

X-Cache-Lookup: HIT from logo1.global.media.bf1.yahoo.com:80

Via: HTTP/1.1 web7.use26.mobstor.bf1.yahoo.com UserFiberFramework/1.0, 1.0 logo1.global.media.bf1.yahoo.com:80 (squid/2.7.STABLE9), http/1.0 l2.ycs.dea.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r04.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Age: 30318

Connection: keep-alive
......  .... .....&......... .h.......(... ...@..... .................
..........;.p.5.o.6.o.6Dd.0...........................................
..............................................d.0.o.6Do.6.o.4...;...;.
p.3.o.3.n.3.q.3.n.3.r.7.n.5.o.6up.8Pn.7)i.2...........................
......m.3.n.6*q.8Po.7tn.5.n.4.n.3.q.3.n.3.n.3.p.3...;...;.q.3.s.4.s.4.
v.5.q.4.r.4.q.4.q.4.q.5.q.5.q.5.q.4.p.4.r.5.p.4.q.4.q.4.q.5.q.4.r.5.q.
5.q.5.q.5.q.4.q.3.r.4.u.5.s.4.r.3.p.3...;...;.t.5.w.5.v.5.y.6.u.5.w.6.
x.7.x.7.w.7.x.8.y.8.y.9.z.9.z.9.v.7.w.9.y.9.z.9.v.8.v.7.v.8.v.7.v.6.v.
6.v.6.z.7.x.6.v.5.t.5.r.3...;...;.u.5.x.6.{.7.y.6.y.7...W...V...U...T.
..S...S...P...N...N...H...E...>...;...;...?...H...K...N...P...Q...Q
...S...S...T...U...V..>y..................A}...Y...V...V...U...T...
T...Q...P...N...G...D...>...;...;[email protected]..
.U...X...X...Y...........................Z...W...W...X...W...V...S...Q
...N...J...F...@...;...;[email protected]..
V...........................Y....Y...Y...Y...Y...X...U...S...P...J...E
...?...;...;...A...K...P...U...W...X...Y...Y...Z...Z...[..............
`...]................\...\...Z...[...Z...W...T...Q...L...H...;...;...;
...A...M...Q...X...W...W...Y...Z...Y...\..t................]...]......
........x....[...\...\...[...Y...V...Q...L...G...:...;...;...B...N...S
...X...Z...[...[...\...\...^..............8{...\...]..6z..............
.`...]...\...\...\...Z...U...P...E...;...;...;...B...N...S...Y...Z...Z
...Z...[...[...................\...\...\...\...................\..<<< skipped >>>

GET /WORLD/index.html?eref=rss_world HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Server: Varnish

Retry-After: 0

Content-Length: 0

Location: hXXp://edition.cnn.com/WORLD/index.html?eref=rss_world

Accept-Ranges: bytes

Date: Thu, 30 Apr 2015 07:25:16 GMT

Via: 1.1 varnish

Connection: close

X-Served-By: cache-fra1242-FRA

X-Cache: MISS

X-Cache-Hits: 0

GET /utils/whatsmyip.jsp HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/html; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Thu, 30 Apr 2015 07:24:59 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 62

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........,.5.4.34..321.326....I*....J./. )...u........{.*...HTTP/1.1
 200 OK..Content-Type: text/html; charset=iso-8859-1..Content-Encoding
: gzip..Vary: Accept-Encoding..Date: Thu, 30 Apr 2015 07:24:59 GMT..Se
rver: Google Frontend..Cache-Control: private..Content-Length: 62..Alt
ernate-Protocol: 80:quic,p=1,80:quic,p=1.............,.5.4.34..321.326
....I*....J./. )...u........{.*.......


GET /track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&engine_started=&version_core=ver. 2.7.688, rev. 16741&version_partner=1.0.400&java_version=1.6.0_18&os=Windows 7&os_version=6.1 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Thu, 30 Apr 2015 07:25:00 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........)JL.NMQ.THL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w
4.07pu........D...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Thu, 3
0 Apr 2015 07:25:00 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ.THL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w4
.07pu........D.......


GET /track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&campaign_from_download=not_found&download_browser=not_found&campaign_extract_error=failed_installPath&download_url= HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Thu, 30 Apr 2015 07:25:03 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........)JL.NMQ0WHL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w
4.07pu........D...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Thu, 3
0 Apr 2015 07:25:03 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ0WHL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w4
.07pu........D.......


GET /track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&bootstrap_started= HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Thu, 30 Apr 2015 07:25:05 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w
4.07pu.......pD...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Thu, 3
0 Apr 2015 07:25:05 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w4
.07pu.......pD.......


GET /track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&history_ie=9 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Thu, 30 Apr 2015 07:25:07 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w
4.07pu.......pD...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Thu, 3
0 Apr 2015 07:25:07 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w4
.07pu.......pD.......


GET /track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&history_firefox=2 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Thu, 30 Apr 2015 07:25:10 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w
4.07pu.......pD...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Thu, 3
0 Apr 2015 07:25:10 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w4
.07pu.......pD.......


GET /track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&history_chrome=3 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Thu, 30 Apr 2015 07:25:12 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
...........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w
4.07pu.......pD...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Thu, 3
0 Apr 2015 07:25:12 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w4
.07pu.......pD.......


GET /track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&dev=false&history_opera=0 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: analytics.genieo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Thu, 30 Apr 2015 07:25:14 GMT

Server: Google Frontend

Cache-Control: private

Content-Length: 88

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

...........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w
4.07pu.......pD...HTTP/1.1 200 OK..Content-Type: text/plain; charset=i
so-8859-1..Content-Encoding: gzip..Vary: Accept-Encoding..Date: Thu, 3
0 Apr 2015 07:25:14 GMT..Server: Google Frontend..Cache-Control: priva
te..Content-Length: 88..Alternate-Protocol: 80:quic,p=1,80:quic,p=1...
..........)JL.NMQ0QHL..,.,.L-VH./R(-N-R.64wu6wu1.uqvq.515t..tq2..pq2w4
.07pu.......pD.....

GET /css?family=Abel HTTP/1.1

Accept: */*

Referer: hXXp://VVV.appshat.com/home

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: fonts.googleapis.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/css

Timing-Allow-Origin: *

Expires: Thu, 30 Apr 2015 07:23:36 GMT

Date: Thu, 30 Apr 2015 07:23:36 GMT

Cache-Control: private, max-age=86400

Content-Length: 155

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1
@font-face {.  font-family: 'Abel';.  font-style: normal;.  font-weigh
t: 400;.  src: url(hXXp://fonts.gstatic.com/s/abel/v6/3YEwT2a1878zysq9
2S8_9w.eot);.}.HTTP/1.1 200 OK..Content-Type: text/css..Timing-Allow-O
rigin: *..Expires: Thu, 30 Apr 2015 07:23:36 GMT..Date: Thu, 30 Apr 20
15 07:23:36 GMT..Cache-Control: private, max-age=86400..Content-Length
: 155..X-Content-Type-Options: nosniff..X-Frame-Options: SAMEORIGIN..X
-XSS-Protection: 1; mode=block..Server: GSE..Alternate-Protocol: 80:qu
ic,p=1..@font-face {.  font-family: 'Abel';.  font-style: normal;.  fo
nt-weight: 400;.  src: url(hXXp://fonts.gstatic.com/s/abel/v6/3YEwT2a1
878zysq92S8_9w.eot);.}...

GET /?retpath=http://yandex.ua/yandsearch?text=sdf&lr=147&redircnt=1428581802.1&fretpath=http://yandex.ua/yandsearch?text=sdf&lr=147&redircnt=1428581802.1 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: pass.yandex.ua

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: Cookie_check=1; yp=1746602702.sp.

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Thu, 30 Apr 2015 07:25:02 GMT

Content-Type: text/html

Content-Length: 178

Connection: close

Location: hXXps://pass.yandex.ua/?retpath=http://yandex.ua/yandsearch?text=sdf&lr=147&redircnt=1428581802.1&fretpath=http://yandex.ua/yandsearch?text=sdf&lr=147&redircnt=1428581802.1

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-cache, private, no-cache, no-store, must-revalidate, max-age=0
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx</center>..</body>..</html>....

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Vary: Host

X-App-Name: homepage

Cache-Control: no-cache

Content-Type: text/html; charset=utf-8

Date: Thu, 30 Apr 2015 07:25:31 GMT

X-Varnish: 413232563 413223781

Age: 182

Via: 1.1 varnish

X-Cache: HIT

X-API-Version: 5-5

X-PageType: homepage

Connection: close

Content-Encoding: gzip

Transfer-Encoding: chunked
3AF1.............}Ks.H......!.=aK.....,../Y...JrU.u8*@2I...6.Jf.....Y.
ffn.......'..n............A.a...A.( ..sN.g...M..{..Y.M......7......I.^
.Yk..o.^....`.......3..q'......9.5......r.c....XCf.....ss.s.Y...Cw....
....*...|wg....3..........7...S>3wr...o.pgd.....P.......[..........
...j..T3.J.m}...l..M....L.'.4?3.Sn.^<a... ....)g'....zW..B..`...W.3
.7~...z.H....xa..6....Y..NT9...>...........x.6..ln.....C......^...h
.......K9..b..z.<`.r..s.....3.M..{qc9#..pr..}../[........~r..<j.
....3$.n9y...?......5......n..6=.......~.z........R......mo...*.U..."c
.........G-....|.c..G%.?...T...p..*s....;f:".....|.z[...sw/(...`.....m
...}....q..?.~\1....I..$.r.'..r........R..M..$.G-/.. A~..P...}k....v~.
../....g.f......[>.!.....h*x.8oQ..].s.....y(..*J........b z)...c...
..:.f...`......."o[>X.{..0....7....q.^T).A.;.x.Qp.. ........s..y...
..z..Rws.~.;..>..s..}\.u...QAd.l....a.. ..-....b....H~........o....
......Z.........o...J.....3.c....%.........SjQ.......*7...|..AS}o...s.
s..9.QJ[..g.............2.Y...e......!.[....-..j....=..ro....$.t. ....
9....`..|L{=.._.-....R%/.....z..3.B..M}.:[.a... .V..{R.P.P..R&...P...t
.......3.....O... ....o.rGfn.$t....n......x..b.;`.O>.@!.#.f8...?.J.
 ..6S........05...'lJ..I.I........t.B...;[email protected]..?.o.n..]k...0_.S..
....spyA....;t..c>(p.......]....... n....QT....q.y.Y..2......7./..\
A..7......8..wFi...W..]q.B.n..1....c.}..... S.:.P.4.5...D0D.v...6.x...
.....i.}[email protected].....!..0/.x.._..>.._a......[.f...8....
....i..dd.J..y......7vs.p.~..)..}.z..............[...]..or.C$.....<<< skipped >>>

GET /id/100746255?region=world HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:24 GMT

Server: Apache

Vary: User-Agent

Content-Type: text/html; charset=utf-8

Via: 1.1 aicache6

Content-Length: 32581

Content-Encoding: gzip

X-Aicache-OS: 10.10.1.36:80

Connection: Keep-Alive

Keep-Alive: max=20
.............r.H.?...1....).cQ..............rU..*.D..."...fu.F........
.......'.s2..$.P.-......$. .............O...9= o.......^...M...Z.....$
}..6.e..n.X....@,[email protected].
p.....9r|.:...Cm.......].$..g9...1.y...d... ..<`>........V......
....d.f.......*..l1..I.1.1R^...>.....~.....j!V.. ....{.......S...&g
t;...g.6{.?.....b.!..w.........-...$.......`...0.6u..I....3/..>....
o.......A...b].u...[^.).....J.......:..........Y....]/H.O].....u..O..l
....7..(.......tJ&..}2..iG.q."]...A...A.>#;.EK..cu......V.....i....
.o.w...........g.6`[email protected]..{3..'../![{..."..5U`[ y.,.|#z.. l.kf0.k.
].w.../.Cw...X........$T.\;V#....h...;..>([fYU.Z...FH*..>.B....O
.a..W...^.oLw0m...m.>b..'Wa..V'.W..=Qta....Y.)...x....R......r..o..
......)....[...t..Zk.....~j8'..V...|.....N._...n./;._..wJk..a .=O..m..
G...9. .....Vz....K...#....{h..f......}.Q.2{.0......;..<..:~...4).A
......y.e...5LST...J.v....zSi.....G$.x.M.2.D..U..s.hju.....>.......
.x<p;...Q.....m:...Y.;.........V.c..cQ.......Z.5.X...k1.....O.fY..Z
x....^.....8..)08. ..@[.:.....S.......I.JA<..U..:....]8..`...@Gt..'
........vL.K...U.t.w..6;^H......m.....#..V..>9: ._.[..WC.......~.K.
........bPO>....h.d..K`.3..x..... pH......_m.7]K...&..W.Z..2.i.....
xOI.x...z]...M....t].W..O0....)..^.<.-.IO.=`...S....../.M.......x..
|.c.O.[.?m...@._.q3.7.]8..Qs..C...m....Uq.x0.....f!BN..9.c._....C..E..
....b...)..(.-..n.?..%T.fL..(xA;..1a......,..m..?...^."......w......R.
...Z&.j..........n.D..9...B...U........!.V..,.)>...j;.i.V......<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.cnbc.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Wed, 29 Apr 2015 21:45:16 GMT

Server: Apache

Keep-Alive: timeout=15, max=94

Content-Type: image/vnd.microsoft.icon

Via: 1.1 C aicache6

Content-Length: 15086

X-Aicache-OS: 10.10.1.23:80

Connection: Keep-Alive

Keep-Alive: max=20

Expires: Thu, 30 Apr 2015 21:45:16 GMT

......00.... ..%..6...  .... ......%........ .h....6..(...0...`..... .
.....$................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................................

<<< skipped >>>

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=123551-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: rHta6pQKuHdl5EkPoqS1SBs6ZG7NPPdcZctVOFaK02vsFHE AvGtKM l/1u9zmvg6smr lOZX/o=

x-amz-request-id: 07E3FC241E38F0D5

Date: Thu, 30 Apr 2015 07:22:03 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 123551-988407/988408

Content-Type: application/octet-stream

Content-Length: 864857

Server: AmazonS3
.[J.w...qYt\M.Fz.4.*.......o.....1K.pE..2....CpY%...~45...'...E...o.$.
...H.h..;o.r.~.98....'...Y.E........r.....C....'!^....i.=.*.(.........
.."...s...v..u..-."...Nm2\[email protected]>.-..\....I....z
.n?.......2...^..?/...a'..".A...D6P....Q.F....<.B6.a<{\..1V..' .
..3/...a.*..MkJ.....$ ...=b.z..5...#..O.W......^O..K...s....>..6.f!
<.S.{. '..Ich...h...f...8<\<`..ff.Y;.<=......:E.f|.Aj..*nN
/....[.S.l.....U....\........k....#p........>.Nvg....c..Q.....k...p
..q....;..<.....l..<..\y....{...fH...F..... [....B...Y.'..T..w.a
..9.....cCW.'S.k.......7.CY.t.....(.)IX...W...........T.......M/......
.uzfBNU.y.....s...W,&.>B....{E...^.v...%<...R...w........<.E=
c.. [email protected]..%..M][email protected]#R..X2X.5uUZ.Q.....
.tM.k.u.O.....G.Vz...,.JZ&J.'[email protected]
[email protected]..=v.....s;.Y...Zfy..e..m.G..0..i=.Y.$..ok...I .V...,.A
...K.gB..c..,.AEfS\....;.9.J..{//>.x_.t5i.6k}....I......I....R.....
..O..d..Y6eD.kG.Aj..,.....u...2Be....WRU?.36...9..N....l;.m..y....\...
...g.m'.Q..%f.#../......Yoe.......j."&.-.WB..'W.J|2..R^p\.2}.S^.[j.3..
3M.d..}1....}.X;[..f?o.h..W...[N..Q.P.JI...fc...E..bkhW.;&.f..........
AY.p...t.....3UP.^-'G..7.e.nL .!i\q{...M.'..=.K&.-..!.9<......p.bhX
.......[Tz1.k..n.QD.....>F..$.$9x.Q..f.e_.0...j.<...d.Y..MKL....
..8.;h.w.g...Q.{q..B..f4.O...hk.bf;.[)..._...DE8C.(I/..*..z.:.....s.#O
...[)(.lA.zC...b}..P.S.X..o....Z..0.....Y.$....mu..C...J..p....I.s~z..
Kr...Y..c:....Y..a.....z%. 7L...8t^..w..d..df...Yt...9.......Ru...<<< skipped >>>

GET /mirror/nerocrossrider/appshat_generic.exe HTTP/1.1

Range: bytes=71389-142779

User-Agent: Better Installer(Mozilla)

Host: d3zcfo8zs4s5u.cloudfront.net

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Content-Type: application/octet-stream

Content-Length: 71391

Connection: keep-alive

Date: Sun, 26 Apr 2015 06:08:59 GMT

x-amz-version-id: zdbgB_7owwl7Hq6LIKQBG0yBaPWISKtC

x-amz-meta-s3cmd-attrs: uid:500/gname:www/uname:www/gid:500/mode:33204/mtime:1415096893/atime:1415097003/ctime:1415096894

Cache-Control: max-age=3600

Last-Modified: Tue, 04 Nov 2014 11:01:28 GMT

ETag: "518879abe3170dabd172dfffcd165598"

Accept-Ranges: bytes

Server: AmazonS3

Content-Range: bytes 71389-142779/285558

Age: 980

X-Cache: Hit from cloudfront

Via: 1.1 1415e6a9d308119037d1fa89386da72a.cloudfront.net (CloudFront)

X-Amz-Cf-Id: ayBaNvjvW6VNXYTSq6BRvtAQeCbFpuW9HWGvcbvvnpKITtHwufWgfg==
...IK.#.ikv7..=....\z....if.J^.;,5!.._...MR..w.OX..&.....p:.........5.
L.iT.L.O.....7D.]b..........3.. 2=v.a.....^k....xp .`..y.1>...A.Q!.
.._.J.D.......j..].8v....>.P.\ei%..OU[.V.p.*ky..E*.D0).-l.B.....*..
aG.b^..T.yqu8.Np.'.Z&V`..-..2l..Bu.l ........4X.U..9p..}E|..J...".m..:
[email protected]$h...8D.s"..]......3.. .$..H.Sf.z.....q.Ke.....b......
.IO[[email protected].....].<.........g.mG
..as..ez|.C.......=p.^U|.`s6.).\).]........2j.....N....a...i\.m.<..
....8......z....=....i.s.2...r...n.=h.D".O.MN..a.S..f. .S.i....N>.O
;...>..4%.{.L....... m.....%.Hw.U<...."...ns.Z....).)`o:....O...
.0..SDt..|V.G...iU.d P..x..{`i[.X.Uh..@..`C...;6.\..y.]-W.... ...G9`.%
i~.G.......r#`...`...G....Z..KQA~'vL2XAM..(o......jU.....3........7...
[email protected].`....u...G......H.N.|..;#..G.n]J.Kx......t.i
f.8u.^....L..L..;..# 6...p ...........U..KU%....F...>....L.sZ.Cm.!.
.cllj...&.:......p..y.....ds_.....W..t2.,.I...Z..c.T?/&O...8..q..<:
Cp.....7&.D7.....e,2.)..G..FP.l. .N....(......I.......4&...8.1;...M...
=.2..%;.V).>[email protected].!..GHUZ.nnh..........n#.....F.v.S...
Zy.m..........;..k...3..(. .k.............,H.D.L.....K...`[.. C..7X.uq
.zV.t...m..`..H.....s.e..R.7...4.F..`.b!..N.pY...=%K...s.Tt*9.rR..A...
.xt.hR.k..25...=`...7.........&=....vK.A...4.d7y.....(....7.(..l.k...h
.C.w|..yP..#...lNI..\8....c...I&.h.[.=p... ...._......).;.>"@.....@
.n@..)...,....80.W......kh..z8.......W3S..E...3..H....^.t.L.\........3
G..b.....!.^....U......d..k.X...84P..%V........O._.rg.7.g..`G4.$u.<<< skipped >>>

GET /softwares/5/2/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:22:03 GMT

Content-Type: application/octet-stream

Content-Length: 22943014

Last-Modified: Mon, 05 Aug 2013 14:46:25 GMT

Connection: keep-alive

ETag: "51ffbac1-15e1526"

Content-Range: bytes 0-22943013/22943014

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L...#..O
.....................P......'C............@..........................`
................ ..........................................a..........
......................................................................
...........................text...D........................... .0`.dat
[email protected]...#.......$................
[email protected]@.bss..................................0..idata..................
[email protected]...@[email protected]....
[email protected].............................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U..WVS.......U..E....t...F
.........{B..H...H.......M..E..5H{B..D$...$....B..M..E.....SS...E...$.
D$... .B..M..E......M.WW......M.)..M..NT....NP........E.....}...VT....
....FP..E........}..VP........U.......FT.............}..........E..M..
.$..|.B..E..R...D$..E..D$...$....B.....<$....B..E..Q.}.;}...Q....~X
........F4..$....B...W..........$.E......E......D$.........B.RR.FX..$.
D$.....B..5..B.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$..{B.
....B...|.......T$...$..QQ.<$....B.S.M..E..D$...$....B.PP1....D

<<< skipped >>>

GET /services/xml/rss/nyt/InternationalHome.xml HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.nytimes.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: MF2=19hhj9gt8nsle; RMID=007f010126c35541d8d4000b

Cookie2: $Version=1


HTTP/1.1 200 OK

Content-Length: 8961

Content-Encoding: gzip

Date: Thu, 30 Apr 2015 07:25:10 GMT

Content-Type: text/xml;charset=UTF-8

Server: FeedsPortal

ETag: 1430374290000

Last-Modified: Thu, 30 Apr 2015 06:11:30 GMT

Connection: close
...........}_o.H.......^`....%[N.q<.e.Vb...N...(.%.b..."...........
...,w.I..=.......R...3...H.S.....S....y..{&......]..a./..O....y..~...#
..Q.<b*d,%.<ao^..sZ....$.l..E..I.^.J....O........x.....z...t....
4Vm.......f.......z.....6....w8j..............z....z.~,n..Dyc..H......
...2hV....t^/......9.....9........{......."6eq.....<.b..pn.....@...
.T....._......uw.....1...P....w.........{.C#...p....S&c..{it..l.~.!.Eo
v...;..wh.D............<..q.....I....u..wT7..!.._a-..../?....y7L.._
.*[email protected]}.>..w..L..'.....x....Y.dxS.....\.I..w. .t.-r.2.g3...
w..."]1Mh<?./.:J..)M..M....K:.4.....^..'g.7G..6.D.'....<....4..[
 <.s.......F_!...I.}......U}.._........D.s..~.ww.xrT..l...y.x.....(
[email protected]....`.~..b......K..D.....I'.E..8Dr*..
........j.........~p...........6..%..Q..p..#n..6.N..v.....s;n7Sn.h..5.
p.\..W....;. .......\..[`.=.!...J........u.....S..D1.t!.......,..?'3.E
......J"6N.J......N.I..><..kx.$R..g....rN."...t#.;...!..$c...1.s
..x../.@../ ~|.).._.@........?E._.t./......)..Y_*..Uc}........ #!A.o^.
/.81..H.?.e...p....K.p..tw.X..!S.iV$(....f......g..W...../..~...`_..;.
c.Eb.S.F....F......qw.6........h.H..{FA.U.....6.8..~..../....N.P..2K..
.R...........M@-.@L)....c.W.E.y..3x.........n/...PM..........%.......\
s...(.....F. P..$.....9v..t.5h..2.o..F...<.......k....T...1........
k...$ ...K.`..s...A.......sK?.i[.?........f'.q..2...&...T..........Z..
C.V..h..a.g`Hvi.S...C....cw....... ".x...-..hq...)g2~.`......F.._....F
.....w=g.F_|t."......d..k...u.5..(.S.i]....;......G.......Qw0.....<<< skipped >>>

GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:01 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: bgl3di5ak3m6d

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: HIT from ncache4.global.media.ir2.yahoo.com-2

X-Cache-Lookup: HIT from ncache4.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache7.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache7.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache4.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache7.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts274.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSfW]), http/1.1 r07.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 9

Transfer-Encoding: chunked

Connection: keep-alive
7b5.............Xmo.8..|.....8@)Y........m....).rE.P.e..D-I.q....J.-;v
..6...,.....3.....x.....K..T.......q..a......&......-t..L.H.H..O\WNr'e
n.....p.8....P.Jy.P...Ng..a.l. Z.[........|..F....j.xn..D!sm..!..36C/.
a.cg..%O....]P..)3.YM0....q...6e......F..a....>E4!J33.x. ........n.
;."...-.i...A.6..g.....('x...[.....[.e.......[.J.."2k...........-..[eX
.......k..B\w.;$#bn8....#..&.?...{.....:!#....p...T...)..Q4y$R.c=..E..
..oP.>....[7l>.*....t......'Jj.{."...Uk.P.H.....F.M.P1r...jp..id
=....g(....S...=C..-0.{.&..#V.".....e.`...R....j(V2Ee...A....Y..i#.g..
g8b.I.Z...Q..EQ...T]..%..8%..^.]V......s%s..|.......<jlk....~......
99Y3.......)...-...m74......zN.. ~.....x..s~."..E...1v..............f@
/;..K..............n......7u......I/F...I!......`....'.&.v..a..=..Z..]
.2.oE<|....~..Xh..E](q..v.f.|...0ub.b...4%j.......Zff...EX.uE..R...
^G..G]1..  .XK....'.T7.^r..K!U..O}.wG.#..w.......^..)9.Q.........O... 
.."p.c.|..,.....Z..?"x..x.7..~...L.=54..........'.*...GT.to...T..P0.CV
..j..Zm.....E....f.Sj..Q.sl4....p*C.)..-3LIn....9..f......L.qH....8...
......r..yt.#..#6....AsGg....1...~.F.WK..E...-.....).f.s...(lS........
2..].s.....{..9......1>?.I..3.q.Q .}............=F.l..K1........P".
jp.,w...t.....$.Z.p<^.>.%-.9F..E......{)....*.......f........`..
.r.d.=....e~I&o.O.G..?:.......!.'\D.......].x[...98h.j..:a....$T..... 
.2..?....K..:.....;..?.0.4.S...^[0.%...N.<...F}:x.EH4s.]....JT<.
..A.1....7..`.............^?.I.=$h.x.A......}...T..`..LW...)^..,h?....
.X..."....`.!..7...VU.h..pzSbGtH......uR.U?.H.5#t.. ...n....wq...C<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: private

Content-Length: 5430

Content-Type: image/x-icon

Date: Wed, 29 Apr 2015 22:56:35 GMT

ETag: "YM:1:d83eda8f-3aff-41f4-ab5e-c2546f7a2167000514e41a6e37fd"

Expires: Thu, 30 Apr 2015 23:00:01 GMT

Last-Modified: Wed, 29 Apr 2015 22:00:12 GMT

Server: ATS

x-ysws-request-id: ca40970c-a32a-4bd0-b219-2183de0d52df

x-ysws-visited-replicas: gops.use26.mobstor.vip.bf1.yahoo.com

X-Cache: HIT from logo2.global.media.bf1.yahoo.com

X-Cache-Lookup: HIT from logo2.global.media.bf1.yahoo.com:80

Via: HTTP/1.1 web13.use26.mobstor.bf1.yahoo.com UserFiberFramework/1.0, 1.0 logo2.global.media.bf1.yahoo.com:80 (squid/2.7.STABLE9), http/1.0 l9.ycs.dea.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r07.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Age: 30520

Connection: keep-alive
......  .... .....&......... .h.......(... ...@..... .................
..........;.p.5.o.6.o.6Dd.0...........................................
..............................................d.0.o.6Do.6.o.4...;...;.
p.3.o.3.n.3.q.3.n.3.r.7.n.5.o.6up.8Pn.7)i.2...........................
......m.3.n.6*q.8Po.7tn.5.n.4.n.3.q.3.n.3.n.3.p.3...;...;.q.3.s.4.s.4.
v.5.q.4.r.4.q.4.q.4.q.5.q.5.q.5.q.4.p.4.r.5.p.4.q.4.q.4.q.5.q.4.r.5.q.
5.q.5.q.5.q.4.q.3.r.4.u.5.s.4.r.3.p.3...;...;.t.5.w.5.v.5.y.6.u.5.w.6.
x.7.x.7.w.7.x.8.y.8.y.9.z.9.z.9.v.7.w.9.y.9.z.9.v.8.v.7.v.8.v.7.v.6.v.
6.v.6.z.7.x.6.v.5.t.5.r.3...;...;.u.5.x.6.{.7.y.6.y.7.z.8.|.8.}.9...;.
..<...<.~.<...<...<.{.:.|.;.}.;.z.:.{.:.|.:.z.:.{.:.{.9
.{.9...:.{.8.|.8.w.6.t.5.t.5...;...;.v.5.z.7...9.}.8.}.9...9...;...;..
.<...=...=...>...>...?...=...>...>...>...>...>
...>...<...<...;...<...<.|.8.~.8.y.6.t.5...;...;.w.5...
9...;...;...;...;...<...>...>[email protected]................
[email protected]...?...>...>...>...>...=...;...<.}.8.v.5...
;...;.z.7...:...<...<...>...?...?...A...A...B...C...C...D....
...............D...C...B...C...C...B...B...?...>...>...<.}.8.
z.7...;...;...9...<...?...>[email protected].
..................G...F...G...F...E...D...D...B...A...A...>...<.
z.8...;...;...8...=...A...A...A...B...D...D...F...F...F...H...H.......
............H...H...H...G...G...F...E...D...B...A...A...<.z.8...;..
.;...;...?...C...D...C...D...F...G...H...I...J...J...K............<<< skipped >>>

GET /rss/topstories HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:22:35 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 67gbqstak3m1r

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Thu, 30 Apr 2015 07:27:35 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 160

Content-Length: 18344

Via: http/1.1 yts256.global.media.ir2.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r07.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Connection: keep-alive
...........}.r.9..{...o.Lw.Aq.E..'(Y.ik.(./.T.HB...*...|.}9.7_r3.(....
E... b.GfU!.@nH....>.>..:QQ...j......<...|..}.......T'..7.d;.
...>..i....H..ay".QTv.`#.77..F.....;.a(}. U./.}.....'...(f.4.J&O7..
_..*.=.PBxo.F...y}[email protected].._.7.wV.T..
..?...e..}F...e"....n....i.9.E*......WX'.f.J}....?x.Q.<.._.....&L2.
.P.....$.~.._..`@o...o.>..1.h.....E|Q...\....8.<..!~y..#.R.<.
.. w.v}9..D.,...%...)S!..tq3`.q...$........._....C....)a}1...q..q....G
P<........Z...q.d..e...i.?...*.D.S0~}.2N.!b..{.Q-.6..^.mD{.*^.F..u.
........w.....|....Q.c0j....y.F....I}.}|...]W>.]w...E.S..a?!x2.....
..3...1.H=@3..>.6..J..E..........z.............v.s.=.t......y......
..._..<ac..C..:..P"...dk...>...U*T./.....J..G...8K'.T.@.#....a".
..r..>..D...=........C.1lG...|...T..2x5.J.....h.#U..,...4...5....~.
..y<...H...>....IgC._......i./.HJ.(.a......@.`o......o..%^..R..5
e.P~N.X.Q....../.Y.\C.1g0.....!......f.......|%...........Nz......N.HL
X.]...2.....Y..;...Q..,.5......6W.k.V...Ly...yq: ..#f.X....%.....V>
.W.c.....v~7.Q..xW.Q!.!..b.SE.u(.(.v...f.....`/.`..%H.....V.u....~j..6
.;....L......~_I.c/......?.u..uRb.. .=..5..Y..k[%X.h..'Y..J.j'...-.K..
.F...U..<.D.. .r}3..L.;[email protected]...
.6r.p{[email protected]_..|....x...>{J.|.v.9}....JI'1.h2.6.c
9X.d.=.XX.|.R.nf...../......_.....3.=.l..)..r....C.\..'sB.^........%,.
....\I....9{..U..k..3a]->.X.......G.S.m....;.9hN...4W..'........f..
hW..[......W..Y.......r..}.......X:}).d.R...5...x..[......hU6[.J{.<<< skipped >>>

GET /rss/topstories HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:22:35 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: 67gbqstak3m1r

X-Frame-Options: SAMEORIGIN

Cache-Control: max-age=300, public

Expires: Thu, 30 Apr 2015 07:27:35 GMT

Content-Type: text/xml;charset=utf-8

Content-Encoding: gzip

Vary: Accept-Encoding,X-Ssl

Age: 160

Content-Length: 18344

Via: http/1.1 yts256.global.media.ir2.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r07.ycpi.dea.yahoo.net (ApacheTrafficServer [cHs f ])

Server: ATS

Connection: keep-alive
...........}.r.9..{...o.Lw.Aq.E..'(Y.ik.(./.T.HB...*...|.}9.7_r3.(....
E... b.GfU!.@nH....>.>..:QQ...j......<...|..}.......T'..7.d;.
...>..i....H..ay".QTv.`#.77..F.....;.a(}. U./.}.....'...(f.4.J&O7..
_..*.=.PBxo.F...y}[email protected].._.7.wV.T..
..?...e..}F...e"....n....i.9.E*......WX'.f.J}....?x.Q.<.._.....&L2.
.P.....$.~.._..`@o...o.>..1.h.....E|Q...\....8.<..!~y..#.R.<.
.. w.v}9..D.,...%...)S!..tq3`.q...$........._....C....)a}1...q..q....G
P<........Z...q.d..e...i.?...*.D.S0~}.2N.!b..{.Q-.6..^.mD{.*^.F..u.
........w.....|....Q.c0j....y.F....I}.}|...]W>.]w...E.S..a?!x2.....
..3...1.H=@3..>.6..J..E..........z.............v.s.=.t......y......
..._..<ac..C..:..P"...dk...>...U*T./.....J..G...8K'.T.@.#....a".
..r..>..D...=........C.1lG...|...T..2x5.J.....h.#U..,...4...5....~.
..y<...H...>....IgC._......i./.HJ.(.a......@.`o......o..%^..R..5
e.P~N.X.Q....../.Y.\C.1g0.....!......f.......|%...........Nz......N.HL
X.]...2.....Y..;...Q..,.5......6W.k.V...Ly...yq: ..#f.X....%.....V>
.W.c.....v~7.Q..xW.Q!.!..b.SE.u(.(.v...f.....`/.`..%H.....V.u....~j..6
.;....L......~_I.c/......?.u..uRb.. .=..5..Y..k[%X.h..'Y..J.j'...-.K..
.F...U..<.D.. .r}3..L.;[email protected]...
.6r.p{[email protected]_..|....x...>{J.|.v.9}....JI'1.h2.6.c
9X.d.=.XX.|.R.nf...../......_.....3.=.l..)..r....C.\..'sB.^........%,.
....\I....9{..U..k..3a]->.X.......G.S.m....;.9hN...4W..'........f..
hW..[......W..Y.......r..}.......X:}).d.R...5...x..[......hU6[.J{.<<< skipped >>>

HEAD /topstories/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 301 Redirect

Date: Thu, 30 Apr 2015 07:25:16 GMT

Via: http/1.1 yts245.global.media.ir2.yahoo.com (ApacheTrafficServer [c s f ]), http/1.1 r07.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: no-store

Location: hXXp://news.yahoo.com/

Content-Type: text/html

Content-Language: en

Content-Length: 401

Age: 0

Connection: keep-alive

....

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:01 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

X-Yahoo-Request-Id: bgl3di5ak3m6d

X-Frame-Options: SAMEORIGIN

Content-Type: text/html;charset=utf-8

Content-Encoding: gzip

X-Cache: HIT from ncache4.global.media.ir2.yahoo.com-2

X-Cache-Lookup: HIT from ncache4.global.media.ir2.yahoo.com-2:3128

X-Cache: MISS from ncache6.global.media.ir2.yahoo.com

X-Cache-Lookup: MISS from ncache6.global.media.ir2.yahoo.com:4080

Via: 1.1 ncache4.global.media.ir2.yahoo.com-2:3128 (squid/2.7.STABLE9), 1.1 ncache6.global.media.ir2.yahoo.com:4080 (squid/2.7.STABLE9), http/1.1 yts233.global.media.ir2.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 r07.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Server: ATS

Cache-Control: max-age=0, private

Expires: -1

Age: 15

Connection: keep-alive

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=8913819001430378702

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:25:03 GMT

Content-Type: text/plain; charset=utf-8

Content-Length: 2539

Last-Modified: Wed, 29 Apr 2015 14:37:06 GMT

Connection: close

ETag: "5540ec92-9eb"

Accept-Ranges: bytes

User-agent: *.Disallow: /?.Disallow: /404.html.Disallow: /about.html.D
isallow: /adddata.Disallow: /advanced_engl.html.Disallow: /advertising
.Disallow: /articles.Disallow: /chisla.html.Disallow: /cgi-bin/.Disall
ow: /cgi/.Disallow: /cy.Disallow: /dzen.html.Disallow: /i/.Disallow: /
ie3/yandsearch.Disallow: /keyboard_qwerty.html.Disallow: /logotypes.Di
sallow: /norobot.Disallow: /polling.Disallow: /redir.Disallow: /region
s.html?.Disallow: /s/.Disallow: /setup.Disallow: /skazki.Disallow: /su
bscribe/confirm.pl.Disallow: /subscribe/view.pl.Disallow: /yaca.Disall
ow: /ya.Disallow: /yandsearch.Disallow: /catalog/?text=.Disallow: /mse
arch.Disallow: /themes.Disallow: /showcaptcha.Disallow: /sitesearch.Di
sallow: /sl/*.html.Disallow: /403.html.Disallow: /404.html.Disallow: /
500.html.Disallow: /adresa-segmentator.Disallow: /all-supported-params
.Disallow: /cgi-bin/hidereferer.Disallow: /cgi-bin/set-intl.Disallow: 
/cgi-bin/xmlsearch.pl.Disallow: /cgi-bin/yandpage.Disallow: /cgi-bin/y
andsearch.Disallow: /click|/cy.Disallow: /clck.Disallow: /cycounter.Di
sallow: /dzen.Allow: /design-school$.Allow: /edu$.Allow: /edu/$.Disall
ow: /edu/tasks.Disallow: /edu/teachers.Disallow: /edu/test.Disallow: /
edu/ping.Disallow: /experiments.xml.Disallow: /family.Disallow: /famil
ysearch.Disallow: /formfeedback.Disallow: /goto_issue/.Disallow: /goto
_rubric/.Disallow: /i/yandex-big.gaf.Disallow: /ie3/yandsearch.Allow: 
/jobs$.Allow: /jobs/$.Disallow: /images-data.Disallow: /images.html.Di
sallow: /images/*.Allow: /images/$.Allow: /images/smart/$.Allow: /

<<< skipped >>>

GET /softwares/5/2/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=5735753-11471507

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:22:03 GMT

Content-Type: application/octet-stream

Content-Length: 5735755

Last-Modified: Mon, 05 Aug 2013 14:46:25 GMT

Connection: keep-alive

ETag: "51ffbac1-15e1526"

Content-Range: bytes 5735753-11471507/22943014
[email protected]...#(..F.A.fzo.;......i..k.....X....."...!.i}&}"G....|z... ..WV
..`.l....D....Y...z.(P.....85...%./.(.aj.-c...c.......v..t....]....\..
...6U..c96..Y.a.<........9...Q..........%...]..oN..Q........\Pc...L
'9d.#. ....:#...R.....GJ3..=o..i.".;.=.~[......s[8...{..9..Rz..f.c.{A.
...V......z.$......M..(j.....)...z....&....c..O.4G...6\.XK]B......!...
0..0......,..p.F..*.....N..>......-.&-u ......V..*2.~.e9....1......
.9]~.b..x.=..V..(...ouVn".....\:2V."S. (..K..e...b.F.>7RC.....H.}d.
..m.....3....)...83.a3...g.RZ....y..9.......t..c..?}...u{..r.....}$R%.
A........y.......F` %J..k.....As"......|.}X.5..........'.....W..-..:.3
.];|..S..._..CO.3..{,.U=..y...`M...."..l:q).h..K.|./A...J .. O........
g......o".#..8}F...p.!^k)..y3...aJ....<....N@J.....|3.s...M..jD....
.Yb...i..;0e....D.....!..F.s~V._/..&....1....i.U.Q.6....s.*.(.0*..%...
S....&g....jp.!.`.... .IB.?.M.............."CLU.....1N._..W.....f....G
.a.hXp<q..H....p...4./...c.........'.....&......b..`.~(,$.UyKM.Y.s.
...h..8.`...Y...z..%..R..{)GO...G."a..k.JG`..,...d..?......v$..3...PAb
Y..$...O...]/.%..._B{H.'R...L...>..v......P... .P..1......5g.....?.
.....X.1.....S.b....2.V.gW...up..P... m..#..=..I.o/.]P...}j....WgY...w
...i...-&..%.VU.c........A.........?`...I!xo...l..X..{.5.}GQ....d..&..
1..R.. ..uT..k.}.v...4.c..`.W..S..#..;Xvm5~....:.#..Jc.k.4!.......g...
...5n.Y..s~.~.......].d...&....?....Er.......a.B.CP7...S_@a/..HX....z.
...4.k.sM..N(j.!..z?O.....bSJ...2.....i..".F.>)..N.....uG......&..4
K..4<,Q....h].b.XU...XoO.4..|"*cH..x..u...Vj/>.]......E)...k<<< skipped >>>

GET /yandsearch HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 302 Found

Date: Thu, 30 Apr 2015 07:25:02 GMT

Location: hXXp://yandex.ua/yandsearch?rdrnd=50263&lr=147&redircnt=1430378702.1

X-Yandex-Items-Count: 10

Cache-Control: private

Set-Cookie: ys=wprid.1430378702191310-1092326783508399841711588-man1-4557; path=/; domain=yandex.ru

Content-Type: text/plain

Content-Length: 0

HTTP/1.1 302 Found..Date: Thu, 30 Apr 2015 07:25:02 GMT..Location: htt
p://yandex.ua/yandsearch?rdrnd=50263&lr=147&redircnt=1430378702.1..X-Y
andex-Items-Count: 10..Cache-Control: private..Set-Cookie: ys=wprid.14
30378702191310-1092326783508399841711588-man1-4557; path=/; domain=yan
dex.ru..Content-Type: text/plain..Content-Length: 0......

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:04 GMT

Last-Modified: Mon, 27 Apr 2015 14:56:24 GMT

ETag: "30a04c4-6fb-514b5f31db600"-gzip

Accept-Ranges: bytes

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/plain

Content-Length: 504
..........}.M.. .....9X9X..l.v..Z.v/.w...&....$..........<..;0|....
_..v.(.W..u..../.....z.A.N....B.&./E.L...J ..z..6...y...&,..a...m...xC
...<.W_...(=.~.....OV.O..v..Y.j....0.p.....G..]...4V ....|....C.; O
[email protected]>..).`.y6.3aQ..yD\N...<.../.80...?.7. J....B.-
.R#e...$........i#....o.O].bx.p...M.*.\....J....-..;s..V.K1..&"..8D.9!
..=Q.lt.M..c..[...q.j.~....D...Q'..!SL4CAsVJ.7h4..s'..-...%p.>....u
......k....Q3....X.....Y3....LY..T.....[x.}#.....w.aU?.....yC..A...;..
......Y..Z........'.....K....HTTP/1.1 200 OK..Date: Thu, 30 Apr 2015 0
7:25:04 GMT..Last-Modified: Mon, 27 Apr 2015 14:56:24 GMT..ETag: "30a0
4c4-6fb-514b5f31db600"-gzip..Accept-Ranges: bytes..Vary: Accept-Encodi
ng..Content-Encoding: gzip..Content-Type: text/plain..Content-Length: 
504............}.M.. .....9X9X..l.v..Z.v/.w...&....$..........<..;0
|...._..v.(.W..u..../.....z.A.N....B.&./E.L...J ..z..6...y...&,..a...m
...xC...<.W_...(=.~.....OV.O..v..Y.j....0.p.....G..]...4V ....|....
C.; [email protected]>..).`.y6.3aQ..yD\N...<.../.80...?.7. J..
..B.-.R#e...$........i#....o.O].bx.p...M.*.\....J....-..;s..V.K1..&"..
8D.9!..=Q.lt.M..c..[...q.j.~....D...Q'..!SL4CAsVJ.7h4..s'..-...%p.>
....u......k....Q3....X.....Y3....LY..T.....[x.}#.....w.aU?.....yC..A.
..;........Y..Z........'.....K......<<< skipped >>>

GET /rss/edition_sport.rss HTTP/1.1

Accept-Encoding: gzip,deflate

Host: rss.cnn.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/xml; charset=UTF-8

ETag: z62ukkjsglalMvPCOau4u9YkWpE

Last-Modified: Thu, 30 Apr 2015 07:22:12 GMT

Content-Encoding: gzip

Transfer-Encoding: chunked

Date: Thu, 30 Apr 2015 07:25:18 GMT

Expires: Thu, 30 Apr 2015 07:25:18 GMT

Cache-Control: private, max-age=0

X-Content-Type-Options: nosniff

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=1,80:quic,p=1
1C9F.............].s.8........./..X<u}.L..s8.;.s.. ..i............l
.9l..W...-S....>.F...7qD..T.H..1w....O.a2.k... .........|..l.q.p..l
...v2~.unT.Cb......I....H>.k...~g...T...Q..o...O.yJ... ..a.....d..q
.B....I..l...".".:....[6.8.^.;g..E 1...Y.;....2..L1a1W).......;.d....Q
..'.3/`I.#|..,./.>|@r...T..Eg.1.>....%1`5.v..x~...O.0...n.......
X....._.F|......;R>.Bd..)....N.0.3N.>S.%>....1.....^!....I.)Q
..!W...3..|...q..0...9IE..z..b!...N....K&9...<......g.$..e8.....'b.
.K..(...r..g3!....99999..._.6.|t...........T..0.....}rt..Eg...G..4....
..0^r..<.2Z...z~....T4..uvy'.'(T.HL.~....(..p...-@C.........,......
b./:..m......L..1.1Z.p....g......g....._...#..<..,U.K.(.......m.A} 
........y....C......._.... .=`.$T.#.|..v.'@' .,h......bFf".|2.9Q).A.o.
o.....N...Q.r...`...1......#l:............k.h.........|^.......$k.Z.&l
t;....;l2}.....=[k.Wz.U$.>y.....(....RO.#@...<._..}2.....$sr...&
lt;d.PJ.Qy..-'.N............S".D....p.........XF.A .......e....%...D1R
.....Ap...BQ ....).]<..>...k...'..^..Cc0t.?i..".. .G...;..=...5.
4w..._i ....`.T.t.......6..L..Fq..\.................../.R...S......:.)
...lI=......&4..........2...$......X..@?......g..A/..F.K.....&.O....4?
O.]R.........u..A...{...=....<.........`$.:?.....C.....Fl.P!.....=.
.0..].1*.......W...DBL........Nc.P..........Z....t]....f..B......C..*.
K.9y.K.R..)W(..".8.....u..$T.K......7.YB...........?;...xz..y...5..._(
 ...`.%...h....<[B.|.}........s.6..W..............[.,._v..;f..as..|
x.....T.,>Z.....pP....<=.......~...B...D.YE,&.d.6V..!l.>&<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEGO+CyDUoFQBjrKVo87pCRc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.4.7

Content-Type: application/ocsp-response

Content-Length: 1725

content-transfer-encoding: binary

Cache-Control: max-age=368599, public, no-transform, must-revalidate

Last-Modified: Mon, 27 Apr 2015 13:50:01 GMT

Expires: Mon, 4 May 2015 13:50:01 GMT

Date: Thu, 30 Apr 2015 07:26:42 GMT

Connection: keep-alive
0..........0..... .....0......0...0......N$p...v....1.;..vn....2015042
7135001Z0s0q0I0... ...................F....0.yV......{&.K......&......
.c.. ..T.............20150427135001Z....20150504135001Z0...*.H........
.....o.6.......b...#..JN...W.......3.....03}....#..[.#..z58v....U.hD..
.f...z8s...Y...C....EPn.t.z....m~.. V..)..!...\.j.....P.........ZY....
r...T/.. ...Asq.*.D..1........(}.....fi.\..cb...D.4.$P]`.~....zbx..VV)
."O..0.."....S.c..~q[!`......(..,.z.@\$..h..G..J.......0...0...0......
......F...I]A([email protected]...*.H........0..1.0...U....US1.0...U....VeriSign
, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at http
s://VVV.verisign.com/rpa (c)101.0,..U...%VeriSign Class 3 Code Signing
 2010 CA0...150225000000Z..150526235959Z0..1.0...U....US1.0...U....Ver
iSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1VeriSign Class 
3 Code Signing 2010 OCSP Responder0.."0...*.H.............0.........q&
lt;...A...#......A...u..Lz.............o..D.vQ%..s.......f....e../jI.d
.W.....|K;.j5...#.B%.]..~S.... .|;S.&.....N..`...5.....!D.p....M/.. ..
;j...q..`6...2.Ck..BnLHvCZn%....,.w.Ooi..z'...\.Yx......b..L...5.o..o.
.{..}.........%e.....N..._i........*Bc....:yQg.........0...0...U....0.
0....U. ...0..0....`.H...E....0..0(.. .........hXXps://VVV.verisign.co
m/CPS0b.. .......0V0...VeriSign, Inc.0.....=VeriSign's CPS incorp. by 
reference liab. ltd. (c)97 VeriSign0...U.%..0... .......0...U........0
... .....0......0"..U....0...0.1.0...U....TGV-B-31830...*.H...........
...-..^.........f.P`...s.....8.....V.......... .... B.(@-)6.Rf....<<< skipped >>>

GET /home/smt_istartsurf.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: VVV.girlliuxiaowei.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:21:59 GMT

Content-Type: application/octet-stream

Content-Length: 671328

Last-Modified: Thu, 30 Apr 2015 03:13:41 GMT

Connection: keep-alive

Expires: Sun, 03 May 2015 07:21:59 GMT

Cache-Control: max-age=259200

Content-Range: bytes 0-671327/671328
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........*...D...D.
[email protected][email protected][email protected][email protected]...
[email protected]............
[email protected]............
@.......................................... ..............."..`.......
[email protected]................
...............text....P.......R.................. ..`.rdata...^...p..
.`...V..............@[email protected]...$O.......,[email protected].
....... ......................@[email protected]..................
@..B..................................................................
......................................................................
......................................................................
......................................................................
............................................U..j.h.NG.d.....P....T.H.3
.P.E.d......M..E....Q...e.P......M.......E.....j.j..M..K...j.j..M.Q.M.
.K....E......E..M.d......Y..]...U..Q.M..E.P.pn.....P.M..4.....].......
..........U..Q.M.j.j..E.P.M.Q.U.R.M..a.....]..............U..Q.M..M...
....E...]...........U..Q.M..M......P.E.P.M..d...P.M........]........U.
.....M..E..H.;M.r..M......;E.s..M.......U..B. E.;E.s..M..Q. U..U..M...
... E..E..E.;E.s..M..M.... U..E..H. M.;.w..M.......U..B. E. E..E..M..Q
..U. U..U..E..H.;M.s.j..U.R.M..?....E.;E.tS.M.Q.M.......E..E.P.M..<<< skipped >>>

GET /pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=appshat_madness&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=3&index_in_screen=1&index_in_session=3&0.6446431586493143 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:37 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Thu, 30 Apr 2015 07:23:38 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..HTTP/1.1 20
0 OK..Server: nginx..Date: Thu, 30 Apr 2015 07:23:38 GMT..Content-Type
: image/jpeg..Transfer-Encoding: chunked..0......

GET /pinger?event_type=install_complete&installer_source=better_installer&software_type=sponsored&muid=96d78f35e7b7ea4fc32736d428df43b4&client_uid=3dcb990301cdcc4caf3f2b66db05a4ce&uniqid=9c129a294d7cc0fe9ed53d890dbde85f&affiliate_id=vlcplayerpnua&software_id=vlcplayerjiix&sponsored_id=geneio_non_search_for_pc&tokyo_csrf2_key=78a6803fb1a14d79e70e7711c203424a&tokyo_csrf2_timestamp=1430378516&slot_number=4&index_in_screen=1&index_in_session=4&0.4295342589493141 HTTP/1.1

Accept: */*

Referer: hXXp://bi.bisrv.com/vlcplayerpnua/vlcplayerjiix/3dcb990301cdcc4caf3f2b66db05a4ce?v=2.0&muid=96D78F35E7B7EA4FC32736D428DF43B4

Accept-Language: en-US

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

Host: bi.bisrv.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 30 Apr 2015 07:23:39 GMT

Content-Type: image/jpeg

Transfer-Encoding: chunked

0..HTTP/1.1 200 OK..Server: nginx..Date: Thu, 30 Apr 2015 07:23:39 GMT
..Content-Type: image/jpeg..Transfer-Encoding: chunked..0..

GET / HTTP/1.1

Host: VVV.google.com

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Language: en-US,en;q=0.5

Accept-Encoding: gzip, deflate

Connection: keep-alive


HTTP/1.1 302 Found

Cache-Control: private

Content-Type: text/html; charset=UTF-8

Location: hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=XdhBVYTwBpGDNITQgNAB

Content-Length: 260

Date: Thu, 30 Apr 2015 07:23:09 GMT

Server: GFE/2.0

Alternate-Protocol: 80:quic,p=1
<HTML><HEAD><meta http-equiv="content-type" content="te
xt/html;charset=utf-8">.<TITLE>302 Moved</TITLE></HE
AD><BODY>.<H1>302 Moved</H1>.The document has mov
ed.<A HREF="hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=XdhBVYTwBpGD
NITQgNAB">here</A>...</BODY></HTML>..HTTP/1.1 302
 Found..Cache-Control: private..Content-Type: text/html; charset=UTF-8
..Location: hXXp://VVV.google.com.ua/?gfe_rd=cr&ei=XdhBVYTwBpGDNITQgNA
B..Content-Length: 260..Date: Thu, 30 Apr 2015 07:23:09 GMT..Server: G
FE/2.0..Alternate-Protocol: 80:quic,p=1..<HTML><HEAD><m
eta http-equiv="content-type" content="text/html;charset=utf-8">.&l
t;TITLE>302 Moved</TITLE></HEAD><BODY>.<H1>
302 Moved</H1>.The document has moved.<A HREF="hXXp://VVV.goo
gle.com.ua/?gfe_rd=cr&ei=XdhBVYTwBpGDNITQgNAB">here</A>..
.</BODY></HTML>....

GET /__utm.gif?utmwv=4.7.2&utmn=1992595107&utmt=event&utme=5(engine*bootstrap_started)(1)&utmcs=UTF-8&utmje=1&utmhid=1653241485&utmac=UA-27085171-1&utmcc=__utma=999.292792641.1430378705.1430378705.1430378705.1;+__utmz=999.1430378705617.1.1.utmcsr=(direct)|utmccn=(direct)%7utmcmd=(none);&gaq=1 HTTP/1.1

User-Agent: Java/1.6.0_18

Host: VVV.google-analytics.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Pragma: no-cache

Expires: Wed, 19 Apr 2000 11:43:00 GMT

Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Date: Wed, 29 Apr 2015 21:31:17 GMT

Server: Golfe2

Content-Length: 35

Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate

Age: 35628

Alternate-Protocol: 80:quic,p=1

GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..
Expires: Wed, 19 Apr 2000 11:43:00 GMT..Last-Modified: Wed, 21 Jan 200
4 19:51:30 GMT..X-Content-Type-Options: nosniff..Content-Type: image/g
if..Date: Wed, 29 Apr 2015 21:31:17 GMT..Server: Golfe2..Content-Lengt
h: 35..Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-re
validate..Age: 35628..Alternate-Protocol: 80:quic,p=1..GIF89a.........
....,...........D..;..

GET /affiliates/eula.html HTTP/1.1

Accept-Encoding: gzip,deflate

Host: dreejadsuld8c.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 26 Apr 2015 04:55:23 GMT

Last-Modified: Sun, 26 Oct 2014 17:23:05 GMT

Expires: Sun, 26 Apr 2015 05:05:23 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 522

X-Cache: Hit from cloudfront

Via: 1.1 761f19bc2f5721b0be0a41147e1e925f.cloudfront.net (CloudFront)

X-Amz-Cf-Id: boRpIedBj5K9wyC_yrcYio0pa-bCUWKx8-d9GTOSzL5NG1-6KnHHnw==
1500.............Zks.F......N.......|.-y."!...P.P.... .)".....1S..{...
.R.g.Jl...}.{...>....F7..ZV.T]NO..Pu....?...Q4R..G.c...VEE..I..Y...
...:..Z........?...n...G......o......w>.o.d..U.../......4..`..?~{T.
.d]..i..;.~......y.Q....7i<,..<.....d...|...l.?..t..F.OeU$.....:
Xl..U;8...Q.~.vGw......E.I.....z.7S....q.I..f.q.DW.....U....|..(.u.1..
.z..3..|....A.....:.............P....X$..*.w..........s.;..]..........
u.?..%f...~....S..b...,..........5.(,Qm...w .NK...Y>......u.......}
n..C......8$....)..R..4IuwS....h...*...f.e.q7...<y...I.....:8...s#Z
/M./...B...s..|}[email protected]..)t..uJ.WR..._.LTvz. yV._.L.tz..6 ......
..e.......6.....#b.j.A..yw.[.p.a...6n.6;(u40..8.....&..DT.....EQ..k..J
D.C....zDq....W...X...f.W..D....I.:............~..........f..a.QZ....&
gt;f%.(..n....z.v.u.mCc..].......u$..S..UK<...."T.......dhR.U7i.3..
.....4.K.....6..-..]......'$Y..9$.....U>Et....y....M..M.2x.....`An|
.^.t'O.. !..m>.:8.KZ.........$C...f..Ll...4.<ZGm.$H{Q...........
z..m................p........|C.......i^.W.}'.>..*.....z .=,..7..L.
WY^..T./..zS&...w....g.x..O.U\$q.S....Y.S%*.7..................W..,^'8
......o..W..Z....Q.U.7bp...l5.E....=P....A.D;45....d.q...Jg....."...&l
t;._&...>(VQ..<......Q..v.....?@,...h...P8..i.<N.......fs5.u.
8...8v..-. .....OG..'O.....3{*1u....P..?TK...!..:...e.......6.N./.....
C...'...V&.].....|.b...\.D..J...Y...n-.j.j...u..G.....B.h.Z......s..dw
...9.\...D....]w.n..r&#...~..q4.St........&..3RC'pO.....p.C.2R..."7..6
x8.'#/..I..S......vd..r......I.9..79..B.4..^}ur....S..s...u2."...~<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: dreejadsuld8c.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:03 GMT

X-Cache: Error from cloudfront

Via: 1.1 761f19bc2f5721b0be0a41147e1e925f.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 8Fqwj83hPhMca1M4se9c3cSlYB3vVAAw_0nUvauiSBQjHiJe-VHbxA==
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: dreejadsuld8c.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:03 GMT

X-Cache: Error from cloudfront

Via: 1.1 761f19bc2f5721b0be0a41147e1e925f.cloudfront.net (CloudFront)

X-Amz-Cf-Id: tJ0aqDGt73Yv2aVLHNJR4VwKbIyXzs5G9gneMpMTxtRpnkHyfIjPtw==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: dreejadsuld8c.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:03 GMT

X-Cache: Error from cloudfront

Via: 1.1 761f19bc2f5721b0be0a41147e1e925f.cloudfront.net (CloudFront)

X-Amz-Cf-Id: b9EHJr-iLencCWWMmoPoWdJD6FqvyuPXgESi4n8k9a-DQCttQO9pjQ==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: dreejadsuld8c.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:03 GMT

X-Cache: Error from cloudfront

Via: 1.1 761f19bc2f5721b0be0a41147e1e925f.cloudfront.net (CloudFront)

X-Amz-Cf-Id: mpyHJsWuKKzTiJn-45nRbAhMolGJfpMkkQzOhm2e2l_yvUMq-QaWTQ==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>..HTTP/1.1 403 Forbidden..Cont
ent-Type: text/html..Content-Length: 162..Connection: keep-alive..Serv
er: nginx..Date: Thu, 30 Apr 2015 07:25:03 GMT..X-Cache: Error from cl
oudfront..Via: 1.1 761f19bc2f5721b0be0a41147e1e925f.cloudfront.net (Cl
oudFront)..X-Amz-Cf-Id: mpyHJsWuKKzTiJn-45nRbAhMolGJfpMkkQzOhm2e2l_yvU
Mq-QaWTQ==..<html>..<head><title>403 Forbidden</t
itle></head>..<body bgcolor="white">..<center><
;h1>403 Forbidden</h1></center>..<hr><center&g
t;nginx</center>..</body>..</html>....

HEAD / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: ya.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=8913819001430378702

Cookie2: $Version=1


HTTP/1.1 200 Ok

Server: nginx

Date: Thu, 30 Apr 2015 07:25:07 GMT

Content-Type: text/html; charset=UTF-8

Connection: close

Cache-Control: no-cache,no-store,max-age=0,must-revalidate

Expires: Thu, 30 Apr 2015 07:25:08 GMT

Last-Modified: Thu, 30 Apr 2015 07:25:08 GMT

Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' hXXps://yastatic.net *.yandex.ru yandex.ru *.yandex.net hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.yandex.net yandex.st yastatic.net *.yastatic.net ws://portal-xiva.yandex.net wss://portal-xiva.yandex.net wss://push.yandex.ru; img-src data: 'self' hXXps://yastatic.net *.yandex.ru yandex.ru *.tns-counter.ru *.gemius.pl hXXps://*.yandex.ru hXXps://yandex.ru hXXps://*.tns-counter.ru hXXps://*.gemius.pl yandex.st *.yandex.net yastatic.net *.yastatic.net; report-uri hXXp://VVV.yandex.ru/log/csp?from=yaru.ru&showid=22891.14387.1430378707.9796&h=s72&yu=8913819001430378702;

P3P: policyref="/w3c/p3p.xml", CP="NON DSP ADM DEV PSD IVDo OUR IND STP PHY PRE NAV UNI"

X-Frame-Options: DENY

X-XRDS-Location: hXXp://openid.yandex.ru/server_xrds/

Content-Encoding: gzip

GET /news/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

X-Cache-Action: HIT

X-Cache-Hits: 269

Vary: Accept-Encoding

Cache-Control: public, max-age=3600

X-Cache-Age: 1646

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Date: Thu, 30 Apr 2015 07:24:50 GMT

Location: /news

X-PAL-Host: pal168.back.live.telhc.local:80

Content-Length: 20

Connection: Keep-Alive

........................

GET /news HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Cache-Control: max-age=60, stale-while-revalidate

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

X-News-Data-Centre: telhc

Content-Language: en-GB

X-PAL-Host: pal179.back.live.telhc.local:80

X-News-Cache-Id: 88255

Content-Length: 32823

Date: Thu, 30 Apr 2015 07:25:07 GMT

Connection: keep-alive

X-Cache-Action: HIT

X-Cache-Hits: 3

X-Cache-Age: 43

X-LB-NoCache: true

Vary: X-CDN,Accept-Encoding
.............v.:...|.Z....t$m.n..9.q....mbg...s.(...S......k.o....|.|.
[email protected]...{[email protected](.~{........9b#ol.......Y.N.[..<)0..)8....k...
./...8|`|.......&...=....n..  .....o......1}.9..:...T...'.P..}..S.....
..=.h..3y....q..=?....W..c.y.........@...'O.. h...HVj.4(U.sWw..g....O.
5..0....'U..z#^....q..WX....a......v.i~...f...k..p.z.cp....86.v.......
...}*.._..i........k&}t..../.....{0....tm..........q.kX..v...-.W....e.
.........j.A....KU.}.s.....B...T.g.C.......=#..........^..M)a...`lv..f
....P`# .NA....E...k.]...D....?.  ..K.......7O.y.._Qn-.y..}.4.T.]..#.W
.21.....C...D-y.{@.|Z._.&.7S.......t.<.B.V.q...7.....1...{#.Y......
..Q$.i%}.Tr....4..X........Yo5......fc{c..Y....A.k.k.X..T.zS...0<..
]]s.J..?.k.e...!..f.YWPXL....AG..&nV.Y34..........,....1(4.......N.U{.
..2^..P...g..A.L&&.A...._...E......._...W.e...>.c.f;.B..R./....=..A
rW..4.9~NbS..Y]..Y<N.<.{.....E..$y.....f...X.*.L$3 O........f.J.
..R0.Z.dVa.....Q].. [email protected]..$.Tt-*...>.........&.....
._...6..ll..dL.s=.....P..Y...5Z;...p..V.]........]zt4.e\*..l._y....%.h
....Ni..(.C*...H.Cx...&T0e.3......e......U...2Ts.e..`..!...w......[..!
.u.W.Xv....R..R.>7........y.!.....}..|.C*].=.....33..2...7M...:.x.2
=..R......J...h.6.4 ..z..z..~Y}...2.7.=.x..K...TdJ...%.*R..C...L.. E..
>....<E....K..2.......p...J..F..L......WW...n...QR#...Q.4....L-.
&..-}.....r.q.S.......]<........}.....\.y....(.sBd.................
\..w....U.9.]h..t=.....=.3......g..EBy..>w.......qu.a....Q.a.a....B
Rj...D{.d;...S. .y.S...kM.................?A..k.L9...#v\.K0....sA.<<< skipped >>>

HEAD /news/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

X-Cache-Action: HIT

X-Cache-Hits: 293

Vary: Accept-Encoding

Cache-Control: public, max-age=3600

X-Cache-Age: 2081

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Date: Thu, 30 Apr 2015 07:18:12 GMT

Location: /news

X-PAL-Host: pal163.back.live.telhc.local:80

Content-Length: 20

Connection: Keep-Alive

....

HEAD /news HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Cache-Control: max-age=60, stale-while-revalidate

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

X-News-Data-Centre: telhc

Content-Language: en-GB

X-PAL-Host: pal119.back.live.telhc.local:80

X-News-Cache-Id: 73513

Content-Length: 32823

Date: Thu, 30 Apr 2015 07:25:09 GMT

Connection: keep-alive

X-Cache-Action: HIT

X-Cache-Hits: 7

X-Cache-Age: 37

X-LB-NoCache: true

Vary: X-CDN,Accept-Encoding

....

GET /news/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: Apache

X-Cache-Action: HIT

X-Cache-Hits: 269

Vary: Accept-Encoding

Cache-Control: public, max-age=3600

X-Cache-Age: 1646

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

Date: Thu, 30 Apr 2015 07:24:50 GMT

Location: /news

X-PAL-Host: pal168.back.live.telhc.local:80

Content-Length: 20

Connection: Keep-Alive

........................

GET /news HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Cache-Control: max-age=60, stale-while-revalidate

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

X-News-Data-Centre: telhc

Content-Language: en-GB

X-PAL-Host: pal119.back.live.telhc.local:80

X-News-Cache-Id: 73513

Content-Length: 32823

Date: Thu, 30 Apr 2015 07:25:09 GMT

Connection: keep-alive

X-Cache-Action: HIT

X-Cache-Hits: 8

X-Cache-Age: 37

X-LB-NoCache: true

Vary: X-CDN,Accept-Encoding
.............v.:...|.Z....t$m.n..9.q....mbg...s.(...S......k.o....|.|.
[email protected]...{[email protected](.~{........9b#ol.......Y.N.[..<)0..)8....k...
./...8|`|.......&...=....n..  .....o......1}.9..:...T...'.P..}..S.....
..=.h..3y....q..=?....W..c.y.........@...'O.. h...HVj.4(U.sWw..g....O.
5..0....'U..z#^....q..WX....a......v.i~...f...k..p.z.cp....86.v.......
...}*.._..i........k&}t..../.....{0....tm..........q.kX..v...-.W....e.
.........j.A....KU.}.s.....B...T.g.C.......=#..........^..M)a...`lv..f
....P`# .NA....E...k.]...D....?.  ..K.......7O.y.._Qn-.y..}.4.T.]..#.W
.21.....C...D-y.{@.|Z._.&.7S.......t.<.B.V.q...7.....1...{#.Y......
..Q$.i%}.Tr....4..X........Yo5......fc{c..Y....A.k.k.X..T.zS...0<..
]]s.J..?.k.e...!..f.YWPXL....AG..&nV.Y34..........,....1(4.......N.U{.
..2^..P...g..A.L&&.A...._...E......._...W.e...>.c.f;.B..R./....=..A
rW..4.9~NbS..Y]..Y<N.<.{.....E..$y.....f...X.*.L$3 O........f.J.
..R0.Z.dVa.....Q].. [email protected]..$.Tt-*...>.........&.....
._...6..ll..dL.s=.....P..Y...5Z;...p..V.][email protected]
........PXa-.J.....!.K.]..........f^.V..p....<9J._s.......*m.vx.h6.
..yP1A...5B...*>.um.....<S.....bM.J.S.....g{......O.T^.....o#.5&
.Q..?i..H-..k.....t..M.N...=..^.\...wb..1..*.h.W......rB^..V..sc..M.w.
s0.......J..G/..N...i.Q/'....q..i....x....Y..m.G.X#......J.....{)0..5.
.n..G../[email protected]`_/..7......c.fyW.r.dF.....%[email protected]
....1.........*...|1..S....!j.>?7t.g|.0.2<..U..x.f...6..........
..Z.............A.j;..h0..=..L.W...............|..N...........'...<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

X-Cache-Action: HIT

X-Cache-Hits: 71538

Cache-Control: max-age=86400, public

X-Cache-Age: 55664

Content-Type: image/x-icon

Date: Thu, 30 Apr 2015 07:25:08 GMT

Accept-Ranges: bytes

ETag: "3be-5093aa6381640"

X-PAL-Host: pal106.back.live.telhc.local:80

Last-Modified: Tue, 02 Dec 2014 12:13:05 GMT

Content-Length: 958

Connection: Keep-Alive

..................&...  ..............(....... ...........@...........
........................................c...R...c...R...c.............
......................................................................
....(... ...@.........................................................
......................................................................
......................................................................
......................................................................
................................................x.................p...
..........p...............p................................w.....p....
p.....p...............................................................
......................................................................
......................................................................
......................................................................
....................................................

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

X-Cache-Action: HIT

X-Cache-Hits: 3

Cache-Control: max-age=3600, public

X-Cache-Age: 630

Content-Type: text/plain

Date: Thu, 30 Apr 2015 07:20:56 GMT

Accept-Ranges: bytes

ETag: "6046-513ea5206b6c0"

X-PAL-Host: pal127.back.live.telhc.local:80

Last-Modified: Fri, 17 Apr 2015 12:00:03 GMT

Content-Length: 24646

Connection: Keep-Alive

# Version 3.1.8.User-agent: Googlebot.Disallow: /iplayer/episode/*?fro
m=r*.Disallow: /iplayer/cy/episode/*?from=r*.Disallow: /iplayer/gd/epi
sode/*?from=r*.Sitemap: hXXp://VVV.bbc.co.uk/news_sitemap.xml.Sitemap:
 hXXp://VVV.bbc.co.uk/video_sitemap.xml.Sitemap: hXXp://VVV.bbc.co.uk/
sitemap.xml.Disallow: /_programmes.Disallow: /606/.Disallow: /aboutthe
bbc/insidethebbc/search.Disallow: /academy/chinese-trad/search.Disallo
w: /afrique/search.Disallow: /apps/cbbc.Disallow: /apps/flash.Disallow
: /apps/ide.Disallow: /apps/ids.Disallow: /apps/ifl.Disallow: /apps/if
l-restricted.Disallow: /apps/ifl-static.Disallow: /apps/ifltestsite.Di
sallow: /apps/iflx.Disallow: /apps/nr.Disallow: /apps/query.Disallow: 
/apps/t.Disallow: /arabic/search.Disallow: /arts/yourpaintings/artdete
ctive/.Disallow: /arts/yourpaintings/feedback/sent/.Disallow: /arts/yo
urpaintings/images/guidedtours/.Disallow: /arts/yourpaintings/newslett
er/error/.Disallow: /arts/yourpaintings/newsletter/success/.Disallow: 
/arts/yourpaintings/newsletter/unsubscribe/.Disallow: /arts/yourpainti
ngs/paintings/search.Disallow: /azeri/search.Disallow: /bbctrust/searc
h.Disallow: /bengali/search.Disallow: /burmese/search.Disallow: /cbbc/
find.Disallow: /cbbc/newsroundfind.Disallow: /cbbc/search.Disallow: /c
beebies/search.Disallow: /cbeebies/searchresults.Disallow: /cgi-bin.Di
sallow: /cgi-perl.Disallow: /cgi-perlx.Disallow: /cgi-store.Disallow: 
/corporate2/bbctrust/search.Disallow: /corporate2/insidethebbc/search.
Disallow: /corporate2/mediacentre/proginfo/search.Disallow: /corpo

<<< skipped >>>

GET /news/election-2015-32526461 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: VVV.bbc.co.uk

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: BBC-UID=f5c544119db80d83e43b1fb5516ba113647bdc6a1e48b3e943559a6d8d3ba0080Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)

Cookie2: $Version=1


HTTP/1.1 200 OK

Server: Apache

Cache-Control: max-age=60, stale-while-revalidate

Content-Type: text/html; charset=utf-8

Content-Encoding: gzip

X-News-Data-Centre: telhc

Content-Language: en-GB

X-PAL-Host: pal154.back.live.telhc.local:80

X-News-Cache-Id: 36034

Content-Length: 28009

Date: Thu, 30 Apr 2015 07:25:09 GMT

Connection: keep-alive

X-Cache-Action: HIT

X-Cache-Hits: 2

X-Cache-Age: 36

X-LB-NoCache: true

Vary: X-CDN,Accept-Encoding
.............v.9.0..}.}.8.K$K.%..d.#.r.....*O...I. .V2..E2K.w.....M.Q.
........$....u......@ .............o..8..{....smo...W.....A..x8...9.5.
_....|.|.X.h.JF..F..M......Z.....w......l...A....G..#....j.S..w....._;
.'S;rz..X..".A....>..j.....i)....|......=.n....c?pxX.<......q.0.
X?..*{...3>.Y.......O..kh....g`..P.5.a?p.X........7c...l{......,.s.
G.F.3 [email protected][email protected]/....t....>...o........v.Y....
U...Z....c/.fF.b..7.s......f.<...../................p......X}..=...
..x.cI......z.z...g.d...][...m....6.Z.yE.F=.....,.......*.W.....|r..E.
 .. ...$n6:.....5L.HW9..5...?.0....[k.b?...&...(.@3CM$...0t"...b.o.Z.&
gt;.l..^.e.....;v.........`.y|..D..F........=.y.N.....1..........A....
..V..l6>NG...mlnt.....z.Qk...!..n....0...... .'.;.u];....//.Ua.....
A.P../....... #q~.......X...gw...*.=.j....t.?...ORCJO.....`.....3,R...
.?.....K=.X.F.?G..Sm..M....#K..Z.Fr.r!...P7.....n.3'B5:....IV9:[email protected]
......b..\'....].&..po...9.Q.X.t&.. ......?......;..@.)............I].
S.z.'.^...Z?.MB....B....$...;....?.&?Bo...2.6P.57k............fk......
<n....$....8.xm........$...: l....G~....._....}DH...o<.X..~~....
)=1..{........loo4r...Y.v.-.z.....%."@_..Vk.3.g..)..K....6...j(X_.....
..6O{....f.c.%/.U..h^8....k...#.K..s..W}.........V.5.....h..%..7SU....
..i{.....0.rX.g...sX............go.......w.....q>o|..m.j.........&l
t;..Q..t..9..J.>...3..D..0.%gy.{4.. .9....g.;#...1L..#@.>.....xq
...u.j.I...d....8..u......h.r.a....._'...<.oe ..Ve7.&...}.........s
..c..k......&a.\...p...WU.}g.)..][.....t.@i............<kU>4<<< skipped >>>

GET /v4/sof-ient/535559167_198339_B48A115F?action0=xa.geoip&action2=visit&update0=ref,smt&update1=nation,us&update2=language,en&update3=version,2.8.8.2102&update4=chptid,smt HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:34 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"1.43 ms","message":"store 3 action and 5 upd
ate "}..0......

GET /v4/sof-ient/535559167_198339_B48A115F?action1=install.smt HTTP/1.1

Connection: Keep-Alive

User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

Host: xa.xingcloud.com


HTTP/1.1 200 OK

Server: nginx/0.7.67

Date: Thu, 30 Apr 2015 07:23:34 GMT

Content-Type: text/html; charset=utf-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.3

xa-api-version: v4

48..{"stats":"ok","time":"1.39 ms","message":"store 1 action and 0 upd
ate "}..0..HTTP/1.1 200 OK..Server: nginx/0.7.67..Date: Thu, 30 Apr 20
15 07:23:34 GMT..Content-Type: text/html; charset=utf-8..Transfer-Enco
ding: chunked..Connection: keep-alive..X-Powered-By: PHP/5.3.3..xa-api
-version: v4..48..{"stats":"ok","time":"1.39 ms","message":"store 1 ac
tion and 0 update "}..0..

GET /?retpath=http://yandex.ua/yandsearch?lr=147&redircnt=1430378702.1&fretpath=http://yandex.ua/yandsearch?lr=147&redircnt=1430378702.1 HTTP/1.1

Accept-Encoding: gzip,deflate

Host: pass.yandex.ua

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: Cookie_check=1; yp=1746602702.sp.

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Thu, 30 Apr 2015 07:25:02 GMT

Content-Type: text/html

Content-Length: 178

Connection: close

Location: hXXps://pass.yandex.ua/?retpath=http://yandex.ua/yandsearch?lr=147&redircnt=1430378702.1&fretpath=http://yandex.ua/yandsearch?lr=147&redircnt=1430378702.1

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Cache-Control: no-cache, private, no-cache, no-store, must-revalidate, max-age=0
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx</center>..</body>..</html>....

GET /softwares/5/2/vlc-2.0.6-win32.exe HTTP/1.1

Range: bytes=0-

User-Agent: Better Installer(Mozilla)

Host: download.betterinstaller.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

Server: nginx

Date: Thu, 30 Apr 2015 07:22:03 GMT

Content-Type: application/octet-stream

Content-Length: 22943014

Last-Modified: Mon, 05 Aug 2013 14:46:25 GMT

Connection: keep-alive

ETag: "51ffbac1-15e1526"

Content-Range: bytes 0-22943013/22943014

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L...#..O
.....................P......'C............@..........................`
................ ..........................................a..........
......................................................................
...........................text...D........................... .0`.dat
[email protected]...#.......$................
[email protected]@.bss..................................0..idata..................
[email protected]...@[email protected]....
[email protected].............................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U..WVS.......U..E....t...F
.........{B..H...H.......M..E..5H{B..D$...$....B..M..E.....SS...E...$.
D$... .B..M..E......M.WW......M.)..M..NT....NP........E.....}...VT....
....FP..E........}..VP........U.......FT.............}..........E..M..
.$..|.B..E..R...D$..E..D$...$....B.....<$....B..E..Q.}.;}...Q....~X
........F4..$....B...W..........$.E......E......D$.........B.RR.FX..$.
D$.....B..5..B.QQ..$.|$...RR...E...$..|....D$. ....D$..D$......D$..{B.
....B...|.......T$...$..QQ.<$....B.S.M..E..D$...$....B.PP1....D

<<< skipped >>>

GET /track?uid={17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}&partner=gim394750002&data=updater_ping=&revision_core=0&revision_updater=0&revision_partner=0&os_version=Microsoft Windows 7 Professional Service Pack 1 (build 7601), 64-bit&java_version=1.6 HTTP/1.1

User-Agent: Genieo

Host: analytics.genieo.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Content-Type: text/plain; charset=iso-8859-1

Vary: Accept-Encoding

Date: Thu, 30 Apr 2015 07:23:39 GMT

Server: Google Frontend

Cache-Control: private

Alternate-Protocol: 80:quic,p=1,80:quic,p=1

Accept-Ranges: none

Transfer-Encoding: chunked

44..Tracked 8 activities for user {17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED
8}..0..HTTP/1.1 200 OK..Content-Type: text/plain; charset=iso-8859-1..
Vary: Accept-Encoding..Date: Thu, 30 Apr 2015 07:23:39 GMT..Server: Go
ogle Frontend..Cache-Control: private..Alternate-Protocol: 80:quic,p=1
,80:quic,p=1..Accept-Ranges: none..Transfer-Encoding: chunked..44..Tra
cked 8 activities for user {17EC7ED0-DCDB-451E-9DB3-8DB7A6870ED8}..0..

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: yandex.ua

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: Session_id=noauth:1430378702; yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 200 OK

Date: Thu, 30 Apr 2015 07:25:04 GMT

Last-Modified: Mon, 27 Apr 2015 14:56:24 GMT

ETag: "166045e-6fb-514b5f31db600"-gzip

Accept-Ranges: bytes

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Type: text/plain

Content-Length: 504
..........}.M.. .....9X9X..l.v..Z.v/.w...&....$..........<..;0|....
_..v.(.W..u..../.....z.A.N....B.&./E.L...J ..z..6...y...&,..a...m...xC
...<.W_...(=.~.....OV.O..v..Y.j....0.p.....G..]...4V ....|....C.; O
[email protected]>..).`.y6.3aQ..yD\N...<.../.80...?.7. J....B.-
.R#e...$........i#....o.O].bx.p...M.*.\....J....-..;s..V.K1..&"..8D.9!
..=Q.lt.M..c..[...q.j.~....D...Q'..!SL4CAsVJ.7h4..s'..-...%p.>....u
......k....Q3....X.....Y3....LY..T.....[x.}#.....w.aU?.....yC..A...;..
......Y..Z........'.....K....HTTP/1.1 200 OK..Date: Thu, 30 Apr 2015 0
7:25:04 GMT..Last-Modified: Mon, 27 Apr 2015 14:56:24 GMT..ETag: "1660
45e-6fb-514b5f31db600"-gzip..Accept-Ranges: bytes..Vary: Accept-Encodi
ng..Content-Encoding: gzip..Content-Type: text/plain..Content-Length: 
504............}.M.. .....9X9X..l.v..Z.v/.w...&....$..........<..;0
|...._..v.(.W..u..../.....z.A.N....B.&./E.L...J ..z..6...y...&,..a...m
...xC...<.W_...(=.~.....OV.O..v..Y.j....0.p.....G..]...4V ....|....
C.; [email protected]>..).`.y6.3aQ..yD\N...<.../.80...?.7. J..
..B.-.R#e...$........i#....o.O].bx.p...M.*.\....J....-..;s..V.K1..&"..
8D.9!..=Q.lt.M..c..[...q.j.~....D...Q'..!SL4CAsVJ.7h4..s'..-...%p.>
....u......k....Q3....X.....Y3....LY..T.....[x.}#.....w.aU?.....yC..A.
..;........Y..Z........'.....K......<<< skipped >>>

GET /3428_92a5d683c188790231b1aa2af09de41e/2.pak HTTP/1.1

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0

Host: dlrkbt247pbk6.cloudfront.net

Accept: */*

Accept-Encoding: gzip, deflate

Connection:keep-alive


HTTP/1.1 200 OK

Content-Type: binary/octet-stream

Content-Length: 3016484

Connection: keep-alive

Date: Wed, 29 Apr 2015 23:33:41 GMT

Last-Modified: Wed, 29 Apr 2015 23:11:50 GMT

ETag: "a535387b49e318b5b6c86cefbca1039e"

Accept-Ranges: bytes

Server: AmazonS3

Age: 28173

X-Cache: Hit from cloudfront

Via: 1.1 7922e01ab53e8f36477272573223ab35.cloudfront.net (CloudFront)

X-Amz-Cf-Id: rPNq7ymmSU7vrf_cag5-Xi6DDPK4PViuqA3M3vQREZrLy9XQ6KQL5Q==
..........e...........0.......474.db.0...<.X.`I.....<..A#.U.....
.L........* ...i.AU%......k.1...o4...MX*.8.D.].J.. ..f.q.oV.Q7..c..%!u
..>..2.He.}.tod.Z..^B...ru-2(.........`h`.}...|g*..g...R.gcsw(.xa..
x.v.C.]O $.".........3......4.........b...1Y8E. L........v.n..3.^B...r
u-w.......c^.0......q|.".2.l..........iU.Z.....K.|..F.1...........K7d2
h9q1PK.........).F.U..............ClearnC.exe...`...8.?.#..6......HP4.
....4.l.J`C`[email protected] ..j..U.j..W.\lK[o..U.Vt..$(..\.B...N.Tc.. .y
.9..f....}.......=...9sf...33...-..A0.QUA8$......u..u..F......C......b
C...z....6.....i.h{..V-m.m.d.Z.o.........T-....:.\....i....7.|....>
........uP...........M..[;.'................!u.M..........~...n.....F.
k.v. ..:..C....".....a#0......P...N..]...:.......e..m....}w.....".I...
...r..l......u.:H.!........|3n....g.O=....Bwe..m.5....:^g.........*7C.
..r..Y.._.n....._.[..x...C.P.....3cO.>S......w....s.{.K..r..pU.^.).
sO.:.......PG*.9O..&A..*..\.V'Q....&...`9..H.[.'b4.bk./NY.......gW.x.!
.y.r...4.t.Sr......V_Ab..X..S>..jN..I..h.. s<:.KM2B>J...4J...
I.|v..B..=......$3.A9R..*....H......jR...=dP.c...H..H..n.m......~4dS..
g.1t......N...!.o.r.O\.[..b...n5...5....~.E.. ...>.^".1S.HU:.~|.|.m
TZ..s...L...x...k.#...._....?h.......i..7.>..t................R..=.
......b]..z...W...h!.'.O.U.....Mk....=\...CN....~ .5)...~..Gg.0.x.....
......8>.!*....N.y..O..j%0.......Vh{.l..O..... `..RM..t.P..6....u..
.....;...r.0\j...`2F.CC..... ..E.......9......ao .GL......<br.j..Y.
...N.e..,?Jt;I.I..W~A.V._...Gl..q;&..M=.5....M./.<...)&...W.><<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?2505e12c19052e6d HTTP/1.1

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 24 Mar 2015 16:17:41 GMT

If-None-Match: "804047d4e66d01:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: ctldl.windowsupdate.com


HTTP/1.1 304 Not Modified

Content-Type: application/octet-stream

Last-Modified: Tue, 24 Mar 2015 16:17:41 GMT

ETag: "804047d4e66d01:0"

Cache-Control: max-age=86400

Date: Thu, 30 Apr 2015 07:26:03 GMT

Connection: keep-alive

HTTP/1.1 304 Not Modified..Content-Type: application/octet-stream..Las
t-Modified: Tue, 24 Mar 2015 16:17:41 GMT..ETag: "804047d4e66d01:0"..C
ache-Control: max-age=86400..Date: Thu, 30 Apr 2015 07:26:03 GMT..Conn
ection: keep-alive..

GET /sponsored/istartsurf/eula-istartsurf.html HTTP/1.1

Accept-Encoding: gzip,deflate

Host: dreejadsuld8c.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 26 Apr 2015 05:17:42 GMT

Last-Modified: Sun, 26 Oct 2014 17:24:16 GMT

Expires: Sun, 26 Apr 2015 05:27:42 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

X-Cache: RefreshHit from cloudfront

Via: 1.1 e13dc20cb35881b25fb296fb0383f55c.cloudfront.net (CloudFront)

X-Amz-Cf-Id: trMD-5RkYOwYCX40gb8Qld0-xTyKjlIgyQfaFsIOX70Y1fIGac5FSw==
139c.............Z.s...... ..4.Z....m......g..........#y.>X|.b:....
....R.f&q........]<...o......Y.En.~....s39...}|>..q.....W_]....s
U.....J.........m7....v;.~<.......-.:....'.h.,k........"/..{.9...Ou
...l.?........;......oo.>....M\......G/.....S...f.....V..k..]...\._
...eW......d.1....{z.v....vy....r\...4.zvVvy~..}6........im..z.Y....k.
..Y.6.M.t...........O..O?.....a...M.V....nk.q.W.....w.....7..7.....~..
..>.....V....u.4.).RK....[...B....z....h....;H.....^Ze..o^.W..*].b.
.....~.5?>.?z..,.lw..\;....n...r..5A....*..lK.......|weW_..M......'
.z.......i.l......>....f.k_.p.E....v.$.4...x...y.^9I.zr.4..e.`...Q.
..f7.Wf.k.gS..~.:.....n.....W>..;J..&:...P......<.k..x........k[
C#g..].......(c...)~x......................^...y"...}.N.....)....<_
Ve{......ts;<[....g..`.4..K..#.]?.#.rE.%.{fR...Ilu....'..S..c.l....
'..=.{od...H....=>...}fN.r..G...H.............Ac.../.|........Cc.S.
...Z..\..h.....;.&iL.v..Sf........>..v ...6H.%.....j.\.....t.....7%
<[email protected]>.a/Bi|..1[[email protected]....]..)B.[(.=.$.1.0!.P6R.,..tJ..$!D..
:-...5....)[email protected]..!.....E.5.T.H.w.Z.1..]...
..<6..}_....1Z. ._...~...TZ..{\...h.b.i...F.d#:.#...`.wA...x{....s.
[email protected]...,.HH$X,.$?.c.......N#.1 ....j.&e..7....j.
'..5..............)"].....h.y.PA.O".zr$.k..@`,.S. & ..B.pF.o<$.<
zT.D...c. 5..*#^^...mh.D}...af..U.s#.G.#.1hY ...x...... .q...M...Y.z..
.49...-...3...S..'5f*L.Q."...;.o..y..;...X..K.e......n.\..>./.Iao}.
...y.....y\.D.q.k!..W..?.....|....... ..Q.N.-......hi...A..d......<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: dreejadsuld8c.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:03 GMT

X-Cache: Error from cloudfront

Via: 1.1 e13dc20cb35881b25fb296fb0383f55c.cloudfront.net (CloudFront)

X-Amz-Cf-Id: W2CqiUJIN5THjyfZGr-w3YmUp8jYPcONX74eYm1CzTmIyb5aPm7KnQ==
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: dreejadsuld8c.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:03 GMT

X-Cache: Error from cloudfront

Via: 1.1 e13dc20cb35881b25fb296fb0383f55c.cloudfront.net (CloudFront)

X-Amz-Cf-Id: fVm1v_L21CjaaupgU06yCPWt5M_UJ_QlnGyajn0VUsWsWcW2uFwt2w==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>..HTTP/1.1 403 Forbidden..Cont
ent-Type: text/html..Content-Length: 162..Connection: keep-alive..Serv
er: nginx..Date: Thu, 30 Apr 2015 07:25:03 GMT..X-Cache: Error from cl
oudfront..Via: 1.1 e13dc20cb35881b25fb296fb0383f55c.cloudfront.net (Cl
oudFront)..X-Amz-Cf-Id: fVm1v_L21CjaaupgU06yCPWt5M_UJ_QlnGyajn0VUsWsWc
W2uFwt2w==..<html>..<head><title>403 Forbidden</t
itle></head>..<body bgcolor="white">..<center><
;h1>403 Forbidden</h1></center>..<hr><center&g
t;nginx</center>..</body>..</html>....

GET /cnn/.e/img/4.0/logos/cnn_arabic_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:12 GMT

Accept-Ranges: bytes

Content-Length: 10157

Content-Type: image/png

Cache-Control: max-age=308031513

Expires: Sat, 01 Feb 2025 11:43:43 GMT

Date: Thu, 30 Apr 2015 07:25:10 GMT

Connection: keep-alive
.PNG........IHDR...,...d......c......tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:59
E02F2B7A3D11E4A63AB6FE75E98166" xmpMM:InstanceID="xmp.iid:59E02F2A7A3D
11E4A63AB6FE75E98166" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macint
osh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:59E02F267A3D
11E4A63AB6FE75E98166" stRef:documentID="xmp.did:59E02F277A3D11E4A63AB6
FE75E98166"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>...z..$.IDATx....W.I..k..Q...OPQtPp..
E.......O..3..>[email protected]<f<v..:...2....n.3~....YY.q|#22..
...(P.@....!..([email protected]. .....B.(P..@..}.B......_}..\$.......p...
........E.. .H'~..4P. .3D...Q..5e...EGh.....3.h!QQ.-.. ...._....W..-.M
>.I[.r..%K..y...[.a6`5P. .3.#.e-!.......w....9......sgbb.{./^\___UU
.l.2..../........`..-$Z.n....Q.F..*d...S.......U...._.|.....>}....Q
T7.i..q....GFF......p....HD...e...*..-.#..'.V^^..TII......N.a..}......
:._... V.o%."..Q..ys.>l.|.C.$0P..YK#2...h.H..*.4.3..7...... ._.9.Z.
14Jg.u..aq.|..-*...............\..._.v..O;dH....~ .......Yv..$. .;<<< skipped >>>

GET /cnn/.e/img/4.0/logos/cnn_espanol_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:13 GMT

Accept-Ranges: bytes

Content-Length: 9258

Content-Type: image/png

Cache-Control: max-age=308031568

Expires: Sat, 01 Feb 2025 11:44:38 GMT

Date: Thu, 30 Apr 2015 07:25:10 GMT

Connection: keep-alive
.PNG........IHDR...,...d......c......tEXtSoftware.Adobe ImageReadyq.e&
lt;...piTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:17029a69-bd2b-4df2-8bf5-67503eb5448e" xmpMM:DocumentID="xmp.did:
5A738E767A3D11E4A63AB6FE75E98166" xmpMM:InstanceID="xmp.iid:5A738E757A
3D11E4A63AB6FE75E98166" xmp:CreatorTool="Adobe Photoshop CC 2014 (Maci
ntosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FE404B0478
8E11E49AA3B70A3C0DCADA" stRef:documentID="xmp.did:FE404B05788E11E49AA3
B70A3C0DCADA"/> </rdf:Description> </rdf:RDF> </x:xm
pmeta> <?xpacket end="r"?>4SZf.. PIDATx......E.....A.Q.m..A.P
@DE...#n..........x...#..... ......(..".=..|..3....k.g0.bNMuU...Gd....
.F.....#3.2d.L.!...z......k.....M...........v$...[.........2..".w..\2.
u..~...ACr..Q]....x$.bV.d<#..q.ja.$?d$w.r.p..O.!C.!3a....3d.L.!C...
..(.Q.t.D...H...&Z.$...2.8...z.H.$.S....G.2`...iG.#ZE]....V-...!.[.V..
....Q...e<...`..(aD?...X.!.....I...5..C..~kII......bJ.kR.BNEe..?r(p
.p7..SX..e....3.2d&........8...L.....A5\.S.....I........G......K...o#*
...)%a...[....N]4.(....)....$...Z...'z..S.......?c...]..h .W.C..u.<<< skipped >>>

GET /cnn/.e/img/4.0/logos/cnn_mexico_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:15 GMT

Accept-Ranges: bytes

Content-Length: 9047

Content-Type: image/png

Cache-Control: max-age=308031545

Expires: Sat, 01 Feb 2025 11:44:15 GMT

Date: Thu, 30 Apr 2015 07:25:10 GMT

Connection: keep-alive
.PNG........IHDR...,...d......c......tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:5D
7DB2817A3D11E4A63AB6FE75E98166" xmpMM:InstanceID="xmp.iid:5D7DB2807A3D
11E4A63AB6FE75E98166" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macint
osh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A63AACAA787B
11E49AA3B70A3C0DCADA" stRef:documentID="xmp.did:A63AACAB787B11E49AA3B7
0A3C0DCADA"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>.iA.....IDATx.........G.$....h... xy]
Q..!...I.R...I*.$&.5..@x*...F....1.....O.*.wsNOO..s/T<..........k..
.y.u...o.)R......E....)[email protected]..."E....)[email protected]."E....) ,R.H.a."..E..) ,
R...H."..E....)R...H..."E....)[email protected]..."E....)[email protected]."E.. ............
._......[.(<^..;..R..)....G5..}..;.fM.../...!Q.......r.}....&L....-
.7.....|....v..Y^.G....47.yM.k...[..T.|.a.-k.....w~\]b......}....[G..P
..E.........\..U.1........|4....l....4..7{.;.....^......N.C'X?rk..]...
.Y^B..&...as.......&I9..a....EHJK...)F.... p.@.^TOw.\....FO... g......
Jh..E....z....XT'..Hq...!.J\\....!..W.^c....c...;./.~.`.4..&N)....<<< skipped >>>

GET /cnn/.e/img/4.0/logos/cnn_facebook_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:14 GMT

Accept-Ranges: bytes

Content-Length: 21587

Content-Type: image/png

Cache-Control: max-age=308031524

Expires: Sat, 01 Feb 2025 11:43:54 GMT

Date: Thu, 30 Apr 2015 07:25:10 GMT

Connection: keep-alive
.PNG........IHDR...,...d......c......tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:5A
738E7E7A3D11E4A63AB6FE75E98166" xmpMM:InstanceID="xmp.iid:5A738E7D7A3D
11E4A63AB6FE75E98166" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macint
osh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FC3E995F787C
11E49AA3B70A3C0DCADA" stRef:documentID="xmp.did:FC3E9960787C11E49AA3B7
0A3C0DCADA"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>i..r..P.IDATx......Uu.....A....AFG&..
.j9&..R..o..R....I>h. ...N...EA&....Q.w.....~......]..{...g.5.{.u..
...'.ph...#._..W..y..#/?../......u.v.j\.....'..........O.`.?.. .;.....
.O./...].k.p..6............\.m.7._..........w..~.X..n.....}.>......
.....w<...._.f..."..0(. gz.s.ea.&..2.h.G...1..y.B........7.2.......
.E..8.n.m.t._....O.y.]K.m..yF......|y........1.w?..D....o./yAv..W.....
......a. g.........7...i...@..[.M..:.2.e._.."...<.A@{~....Z....C.Am
C.r...w..w%[email protected].~.1U......Z..A.@/.&.G...
...M..Ev.D.......~R9ds.....I.R......<.o..o...m..?...cjKW....C..<<< skipped >>>

GET /cnn/.e/img/4.0/logos/cnn_twitter_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:15 GMT

Accept-Ranges: bytes

Content-Length: 17583

Content-Type: image/png

Cache-Control: max-age=308031523

Expires: Sat, 01 Feb 2025 11:43:53 GMT

Date: Thu, 30 Apr 2015 07:25:10 GMT

Connection: keep-alive
.PNG........IHDR...,...d......c......tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:5D
D987847A3D11E4A63AB6FE75E98166" xmpMM:InstanceID="xmp.iid:5DD987837A3D
11E4A63AB6FE75E98166" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macint
osh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:48EF727C7880
11E49AA3B70A3C0DCADA" stRef:documentID="xmp.did:48EF727D788011E49AA3B7
0A3C0DCADA"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>.dh?..A.IDATx.....&U.....E...."."...J
...JT.......*...*o.(I2(C....  .J4...|./k..{w?.....T.~:..r.g.}.........
.........-[[email protected]....^.L..|..q.........p.......'...s....#. .c.;.
...<...!......G.;..<#M...^;....zC..._q.......8.\.#..=.[..&(...4t
[email protected].,|4.....%[email protected]`0Z...c..Yh.q.&(.=V.
....[.%H......(.d}6V....,W..;@Q`"r.%....7..g.A._.'#.u........I. ...R..
...K.<...&2....#.@OJk"[email protected]....^....h....C].Y...Nm.....
,D.....Dh.sJ....|.C.j563...k.y.I......%....5.(....QB..."....6..M<..
{..Sw.9...-..&...X..*....,.n.....Mc!T...\.....gL.....?i.q.#.H`..-.<<< skipped >>>

GET /cnn/.e/img/4.0/logos/cnn_googleplus_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:13 GMT

Accept-Ranges: bytes

Content-Length: 8951

Content-Type: image/png

Cache-Control: max-age=308031557

Expires: Sat, 01 Feb 2025 11:44:27 GMT

Date: Thu, 30 Apr 2015 07:25:10 GMT

Connection: keep-alive
......Exif..II*.................Ducky.......d.....1hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c02
1 79.155772, 2014/01/13-19:44:00        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh
)" xmpMM:InstanceID="xmp.iid:708F663F788011E49AA3B70A3C0DCADA" xmpMM:D
ocumentID="xmp.did:708F6640788011E49AA3B70A3C0DCADA"> <xmpMM:Der
ivedFrom stRef:instanceID="xmp.iid:708F663D788011E49AA3B70A3C0DCADA" s
tRef:documentID="xmp.did:708F663E788011E49AA3B70A3C0DCADA"/> </r
df:Description> </rdf:RDF> </x:xmpmeta> <?xpacket en
d="r"?>....Adobe.d.................................................
......................................................................
..........................d.,.........................................
............................................a....!Q.1...Aq...."b.....#
.B.......TU.F.h.2Rr.3$4def..W..X)..............................?...2..
.t.2..e....e.;[email protected]]...........t.2..;....f].....1.(..wO...wO...
....f]...f]....c. '2...e...............#...g..s..f]............w......
.|[email protected]...... N<...F1...8..@3............#.....7.K.
'............cwOL.....7t..3.. '3.p..3....c. .....7@3..@N;.~.....#0<<< skipped >>>

GET /cnn/.e/img/4.0/logos/heroes_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:13 GMT

Accept-Ranges: bytes

Content-Length: 22748

Content-Type: image/png

Cache-Control: max-age=308031516

Expires: Sat, 01 Feb 2025 11:43:46 GMT

Date: Thu, 30 Apr 2015 07:25:10 GMT

Connection: keep-alive
.PNG........IHDR...,...d......c......tEXtSoftware.Adobe ImageReadyq.e&
lt;...giTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:D9D2D99325206811822A83957BED6718" xmpMM:DocumentID="xmp.did:9C52
2DA187B311E4B3A5AC85EAD04BC1" xmpMM:InstanceID="xmp.iid:9C522DA087B311
E4B3A5AC85EAD04BC1" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"&g
t; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:515D0F877EF811E488A
797A840C91ADE" stRef:documentID="xmp.did:515D0F887EF811E488A797A840C91
ADE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
 <?xpacket end="r"?>.p}...U.IDATx..}y......\...e.Q... ..........
v...e.....NR.]........U..$.TLk...;.v..0N..).2.*"(.2].p.[.,.b..w.).....
|.o...k.....3........~.}...c...?..C..1./..{.........<^....>l....
>.....y...K..`....I..g...-o.....H......Z.............0....9. /=..A/
....~t......0>...O...]..{.=...*.....z.~...t.]B....1...e.V..nyo.8M..
....52~.:s<.>........|..:....k...{...;w.|.....'8...]s..._...||.I
..>..<!_. N%..l..>.z.......!....2.u^I......C>....p.q.}...k
......^KDo.v. |wi.....?.V...b...Ot0.k.k.b.......}..<zd.... ....<<< skipped >>>

GET /cnn/.e/img/4.0/logos/impact_your_world_bw.png HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 30 Dec 2014 09:48:15 GMT

Accept-Ranges: bytes

Content-Length: 2110

Content-Type: image/png

Cache-Control: max-age=308031597

Expires: Sat, 01 Feb 2025 11:45:07 GMT

Date: Thu, 30 Apr 2015 07:25:10 GMT

Connection: keep-alive
.PNG........IHDR...,...d......jR.....IDATx...Q.. ..0..bl.......E..|.%K
.,Y.h...,Y.d...,Y.d........rd..%KV.Y...v.....a..../.V....il.A&.Y1..%.H
.4.B)TCY,.P..A....V.9{&^..n..Lp}f.{=.z...:.f..sn..b..s......./X......t
5v.l..<.....H...wM.:.qXR$m...^.k.._....c..D.t=.-%S..5.6k.CRc..uw...
....i.U.N.GM....3...l5i..T....z.0!i...Iql.K...w.....F.l...rM....[...l{
n..L.....K....c...X..2..lA.mG......\,..JR-.a)...R.X..Q...sI.@.........
k..26...J.........#.....a....g.G.d.0X....0.....Y.Gv.yL.g.....v.e.2..r.
 w/Up{.z.Lu....w....i..O.....4.q....Xs.?.iWj..V....c.u.E.....W..5.h.Sw
..2.^....=.y..aA22...Ji.......%..<.A.cM....9.U:.n.....;,r.MLW...J.o
..e.2..%...Y.vL.s..f..e.q3g.V..........b.).(.l9.5..S.{..L.>Xz....X.
@A.....XW0.H2..V..L.x...b..Jc.<.Y.6.]......X...........H.....j2n.Xf
.O..u.c...^.n......vM.... ...P'0...3....c.6^.z.Z.^I....e..........`.. 
`D.'.".b..X..G.w/.-{......6pG.`..........c.......,...mn..2.....^1X...d
........Y....-jlW .....}.|..W......S.b..~..5......D..f.X7..6..5.`..z=X
vwWcp.......X.7vT1X O..e.[.X.."a.T.... .&H(..Z.....Y..........5....z..
7....Y.6L!w...^6K...*..... .0..-C.......:......0.. ..=.5.)......K."...
........c.g;...v...h.[. .~ .c.|......x.$..b.....b............,3:7TUIX]
@>...y.....;...S.O`.....\..2.,.b......2 \..7..*.I..._...T.C........
..L...1`...u..>.|[email protected])b....,[email protected].
w....;AI..;.. ..^......J......8...A\...4......V..&.....|5,...t...4hf.^
k.,..s...U....]...3..H........c.X?.$..x....,t.G...:...,..7..Z......{..
./......f..%[email protected].....<<< skipped >>>

GET /cnn/.e/img/4.0/logos/freedom_project_bw.jpg HTTP/1.1

User-Agent: Java/1.6.0_18

Host: i.cdn.turner.com

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive


HTTP/1.1 200 OK

Server: Apache

Last-Modified: Tue, 31 Mar 2015 11:06:04 GMT

Accept-Ranges: bytes

Content-Length: 15079

Content-Type: image/jpeg

Cache-Control: max-age=312781689

Expires: Fri, 28 Mar 2025 11:13:19 GMT

Date: Thu, 30 Apr 2015 07:25:10 GMT

Connection: keep-alive
......JFIF.....d.d......Ducky.......K......Adobe.d....................
......................................................................
.......................................................d.,............
......................................................................
....!1.A"..Qa2.q.#...BR.$.br34..C%5...Sc..............................
...?..[X-).t..p..GN.f.BG.....T.W...j.......??.......<.G.[*.._...iH.
C.8FH..)D.d....."I.....|...........r..Q.........'W.6...^.`H.....RR.j.B
.(RMA...p.$....l.<M8..&.......8.......O..(&.<...xu..i.\...\.*)T.
[email protected]|..|8.......xS.Ao.....N|[email protected]....
.)......'__..)wmj*<...g......&.......'?...J..x....=Bu...p..nm`..b&l
t;..[..BU..p./7....Lm$....J..b n..Iw.....V.............1.......f.Qt...
..:.7n.aq.8......E..Rc... B..8.......w.8K..)..o.b\-.CZZ........$.).?..
._b..o.;.]$.=.&..-.\.....y....`.k...y.J....7>>-....q..S:K0...Z./
....... .AB....7.v.......YR.../..%.q]d%.6..R..(.=..PM|:...m>.7....v
..dI.....JZS5...@.<x..~.72.!....C....x2Q.Wo..p...|.y....*.&b. .p.R.
....ie...Pi.ME|O..k.....x.85......T.....!c..H .....j........9..q......
0_K.j...5Jy..8.-..[..vt..yr.v..DCiKM...........C.um.d%(.n...B.J\oJ]Uj.
|E(k.4L..bh..E..rE@e ....u'.Zt..2~.x.,[email protected].:.........juv.....
?Q ..'.! x..k..%..i;v;d.KT.4!"...UW....x....l.u.RU.........m@i44......
2....t...C.-.......l!F..#Y#...&..............{ID.&6...U...I ....>..
...kY..oRn..=%.1.8..i).G.[oV..9.8...........$.5,!>.:..<......?..
....136$v...C.qt:|..^|...^.r$f1.m.D.f..?..."R.-.a\......oz.fn...m.<<< skipped >>>

GET /partner/gim394750002/release/live/InstallGenieo.exe HTTP/1.1

Range: bytes=617755-

User-Agent: Better Installer(Mozilla)

Host: download.genieo.com

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 206 Partial Content

x-amz-id-2: mAJVof/4RHWCKgfM8YIBpfZ0zKCE9HITx8siE77okC7gC4HAqo9mbqsrxeoGzSOjIWjJG133MuU=

x-amz-request-id: 280DFB441B0D9ECC

Date: Thu, 30 Apr 2015 07:22:03 GMT

Last-Modified: Mon, 20 Oct 2014 09:54:42 GMT

ETag: "d65611fbc4da8cea4e886076bec82d1e"

Accept-Ranges: bytes

Content-Range: bytes 617755-988407/988408

Content-Type: application/octet-stream

Content-Length: 370653

Server: AmazonS3
...m$......"4C..HA.e...P.V.9J.2.E...."X..!X...>.U.oL{$.!.......5..h
.9\...Ua.M.%....... .5.}[email protected].'...'..My.......3i.........e..SPNO.ka
..R...f...5Mm..............c....W..%z`..U........D.h]...\q.....vyr..2.
.$.[.8M..6...=.*..g...J. N-k....w........G....s......6.3?>...).>
D..J.^.c/.N....u.6.....s...{....L..n......:........'...,...^..mg...BO.
>..}H#..N.'.F...%.....p..#....t...zV.,.\9.......D...B...B.:.[.IYZ..
.c..^K..[(d....H.......FwD.......z..L....-.i(.......I.....x.*..s[.....
b.H0DR..<"......d..w.{..v%e.8n......6t..P..>VK.e...4...B(7...>
;.a....K..A...Z.%.x."...:O...!...".p`......t.....q..Z...".....t...s;."
.[h.#z..ZG....&A.(.....@..........}...?g..u(.M..[.dD..h.7C4HS......I.-
....'.....|O......X[.....2"6.lR..(......m_....f...........u...n....Y..
i.9.......5..5..<7 ...0.c...|.i..zHh8..B'.........B.~1..;....A.T.H.
.FT.....8.9L..i`,..t.!C...B.<..lQ..W...F[....|T\..o.f...e.....H.o..
..9U....p.ReW.z.wJ.....A.!.#.../0.......E..v...X.M.(.:p[...b9.{#N.....
0...%6..AsI....'.........9.H%}6.0..'.;..R5.........4.j.Vw..g..N$...q..
..........s.}.)........\.2..^P..f....UA.bQK...o.~B..D...F...W.....)L..
./.wL]>[email protected]^.x......&G.Z........G..2.WuO......&.....T.W..
.)(..D.e.........C .Bl.U{...hC..ml0.......x......3...............h|...
.d.0`3.6$l.)Q...e.....BPo|-..@..<,K.0t.....2g.o./4..(.q$.M..M..X(J}
..F.Y.%Z..9.'.n...WR.V.V..I:.S`..uA.(h9FN.c..X.........4..........kD..
....>7.6%..n..`.v..R..w.u:.n.......u5f.!K*....6:...tK..n...k.%...AJ
.".../..}p.g...3.2.m.[..6....g..F...C......G_..B]*..i.<PX./gMI.<<< skipped >>>

GET /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tech.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Thu, 30 Apr 2015 07:25:03 GMT

Content-Type: text/html

Content-Length: 178

Connection: keep-alive

Location: hXXps://tech.yandex.ru/jslibs/
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx</center>..</body>..</html>..HTTP/1.1 301
 Moved Permanently..Server: nginx..Date: Thu, 30 Apr 2015 07:25:03 GMT
..Content-Type: text/html..Content-Length: 178..Connection: keep-alive
..Location: hXXps://tech.yandex.ru/jslibs/..<html>..<head>
<title>301 Moved Permanently</title></head>..<bod
y bgcolor="white">..<center><h1>301 Moved Permanently&l
t;/h1></center>..<hr><center>nginx</center>
..</body>..</html>......


GET /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tech.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Thu, 30 Apr 2015 07:25:04 GMT

Content-Type: text/html

Content-Length: 178

Connection: keep-alive

Location: hXXps://tech.yandex.ru/jslibs/
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx</center>..</body>..</html>..HTTP/1.1 301
 Moved Permanently..Server: nginx..Date: Thu, 30 Apr 2015 07:25:04 GMT
..Content-Type: text/html..Content-Length: 178..Connection: keep-alive
..Location: hXXps://tech.yandex.ru/jslibs/..<html>..<head>
<title>301 Moved Permanently</title></head>..<bod
y bgcolor="white">..<center><h1>301 Moved Permanently&l
t;/h1></center>..<hr><center>nginx</center>
..</body>..</html>......


HEAD /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tech.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: express:sess=eyJjc3JmU2VjcmV0IjoiM2U1Q0pwb3NLZ1ZsY3FqMlByVlNfeFZLIn0=; express:sess.sig=4oYvS57XgDRayHDnMF6A-aX8rEI; yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 178

Connection: keep-alive

Location: hXXps://tech.yandex.ru/jslibs/

HTTP/1.1 301 Moved Permanently..Server: nginx..Date: Thu, 30 Apr 2015 
07:25:08 GMT..Content-Type: text/html..Content-Length: 178..Connection
: keep-alive..Location: hXXps://tech.yandex.ru/jslibs/......

GET /jslibs/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: tech.yandex.ru

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)

Cookie: express:sess=eyJjc3JmU2VjcmV0IjoiM2U1Q0pwb3NLZ1ZsY3FqMlByVlNfeFZLIn0=; express:sess.sig=4oYvS57XgDRayHDnMF6A-aX8rEI; yandexuid=379951611430378702; ys=wprid.1430378702191310-1092326783508399841711588-man1-4557

Cookie2: $Version=1


HTTP/1.1 301 Moved Permanently

Server: nginx

Date: Thu, 30 Apr 2015 07:25:08 GMT

Content-Type: text/html

Content-Length: 178

Connection: keep-alive

Location: hXXps://tech.yandex.ru/jslibs/
<html>..<head><title>301 Moved Permanently</title
></head>..<body bgcolor="white">..<center><h1&
gt;301 Moved Permanently</h1></center>..<hr><cent
er>nginx</center>..</body>..</html>..HTTP/1.1 301
 Moved Permanently..Server: nginx..Date: Thu, 30 Apr 2015 07:25:08 GMT
..Content-Type: text/html..Content-Length: 178..Connection: keep-alive
..Location: hXXps://tech.yandex.ru/jslibs/..<html>..<head>
<title>301 Moved Permanently</title></head>..<bod
y bgcolor="white">..<center><h1>301 Moved Permanently&l
t;/h1></center>..<hr><center>nginx</center>
..</body>..</html>....

GET /us/ HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)



...3..).h.d..XO.%_~..P....Je..,49.%9.J.m~Z...H.........G......X.E2._.C
......S.l.R..Qi5...$..(...MW`.6.:Z{,..Yo..DI 5..i|....%.=F...A.....#F.
k.......,..v....E.;V6.....].g......7.....;..^GI..w...?...?~...}.xoCr.x
......j......W...s...&...-.a...Or~u.......b$....0.......d.^k..vU.....T
]([.Gk.NE.u|Jc....q....A.6...L)Z..r.R .y...N..?97.-...i.`............'
..h......`.....,.mu...........z.(y.......w.].'V.j...c.......@..<?..
U.....O..c.#4.4......g=......\.....!.W.......6.......q-.....tL..S.]Q.!
j..Fm......../...sz......h.W...\.:S..ke..R....3*..Y...0Y..D1...lMS.1..
.k....U.rNY..aB'..z}....!B.Xjpe.yeD.W.6_..........Op......G.G.......@x
0.{.k}.8....ys....K?#tv.S.=.u.qA..N..K;..U.g...g.....R.Y.8..N.........
z'......NN..i....Rw..4...H.....".I.W....Q#p.=i.X:. ~.....}...2r.T...\.
.ev.G..'.#.t?.~r>[@6.............u..F....A Wk...R`C.$D..... .2..O.]
...v.r..g7.,..wG..4.......i.......>..............r.........:OA.....
...vX.....C).... .p.>dhT.D.%9Z.....F..(&..0T..w.F.r.VA.......Xx.. .
.jC..{.....U.,..7.............$.P.......'.....ts.......^...E...6jJ....
..Zl.m.....:........m..Q.)G.P,esrR...h..-1..A.^F.}...b...G. HC?..?...P
2.R.{.?......P.C...$......-h.|.L*.4..}......2..c.r....1......l.....0..
../n.......x..4...JML......$.|.....u5..j..KR.n....u3T5t.)..Q....c..1m.
.RD...lI.......GI..B.....Hg...Z:...uq ....,.y. .....<.w..*/..7../6.
.cE.P..Y1o...u-....b..."a..d....g.--*i...:...a....nJ`...N.M....R..6:.E
..M`..f.DL......COd.....vwb...d.d....`.r............#.,....ja...M.{2..
._.`....>/Ws..9......7.......1000....ks...{~...F..H.....]'q|..q<<< skipped >>>

GET /favicon.ico HTTP/1.1

Accept-Encoding: gzip,deflate

Host: news.yahoo.com

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: private

Content-Length: 5430

Content-Type: image/x-icon

Date: Wed, 29 Apr 2015 22:56:35 GMT

ETag: "YM:1:d83eda8f-3aff-41f4-ab5e-c2546f7a2167000514e41a6e37fd"

Expires: Thu, 30 Apr 2015 23:00:01 GMT

Last-Modified: Wed, 29 Apr 2015 22:00:12 GMT

Server: ATS

x-ysws-request-id: ca40970c-a32a-4bd0-b219-2183de0d52df

x-ysws-visited-replicas: gops.use26.mobstor.vip.bf1.yahoo.com

X-Cache: HIT from logo2.global.media.bf1.yahoo.com

X-Cache-Lookup: HIT from logo2.global.media.bf1.yahoo.com:80

Via: HTTP/1.1 web13.use26.mobstor.bf1.yahoo.com UserFiberFramework/1.0, 1.0 logo2.global.media.bf1.yahoo.com:80 (squid/2.7.STABLE9), http/1.0 l9.ycs.dea.yahoo.com (ApacheTrafficServer [cHs f ]), http/1.1 r07.ycpi.dea.yahoo.net (ApacheTrafficServer [cMsSf ])

Age: 30533

Connection: keep-alive
......  .... .....&......... .h.......(... ...@..... .................
..........;.p.5.o.6.o.6Dd.0...........................................
..............................................d.0.o.6Do.6.o.4...;...;.
p.3.o.3.n.3.q.3.n.3.r.7.n.5.o.6up.8Pn.7)i.2...........................
......m.3.n.6*q.8Po.7tn.5.n.4.n.3.q.3.n.3.n.3.p.3...;...;.q.3.s.4.s.4.
v.5.q.4.r.4.q.4.q.4.q.5.q.5.q.5.q.4.p.4.r.5.p.4.q.4.q.4.q.5.q.4.r.5.q.
5.q.5.q.5.q.4.q.3.r.4.u.5.s.4.r.3.p.3...;...;.t.5.w.5.v.5.y.6.u.5.w.6.
x.7.x.7.w.7.x.8.y.8.y.9.z.9.z.9.v.7.w.9.y.9.z.9.v.8.v.7.v.8.v.7.v.6.v.
6.v.6.z.7.x.6.v.5.t.5.r.3...;...;.u.5.x.6.{.7.y.6.y.7...W...V...U...T.
..S...S...P...N...N...H...E...>...;...;...?...H...K...N...P...Q...Q
...S...S...T...U...V..>y..................A}...Y...V...V...U...T...
T...Q...P...N...G...D...>...;...;[email protected]..
.U...X...X...Y...........................Z...W...W...X...W...V...S...Q
...N...J...F...@...;...;[email protected]..
V...........................Y....Y...Y...Y...Y...X...U...S...P...J...E
...?...;...;...A...K...P...U...W...X...Y...Y...Z...Z...[..............
`...]................\...\...Z...[...Z...W...T...Q...L...H...;...;...;
...A...M...Q...X...W...W...Y...Z...Y...\..t................]...]......
........x....[...\...\...[...Y...V...Q...L...G...:...;...;...B...N...S
...X...Z...[...[...\...\...^..............8{...\...]..6z..............
.`...]...\...\...\...Z...U...P...E...;...;...;...B...N...S...Y...Z...Z
...Z...[...[...................\...\...\...\...................\..<<< skipped >>>

GET /affiliates/eula.html HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3ffn9rvm681fx.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 200 OK

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Server: nginx

Date: Sun, 26 Apr 2015 05:28:34 GMT

Last-Modified: Sun, 26 Oct 2014 17:23:05 GMT

Expires: Sun, 26 Apr 2015 05:38:34 GMT

Cache-Control: max-age=600

Content-Encoding: gzip

Vary: Accept-Encoding

Age: 185

X-Cache: Hit from cloudfront

Via: 1.1 8ba00e7b6e8959a64c4f6f61fd5596de.cloudfront.net (CloudFront)

X-Amz-Cf-Id: oGfwKK58LWEVqON8zC25mwO1BYPGTCKVXS_AuT1TybkP1lc-JjFFyw==
1500.............Zks.F......N.......|.-y."!...P.P.... .)".....1S..{...
.R.g.Jl...}.{...>....F7..ZV.T]NO..Pu....?...Q4R..G.c...VEE..I..Y...
...:..Z........?...n...G......o......w>.o.d..U.../......4..`..?~{T.
.d]..i..;.~......y.Q....7i<,..<.....d...|...l.?..t..F.OeU$.....:
Xl..U;8...Q.~.vGw......E.I.....z.7S....q.I..f.q.DW.....U....|..(.u.1..
.z..3..|....A.....:.............P....X$..*.w..........s.;..]..........
u.?..%f...~....S..b...,..........5.(,Qm...w .NK...Y>......u.......}
n..C......8$....)..R..4IuwS....h...*...f.e.q7...<y...I.....:8...s#Z
/M./...B...s..|}[email protected]..)t..uJ.WR..._.LTvz. yV._.L.tz..6 ......
..e.......6.....#b.j.A..yw.[.p.a...6n.6;(u40..8.....&..DT.....EQ..k..J
D.C....zDq....W...X...f.W..D....I.:............~..........f..a.QZ....&
gt;f%.(..n....z.v.u.mCc..].......u$..S..UK<...."T.......dhR.U7i.3..
.....4.K.....6..-..]......'$Y..9$.....U>Et....y....M..M.2x.....`An|
.^.t'O.. !..m>.:8.KZ.........$C...f..Ll...4.<ZGm.$H{Q...........
z..m................p........|C.......i^.W.}'.>..*.....z .=,..7..L.
WY^..T./..zS&...w....g.x..O.U\$q.S....Y.S%*.7..................W..,^'8
......o..W..Z....Q.U.7bp...l5.E....=P....A.D;45....d.q...Jg....."...&l
t;._&...>(VQ..<......Q..v.....?@,...h...P8..i.<N.......fs5.u.
8...8v..-. .....OG..'O.....3{*1u....P..?TK...!..:...e.......6.N./.....
C...'...V&.].....|.b...\.D..J...Y...n-.j.j...u..G.....B.h.Z......s..dw
...9.\...D....]w.n..r&#...~..q4.St........&..3RC'pO.....p.C.2R..."7..6
x8.'#/..I..S......vd..r......I.9..79..B.4..^}ur....S..s...u2."...~<<< skipped >>>

GET /robots.txt HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3ffn9rvm681fx.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 404 Not Found

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:04 GMT

X-Cache: Error from cloudfront

Via: 1.1 8ba00e7b6e8959a64c4f6f61fd5596de.cloudfront.net (CloudFront)

X-Amz-Cf-Id: 7Yuh4ovwbwPgxYPQbBityAHNfIM1LHFf01QiSmeIGE4HnA05hG7_ow==
<html>..<head><title>404 Not Found</title><
/head>..<body bgcolor="white">..<center><h1>404 N
ot Found</h1></center>..<hr><center>nginx</
center>..</body>..</html>......


GET / HTTP/1.1

Accept-Encoding: gzip,deflate

Host: d3ffn9rvm681fx.cloudfront.net

Connection: Keep-Alive

User-Agent: Mozilla/5.0 (compatible; Genieo/1.0 hXXp://VVV.genieo.com/webfilter.html)


HTTP/1.1 403 Forbidden

Content-Type: text/html

Content-Length: 162

Connection: keep-alive

Server: nginx

Date: Thu, 30 Apr 2015 07:25:04 GMT

X-Cache: Error from cloudfront

Via: 1.1 8ba00e7b6e8959a64c4f6f61fd5596de.cloudfront.net (CloudFront)

X-Amz-Cf-Id: fOiqQkMxXIyZYG0975GeJ0rStA3G_1Y6EQf-abxSd-dFYHjhq_uhhg==
<html>..<head><title>403 Forbidden</title><
/head>..<body bgcolor="white">..<center><h1>403 F
orbidden</h1></center>..<hr><center>nginx</
center>..</body>..</html>..HTTP/1.1 403 Forbidden..Cont
ent-Type: text/html..Content-Length: 162..Connection: keep-alive..Serv
er: nginx..Date: Thu, 30 Apr 2015 07:25:04 GMT..X-Cache: Error from cl
oudfront..Via: 1.1 8ba00e7b6e8959a64c4f6f61fd5596de.cloudfront.net (Cl
oudFront)..X-Amz-Cf-Id: fOiqQkMxXIyZYG0975GeJ0rStA3G_1Y6EQf-abxSd-dFYH
jhq_uhhg==..<html>..<head><title>403 Forbidden</t
itle></head>..<body bgcolor="white">..<center><
;h1>403 Forbidden</h1></center>..<hr><center&g
t;nginx</center>..</body>..</html>....

The Application connects to the servers at the folowing location(s):

ProtectWindowsManager.exe_3260:

.text

`.rdata

@.data

.rsrc

@.reloc

j.Yf;

_tcPVj@

.PjRW

?456789:;<=

!"#$%&'()* ,-./0123

SHELL32.dll

function not supported

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

broken pipe

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

GetProcessWindowStation

operator

SHLWAPI.dll

%dYeArdMoNthdDaY

URLDownloadToFileA

file_url

ShellExecuteExW

SHDeleteKeyW

GetWindowsDirectoryA

GetProcessHeap

GetSystemWindowsDirectoryW

KERNEL32.dll

USER32.dll

RegCreateKeyExW

RegCloseKey

RegOpenKeyExW

RegCreateKeyW

ReportEventW

ADVAPI32.dll

PSAPI.DLL

USERENV.dll

VERSION.dll

GetCPInfo

zcÁ

<requestedExecutionLevel level='requireAdministrator' uiAccess='false' />

263f3k3z3

=>>_> ?`?}?

5 5$5(5,5

? ?$?(?,?0?4?8?<?

:$:,:8:\:|:

%s_%s

\\.\Phys

..\Src\json\src\json_value.cpp

..\Src\json\src\json_reader.cpp

xxxx

..\Src\json\src\json_writer.cpp

kernel32.dll

mscoree.dll

- CRT not initialized

- Attempt to initialize the CRT more than once.

- floating point support not loaded

USER32.DLL

portuguese-brazilian

WindowsMangerProtect

SOFTWARE\supWindowsMangerProtect

xa.geoip

visit.heartbeat

ProtectWindowsManager.exe

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

TypesSupported

%s is already installed

%s installed

%s failed to install. Error %d

%s is not installed

Could not remove %s. Error %d

WindowsProtectManger

Advapi32.dll

/c ping 127.0.0.1 -n 2 > nul && del

"%s" %s

psapi.dll

Explorer.exe

urlmon.dll

update.exe

Assertion failed: %s, file %s, line %d

WindowsMangerProtect Service

C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe

WindowsMangerProtect service

SysTool PasSame LIMITED

Windows SysTool Svr

20.0.0.2227

Windows SysTool.exe

ProtectService.exe_3792:

.text

`.rdata

@.data

.rsrc

@.reloc

GET %s%s%s HTTP/1.1

Host: %s

%sUser-Agent: Mozilla/4.0

POST %s HTTP/1.1

%sContent-Type: %s

User-Agent: Mozilla/4.0

Content-Length: %u

%*s %d %*s

%*[ ]%[^

?456789:;<=

!"#$%&'()* ,-./0123

file_url

E:\supsoft\SupSearchProtectV4\SearchProtect\Bin\Release\ProtectService.pdb

GetProcessHeap

GetSystemWindowsDirectoryW

KERNEL32.dll

USER32.dll

RegOpenKeyW

RegCloseKey

RegOpenKeyExW

RegCreateKeyExW

ADVAPI32.dll

SHELL32.dll

MSVCP110.dll

InternetCrackUrlW

WININET.dll

WS2_32.dll

SHLWAPI.dll

MSVCR110.dll

_crt_debugger_hook

__crtUnhandledException

__crtTerminateProcess

_calloc_crt

__crtGetShowWindowMode

_amsg_exit

_wcmdln

__crtSetUnhandledExceptionFilter

WinHttpCloseHandle

WinHttpOpen

WinHttpSetTimeouts

WinHttpCrackUrl

WinHttpConnect

WinHttpOpenRequest

WinHttpSetOption

WinHttpAddRequestHeaders

WinHttpSendRequest

WinHttpGetIEProxyConfigForCurrentUser

WinHttpGetProxyForUrl

WinHttpWriteData

WinHttpReceiveResponse

WinHttpQueryHeaders

WinHttpQueryDataAvailable

WinHttpReadData

WINHTTP.dll

SensApi.dll

VERSION.dll

PSAPI.DLL

USERENV.dll

.?AVCHttpClient@@

.?AVCTcpipSocket@@

<requestedExecutionLevel level='requireAdministrator' uiAccess='false' />

2-2v2

hXXp://

Software\Microsoft\Windows\CurrentVersion\Internet Settings

http=

WinHttpClient

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) in my heart of heart.

hXXp://xa.xingcloud.com

xxxx

%u_%u

%s_%s

%s_X

\\.\PhysicalDrive%d

UpDateProcess.exe

hXXp://VVV.theviilage.com/searchprotect/up?ptid=%s&sid=%s&ln=%s_%s&ver=%s&uid=%s&dp=%s

g{2EFFE99D-743D-44D0-BBF2-F9DDDEA2F92D}

Global\{5F26509F-29FE-4598-8800-FA22CE9CC17F}__Mutex

Report HeartBeat

cmdshell.exe

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=visit.heartbeat.%s&update0=ref,%s&update1=nation,%s&update2=language,%s&update3=version,%s

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action0=xa.geoip&action1=visit&action2=install

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=uninstall

explorer.exe

Advapi32.dll

"%s" %s

psapi.dll

Explorer.exe

json_value.cpp

ljson_reader.cpp

ProtectSvc.exe

4.0.1.2253

HPNotify.exe_3924:

.text

`.rdata

@.data

.rsrc

@.reloc

<9%uo

wszUrl

strUrlTemp

hKEY

strSelUrl

strUrl

strConfUrlTemp

strDsUrl

strHpUrl

strCmdLine

tCPW

%UUUU

e_GetBrowserCurrentHpUrl

e_GetBrowserCurrentDsUrl

URLDownloadToFileW

URLDownloadToFileW ret:0XX

Error : %d

inflate 1.1.3 Copyright 1995-1998 Mark Adler

1.1.3

monochrome

unsupported bit depth

`'\%D,3

Run-Time Check Failure #%d - %s

%s%s%p%s%ld%s%d%s

%s%s%s%s

RegOpenKeyExW

RegCloseKey

del /s/q %1\*.*

%suninstall.bat

E:\supsoft\SupSearchProtectV4\SearchProtect\bin\Release\HPNotify.pdb

KERNEL32.dll

GetKeyState

USER32.dll

GDI32.dll

ADVAPI32.dll

ShellExecuteW

ShellExecuteA

ShellExecuteExW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHDeleteKeyW

SHLWAPI.dll

MSVCP110.dll

MSVCR110.dll

_calloc_crt

_CRT_RTC_INITW

__crtGetShowWindowMode

_amsg_exit

_wcmdln

_crt_debugger_hook

__crtUnhandledException

__crtTerminateProcess

__crtSetUnhandledExceptionFilter

GdiplusShutdown

gdiplus.dll

IMM32.dll

DeleteUrlCacheEntryW

WININET.dll

COMCTL32.dll

GetProcessHeap

#*1892 $

%,3:;4-&

.?AVCActiveXEnum@DuiLib@@

.?AVCWebBrowserUI@DuiLib@@

<requestedExecutionLevel level='requireAdministrator' uiAccess='false' />

<assemblyIdentity type='win32' name='Microsoft.Windows.Common-Controls' version='6.0.0.0' processorArchitecture='x86' publicKeyToken='6595b64144ccf1df' language='*' />

3?3

1-2}2

77t7

9":,:6:@:

12u2

9 9$9(9,9094989<9

0 1@1\1|1

hXXp://VVV.bing.com/

hXXp://VVV.yahoo.com/

hXXp://VVV.google.com/

%sconf

web/?type=dspp&

web/?type=dspp

hXXp://VVV.v9.com/

Itemd

BrowserAction.dll

%u_%u

%s_%s

%s_X

\\.\PhysicalDrive%d

\\.\Scsi%d:

UrlEdit

conf.xml

hXXp://v9.com/license_agreement.html

hXXp://v9.com/privacy_policy.html

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=set.show.%s

hXXp://xa.xingcloud.com/v4/searchprotect/%s?action=set.other.%s

%stmp%d.tmp

urlmon.dll

main.xml

explorer.exe

Global\{5F26509F-29FE-4598-8800-FA22CE9CC17F}__Mutex

IeWatchDog.dll

BrowerWatchFF.dll

BrowerWatchCH.dll

Global\GUID(6D05BFEC-4307-4649-8963-962A24345DF4)

msimg32.dll

User32.dll

WM_KEYDOWN

WM_KEYUP

WM_SYSKEYDOWN

WM_SYSKEYUP

0xX

keyboard

msftedit.dll

password

%s%s%s

Correct password required

%s\%s

WebBrowser

transshadow

transshadow1

dest='%d,%d,%d,%d'

dest='%d,%d,%d,%d' source='%d,%d,%d,%d'

source='%d,%d,%d,%d' dest='%d,%d,%d,%d'

M-d-d

WebBrowserUI

errorUrl

{D27CDB6E-AE6D-11CF-96B8-444553540000}

user32.dll

MSPDB110.DLL

ADVAPI32.DLL

/c ping 127.0.0.1 -n 2 > nul && del /s/q

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

%Program Files% (x86)\XTab\skin\

SupHPNot.exe

4,0,1,2253

SupHPNty.exe

WebPlayer.exe_3980:

.text

`.rdata

@.data

.rsrc

@.reloc

8%u:j

RegOpenKeyTransactedW

RegCreateKeyTransactedW

RegDeleteKeyTransactedW

operator

GetProcessWindowStation

KERNEL32.dll

EnumWindows

USER32.dll

GDI32.dll

RegOpenKeyExW

RegCreateKeyExW

RegDeleteKeyW

RegCloseKey

RegEnumKeyExW

RegQueryInfoKeyW

ADVAPI32.dll

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

COMCTL32.dll

urlmon.dll

GetProcessHeap

GetCPInfo

.?AVIKeyValueStorage@@

.?AVCWebPlayerEventsCallback@@

.?AVCComWebPlayer@@

.?AV?$CComCoClass@VCComWebPlayer@@$1?GUID_NULL@@3U_GUID@@B@ATL@@

.?AV?$IDispatchDynamicImpl@VCComWebPlayer@@@@

.?AV?$CComObject@VCComWebPlayer@@@ATL@@

.?AVCWebPlayerView@@

.?AV?$CWindowImpl@VCWebPlayerView@@V?$CAxWindowT@VCWindow@ATL@@@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@3@@ATL@@

.?AV?$CTrayIcon@VCWebPlayerView@@@@

.?AV?$IDispEventImpl@$00VCWebPlayerView@@$1?DIID_DWebBrowserEvents2@@3U_GUID@@B$1?LIBID_SHDocVw@@3U3@B$00$0A@VCComTypeInfoHolder@ATL@@@ATL@@

.?AV?$IDispEventSimpleImpl@$00VCWebPlayerView@@$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@

.?AV?$_IDispEventLocator@$00$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@

zcÁ

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>

2 3$3(3,3

getWebBrowser

hXXps://

hXXp://

Advapi32.dll

Software\WebPlayer\

javascript.debug

javascript.show_errors

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

icons\main.ico

WebPlayerEngine

WebPlayer\

scripts\config.xml

window.placement

icons\tray.ico

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

mscoree.dll

KERNEL32.DLL

WUSER32.DLL

C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe

&About WebPlayer

WebPlayer

Replace%Select the entire document

Arrange Icons/Arrange windows so they overlap

Cascade Windows5Arrange windows as non-overlapping tiles

Tile Windows5Arrange windows as non-overlapping tiles

Tile Windows(Split the active window into panes

1.1.0.0

WebPlayer.exe

genupdater.exe_2268:

.text

`.rdata

@.data

.rsrc

tGHt.Ht&

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

operator

GetProcessWindowStation

USER32.DLL

This sample does not support this version of Windows.

%[^=]=%[^

partner.support.languages.localization

updater.components.blacklist

\u%2x%2x

opera_ext

chrome_ext

firefox_ext

partner.uninstall.add.control.panel.entry

desktop.icon.file.name

uninstall.url

desktop.icon.display.name

sensor.shortcut.ie

start.menu.folder.name

uninstall.icon.display.name

homepage.url

hXXp://127.0.0.1:1886/extensions/redirect_to_startpage

UninstallUrl

sethomepageandsearch.components.blacklist

browser.searchProvider.urlTemplate

[%8s](d/d/d d:d:d.d): %S

K:\projects\AnabelPackage\build\src\Updater\Release\genupdater.pdb

InternetCrackUrlW

HttpSendRequestW

HttpQueryInfoW

HttpOpenRequestW

WININET.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

KERNEL32.dll

USER32.dll

RegQueryInfoKeyA

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

ShellExecuteExW

ShellExecuteW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

zcÁ

.?AVUpgradeMsg@@

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

KERNEL32.DLL

mscoree.dll

SetShellExecuteExError

k:\projects\AnabelPackage\build\src\Updater\UpdateLib\Platform\Common\inc\Error.h

Error %I64x, file: '%s' (timestamp: %S), func: '%s', line: '%d'

RunAction::execute

.\Platform\Actions\src\RunAction.cpp

%s %s

%s %s %s %s

%s %s %s %s %s

Done running '%s' with error: %d

RunAction: Failed to create process - fallback to shell execute

RunAction: Failed to shell execute

RunAction::RunExec

SaveAction::execute

.\Platform\Actions\src\SaveAction.cpp

Failed to download for url:

Failed to save and abort - no more retries for: %s

Failed to save. Wait %d seconds before retry download: %s

Failed to verify MD5 for url:

Failed to decrypt for url:

.\Platform\Common\src\DownloadManager.cpp

hXXp://analytics.genieo.com/track

&data=install_error=

&data=engine_hang_restart=

&data=uninstall=true

&data=updater_ping=

&revision_core=%d

&revision_updater=%d

&revision_partner=%d

&os_version=Windows

okernel32.dll

Windows Vista

Windows Server 2008

Windows 7

Windows Server 2008 R2

kernel32.dll

Web Server Edition

Windows Server 2003 R2,

Windows Storage Server 2003

Windows Home Server

Windows XP Professional x64 Edition

Windows Server 2003,

Web Edition

Windows XP

Windows 2000

(build %d)

SOFTWARE\JavaSoft\Java Runtime Environment\%s

SOFTWARE\JavaSoft\Java Development Kit\%s

%s\bin\javaw.exe

Updated registry: key L%s to: L%s

Failed to update registry: key L%s to: L%s

supported_langs

is not insupported langs - setting it to first supported language:

is not insupported langs - setting it to en

Manifest URL:

Failed to parse manifest. url:

Failed with non recoverable error to download manifest. url:

Failed to download manifest. url:

Discard upgrade. We tried this revision too many times. Waiting to newer revision. New rev: %d. Local rev: %d

Processing new execute action:

Blacklist: skip processing new execute action:

Failed to execute

New version does not contains any actions to execute.

.\UpgradeManager\src\UpgradeManager.cpp

..\UpdateLib\Platform\Common\src\Utils.cpp

{R%x%x%x}

%s\Partner\%s\text\%s_text.properties

can't be loaded - loading en_text.properties

%s\Partner\%s\text\en_text.properties

opera

chrome

/Chrome

/Opera

conf\partner_manifest.xml

updater_manifest.xml

conf\updater_manifest.xml

.\UpdaterService.cpp

%s\Partner\%s\conf\partner.properties

\conf\conf.ini

partner_manifest_url_template

Partner manifest URL:

partner_manifest.xml

-desk_icon_name "%S" -partner_name "%s" -uninstall_url "%S" -add_cp_entry_and_abort "true"

-add_desk "%s" -desk_icon "Partner\%s\img\%S" -desk_icon_name "%S" -desk_url "%S" -home_url "%S" -uninstall_url "%S" -uninst_icon_name "%S" -partner_name "%s" -start_menu_folder_name "%S" -add_ie_link "%s" -add_cp_entry "%s"

Failed to execute first time process

Failed to execute first time process - install dir does not exists on the registry

/chrome_ext

Failed to prepare enviroment - open failed to install url

Reached maximum number (%d) of failures for revision. will upgrade only to higher revision.

manifest.xml

conf\manifest.xml

Failed to install first time - open failed to install url:

hXXp://userfeedback-genieo.appspot.com/installfail.jsp?errcode=

Checked for update and abort (executed with check_only flag)

Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice

firefox

Software\Classes\http\shell\open\command

is_homepage_%s

NOT raising set-homepage flag of %s because it is blacklisted

set_homepage_do_%s

Raised set-homepage flag %s for browser %s to update the homepage url

ERROR while raising set-homepage flag %s for browser %s to update the homepage url. Error code=%d

SKIP while raising set-homepage flag for browser %s to update the homepage url. BROWSER IS NOT DEFAULT

NOT raising set-homepage flag of %s because Genieo is not its homepage.

is_search_provider_%s

NOT raising set-search-provider flag of %s because it is blacklisted

set_searchProvider_do_%s

Raised set-SearchProvider flag %s for browser %s to update the search-provider url

ERROR while raising set-search-provider flag %s for browser %s to update the search-provider url. Error code=%d

SKIP while raising set-search-provider flag for browser %s to update the set-search-provider url. BROWSER IS NOT DEFAULT

NOT raising set-search-provider flag of %s because Genieo is not its search-provider.

%s %d %s %s %s %s

\log\Updater.log

Updater.log

url.dll,FileProtocolHandler

rundll32.exe

UI is disabled - skip open URL:

uninstall\updater_uninstall.exe

Failed to execute the next upgrade process. Keep using this process

..\UpdateLib\Platform\Common\src\FileUtils.cpp

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe

genupdater.exe_2400:

.text

`.rdata

@.data

.rsrc

tGHt.Ht&

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

operator

GetProcessWindowStation

USER32.DLL

This sample does not support this version of Windows.

%[^=]=%[^

partner.support.languages.localization

updater.components.blacklist

\u%2x%2x

opera_ext

chrome_ext

firefox_ext

partner.uninstall.add.control.panel.entry

desktop.icon.file.name

uninstall.url

desktop.icon.display.name

sensor.shortcut.ie

start.menu.folder.name

uninstall.icon.display.name

homepage.url

hXXp://127.0.0.1:1886/extensions/redirect_to_startpage

UninstallUrl

sethomepageandsearch.components.blacklist

browser.searchProvider.urlTemplate

[%8s](d/d/d d:d:d.d): %S

K:\projects\AnabelPackage\build\src\Updater\Release\genupdater.pdb

InternetCrackUrlW

HttpSendRequestW

HttpQueryInfoW

HttpOpenRequestW

WININET.dll

GetProcessHeap

GetCPInfo

GetConsoleOutputCP

KERNEL32.dll

USER32.dll

RegQueryInfoKeyA

RegOpenKeyExW

RegCloseKey

ADVAPI32.dll

ShellExecuteExW

ShellExecuteW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

zcÁ

.?AVUpgradeMsg@@

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

KERNEL32.DLL

mscoree.dll

SetShellExecuteExError

k:\projects\AnabelPackage\build\src\Updater\UpdateLib\Platform\Common\inc\Error.h

Error %I64x, file: '%s' (timestamp: %S), func: '%s', line: '%d'

RunAction::execute

.\Platform\Actions\src\RunAction.cpp

%s %s

%s %s %s %s

%s %s %s %s %s

Done running '%s' with error: %d

RunAction: Failed to create process - fallback to shell execute

RunAction: Failed to shell execute

RunAction::RunExec

SaveAction::execute

.\Platform\Actions\src\SaveAction.cpp

Failed to download for url:

Failed to save and abort - no more retries for: %s

Failed to save. Wait %d seconds before retry download: %s

Failed to verify MD5 for url:

Failed to decrypt for url:

.\Platform\Common\src\DownloadManager.cpp

hXXp://analytics.genieo.com/track

&data=install_error=

&data=engine_hang_restart=

&data=uninstall=true

&data=updater_ping=

&revision_core=%d

&revision_updater=%d

&revision_partner=%d

&os_version=Windows

okernel32.dll

Windows Vista

Windows Server 2008

Windows 7

Windows Server 2008 R2

kernel32.dll

Web Server Edition

Windows Server 2003 R2,

Windows Storage Server 2003

Windows Home Server

Windows XP Professional x64 Edition

Windows Server 2003,

Web Edition

Windows XP

Windows 2000

(build %d)

SOFTWARE\JavaSoft\Java Runtime Environment\%s

SOFTWARE\JavaSoft\Java Development Kit\%s

%s\bin\javaw.exe

Updated registry: key L%s to: L%s

Failed to update registry: key L%s to: L%s

supported_langs

is not insupported langs - setting it to first supported language:

is not insupported langs - setting it to en

Manifest URL:

Failed to parse manifest. url:

Failed with non recoverable error to download manifest. url:

Failed to download manifest. url:

Discard upgrade. We tried this revision too many times. Waiting to newer revision. New rev: %d. Local rev: %d

Processing new execute action:

Blacklist: skip processing new execute action:

Failed to execute

New version does not contains any actions to execute.

.\UpgradeManager\src\UpgradeManager.cpp

..\UpdateLib\Platform\Common\src\Utils.cpp

{R%x%x%x}

%s\Partner\%s\text\%s_text.properties

can't be loaded - loading en_text.properties

%s\Partner\%s\text\en_text.properties

opera

chrome

/Chrome

/Opera

conf\partner_manifest.xml

updater_manifest.xml

conf\updater_manifest.xml

.\UpdaterService.cpp

%s\Partner\%s\conf\partner.properties

\conf\conf.ini

partner_manifest_url_template

Partner manifest URL:

partner_manifest.xml

-desk_icon_name "%S" -partner_name "%s" -uninstall_url "%S" -add_cp_entry_and_abort "true"

-add_desk "%s" -desk_icon "Partner\%s\img\%S" -desk_icon_name "%S" -desk_url "%S" -home_url "%S" -uninstall_url "%S" -uninst_icon_name "%S" -partner_name "%s" -start_menu_folder_name "%S" -add_ie_link "%s" -add_cp_entry "%s"

Failed to execute first time process

Failed to execute first time process - install dir does not exists on the registry

/chrome_ext

Failed to prepare enviroment - open failed to install url

Reached maximum number (%d) of failures for revision. will upgrade only to higher revision.

manifest.xml

conf\manifest.xml

Failed to install first time - open failed to install url:

hXXp://userfeedback-genieo.appspot.com/installfail.jsp?errcode=

Checked for update and abort (executed with check_only flag)

Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice

firefox

Software\Classes\http\shell\open\command

is_homepage_%s

NOT raising set-homepage flag of %s because it is blacklisted

set_homepage_do_%s

Raised set-homepage flag %s for browser %s to update the homepage url

ERROR while raising set-homepage flag %s for browser %s to update the homepage url. Error code=%d

SKIP while raising set-homepage flag for browser %s to update the homepage url. BROWSER IS NOT DEFAULT

NOT raising set-homepage flag of %s because Genieo is not its homepage.

is_search_provider_%s

NOT raising set-search-provider flag of %s because it is blacklisted

set_searchProvider_do_%s

Raised set-SearchProvider flag %s for browser %s to update the search-provider url

ERROR while raising set-search-provider flag %s for browser %s to update the search-provider url. Error code=%d

SKIP while raising set-search-provider flag for browser %s to update the set-search-provider url. BROWSER IS NOT DEFAULT

NOT raising set-search-provider flag of %s because Genieo is not its search-provider.

%s %d %s %s %s %s

\log\Updater.log

Updater.log

url.dll,FileProtocolHandler

rundll32.exe

UI is disabled - skip open URL:

uninstall\updater_uninstall.exe

Failed to execute the next upgrade process. Keep using this process

..\UpdateLib\Platform\Common\src\FileUtils.cpp

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe

gentray.exe_3896:

.text

`.rdata

@.data

.rsrc

tGHt.Ht&

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

?#%X.y

Broken pipe

Inappropriate I/O control operation

Operation not permitted

operator

GetProcessWindowStation

USER32.DLL

%[^=]=%[^

This sample does not support this version of Windows.

\u%2x%2x

inflate 1.2.3 Copyright 1995-2005 Mark Adler

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

1.2.3

1.2.24

Multipage Encode, Unsupported operation for this format

chrome

hXXp://

url.dll,FileProtocolHandler

rundll32.exe

[%8s](d/d/d d:d:d.d): %S

HTTP/1.0

127.0.0.1

GET %S %s

homepage.url

settings.url

about.url

help.url

show.tray.icon

open.homepage.on.install.complete

browser.default.override

dev.version

open.homepage.on.install.complete.url.override

partner.language

firefox

opera

&firsttime_startpage_url_status=

&firsttime_startpage_url=

hXXp://VVV.genieo.com/firsttime?

hXXp://VVV.genieo.com/firsttime?p=

tray.install.in.progress.hint.prefix

tray.menu.open

tray.menu.check.news

tray.menu.settings

tray.menu.about

tray.menu.help

tray.menu.bug.report

tray.menu.disable.notifications

tray.menu.disable.core

tray.menu.exit

desktop.icon.display.name

Couldn't run process %s

baloon.youHaveOver

baloon.youHave

baloon.UnreadItems

baloon.thereAreUnreadItemsClickToReadMore

hXXp://VVV.genieo.com/faq/11

hXXp://VVV.genieo.com/faq/12

K:\projects\AnabelPackage\build\src\TrayUi\Release\gentray.pdb

WS2_32.dll

URLDownloadToFileW

urlmon.dll

PSAPI.DLL

InternetCrackUrlW

WININET.dll

HttpSendRequestW

HttpQueryInfoW

HttpOpenRequestW

GetProcessHeap

KERNEL32.dll

USER32.dll

GDI32.dll

RegOpenKeyExW

RegQueryInfoKeyA

RegCloseKey

RegCreateKeyExW

RegNotifyChangeKeyValue

ADVAPI32.dll

ShellExecuteExW

ShellExecuteW

ShellExecuteA

SHELL32.dll

ole32.dll

SHLWAPI.dll

GetCPInfo

GetConsoleOutputCP

zcÁ

Unknown compression type %d

Empty keyword in iCCP chunk

Empty keyword in sPLT chunk

white_x=%f, white_y=%f

zero length keyword

Out of memory while procesing keyword

invalid keyword character 0xX

trailing spaces removed from keyword

leading spaces removed from keyword

extra interior spaces removed from keyword

Zero length keyword

keyword length must be 1 - 79 characters

Empty keyword in tEXt chunk

Empty keyword in zTXt chunk

1.0.6 or earlier

Only compression windows <= 32k supported by PNG

Only compression windows >= 256 supported by PNG

Only compression method 8 is supported by PNG

iTXt chunk not supported.

Buffer error in compressed datastream in %s chunk

Data error in compressed datastream in %s chunk

Incomplete compressed datastream in %s chunk

Unknown zTXt compression type %d

gamma = (%d/100000)

wx=%f, wy=%f, rx=%f, ry=%f

gx=%f, gy=%f, bx=%f, by=%f

incorrect gamma=(%d/100000)

NULL row buffer for row %ld, pass %d

libpng error no. %s: %s

libpng error: %s, offset=%d

libpng error: %s

libpng warning no. %s: %s

libpng warning: %s

%d %s %d d:d:d  0000

libpng version 1.2.24 - December 14, 2007

%c%c%c%c%c%c%c%c%c%c

<fd:%d>

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

mscoree.dll

KERNEL32.DLL

SetShellExecuteExError

k:\projects\AnabelPackage\build\src\Updater\UpdateLib\Platform\Common\inc\Error.h

Error %I64x, file: '%s' (timestamp: %S), func: '%s', line: '%d'

.\Platform\Common\src\FileUtils.cpp

.\Platform\Common\src\DownloadManager.cpp

SaveAction::execute

.\Platform\Actions\src\SaveAction.cpp

Failed to download for url:

Failed to save and abort - no more retries for: %s

Failed to save. Wait %d seconds before retry download: %s

Failed to verify MD5 for url:

Failed to decrypt for url:

hXXp://analytics.genieo.com/track

&data=install_error=

&data=engine_hang_restart=

&data=uninstall=true

&data=updater_ping=

&revision_core=%d

&revision_updater=%d

&revision_partner=%d

&os_version=Windows

okernel32.dll

Windows Vista

Windows Server 2008

Windows 7

Windows Server 2008 R2

kernel32.dll

Web Server Edition

Windows Server 2003 R2,

Windows Storage Server 2003

Windows Home Server

Windows XP Professional x64 Edition

Windows Server 2003,

Web Edition

Windows XP

Windows 2000

(build %d)

SOFTWARE\JavaSoft\Java Runtime Environment\%s

SOFTWARE\JavaSoft\Java Development Kit\%s

%s\bin\javaw.exe

.\Platform\Common\src\Utils.cpp

{R%x%x%x}

%s\Partner\%s\text\%s_text.properties

can't be loaded - loading en_text.properties

%s\Partner\%s\text\en_text.properties

hXXp://127.0.0.1:1886/shutdown

SystemMonitor: Handle pending URL

SystemMonitor: Failed to get homepage URL

SystemMonitor: Sleep for %d seconds

hXXp://localhost:1886/config/get?key=http.port

hXXp://updater.genieo.com/track_event?event=engine_hang_restart

hXXp://updater.genieo.com/track_event?event=engine_closed_unexpectedly

\bin\javaw.exe

javaw.exe

com.anabel.pp.main.JettyPersonalizationServerMain

\lib\engine.jar;

-Xms12m -Xmx96m -XX: DisableExplicitGC -XX:NewRatio=3 -XX:MinHeapFreeRatio=10 -XX:MaxHeapFreeRatio=10 -D"$ANABEL_GENIEO_ROOT_DIR$=@APPDATA@\Genieo\Application" -D"$ANABEL_GENIEO_DATA_DIR$=@APPDATA@\Genieo\Data" -Dprotostuff.runtime.morph_non_final_pojos=true

\bin\genupdater.exe

ntdll.dll

genieo.exe

genieutils.exe

genupdater.exe

chrome_do_notify_when_down

chrome.exe

com.anabel.pp.util.chrome.RegisterChromeSensorExt

SystemMonitor: set chrome homepage

hXXp://localhost:1886/extensions/ie_homepage_registry_changed/

hXXp://localhost:1886/extensions/ie_search_registry_changed/

SOFTWARE\Classes\ChromeHTML\shell\open\command

Couldn't find Chrome's executable path in registry; launching default browser

RegsitryListenr: failed to open key

RegsitryListenr: failed to watch key

RegsitryListenr: failed to re-watch key

Failed on http get - URL is NULL

HttpGetText: InternetCrackUrl failed

HttpGetText: WSAStartup failed

HttpGetText: WSAStartup version is incorrect

hXXp://127.0.0.1:1886/waitForStateChange?s=%c&format=text

hXXp://127.0.0.1:1886/notification?a=waitForStateChange&enabled=%s

hXXp://127.0.0.1:1886/waitForChangeInNumberOfItems?currentNum=%d

complete.png

Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice

xopera

Software\Classes\http\shell\open\command

hXXp://localhost:1886/config/get?key=port

=hXXp://127.0.0.1:1886/config/get?key=port

WelcomeScreen: Do not display welcome screen - engine state is %c

WelcomeScreen: do not open homepage - engine state is %c

Failed to read firsttime url-params from registry, using

WelcomeScreen: final open URL:

prep_env.png

1_downloading.png

2_collecting.png

3_mapping.png

4_creating.png

%s %d%%

tray_normal.ico

tray_awaitingMessage.ico

off.ico

down1.ico

down2.ico

down3.ico

c:\1.html

hXXp://127.0.0.1:1886/setState?s=%d&rand=%d

hXXp://127.0.0.1:1886/startpageapi/notification?ac=enable&rand=%d

hXXp://127.0.0.1:1886/startpageapi/notification?ac=disable&rand=%d

\bin\debugInfoCollector.exe

prep_env_err.png

uac_retry.png

network_retry.png

error.png

%s\Partner\%s\img\tray\%s%s

%s\Partner\%s\img\tray\%s

\conf\partner.properties

\Engine\conf\engine.properties

\log\gentray.log

com.anabel.pp.util.browsers.UninstallWithRevert

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe

Report a Bug

framework_setup.gen_3764:

.text

`.rdata

@.data

.ndata

.rsrc

uDSSh

.DEFAULT\Control Panel\International

Software\Microsoft\Windows\CurrentVersion

GetWindowsDirectoryA

KERNEL32.dll

ExitWindowsEx

USER32.dll

GDI32.dll

SHFileOperationA

ShellExecuteA

SHELL32.dll

RegEnumKeyA

RegCreateKeyExA

RegCloseKey

RegDeleteKeyA

RegOpenKeyExA

ADVAPI32.dll

COMCTL32.dll

ole32.dll

VERSION.dll

verifying installer: %d%%

unpacking data: %d%%

... %d%%

hXXp://nsis.sf.net/NSIS_Error

~nsu.tmp

%u.%u%s%s

RegDeleteKeyExA

%s=%s

*?|<>/":

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\isgenieoalive.dat

\..\TrayUi\bin\gentray.exe" -restart

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx87A7.tmp\NSISdl.dll

tall\framework_uninstall.exe

Data\Local\Temp\nsx87A7.tmp

rs\"%CurrentUserName%"\AppData\Local\Temp\nsx87A7.tmp\NSISdl.dll

WS2_32.dll

NSISdl.dll

invalid URL

Host: %s

GET %s HTTP/1.0

User-Agent: NSISDL/1.2 (Mozilla)

http=

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Unable to open %s

%skB (%d%%) of %skB at %u.ukB/s

(%u hours remaining)

(%u minutes remaining)

(%u seconds remaining)

Downloading %s

.reloc

c/AbstractBasicConverter.classPK

com/thoughtworks/xstream/converters/basic/StringConverter.classPK

com/thoughtworks/xstream/converters/basic/ThreadSafeSimpleDateFormat.classPK

com/thoughtworks/xstream/converters/basic/FloatConverter.classPK

com/thoughtworks/xstream/converters/basic/StringBuilderConverter.classPK

com/thoughtworks/xstream/converters/basic/BigDecimalConverter.classPK

com/thoughtworks/xstream/converters/basic/DateConverter.classPK

com/thoughtworks/xstream/converters/basic/StringBufferConverter.classPK

com/thoughtworks/xstream/converters/basic/DoubleConverter.classPK

com/thoughtworks/xstream/converters/basic/UUIDConverter.classPK

com/thoughtworks/xstream/converters/basic/ShortConverter.classPK

com/thoughtworks/xstream/converters/basic/NullConverter.classPK

com/thoughtworks/xstream/converters/basic/BooleanConverter.classPK

com/thoughtworks/xstream/converters/basic/LongConverter.classPK

com/thoughtworks/xstream/converters/basic/IntConverter.classPK

com/thoughtworks/xstream/converters/basic/BigIntegerConverter.classPK

com/thoughtworks/xstream/converters/basic/CharConverter.classPK

com/thoughtworks/xstream/converters/basic/ByteConverter.classPK

com/thoughtworks/xstream/converters/collections/ArrayConverter.classPK

com/thoughtworks/xstream/converters/collections/AbstractCollectionConverter.classPK

com/thoughtworks/xstream/converters/collections/CollectionConverter.classPK

com/thoughtworks/xstream/converters/collections/PropertiesConverter.classPK

com/thoughtworks/xstream/converters/collections/CharArrayConverter.classPK

com/thoughtworks/xstream/converters/collections/TreeMapConverter$PresortedMap$ArraySet.classPK

com/thoughtworks/xstream/converters/collections/TreeMapConverter$PresortedMap$1.classPK

com/thoughtworks/xstream/converters/collections/TreeMapConverter$PresortedMap.classPK

com/thoughtworks/xstream/converters/collections/TreeMapConverter$1.classPK

com/thoughtworks/xstream/converters/collections/TreeMapConverter.classPK

com/thoughtworks/xstream/converters/collections/MapConverter.classPK

com/thoughtworks/xstream/converters/collections/TreeSetConverter$PresortedSet.classPK

com/thoughtworks/xstream/converters/collections/TreeSetConverter.classPK

com/thoughtworks/xstream/converters/collections/BitSetConverter.classPK

com/thoughtworks/xstream/converters/ConverterRegistry.classPK

com/thoughtworks/xstream/converters/SingleValueConverterWrapper.classPK

com/thoughtworks/xstream/converters/enums/EnumSetConverter.classPK

com/thoughtworks/xstream/converters/enums/EnumSingleValueConverter.classPK

com/thoughtworks/xstream/converters/enums/EnumConverter.classPK

com/thoughtworks/xstream/converters/enums/EnumMapConverter.classPK

com/thoughtworks/xstream/mapper/Mapper$Null.classPK

com/thoughtworks/xstream/mapper/Mapper$ImplicitCollectionMapping.classPK

com/thoughtworks/xstream/mapper/Mapper.classPK

com/thoughtworks/xstream/mapper/ClassAliasingMapper.classPK

com/thoughtworks/xstream/mapper/MapperWrapper.classPK

com/thoughtworks/xstream/mapper/CachingMapper.classPK

com/thoughtworks/xstream/mapper/PackageAliasingMapper$1.classPK

com/thoughtworks/xstream/mapper/PackageAliasingMapper.classPK

com/thoughtworks/xstream/mapper/AnnotationConfiguration.classPK

com/thoughtworks/xstream/mapper/DefaultImplementationsMapper.classPK

com/thoughtworks/xstream/mapper/LocalConversionMapper.classPK

com/thoughtworks/xstream/mapper/AttributeMapper.classPK

com/thoughtworks/xstream/mapper/CGLIBMapper$Marker.classPK

com/thoughtworks/xstream/mapper/CGLIBMapper.classPK

com/thoughtworks/xstream/mapper/AbstractXmlFriendlyMapper.classPK

com/thoughtworks/xstream/mapper/FieldAliasingMapper.classPK

com/thoughtworks/xstream/mapper/AttributeAliasingMapper.classPK

com/thoughtworks/xstream/mapper/AbstractAttributeAliasingMapper.classPK

com/thoughtworks/xstream/mapper/SystemAttributeAliasingMapper.classPK

com/thoughtworks/xstream/mapper/ImmutableTypesMapper.classPK

com/thoughtworks/xstream/mapper/ImplicitCollectionMapper$ImplicitCollectionMapperForClass.classPK

com/thoughtworks/xstream/mapper/ImplicitCollectionMapper$ImplicitCollectionMappingImpl.classPK

com/thoughtworks/xstream/mapper/ImplicitCollectionMapper$NamedItemType.classPK

com/thoughtworks/xstream/mapper/ImplicitCollectionMapper$1.classPK

com/thoughtworks/xstream/mapper/ImplicitCollectionMapper.classPK

com/thoughtworks/xstream/mapper/DefaultMapper.classPK

com/thoughtworks/xstream/mapper/OuterClassMapper.classPK

com/thoughtworks/xstream/mapper/DynamicProxyMapper$DynamicProxy.classPK

com/thoughtworks/xstream/mapper/DynamicProxyMapper.classPK

com/thoughtworks/xstream/mapper/XStream11XmlFriendlyMapper.classPK

com/thoughtworks/xstream/mapper/CannotResolveClassException.classPK

com/thoughtworks/xstream/mapper/XmlFriendlyMapper.classPK

com/thoughtworks/xstream/mapper/ArrayMapper.classPK

com/thoughtworks/xstream/mapper/EnumMapper.classPK

com/thoughtworks/xstream/mapper/AnnotationMapper$1.classPK

com/thoughtworks/xstream/mapper/AnnotationMapper$UnprocessedTypesSet.classPK

com/thoughtworks/xstream/mapper/AnnotationMapper$WeakHashSet.classPK

com/thoughtworks/xstream/mapper/AnnotationMapper.classPK

com/thoughtworks/xstream/alias/ClassMapper$Null.classPK

com/thoughtworks/xstream/alias/ClassMapper.classPK

com/thoughtworks/xstream/alias/CannotResolveClassException.classPK

com/thoughtworks/xstream/alias/NameMapper.classPK

com/thoughtworks/xstream/core/util/FastStack.classPK

com/thoughtworks/xstream/core/util/ObjectIdDictionary$Wrapper.classPK

com/thoughtworks/xstream/core/util/ObjectIdDictionary$IdWrapper.classPK

com/thoughtworks/xstream/core/util/ObjectIdDictionary$WeakIdWrapper.classPK

com/thoughtworks/xstream/core/util/ObjectIdDictionary.classPK

com/thoughtworks/xstream/core/util/OrderRetainingMap$ArraySet.classPK

com/thoughtworks/xstream/core/util/OrderRetainingMap$1.classPK

com/thoughtworks/xstream/core/util/OrderRetainingMap.classPK

com/thoughtworks/xstream/core/util/PrioritizedList$PrioritizedItem.classPK

com/thoughtworks/xstream/core/util/PrioritizedList$PrioritizedItemIterator.classPK

com/thoughtworks/xstream/core/util/PrioritizedList.classPK

com/thoughtworks/xstream/core/util/TypedNull.classPK

com/thoughtworks/xstream/core/util/CustomObjectInputStream$StreamCallback.classPK

com/thoughtworks/xstream/core/util/CustomObjectInputStream$CustomGetField.classPK

/util/DependencyInjectionFactory.classPK

com/thoughtworks/xstream/core/util/XmlHeaderAwareReader.classPK

com/thoughtworks/xstream/core/util/CustomObjectOutputStream$StreamCallback.classPK

com/thoughtworks/xstream/core/util/CustomObjectOutputStream$CustomPutField.classPK

com/thoughtworks/xstream/core/util/CustomObjectOutputStream$1.classPK

com/thoughtworks/xstream/core/util/CustomObjectOutputStream.classPK

com/thoughtworks/xstream/core/util/ThreadSafePropertyEditor$1.classPK

com/thoughtworks/xstream/core/util/ThreadSafePropertyEditor.classPK

com/thoughtworks/xstream/core/ReferenceByXPathMarshaller.classPK

com/thoughtworks/xstream/core/AbstractReferenceMarshaller$ReferencedImplicitElementException.classPK

com/thoughtworks/xstream/core/AbstractReferenceMarshaller.classPK

com/thoughtworks/xstream/core/TreeMarshaller$CircularReferenceException.classPK

com/thoughtworks/xstream/core/TreeMarshaller.classPK

com/thoughtworks/xstream/core/BaseException.classPK

v.hnky

gine_old\*.*

isgenieoalive.dat

ISGENI~1.DAT

Data\Local\Temp\isgenieoalive.dat

sers\"%CurrentUserName%"\AppData\Local\Temp\nsx87A7.tmp

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\\genieo_temp\framework_setup.gen

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp

framework_setup.gen

ers\"%CurrentUserName%"\AppData\Local\Temp\nsd8777.tmp

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx87A7.tmp

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\framework_setup.gen

C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res

<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="X86" name="Nullsoft.NSIS.exehead" type="win32"/><description>Nullsoft Install System v2.46</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"/></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/></application></compatibility></assembly>

CompanyWebsite

hXXp://VVV.genieo.com

2.7.688

javaw.exe_556:

.text

`.rdata

@.data

.rsrc

/Xusage.txt

-Djava.class.path=%s

Unable to locate JRE meeting specification "%s"

1.6.0_18-b07

JRE-Version = %s, JRE-Restrict-Search = %s Selected = %s

Syntax error in version specification "%s"

Invalid or corrupt jarfile %s

Unable to access jarfile %s

-Djava.awt.headless=

-Djava.awt.headless=true

option[-] = '%s'

ignoreUnrecognized is %s,

sun.jnu.encoding

isSupported

-Dsun.java.command=

-Dsun.java.launcher=SUN_STANDARD

A %c separated list of directories, JAR archives,

load Java programming language agent, see java.lang.instrument

The default VM is %s%s

is a synonym for the "%s" VM [deprecated]

to select the "%s" VM

Usage: %s [-options] class [args...]

(to execute a class)

or %s [-options] -jar jarfile [args...]

(to execute a jar file)

Can't open %s

Could not find the main class: %s. Program will exit.

Failed to load Main Class: %s

Could not find the main class: %s. Program will exit.

argv[-] = '%s'

Apps' argc is %d

Main-Class is '%s'

Warning: %s VM not supported; %s VM will be used

Error: %s VM not supported

Error: Unable to resolve VM alias %s

Error: Corrupt jvm.cfg file; cycle in alias list.

Default VM: %s

%s requires class path specification

%s full version "%s"

Warning: %s option is no longer supported.

-Xrunhprof:cpu=old,file=java.prof

-Xrunhprof:cpu=old,file=%s

%ld micro seconds to parse jvm.cfg

name: %s vmType: %s alias: %s

name: %s vmType: %s server_class: %s

jvm.cfg[%d] = ->%s<-

Warning: unknown VM type on line %d of `%s'

Warning: missing server class VM on line %d of `%s'

Warning: missing VM alias on line %d of `%s'

Warning: missing VM type on line %d of `%s'

Warning: no leading - on line %d of `%s'

Error: could not open `%s'

\jvm.cfg

\bin\splashscreen.dll

%s\jvm.dll

%s\bin\%s\jvm.dll

Version major.minor.micro = %s.%s

Failed reading value of registry key:

Software\JavaSoft\Java Runtime Environment\%s\JavaHome

Error opening registry key 'Software\JavaSoft\Java Runtime Environment\%s'

Registry key 'Software\JavaSoft\Java Runtime Environment\CurrentVersion'

has value '%s', but '1.6' is required.

Error opening registry key 'Software\JavaSoft\Java Runtime Environment'

-Dsun.java2d.opengl

-Dsun.java2d.d3d

-Dsun.java2d.noddraw

-Dsun.awt.warmup

Unable to resolve path to current %s executable: %s

CreateProcess(%s, ...) failed: %s

ReExec Args: %s

ReExec Command: %s (%s)

ExecJRE: new: %s

ExecJRE: old: %s

Error: could not find java.dll

JRE path is %s

%s\jre\bin\java.dll

%s\bin\java.dll

Error loading: %s

CRT path is %s

\bin\msvcr71.dll

EnsureJreInstallation:%s:load failed

\bin\jkernel.dll

EnsureJreInstallation:<%s>:not found

EnsureJreInstallation:unsupported platform

Error: can't find JNI interfaces in: %s

JVM path is %s

\bin\awt.dll

\bin\java.dll

\bin\verify.dll

Error: no `%s' JVM at `%s'.

Error: no known VMs. (check for corrupt jvm.cfg file)

before: "%s"

after : "%s"

META-INF/MANIFEST.MF

1.1.3

inflate 1.1.3 Copyright 1995-1998 Mark Adler

mscoree.dll

Broken pipe

Inappropriate I/O control operation

Operation not permitted

kernel32.dll

- This application cannot run using the active version of the Microsoft .NET Runtime

Please contact the application's support team for more information.

GetProcessWindowStation

user32.dll

internal state. The program cannot safely continue execution and must

continue execution and must now be terminated.

C:\BUILD_~1\jdk6_18\control\build\WINDOW~1\tmp\java\javaw\obj\javaw.pdb

RegCloseKey

RegOpenKeyExA

RegEnumKeyA

ADVAPI32.dll

USER32.dll

GetCPInfo

KERNEL32.dll

%Program Files% (x86)\Java\jre6\bin\javaw.exe

<assemblyIdentity version="6.0.180.7"

name="javaw.exe"

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

<requestedExecutionLevel

3333333333330

333333333307

PP%d(jjjjj

6.0.180.7

javaw.exe

vlc.exe_2020:

.text

P`.data

.rdata

`@.bss

.idata

.rsrc

.gnu_deb

libgcj-12.dll

Can't connect to FTP server 0xlu

VLC/2.0.6

globalhotkeys,none

_matherr(): %s in %s(%g, %g) (retval=%g)

VirtualQuery failed for %d bytes at address %p

VirtualProtect failed with code 0x%x

Unknown pseudo relocation protocol version %d.

Unknown pseudo relocation bit size %d.

_acmdln

_amsg_exit

FtpPutFileW

libvlc.dll

KERNEL32.dll

msvcrt.dll

PSAPI.DLL

SHELL32.DLL

USER32.dll

WININET.DLL

<<<66:*/

.FDGS5$Yfll

Tx.AP:|

T.syy

L&Y^.sxx

.ZL9L

vlc.exe.dbg

VLC crash reporting

VLC media player just crashed. Do you want to send a bug report to the developers team?

VLC Crash Reporter

crash.videolan.org

/crashes-win32/dddddd

Report sent

Report sent correctly. Thanks a lot for the help.

Report sending failed

There was an error while transferring to the FTP server. Thanks a lot for the help anyway.

There was an error while connecting to the FTP server. Thanks a lot for the help anyway.

OS=%d.%d.%d.%d.%s

VLC=2.0.6 Twoflower

x at %px

%p|%s

kernel32.dll

C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\crashdump

vlc.exe

2.0.6

VLC media player 2.0.6

javaw.exe_556_rwx_02580000_003A8000:

8\8@8$8-

`8

8(8,8 8082

-8,808,808,808,8

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):

GoogleUpdate.exe:2664
GoogleUpdate.exe:1664
GoogleUpdate.exe:2556
vlc-2.0.6-win32.exe:1052
smt_istartsurf.exe:3464
ProtectWindowsManager.exe:3260
ProtectWindowsManager.exe:3220
gentray.exe:3508
gentray.exe:3700
gentray.exe:1664
gentray.exe:3896
fac9668a-7d04-4c07-a2a7-1c8ad5184195-4.exe:3984
ProtectService.exe:4084
ProtectService.exe:3792
framework_setup.gen:3764
wpm_v20.0.0.2227.exe:3196
appshat.exe:2824
biclient.exe:2144
firsttime_setup.exe:2072
ChromeSync.exe:3444
QQBrowser.exe:2268
QQBrowser.exe:3576
powershell.exe:3120
powershell.exe:3240
powershell.exe:3300
setup.exe:2120
HPNotify.exe:3924
genieo_setup.gen:3972
XTab_Setup2253.exe:3332
genieo_setup.exe:3460
42.0.2311.135_chrome_installer.exe:2644
appshat_generic.exe:3540
webplayer_installer.exe:3920
vlc-cache-gen.exe:4024
%original file name%.exe:2132
vlc.exe:2020
InstallGenieo.exe:3140
InstallGenieo.exe:2744
cscript.exe:3720
Hiyvyhwdps.exe:3784
D411.tmp:2636
trayapp_setup.gen:3804
genupdater.exe:2268
Delete the original Application file.
Delete or disinfect the following files created/modified by the Application:

%Program Files% (x86)\Google\Update\Install\{EAB7BD43-95BB-40FB-87B3-376482E87EF2}\42.0.2311.135_chrome_installer.exe (336195 bytes)
%Program Files% (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\42.0.2311.135\42.0.2311.135_chrome_installer.exe (317324 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\si\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll (13368 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_arrays.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.log (333852 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_02.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\fmc.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo (12088 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\bbc_co_uk.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_smem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotionblur_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsharpen_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\hotkeys.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_rgb_sse2_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white.png (70 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libosdmenu_plugin.dll (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn671D.tmp\LangDLL.dll (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcroppadd_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_inhibit.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\common.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\view.html (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\speaker-32.png (942 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_pool.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libps_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll (38495 bytes)
%Program Files% (x86)\VideoLAN\VLC\AUTHORS.txt (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\mpora.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_events.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list_player.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\01_googleimage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libskins2_plugin.dll (62035 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture_fifo.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libglwin32_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ts_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\play_pause.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\httprequests.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\axvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradient_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\vlc.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo (28288 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfixed32_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi420_yuy2_sse2_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcolorthres_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\3dnow\libmemcpy3dn_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libripple_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_228ef1_256x240.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ka\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll (8560 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\minus.png (109 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libatmo_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvc1_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\loop.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_main.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libvcd_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmirror_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_threads.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\vlc.mo (30968 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fa\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Back-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libfreetype_plugin.dll (25112 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube.luac (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_asf_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_services_discovery.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll (51840 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tl\LC_MESSAGES\vlc.mo (461 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_streams.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_10.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_rgb_mmx_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.dll.a (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metacafe.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libwingdi_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\liblive555_plugin.dll (22552 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_07.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\main (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_discoverer.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libtransform_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\reset.png (134 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_probe.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll (32784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xml.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll (12088 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\telnet.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker_mute.png (328 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\freebox.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mouse.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_common.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\play.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_opengl.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\functions.js (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmono_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\france2.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwave_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_browse.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\empty.png (120 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_demux.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_structures.h (2 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libadummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\03_lastfm.luac (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdrawable_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libty_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery.jstree.js (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libclone_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\luac.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\VideoLAN Website.url (50 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_picture.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsubsusf_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\am\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\km\LC_MESSAGES\vlc.mo (33263 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.dll.a (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\README.txt (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete.png (124 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\googlevideo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_display.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Folder-48.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\volume.png (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn671D.tmp\UAC.dll (1917 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpuzzle_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc16x16.png (606 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_down.png (108 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\cue.luac (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\plus.png (114 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liberase_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_gcrypt.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\sse2\libi422_yuy2_sse2_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bg\LC_MESSAGES\vlc.mo (23424 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\joox.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hi\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll (40228 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libinvert_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libopus_plugin.dll (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gu\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es_out.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libosd_parser_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpgv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_04.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx670C.tmp (2194421 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libmemcpymmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input_item.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\create_stream.html (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_01.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libstats_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ga\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSansBold.ttf (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libalphamask_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libball_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll (364982 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Video-48.png (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_osd.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist_small.png (84 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsubsdelay_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\input (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_smb_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\batch_window.html (857 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_media_library.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\help.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\js\vlm.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\error_window.html (482 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemux_stl_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_100_eeeeee_1x100.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_08.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\main.css (3 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_version.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_spu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\test.html (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_udp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\anevia_xml.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc.exe.manifest (825 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_messages.h (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn671D.tmp\InstallOptions.dll (804 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\ui.js (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo (702 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libxa_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_subpicture.h (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_20_666666_40x40.png (197 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libkaraoke_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\icecast.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdirac_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libavcodec_plugin.dll (262251 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_plugin.h (16 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libpva_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libhqdn3d_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\style.css (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo (19096 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sl\LC_MESSAGES\vlc.mo (15536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_about.h (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_05.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo (19152 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\esc.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll (6360 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mk\LC_MESSAGES\vlc.mo (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uz\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll (42762 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll (37025 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\custom.lua (487 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\libvlc.pc (283 bytes)
%Program Files% (x86)\VideoLAN\VLC\uninstall.exe (3686 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm_export.html (296 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libaudioscrobbler_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libposterize_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_display_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_avcodec.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_library.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mr\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fs.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo (17848 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libgestures_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slow.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\fetcher\tvrage.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_transcode_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_222222_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png (126 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libstl_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnuv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmosaic_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.la (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_md5.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libddummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmpc_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libswscale_plugin.dll (13584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_charset.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_file_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpsychedelic_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\zapiks.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_strings.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libedummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_url.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\index.html (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect2d_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libnsc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sql.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\dkjson.luac (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_config_cat.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_video_splitter.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_bridge_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_es_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pluzz.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libyuvp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmarq_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libau_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_objects.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_left.png (88 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_atomic.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll (3312 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsid_plugin.dll (30968 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\dailymotion.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_fdf5ce_1x400.png (115 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo (8560 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libtwolame_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_http_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_dummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\deprecated.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll (66168 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvdummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\metachannels.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\modules\host.luac (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.catalog (167 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\footer (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\jamendo.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\mobile.css (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libcompressor_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_attachment_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_text_style.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\appletrailers.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_tls.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libaudiobargraph_v_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\prev.png (104 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liblibmpeg2_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_list.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\refresh.png (147 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_xlib.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffd27a_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\stop.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_meta.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo (484 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_langfromtelx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_variables.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo (25776 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\browse (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_equalizer.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\fw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\pkgconfig\vlc-plugin.pc (816 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_intf.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libcanvas_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\vlc-48.png (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpanoramix_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\buttons.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\unselected.png (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\cli.luac (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\skin.dtd (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\favicon.ico (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout_window.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libts_plugin.dll (6360 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dumpmeta.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_bits.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\THANKS.txt (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_00.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fur\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_playlist.h (15 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\speaker.png (174 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_rand.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_description_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\controlers.js (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\offset_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Other-48.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_shout_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\sout (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\playlist.png (85 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\katsomo.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\an\LC_MESSAGES\vlc.mo (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\activex\README.TXT (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\sandbox.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\vlm.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\jamendo.luac (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\eject.png (93 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\README.txt (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\liblogo_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll (6584 bytes)
%Program Files% (x86)\VideoLAN\VLC\NEWS.txt (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll (10136 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_select_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ach\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\play_pause.png (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_06.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_events.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll (17848 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\common.js (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\soundcloud.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libremoteosd_plugin.dll (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ia\LC_MESSAGES\vlc.mo (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selected\previous.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\vlc-cache-gen.exe (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlccore.lib (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libquicktime_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi420_yuy2_mmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libwav_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll (39329 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll (9608 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo (11048 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libdummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_right.png (91 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_wav_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\status.xml (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\stop.png (80 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\winamp2.xml (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmotiondetect_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librss_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\dummy.luac (819 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_window.html (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_aout_mixer.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\break.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\vlm (9 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\modules\simplexml.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libsubtitle_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nn\LC_MESSAGES\vlc.mo (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_tcp_plugin.dll (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn671D.tmp\modern-wizard.bmp (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\br\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_configuration.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libdeinterlace_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_dialog.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_sout.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\playlist_jstree.xml (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-1.5.1.min.js (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hy\LC_MESSAGES\vlc.mo (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_03.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\reader\filename.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\js\jquery-ui-1.8.13.custom.min.js (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\bw.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mmx\libi422_yuy2_mmx_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo (19592 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\extreme.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libadjust_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_ftp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\volume_up.png (112 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libwall_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\vlm.xml (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_modules.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libaiff_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vlm.h (12 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_delay_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_httpd.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ff\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmod_plugin.dll (18424 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\pinkbike.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\mn\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png (201 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_ps_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\wa\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlccore.dll (70870 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\mobile_view.html (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvobsub_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll (35784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libdmo_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_fourcc.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sout.png (102 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\repeat.png (105 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\volume.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\selection\next.png (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\libnetsync_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\nl\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sort.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\canalplus.luac (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block_helper.h (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\libvlc.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libkate_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libreal_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\.hosts (122 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_100_f6f6f6_1x400.png (103 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\info.png (142 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default.cfg (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo (21216 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_codec.h (8 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ja\LC_MESSAGES\vlc.mo (23296 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn671D.tmp\ioSpecial.ini (11095 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_image.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\he\LC_MESSAGES\vlc.mo (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\requests\browse.json (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libogg_plugin.dll (5064 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_http.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\default.vlt (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\koreus.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_input.h (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libchain_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\lib\libvlc.lib (7192 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_stream.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_art_finder.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libtta_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll (26688 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_network.h (10 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_mtime.h (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\white_cross_small.png (96 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libx264_plugin.dll (34365 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\delete_small.png (94 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll (5520 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_cpu.h (3 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_keys.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\old\playlist (7 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\my\LC_MESSAGES\vlc.mo (444 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\hr\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libbluescreen_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\lelombrik.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\Documentation.url (55 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libmkv_plugin.dll (34186 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll (16288 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo (6584 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libyuy2_i420_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libh264_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\browse_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_block.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\skins\fonts\FreeSans.ttf (9320 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\next.png (101 bytes)
%Program Files% (x86)\VideoLAN\VLC\osdmenu\default\volume\volume_09.png (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libgme_plugin.dll (15168 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc.h (15 bytes)
C:\Users\Public\Desktop\VLC media player.lnk (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo (11344 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\control\liboldrc_plugin.dll (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\intf\http.luac (13 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_epg.h (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libgrey_yuv_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_es.h (11 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\fullscreen.png (121 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png (95 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ckb\LC_MESSAGES\vlc.mo (3616 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\kmr\LC_MESSAGES\vlc.mo (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll (13584 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\gl\LC_MESSAGES\vlc.mo (20624 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\snapshot.png (206 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_vout.h (5 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_acl.h (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libaccess_rar_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\mux\libmux_mpjpeg_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo (12536 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_access.h (6 bytes)
%Program Files% (x86)\VideoLAN\VLC\COPYING.txt (784 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_raop_plugin.dll (15536 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\libt140_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\cgg\LC_MESSAGES\vlc.mo (1552 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\sd.png (116 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\misc\libmemcpy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_point.png (111 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d_plugin.dll (4992 bytes)
%Program Files% (x86)\VideoLAN\VLC\New_Skins.url (64 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\notify\libmsn_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_gloss-wave_35_f6a828_500x100.png (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\pause.png (82 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\vimeo.luac (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\libvlc_media_player.h (1856 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\.hosts (289 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libscale_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo (3312 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libgradfun_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo (12024 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libdemuxdump_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\npvlc.dll.manifest (294 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\video_filter\libmagnify_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\uk\LC_MESSAGES\vlc.mo (25824 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\sdk\include\vlc\plugins\vlc_filter.h (14 bytes)
%Program Files% (x86)\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo (20416 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\shuffle.png (110 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\demux\libvoc_plugin.dll (2392 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\sd\metachannels.luac (2 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\images\Audio-48.png (4 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\http\old\images\slider_bar.png (86 bytes)
%Program Files% (x86)\VideoLAN\VLC\lua\playlist\youtube_homepage.luac (1 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll (8184 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\ClearnC.exe (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\quick_searchff#5.4.10.xpi (6360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\XTab_Setup2253.exe (76078 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\eg2.zip (305928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\conf (79 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\bg.png (5064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\sweetsearch!1.0.0.1031.xpi (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\Thumbs.db (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\RegWrite.exe (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\474.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\QQBrowser.exe (5199 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\Thumbs.db (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\QQBrowserFrame.dll (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\uninstallDlg2.xml (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\ChromeSync.exe (10136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\eg1.zip (186027 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\474.db (304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\scrollbar.bmp (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\code6.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\DataBase (26688 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\tmp\wpm_v20.0.0.2227.exe (12024 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\xtmp447130\UninstallManager.exe (60186 bytes)
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\up[1].htm (1 bytes)
C:\ProgramData\WindowsMangerProtect\update\conf (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\log\gentray.log (7724 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\abaa9e80090330646ca55139049431e9.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\339.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\221.js (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\234.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\288.js (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\354.js (5118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\212855753a72be76bb1350697c3ed213.js (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\7671332eccfbb5bf221173b55961680e.js (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\1.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\crossrider_statusbar.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\255.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon24.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button1.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\dea5e6ba6d2bff78491f80fc17fea175.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\2355cb94f4d53404670751195ab93ea0.js (947 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\install.rdf (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\e76bc60993b44ceec47fb8d2073839c3.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\72.js (1601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\82ae351b0adb35f5f44324b6c052397a.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\9.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\1a51013bcda038651cc78694a96c0210.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\7ba4c7d2c04982a03d48b02f19d9324f.js (618 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\27266349bbace404a108db18330919e3.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\22.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\532c1f8715567163fea2ed1ddd4d4f86.js (134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\skin.css (909 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\ffCoreFilesIndex.txt (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\0ae79d90e9ae675c9a992ac5b7b5b1ba.js (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button5.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\281.js (461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\183.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\extension.js (358 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\184.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\182.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\253.js (741 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon16.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\660ac6c05dcbaf573904832d41abee78.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\193.js (873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\panelarrow-up.png (921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\180.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\1fbf7ba05ce811d4718546ebfa0201e5.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\f4eab40e017dd4d149822305be22495e.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button2.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button3.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\6fe09b92a48c3ffb8e69d688a25752f9.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\0ec5d715ce79bb02168b70564be85089.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome.manifest (634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\379.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\345.js (671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\button4.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\browser.xul (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\77b1fe89c3d9c1aa1014f87e943581e0.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\be4bc865c931cb575a6bb7d33ad13707.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\21.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\195.js (414 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\1114e625a96f6eccb05324a1b247b6a4.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\220.js (1592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\f789ca0a7472132d15ab54c79ce373fe.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\13.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\223.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\168737e09e476224e775af7cd11ea98b.js (964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\94a506c6aeaf56f0e5aca8a0bb67fbc3.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\390.js (829 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\177.js (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\1362dd7e14e4664551036109448e0ecd.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\aa3140783c50b24af4528077049cbeec.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\4e1225a8a0f1d64eb42d56e2de4324a0.js (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\14.js (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins.json (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\16.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\defaults\preferences\prefs.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\49fca5829ce8f711d5c9acb0e78f9d7e.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\6db05ba405991b49cf2e333ae22653c5.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\200.js (813 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\7b20323ff2f80f95e96e6ab0a2b57d23.js (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\207.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\b1d93195684664a25e9a313ac5c6be63.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\69a6d57ce809d73fabecbd52752aa67d.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\102.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\246.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\242.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\91.js (6772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\popup.html (353 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\50e683a86bf7ff61f11559ab6efbedd1.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\7e161230f862c8cf85addcf95a70d50e.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\7060ed13a913dcaa111828253a824206.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\5188a332e3d067421484aaefd7aeba58.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\252.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\64.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\4.js (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\385.js (805 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\manifest.xml (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\78.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\47.js (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\73ea98ffb7f76f458adec97f2c9261e1.js (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\options.xul (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\28.js (506 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\update.css (144 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\locale\en-US\translations.dtd (429 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\98.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\search_dialog.xul (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\f2f2fbc1df1860ddc50aa6950acf6397.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\7.js (689 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\391.js (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\background.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\api\891343c7b9cccbb5757526a1326a8d4f.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\userCode\background.js (640 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\dialog.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\767d7496d8d27e0fbd3d5109b3ac1381.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon128.png (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\installer.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\dfdc444c6bc554b4dd215ee4ea61dc49.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\skin\icon48.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\376.js (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\180723a8fd869936a149440b0af75201.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\chrome\content\core\9afbe23cba2858994cb2cd505628c866.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\[email protected]\extensionData\plugins\17.js (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\targetDefaultPortals.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_tmp_template.txt (61 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\gad_categories.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\xstream-1.3.1.jar (15168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_datetime.stop (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx87A6.tmp (300445 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\debugInfoCollector.l4j.ini (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops2_stemmed.stop (416 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\Info_1_7.plist (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\de_top_1000_draft.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\da_topwords.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\tr_stops_stemmed.stop (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\servlet-api-2.5.jar (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops_stemmed.stop (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\heb_white_list.txt (8560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\smtp.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\genieo_console.l4j.ini (118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_common500cleaned.stop (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\x64\NativeUtils.dll (21216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-core-1.0.1.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\da_stops_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\sac.jar (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_MergedStemmedEnglish.stop (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\NativeUtils.dll (16424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\en_topwords.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\jetty-webapp-7.3.0.v20110203.jar (32128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac_installing.png (345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\rome-1.0.jar (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\it_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\framework_uninstall.exe (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\es_top_1000_draft.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\nl_topwords.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_numbers.stop (54 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\xpp3_min-1.1.4c.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\sqlite-jdbc-3.7.2-windows.jar (20624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\it_top_1000_draft.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\no_stops_stemmed1.stop (559 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\no_stops_stemmed_more.stop (583 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\de_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\engine_tray_icon_dev.png (632 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ro_morestops.stop (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx87A7.tmp\NSISdl.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\ini4j-0.5.1.jar (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\de_merged_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\modules-0.3.2.jar (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\dd-plist.jar (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\en_nationalities.txt (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\bannedList.dat (388 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\commons-codec-1.6.jar (8560 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_outb.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_mapping_outb.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-runtime-1.0.1.jar (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\slf4j-api-1.6.0.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\Info.plist (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_misc.stop (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\cssparser-0.9.5.jar (9320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac_disabled.png (421 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_anabel.stop (319 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_date_time.stop (499 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\defaultPortals.xml (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\log4j-1.2.15.jar (13368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\commons-logging-1.1.1.jar (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\ro_topwords.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\defaultFeeds.xml (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\genieoLogo24.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\readme.txt (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\httpcore-4.2.jar (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\slf4j-log4j12-1.6.0.jar (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\es_merged_stemmed.stop (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\es_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_numbers_and_currencies.stop (78 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\hu_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\log4j_release_mac.properties (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\restfb-1.6.12.jar (10136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ru_stops_stemmed2.stop (892 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\httpmime-4.2.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops_stemmed_new.stop (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\sitelang.txt (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac_new_items.png (343 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-collectionschema-1.0.1.jar (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\product_domains.txt (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ru_merged_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\log4j_release.properties (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\tr_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\it_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\fr_lang.properties (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\it_merged_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\hu_stops_stemmed.stop (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_ToBeAddedToStop.stop (117 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\pt_stops_stemmed_v0.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\engine.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\engine.jar (65930 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\zombie_icon.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fr_merged_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_ob_withadult.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\log4j_dev.properties (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\sv_topwords.txt (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_date_time.stop (342 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\de_merged_stemmed2.stop (347 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fr_top_500_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_tmp_template_all.txt (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\fr_topwords.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\apache-mime4j-0.6.jar (12088 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\pt_stops_stemmed.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\fi_topwords.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\JGoogleAnalyticsTracker-1.2.1-SNAPSHOT.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\lucene-snowball-3.0.0.jar (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\isgenieoalive.dat (2475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\gad_categories_multilingual.txt (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\tray_icons_mac\tray_mac.png (333 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\en_top_1000_draft.txt (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\signpost-core-1.2.1.1.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\jdom.jar (5520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\explicit_content.dat (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\res\engine_tray_icon.png (723 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\en_lang.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\no_stops_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\debugInfoCollector.exe (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\pt_stops_more.stop (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\explicitList.dat (491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\pt_topwords.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\ru_lang.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\sv_stops_stemmed.stop (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\default.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\de_topwords.txt (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\explicit\bannedListByURL.dat (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\en_25nouns_wiki.stop (169 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_stops_stemmed3.stop (357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fr_stops_stemmed2.stop (395 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\texts\origin\ru_lang.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\genieutils.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\preset_feeds.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\cluto_wrapper.properties (942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\json.jar (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\httpclient-4.2.jar (14184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\no_topwords.txt (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_mapping.txt (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\fi_stops_stemmed.stop (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\amazon_ad_api.jar (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\nl_morestops.stop (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\protostuff-api-1.0.1.jar (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\he_general.stop (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\fr_top_1000_draft.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\lang\drafts\de_top_100_draft.txt (582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\ro_stops_stemmed.stop (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\all_explicit.stop (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_ob.txt (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\lib\jericho-html-3.1.jar (6360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\categories_articlebase.txt (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\bin\genieo.l4j.ini (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Engine\conf\stopwords\it_stops_stemmed2.stop (473 bytes)
C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (2444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx2A6A.tmp\dkhbofocf.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx2A6A.tmp\mhuec.dll (2136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx2A6A.tmp\lwfjntrs.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx2A6A.tmp\Tgytgvbizx.tmp (425229 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx2A6A.tmp\Hiyvyhwdps.exe (3345313 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.4 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\eula[1].htm (1061 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.2 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.3 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.0 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.1 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.6 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.7 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\3dcb990301cdcc4caf3f2b66db05a4ce[1].htm (36085 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\vlc-2.0.6-win32.exe.5 (178121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.1 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.0 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.3 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.2 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.5 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.4 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.7 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\smt_istartsurf.exe.6 (6872 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.1 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula-swiftrecord[1].htm (4339 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.7 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.6 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.5 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.4 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.3 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.2 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.1 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\appshat_generic.exe.0 (2696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\tokyoLightGrayStripesBG[1].jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\tokyo_default_logo[1].png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.2 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.3 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.0 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.6 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.7 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.4 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\InstallGenieo.exe.5 (9352 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\D411.tmp (33816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\eula-istartsurf[1].htm (1053 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\tokyo_sprite_full[1].png (2808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\eula[1].htm (1056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nss7B57.tmp (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\firsttime_uninstall.exe (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\WebDataJs (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\include\tools\misc.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\default_logo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\properties.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\fr-CA\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\prefs.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\last_tab.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\fr-LU\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\en-US\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\misc.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\it\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\defaults\preferences\fvd.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\aes.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\icon.png (628 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\simple.css (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\quick_start.xul (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\pl\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\js.js (660 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\tr\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\loading.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\pack\xagainit.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\474.json (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\include\tools\popup_image_helper.js (693 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\fr-BE\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox_select.png (783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\MessageBox.xml (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code5.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\lib\jquery.autocomplete.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\remoterequest.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bk_shadow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code1.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_bg.png (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\scrollbar.bmp (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\googlelogo.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code4.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\settings.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.json (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code3.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\button.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\zh-TW\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code6.jpg (5 bytes)
C:\Users\Public\Desktop\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\min.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\module\search.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\quick_start.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\pt-BR\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\style.css (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\vi\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\google_trends.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\close.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\module\mostgrid.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\newtab.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\pack\ga.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\uninstallDlg2.xml (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\ru\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\module\hotSearch.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\en\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checked.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\skin\logo.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\checkbox.png (545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\fr-CH\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\include\tools\about_blank_hook.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\ru-MO\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\es-419\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\defaults\preferences\preferences.js (379 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions.ini (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\bg.png (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\it-CH\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\install.rdf (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\zh-CN\locale.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\index.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\loading_light.png (139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\module\stat.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\unchecked.png (135 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\fr\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\E37B.tmp (110 bytes)
C:\Users\Public\Desktop\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Google\Chrome\User Data\Default\E38B.tmp (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\include\speed_dial.js (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\code2.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\UninstallManager.exe (14022 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\code\Thumbs.db (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\addonmanager.js (531 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\lib\doT.min.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\modules\restoreprefs.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\include\tools\urlrequestor.js (1 bytes)
%Program Files% (x86)\Mozilla Firefox\browser\searchplugins\istartsurf.xml (553 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\pack\common.js (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\istartsurf\images\Thumbs.db (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\content\js\lib\jquery-2.1.0.min.js (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\1430378586_xpi\chrome\locale\es\locale.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\A1AMT6LUKKAW8B4U89CZ.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6HC75G7UNN7HPLQ650JD.temp (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RS55VZGMHIV98ZMF37YV.temp (196 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\lv.pak (604 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\libegl.dll (161 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ja.pak (720 bytes)
%Program Files% (x86)\Google\Chrome\Application\42.0.2311.135\Installer\chrmstp.exe (22090 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\chrome_elf.dll (268 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\pt-PT.pak (594 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ca.pak (603 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\th.pak (1208 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\fi.pak (564 bytes)
%Program Files% (x86)\Google\Chrome\Application\35.0.1916.114\default_apps (4 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\fr.pak (637 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\it.pak (587 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\hi.pak (1232 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\chrome.exe (1627 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\zh-CN.pak (488 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\bn.pak (1267 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\xinput1_3.dll (162 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\default_apps\search.crx (54 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\42.0.2311.135.manifest (228 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\default_apps\youtube.crx (47 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\VisualElements\logo.png (7 bytes)
%Program Files% (x86)\Google\Chrome\Application\42.0.2311.135\Installer\setup.exe (22090 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\default_apps\drive.crx (53 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\pt-BR.pak (579 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ml.pak (1570 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\pl.pak (595 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\es-419.pak (602 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\vi.pak (685 bytes)
%Program Files% (x86)\Google\Chrome\Application\35.0.1916.114\Locales (8 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\nl.pak (579 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\da.pak (545 bytes)
%Program Files% (x86)\Google\Chrome\Application\chrome.exe (17554 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\secondarytile.png (641 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\cs.pak (602 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\bg.pak (995 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\nb.pak (545 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\es.pak (612 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\metro_driver.dll (955 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\natives_blob.bin (825 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\am.pak (826 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\nacl64.exe (51 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\id.pak (539 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\chrome.dll (27081 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\delegate_execute.exe (1405 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\te.pak (1339 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\default_apps\external_extensions.json (5 bytes)
C:\Windows\Temp\chrome_installer.log (129 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\PepperFlash\pepflashplayer.dll (63 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\tr.pak (596 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\et.pak (529 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ru.pak (930 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\wow_helper.exe (146 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\VisualElements\splash-620x300.png (22 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\hr.pak (561 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\sw.pak (505 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Extensions\external_extensions.json (103 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\snapshot_blob.bin (1397 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\icudtl.dat (59 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\fil.pak (611 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\libexif.dll (621 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\uk.pak (932 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\sv.pak (553 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ar.pak (799 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\lt.pak (594 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\he.pak (692 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\d3dcompiler_47.dll (52 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\nacl_irt_x86_32.nexe (51 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\chrome.7z (259253 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\resources.pak (65 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\gu.pak (1193 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ko.pak (610 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\zh-TW.pak (489 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\chrome_200_percent.pak (50 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\libglesv2.dll (50 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\default_apps\docs.crx (12 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\default_apps\gmail.crx (48 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ro.pak (611 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ms.pak (456 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\kn.pak (1372 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\ta.pak (1432 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\sr.pak (907 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\en-US.pak (498 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\PepperFlash\manifest.json (6 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\hu.pak (635 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\sk.pak (621 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\chrome_child.dll (41165 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\el.pak (1086 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\VisualElementsManifest.xml (403 bytes)
%Program Files% (x86)\Google\Chrome\Application\35.0.1916.114\VisualElements (4 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\fa.pak (857 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\sl.pak (554 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\mr.pak (1211 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\VisualElements\smalllogo.png (21 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\chrome_100_percent.pak (50 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\chrome_watcher.dll (692 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\nacl_irt_x86_64.nexe (52 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\de.pak (522 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\ffmpegsumo.dll (50 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\widevinecdmadapter.dll (381 bytes)
%Program Files% (x86)\Google\Chrome\Temp\source2120_11517\Chrome-bin\42.0.2311.135\Locales\en-GB.pak (498 bytes)
%Program Files% (x86)\XTab\conf (1480 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\cmd_close.gif (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\js\partnerConfig.js (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\2_collecting.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\1_downloading.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\js\partnerConfig.js (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\icon-16-disabled.png (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-enable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002_old\text (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\collapse.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\genuninstallui.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\genuninstallui.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\tray_awaitingMessage.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\conf\partner.properties (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\firefox-bar-24.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\install_icon.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\complete.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\notification_rgn_image.bmp (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\prep_env_err.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\GenericApp.icns (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\icon-16-enabled.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo_old\img\tray (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\prep_env.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi6AF4.tmp\KillProcDLL.dll (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\desktop.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\css\partner.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\tray_normal.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-disabled_18px.png (914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\cmd_close.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\genieo-16icon-browser-disabled.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\2_collecting.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\redHome.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\gim394750002\partner_uninstall.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\icon-16-disabled.png (646 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\down3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\en_text.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\bin\license.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\network_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\hide_notfication_seperator.png (281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\expand.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\css\partner.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\uac_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_next.gif (847 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002_old\img\tray (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\firefox-bar-16.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-enabled_18px.png (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\down2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-disabled_18px.png (914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\3_mapping.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\favicon.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-enable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\GenericApp.icns (4992 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\install_icon.ico (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\favicon.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\complete.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-2.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\conf\partnerBannedList.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\conf\partnerBannedList.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\genieo-16icon-browser-disabled.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\error.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\off.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\conf\partner.properties (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\tray_normal.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\fr_text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_rgn_image.bmp (3616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\firefox-bar-16.png (586 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\css\notify_partner.css (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sethpButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\prep_env.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\uac_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\ru_complete.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\error.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\prep_env_err.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\text\text.properties (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\ru_text.properties (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\1_downloading.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\network_retry.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\text\en_text.properties (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\desktop.ico (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-3.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo_old\text (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\fr_complete.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\icon-16-enabled.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\uninstall\partner_uninstall.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\sensor-disable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi6AF4.tmp\fct.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-disable.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\firefox-bar-24.png (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\hide_notification.png (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-4.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\disable-transition-4.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\3_mapping.png (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\4_creating.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\tray\4_creating.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\objectivehot_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\notification_disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi6AF3.tmp (25714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\footer_right_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\genieo-16icon-browser.png (537 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\sensor-enabled_18px.png (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\genieo\img\noItems.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\tray_awaitingMessage.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\disable-transition-1.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Partner\gim394750002\img\tray\off.ico (1 bytes)
%Program Files% (x86)\XTab\web\img\loading.gif (5 bytes)
%Program Files% (x86)\XTab\skin\btn.png (2 bytes)
%Program Files% (x86)\XTab\install.data (68 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-CN\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\en-US\messages.json (3 bytes)
%Program Files% (x86)\XTab\HPNotify.exe (18514 bytes)
%Program Files% (x86)\XTab\ffsearch_toolbar!1.0.0.1031.xpi (15 bytes)
%Program Files% (x86)\XTab\BrowerWatchFF.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\es-419\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\indexIE8.html (1794 bytes)
%Program Files% (x86)\XTab\web\js\library.js (4216 bytes)
%Program Files% (x86)\XTab\web\_locales\pt\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\ver.txt (47 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-BE\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\input_bk.png (2 bytes)
%Program Files% (x86)\XTab\web\_locales\pl\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\_locales\it-IT\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\conf_back.png (1623 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CA\messages.json (3 bytes)
%Program Files% (x86)\XTab\uninstall.exe (1343 bytes)
%Program Files% (x86)\XTab\skin\btn_apply.png (6 bytes)
%Program Files% (x86)\XTab\skin\conf.xml (8 bytes)
%Program Files% (x86)\XTab\CmdShell.exe (29 bytes)
%Program Files% (x86)\XTab\web\indexIE.html (1 bytes)
%Program Files% (x86)\XTab\web\_locales\ru-MO\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\js\xagainit-ie8.js (4 bytes)
%Program Files% (x86)\XTab\skin\about_bk.png (1436 bytes)
%Program Files% (x86)\XTab\web\_locales\es-ES\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\main.xml (4 bytes)
%Program Files% (x86)\XTab\web\img\icon48.png (3 bytes)
%Program Files% (x86)\XTab\BrowserAction.dll (33992 bytes)
%Program Files% (x86)\XTab\skin\radio_2.png (3 bytes)
%Program Files% (x86)\XTab\msvcr110.dll (21280 bytes)
%Program Files% (x86)\XTab\searchProvider.xml (8 bytes)
%Program Files% (x86)\XTab\web\_locales\it-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\ProtectService.exe (5310 bytes)
%Program Files% (x86)\XTab\web\js\js.js (18 bytes)
%Program Files% (x86)\XTab\skin\logo.png (5 bytes)
%Program Files% (x86)\XTab\web\js\xagainit2.0.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn1FD0.tmp\System.dll (23 bytes)
%Program Files% (x86)\XTab\web\main.css (19 bytes)
%Program Files% (x86)\XTab\web\_locales\vi-VI\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\_locales\ru\messages.json (4 bytes)
%Program Files% (x86)\XTab\skin\close.png (3 bytes)
%Program Files% (x86)\XTab\web\data.html (20 bytes)
%Program Files% (x86)\XTab\web\img\logo32.ico (4 bytes)
%Program Files% (x86)\XTab\web\img\icon128.png (9 bytes)
%Program Files% (x86)\XTab\web\js\jquery.autocomplete.js (12 bytes)
%Program Files% (x86)\XTab\skin\about.png (4 bytes)
%Program Files% (x86)\XTab\BrowerWatchCH.dll (23 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-FR\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\img\icon16.png (628 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-CH\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\settings.png (5 bytes)
%Program Files% (x86)\XTab\web\js\jquery-1.11.0.min.js (4726 bytes)
%Program Files% (x86)\XTab\web\_locales\fr-LU\messages.json (3 bytes)
%Program Files% (x86)\XTab\web\js\ga.js (1568 bytes)
%Program Files% (x86)\XTab\web\js\common.js (2 bytes)
%Program Files% (x86)\XTab\web\_locales\tr-TR\messages.json (4 bytes)
%Program Files% (x86)\XTab\SupTab.dll (15928 bytes)
%Program Files% (x86)\XTab\IeWatchDog.dll (20 bytes)
%Program Files% (x86)\XTab\web\_locales\pt-BR\messages.json (4 bytes)
%Program Files% (x86)\XTab\web\img\google_trends.png (7 bytes)
%Program Files% (x86)\XTab\web\_locales\zh-TW\messages.json (3 bytes)
%Program Files% (x86)\XTab\skin\rigth_arrow.png (2 bytes)
%Program Files% (x86)\XTab\msvcp110.dll (16990 bytes)
%Program Files% (x86)\XTab\skin\radio_1.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx5DE9.tmp\fct.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi5DD9.tmp (25714 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx5DE9.tmp\KillProcDLL.dll (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\07fce0a4ff78cc7e6376e227f046ce06[1].png (36564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\analytics[1].js (16603 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\e54e8c720dffffa619c3b0eacec9381a[1].png (3997 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\da84c206c2019448521379d2ff837774[1].png (4648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\a6ae526a0a22dcfc743a66d44a3e09e3[1].png (26599 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\f3ad8b396434c21b4c214fd667ee391d[1].png (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\58d196b3e886a838d021adc8c8848f1e[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\4.0stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\6ef6fd5410a7fb481fe6841cb381c046[1].jpg (3636 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\ace33f0a1eddf74bbe8d1bfac70deded[1].png (11710 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\13ca8e322e15bc394d66a37bec12e3b4[1].png (32044 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\d586df222f5069b6c396373d67d0163b[1].png (27112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\23428f8768d928d2bd45dd3b0c4d0057[1].png (21633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\TRHROW2D.txt (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\589b1e936e1f038dc45bd8ffff59b359[1].png (17095 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\4f263f4be4c4396c9078d1874c05b928[1].png (5584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\bbbde9554589bda63791709a6785e0a3[1].png (10360 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\product[1].css (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\a64a4b5c68c364d30083fbd0b0363585[1].png (25578 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\3d8bbea6bcae57d705c676f7050a7d51[1].png (4648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\1759703220576e41cab39feb18a11b14[1].png (10433 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\00c73f6d4e4eb25289dddb86e2d1e319[1].jpg (1928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\ddb3b88cf98eb0220c9e6c252e376749[1].png (14780 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\logo[1].jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\jquery.smooth-scroll.min[1].js (194 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\b85261679e262228a562f693b3e6ef6f[1].png (27160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\5.0stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\btn_bg[1].jpg (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\logo_illust[1].jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\3YEwT2a1878zysq92S8_9w[1].eot (1831 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\f4e4b853ddab3b763f0af17d513631bd[1].png (24529 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\5b8f93845e4dd380fec57bc644ec49d1[1].jpg (4288 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\bg_main[1].jpg (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\home[1].htm (2889 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\style[1].css (181 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\7c9d412c730603d1d82b98a548a71bac[1].png (8048 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\5dbc29649669598ff43174b9ee730008[1].png (3038 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\36d7cd00f07003a67021237993257d08[1].png (8840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\jquery-ui.min[1].js (128104 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\e94782c9200f8de809a50327879df1cc[1].png (19280 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\7e5817bad781bbc2d2e43b350ccb53db[1].png (8446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\cc3148e57a2928cd1ada1bbea553c3c2[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\52d5414e7372639389ab7e9e4d479aee[1].png (22809 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\442a5f30204dd385d17de5848683274f[1].png (14528 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\567f43cb72fe3ac6419369953394cadd[1].png (42928 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\3.5stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\scripts[1].js (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\WDU5E4B4.txt (224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\7d4f668f3d1818d01b6b9684b669d0db[1].png (6236 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\ac5196fbf245580eee113296dff14d0b[1].png (9775 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\f1ed3cd0cae7a3524376e6f9369c7ab8[1].png (6859 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\lightbox[1].css (426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\59982d8527c0da41e35817e8fc15c0fc[1].png (5424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\close[1].png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\83a4cee7a59522b93ed0ae1fa73ce8f3[1].png (2888 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\0692c2494a7331a77c05954f79c5480a[1].png (8120 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\css[1].css (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\jquery.min[1].js (54015 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\loading[1].gif (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\b147a5a09b49b133d347bd975a4c5616[1].png (1160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\config[1].json (778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\3.0stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\1f8ffa22b53dfc2f6b7f1850bb6b73e8[1].png (15005 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\6a12dc1a298e870b610a58a56ba0f5ec[1].jpg (584 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\046C1ZNT\4.5stars[1].jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\lightbox[1].js (5015 bytes)
C:\Windows\Temp\CR_E4970.tmp\CHROME.PACKED.7Z (45884 bytes)
C:\Windows\Temp\CR_E4970.tmp\SETUP.EX_ (348 bytes)
C:\Windows\Temp\CR_E4970.tmp\setup.exe (18111 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc2250.tmp\webplayer_installer.exe (8184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\AppsHat Mobile Apps\Uninstall.exe (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc2250.tmp\appshat.exe (858946 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc2250.tmp\inetc.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\setup[1].exe (805038 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc2250.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc224F.tmp (10027 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\storage.js (979 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\WebPlayer.exe (7533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\web_player\initialize.js (67 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\common.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\initialize.js (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\main.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\main.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\Uninstall.exe (843 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\jsonstorage.js (651 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\config.xml (823 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\json.js (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\shortcut.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\web_player\web_player.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\installer.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\xhr.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\icons\tray.ico (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\stub.html (680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\event_listener.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn5522.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\utils.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\scripts\kango\io.js (751 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.4024 (135036 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\biclient.exe (8413 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsmC9F3.tmp (5854 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\config.ini (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlc-qt-interface.ini (25 bytes)
%Program Files% (x86)\VideoLAN\VLC\plugins\plugins.dat.2020 (45012 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\vlc\vlcrc.2020 (11109 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\MozillaHistoryView\readme.txt (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JDOM_FAQ.htm (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Jericho HTML Parser.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx6191.tmp\fct.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx6191.tmp\KillProcDLL.dll (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JDIC_Plus_index.html (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JavaMail_SMTP.txt (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JettyNOTICE.txt (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe (18964 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\JavaMail API Reference Implementation Ã¢â‚¬â€ Project Kenai.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\reallysimplehistory - Project Hosting on Google Code.htm (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\License - jQuery JavaScript Library.htm (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\uninstall\Elevate.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\iehv\iehv.chm (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\IeSearchProvider.exe (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\OpenSorcePackagesInUse.txt (295 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\conf\conf.ini (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Launch4j - Cross-platform Java executable wrapper.htm (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\iehv\readme.txt (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\oauth-signpost - Project Hosting on Google Code.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\license.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\conf\conf.ini (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi6181.tmp (32607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\uninstall\updater_uninstall.exe (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\IE HistoryView Freeware Internet Explorer History Viewer.htm (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Apache log4j 1.2 - Project License.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\MozilaHistoryViewbrowsers.htm (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\prepenv_setup.exe (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\conf\updater_manifest.xml (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\MozillaHistoryView\MozillaHistoryView.chm (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\SQLite Copyright.htm (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\Licenses.htm (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\firsttime_setup.exe (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe (10430 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\license\LicenseAgreement.txt (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\genieo_temp\InstallGenieo.exe (18368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nss5C91.tmp (33533 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\genieo_temp\genieo_setup.exe (16903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nss5C92.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\scripts\default_config.json (791 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\783GTYVS\64x64[1].ico (6495 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\shortcut.ico (6242 bytes)
C:\Users\"%CurrentUserName%"\Desktop\AppsHat.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\main.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\scripts\config.xml (819 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\Uninstall.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F7QBP14P\16x16[1].ico (1150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe (204 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\config[1].json (778 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\AppsHat.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\icons\tray.ico (1 bytes)
%Program Files% (x86)\App Lid\utils.exe (61818 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\156272 (4097 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\xgyszng.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd2CFA.tmp (685288 bytes)
C:\Windows\Tasks\fac9668a-7d04-4c07-a2a7-1c8ad5184195-5_user.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\System.dll (808 bytes)
%Program Files% (x86)\App Lid\fac9668a-7d04-4c07-a2a7-1c8ad5184195-5.exe (7433 bytes)
%Program Files% (x86)\App Lid\Uninstall.exe (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\mxexzbq.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\dkhbofocf.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\lwfjntrs.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\tvahk.dll (8 bytes)
C:\Windows\Tasks\fac9668a-7d04-4c07-a2a7-1c8ad5184195-5.job (74 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\vmgvmcqqh.dll (14 bytes)
%Program Files% (x86)\App Lid\fac9668a-7d04-4c07-a2a7-1c8ad5184195-4.exe (8706 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\gtexax.dll (3410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\fac9668a-7d04-4c07-a2a7-1c8ad5184195-4.dll (42762 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\420474 (91304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsi2D1A.tmp\fkhxrm.dll (29131 bytes)
%Program Files% (x86)\App Lid\fac9668a-7d04-4c07-a2a7-1c8ad5184195.xpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROWYV75Q\ipgeoapi_com[1].json (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\inetc.dll (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\IpConfig.dll (4254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\nsExec.dll (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\nsJSON.dll (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\lm (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\mj (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\NSISEncrypt.dll (3350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\WmiInspector.dll (3137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Swift Record\tlg (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nscC081.tmp\UserInfo.dll (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\x_white.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack4.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\miniview.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_ui.js (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\buttonBg.png (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_bird.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_data.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack1sm.png (769 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\GenieoPartnerWindow.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame1sm.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieo_logo2.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\red.gif (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\js\main.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\splash_bg.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cluster_default1.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\tpl\settings.tpl (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\button.png (342 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\notification.html (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\warming_up.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\opera_extension.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\notification_controls.png (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_8.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\Preferences.js (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extOpera1.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\big_image_frame.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frameSm.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_8sm.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_fr.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tryAgainButton.png (710 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\fr.css (211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\miniview.html (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\page_arrows_blue.png (277 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_inner_ru.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\heart.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\ServerConnector.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cmd_close_red.gif (840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieoRss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\notification.html (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\buttonSp.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\partner_item_bg.gif (879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\default_image.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\.project (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\set_full_view_btn.png (536 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\previewPublish.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\birthday.css (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariWin1.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\button.png (342 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\title.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\prototype.jsonp.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\okCancelButton.png (734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\ad_no_image.png (876 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cluster_default.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\notification_popup_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\bummer.png (750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFirefoxMac3.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\hotItemIcon.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\happy.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_6.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\social_icons.png (893 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\redSqSm.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extChromeMac1.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitterButton.png (955 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\h_bg.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_ru.properties (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\attention.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\settings.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\favorite_site_mask.png (176 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\aggregation.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\x.gif (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\all-genieo-sp-pack.js (15168 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\share_btn.png (625 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\big_quote.gif (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\message_note.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\DataProcessor.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-overcast.png (975 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFirefoxMac1.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\page_arrows.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\ohBg.gif (879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\layer.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\prog_bar_prog.gif (166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\upper_border.gif (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-clear-night.png (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\follow_facebook_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\splash_video_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_ru.json (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\round_corners_5px.png (182 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sendFeedbackButton.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_4.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\prog_bar_prog.gif (141 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie8.css (745 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\item_bg.png (264 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\picFrames.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_next.gif (855 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_application.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\template1.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\slideshow.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\constants.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\share_btn.png (553 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\pagelet.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\browser_not_supported.html (125 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\smallGrey.gif (803 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\covers.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack2.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\footer_bg.png (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\older_items_arrow.gif (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sidebar_text_ad_bg.png (564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\arrow_down.gif (68 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFinishButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\analytics.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\itemsRotate.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template1_.jpg (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_disabled_nav_next.png (161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\rssButton.png (580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template3sm.jpg (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\hp_guard.html (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\grad.png (171 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\template2.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\google_search_btn.png (166 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sad.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\login_facebook_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\jquery.min.js (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\bug.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\json.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack3sm.png (937 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_next2.gif (90 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\logDbgLoadPhase.js (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\social_connector.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-few-clouds-night.png (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tw.gif (241 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\bg.jpg (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\x.gif (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\set_to_miniview.png (203 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\grey.gif (817 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\js\utils.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\message_heart.png (765 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_3.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\fbButton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\share_popup_arrow.png (219 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\personalization_meter_bg.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\utils.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template1.jpg (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\Activators.js (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\noitems.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\followbutton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\logo_icon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\orig\field_fr.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\icons\thumb_up.png (697 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\splash.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\default_image.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\js\classes.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\signUpButton.png (863 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_main.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\birthday_not_connected_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\warning.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nss847B.tmp (82165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\pagging_arrows.png (227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\icons\bug.png (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\LocationManager.js (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification_ui.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\birthday_cake.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\small_arrow_down.png (192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\share_unfollow.png (849 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariMac.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_5.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer_bg.gif (834 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\settings\buttonSp.png (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\topic_x.png (329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie7.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\facebook_twitter.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\welcome_home.gif (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\dialogWarning.png (520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\core.html (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\google_search_input_logo.png (903 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\follow_twitter_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\message_note.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weatherimg.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_ru.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\uninstall\trayapp_uninstall.exe (825 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ru.css (630 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\ok.png (769 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\x_small.png (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\css\main.css (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-severe-alert.png (977 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\birthday.js (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\rss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template2.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\white.gif (965 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\social_baloon_tip.png (158 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\shadowv.png (939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extNextButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-snow.png (998 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\class.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\syncOnButton.png (566 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\body_bg.png (323 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\box_controls.png (814 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_en.json (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\UIState.js (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\redirect_handler.html (796 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\counter_bg.png (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\previewShareDisabled.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\js\collage.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\counter_bg.png (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack5.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\big_video_frame.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame3.png (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\redSq.png (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_white.png (217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-storm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\css\partner.css (930 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_10.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\splash_video.jpg (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\css\notify.css (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\hotItemIcon.jpg (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\ajax-loader.gif (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\default.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\orig\field_ru.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieo_logo_small.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_gray_transparent.png (198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\facebook_icon.png (432 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\blockTopic.png (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\rss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\shekerKolshehu.gif (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\shadowh.png (944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\share_unfollow_old.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-showers-scattered.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\reportBugButton.png (777 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\button-enable.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\css\main.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\medium_image_frame.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_icon12px.png (543 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\ad_no_image.gif (594 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_enabled_nav_prev.png (153 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\googleimg.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\background.png (386 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\settings\settings_ui.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_yellow.png (206 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\headlines_frame.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_auth_start.png (440 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extChromeMac2.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack3.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\x.gif (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\message_tip.png (154 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-showers.png (959 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_9.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\signUpButton2.png (704 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\js\main.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\noPicture.png (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\double_border.png (133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_en.properties (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\general.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_btn.png (309 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\css\aggregation_page.css (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\anabel_analytics.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\miniview_ui.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\birthday_no_birthdays_bg.png (883 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tryItNow.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_disabled_nav_prev.png (164 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\all-genieo-sp-list.txt (837 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_v.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification-nodebug.js (159 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\cakes.png (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\jquery.cookie.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\magazine_ribon.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\test_items.js (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\hp_guard.html (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_word.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_inner.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\.classpath (355 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\startpage.css (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame2.png (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extFirefoxMac2.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\tpl\startpage.tpl (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\parent_proxy.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\js\utils.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\ticker.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\fail.png (658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariMacEnableExts.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sethpButton2.png (997 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\aggregation_page.js (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\fbButton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\popup_bg.png (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\facebook_icon12px.png (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\settings\anabel_settings.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\box_collapse.png (154 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\blank.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_fr.properties (1856 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\userpic_overlay.png (190 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\topicBg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\lang\field_fr.json (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tmpl3rightButton.png (711 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_prev.gif (853 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\facebookShareIcon.png (311 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\btn.png (750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\cmd_close.png (155 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\photos.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\const.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\notification_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\pnf.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\iPhoneOk.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\goRssButton.png (790 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\older_items_btn.png (249 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\settings\followbutton.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\topicDefault.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_icon.png (798 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\normalLevel.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\hide_notification.png (165 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\empty.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\collage\template3.html (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\prowered_by_google.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_7.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\DebugUtils.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\close.png (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\prog_bar.gif (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\disconnectTwitterBtn.png (690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\jquery-genieo-postmessage.js (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\popup_bg_white.png (121 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\previewShare.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_bird2.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\extSafariWin2.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\you_tube.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_yellow_down.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack5sm.png (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\footer_right_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\redHome.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\reopen_btn.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\activity-indicator.gif (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\waitingTr.gif (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\defaultCover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\rss.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\layers.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\birthday\share_btn.png (553 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\medium_video_frame.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\hover_bg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\personalizationMeter.css (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\fb_icon_big.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sethpButton.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\follow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\anabel_ui_pages.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\iphone.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\set_as_homepage_bg.png (993 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\fb.gif (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\default_favicon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tutorial.png (5520 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\strip.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\waiting.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_2.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\settings.css (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\actions.png (588 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\menu_bg.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\translator.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\red_arror_down.png (143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack4sm.png (961 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\warning.png (380 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\videobutton.png (862 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_white.png (222 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\feedbackButton.png (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\noItems.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\x_white.gif (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\genieo_slogan_inner_fr.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tmpl3leftButton.png (687 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\redarr.png (484 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer_sep.gif (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\forPictures.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\layers.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\js\notification-debug.js (534 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm1frame2sm.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\wt.png (331 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\arrow_down_disable.gif (821 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\open_splash.png (696 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\poweredByGenieo.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\sendFeedbackButton2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\shortcut.png (381 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-clear.png (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\item_controls_bg.png (167 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\connect_with_facebook.png (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\js\classes.js (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\easer.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\disabled_nav_prev2.gif (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\social_box.png (253 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\img\notification_controls.png (478 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\objectivehot_enabled_nav_next.png (150 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\tpl\main.tpl (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\underconstructions.jpg (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tm3frame_10sm.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\loader.gif (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\redArrow.png (262 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\sad.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif_big\img\play_icon.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\noPicture_.png (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\miniview\play_big.png (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\tools.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\trash.png (515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\genieo_logo.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\template_factory.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_v.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\icons\thumb_down.png (703 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\miniview.css (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\mobile.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\Renderers.js (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\defaultPicture.png (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template2sm.png (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\bigHotItemIcon.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template1sm.jpg (2392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\template3.jpg (3312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\magazinePreview\coverShadow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\bigHotItemIcon.png (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\prog_bar.gif (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twit_pic.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\x_gray.png (193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\pink.gif (801 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\topicDefault.gif (565 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\birthday.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\twitter_x.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\footer_left.png (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\notif\tpl\main.tpl (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\js\prototype.postmessage.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\img\tack2sm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\weather-few-clouds.png (763 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\pagelet_tip_white_down.png (191 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\personalizationMeter\lowLevel.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\settings\okCancelButton.png (734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\dfImg.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\core\img\dot_clear.gif (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\shared\js\genieo_is_installed.js (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\img\new\bday_image.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\StartPage\css\ie9.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\MiniFeedReader\.settings\org.eclipse.core.resources.prefs (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\framework_setup.gen (1027548 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\upgrade\updater_manifest.xml (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\genieo_setup.gen (62942 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\genieo_temp\trayapp_setup.gen (201198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\upgrade\partner_manifest.xml (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\log\Updater.log (11205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\upgrade\manifest.xml (644 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Data\Updater\conf\partner_manifest.xml (550 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"vlcplayerpnua" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"AppsHat" = "C:\Users\"%CurrentUserName%"\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GenieoUpdaterService" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe -wait 5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GenieoSystemTray" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Application.Bundler.Somoto.I_9c129a294d

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Application.Bundler.Somoto.I_9c129a294d

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet